Edit tour

Windows Analysis Report
https://gtm.you1.cn/app/2143540

Overview

General Information

Sample URL:	https://gtm.you1.cn/app/2143540
Analysis ID:	1442314
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2028,i,3547210394099925823,8850844179470166958,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://gtm.you1.cn/app/2143540" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://gtm.you1.cn/app/2143540	Avira URL Cloud: detection malicious, Label: phishing
Source: https://gtm.you1.cn/app/2143540	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: gtm.you1.cn	Sophos S4: Label: illegal phishing domain
Source: https://gtm.you1.cn/public/images/skin_1/footerLogo_valve.png?v=1	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/shared/images/community/levels_mandala_7-8.png?v=2	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/profiles/76561199152109954/recommended/813230/	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/storesteam/search/results/	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247111951	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/shared/images/buttons/icons_16.png?v=5);	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/sharedfiles/votedown	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/app/34010	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/actions/communitybandialog	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&l=english	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247255367	Avira URL Cloud: Label: phishing
Source: http://gtm.you1.cn/storesteam/subscriber_agreement/.	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247306833	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/discussions/	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/chat/friend/	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/javascript/applications/community/chunk~af55cc5d1.js?contenthash=4f7934fa0c61bb251d52	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/actions/StandardCommunityBan	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/javascript/modalContent.js?v=Wd0kCESeJquW&l=english&_cdn=cloudfla	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/shared/images/community/levels_waterelement.png	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/sharedfiles/filedetails/?id=3246921701	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/javascript/applications/community/main.js?v=soQOTmUzl-9y&l=english&am	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/login/logout/	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/apps/allcontenthome?l=english&browsefilter=trend&appHubSubSection=11&forceanon=1	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/app/12210	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/actions/GetOwnedApps/	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/?subsection=broadcasts	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/shared/images/header/globalheader_highlight.png	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/apps/allcontenthome	Avira URL Cloud: Label: phishing
Source: https://gtm.you1.cn/public/css/skin_1/communityhome.css?v=EC98biDaoKUh&l=english&_cdn=cloudflare	Avira URL Cloud: Label: phishing

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.136.128
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /app/2143540 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/css/globalv2.css?v=PAcV2zMBzzSV&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/javascript/prototype-1.7.js?v=.55t44gwuwgvw HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&load=effects,controls,slider,dragdrop HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/javascript/global.js?v=B7Vsdo1okyaC&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/css/applications/community/main.css?v=5CgcHEsWGAFt&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/manifest.js?v=6MtRkzKwK42K&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~b28b7af69.js?v=hOyTweQkD3Cx&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/main.js?v=soQOTmUzl-9y&l=english HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gtm.you1.cnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://gtm.you1.cn/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gtm.you1.cnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://gtm.you1.cn/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/localization/shared_english-json.js?contenthash=53a212bf3cf7a843dedd HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/localization/main_english-json.js?contenthash=cfcee568a9b043acaadb HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/css/applications/community/chunk~f036ce556.css?contenthash=65008c72e7e5586e0c2d HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/css/applications/community/chunk~c18a43282.css?contenthash=2951747b428e607bd9cf HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/css/applications/community/chunk~69438e232.css?contenthash=4a16a80208a2f1b32986 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/css/applications/community/chunk~642602239.css?contenthash=59316afb14f0823f60a9 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/css/applications/community/chunk~d2dd7ecf6.css?contenthash=97854aa28eb090f068fb HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/css/applications/community/chunk~b1f9f17fd.css?contenthash=89633ec89e0fda129395 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/css/applications/community/events.css?contenthash=5c2ed144a3bfd464f943 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~25d238eb8.js?contenthash=ac954d69fdf4b21a0a54 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~c1dfbefd5.js?contenthash=d3fb7b7d10d08f0d7ff8 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~9e353dc2d.js?contenthash=a354f433049b20f1e568 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~7bb437d7f.js?contenthash=db9788aa72093ef41f9a HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~c18a43282.js?contenthash=1797f4a7ab8c2f27a11c HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~c7a3fa389.js?contenthash=28f31dbe47f6b6412c17 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~642602239.js?contenthash=5dd5b4d316afbe01d44f HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~69438e232.js?contenthash=fb8a441e33487b799219 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~5a92743e8.js?contenthash=dabd8f9cfdbfdd68c5e2 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~d2dd7ecf6.js?contenthash=7e6163823fa1c736f5c0 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~b1f9f17fd.js?contenthash=2a42aa43b78d464bc342 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~c1dfbefd5.js?contenthash=d2079aedcfe78a98a843 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~0c880f568.js?contenthash=93d22b575087d05a7708 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~f036ce556.js?contenthash=7596e2084d8e091adc87 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~af55cc5d1.js?contenthash=4f7934fa0c61bb251d52 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~2d6f640d9.js?contenthash=7a42268d32dd6200b218 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~1d39298d0.js?contenthash=fb50f99e2f712a7bd546 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~c18a43282.js?contenthash=fb0b0d449ada85165b39 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~d6e1df551.js?contenthash=c94d5b03008b20974b16 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~642602239.js?contenthash=ce169d843b8388128d8f HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~4e3b43bb2.js?contenthash=840feb837a4ed2373734 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~69438e232.js?contenthash=6293693cb55d5d304172 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~afc01df82.js?contenthash=07c9e1b6e7564fa7d26d HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~d2dd7ecf6.js?contenthash=019cafbb6645240613f8 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~b1f9f17fd.js?contenthash=926d8ae84076f2223cec HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/events.js?contenthash=bba0659f6398b0718f9a HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/navevents.js?contenthash=3afb60572704da653a1f HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gtm.you1.cnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://gtm.you1.cn/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/app/2143540Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /storesteam/ HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
Source: global traffic	HTTP traffic detected: GET /public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_global.css?v=lI4V3qLLPrMY&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/store.css?v=5iodj17TwVxP&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/home.css?v=94M63Gcmmzh0&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/creator_hub.css?v=e6oxFOI4knLo&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_responsive.css?v=e-GD37z7aOe7&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/main.js?v=hD1etfEdoGz1&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/dynamicstore.js?v=suHYMumkDXRp&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/broadcast_carousel.js?v=J3gSXZs7_9YW&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/home.js?v=35wvaSLdFM6n&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/cluster.js?v=zUvcVvp9xZmm&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/main.css?v=_J3LXbtbVCSV&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/colored_body_top.png?v=2 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=lI4V3qLLPrMY&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/steamdeck/steamdeck_promo_08.png?v=2%20alt= HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_english.jpg?t=1714777083 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/manifest.js?v=fwdI41xjQFw_&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~b28b7af69.js?v=OT1LgaWu5boa&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/main.js?v=hnor4TDzUtcX&l=english HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images//gift/steamcards_promo_03.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_mobile_english.jpg?t=1714777083 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/colored_body_top.png?v=2 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/blank.gif HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/mobile/ResponsiveChevron.svg HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/steamdeck/steamdeck_promo_08.png?v=2%20alt= HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_english.jpg?t=1714777083 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/2a9368174c54dd6fe7fe643e/spotlight_image_english.jpg?t=1715121064 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images//gift/steamcards_promo_03.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/18ad2861aa907ac1a68cb231/spotlight_image_english.jpg?t=1715630351 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/945770/header.jpg?t=1715790219 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/blank.gif HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/mobile/ResponsiveChevron.svg HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1710170/header.jpg?t=1683621796 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_mobile_english.jpg?t=1714777083 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/trans.gif HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/cdf177cb0f475f16d8a70293/spotlight_image_english.jpg?t=1715360642 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/dde8d7c40e4c6dadb9d04c58/spotlight_image_english.jpg?t=1715642754 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/search_icon_btn.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/cluster_bg.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dynamicstore/saledata/?cc=HK HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://gtm.you1.cnSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/arrows.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images//v6/ico/ico_info.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/2a9368174c54dd6fe7fe643e/spotlight_image_english.jpg?t=1715121064 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/945770/header.jpg?t=1715790219 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1710170/header.jpg?t=1683621796 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/trans.gif HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/18ad2861aa907ac1a68cb231/spotlight_image_english.jpg?t=1715630351 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/cdf177cb0f475f16d8a70293/spotlight_image_english.jpg?t=1715360642 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/search_icon_btn.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/dde8d7c40e4c6dadb9d04c58/spotlight_image_english.jpg?t=1715642754 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1726570/ss_c734a0acdcada17a686b636430b0786c0cb08f83.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/bundles/40751/resfcyr673l6y9dt/capsule_616x353.jpg?t=1715792253 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images//v6/ico/ico_info.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/arrows.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1672980/ss_faecee368ca05e4d08ddf7db64f154df152a3722.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1672970/ss_46ee31494b5d144d5ef6670cb5a1564abbc26fab.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1672981/ss_02b994c796adfc5fc5984ec658caee4ce34fe69f.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/cluster_bg.png?v=1 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/background_maincap_2.jpg HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/logo_steam_footer.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/f34a3a6eedf174a39998d1f2/spotlight_image_english.jpg?t=1715274766 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/footerLogo_valve_new.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_facebook.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_twitter.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=lI4V3qLLPrMY&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/6cc6099ab60aa21df29b4bb7/spotlight_image_english.jpg?t=1715207848 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1726570/ss_c734a0acdcada17a686b636430b0786c0cb08f83.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/logo_steam_footer.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2194530/header.jpg?t=1712738249 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2488510/header.jpg?t=1715042344 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/background_maincap_2.jpg HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/footerLogo_valve_new.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_english.jpg?t=1713912919 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/background_spotlight.jpg HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_mobile_english.jpg?t=1713912919 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1672970/ss_46ee31494b5d144d5ef6670cb5a1564abbc26fab.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1672981/ss_02b994c796adfc5fc5984ec658caee4ce34fe69f.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1672980/ss_faecee368ca05e4d08ddf7db64f154df152a3722.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/578080/capsule_184x69.jpg?t=1713943796 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/bundles/40751/resfcyr673l6y9dt/capsule_616x353.jpg?t=1715792253 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/f34a3a6eedf174a39998d1f2/spotlight_image_english.jpg?t=1715274766 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/icon_platform_win.png?v=3 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/icon_platform_linux.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/icon_platform_mac.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/capsule_184x69.jpg?t=1698860631 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_twitter.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/logo_steam_piston.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_facebook.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/spotlights/6cc6099ab60aa21df29b4bb7/spotlight_image_english.jpg?t=1715207848 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2215430/capsule_184x69.jpg?t=1715792238 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2488510/header.jpg?t=1715042344 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1172470/capsule_184x69.jpg?t=1715104113 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/capsule_184x69.jpg?t=1714968679 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/capsule_184x69.jpg?t=1715727000 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1203220/capsule_184x69.jpg?t=1715253758 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/background_spotlight.jpg HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_mobile_english.jpg?t=1713912919 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2194530/header.jpg?t=1712738249 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/578080/capsule_184x69.jpg?t=1713943796 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_english.jpg?t=1713912919 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images//v6/icon_cluster_controls.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/shared_english-json.js?contenthash=99f4a06d3498b0736099 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/sales_english-json.js?contenthash=2427041da1c36f76f959 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/icon_platform_mac.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/icon_platform_win.png?v=3 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/icon_platform_linux.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/main_english-json.js?contenthash=6c5add9f48c608fe2aaa HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/capsule_184x69.jpg?t=1715714373 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/home/logo_steam_piston.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/capsule_184x69.jpg?t=1715590903 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/capsule_184x69.jpg?t=1709666906 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/281990/capsule_184x69.jpg?t=1715759591 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/capsule_184x69.jpg?t=1713799333 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2357570/capsule_184x69.jpg?t=1715731747 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/capsule_184x69.jpg?t=1698860631 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2215430/capsule_184x69.jpg?t=1715792238 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1172470/capsule_184x69.jpg?t=1715104113 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/capsule_184x69.jpg?t=1715727000 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/capsule_184x69.jpg?t=1714968679 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/marketing_english-json.js?contenthash=deef5c040fa6e28f22c9 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images//v6/icon_cluster_controls.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1449850/capsule_184x69.jpg?t=1715145592 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /categories/homepageimage/category/anime?cc=us&l=english HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/239140/capsule_184x69.jpg?t=1715341001 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1203220/capsule_184x69.jpg?t=1715253758 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/230410/capsule_184x69.jpg?t=1715792355 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1056640/capsule_184x69.jpg?t=1715705326 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/394360/capsule_184x69.jpg?t=1715685474 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/271590/capsule_184x69.jpg?t=1714055751 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/capsule_184x69.jpg?t=1715714373 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/capsule_184x69.jpg?t=1715590903 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/capsule_184x69.jpg?t=1709666906 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/281990/capsule_184x69.jpg?t=1715759591 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /categories/homepageimage/category/rpg?cc=us&l=english HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /categories/homepageimage/category/strategy?cc=us&l=english HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/capsule_184x69.jpg?t=1713799333 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /categories/homepageimage/category/action?cc=us&l=english HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/570/capsule_184x69.jpg?t=1714502360 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2357570/capsule_184x69.jpg?t=1715731747 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1665460/capsule_184x69.jpg?t=1713163424 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1840080/capsule_184x69.jpg?t=1715643382 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1245620/capsule_184x69.jpg?t=1710261394 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/381210/capsule_184x69.jpg?t=1715700452 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1128860/capsule_184x69_alt_assets_0.jpg?t=1715795672 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1449850/capsule_184x69.jpg?t=1715145592 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/239140/capsule_184x69.jpg?t=1715341001 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/230410/capsule_184x69.jpg?t=1715792355 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1056640/capsule_184x69.jpg?t=1715705326 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IShoppingCartService/GetShoppingCartContents/v1?origin=https:%2F%2Fgtm.you1.cn&input_protobuf_encoded= HTTP/1.1Host: api.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://gtm.you1.cnSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/394360/capsule_184x69.jpg?t=1715685474 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/icon_platform_win_dark.png?v=3 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /categories/homepageimage/category/anime?cc=us&l=english HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1651560/capsule_184x69.jpg?t=1715609768 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/icon_platform_linux_dark.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /categories/homepageimage/category/rpg?cc=us&l=english HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /categories/homepageimage/category/strategy?cc=us&l=english HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/navevents.js?contenthash=a4eb1ee72718a7bf1c88 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/271590/capsule_184x69.jpg?t=1714055751 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1847150/capsule_184x69.jpg?t=1715747566 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/427410/capsule_184x69.jpg?t=1714694871 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1158310/capsule_184x69_alt_assets_4.jpg?t=1715685390 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/359550/capsule_184x69.jpg?t=1713914116 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/webm_page_bg_english.webm?t=1714777083 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://gtm.you1.cn/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /steam/apps/570/capsule_184x69.jpg?t=1714502360 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1665460/capsule_184x69.jpg?t=1713163424 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1840080/capsule_184x69.jpg?t=1715643382 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1245620/capsule_184x69.jpg?t=1710261394 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1128860/capsule_184x69_alt_assets_0.jpg?t=1715795672 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gtm.you1.cnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/icon_platform_win_dark.png?v=3 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gtm.you1.cnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /categories/homepageimage/category/action?cc=us&l=english HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Bold.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gtm.you1.cnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/webm_page_bg_mobile_english.webm?t=1714777083 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://gtm.you1.cn/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gtm.you1.cnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/381210/capsule_184x69.jpg?t=1715700452 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_webm_english.webm?t=1713912919 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://gtm.you1.cn/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /public/images/v6/icon_platform_linux_dark.png HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_webm_mobile_english.webm?t=1713912919 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://gtm.you1.cn/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /steam/subs/94174/header_ratio.jpg?t=1476893662 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/subs/633707/header_ratio.jpg?t=1667324398 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1651560/capsule_184x69.jpg?t=1715609768 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1847150/capsule_184x69.jpg?t=1715747566 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/427410/capsule_184x69.jpg?t=1714694871 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1158310/capsule_184x69_alt_assets_4.jpg?t=1715685390 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/359550/capsule_184x69.jpg?t=1713914116 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gtm.you1.cnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 HTTP/1.1Host: store.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gtm.you1.cnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=englishAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/ss_19d6b903fd65c410af902a8c5f62c820cfe09292.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/ss_712d9885b750317ab0be515158e51c03cf5944b6.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/ss_262496a8c3ed1335d63398fe06f8dd4d43d311cf.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/subs/94174/header_ratio.jpg?t=1476893662 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/subs/633707/header_ratio.jpg?t=1667324398 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/ss_4a88ba3b0353f3d43f045e5230c9d600e19daae8.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/capsule_616x353.jpg?t=1715590903 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/239140/header.jpg?t=1715341001 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/ss_712d9885b750317ab0be515158e51c03cf5944b6.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1649240/header.jpg?t=1696502086 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/394360/header.jpg?t=1715685474 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2379780/header.jpg?t=1713537191 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/ss_19d6b903fd65c410af902a8c5f62c820cfe09292.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/ss_262496a8c3ed1335d63398fe06f8dd4d43d311cf.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1158310/header_alt_assets_4.jpg?t=1715685390 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/ss_4a88ba3b0353f3d43f045e5230c9d600e19daae8.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1604030/capsule_616x353.jpg?t=1715590903 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/ss_d830cfd0550fbb64d80e803e93c929c3abb02056.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/ss_796601d9d67faf53486eeb26d0724347cea67ddc.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/ss_13bb35638c0267759276f511ee97064773b37a51.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/239140/header.jpg?t=1715341001 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1649240/header.jpg?t=1696502086 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/ss_0f8cf82d019c614760fd20801f2bb4001da7ea77.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/capsule_616x353.jpg?t=1698860631 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/394360/header.jpg?t=1715685474 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2379780/header.jpg?t=1713537191 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1158310/header_alt_assets_4.jpg?t=1715685390 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2208920/header.jpg?t=1697654233 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/629730/header_292x136.jpg?t=1701774481 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/ss_d830cfd0550fbb64d80e803e93c929c3abb02056.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1764400/header_292x136.jpg?t=1704285584 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1619350/header_292x136.jpg?t=1689933372 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1745170/header_292x136.jpg?t=1714383419 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/ss_0f8cf82d019c614760fd20801f2bb4001da7ea77.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/ss_796601d9d67faf53486eeb26d0724347cea67ddc.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2421410/header_292x136.jpg?t=1715738345 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/ss_13bb35638c0267759276f511ee97064773b37a51.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2582650/header_292x136.jpg?t=1715400017 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2239550/header_292x136.jpg?t=1692817793 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/447040/header_292x136.jpg?t=1692817739 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1128860/ss_96487c455abe12d84fa57c487e4d05807089eb5d.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1128860/ss_6a6e8fb986c72dd4436566373debb93bfa9d5f57.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/capsule_616x353.jpg?t=1698860631 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2208920/header.jpg?t=1697654233 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/629730/header_292x136.jpg?t=1701774481 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1764400/header_292x136.jpg?t=1704285584 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1619350/header_292x136.jpg?t=1689933372 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1128860/ss_ccbcb9f7680336d745fdc7db036961f312073710.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1128860/ss_3466316c3a6e2ba97aacd4aec717f277c29f8430.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1745170/header_292x136.jpg?t=1714383419 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2421410/header_292x136.jpg?t=1715738345 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2582650/header_292x136.jpg?t=1715400017 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2239550/header_292x136.jpg?t=1692817793 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/447040/header_292x136.jpg?t=1692817739 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1128860/ss_96487c455abe12d84fa57c487e4d05807089eb5d.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1128860/ss_6a6e8fb986c72dd4436566373debb93bfa9d5f57.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1128860/ss_ccbcb9f7680336d745fdc7db036961f312073710.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1128860/ss_3466316c3a6e2ba97aacd4aec717f277c29f8430.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; steamCountry=HK%7C3f8832cf437838e2588db6607c6feae9; browserid=3526959438637945341
Source: global traffic	HTTP traffic detected: GET /public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/css/apphub.css?v=VZMHNMxv89Ym&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/modalContent.css?v=.TP5s6TzX6LLh&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/apphubs.css?v=roMLV7kDn_sN&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/capsule_616x353_alt_assets_1.jpg?t=1715714373 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/ss_068ff4b736f39eb4a06721a28dbcb1014ec19336.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/ss_9ba2c9634f88f684f069d42d4de6a42f63b07911.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/ss_2f6e682e3e72703728d2502efacefdababa03493.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/ss_9ba2c9634f88f684f069d42d4de6a42f63b07911.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/ss_eb1f3f7fb6ed95feb162011fbbe24b24d6ed5e41.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/ss_068ff4b736f39eb4a06721a28dbcb1014ec19336.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/capsule_616x353_alt_assets_1.jpg?t=1715714373 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/ss_2f6e682e3e72703728d2502efacefdababa03493.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2344520/ss_eb1f3f7fb6ed95feb162011fbbe24b24d6ed5e41.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/apphub_home.css?v=XOa7G-BGp2xZ&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/communityhome.css?v=EC98biDaoKUh&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/apphub_broadcast.css?v=Szj_0XBV602A&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/css/applications/community/main.css?v=5CgcHEsWGAFt&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/css/apphub_images.css?v=_0CllnFpmuY6&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_global.js?v=wJD9maDpDcVL&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/ss_33e684e9cb2517af1599f0ca2b57d65ee82c2e51.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/ss_8949ed7dd24a02d5ea13b08fc5c04fab400dc4bd.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/capsule_616x353.jpg?t=1709666906 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/ss_8949ed7dd24a02d5ea13b08fc5c04fab400dc4bd.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/ss_50afbbc4d811c38fe9f64c1fc8d7eb9d9da6d24c.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/ss_0c79f56fc7be1bd0102f2ca1c92c8f0900daf4fb.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/ss_33e684e9cb2517af1599f0ca2b57d65ee82c2e51.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/capsule_616x353.jpg?t=1709666906 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/modalContent.js?v=Wd0kCESeJquW&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/apphub.js?v=JSwdk0x7aW5O&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/apphub_home.js?v=8OrLYcA-XZ3m&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/user_reviews.js?v=LRs2cUK5D3j7&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/ss_50afbbc4d811c38fe9f64c1fc8d7eb9d9da6d24c.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/ss_0c79f56fc7be1bd0102f2ca1c92c8f0900daf4fb.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/user_reviews_community.js?v=st0tzXwxiGks&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/communityhome.js?v=8-RwlLlPLHOa&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/manifest.js?v=6MtRkzKwK42K&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~b28b7af69.js?v=hOyTweQkD3Cx&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/main.js?v=soQOTmUzl-9y&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/localization/loyaltyrewards_manifest.js?v=H8DiZuDDXyS_&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/capsule_616x353.jpg?t=1715727000 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/ss_c8d2b18451a2cc4d5b4fdd78ed84a5e64e051eac.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/ss_b88cb7b48a86f07a7288bf37141f6558279f9bfc.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /steamcommunity/public/images/apps/1938090/8eaf32220060344996cbf11f697a4f4be943e5f3.jpg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /steamcommunity/public/images/apps/730/8dbc71957312bbd3baea65848b545be9eae2a355.jpg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0f7d37e8661a410075.jpg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /apps/allcontenthome?l=english&browsefilter=trend&appHubSubSection=11&forceanon=1 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, text/html, application/xml, text/xml, /X-Prototype-Version: 1.7X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/images//sharedfiles/searchbox_workshop_submit.gif HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/images/login/throbber.gif HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/ico_external_link.gif HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /steam/apps/570/page_bg_generated_v6b.jpg?t=1714502360 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/ss_ef0f63061d0a0a9a7e46f3b84f125d25330e8f19.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gtm.you1.cnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gtm.you1.cnsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/ss_f28befd916e59b8bf0a8a801b8a498b8adaa01eb.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/ss_b88cb7b48a86f07a7288bf37141f6558279f9bfc.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/ss_c8d2b18451a2cc4d5b4fdd78ed84a5e64e051eac.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/capsule_616x353.jpg?t=1715727000 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steamcommunity/public/images/apps/1938090/8eaf32220060344996cbf11f697a4f4be943e5f3.jpg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steamcommunity/public/images/apps/730/8dbc71957312bbd3baea65848b545be9eae2a355.jpg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0f7d37e8661a410075.jpg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/x9x9.gif HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /steam/apps/570/page_bg_generated_v6b.jpg?t=1714502360 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/ss_ef0f63061d0a0a9a7e46f3b84f125d25330e8f19.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1145350/ss_f28befd916e59b8bf0a8a801b8a498b8adaa01eb.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/zlEfE7wtvBQ/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/N12y2V1VbyA/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/ss_a2e873c749f7303529b471ba9e9ed793abd409f6.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/capsule_616x353.jpg?t=1714968679 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/ss_fe0f704abb30337d15a509b7a8a5a6f0e6bc9c46.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/community/communityawardsapp.css?contenthash=9697f81cbeeb8cd9b3dc HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images//award_icon_blue.svg HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images/userreviews/icon_thumbsUp.png?v=1 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images//award_icon.svg HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/play_icon80.png HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/images/login/throbber.gif HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/images/skin_1/ico_external_link.gif HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/images//sharedfiles/searchbox_workshop_submit.gif HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/images/x9x9.gif HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /apps/allcontenthome?l=english&browsefilter=trend&appHubSubSection=11&forceanon=1 HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /vi/FE07nT30TBg/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/w9uaLdS7VrQ/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/38vMxU9UwZc/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/0SlXGG18Kco/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/ss_07b95e43d4229270333d7fcbea6ba428a80253e4.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/N12y2V1VbyA/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/zlEfE7wtvBQ/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/9aQhbmoFhuY/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/ss_fe0f704abb30337d15a509b7a8a5a6f0e6bc9c46.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/ss_4924762e48ea2e5f835de9dc20dc0a958535e81e.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/ss_a2e873c749f7303529b471ba9e9ed793abd409f6.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/capsule_616x353.jpg?t=1714968679 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/FE07nT30TBg/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/0SlXGG18Kco/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/38vMxU9UwZc/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/w9uaLdS7VrQ/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/ss_07b95e43d4229270333d7fcbea6ba428a80253e4.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/DW6VDDih8nM/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/lqj9G6oisic/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/xQOMy02LbNQ/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2668080/ss_4924762e48ea2e5f835de9dc20dc0a958535e81e.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/9aQhbmoFhuY/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images//award_icon_blue.svg HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images/userreviews/icon_thumbsUp.png?v=1 HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images//award_icon.svg HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/play_icon80.png HTTP/1.1Host: gtm.you1.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/libraries~4b330692b.js?contenthash=32fdb0c2c16cbd1f7255 HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /vi/DW6VDDih8nM/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/xQOMy02LbNQ/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/lqj9G6oisic/0.jpg HTTP/1.1Host: img.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/chunk~4b330692b.js?contenthash=555ff2496b7cbfc4085c HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/community/communityawardsapp.js?contenthash=afc3d1cf46d793a7e76b HTTP/1.1Host: gtm.you1.cnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
Source: global traffic	HTTP traffic detected: GET /public/shared/images/comment_quoteicon.png HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/5-star.png HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/4-star.png HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/item_type_hover.png?v=1 HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/buttons/icons_16.png?v=5 HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/icons/icon_rate.png HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/comment_quoteicon.png HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/not-yet.png HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/bg_workshopitem.png?v=1 HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/4-star.png HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/item_type_hover.png?v=1 HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/icons/icon_rate.png HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/5-star.png HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/buttons/icons_16.png?v=5 HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/capsule_616x353_alt_assets_8.jpg?t=1713799333 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/ss_eb8f5def662f28726c875e641cd5faff75e6b16d.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/ss_96496b17bd35a97ceb926231e963762d3b86c3c8.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/not-yet.png HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/apphubs/bg_workshopitem.png?v=1 HTTP/1.1Host: community.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/ss_6c1ef918ffe94050e72dcb2cfad3a95ee3d69f08.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/ss_96496b17bd35a97ceb926231e963762d3b86c3c8.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/ss_f3d31c7cffc2a6ab42fb76aaac2bc9d5258bc142.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/ss_eb8f5def662f28726c875e641cd5faff75e6b16d.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/capsule_616x353_alt_assets_8.jpg?t=1713799333 HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/ss_6c1ef918ffe94050e72dcb2cfad3a95ee3d69f08.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2195250/ss_f3d31c7cffc2a6ab42fb76aaac2bc9d5258bc142.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/281990/ss_692532123e560e6b866baee59b1e310a291a110d.600x338.jpg HTTP/1.1Host: cdn.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtm.you1.cn/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_894.2.dr	String found in binary or memory:   <span aria-hidden="true">\|</span>  <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.facebook.com%2FSteam" target="_blank" rel=" noopener"><img src="https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.png" alt="Facebook"> Steam</a> equals www.facebook.com (Facebook)
Source: chromecache_358.2.dr, chromecache_330.2.dr, chromecache_559.2.dr	String found in binary or memory: var youtubeurl = location.protocol + '//www.youtube.com/embed/' + videoid + '?showinfo=0&autohide=1&fs=1&hd=1&modestbranding=1&rel=0&showsearch=0&wmode=direct&autoplay=1'; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: gtm.you1.cn
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: store.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdn.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: store.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: api.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cloudflare.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: community.cloudflare.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: steamuserimages-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: img.youtube.com

Source: chromecache_413.2.dr, chromecache_688.2.dr	String found in binary or memory: http://blogs.law.harvard.edu/ivan)
Source: chromecache_403.2.dr	String found in binary or memory: http://colorzilla.com/gradient-editor/#ffffff
Source: chromecache_413.2.dr, chromecache_688.2.dr	String found in binary or memory: http://diveintomark.org/)
Source: chromecache_413.2.dr, chromecache_688.2.dr	String found in binary or memory: http://encytemedia.com/)
Source: chromecache_433.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_331.2.dr	String found in binary or memory: http://gtm.you1.cn/storesteam/account/cookiepreferences/
Source: chromecache_331.2.dr	String found in binary or memory: http://gtm.you1.cn/storesteam/privacy_agreement/
Source: chromecache_331.2.dr	String found in binary or memory: http://gtm.you1.cn/storesteam/subscriber_agreement/
Source: chromecache_572.2.dr, chromecache_510.2.dr, chromecache_444.2.dr, chromecache_898.2.dr, chromecache_552.2.dr, chromecache_789.2.dr, chromecache_603.2.dr, chromecache_703.2.dr, chromecache_402.2.dr, chromecache_717.2.dr, chromecache_850.2.dr, chromecache_744.2.dr, chromecache_533.2.dr, chromecache_335.2.dr, chromecache_564.2.dr, chromecache_557.2.dr, chromecache_588.2.dr, chromecache_604.2.dr, chromecache_426.2.dr, chromecache_737.2.dr, chromecache_874.2.dr	String found in binary or memory: http://gtm.you1.cn/storesteam/subscriber_agreement/.
Source: chromecache_413.2.dr, chromecache_688.2.dr	String found in binary or memory: http://mir.aculo.us)
Source: chromecache_413.2.dr, chromecache_688.2.dr	String found in binary or memory: http://script.aculo.us
Source: chromecache_688.2.dr	String found in binary or memory: http://script.aculo.us/
Source: chromecache_470.2.dr, chromecache_776.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_641.2.dr, chromecache_350.2.dr, chromecache_464.2.dr, chromecache_838.2.dr, chromecache_326.2.dr, chromecache_661.2.dr, chromecache_792.2.dr, chromecache_562.2.dr	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/.
Source: chromecache_894.2.dr	String found in binary or memory: http://twitter.com/steam
Source: chromecache_717.2.dr, chromecache_519.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_413.2.dr, chromecache_688.2.dr	String found in binary or memory: http://www.oriontransfer.co.nz
Source: chromecache_470.2.dr, chromecache_776.2.dr	String found in binary or memory: http://www.prototypejs.org/
Source: chromecache_894.2.dr	String found in binary or memory: http://www.steampowered.com/steamworks/
Source: chromecache_413.2.dr, chromecache_688.2.dr	String found in binary or memory: http://www.tirsen.com)
Source: chromecache_894.2.dr	String found in binary or memory: http://www.valvesoftware.com
Source: chromecache_894.2.dr	String found in binary or memory: http://www.valvesoftware.com/about
Source: chromecache_331.2.dr, chromecache_894.2.dr	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: chromecache_716.2.dr, chromecache_722.2.dr, chromecache_669.2.dr	String found in binary or memory: http://www.youworkforthem.com/designer/293/niramekko
Source: chromecache_716.2.dr, chromecache_722.2.dr, chromecache_669.2.dr	String found in binary or memory: http://www.youworkforthem.com/font-license
Source: chromecache_716.2.dr, chromecache_722.2.dr, chromecache_669.2.dr	String found in binary or memory: http://www.youworkforthem.com/product.php?sku=T2982
Source: chromecache_374.2.dr, chromecache_504.2.dr	String found in binary or memory: https://avatars.akamai.steamstatic.com/
Source: chromecache_332.2.dr	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/
Source: chromecache_504.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1056640/capsule_184x69.jpg?t=1715705326
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1128860/capsule_184x69_alt_assets_0.jpg?t=1715795672
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1145350/capsule_184x69.jpg?t=1715727000
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1158310/capsule_184x69_alt_assets_4.jpg?t=1715685390
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1172470/capsule_184x69.jpg?t=1715104113
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1203220/capsule_184x69.jpg?t=1715253758
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1245620/capsule_184x69.jpg?t=1710261394
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1449850/capsule_184x69.jpg?t=1715145592
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1604030/capsule_184x69.jpg?t=1715590903
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1651560/capsule_184x69.jpg?t=1715609768
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1665460/capsule_184x69.jpg?t=1713163424
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1710170/header.jpg?t=1683621796
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1840080/capsule_184x69.jpg?t=1715643382
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/1847150/capsule_184x69.jpg?t=1715747566
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/2194530/header.jpg?t=1712738249
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/2195250/capsule_184x69.jpg?t=1713799333
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/2215430/capsule_184x69.jpg?t=1715792238
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/230410/capsule_184x69.jpg?t=1715792355
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/2344520/capsule_184x69.jpg?t=1715714373
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/2357570/capsule_184x69.jpg?t=1715731747
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/239140/capsule_184x69.jpg?t=1715341001
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/2488510/header.jpg?t=1715042344
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/2668080/capsule_184x69.jpg?t=1714968679
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/271590/capsule_184x69.jpg?t=1714055751
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/281990/capsule_184x69.jpg?t=1715759591
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/359550/capsule_184x69.jpg?t=1713914116
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/381210/capsule_184x69.jpg?t=1715700452
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/394360/capsule_184x69.jpg?t=1715685474
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/427410/capsule_184x69.jpg?t=1714694871
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/553850/capsule_184x69.jpg?t=1709666906
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/570/capsule_184x69.jpg?t=1714502360
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/578080/capsule_184x69.jpg?t=1713943796
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/730/capsule_184x69.jpg?t=1698860631
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/apps/945770/header.jpg?t=1715790219
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/mp4_page_bg_eng
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/mp4_page_bg_mob
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_english
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_mobile_
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/webm_page_bg_en
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/webm_page_bg_mo
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/de
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/spotlights/18ad2861aa907ac1a68cb231/spotlight_image_english
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/spotlights/2a9368174c54dd6fe7fe643e/spotlight_image_english
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/spotlights/6cc6099ab60aa21df29b4bb7/spotlight_image_english
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/spotlights/cdf177cb0f475f16d8a70293/spotlight_image_english
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/spotlights/dde8d7c40e4c6dadb9d04c58/spotlight_image_english
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/spotlights/f34a3a6eedf174a39998d1f2/spotlight_image_english
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/home/store_home_share.jpg
Source: chromecache_403.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/promo/newstore2016/home_takeover_mini.jpg
Source: chromecache_720.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/promo/summer2020/tiling_orange.png?v=2
Source: chromecache_403.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/promo/twofactor/escrow_market_sale_banner.png
Source: chromecache_894.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/steamdeck/steamdeck_promo_08.png?v=2
Source: chromecache_331.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/570/page_bg_generated_v6b.jpg?t=1714502360
Source: chromecache_331.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/public/images/apps/1938090/8eaf32220060344996c
Source: chromecache_331.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0
Source: chromecache_331.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/public/images/apps/730/8dbc71957312bbd3baea658
Source: chromecache_358.2.dr, chromecache_330.2.dr, chromecache_559.2.dr	String found in binary or memory: https://checkout.steampowered.com/parental/ajaxlock
Source: chromecache_330.2.dr	String found in binary or memory: https://community.akamai.steamstatic.com/
Source: chromecache_358.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/
Source: chromecache_332.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/economy/emoticon/
Source: chromecache_332.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/
Source: chromecache_839.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images//sharedfiles/share_status_off.jpg
Source: chromecache_839.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images//sharedfiles/share_status_on.jpg
Source: chromecache_563.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/bg_gameinfo.png
Source: chromecache_563.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/bg_hubbottom.png
Source: chromecache_563.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/btn_back_top_active.png
Source: chromecache_563.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/btn_back_top_hover.png
Source: chromecache_563.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/btn_back_top_shadow.png
Source: chromecache_505.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/btn_hub_center.png
Source: chromecache_505.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/btn_hub_center_hover.png
Source: chromecache_505.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/btn_hub_right.png
Source: chromecache_505.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/btn_hub_right_hover.png
Source: chromecache_505.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/btn_login_bg.png
Source: chromecache_505.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/btn_login_corners.png
Source: chromecache_563.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/early_access_banner.jpg
Source: chromecache_505.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/home_banner_top.jpg
Source: chromecache_563.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/hub_divider.png?v=1
Source: chromecache_505.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/overlay_hub.png
Source: chromecache_505.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/apphubs/tab_hubheader.png
Source: chromecache_795.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/broadcast/apphub_default_thumbnail.jpg?v=
Source: chromecache_837.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/community/searchbox_friendactivity_bg.gif
Source: chromecache_839.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/economy/gray_square_button.png
Source: chromecache_563.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/groups/rightcol_box_repeat.png
Source: chromecache_563.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/groups/rightcol_box_topbtm.png
Source: chromecache_563.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/groups/rightcol_option_selected.png
Source: chromecache_837.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/header/lowerBarBG.gif
Source: chromecache_837.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/header/maincol_bg_gray.png);
Source: chromecache_837.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/header/reportAbuseBG.gif
Source: chromecache_837.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/header/reportAbuseLeft.gif
Source: chromecache_837.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/header/reportAbuseRight.gif
Source: chromecache_837.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/header/shadow_corners.png
Source: chromecache_837.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/header/shadow_leftright.png
Source: chromecache_837.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/header/shadow_topbottom.png
Source: chromecache_332.2.dr, chromecache_839.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/login/throbber.gif
Source: chromecache_839.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/mobile/dropdown_30.png
Source: chromecache_505.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/sharedfiles/btn_green.png);
Source: chromecache_505.2.dr, chromecache_563.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/sharedfiles/workshop_dateselect_arrow.png
Source: chromecache_839.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/comment_friendindicator_small.png
Source: chromecache_432.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/community_2_background_gradient.pn
Source: chromecache_837.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/updates/communitycontent/community_banner
Source: chromecache_722.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Source: chromecache_722.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Source: chromecache_722.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-BoldItalic.ttf?v=4.015
Source: chromecache_722.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Source: chromecache_722.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Source: chromecache_722.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Source: chromecache_722.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Source: chromecache_722.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.01
Source: chromecache_722.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/0-star.png
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/1-star.png
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/2-star.png
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/3-star.png
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/4-star.png
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/5-star.png
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/not-yet.png
Source: chromecache_785.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/buttons/icon_double_arrows.png
Source: chromecache_785.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);
Source: chromecache_785.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/buttons/icons_18.png?v=3);
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_1-2.pn
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_3-4.pn
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_5-6.pn
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_7-8.pn
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_9-10.p
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_angle.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_arrows.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_books.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_chevrons.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_circle2.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_crystals.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_earthelement.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_fireelement.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_flag.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_1-2.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_3-4.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_5-6.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_7-8.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_9-10.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_1.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_2.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_3.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_4.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_5.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_halftone_1.png?v=
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_halftone_2.png?v=
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_halftone_3.png?v=
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_hexagons.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_1-2.png?v
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_3-4.png?v
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_5-6.png?v
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_7-8.png?v
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_9-10.png?
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_patterns_1-2.png?
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_patterns_5-6.png?
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_patterns_7-8.png?
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_patterns_9-10.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_shapes_1.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_shapes_2.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_shapes_3.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_shapes_4.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_shapes_5.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_shields.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_space.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_spiro_1-2.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_spiro_3-4.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_spiro_5-6.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_spiro_7-8.png?v=2
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_spiro_9-10.png?v=
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_waterelement.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_wings.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/friendindicator_small.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_dow
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/globalheader_highlight.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/inbox_async_game.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/inbox_async_game_invite.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/inbox_icons_sprite.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/inbox_moderator_message.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/inbox_tradeoffers.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/notification_bell.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-logo.svg
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-playable.svg
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-unsupported.svg
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-verified.svg
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/ico/icon_content_warning.png
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/news/img_dota2.jpg
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/news/img_eurogamer.gif
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/news/img_kotaku.gif
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/news/img_l4d2.jpg
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/news/img_pcgamer.gif
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/news/img_portal2.jpg
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/news/img_rockpapershotgun.gif
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/news/img_shacknews.gif
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/news/img_steam.gif
Source: chromecache_751.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/news/img_tf2.jpg
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/popups/btn_arrow_down.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/popups/hover_arrow_both.gif
Source: chromecache_411.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.pn
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/v6/icon_expand.png
Source: chromecache_384.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/v6/icon_expand_white.png
Source: chromecache_456.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/chonburi/v4/8AtqGs-wOpGRTBq66LWJHLzriA.woff2)
Source: chromecache_456.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/chonburi/v4/8AtqGs-wOpGRTBq66LWSHLzriA.woff2)
Source: chromecache_456.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/jollylodger/v7/BXRsvFTAh_bGkA1uQ48dlB3lUODS7Zw.woff2)
Source: chromecache_456.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/jollylodger/v7/BXRsvFTAh_bGkA1uQ48dlB3lXuDS.woff2)
Source: chromecache_456.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/newrocker/v8/MwQzbhjp3-HImzcCU_cJoGQfiA.woff2)
Source: chromecache_456.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/newrocker/v8/MwQzbhjp3-HImzcCU_cJoGofiIlP.woff2)
Source: chromecache_456.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sigmarone/v10/co3DmWZ8kjZuErj9Ta3do6Tppg.woff2)
Source: chromecache_456.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sigmarone/v10/co3DmWZ8kjZuErj9Ta3do6rppkDi.woff2)
Source: chromecache_456.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sigmarone/v10/co3DmWZ8kjZuErj9Ta3do6vppkDi.woff2)
Source: chromecache_456.2.dr	String found in binary or memory: https://github.com/arqex/react-datetime
Source: chromecache_374.2.dr, chromecache_559.2.dr	String found in binary or memory: https://gtm.you1.cn
Source: chromecache_559.2.dr	String found in binary or memory: https://gtm.you1.cn/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/?browsefilter=mostrecent
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/?subsection=broadcasts
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/?subsection=guides
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/?subsection=images
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/?subsection=news
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/?subsection=reviews
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/?subsection=screenshots
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/?subsection=videos
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/?subsection=workshop
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/actions/GetOwnedApps/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/actions/ReportAbuse/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/actions/ReportProfile/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/actions/SearchApps/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/actions/SetLanguage/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/actions/StandardCommunityBan
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/actions/communitybandialog
Source: chromecache_880.2.dr, chromecache_845.2.dr	String found in binary or memory: https://gtm.you1.cn/app/
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/10
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/1091500
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/12210
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/1238000
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/1245620
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/1517290
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/1708010
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/app/1938090
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/1996010
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/2050650
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/2139020
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/214490
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/22380
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/2315690
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/2398450
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/2479810
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/2835570
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/34010
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/362890
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/394510
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/400040
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/414340
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/427410
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/440
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/552520
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/553850
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/app/570
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/app/730
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/app/813230
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/apps/allcontenthome
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/apps/allcontenthome/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/apps/getHubs
Source: chromecache_358.2.dr, chromecache_559.2.dr	String found in binary or memory: https://gtm.you1.cn/chat/
Source: chromecache_358.2.dr, chromecache_559.2.dr	String found in binary or memory: https://gtm.you1.cn/chat/friend/
Source: chromecache_358.2.dr, chromecache_559.2.dr	String found in binary or memory: https://gtm.you1.cn/chat/group/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/comment/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/discussions/
Source: chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/economy/emoticon/
Source: chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/gid/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/helpsteam/en/
Source: chromecache_358.2.dr, chromecache_893.2.dr, chromecache_671.2.dr, chromecache_559.2.dr	String found in binary or memory: https://gtm.you1.cn/helpsteam/en/wizard/HelpWithLimitedAccount
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/id/sir_ripton/recommended/813230/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/login/home/?goto=
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/login/logout/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/market/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/my/wishlist/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/news/post/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/news/shareonsteam/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/news/sharepost/
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/profiles/76561198389231209/recommended/427410/
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/profiles/76561199152109954/recommended/813230/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/css/applications/community/main.css?v=5CgcHEsWGAFt&l=english&_cdn
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/css/skin_1/apphub_broadcast.css?v=Szj_0XBV602A&l=english&_cdn=clo
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/css/skin_1/apphub_home.css?v=XOa7G-BGp2xZ&l=english&_cdn=cloudfla
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/css/skin_1/apphubs.css?v=roMLV7kDn_sN&l=english&_cdn=cloudflare
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/css/skin_1/communityhome.css?v=EC98biDaoKUh&l=english&_cdn=cloudf
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=english&_cdn=cloudflare
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/css/skin_1/modalContent.css?v=.TP5s6TzX6LLh&_cdn=cloudflare
Source: chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/
Source: chromecache_745.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images//sharedfiles/icons/icon_spoiler_tag.png
Source: chromecache_745.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images//sharedfiles/icons/icon_warning.png
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images//sharedfiles/searchbox_workshop_submit.gif
Source: chromecache_429.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images//sharedfiles/share_status_off.jpg
Source: chromecache_429.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images//sharedfiles/share_status_on.jpg
Source: chromecache_357.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/community/searchbox_friendactivity_bg.gif);
Source: chromecache_429.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/economy/gray_square_button.png
Source: chromecache_357.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/header/lowerBarBG.gif
Source: chromecache_357.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/header/maincol_bg_gray.png);
Source: chromecache_357.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/header/reportAbuseBG.gif
Source: chromecache_357.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/header/reportAbuseLeft.gif
Source: chromecache_357.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/header/reportAbuseRight.gif
Source: chromecache_357.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/header/shadow_corners.png
Source: chromecache_357.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/header/shadow_leftright.png
Source: chromecache_357.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/header/shadow_topbottom.png
Source: chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/login/throbber.gif
Source: chromecache_429.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/mobile/dropdown_30.png
Source: chromecache_429.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/skin_1/comment_friendindicator_small.png
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/skin_1/ico_external_link.gif
Source: chromecache_357.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/updates/communitycontent/community_banner.png
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/images/x9x9.gif
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/apphub_home.js?v=8OrLYcA-XZ3m&l=english&_cdn=cloudflar
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/applications/community/libraries~b28b7af69.js?v=hOyTweQkD3Cx&a
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/applications/community/localization/loyaltyrewards_manifest.js
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/applications/community/main.js?v=soQOTmUzl-9y&l=english&am
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/applications/community/manifest.js?v=6MtRkzKwK42K&l=englis
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/communityhome.js?v=8-RwlLlPLHOa&l=english&_cdn=cloudfl
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/modalContent.js?v=Wd0kCESeJquW&l=english&_cdn=cloudfla
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english&_cdn=cloudflare
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_c
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/javascript/user_reviews_community.js?v=st0tzXwxiGks&l=english&_cd
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/css/apphub.css?v=VZMHNMxv89Ym&l=english&_cdn=cloudflare
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/css/apphub_images.css?v=_0CllnFpmuY6&l=english&_cdn=cloudf
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudfla
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudf
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cl
Source: chromecache_669.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Source: chromecache_669.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Source: chromecache_669.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/fonts/MotivaSans-BoldItalic.ttf?v=4.015
Source: chromecache_669.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Source: chromecache_669.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Source: chromecache_669.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Source: chromecache_669.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Source: chromecache_669.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015
Source: chromecache_669.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images//award_icon.svg
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images//award_icon_blue.svg
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/apphubs/play_icon80.png
Source: chromecache_619.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/buttons/icon_double_arrows.png
Source: chromecache_619.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/buttons/icons_16.png?v=5);
Source: chromecache_619.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/buttons/icons_18.png?v=3);
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_airelement_1-2.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_airelement_3-4.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_airelement_5-6.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_airelement_7-8.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_airelement_9-10.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_angle.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_arrows.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_books.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_chevrons.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_circle2.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_crystals.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_earthelement.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_fireelement.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_flag.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_geo_1-2.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_geo_3-4.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_geo_5-6.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_geo_7-8.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_geo_9-10.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_grunge_1.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_grunge_2.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_grunge_3.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_grunge_4.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_grunge_5.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_halftone_1.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_halftone_2.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_halftone_3.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_hexagons.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_mandala_1-2.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_mandala_3-4.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_mandala_5-6.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_mandala_7-8.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_mandala_9-10.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_patterns_1-2.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_patterns_3-4.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_patterns_5-6.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_patterns_7-8.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_patterns_9-10.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_shapes_1.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_shapes_2.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_shapes_3.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_shapes_4.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_shapes_5.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_shields.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_space.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_spiro_1-2.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_spiro_3-4.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_spiro_5-6.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_spiro_7-8.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_spiro_9-10.png?v=2
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_waterelement.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/community/levels_wings.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/friendindicator_small.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/header/btn_header_installsteam_download.png?v=1
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/header/globalheader_highlight.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/header/inbox_async_game.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/header/inbox_async_game_invite.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/header/inbox_icons_sprite.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/header/inbox_moderator_message.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/header/inbox_tradeoffers.png
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/header/logo_steam.svg?t=962016
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/header/notification_bell.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/ico/ico-deck-logo.svg
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/ico/ico-deck-playable.svg
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/ico/ico-deck-unknown.svg
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/ico/ico-deck-unsupported.svg
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/ico/ico-deck-verified.svg
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/ico/icon_content_warning.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/popups/btn_arrow_down.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/popups/btn_arrow_down_padded.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/popups/hover_arrow_both.gif
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/responsive/header_logo.png
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_807.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/responsive/local_menu_hamburger.png
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/responsive/logo_valve_footer.png
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/responsive/share_steam_logo.png
Source: chromecache_745.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/sharedfiles/sketchfab_play.png
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/userreviews/icon_thumbsUp.png?v=1
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/v6/icon_expand.png
Source: chromecache_469.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/images/v6/icon_expand_white.png
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/javascript/apphub.js?v=JSwdk0x7aW5O&l=english&_cdn=cloudfl
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/javascript/shared_global.js?v=wJD9maDpDcVL&l=english&_cdn=
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=engli
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/public/shared/javascript/user_reviews.js?v=LRs2cUK5D3j7&l=english&_cdn=c
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/search/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/ajaxeditcontentdescriptors/
Source: chromecache_893.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/ajaxgetvotes/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/ajaxupdatecontentdescriptors/
Source: chromecache_893.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/ban
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3079751337
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3087668683
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3244246482
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3244641516
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3244787734
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3244896349
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3244896614
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3244896822
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3245113761
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3245146238
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3245425762
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3245660909
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3245764171
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3245796479
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3246303777
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3246306019
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3246592834
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3246683911
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3246913918
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3246921701
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3246921731
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3246922292
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247109986
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247111951
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247112763
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247114914
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247116292
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247249002
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247255367
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247305785
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247306330
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247306833
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247306844
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247314080
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247325529
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247331106
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247336414
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247348119
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247354070
Source: chromecache_631.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/filedetails/?id=3247361451
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/share/?id=
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/shareonsteam/?id=
Source: chromecache_893.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/votedown
Source: chromecache_893.2.dr	String found in binary or memory: https://gtm.you1.cn/sharedfiles/voteup
Source: chromecache_559.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam//account/preferences/#CommunityContentPreferences
Source: chromecache_331.2.dr, chromecache_559.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/about/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/account/languagepreferences/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/account/preferences
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/explore/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/join/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/legal/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/mobile
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/news/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/points/shop/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/privacy_agreement/
Source: chromecache_358.2.dr, chromecache_559.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/search/results/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/stats/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/steam_refunds/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/storesteam/subscriber_agreement/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/tradeoffer/
Source: chromecache_331.2.dr	String found in binary or memory: https://gtm.you1.cn/workshop/
Source: chromecache_332.2.dr, chromecache_374.2.dr	String found in binary or memory: https://gtm.you1.cn/workshop/ajaxfindworkshops/?searchText=
Source: chromecache_894.2.dr	String found in binary or memory: https://help.steampowered.com/en/
Source: chromecache_894.2.dr	String found in binary or memory: https://help.steampowered.com/en/?snr=1_44_44_
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/en/wizard/HelpWithLimitedAccount
Source: chromecache_631.2.dr	String found in binary or memory: https://img.youtube.com/vi/0SlXGG18Kco/0.jpg
Source: chromecache_631.2.dr	String found in binary or memory: https://img.youtube.com/vi/38vMxU9UwZc/0.jpg
Source: chromecache_631.2.dr	String found in binary or memory: https://img.youtube.com/vi/9aQhbmoFhuY/0.jpg
Source: chromecache_631.2.dr	String found in binary or memory: https://img.youtube.com/vi/DW6VDDih8nM/0.jpg
Source: chromecache_631.2.dr	String found in binary or memory: https://img.youtube.com/vi/FE07nT30TBg/0.jpg
Source: chromecache_631.2.dr	String found in binary or memory: https://img.youtube.com/vi/N12y2V1VbyA/0.jpg
Source: chromecache_631.2.dr	String found in binary or memory: https://img.youtube.com/vi/lqj9G6oisic/0.jpg
Source: chromecache_631.2.dr	String found in binary or memory: https://img.youtube.com/vi/w9uaLdS7VrQ/0.jpg
Source: chromecache_631.2.dr	String found in binary or memory: https://img.youtube.com/vi/xQOMy02LbNQ/0.jpg
Source: chromecache_631.2.dr	String found in binary or memory: https://img.youtube.com/vi/zlEfE7wtvBQ/0.jpg
Source: chromecache_894.2.dr	String found in binary or memory: https://partner.steamgames.com/steamdirect
Source: chromecache_487.2.dr, chromecache_362.2.dr, chromecache_502.2.dr, chromecache_654.2.dr, chromecache_772.2.dr, chromecache_885.2.dr, chromecache_571.2.dr, chromecache_475.2.dr, chromecache_503.2.dr	String found in binary or memory: https://plau.cohttps://plau.co
Source: chromecache_487.2.dr, chromecache_362.2.dr, chromecache_502.2.dr, chromecache_654.2.dr, chromecache_772.2.dr, chromecache_885.2.dr, chromecache_571.2.dr, chromecache_475.2.dr, chromecache_503.2.dr	String found in binary or memory: https://plau.cohttps://plau.coCopyright
Source: chromecache_487.2.dr, chromecache_362.2.dr, chromecache_654.2.dr, chromecache_772.2.dr, chromecache_571.2.dr, chromecache_475.2.dr	String found in binary or memory: https://plau.cohttps://plau.coMotiva
Source: chromecache_358.2.dr, chromecache_330.2.dr, chromecache_559.2.dr	String found in binary or memory: https://player.vimeo.com/video/
Source: chromecache_358.2.dr, chromecache_330.2.dr, chromecache_559.2.dr	String found in binary or memory: https://sketchfab.com/models/
Source: chromecache_838.2.dr, chromecache_344.2.dr	String found in binary or memory: https://steam.tv
Source: chromecache_358.2.dr, chromecache_330.2.dr, chromecache_559.2.dr	String found in binary or memory: https://steam.tv/parental/ajaxlock
Source: chromecache_745.2.dr	String found in binary or memory: https://steamcommunity-a.akamaihd.net/public/shared/images/popups/hover_arrow_both.gif
Source: chromecache_330.2.dr	String found in binary or memory: https://steamcommunity.com
Source: chromecache_894.2.dr	String found in binary or memory: https://steamcommunity.com/
Source: chromecache_894.2.dr	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: chromecache_894.2.dr	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts&browsefilter=partner_streams
Source: chromecache_834.2.dr	String found in binary or memory: https://steamcommunity.com/broadcast/watch/
Source: chromecache_330.2.dr	String found in binary or memory: https://steamcommunity.com/chat/
Source: chromecache_330.2.dr	String found in binary or memory: https://steamcommunity.com/chat/friend/
Source: chromecache_330.2.dr	String found in binary or memory: https://steamcommunity.com/chat/group/
Source: chromecache_894.2.dr	String found in binary or memory: https://steamcommunity.com/discussions/
Source: chromecache_894.2.dr	String found in binary or memory: https://steamcommunity.com/market/
Source: chromecache_894.2.dr	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: chromecache_894.2.dr	String found in binary or memory: https://steamcommunity.com/workshop/
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2447221343464641707/DEA652FC69A34B7EFE249C8E02A4229CB46B7
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2447221343464645894/310BF7F05EEFF0110627D7FA9137C7FBBE1ED
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2447221343464649418/E3CAF387BB0B0CF79AD22EB83E46568345D93
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2447221343464701634/3F72CA238CD5BC66405B38B283C7F5893DB73
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2458480342533257560/AAEBD0FA88712EC3110E52BEC02A2F592F4F5
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2462983942160090892/EF46F0461D54256EC4AE4BFD7C75FF2DE58A7
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2464109928229428542/898BD49A4929C779E97993188F5D33E927C47
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2469739341598532857/761A949F4BA4257B9F6A52FB7FE0ACF4DBFB2
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2477620007728569722/81BC4C3EFDD2D6179D4E0B30295E428E9F921
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2478746540855851802/0BF2D8E3138F50105E60DB9FB97DA481C0611
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2479872440761762678/B5B4B1F905325582021823AD5C917DB8F5164
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2479872440761773408/15BEF100D715F0FE0CA4335289FB0C6929E2F
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2479872440761778578/7CC51C0AC855E2F5C323848D9C0F4121B66C6
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2479872440761792649/BE4471DE3911AD4445FE37476053ABFD568A7
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2479872440761801447/603A4A5DB37701810870CF40D6C25B497B596
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2484375407155795747/E7A33EB4D048D9176D3D880D579B3BDCF3317
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2485501307069578582/BCC2EC10ED726AB3F3861DA8E91EBBA83C103
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2485501307081282805/44E15EBA5E7ED7F9897D7B31DE948477553F9
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2486627206982237380/FDEF7805807494827752F93DD26526DC2F81E
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2486627840204294611/CB1C998FF27BB70CA436270A4E6BFE38312F1
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2492256706509024689/8C0EB957FF43CDC245BDEA0E5CE8754ECE3EC
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2493383326786745000/75E91AD7FB0B703702346DED1EED63D08CA52
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2494509226693636192/4F814796FC399EC38DC52285FD9B67316F9F9
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2495635126600553841/EEB1316641662E10C088F075B34698EC65EDE
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2497886839272572847/40AE9162BE1DAD72D1A4146FD73BBF1E44834
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2503515705592104286/B31FD93DA2E9BE73D77067C11600F0DDB227B
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2506893405303432788/F228B12DD34E668E37B612CB03BB1BB131D50
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2521530104084608955/F6BB5DAF342F8DE59DE363966B9FD2CE6B60E
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2521530104088148458/1FBB748C908C5183D90CDAA37C5AC83657D3F
Source: chromecache_631.2.dr	String found in binary or memory: https://steamuserimages-a.akamaihd.net/ugc/2523781903903083492/B6F4C07905839056E8E89AB40F7DC7786B318
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/applications/store/main.css?v=_J3LXbtbVCSV&l=eng
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/creator_hub.css?v=e6oxFOI4knLo&l=english
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=english
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=english
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images//gift/steamcards_promo_03.png?v=1
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images//v6/ico/ico_info.png
Source: chromecache_504.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/blank.gif
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/footerLogo_valve_new.png
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.png
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/ResponsiveChevron.svg
Source: chromecache_570.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/promo/lunar2019/lny2019_title_en.png
Source: chromecache_504.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/recommended_thumb.png
Source: chromecache_863.2.dr, chromecache_504.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/v6/home/maincap_placeholder_616x353.gif
Source: chromecache_834.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/v6/ico/ico_selected_green.png
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/v6/logo_steam_footer.png
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=O
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/main.js?v=hnor4TDzUtcX&amp
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=fwdI41xjQFw_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/broadcast_carousel.js?v=J3gSXZs7_9YW&l=en
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/cluster.js?v=zUvcVvp9xZmm&l=english
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=suHYMumkDXRp&l=english
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/home.js?v=35wvaSLdFM6n&l=english
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/main.js?v=hD1etfEdoGz1&l=english
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=lI4V3qLLPrMY&l=englis
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=e-GD37z7aOe7&l=en
Source: chromecache_716.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Source: chromecache_716.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Source: chromecache_716.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-BoldItalic.ttf?v=4.015
Source: chromecache_716.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Source: chromecache_716.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Source: chromecache_716.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Source: chromecache_716.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Source: chromecache_716.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015
Source: chromecache_716.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Source: chromecache_834.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/apphubs/play_icon80.png
Source: chromecache_690.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icon_double_arrows.png
Source: chromecache_690.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);
Source: chromecache_690.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_18.png?v=3);
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_536.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/trans.gif
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKt
Source: chromecache_894.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/1.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/10.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/11.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/12.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/13.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/14.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/15.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/16.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/17.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/18.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/19.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/2.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/20.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/21.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/22.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/23.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/3.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/4.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/5.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/6.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/7.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/8.png?v=5"/>
Source: chromecache_631.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/9.png?v=5"/>
Source: chromecache_504.2.dr	String found in binary or memory: https://store.steampowered.com/
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com//login?redir=app/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_4_4__global-header
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_4_4__global-responsive-menu
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_4_4__join
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_4_4__login
Source: chromecache_330.2.dr	String found in binary or memory: https://store.steampowered.com/about/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_4_4__global-header
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_4_4__global-responsive-menu
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/account/cookiepreferences/?snr=1_44_44_
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/account/languagepreferences/
Source: chromecache_570.2.dr	String found in binary or memory: https://store.steampowered.com/account/preferences
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/account/setlanguage/
Source: chromecache_812.2.dr, chromecache_570.2.dr	String found in binary or memory: https://store.steampowered.com/api/addtowishlist
Source: chromecache_812.2.dr, chromecache_570.2.dr	String found in binary or memory: https://store.steampowered.com/api/removefromwishlist
Source: chromecache_570.2.dr	String found in binary or memory: https://store.steampowered.com/app/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1056640/Phantasy_Star_Online_2_New_Genesis/?snr=1_4_4__tab-TopGro
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1128860/Men_of_War_II/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1128860/Men_of_War_II/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1144400/SenrenBanka/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1145350/Hades_II/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1150530/Wizard_with_a_Gun/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1154670/Die_by_the_Blade/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1158310/Crusader_Kings_III/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1158310/Crusader_Kings_III/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1172470/Apex_Legends/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1177980/Little_Kitty_Big_City/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1182900/A_Plague_Tale_Requiem/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1188930/Chrono_Ark/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1203220/NARAKA_BLADEPOINT/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1228320/Dungeon_Looter/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1245620/ELDEN_RING/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1293910/Read_Only_Memories_NEURODIVER/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1331340/Break_the_Loop/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1435790/Escape_Simulator/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1449850/YuGiOh_Master_Duel/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1456760/ROBOBEAT/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1471270/Seablip/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1604030/V_Rising/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1604030/V_Rising/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1649240/Returnal/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1651560/Fabledom/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1651560/Fabledom/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1665460/eFootball_2024/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1672970/Minecraft_Dungeons/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1674590/Histera/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1675200/Steam_Deck/?utm_source=steamhometop&snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1675200/Steam_Deck/?utm_source=steamhomev2&snr=1_4_4__147
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1677280/Company_of_Heroes_3/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1686290/Idle_Heros/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1710170/Blade_of_Darkness/?snr=1_4_4__43_1
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1757610/Puppet_Master_The_Game/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1777790/Pool_Party/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1840080/Homeworld_3/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1840080/Homeworld_3/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1847150/Touhou_Genso_Wanderer_FORESIGHT/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1847150/Touhou_Genso_Wanderer_FORESIGHT/?snr=1_4_4__tab-TopGrossi
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1850160/Poly_Bridge_3/?snr=1_4_4__40_3
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1876890/Wandering_Sword/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1895880/Ratchet__Clank_Rift_Apart/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1895880?snr=1_4_4__40_1
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1984190/Genopanic/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/1989070/Synergy/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2008920/Lorelei_and_the_Laser_Eyes/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2054770/Combo_Card_Clashers/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2111190/MULLET_MADJACK/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2131010/The_Land_Beneath_Us/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2132850/Rabbit_and_Steel/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2150910/Spellcats_Auto_Card_Tactics/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2165470/Taora__Survival/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2171560/Morbid_The_Lords_of_Ire/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2179170/A_Tower_Full_of_Cats/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2194530/YogSothoths_Yard/?snr=1_4_4__43_3
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2195250/EA_SPORTS_FC_24/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2196860/Anchors_Blockade_Zone/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2208920/Assassins_Creed_Valhalla/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2215430/Ghost_of_Tsushima_DIRECTORS_CUT/?snr=1_4_4__tab-TopGrossi
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2215430/Ghost_of_Tsushima_DIRECTORS_CUT/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2239550/Watch_Dogs_Legion/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2286780/Aeruta/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/230410/Warframe/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2311920/Crusader_Kings_III_Tours__Tournaments/?snr=1_4_4__tab-Spe
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2331330/The_Bridge_Curse_2_The_Extrication/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2337090/Real_Dive_World/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2344520/Diablo_IV/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2356150/Arcane_Assembly/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2357570/Overwatch_2/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2377410/Forsaken_Quartet/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2379780/Balatro/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/239140/Dying_Light/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/239140/Dying_Light/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2398450/Classic_Marathon/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2417850/Yolk_Heroes_A_Long_Tamago/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/243470/Watch_Dogs/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2453360/Cluckmech_Oasis/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2461850/Senuas_Saga_Hellblade_II/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2488510/FatalZone/?snr=1_4_4__43_3
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2504480/Indigo_Park_Chapter_1/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2521600/LittleKnown_Galaxy/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/255710/Cities_Skylines/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2582650/Enishia_and_the_Binding_Brand/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2597880/STRIDE_Fates/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/262060/Darkest_Dungeon/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2649080/Coffee_Caravan/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2668080/Snowbreak_Containment_Zone/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2669490/Chambers_The_Outlaw/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2670630/Supermarket_Simulator/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/271590/Grand_Theft_Auto_V/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2719200/SAMURAI_WARRIORS_4_DX/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2743970/Oneinch_Tactics/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2763670/Arctic_Eggs/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2783780/Call_of_Duty_Modern_Warfare_III__Tracer_Pack_Trash_Talk_2
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2786680/Knowledge_or_know_Lady/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2788520/Cozy_Caravan/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2788870/Mini_Settlers_Prologue/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2795000/The_WereCleaner/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2818260/Vigor/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/281990/Stellaris/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/281990/Stellaris/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2825300/AMANATSU_Perfect_Edition/?snr=1_4_4__tab-Upcoming
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2826180/Chill_Pulse/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2833600/V_Rising__Legacy_of_Castlevania_Premium_Pack/?snr=1_4_4__
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2856080/Mini_Airways_Prologue/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2919650/Cookard/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/2936950/Artifact_SeekerPaladin/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/337320/Paint_the_Town_Red/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/359550/Tom_Clancys_Rainbow_Six_Siege/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/374320/DARK_SOULS_III/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/381210/Dead_by_Daylight/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/386940/Ultimate_Chicken_Horse/?snr=1_4_4__40_2
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/386940/Ultimate_Chicken_Horse/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/391220/Rise_of_the_Tomb_Raider/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/394360/Hearts_of_Iron_IV/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/394360/Hearts_of_Iron_IV/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/427410/Abiotic_Factor/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/447040/Watch_Dogs_2/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/457140/Oxygen_Not_Included/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/460930/Tom_Clancys_Ghost_Recon_Wildlands/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/539470/Police_Stories/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/553850/HELLDIVERS_2/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/570/Dota_2/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/570940/DARK_SOULS_REMASTERED/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/578080/PUBG_BATTLEGROUNDS/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/588650/Dead_Cells/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/632470/Disco_Elysium__The_Final_Cut/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/646570/Slay_the_Spire/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/730/CounterStrike_2/?snr=1_4_4__tab-TopGrossing
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/812140/Assassins_Creed_Odyssey/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/813230/ANIMAL_WELL/?snr=1_4_4__145
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/892970/Valheim/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/app/945770/Dark_Envoy/?snr=1_4_4__43_1
Source: chromecache_570.2.dr	String found in binary or memory: https://store.steampowered.com/bundle/
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/cart/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/action/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/action_fps/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/action_run_jump/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/action_tps/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/adventure/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/adventure_rpg/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/anime/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/arcade_rhythm/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/casual/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/endlessly_replayable?snr=1_4_4__118
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/endlessly_replayable?snr=1_4_4__118&snr=1_4_4__118
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/exploration_open_world/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/fighting_martial_arts/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/hack_and_slash/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/hidden_object/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/horror/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/metroidvania/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/multiplayer/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/multiplayer_coop/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/multiplayer_lan/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/multiplayer_local_party/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/multiplayer_mmo/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/multiplayer_online_competitive/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/mystery_detective/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/puzzle_matching/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/racing/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/racing_sim/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/rogue_like_rogue_lite/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/rpg/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/rpg_action/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/rpg_jrpg/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/rpg_party_based/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/rpg_strategy_tactics/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/rpg_turn_based/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/science_fiction/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/shmup/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sim_building_automation/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sim_dating/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sim_farming_crafting/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sim_hobby_sim/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sim_life/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sim_physics_sandbox/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sim_space_flight/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/simulation/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/singleplayer/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/space/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sports/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sports_and_racing/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sports_fishing_hunting/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sports_individual/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sports_sim/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/sports_team/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/story_rich/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/strategy/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/strategy_card_board/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/strategy_cities_settlements/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/strategy_grand_4x/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/strategy_military/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/strategy_real_time/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/strategy_turn_based/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/survival/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/tower_defense/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/category/visual_novel/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/charts/mostplayed/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/charts/topselling/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/communityrecommendations/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/controller/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/controller/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/curators/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/curators/?snr=1_4_4__125
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/curators/ajaxfollow
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/curators/ajaxignore
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/demos/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/digitalgiftcards/?snr=1_44_44_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/digitalgiftcards/?snr=1_4_4__125
Source: chromecache_570.2.dr	String found in binary or memory: https://store.steampowered.com/dynamicstore/saledata/?cc=
Source: chromecache_504.2.dr	String found in binary or memory: https://store.steampowered.com/dynamicstore/updatehomeviewsettings
Source: chromecache_570.2.dr	String found in binary or memory: https://store.steampowered.com/dynamicstore/userdata/?id=
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_4_4_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_4_4__global-header
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_4_4__global-responsive-menu
Source: chromecache_570.2.dr	String found in binary or memory: https://store.steampowered.com/explore/howitworks/
Source: chromecache_504.2.dr	String found in binary or memory: https://store.steampowered.com/explore/logfeedview/
Source: chromecache_504.2.dr	String found in binary or memory: https://store.steampowered.com/explore/more
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/new/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/new/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/new/?snr=1_4_4__146
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/new/?snr=1_4_4__tabsmore
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/random/
Source: chromecache_504.2.dr	String found in binary or memory: https://store.steampowered.com/explore/recommended/
Source: chromecache_504.2.dr	String found in binary or memory: https://store.steampowered.com/explore/render/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/startnew
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/upcoming/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/upcoming/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/explore/upcoming/?snr=1_4_4__tabsmore
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/freelicense/addfreebundle/
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/freelicense/addfreelicense/
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/friends/recommendgame
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/genre/Early%20Access/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/genre/Early%20Access/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/genre/Free
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/genre/Free%20to%20Play/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/genre/Free%20to%20Play/?snr=1_4_4__125
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/gotflash
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/greatondeck/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/greatondeck/?snr=1_4_4__category-menu
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/join/?snr=1_4_4__more-content-login
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/labs/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/legal/?snr=1_44_44_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/linux?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/login/?redir=&redir_ssl=1&snr=1_4_4__global-header
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/login/?snr=1_4_4__more-content-login
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/logout/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/macos?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/mobile
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_4_4__global-header
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_4_4__global-responsive-menu
Source: chromecache_504.2.dr	String found in binary or memory: https://store.steampowered.com/news/app/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/news/collection/sales/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/newshub/?snr=1_4_4_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/newshub/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/pccafe/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/points/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_4_4__global-header
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_4_4__global-responsive-menu
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_44_44_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_4_4__global-responsive-menu
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/publisher/?snr=1_4_4_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/recommended/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/recommended/friendactivity/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/recommended/friendactivity/?snr=1_4_4__138
Source: chromecache_812.2.dr, chromecache_570.2.dr	String found in binary or memory: https://store.steampowered.com/recommended/ignorerecommendation/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/recommender/?snr=1_4_4_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/remoteplay_hub/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/sale/HumbleGamesPublisherSale2024?snr=1_4_4__40_1
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/sale/PID2024PublisherSale?snr=1_4_4__40_2
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/sale/nextfest?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/sale/steam_awards?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/sale/vr_specials/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/sale/watch_dogs_franchise?snr=1_4_4__40_2
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/search/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/search/?filter=globaltopsellers&os=win&hidef2p=1&snr=1_4_4__tabsmore
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/search/?filter=globaltopsellers&os=win&snr=1_4_4__tabsmore
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/search/?filter=topsellers&os=win&hidef2p=1&snr=1_4_4__tabsmore
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/search/?filter=topsellers&os=win&snr=1_4_4__tabsmore
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/search/?filter=topsellers&snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/search/?filter=ut1&category1=998&os=&snr=1_4_4_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/search/?filter=ut2&category1=998&os=&snr=1_4_4_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/search/?specials=1&snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/search/?specials=1&snr=1_4_4__146
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/search/?term=
Source: chromecache_504.2.dr	String found in binary or memory: https://store.steampowered.com/search/hometab/TopGrossing/
Source: chromecache_330.2.dr	String found in binary or memory: https://store.steampowered.com/search/results/
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/search/smallcapscroll
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/search/suggest
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/search/tab
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/software/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/soundtracks?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/specials/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/specials?snr=1_4_4_#tab=TopSellers
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/specials?snr=1_4_4__125#tab=TopSellers
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/specials?snr=1_4_4__tabsmore#tab=TopSellers
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_4_4__global-header
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_4_4__global-responsive-menu
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_44_44_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_4_4__global-responsive-menu
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/steamdeck/?snr=1_4_4__category-menu
Source: chromecache_570.2.dr	String found in binary or memory: https://store.steampowered.com/sub/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/sub/1026306/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/sub/586532/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/sub/633707/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/sub/94174/?snr=1_4_4__tab-Specials
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_44_44_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_4_4__global-responsive-menu
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tag/browse/?snr=1_4_4__125#yours
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tag/browse/?snr=1_4_4__146
Source: chromecache_812.2.dr, chromecache_863.2.dr	String found in binary or memory: https://store.steampowered.com/tag/en/
Source: chromecache_812.2.dr	String found in binary or memory: https://store.steampowered.com/tagdata/recommendedtags
Source: chromecache_570.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/Action/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/Adventure/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/Casual/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/Indie/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/Massively%20Multiplayer/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/RPG/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/Racing/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/Simulation/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/Sports/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/Strategy/?snr=1_4_4__125
Source: chromecache_504.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/TAGNAME/
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/vr/?snr=1_4_4_
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/vr/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/vr/?snr=1_4_4__125
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/vrhardware/?snr=1_4_4__12
Source: chromecache_894.2.dr	String found in binary or memory: https://store.steampowered.com/yearinreview?src=7&snr=1_4_4__12
Source: chromecache_331.2.dr, chromecache_894.2.dr	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@18/905@42/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2028,i,3547210394099925823,8850844179470166958,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://gtm.you1.cn/app/2143540"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2028,i,3547210394099925823,8850844179470166958,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://gtm.you1.cn/app/2143540	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/app/2143540	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
gtm.you1.cn	100%	Sophos S4	illegal phishing domain

URLs

Source	Detection	Scanner	Label
https://steam.tv	0%	URL Reputation	safe
https://steamcommunity.com/chat/group/	0%	Avira URL Cloud	safe
https://store.steampowered.com/?snr=1_4_4__join	0%	Avira URL Cloud	safe
https://img.youtube.com/vi/xQOMy02LbNQ/0.jpg	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/javascript/home.js?v=35wvaSLdFM6n&l=english	0%	Avira URL Cloud	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://gtm.you1.cn/public/images/skin_1/footerLogo_valve.png?v=1	100%	Avira URL Cloud	phishing
https://store.steampowered.com/app/2111190/MULLET_MADJACK/?snr=1_4_4__145	0%	Avira URL Cloud	safe
https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/2.png?v=5"/>	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/apps/1158310/capsule_184x69_alt_assets_4.jpg?t=1715685390	0%	Avira URL Cloud	safe
https://gtm.you1.cn/public/shared/images/community/levels_mandala_7-8.png?v=2	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare	100%	Avira URL Cloud	phishing
https://store.akamai.steamstatic.com/public/css/v6/creator_hub.css?v=e6oxFOI4knLo&l=english	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/apps/2239550/header_292x136.jpg?t=1692817793	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/apps/2195250/capsule_184x69.jpg?t=1713799333	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/apps/730/ss_0f8cf82d019c614760fd20801f2bb4001da7ea77.600x338.jpg	0%	Avira URL Cloud	safe
https://community.cloudflare.steamstatic.com/public/images/header/shadow_leftright.png	0%	Avira URL Cloud	safe
https://community.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/webm_page_bg_mobile_english.webm?t=1714777083	0%	Avira URL Cloud	safe
https://community.cloudflare.steamstatic.com/public/shared/images/news/img_l4d2.jpg	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/adventure/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/bundles/40751/resfcyr673l6y9dt/capsule_616x353.jpg?t=1715792253	0%	Avira URL Cloud	safe
https://gtm.you1.cn/profiles/76561199152109954/recommended/813230/	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/storesteam/search/results/	100%	Avira URL Cloud	phishing
https://store.steampowered.com/app/588650/Dead_Cells/?snr=1_4_4__tab-Specials	0%	Avira URL Cloud	safe
https://gtm.you1.cn/sharedfiles/filedetails/?id=3247111951	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/public/shared/images/buttons/icons_16.png?v=5);	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/sharedfiles/votedown	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/app/34010	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/actions/communitybandialog	100%	Avira URL Cloud	phishing
https://store.steampowered.com/vr/?snr=1_4_4__125	0%	Avira URL Cloud	safe
https://gtm.you1.cn/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&l=english	100%	Avira URL Cloud	phishing
https://store.steampowered.com/app/1989070/Synergy/?snr=1_4_4__tab-Upcoming	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/apps/1128860/ss_96487c455abe12d84fa57c487e4d05807089eb5d.600x338.jpg	0%	Avira URL Cloud	safe
https://store.steampowered.com/app/2150910/Spellcats_Auto_Card_Tactics/?snr=1_4_4__tab-Upcoming	0%	Avira URL Cloud	safe
https://gtm.you1.cn/sharedfiles/filedetails/?id=3247255367	100%	Avira URL Cloud	phishing
https://store.steampowered.com/app/2215430/Ghost_of_Tsushima_DIRECTORS_CUT/?snr=1_4_4__tab-TopGrossi	0%	Avira URL Cloud	safe
https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_3-4.pn	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015	0%	Avira URL Cloud	safe
https://store.steampowered.com/vrhardware/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://store.steampowered.com/stats/?snr=1_4_4__global-header	0%	Avira URL Cloud	safe
https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_wings.png	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/action_tps/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/apps/1056640/capsule_184x69.jpg?t=1715705326	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/mp4_page_bg_eng	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_mobile_english.jpg?t=1713912919	0%	Avira URL Cloud	safe
https://store.steampowered.com/categories/homepageimage/category/action?cc=us&l=english	0%	Avira URL Cloud	safe
https://store.steampowered.com/app/1331340/Break_the_Loop/?snr=1_4_4__tab-Upcoming	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/apps/281990/ss_7f4d7cc160c43e77aa523e910b365e0ca436e6bb.600x338.jpg	0%	Avira URL Cloud	safe
https://store.steampowered.com/app/730/CounterStrike_2/?snr=1_4_4__tab-TopGrossing	0%	Avira URL Cloud	safe
https://store.steampowered.com/app/394360/Hearts_of_Iron_IV/?snr=1_4_4__tab-TopGrossing	0%	Avira URL Cloud	safe
https://steamcommunity.com/chat/	0%	Avira URL Cloud	safe
http://gtm.you1.cn/storesteam/subscriber_agreement/.	100%	Avira URL Cloud	phishing
https://cdn.akamai.steamstatic.com/steam/apps/570/capsule_184x69.jpg?t=1714502360	0%	Avira URL Cloud	safe
https://gtm.you1.cn/sharedfiles/filedetails/?id=3247306833	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/discussions/	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/chat/friend/	100%	Avira URL Cloud	phishing
https://cdn.akamai.steamstatic.com/steam/apps/578080/capsule_184x69.jpg?t=1713943796	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png	0%	Avira URL Cloud	safe
https://store.steampowered.com/app/271590/Grand_Theft_Auto_V/?snr=1_4_4__tab-TopGrossing	0%	Avira URL Cloud	safe
https://gtm.you1.cn/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare	100%	Avira URL Cloud	phishing
https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_3-4.png?v=2	0%	Avira URL Cloud	safe
https://gtm.you1.cn/public/javascript/applications/community/chunk~af55cc5d1.js?contenthash=4f7934fa0c61bb251d52	100%	Avira URL Cloud	phishing
https://cdn.akamai.steamstatic.com/steam/apps/1172470/capsule_184x69.jpg?t=1715104113	0%	Avira URL Cloud	safe
https://gtm.you1.cn/actions/StandardCommunityBan	100%	Avira URL Cloud	phishing
https://community.cloudflare.steamstatic.com/public/images/sharedfiles/workshop_dateselect_arrow.png	0%	Avira URL Cloud	safe
https://gtm.you1.cn/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare	100%	Avira URL Cloud	phishing
https://store.steampowered.com/app/337320/Paint_the_Town_Red/?snr=1_4_4__tab-Specials	0%	Avira URL Cloud	safe
https://gtm.you1.cn/public/javascript/modalContent.js?v=Wd0kCESeJquW&l=english&_cdn=cloudfla	100%	Avira URL Cloud	phishing
https://community.cloudflare.steamstatic.com/economy/emoticon/	0%	Avira URL Cloud	safe
https://gtm.you1.cn/public/shared/images/community/levels_waterelement.png	100%	Avira URL Cloud	phishing
https://store.steampowered.com/tags/en/Adventure/?snr=1_4_4__125	0%	Avira URL Cloud	safe
https://store.steampowered.com/?snr=1_4_4__login	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/apps/1726570/ss_c734a0acdcada17a686b636430b0786c0cb08f83.600x338.jpg	0%	Avira URL Cloud	safe
https://steamuserimages-a.akamaihd.net/ugc/2521530104084608955/F6BB5DAF342F8DE59DE363966B9FD2CE6B60E	0%	Avira URL Cloud	safe
https://store.steampowered.com/category/horror/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://store.steampowered.com/app/1188930/Chrono_Ark/?snr=1_4_4__145	0%	Avira URL Cloud	safe
https://gtm.you1.cn/sharedfiles/filedetails/?id=3246921701	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/public/javascript/applications/community/main.js?v=soQOTmUzl-9y&l=english&am	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/login/logout/	100%	Avira URL Cloud	phishing
https://cdn.akamai.steamstatic.com/steam/apps/730/capsule_184x69.jpg?t=1698860631	0%	Avira URL Cloud	safe
https://gtm.you1.cn/apps/allcontenthome?l=english&browsefilter=trend&appHubSubSection=11&forceanon=1	100%	Avira URL Cloud	phishing
https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/19.png?v=5"/>	0%	Avira URL Cloud	safe
https://store.steampowered.com/points/shop/?snr=1_4_4__global-responsive-menu	0%	Avira URL Cloud	safe
https://cdn.akamai.steamstatic.com/steam/apps/1847150/capsule_184x69.jpg?t=1715747566	0%	Avira URL Cloud	safe
https://gtm.you1.cn/app/12210	100%	Avira URL Cloud	phishing
https://cdn.akamai.steamstatic.com/steam/apps/1145350/ss_c8d2b18451a2cc4d5b4fdd78ed84a5e64e051eac.600x338.jpg	0%	Avira URL Cloud	safe
https://gtm.you1.cn/actions/GetOwnedApps/	100%	Avira URL Cloud	phishing
https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/13.png?v=5"/>	0%	Avira URL Cloud	safe
https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_3.png?v=2	0%	Avira URL Cloud	safe
https://store.steampowered.com/app/812140/Assassins_Creed_Odyssey/?snr=1_4_4__tab-Specials	0%	Avira URL Cloud	safe
https://gtm.you1.cn/?subsection=broadcasts	100%	Avira URL Cloud	phishing
https://store.steampowered.com/category/tower_defense/?snr=1_4_4__12	0%	Avira URL Cloud	safe
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	0%	Avira URL Cloud	safe
https://img.youtube.com/vi/9aQhbmoFhuY/0.jpg	0%	Avira URL Cloud	safe
https://gtm.you1.cn/public/shared/images/header/globalheader_highlight.png	100%	Avira URL Cloud	phishing
https://gtm.you1.cn/apps/allcontenthome	100%	Avira URL Cloud	phishing
https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/1-star.png	0%	Avira URL Cloud	safe
https://gtm.you1.cn/public/css/skin_1/communityhome.css?v=EC98biDaoKUh&l=english&_cdn=cloudflare	100%	Avira URL Cloud	phishing
https://store.steampowered.com/app/1158310/Crusader_Kings_III/?snr=1_4_4__tab-TopGrossing	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
api.steampowered.com	23.194.234.100	true	false		unknown
store.steampowered.com	96.17.60.195	true	false		unknown
www.google.com	192.178.50.36	true	false		unknown
cdn.akamai.steamstatic.com	23.222.77.65	true	false		unknown
community.cloudflare.steamstatic.com	104.18.42.105	true	false		unknown
alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com	47.57.186.72	true	false		unknown
store.akamai.steamstatic.com	23.50.112.134	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false		unknown
cdn.cloudflare.steamstatic.com	104.18.42.105	true	false		unknown
ytimg.l.google.com	142.250.189.142	true	false		unknown
gtm.you1.cn	unknown	unknown	true	100%, Sophos S4	unknown
img.youtube.com	unknown	unknown	false		unknown
steamuserimages-a.akamaihd.net	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://gtm.you1.cn/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare	false	Avira URL Cloud: phishing	unknown
https://cdn.akamai.steamstatic.com/steam/apps/1158310/capsule_184x69_alt_assets_4.jpg?t=1715685390	false	Avira URL Cloud: safe	unknown
https://img.youtube.com/vi/xQOMy02LbNQ/0.jpg	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/public/images/skin_1/footerLogo_valve.png?v=1	false	Avira URL Cloud: phishing	unknown
https://store.akamai.steamstatic.com/public/css/v6/creator_hub.css?v=e6oxFOI4knLo&l=english	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/apps/2195250/capsule_184x69.jpg?t=1713799333	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/apps/2239550/header_292x136.jpg?t=1692817793	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/apps/730/ss_0f8cf82d019c614760fd20801f2bb4001da7ea77.600x338.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/webm_page_bg_mobile_english.webm?t=1714777083	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/bundles/40751/resfcyr673l6y9dt/capsule_616x353.jpg?t=1715792253	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&l=english	false	Avira URL Cloud: phishing	unknown
https://cdn.akamai.steamstatic.com/steam/apps/1128860/ss_96487c455abe12d84fa57c487e4d05807089eb5d.600x338.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/apps/1056640/capsule_184x69.jpg?t=1715705326	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/categories/homepageimage/category/action?cc=us&l=english	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_mobile_english.jpg?t=1713912919	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/apps/281990/ss_7f4d7cc160c43e77aa523e910b365e0ca436e6bb.600x338.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/apps/570/capsule_184x69.jpg?t=1714502360	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/apps/578080/capsule_184x69.jpg?t=1713943796	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare	false	Avira URL Cloud: phishing	unknown
https://gtm.you1.cn/public/javascript/applications/community/chunk~af55cc5d1.js?contenthash=4f7934fa0c61bb251d52	false	Avira URL Cloud: phishing	unknown
https://cdn.akamai.steamstatic.com/steam/apps/1172470/capsule_184x69.jpg?t=1715104113	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/apps/1726570/ss_c734a0acdcada17a686b636430b0786c0cb08f83.600x338.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/apps/730/capsule_184x69.jpg?t=1698860631	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/apps/allcontenthome?l=english&browsefilter=trend&appHubSubSection=11&forceanon=1	false	Avira URL Cloud: phishing	unknown
https://cdn.akamai.steamstatic.com/steam/apps/1847150/capsule_184x69.jpg?t=1715747566	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/apps/1145350/ss_c8d2b18451a2cc4d5b4fdd78ed84a5e64e051eac.600x338.jpg	false	Avira URL Cloud: safe	unknown
https://img.youtube.com/vi/9aQhbmoFhuY/0.jpg	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/public/css/skin_1/communityhome.css?v=EC98biDaoKUh&l=english&_cdn=cloudflare	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://steamcommunity.com/chat/group/	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/2.png?v=5"/>	chromecache_631.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/public/shared/images/community/levels_mandala_7-8.png?v=2	chromecache_469.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.steampowered.com/?snr=1_4_4__join	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/app/2111190/MULLET_MADJACK/?snr=1_4_4__145	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/javascript/home.js?v=35wvaSLdFM6n&l=english	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg	chromecache_384.2.dr	false	Avira URL Cloud: safe	unknown
https://community.cloudflare.steamstatic.com/public/images/header/shadow_leftright.png	chromecache_837.2.dr	false	Avira URL Cloud: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/news/img_l4d2.jpg	chromecache_751.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/adventure/?snr=1_4_4__12	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/sharedfiles/filedetails/?id=3247111951	chromecache_631.2.dr	false	Avira URL Cloud: phishing	unknown
https://gtm.you1.cn/storesteam/search/results/	chromecache_358.2.dr, chromecache_559.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.steampowered.com/app/588650/Dead_Cells/?snr=1_4_4__tab-Specials	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/profiles/76561199152109954/recommended/813230/	chromecache_631.2.dr	false	Avira URL Cloud: phishing	unknown
https://gtm.you1.cn/public/shared/images/buttons/icons_16.png?v=5);	chromecache_619.2.dr	false	Avira URL Cloud: phishing	unknown
https://gtm.you1.cn/sharedfiles/votedown	chromecache_893.2.dr	false	Avira URL Cloud: phishing	unknown
https://gtm.you1.cn/app/34010	chromecache_631.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.steampowered.com/vr/?snr=1_4_4__125	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/actions/communitybandialog	chromecache_332.2.dr, chromecache_374.2.dr	false	Avira URL Cloud: phishing	unknown
https://steam.tv	chromecache_838.2.dr, chromecache_344.2.dr	false	URL Reputation: safe	unknown
https://store.steampowered.com/app/1989070/Synergy/?snr=1_4_4__tab-Upcoming	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/sharedfiles/filedetails/?id=3247255367	chromecache_631.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.steampowered.com/app/2150910/Spellcats_Auto_Card_Tactics/?snr=1_4_4__tab-Upcoming	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/app/2215430/Ghost_of_Tsushima_DIRECTORS_CUT/?snr=1_4_4__tab-TopGrossi	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_3-4.pn	chromecache_384.2.dr	false	Avira URL Cloud: safe	unknown
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015	chromecache_716.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/stats/?snr=1_4_4__global-header	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_wings.png	chromecache_384.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/vrhardware/?snr=1_4_4__12	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/action_tps/?snr=1_4_4__12	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/mp4_page_bg_eng	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/app/1331340/Break_the_Loop/?snr=1_4_4__tab-Upcoming	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/chat/	chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/app/394360/Hearts_of_Iron_IV/?snr=1_4_4__tab-TopGrossing	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/app/730/CounterStrike_2/?snr=1_4_4__tab-TopGrossing	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
http://gtm.you1.cn/storesteam/subscriber_agreement/.	chromecache_572.2.dr, chromecache_510.2.dr, chromecache_444.2.dr, chromecache_898.2.dr, chromecache_552.2.dr, chromecache_789.2.dr, chromecache_603.2.dr, chromecache_703.2.dr, chromecache_402.2.dr, chromecache_717.2.dr, chromecache_850.2.dr, chromecache_744.2.dr, chromecache_533.2.dr, chromecache_335.2.dr, chromecache_564.2.dr, chromecache_557.2.dr, chromecache_588.2.dr, chromecache_604.2.dr, chromecache_426.2.dr, chromecache_737.2.dr, chromecache_874.2.dr	false	Avira URL Cloud: phishing	unknown
https://gtm.you1.cn/sharedfiles/filedetails/?id=3247306833	chromecache_631.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png	chromecache_536.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/chat/friend/	chromecache_358.2.dr, chromecache_559.2.dr	false	Avira URL Cloud: phishing	unknown
https://gtm.you1.cn/discussions/	chromecache_331.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.steampowered.com/app/271590/Grand_Theft_Auto_V/?snr=1_4_4__tab-TopGrossing	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_3-4.png?v=2	chromecache_384.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/actions/StandardCommunityBan	chromecache_332.2.dr, chromecache_374.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.steampowered.com/app/337320/Paint_the_Town_Red/?snr=1_4_4__tab-Specials	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://community.cloudflare.steamstatic.com/public/images/sharedfiles/workshop_dateselect_arrow.png	chromecache_505.2.dr, chromecache_563.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare	chromecache_331.2.dr	false	Avira URL Cloud: phishing	unknown
https://gtm.you1.cn/public/javascript/modalContent.js?v=Wd0kCESeJquW&l=english&_cdn=cloudfla	chromecache_331.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.steampowered.com/tags/en/Adventure/?snr=1_4_4__125	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://community.cloudflare.steamstatic.com/economy/emoticon/	chromecache_332.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/public/shared/images/community/levels_waterelement.png	chromecache_469.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.steampowered.com/?snr=1_4_4__login	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://steamuserimages-a.akamaihd.net/ugc/2521530104084608955/F6BB5DAF342F8DE59DE363966B9FD2CE6B60E	chromecache_631.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/app/1188930/Chrono_Ark/?snr=1_4_4__145	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/category/horror/?snr=1_4_4__12	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/sharedfiles/filedetails/?id=3246921701	chromecache_631.2.dr	false	Avira URL Cloud: phishing	unknown
https://gtm.you1.cn/public/javascript/applications/community/main.js?v=soQOTmUzl-9y&l=english&am	chromecache_331.2.dr	false	Avira URL Cloud: phishing	unknown
https://gtm.you1.cn/login/logout/	chromecache_332.2.dr, chromecache_374.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/19.png?v=5"/>	chromecache_631.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/points/shop/?snr=1_4_4__global-responsive-menu	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/app/12210	chromecache_631.2.dr	false	Avira URL Cloud: phishing	unknown
https://gtm.you1.cn/actions/GetOwnedApps/	chromecache_332.2.dr, chromecache_374.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/13.png?v=5"/>	chromecache_631.2.dr	false	Avira URL Cloud: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_3.png?v=2	chromecache_384.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/app/812140/Assassins_Creed_Odyssey/?snr=1_4_4__tab-Specials	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/?subsection=broadcasts	chromecache_331.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.steampowered.com/category/tower_defense/?snr=1_4_4__12	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/en/	chromecache_894.2.dr	false	URL Reputation: safe	unknown
https://gtm.you1.cn/public/shared/images/header/globalheader_highlight.png	chromecache_469.2.dr	false	Avira URL Cloud: phishing	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/1-star.png	chromecache_751.2.dr	false	Avira URL Cloud: safe	unknown
https://gtm.you1.cn/apps/allcontenthome	chromecache_331.2.dr	false	Avira URL Cloud: phishing	unknown
https://store.steampowered.com/app/1158310/Crusader_Kings_III/?snr=1_4_4__tab-TopGrossing	chromecache_894.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.50.36	www.google.com	United States	15169	GOOGLEUS	false
142.250.189.142	ytimg.l.google.com	United States	15169	GOOGLEUS	false
104.18.42.105	community.cloudflare.steamstatic.com	United States	13335	CLOUDFLARENETUS	false
172.217.165.206	unknown	United States	15169	GOOGLEUS	false
23.219.3.153	unknown	United States	24835	RAYA-ASEG	false
23.194.234.100	api.steampowered.com	United States	16625	AKAMAI-ASUS	false
96.17.60.195	store.steampowered.com	United States	16625	AKAMAI-ASUS	false
23.50.112.134	store.akamai.steamstatic.com	United States	16625	AKAMAI-ASUS	false
23.222.77.65	cdn.akamai.steamstatic.com	United States	20940	AKAMAI-ASN1EU	false
23.222.77.58	unknown	United States	20940	AKAMAI-ASN1EU	false
172.64.145.151	unknown	United States	13335	CLOUDFLARENETUS	false
47.57.233.162	unknown	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
47.57.186.72	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1442314
Start date and time:	2024-05-16 00:35:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://gtm.you1.cn/app/2143540
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@18/905@42/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://gtm.you1.cn/storesteam/ Browse: https://gtm.you1.cn/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, MoUsoCoreWorker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.178.50.35, 172.217.203.84, 172.217.3.78, 34.104.35.123, 40.127.169.103, 72.21.81.240, 192.229.211.108, 52.165.164.15, 13.85.23.206, 142.250.217.163, 192.178.50.42, 142.250.64.138, 142.250.189.138, 192.178.50.74, 142.250.217.170, 142.250.64.170, 172.217.3.74, 142.251.35.234, 142.250.64.234, 142.250.217.234, 172.217.165.202, 142.250.217.202, 23.50.112.142, 23.50.112.139, 23.222.77.73, 23.222.77.82
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, steamuserimages-a.akamaihd.net.edgesuite.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, a1639.dscb.akamai.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://gtm.you1.cn/app/2143540

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 49x49, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	77617
Entropy (8bit):	7.979189231681901
Encrypted:	false
SSDEEP:	1536:lDNUSrylt71GnEnvmOTPKmrr6E0zPEkIalNLmKCCOuDnHJ0Mhe84U6hR:liSW1WEnr76bzPBXHyKdFHJ0ob4P
MD5:	472DD7512046DA979FE759F597DD3159
SHA1:	7A4BE725CB3F06B2BD2C536A15C3E37830113593
SHA-256:	844035168D867E2D6CB22E3F168C1E56A060852677577C5088C6D670736CC70B
SHA-512:	0F1637509A546CF78670BE07338398DD90CD72B75C96FB197AD9C3446CE03C0E0CE84B8BDC7CE279C1C5EF67F71980CFE2B3C70EB3FC37B28D25E814D6B550AA
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2195250/ss_eb8f5def662f28726c875e641cd5faff75e6b16d.600x338.jpg
Preview:	......JFIF.....1.1.....C....................................................................C.......................................................................Q.X.............................................J..........................!.1."AQ..aq#2..3B....R...$4br.5s.67.....%CSt...................................C........................!.1A.Q"a..2q.....#B..3.4Rr..b..$5C....%S.............?...-g8...}D`E.GK[.qGG.1.P....r.Pd.l.W.#>SW.J........Cs.m.=......\#...."9.Z$.]..2MWy....2d...+..gR.)...b&...K.Ktf4..y...=.SI.}a..6...%RN.i{\m.4......zm@c...........q ....X.."...R}c....PV.61.Z...i.\|.z}6.....E...mJ...r........Sa..P).E......}B.M.,.i4..T.Om..R&KiW7...Pn.......6.H.bM.\|:...8@.G....'.&.L.....j..C)HZ{.GN..q....W.W...SkR.>.+4.'c..Z.....+J8L..m..2(U...a......'/L...c)..8.Z.4.;.u7.{K6..m.........K..!gc...V...m.@....r.-....5.Dl.h.m-.+..[@..Jk\.e..~..c.v.S}../"..Keg....q.J......uK.,....y...Q.`..KF;.,.U.i.BV..'.[Tu._.....}.%..%....K.B.^.EW..f..ioX..h..9y(Q.4SNy

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	8458
Entropy (8bit):	7.934646387011779
Encrypted:	false
SSDEEP:	192:9LY6fgNGloArF6BvNJsuWTQGSH3f4yt9isss8v47+S1aV7:9LYuwGLM3sSH3f4ytEWl87
MD5:	A8C39725A43ACE487A165D0B4AF74354
SHA1:	6AC1A312BCAE516772E2F095E36ADED03BC83E6B
SHA-256:	15CB6D34EC42AD3520CEF8782C089F56051983D165B1B7C00DBE6F440F0BEEC2
SHA-512:	A66E37EA9D3B91CCD4DE86AFE191C212D5F7583BCBE46933D4437F3C51EA2959FB60EAA0776533BC0D78DC367007D0D64956719637F8BF433E0E86817EE925B3
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................<...........................!1..A."Q2a..#q.B...$.Rb.%&'3Cc.................................7......................!1..AQaq.".......#2...BR.b3r...............?....Br......v-A..8.....%..%c.O.i.qu8.h.~u7..o.d4U.....G....M.mW.i...-F.< ....nI{..........$V=9.....ez.).H.&..{...qB.L?M[.........oLO.e.......xJ...k.z.\.....+.>2.y......2.{.:.....(_J.e.4.i..RRp?c.........vp..'.....O..X.u....F<W.v:...pR.G....cET.::.A#...0O.i..KP.3...4q.Y.CQ...D............c...I...p..y$..@........rjz..;.....q..S..b.j.,.{..V@....'.z.d..j.%..2..q..e.=....v..5$'R7o....].0oj..bV.Rp...I.....NpNO..UL..ag.)^%Z]..39..nH[.-.[....jJVU.8..:$...........qV.({AC.<I.>s....h.7.-...E=..^.n;rbBg.>CD.8.0....!i...+".@.%..V.\|>`.v...3..{.0.G.}...7......XR...R....4.....8.t..W..t.....,.c..

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	90430
Entropy (8bit):	7.968912702227343
Encrypted:	false
SSDEEP:	1536:1/946oq9DVrwDT9dBZPDUm2GIvKoNQfLd2dUaEITQ4LDM9DLC92juG97l99iMmAd:A6oqPcDpdzom22wCZ2qaEp4vMc92yG9r
MD5:	057BF5E56FDC090467FC7CF5F9282AF0
SHA1:	2C0FA39619949CEB6B0E691024CDF6E4A43E3AA7
SHA-256:	85BB2DFD67B4E474A376155211EDC06FE43F798026A4698EABE02E2BD0983771
SHA-512:	1501DC6F57E66A40B33AF8E30A85A2811633885A976B142822CFD85AD1D492FBCD00D010914E31DBCE46D7F1AE3B6B26EAA0285B23AF4755C11FEB0E2E0E0FF7
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1128860/ss_96487c455abe12d84fa57c487e4d05807089eb5d.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................V.........................!.1.."AQ.a2q..#B..3R...5brs.$467tu.....CS......%..8v..DTc..................................7......................!.1A.."Qa2q...B....#3..R...C4b.............?...z..wGN.C..mR1kl...FwWz);2?...l.......tx..w...u.Md....j...].\|..M@../R...~;gKF..]h..r.d=....z.....#T.UJ.Nt.0.}....8....i...F@c.x......b}m.0......o.Y%..`H."e.e..wmp..2{.p.NRubiv:-E.LxQKm......J* ..B.IF.g..*?x.0A9...u..?$VK...}MW..]d.....gtX.h.bI....+....w.M&.9eLjZ....'G....2...Ts.X......k...Vc...l...RI..g.s...B.R.H.'...Z..+..t../.n.. .a..D..H<.`XB.......2c......;...9.I8..k..d.r..]aI.._...PJ.OV.....i.[.........F-.2`.P..Tb=..D.=..F=..t.:.......l.5..q......<..E.N.h.pty0QZX..Z.Ec.'Z.G.\w.&.:.1.B3...4MG.B.rx..P...S...0.....2t....%..S...Q ..7,i..7hP.7..k..n@....A.Hl6..T..C.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	64237
Entropy (8bit):	7.951636807269081
Encrypted:	false
SSDEEP:	768:ekmOsLYOyjI/Gn2+Bthjt1xvYVzmgwDxaHUWQ+XDOYyO+BcQgcK42MoIDBcf6C2o:FsHynfLZizmgw34O3cC95DB26Ca4
MD5:	C96FCF0CDBF68806A49770174811F320
SHA1:	0BCD897ADEF4B4A45A4EC91F8F37495C79CEFA18
SHA-256:	47F02AC4DC3E55FA3F916F05DCEBB0E748EBB73AB459F3ABD22537E1E2B22C2F
SHA-512:	64EF7A8805ECD4AD40B82E8A2460E286AB8FFA80B063764D9411DE51D4D41289D65438A6721B2580F5CA9A98FDC27FBB93B53795F82C877DE21E8FEF0481A181
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................a.h............................................b..........................!1.AQ..."aq.2....B........#RU...$3Wbr..&4Vs....CSTu...68...%'57Dct....................................J........................!1A....Qq...."Sa......2..$BR#TUbr.%34...&5...Ccs............?...a.]X..b.B.K...x..{8S..Wy.X<.......+-.<...b.qC/......<..rK.f..]1..................W...^I...8rp...%...\.s.9..p........... .k... ..J_D7D..>..._7N...0...0....T....... ..p.B..o.}....%k...d.'3.!..w.........HH$..S.E.BiR..\.o.....5...@..J}7...ja....Uk....j..'t..d.i..i..Q......>..\|.50.L.......~.@..)92[4.....H.Q....\..y..sS.$..j..Ze...#.N.I.J. ....-S'.:C.....&A.]...U...I...wU...LJ. .,..'zw..g.\|.`..N]...K.T..0...a2..Y.w......UUJ...S=b\.(3..h..I=.Bs.89..-Y:p.I.A]..y....x-..Fp8...w'&O .....g..c.....==.b.#.\|..8,,0..U....dh.v...^%..js....w..IK@..

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14434), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	14599
Entropy (8bit):	4.9198531640461
Encrypted:	false
SSDEEP:	384:+iMnP6zXL3CqVGE9HueUlKEghpE9umuwaswSdkT:tzWqVGsHhHE/ywad1T
MD5:	52161622668776DB5AC21B6AD4B0CBB1
SHA1:	F8BABC0C73D858F092912411BB7B451CA9AF6C6E
SHA-256:	2CD6894C338FA3A7927AC4D0FC60BCCE27C066051947175D1771CC3633123D07
SHA-512:	BFBC996AFCC90578AA16CA9A2C8C166EE37EE39EFEA785BFB3325CA6DFCA88ADA8EE3D5B2FD9F978266217C01AE1205B0B9E8775FA81A7445930C25F4FD5A6F6
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/navevents.js?contenthash=a4eb1ee72718a7bf1c88
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[4103],{199:e=>{e.exports=JSON.parse('{"unknown":0,"store.steampowered.com":1,"steamcommunity.com":2,"global":3,"default":4,"application":5,"subscription":6,"search":7,"cart":8,"app":9,"global-nav":10,"global-account":11,"storemenu":12,"search-suggestion":13,"about":14,"suggest":15,"dlc":16,"storemenu-recommendedtags":17,"footer-genre-dropdown":20,"footer-category-dropdown":21,"footer-about-dropdown":22,"footer-help-dropdown":23,"footer-publisher-catalogs":24,"spotlight":40,"message":41,"marketing-message":42,"daily-deal":43,"footer":44,"header":45,"name":46,"more-details":47,"notification":48,"login":60,"prompt":61,"join-steam":62,"successful-login":63,"successful-joinsteam":64,"main-cluster":100,"featured-win-games":101,"featured-mac-games":102,"tab-Ne

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 940x250, components 3
Category:	dropped
Size (bytes):	71723
Entropy (8bit):	7.975046220353434
Encrypted:	false
SSDEEP:	1536:4EIBQ3IpJ/fDOsyOHl9eQ4A9fFVyrYbYo95yAj8dmZ4W0AIX:4EI23aasyGFfOrU9Zj8O0AU
MD5:	02A0ADB8033EACFB33FBA9BB1B771B71
SHA1:	BE35A2AF2AEC81B8D1C7B091713446C841964948
SHA-256:	0FD28202E936544C1119CFCB0696ECC75576D64D7A12AC04912B9C9A1AD4612F
SHA-512:	37F93BAAFD7502D1143F98298D5E94225C4CFC4EC8347C23D3BACF11BA3817E3883DFF5DC502AC25BE0DCEA2E534A29E2814E718540CBFF2BE38A5B9867FED67
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 52 x 32, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	1871
Entropy (8bit):	7.348722999646685
Encrypted:	false
SSDEEP:	48:U6wqQNn2x7gtJ3f6gaOO9EI6rjiFYXkNsa:/Y2g6ZOI6fiyUNX
MD5:	27527A60085AF69D263E4FB0019BD33F
SHA1:	22F79CA55A679E13A09E74500AD30C72B66F749C
SHA-256:	7E395F84BB0649858430AC4DCFBD79BF73BB7660D69B9D4FA2501C08F0690CC8
SHA-512:	87A0074CB0A5B109C43556C34486C2A23F40E8726C2A2313757C7EF64473404A7F45E0FDCC5A4F7C8AF0BFE41632BF681AEFC89FC446A8108BCD8C374CA25E62
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4... .....*8k.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:18006B77135211E88773ABA8DAB20EEC" xmpMM:DocumentID="xmp.did:18006B78135211E88773ABA8DAB20EEC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:18006B75135211E88773ABA8DAB20EEC" stRef:documentID="xmp.did:18006B76135211E88773ABA8DAB20EEC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>v.......IDATx.b...?.......O.E.....O...A.@.1...K.J..b_..@.@..J.1L...)oA.@.1....@..._..l.j.5.Gb3...Aw.6p.....J.....@....

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	54844
Entropy (8bit):	7.977657328681563
Encrypted:	false
SSDEEP:	1536:RGl5LxQN9jQCMtxrIr+ZyqXBcCr9ZT8lRrQkjT/j:a5LxQXlqIaXBcg9BsFF7
MD5:	5A159C15DD22F731E8514AC771949A85
SHA1:	7FC8C00FD52A1920BED4F9DB08AD95D8179F5EB3
SHA-256:	BDBFC8126DA44D2F8A85E593D768CA7CE858F0D79ACB1AE893D6F2D6FACE22CB
SHA-512:	25551884F76099638D00EEA973857B0013394712B539DCA0480D9F444F5C37254BF10342FB99EA85EA0F8EE219B251FB9E14E109A82CC844DE4B321E67AB7D60
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Q.X............................................P.........................!.1.AQa."q.2...#B...3Rr....456bs...$7t..Cu..DESv....................................3......................!.1A.Q."2aq........#3B...R.............?...1._=D..H..HL..j.(\...P.l4..h..}...(..:T..t.0.....f@.......c....c.J..JB.F:B.R..1.H2....:..R..h.A .w.L.GA${.8.Sl..{.P.]..%cwr..edQ....R...9OU..T."..r..#<....K.I.....&.'.<ky...>.\...s^o...b.t.F..g.z5..t.m..F$W..<..W..B1.[;...$.Z..>..P..q<D.....".D.?/...o...p.q.F4..'....B.V.Ps.i.d.NA...3)&.Y.N3.J.:.~.r;..q..wV+...T....^q...S&..t....dJ..G..T......<(.lV........c.........<>(..?j.a...0.@.1...c...@.+...0.(+C.]..3......2.H.>T..B.....A.'..y.FE...h.....[..... .M"....x.....j.y..}.C.pMQ..N0..Q..$.@.Fp.N......R.........LB....l.....J.M..G..(b...1...($a...3.*..:@0.E.aJT f:B.R..c.D.2..P.)H@.w..

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2612), with CRLF line terminators
Category:	downloaded
Size (bytes):	154404
Entropy (8bit):	5.337881533074874
Encrypted:	false
SSDEEP:	1536:D1l9Ah60MhmjGFh61e5lnl9bsPdVcTzWMnyN3qxVqGoteFANNfsflM6kQuOEmTMu:n0861e5/9b6dVcm9qVqZfrUEoIm
MD5:	444106254D61C24625741613608F5DA0
SHA1:	2D5B79109AB130C586F006EFF9B3132030E8EA83
SHA-256:	34E7C6C8A8962B8921E20C19BC00A204CACC2BC248D4A0663880EA7FFD03FD67
SHA-512:	96A6A6C6948DE8C819B552FCFA06F9BA13D8102C219E6E4C93D5913B6910AC13C78B1E3641A280377B7915A9BEF9A120C3EFE7B527885ADFF24BFFCFB0272CF7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2918), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	42945
Entropy (8bit):	5.382507721971502
Encrypted:	false
SSDEEP:	768:7bpqbN24GQDZtoJ0ZQ9CmXCMadz/7GwLp+f9HVCMmSNLEbBGlB+24her+:7b8bN24GQDZtoJ0ZQ9CmXn27ZV8CpSNw
MD5:	0B5E63D38A65E70B7DAA762FCD111C8A
SHA1:	21CE90A8E8C64D5789450AED1EB861A7C4F44202
SHA-256:	46C6ED16F11BAF36369B93FB70C0524EB8612A9EEE2779C2C373FD41E127E9CC
SHA-512:	CA8E8F7ADCD00387D046A026DEAAA34116ADEF85EA12478ED1788FCC438FDE79BE05BF0995F4EE0CCF87368332426D96956F0A29CEAB6388120079805F8CE474
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Steam Community</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://gtm.you1.cn/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudflare" rel="stylesheet" type="text/css" >.<link href="https://gtm.you1.cn/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare" rel="stylesheet" type="text/css" >.<link href="https://gtm.you1.cn/public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudflare" rel="stylesheet" type="text/css" >.<link href="https://gtm.you1.cn/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare" rel="stylesheet" type="text/css" >.<link href="https://gtm.you1.cn/public/share

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9521), with CRLF line terminators
Category:	downloaded
Size (bytes):	103513
Entropy (8bit):	5.3816605944325255
Encrypted:	false
SSDEEP:	1536:aZOYEy9hcyYE1Dl/1DlLyW3XJ0zMzkSTgjN+1emFrO5dXg71Pp40F91Hgcced04N:aZ3Zh7D1PpFFncDo
MD5:	DB701A04690388692E0ACA18A8ED3514
SHA1:	44D7FFC4E9ECBBD899513EEDADF8C379B8BEFC12
SHA-256:	399B9ABFF59D1998F4F7BC5FC3A02FD4983B2AC582F04CC03B5A63A5DE0B4808
SHA-512:	70A4E1A9286A5A0507EF74F57EFDCA06035F73C0CB36E7D282BFA7203D2D42DF16CECD38B92C935F042DCB90130FE67E53ACF1F5FDCECCBAC4E3B46150A75CEE
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare
Preview:	......function RegisterSteamOnWebPanelShownHandler( f )..{...$J(document).on( 'visibilitychange', function() {....if ( document.visibilityState === "visible" ).....f();...});..}....function RegisterSteamOnWebPanelHiddenHandler( f )..{...$J(document).on( 'visibilitychange', function() {....if ( document.visibilityState === "hidden" ).....f();...});..}............function RefreshNotificationArea()..{...// the new way - updates both the old envelope and responsive menu...UpdateNotificationCounts();..}....function vIE()..{...return (navigator.appName=='Microsoft Internet Explorer') ? parseFloat( ( new RegExp( "MSIE ([0-9]{1,}[.0-9]{0,})" ) ).exec( navigator.userAgent )[1] ) : -1;..}....function checkAbuseSub( elForm )..{...if ( !$J(elForm).find('input[name=abuseType]:checked').length )...{....alert( 'Please select a reason for reporting abuse' );....return false;...}.....CModal.DismissActiveModal();.....var params = $J(elForm).serializeArray();...params.push( {name: 'json', value: 1} );...

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	4925
Entropy (8bit):	7.892295617252778
Encrypted:	false
SSDEEP:	96:o/YDi8oEUE6SXI7OB74+ODMVsET1Q7lMOM+uUkdL+2XVFC7wL:f3UtANVx1Q+OZuUgtXswL
MD5:	AA4871F2A1B19DB3C61C779AB453399B
SHA1:	95216C79095F80FBCC6D75E4DB658E384C263F69
SHA-256:	60CE5C2314F8A5E0A20DF60C504F89D9F3BAC8A17FF01DF22C708D5884DB9E7F
SHA-512:	CA20E344E857EA30B22D6406CA4F0F9A433007C97A4FE9992DC8429FE34E2D5BCC040847061D62D33298BC3548178920C73100173ADCDDAB0591E77CC053936D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E.............................................@...........................!1A.."Qaq.2....#B..$.......4Rbcst.........................................................!.1.Aq"Qa.2B.3b...............?..:.T...D...RV..!.s.=.M...x..3.DV(.....1....v..v.}R..K.....^VV8...^c........<..u..G.)>M.86....(.<..'...aA.r..9..~..:.B.+..y=..ER$..>\|...q)..y).....=..n.....Q..23............@.`.w..n~.7c.....?..@_`.cJ..W.....F.m{0.a[...x.Q&..).S.t.....f.m(.$c.=...5..+<....S...5.J.#v3.a;..l..$....a..d'.u.YZ.y..m...Ob.c.0...#SZZ@.I.=...<%J.R:..S....7.y..8..a....e@.....Ve%............{.i._.c.u...%Q..1/'{K.../?.Z....RJ...PKJ#..1...:...V.Zb..v\K.*.TQ.l\|..-...sg..18wQ......H.l.1..s.a....`...R8...J...l..W...A.m.M$`.....F.2l\.....Fx.........N@$`.:.<P...K.....u..4e6.....p.....[5ps.z.....5.-.aA`zO.....u..7........d.......q.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54246), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	54411
Entropy (8bit):	5.159663776713257
Encrypted:	false
SSDEEP:	1536:BM4ysILXkkSxhurRk4WMfIRdb8Ms+CgJB6YPBmupRF2z0p39xUg0EcVWBFTxn0np:c
MD5:	FD9DC85D22039904905F3B621B3A818D
SHA1:	B07D0A819C81BB1EBCEC8D95080E830021317AAB
SHA-256:	8BACD65E6F0186344F7513C97BE393549552F452F24BBF1613C122F5424ED7B0
SHA-512:	0E12504A76F66098075FEAB90051CE122AC70F4E5EF8DBD2C12FCEE6C6B1D2680941EFA4CF3178CFC4498E5137BED5E0550999A1D0251D43F3FCF4BC7B60FC1D
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~25d238eb8.js?contenthash=ac954d69fdf4b21a0a54
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[397],{18015:(e,r,t)=>{t.d(r,{AE:()=>te,DI:()=>J,Er:()=>C,Fi:()=>l,Op:()=>Y,Y3:()=>S,n6:()=>v,tj:()=>m});var i=t(10059),n=t(39087),a=t(79545),s=t(23722);const o=i.Message;class l extends o{static ImplementsStaticInterface(){}constructor(e=null){super(),l.prototype.appids\|\|n.aR(l.M()),o.initialize(this,e,0,-1,[1],null)}static M(){return l.sm_m\|\|(l.sm_m={proto:l,fields:{appids:{n:1,r:!0,q:!0,br:n.FE.readInt32,pbr:n.FE.readPackedInt32,bw:n.Xc.writeRepeatedInt32},language:{n:2,br:n.FE.readUint32,bw:n.Xc.writeUint32}}}),l.sm_m}static MBF(){return l.sm_mbf\|\|(l.sm_mbf=n.Bh(l.M())),l.sm_mbf}toObject(e=!1){return l.toObject(e,this)}static toObject(e,r){return n.TA(l.M(),e,r)}static fromObject(e){return n.aD(l.M(),e)}static deserializeBinary(e){let r=new i

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1131
Entropy (8bit):	6.4092903344223995
Encrypted:	false
SSDEEP:	24:K1hpunQWwjx82lY2T32HEVcFIlyJ3V3ApRYGPbni6/9VrI/Z/:oitNn2V6aUJ39eRYmbi6gh/
MD5:	96C60098E888AF1BC5AE43C93034B017
SHA1:	44317B6E92C020C7B467737DF6702858972830D8
SHA-256:	101DCAAB2AD4A31C11DBD87A661B1324C5DD52B43A1EA814234F5BBC78993286
SHA-512:	5CF976F8A16F946A24CC5E5ADD367ED58BD3A824947285902ECA30660EEA29758FBCB443A7A1D201BF7409EE6A8BFEF64C7C5616A56A86D7FA08D5A8C641B4E6
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/icons/icon_rate.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:241EC21AC7C111E18697A146FF52EB58" xmpMM:DocumentID="xmp.did:241EC21BC7C111E18697A146FF52EB58"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:241EC218C7C111E18697A146FF52EB58" stRef:documentID="xmp.did:241EC219C7C111E18697A146FF52EB58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>N.......IDATx.b...?.6P{.O..z.l.r...`...H...\|........v ...AP..l..$v=>..A...%..Gr:.............}....h..\. .S......X.h..l

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	downloaded
Size (bytes):	50090
Entropy (8bit):	7.9877696521936645
Encrypted:	false
SSDEEP:	1536:bQhVRDUtqA4L7Bt8B8BH1gEvY2rC2oN/WBhE2K8Rs8t:bQ9DUtqTLF6aluEvpC2s/r8Rbt
MD5:	E43EF1D4C2404E0B359BD4863CB8F5F2
SHA1:	B15538ECF51528D788BB702AB31446CC4CF5118B
SHA-256:	A892940C16B624634E7AEE70B4A8CA4485C952BFF0A85FDBBD13428C54B762F1
SHA-512:	A83E866F6BB39F50179602C1E0E6E02DB8D9A51FDA31DB1930335929BBA90B05F523F6ECB74A33A2731B9594699B41334573955F10051A49EFF8B835F5D2A415
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2479872440761801447/603A4A5DB37701810870CF40D6C25B497B596395/?imw=512&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........7.......................................................................x.).)W..x.......c.{..........>...P....'...O....]..k...{......Q..mwu....r...j...'.mv....Y.._.fh5.. .. .E,..Tb...d..E.`=..N..........G...t......f"...\T:@.+...g....og.Om..}.t.M...."]=P...M.J.4TH..Vb.S..#4r.4..+%....{Y..2.B.j...qY.OJ........W..P...%...g8G?.."......p.U..i#.6.....:{.tk.6..}../......M...Z........su,...S4.L.................3...78..........W..yA..l.ro3dr.s/?....tCl..z{p.y.U.Ry....pTJ...R.6..F.../FUV..{qn....)N{../..a.o..0v<(4..........&....z;....d.c(p....Q..$\|i.i..A.mg..2..P.W.W.O..$] `N....v).^j.Z-....%.. N.Hb....L5K/%3.K.8b.Qx.CoWy.8...%\.[C=x...s.Rv./.n.(.Om.s...&.E#(hr....E3s....m......[.........:&.k.!n<..@.*.L.8..=.i>..[.....&[F-......CVX..%.4..d.iD..].c..+l(...$).m...M:WB.V.... ]\|..:s..h..,..^.}

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1430
Entropy (8bit):	6.915444207165524
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVag7yJ3VR7GmXF54+mC8yq8/23CMwMIE+b8Dllc:HZNn2lpWJ3nnwDNmlPbUI
MD5:	AFC159FE5F0F26FA7282505DA9887CC3
SHA1:	C1CD55380C2AF435876989F94E8B0715042C2ADE
SHA-256:	4BE942A34871DD6F8F14B43D27C31B049BE7F6544C05685D4F35ABDD329DE176
SHA-512:	8F7DCB7E99CEED8F86575A05FF7D329EE2FC67CD18C6D53B2833A6AA1EEDE2586D57688F27901D941D2B6351412957468CCE5CA69101D86911390BF04FD82763
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:6E745BD792D411EE8F80E4F5B5148EC9" xmpMM:DocumentID="xmp.did:6E745BD892D411EE8F80E4F5B5148EC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E745BD592D411EE8F80E4F5B5148EC9" stRef:documentID="xmp.did:6E745BD692D411EE8F80E4F5B5148EC9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{KL.....IDATx.b..U.d``.......@...4.....0.4.9...[`...e.5U...6V..G..d.....I2.].......?y.............^./....&.....

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2386
Entropy (8bit):	4.183316172102115
Encrypted:	false
SSDEEP:	48:TqnmXMEFR7r74gMWON+Oih7ScqC6xZVdmdUg+IFH:gkMEFRv7PvON++NxP0dUg+mH
MD5:	FFBF4A94D94A5FD3849D3583F2567F54
SHA1:	58BE3D7CDD61E323C08B5986B8D89B71167E4F85
SHA-256:	06F503B84511C712AC8105D8C0CBB72923ED4B53FF67FEAD87C6415209A8AA06
SHA-512:	DAB2EEC9932622AD549F97801908BF0F5AB1102E32BA4F43F50E44000F62F7F7F868C5D57789060CD5D6FB255FB3329120708C2F43F3587C3FAB98F784FCE44E
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/images//award_icon_blue.svg
Preview:	<svg width="13" height="21" viewBox="0 0 13 21" fill="none" xmlns="http://www.w3.org/2000/svg">..<path fill-rule="evenodd" clip-rule="evenodd" d="M5.80814 0.197492L5.19324 0.62086C4.96265 0.774812 4.69363 0.851788 4.38619 0.8133L3.92501 0.736324C3.42541 0.697836 2.96424 0.928764 2.73365 1.39062L2.4262 2.04492C2.27248 2.31433 2.08032 2.50677 1.8113 2.62224L1.38856 2.81468C0.92739 3.00712 0.658372 3.46897 0.696803 3.96932L0.735234 4.70059C0.773665 5.00849 0.696803 5.23942 0.504648 5.47035L0.23563 5.85523C-0.0718184 6.24011 -0.0718184 6.77894 0.197199 7.20231L0.619941 7.81812C0.773665 8.04904 0.812097 8.31846 0.812097 8.62636L0.735234 9.08822C0.696803 9.58856 0.92739 10.0504 1.38856 10.2813L2.04189 10.5893C2.31091 10.7432 2.50306 10.9356 2.61836 11.2051L2.77208 11.6284C3.00267 12.0903 3.42541 12.3597 3.96344 12.3212L4.69363 12.2827C4.96265 12.2442 5.23167 12.3212 5.46226 12.5137L5.84657 12.7831C6.23088 13.091 6.76891 13.091 7.19165 12.8216L7.80655 12.3982C8.03714 12.2442 8.30616 12.2057 8

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	47940
Entropy (8bit):	7.982125939444349
Encrypted:	false
SSDEEP:	768:u9eULTg2t3IEHpGSqmB6qRYuBvj3FTyoKP802xqYdUmRX4PjN//y23C8f1ugJvPG:LU3g2HVqmB6qRYuVjVeRE0E/RluV/rBO
MD5:	BA2FC5EC7E6556BD124CD6FDE7FEA9F6
SHA1:	49F096BEDB72F75696CDC00F8FCCD475B200B58F
SHA-256:	8D73CAB994B7BB25AF353F873F924F12488972D4FBD659FF2C89351DDA825F7C
SHA-512:	EACD5C13C3E8E26DE59C0CD5DC1465E6951A3106ADC56F171C28F5F82DBDF7E0E45B64987B5EAE22073F021B26E88DA6707E945A6513525CFF94586684F8F075
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................................................................`.........................!..1..AQ.."2aq.B.....#R.$3b.....%8Crtv...'7Su.....DTcdes....&45Uf......................................I.........................!1AQ.."aq..2.......3B#Rb..$r..4...%.CDS..&c...............?..0\|.}.(.B.@......@.B.`....,.t.#F2(...1.QY(.tVF....P..X(.&.WGEd.P.J..VN......7..]..(.`f.......VTVJF.G..@.....p.9..3H.r.4.psB..F...fY..?.Gu...@RR.....S..v3....2.d.}.K#p.c...XB..@?.lD.O...h.....QO.4..%@...b..%v.!x..r<. ....ZltC.....&.@.C.T..EB.@.D..0.$y.X.".].Rl.t(....VK..>4V.@...B.@..y....t`r.l....VGt9h....VF..%.....A.(.B..PA.H4..c.:....tk.....%.#..P!..p.9.d.Q.Y,..4VK.. .h......QY).+%.d))`.Ed.V@.M....VJ..$.P..M...e.Rl...b...(.)6N.....U.R...`...y.l...~.)6K..'.d.PBJ.3A+0....S...)..O..>..F..v..NR7.u.5.(..t......2NU.q.<.NAr.R.fpcS..iwW.1Q...6....$

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/footerLogo_valve_new.png
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 500x250, components 3
Category:	downloaded
Size (bytes):	55032
Entropy (8bit):	7.967319755260824
Encrypted:	false
SSDEEP:	768:4Yyn4NpPmLHzCY9mTYfMzFKUCgegecg/0Iro8tuTwpvUBhCYPLp0Agn5VbeSmK4c:4ErmDhfUQDBtEmqXFE5VbedA
MD5:	355368C09AE89434B648D473EC54F5F4
SHA1:	36FFE749E3C296D6E57DA59F463CD2AA8F69B0D3
SHA-256:	AF611344E2754103ACEF3E836D8CDFD1970391514324A3495CC04128CAE9B672
SHA-512:	390540ADB50F913669816189B8B215F76D005489E87D073132D4F958FED52C5D0A49590499A14FEA6B2A1863EFE7DFD4046A087E61661B9EDF8805423021B22F
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_mobile_english.jpg?t=1713912919
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	61474
Entropy (8bit):	7.9741045219306255
Encrypted:	false
SSDEEP:	768:UHBB5KieMgXfLdMgXMnXC/XlnhOFvn2HwWUo2T73oAwSC/gvJT9ZNC0eOOu/:UhifMsLjX+YG2QHT7MSC/gRT7tRf/
MD5:	B28F8EB8E2C86998A7A5096C41E3DA30
SHA1:	E95BD1DED8989933F11337FA165125D70DBC88CA
SHA-256:	D38AC85C8FC1BCDF56AB8FF9D3877455217F1BDFCE1F7C664928B0B01AABFA40
SHA-512:	18298EE9E4C81A081F92CBC4716590AAE5E43D7BDA405ED5D4F96625DA9F8EEB1577759CFD35471AABA2D4B418467604DB883072548C645853DE7922B518B9F2
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2344520/ss_eb1f3f7fb6ed95feb162011fbbe24b24d6ed5e41.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X...........................................L.........................!.1AQ."aq2...#B.....R..3.4br.$5Cs.t....6DScu....................................-.....................!.1A.Q"aq.2B....#R................?...O=C$wmf...lyp..r..z...b..w..._..e@..v.m.]..NR.2..".j.l8....D.A...@.....zA.eK.`o.............?.e}.0.[.....j%.Xm.;....@.S,......A...`.y....r......D......]#...W...CP.6`....^.r..E hj. .ga........M1..<.........%...M.....e\|%.....?.X_....!......M......@.Je.a.R.\\.s...@..7.......}.!]@...z...TsD.E..u..\Q!`...........%b......Xh....H.uV...Q...>. ..6..!...3"........4..[V$..7.%E%....d....k.k..4g$..\.ko..../..Er.6.\|2}........nW..Zf&A.D)(..8$.....h...h.....X9Jr.9.n\....`.(.X..JJ.....w..k......A..R....f..#1.K.l.........d...AO2.....X..)&..h.u..~....s...V.+.o\.H...{.\l,0!0.Tp......'....V6..S.P.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64904), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	171828
Entropy (8bit):	5.091704936654187
Encrypted:	false
SSDEEP:	1536:ps4PKffp9FVf2HBeZTjxI1slCWW9sEbsgsfRc117tUCqU3A8yWiSgzgPMNSrf:ps4PKfx/VhTjHlCNOEArfKrxRJS+D
MD5:	BA2E4AEE11CA190AFBA5D42359F0EE07
SHA1:	CE84ACF02392ED04792A6B454EB756354A9D36D9
SHA-256:	F50BC576D37E64EFF0F2BE682AF666CB8548CD3325093A2C448FE0668BF964F3
SHA-512:	CA3EA65FE78123481776BD43D6C1F8011E162B671B09A2105B126C1EADA7CCDC865E04DD84294A9B7972A42B6232B55E81D027F867FF16696FF1715DC317C76C
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[1546],{12445:e=>{e.exports=JSON.parse('{"language":"english","Summer2022_hunt_Intro":"Greetings from the Future!","Summer2022_hunt_Intro_1":"I am Clorthax, a time-traveling trickster! I know what you.re thinking: \\"A professional trickster? This sounds like a trick!\\" That is a reasonable concern! But what I am about to tell you is not a trick, and to prove it, I will type it in all caps: THIS IS NOT A TRICK.","Summer2022_hunt_Intro_2":"Okay, it.s a trick. But only on the people of the future! You.re going to love this. Why? Because I have stolen the ten best games from the far future, then traveled across an ocean of time to sell them to you! Exclusively on Steam!","Summer2022_hunt_Intro_3":"Anyway, I can.t outright tell you the names

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 233, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	127133
Entropy (8bit):	7.990730885534633
Encrypted:	true
SSDEEP:	3072:TpZpGeGgFKXOSwDvmVWjNqDeWtY912HxjP:TpPHEUDcWjAqyY/yxjP
MD5:	24933E83B3BFC2081D99FFC24F448C20
SHA1:	932B3F9283FB3F29D0B6999F1A4EEA2078304C92
SHA-256:	C266214DC0A56C895FF22BC6784F3674363AEE2519CF59F6764E31FBAF2DC381
SHA-512:	5B9CD1A226C960423EDB1A965E5BA362BED973F7DF42AC4CB014AF8D08A0D00E6423692AF36DA42A050F83D4D5E853ED354BC145AFFF67DFA96FB7F36C3B5013
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/categories/homepageimage/category/rpg?cc=us&l=english
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............caNv...............<'A......IDATx.t.w.e.u.....'.\.....s@.F.... H...DS.adYa,..#.c....{..c{l...F..%J.%1.. ...@w.sWUW.7.......j.S.SOw.Uu.{.w..]._....!......Z..\|c.c...1...n..!@......J....B`..s=\..$~.....Tx~...(..y.m^\|.Yfgg..)..\%.]...x..1...%zQJ..$YF.gXcP..4.Q..w.@..V:..ap....p..X,.(!N2t..z...@..r...,I...q.]7.kb.S.\.......,/.....i..\.j..k..A..,..-Rv+\|..G8r.a...m........l.3./.....@...h.."....Z...m.R.8F).....E.8...&.I. $...D....!.........O...D......\|.O....6.(.'.)..J"..WJ...+MQ9...=~#.F..-r..eV2I..6..fl.RKf$.Z..)......dY.v`...0.&\|.S...............s/qe..Z;....2.E...MJy...yV...c...<.....;......J.......s.Rb..d....]..-A..j8.....A.............X...N....."en\..&....k...?3.....B....Z.1.cRZ....kI...\.4E;.8.4M..K..bss.8...Dd..!)..CC..8B[....(&.4q.c..w...0..&.RH1.....>Qfi.:diL..buB...i..`._..).+.......R..P.KC....^..SS.....j.fd..fum.4.q....&.b.KQ......

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	3475
Entropy (8bit):	7.82391106031112
Encrypted:	false
SSDEEP:	96:PVb3cB3FHRHklW5v7nbOOJlgWsnKOfJfk1kG:Q3FHmcTbhbgWsnKOxO
MD5:	6F4A0B74BA2F83D92C003FB5E8492203
SHA1:	331A8353BA4DC76D906ABBBB02550030A257D7DC
SHA-256:	AAB775FE3029C051B926114AFE9B5BCC7B50B851DEEED5F83097A13B31A463D6
SHA-512:	7CA6CFED18A3D773255149896559F2591B2CEBFAC8DF9E33E265CB81BBE264718D21E223E99622D91C3E06711FAAEE538D242AC8E6D40921C2B8A291A98E7A8F
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."........../.............................................................$$.DL..t>C4./....BF..L#.h.V..BI....d.p6.......M."./..).j.....'.qV.~Z...."..;..-.K.y..E.#..?....x..7..'.x.F<I.{GG......C..8..T.<D[d.dr.b....5.D6.&....v...G.0..:.o....%n.2.D.M:l2.#...L....H..#}w..-..S.h...e`.&r.Z.}...z..1.HX.....Gh....3.B(1W.(.Ur...+.. .....g.Q..(.%i.HI!...4v>..).../......~.m.h.k.eb...H...-.............................!.... 12Q."%&6...........(:.`_.U.qw\.......+....?.......SVsJ.K.M...$;)..V.Y...;9o...^.(.tf..ez..2...VP....$..L......K.n...........q}.B........tVni.3Y+..i.N...1..y....J.(.9....Z...Z'#j....Z........IT5k2.7%;.v.....b.~.A...........Zf...L......Q....S.....$.0Z$...s.[...Z.n..mu.9.PQ6...c.7..AV.?.d.A....zQ...g.uM.+.Q....e5...Gu@.9.>i.*......,..b.&...~]......6..9s..R.@..(...(.D...}............6E.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	3208
Entropy (8bit):	7.513425698289387
Encrypted:	false
SSDEEP:	48:3FHwXprWPLjhl4TRpiPvZmjkzpB0IdmXgl7gpx2DgG1LyZtngoA/3zlSMilKNhGa:3u5CPxl9hUQipx2k3ZtgoC3sMnNhOQ
MD5:	928E54C4C9683D8DD32867EE992D73C4
SHA1:	83B3252952E1E8C98DEB5E6EB64E150C594DD97B
SHA-256:	0C4D1B66CBED8C0BA7BFE1D047409E80B99684794BA66E9556503890EAE17F2D
SHA-512:	C15C4090AA376F1DB432B300A265BA504BCB5884F5FD312CEB662E9CEFA921E5D606D332601F4D593F04DCA33EB9FA22BC5110632406DE232A0EB38A1872B488
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/images/login/throbber.gif
Preview:	GIF89a . ..........,,,aaa999PPP............555...............!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ......Iia....bK.$.F...R.A.T.,..2S.05//.m.p!z...0...;$.0C....I!.HC(A@.o...!39T5.\.8)....`..d..wxG=Y..g...wHb..v.A=.0.V\.\.;........;...H.........0..t%.Hs..rY<H..........b..Z.b.OEg:...GY]..=.A.OQ.s....\b.h.9.=sg...c..e....*...f.7D..!.......,.... . ......IiY...YF5..F..R..Tb.G.J....L..d...&.Ymx...... \...@........ ....1..&R....H..4.1Q..\|V..%.z.v...#j0....l.Gg{0~..<.<..[.[.h.x..G...y.........[.0....G.....P.z...h...kz..i....y....h\|z.h.G..V.......\h..[........&.+..W.7.8...!..!.......,.... . ......I)1....1G5d].(..R..T2..jL.{..< .[.5.M....0..)... L...I...m..E..`....p..U....^f.%..^.......u.;..zz.}0.X....S0.ew.y.k<..%..O.......z..{....\|......%......F.i.1.0......Y.....8.x.....z..@....<...............8..Y<......8.\.P.$...!......!.......,.... . ......I.....g.EU... .R.a.TB.....p>'...e..$.."...\.#E1C.n.....~...J.,..,Aa.....Uw^4.I%P....u.Q.33.{0..i1T

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	80656
Entropy (8bit):	7.979237033696159
Encrypted:	false
SSDEEP:	1536:bWxiUEfhV1jKTzKT6WWikTbWVcxBdxQz1FFFj8y2b3SKM2aUdlojUeaHwoHy:JbKTuT6rd/WifQz1tPI3SKeiKpaQoHy
MD5:	78B7FA872541FCDB16B357F09364C72F
SHA1:	94C8727C2B7EE308964579344D0024E0360B5E96
SHA-256:	F25683DB8A8FD021E2AD52A99D84CEF9F1480ED1C00783F6619C6DA0E39A2F00
SHA-512:	41A8AA63120D3E724FD232E505F241DF72EF8720DC1E04B2B65F09C774956FFD6597BCA7B64E7CC04400AECCBEB41D5608F49DCFD0EA7DB5EE8E0BD37EE163BA
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/553850/ss_0c79f56fc7be1bd0102f2ca1c92c8f0900daf4fb.600x338.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Q.X............................................J.........................!..1A."Qa.2q......#B..3Rr..b.$4Cs..5...Dc..Stu.................................6......................!.1A.Q."a.2q...B....#...R3.$br............?.....8v:....U.P@.S..".L.\|.. ...,..\|~g/I.3......>....e......dY.W.Y6i%.lN.}"....k..X.3..b......q...U..5.1..fY.f.M45y`.+.....$...Y.Z."=v......k..c./.b.nq...n....&yU....MY]I@.Z....U..v..2.S!:..[........)....}%.p.@.q.4.=.5.-..:Q.........f.qh.Ve...EI.p.Y...T.5T.....MK5D....B-....%.S...8.!.>.'...c.)...P..P...-vS....._.Ya.Ei......"qokk..J.....?...+CY-". 8G 0.qp/n..IRk.,.../.#......v:.......\..,8.=....\.:..KKS4..8.p...j.....OK.........nG..x.E.I.<......54a.U..G[.+r..E..l,r$.......o.y<G..P.L..$.......(....-...]L...K......`.,;..?3./.....g.CGG....\.9.2B..F.Q,rz.,.._..\|p.G.W....(.<..j.-.l..

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	83456
Entropy (8bit):	7.979452529242036
Encrypted:	false
SSDEEP:	1536:OBSMA03jU3jzafE8S3WGaJQKxUGE94r8+E5vHj9Sl9rCueWTc6wj:OBS/oAjz18SmGT8UGE99++pSl9rCueW8
MD5:	9A6495F1E2705831C1F5851D2C909F65
SHA1:	5D908832E3C3B353419E8F2EED0A03F00A3EA1D5
SHA-256:	AF166357F389F9493C769BA6B7AEA0E65682D2F6578633109E005C973A95E44C
SHA-512:	A576C0A14BB4FBB54A3864DCBCAFEB500C6D26BA9FA376BAF6B90FDF76C47BE97989C008CF13BB3D8BB8F5141D59FFE4CBF087C8787BCAE3B1764ED1E3B45F89
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1672970/ss_46ee31494b5d144d5ef6670cb5a1564abbc26fab.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................O.........................!1.A."Qa..2q...#BR....3b...r.$456Cs...Stu.7...%D..8..................................=.......................!1.A."Qa.q.2.........#3BR.$4Cb.r................?....Z...i.1............d....a..[.c`....o.#m;.z>..s.{a.._..b.dP0.$.m..gN.q.z;:..z..1.w.1=.D.#.-...h...&.t...=.n....[.Bf..4...@...?M.;..\|1...'.?....\...T..T..1....m...3.7)6.t..WFJ..=.......2...F.....D.6....a..%..=....S.F...$J...[...0.aa.....{6.);Z....C0...V.W...8......k\.8..E......E..%.9pk.JX..e.m.LN=...".. .../..\|..@.:H.{..\0.........!....Um...%A;v......J.lE...B$..PB........\.y,.9O.}SAQH/$^.m..@.8JJKa.X...M.]p.H....H..ie..aMl7X..[..7[...M6\.\r....<.m.+..>$_r.:.......1.b..,)1.m..*.v....0<.0.T0...y!...o$.\|.......r.Y.9p7.)..5...p.....7v@x..s.....t..J......L........

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22672), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22838
Entropy (8bit):	4.872557171851413
Encrypted:	false
SSDEEP:	384:+VicfSf4+JAslpN+MhZxEOIqisxp9RO6orsH1XQSmRyeyZ/84t1SSzNQvIkoVMxc:lp4+blpNN7VMxsgE3kSd5/VQ47hD
MD5:	6C901BD882E3F651F217E8B756595286
SHA1:	A4AC60012194FF6850EF3978710C192E4A980174
SHA-256:	7ECB4DCC1E500D3FED9687C38FEC0F5117BBE6CB0D8630B3D25A7CE04A2E21BE
SHA-512:	FDA2BA95C3DFE78476038170259D50782E47D5C4D6D59D11E6ADB1F896687E9329234A58495805AC3CA23C724E9EF4AE56D3FB28AA98E58180A58F64C5035166
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=deef5c040fa6e28f22c9
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[4929],{5:e=>{e.exports=JSON.parse('{"language":"english","label_play_free_until_custom":"Play for free until %1$s.","promo_ends_custom":"Offer ends %1$s.","label_play_free_generic":"Play for Free!","label_free_weekend":"Free Weekend","label_free_week":"Free Week","label_just_updated":"Just Updated","label_for_a_limited_time_only":"FOR A LIMITED TIME ONLY","msg_prepurchase_and_play_beta_now":"Pre-Purchase and Play the Beta Now!","msg_play_beta_now":"PLAY THE BETA NOW!","msg_prepurchase_and_get_beta_access":"Pre-Purchase and get Beta Access","msg_steam_workshop_now_available":"Steam Workshop Now Available","msg_now_with_steam_workshop":"Now with Steam Workshop","msg_now_with_steamworks":"Now with Steamworks","msg_now_available_on_steamos":"Now Available o

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 291 x 107, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25286
Entropy (8bit):	7.987583348057773
Encrypted:	false
SSDEEP:	768:oiqlwBKgZDTSqA5UXqJ0gGocupTTgM7YCNPi1GBN:Yl2QDJ0pocwgMLFzX
MD5:	E0B66ABD08331C9AF1034CE915A5E1C7
SHA1:	3010E55C0566A30CB0C71D6A182E09AF7DF3CBC1
SHA-256:	15442D410E832F6D63C620956D87B7C50346FA6B6E6BA233052D2785ECB5212B
SHA-512:	25F553BDA1BD5DDFA028B708260C4B98675FD6F199495374051E74C955C56C80FBFBF2ED40D11E8A136E4AA6C1A3F25895712C03065B539F742C5A031EFE54C3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images//gift/steamcards_promo_03.png?v=1
Preview:	.PNG........IHDR...#...k.....<\.....pHYs.................sRGB.........gAMA......a...b[IDATx....\E.>.....m....'...$..A.Q@.WV....w...tf...:?...(....,A..........}.o.k9..n...D.....w..u.o}.;.9u.(.B).B9...k.L....X.%R....B...x.v..(.B)..Hy.............Vo.+tZ...e.[WU.P..P...5.F..T@\)J.9."...o.g.7.x.z..>..bN..kZ.Tto.#...zY...P..oR^3`4i....m..1(..kRT.../..........dv.J.v.....j.."yo$Rk.7....+.B).._^3`4q....9...U......^.I.H.'._...rP....)W.A.}..'.Z..=.$.M.`..J...2...N={h.${"^E%..R......qXB...o.mB...fJ....n{r.9...^....d...8.J........o...U(..T.ac.7.JlSh.Vh1\F..l-.t.R(...0.:...9.=.F....%..#5t.2_.7_dx..F..f.R...."...0.c.P.z...z.{....i.5[...<.....C.M.{.k..}...n;.\|.\|....v [..........!....J..........XV.!(.B.X.p.4g...D../E..WC...v..R..... .......f..DA..M!...P..~T..)..TO~....n,^..$1.m...........R...V..Q(..[.."J)....Y.5m}.hN...A.W..$..T....L.B).1i..2..V4~.F}.........Q../y.{.a....T.O2._w.%.;;......O.>!\..=#$I. ... ..!...&3.k..u....%.C.u.J....3$.[8...2...

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	dropped
Size (bytes):	38573
Entropy (8bit):	7.988340994359931
Encrypted:	false
SSDEEP:	768:MsIrzPcqpp4iWdOyV8A1RBnvitUtlpIBUfnE98jmqt:IzEqgdSqRdIUtNfIuX
MD5:	4DAAA0F7FCFED6B1E10676D1F3A363B8
SHA1:	7C0687F0609D406D082EB84A3FE00C8B6453F411
SHA-256:	6B7017BA8A8FFBCF3F14D7834AB1D6667646E1C691F6B4C4FC239C4F0954CF66
SHA-512:	39EBE60A58D68D7D395C339EB0D587FB5B84C995C6DDB485F499379FDE6CA8968924EA62BBB92DC45CFE20EAE6B193593CBDCF23FB51AD84395199A5FDF6CB47
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8..........................................................................i.XY..p.........,...Q.@BQ,d.K..{..^.y,x....!.0.<~d.?$.S.'....a$.b.pb..........$.PN..X..&/.aGC.#.(..{......lD.,dW..e...).. ..U,.r....._G..;_.......s../.U..\0.q.....a..5[.f..cg...WZ.[T/r_..~...._.q..D..#...U.(S..1S.$.:`...).I...1!b.,3..'..........x..2.K.q.`..y'C..i...?>..z/Jo..c......-...Z..?a:..Z..6..F....X.<.H.........:....,..q..g.......t..}1...~z.7....`G..."..\|...I....4.P.H.M.0P..RU.xr&....Y..'Y..g>.Y<..?a...&...{9.s.]u.... .,.t\...z.......q.\...sk.i....2g....\Fr,{..nx.........s...;];5.[4.pJRg'm.=..8..9,{.kIO]....rWW..../.......q...z.s...J.9...&h....O.n.g4`N.bl.,.l..!...d..o.r...\|......z...r_ZN......\|..Q.....M..P.Xs4.C..E$,$.m...O`.n.j...].)......1.....*...dpa..{y.....j...b?.WO....../.=.I..........

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2465
Entropy (8bit):	5.3724933838939535
Encrypted:	false
SSDEEP:	48:3WpJ/Lf1h61nVb1nV1g1nV+VnRV68rmLnrpspQOkpfUC1Mz83DbXANe:GpUFRVPynyCOkp+zyfIe
MD5:	8DB2FFC24354DBC4B5A7BEBBC2B3CDAF
SHA1:	311653110625167FDB4CE22E8F147B717BCE6649
SHA-256:	E888E754E20A1B354BB45B59A05D7B281FEE588A445854116B2BC84620FBF7F0
SHA-512:	D8F68A847897A012E2658E851012D1E01F97BFF7E0647C26D890367CC065709D50BB872E8050B3B1D185CB5AADA7D589B625CFB2E78B6365510EABB580DEE998
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/skin_1/modalContent.css?v=.TP5s6TzX6LLh&_cdn=cloudflare
Preview:	...modalBody..{...overflow-y: scroll;...overflow-x: auto;..}....#modalContent.modal_frame..{...min-width: 310px;...height: 600px;...border: 2px solid #304a66;...border-radius: 2px;...-moz-border-radius: 2px;...background-color: black;..}....#modalContentTitleBar..{...color: white;...padding: 4px 2px 4px 8px;...text-align: left;.. background-color: #304a66;.../background: rgb(88,88,88); / Old browsers /.../background: -moz-linear-gradient(top, rgba(88,88,88,1) 0%, rgba(76,76,76,1) 100%); /* FF3.6+ /.../background: -webkit-gradient(linear, left top, left bottom, color-stop(0%,rgba(88,88,88,1)), color-stop(100%,rgba(76,76,76,1))); /* Chrome,Safari4+ /.../background: -webkit-linear-gradient(top, rgba(88,88,88,1) 0%,rgba(76,76,76,1) 100%); /* Chrome10+,Safari5.1+ /.../background: -o-linear-gradient(top, rgba(88,88,88,1) 0%,rgba(76,76,76,1) 100%); /* Opera 11.10+ /.../background: -ms-linear-gradient(top, rgba(88,88,88,1) 0%,rgba(76,76,76,1) 100%); /* IE10+ /.../backgroun

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebM
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.997895758314701
Encrypted:	true
SSDEEP:	24576:AJ2BC8v8FWGe35dcLNfE877Ip6vBR6D36FSnAhNzMj9LLrA1:AJ2BCg8e3zF+vABWNzMjpXs
MD5:	35065F387BEE86E344485AED42164AA8
SHA1:	32B59EB6B1B9D2A4FA7C8CA3F43E3868F37B7B45
SHA-256:	4C11AF02F10C49385F53A65FE5E975CE8BA0FCFAA843C28376EC3A6D9943751A
SHA-512:	B952800E5BE5A897DD4B3DEE5764F510A8177C7BBCC2093A23F26BF3E208C52D71510E84071EE4EC264A9527B84E73E72846A4E5F80C8F975777CADA59B50BCD
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/webm_page_bg_english.webm?t=1714777083:2f771c0a27d033:0
Preview:	.E..B...B...B..B..B..webmB...B....S.g....../..M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...MM..S...S.kS.../.........X.........................................................................................I.f....B@M..Lavf59.27.100WA.HandBrake 1.6.1 2023012300Da..1...a..D..@.@......T.k........O..s.Q6f..$Z.."...und..V_VP9...#....U...:....U..U...U...U...U...U...U....T.g.ss.c..g.E..ENCODERD..Lavf59.27.100ss.c..c.Q6f..$Z.g.E..DURATIOND..00:00:08.000000000...C.u+.k...!Ha.....I.B`s....8$..\.......?....._....../.......w.:.....W..+.......g..;....^cv.....'......?.^.z2N....:..>...c....z.....{..~.....].s..G.>.....}wc.s.:oo.V..........?.9.....9.U...>..8.....n.W..}(.....W..!u.W...>O.z.?.9^[.8.p# B.w..l...~0...C.g..._...-cT;=7"...b....#.$.64P...Q.z.;.;..!Af...P.z...t.3....o......{.....U.....S..\.1.b....n..mb[...5..Q.:...<...: Z...8._..@.o.C..M1{.X..m6...I..%...[...=.@..-Z...........q=t.'.7...2..'.v.P.R.I......e......g..'TtR.D.l..T.U:l.3..-..f....t.*

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 306x260, components 3
Category:	downloaded
Size (bytes):	86549
Entropy (8bit):	7.973737592082251
Encrypted:	false
SSDEEP:	1536:4IZHMs+FIiIMBdr0zSCL44hzLIdzh1Gk/gi0AHH0Ez0sF0A25/L03VnV+:4LbQMfAS4adiG3tFuxaVnI
MD5:	8F754D9071A177F600383B3A7660802B
SHA1:	CB6DAB45D0C44817755A8A8FB73DD115C8678AD2
SHA-256:	15626B08F326ED89DF364705BB33978EDA7B3F3759B052C9DC88B90A9423797F
SHA-512:	72A6A2BE71D479B900F535313D8F096AC38FECF94ED56468739DDCDD69F0640F8D3F6F495D85D704AFDB1F121AA39F5E64603C77BD49ABFB68DEBCECF695275D
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/spotlights/18ad2861aa907ac1a68cb231/spotlight_image_english.jpg?t=1715630351
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (629), with CRLF line terminators
Category:	downloaded
Size (bytes):	12554
Entropy (8bit):	5.543413557089447
Encrypted:	false
SSDEEP:	384:CDmFvVcXIeIHegmg1RfxpJc8dIG4GLqE8ps18YUEV5o4LYLcsuSd:CDmFvVcXIeIHegmqRfFc8dIG4GLqRpsY
MD5:	0A6A796CA63ACB94CDD01A9A660CF640
SHA1:	152DA69B31E2BDE9EA418EE99B3707F8923A3F62
SHA-256:	13DC96A38051C7265FC09C2D6715C6A1B24DFA215AE7D05334DB48844B3A1F5A
SHA-512:	315B4C330B82E0FEDA4A76BEEAFBEB4FB4F3CBBDE70F2173739DCBCDBDFD766CF0F8DC203E8ADC02695DB319A069381F817BB1B5A96347C4A3A2F507F16543DA
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english
Preview:	.....a:focus {...outline: 0 none;..}....#headerBar {...text-align:left;...margin:0;...padding:0;...background-color:#111111;...width:100%;...color:#545454;...font-size:10px;...margin-bottom:0;..}....a.headerLink,a.headerLink:active,a.headerLink:visited,a.headerLink:hover {...text-decoration:none;...color:#959595;..}....#headerRight {...float:right;...padding:0;...margin:0;...padding-right:27px;..}....#headerLinks>p {...margin-bottom:0;...padding-bottom:0;..}....#headerRight .personaName {...color:#cfcfcf;..}.....headerLinkActive {...color:#cfcfcf;...font-weight:bold;..}....#steamLogo {...float:left;...margin:0;...padding:0;...width:105px;...height:54px;..}....#steamText {...margin:0;...padding:0;...height:35px;..}....#headerLinks {...margin:0;...padding:0;...height:19px;..}....#headerLinks>p {...padding-left:6px;..}....#subHeader {...position:relative;...margin:0;...padding:0;...height:36px;...background-image:url('https://gtm.you1.cn/public/images/header/lowerBarBG.gif');...background

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2612), with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	154338
Entropy (8bit):	5.338960315763034
Encrypted:	false
SSDEEP:	1536:QAh60TGB1e5lnl9asPdVcTzWMIyN3qxVqGotoM6kQuOEmTsojv6slCZ6uaqFkQz1:jY1e5/9a6dVcN9qVqZDrUEXIm
MD5:	C24142F3365BD38F0C20A31BB1C66407
SHA1:	4E0AB436CBB858168DA42A8F4779F3D56DDD3AD9
SHA-256:	CF5D3E3C3016A170F4680AB8D63EAC112A89D968A772B52808DD4172E9B437C1
SHA-512:	A3D1B6BDFB798C323C5D33095B14F4BDC9E1C6F7D52AABA058B5FD09F5CCE33B59612D4352BC739F337297DD6FFF025765A91F5B2DABD5341C46D33FF65B14A7
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/javascript/shared_global.js?v=wJD9maDpDcVL&l=english&_cdn=cloudflare
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2429
Entropy (8bit):	5.235452408390452
Encrypted:	false
SSDEEP:	48:XEdaVjNfQAEQfQUyKVy3iP3By3ifQAz+R3cmrLyE/eT0k8shBxMcoLPm:k0jG7i+5PyYeT0ZWCPm
MD5:	C1CB5159A06F36DDB3B429D5F7DE7EC2
SHA1:	5C6FFFA2165B8D9462DA59B198248713D0D2AA09
SHA-256:	30E8AC2D1BEE9DE32E472527CA837FE3D2075458523780279542345E4A98B5A7
SHA-512:	32725F85E2BD3680BC06BD7440D6906BF9AAF275B33F3CCA62FFD2A2605C27E76E9A169D59D1E9A6C64E17D7CDB4F16046896456920DEB3A8B3C99F5898D00EF
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=english
Preview:	.error_ctn {...margin: 60px auto;...max-width:958px;...background: -webkit-linear-gradient( top, rgba( 64, 128, 183, 0.4) 5%, rgba( 64, 128, 183, 0.2) 95%);..background: linear-gradient( to bottom, rgba( 64, 128, 183, 0.4) 5%, rgba( 64, 128, 183, 0.2) 95%);..box-shadow: 0px 0px 3px 0px rgba(20,20,20,0.75);..}..#BG_top {...position:relative;...height:54px;...text-align: left;...background: rgba( 0, 0, 0, 0.2 );...border-bottom: 1px rgba( 0, 0, 0, 0.6 );..}..#BG_bottom {...text-align:left;..}..#BG_top h2 {...font-weight:normal;...margin:0;...padding:0;...padding-top:21px;...font-size: 26px;...color: #898989;...padding-left:17px;..}..#BG_top h1 {...font-weight:normal;...font-size: 26px;...color: #e1e1e1;...margin:0;...padding:0;...padding-top:0px;...padding-bottom:5px;...padding-left:17px;..}..#mainContents {...max-width:936px;...text-align:left;...padding: 10px 17px 0 17px;..}..#mainContents h2 {...font-weight:normal;.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; /*

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	78350
Entropy (8bit):	7.983737487882643
Encrypted:	false
SSDEEP:	1536:1bkL039wBgZErD5fOy06WnaugyOoKaIqqP48W6/8fK7c3lq9ArCB2bDiey:dk7BtD526WnaurdKaLr8W60C9ACBK3y
MD5:	C95EDB1ADF2E60DE04484F7987B5753B
SHA1:	D6EE3A7331450EB3C37B95723FB9B4A0A4871890
SHA-256:	8F79DA18B5CD943A4451A06A965D9C387F703B3ED7B5843DCFC77B806C020F40
SHA-512:	F2F0CD2F7C245A8B4C022D83B2A2FF75FD8751B5500CB028385BED83A73199A23E5F4A625CFBFF85097B9F3C53B3899D56CE9EF53C431F4A0F7BDB4BB9A19728
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................R.........................!.1A.."Qaq.2..B....#Rb..3r..$...4CSs..6ct...%&5...7Dd...................................;........................!1A.Q."a.2q...#BR...3....Cb.$4r..............?..3G(O..0.8.P.Y.....t.....$..C....7.P.?\b...0....pn.P1....J..a.M...K,._.L.Z...+/..q$D...\|M.L..x...0+..._.3..F1.0..ez.$......."..q"U.mc}...).U^..$...<X.,...].)X....e..Q...<...9c!.N.3...}Z..+V..".G.J..&..........y..t.0U@.~...h..../.hH.G...k.8....3...ka..E./...`.....A....)S^.F..._.#{..Zx..M36w/NVI... n...8..jE..B.#!.......&c %I;.0W.}....Cs....eC)...{.y.Q.@i > lV...T. .......0.!..U......E%ts.E..$>/#\|Z3...J....[.-.<MV...ap5].....!.S-.Ty}_..i!..%..H.\|t. ..)..9.Jv....0..n9?..H.g....J...A......>....?.-.3..!..H#u"..u4.6.".m.>......g.......Q.Q...t....j.....E.....y_.....

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	85452
Entropy (8bit):	7.970966501210857
Encrypted:	false
SSDEEP:	1536:RFfAOHIaJpIqk8qwMc5pFN8HHOHM2Gz6+PL5KcQOVNcQDlLeokcsgj3HL5MF:RFF9Yqk8cc7FuHuTGJPdKF0Leo75j3HA
MD5:	54C3E481EFA51B69E81087F04EEF0F1C
SHA1:	B5FFFF69652D889C534615FEF5683CF6DF89A992
SHA-256:	CECE8E787F74D961DF63AB689107374BBECDDA08CC406004408EC469E48F6E8C
SHA-512:	B3307DCC637E0B9BB73D88FB63FD27B6C9BAF900AE984C2C91C8898A6B0075D2F4C5F64ACAA321E4F8B18F2FFBD995ED30D68F2D7D9F7CE85E3726D61D32972A
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1604030/ss_19d6b903fd65c410af902a8c5f62c820cfe09292.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................K.........................!.1."AQ..aq2....#B..3R...br.$C...4%5Scs..&6DT..................................3......................!.1A."Q.2aq.B.....#.....R3.............?..\].J..;.B...V.....d.C!V.m..#..W..rm..........nQ".\.H.':....d..dw....tq..+F..x..(...A{..I....Om..:>ER...0.,..b.Nx.?....S.V.MM.,..d.".?.v....z...rZ.....:.j....K.....Z6(.0pq.c.}tnK.<..%.g...v..^.4.^zZ..)j)..N..+.n...V^...FT....L.=H...kz..URcj...fHS<...=......TG..f...!..3P.j.."........w<M.)%\|.p.s...mQ.gtW^..<w...X>fQ.q...T.+-+t?..Ql4..#o.s .Q.......=.1..E......k.nv+}.o.....rW.6....}....\|..=0F.M.i.&.O$..Q...$........U."...LfV0.NK.Ooli...#."`.....wr...1.g..dg.45J...E:.*cu2.6.52..7\|.p........d...G.uoHWx.l......}..}..}:2..FLk$i.}u.......U$.. ...).>V.......I.l......z.....(.I.D{.&..G!.[...H.}.TJ.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	122660
Entropy (8bit):	6.047516179670634
Encrypted:	false
SSDEEP:	3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh
MD5:	D45F521DBA72B19A4096691A165B1990
SHA1:	2A08728FBB9229ACCCBF907EFDF4091F9B9A232F
SHA-256:	6B7A3177485C193A2E80BE6269B6B12880E695A8B4349F49FCCF87F9205BADCC
SHA-512:	9262847972A50F0CF8FC4225C6E9A72DBF2C55CCBCC2A098B7F1A5BD9EA87502F3C495A0431373A3C20961439D2DAE4AF1B1DA5B9FADE670D7FCAED486831D8C
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..n)...l..ujGSUB.d....v.....OS/2t.....\|...`cmap.d..........cvt F).....d....fpgm.6!....,....gasp.......\....glyf...d...l....head...A...$...6hhea...+...\...$hmtxv.x.........loca..g....h....maxp........... name.\....0....post............prep.......D...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 23 x 18
Category:	downloaded
Size (bytes):	1418
Entropy (8bit):	6.849403110238925
Encrypted:	false
SSDEEP:	24:yxkaial1hpunQWwjx82lY2T32HEVNiS8H8yJ3VaHK6eGY8fjjDcNPz5173U:zWitNn2V4vJ3ceL8fLcNL4
MD5:	05FB65C97A9A5A8AE214129B1179CD41
SHA1:	B9646BED2952C2A908EE7BBBA96331919CD6E43A
SHA-256:	ECB79B1EA1675B180662B87E2EB7236AC5FE55EE3F37CBB5432202D3A17232A0
SHA-512:	72C8A4C17BE83E8BCF26881F1CB65BF9B951C1A60C879EDD43E60BD4435E4A4DB4B9D2C8C083B14702649D8D508A387D7A72D6DC5ECB95FA3A39B4862C670D60
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/images//sharedfiles/searchbox_workshop_submit.gif
Preview:	GIF89a.....!.,,,UUVMMM.........TTUqqr??@KKK...UUUKLL```......aaa......888111JJK555---OPP>??CCCddeWWW...+++...................................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E4A78B95541C11E187B4E260624089AA" xmpMM:DocumentID="xmp.did:E4A78B96541C11E187B4E260624089AA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E4A78B93541C11E187B4E260624089AA" stRef:documentID="xmp.did:E4A78B94541C11E187B4E260624089AA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28194), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	133204
Entropy (8bit):	5.852869385332314
Encrypted:	false
SSDEEP:	1536:9EcpFUgj8v3Yt+HC0J/wpQyprgaiuBYjs2nkjq1lze5oHsvLNb5O:1pb9iuD2vFsv1I
MD5:	FC9DCB5DBB5B542495E00E9101F419A5
SHA1:	1B2FE991017D19B7D0DFCD30CEF98E21C6FE5CCC
SHA-256:	2EBC30D911CCD287A2081C29E5A3D3BC315B728424376428C173763651D7B254
SHA-512:	6BA85ABA29C46568EAA1CBEA14B9BCBF7AAF77965AB6B3CD23179147E622BFDB29E7932A13F0DA70C7FBEA574EE47B365D60F693957518299FE19439545D2095
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/applications/store/main.css?v=_J3LXbtbVCSV&l=english
Preview:	...........html body.events_hub.v6{background-color:#171a21;font-family:"Motiva Sans",Arial,Helvetica,sans-serif}@media screen and (max-width: 400px){html body.events_hub.v6{scrollbar-width:none;-ms-overflow-style:none}html body.events_hub.v6::-webkit-scrollbar{display:none}}html body.events_hub.v6 #global_header{position:fixed;z-index:12;width:100%;box-sizing:border-box;transition:transform .15s ease-in-out}html body.events_hub.v6 .responsive_header{box-shadow:none;transition:transform .15s ease-in-out}html body.events_hub.v6 .responsive_page_template_content{padding-bottom:0}html body.events_hub.v6 ._2uHYtSBLSS1MxFonkOXr0O{flex:1;display:flex;flex-direction:column;min-height:0}html body.events_hub.v6 .perf_timing_area{position:absolute;bottom:0}body.rewards ._2uHYtSBLSS1MxFonkOXr0O{flex:1;display:flex;flex-direction:column;min-height:0}...pu9cOpUMN0Q4mmIX2WZPl{position:fixed;top:0;bottom:0;right:0;left:0;z-index:1599}._2qyBZV8YvxstXuSKiYDF19:focus{outline:none}.GreenEnvelopeMenu,.LQk

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	6085
Entropy (8bit):	7.911655083746525
Encrypted:	false
SSDEEP:	96:ZH9sQF0XRFIDkk09MYaJEjcFXUvUo9CN/wHt1JIuVoJXUMWr/:59s00YkvajUcJwtZoEr/
MD5:	74DDDF95662C80BBA5D98F2FC52EF1B1
SHA1:	627B1AEDB14C1C395D0F8942D67AF85A47B6B5F0
SHA-256:	EF3474B02CECBCEAA93CD6CC5FB8A2E11DF93B3D5D4F5C993F2894705E81F84B
SHA-512:	43D9E3D55CAA9DEF93E3CF981C8E0D1E44C1AFE1F959FD028A8EAD1BC4B890A03603C29EB0444F075E510D5788633B7D593BA2C3CF0056C34624D12211EC6B68
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@...........................!1.A."Qa.2q....#$R.....3Bb...6c...................................2........................!1.Q..."2AR.Baq..#3..S..............?..w{\.{..qQK..(..`...I........ ..p.B.$.uw...@.\|...s.....IV......\..=..AAI$.v....\|. ......g_Q.y...yRCI.{Q...v&..L..Bx..1..].7'[.....7.5[...8A..K......d7Uya.l..hZ......"eQI,F....i[...M..qq.[I$_....W.$.n.w.:..I........:.7.}...F..\|...{aP......w>.)..M.Y,.9.9.r!.}....!..o..o...5..MBn.5.9Mn.3.....O...j!..,..z....\_.8.....N..~&.............U...s.6..p7.P..H..T.c)....j>Z.b`.H)u'.t......Yc.*pv.....]......r.=.{...6..m.H.j&!N$jp.J.P..........b....s.63&G....)Y....MX.B...:.!....+@(..W..OjJ.tw..._.S_.M......'{...........K..^tJ)......N....bL...,8M..(N.)D.ok.}....JK._m....Z...v...?....@.....)_..}g.1T.......S-.6.a"

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	80072
Entropy (8bit):	7.973507439340328
Encrypted:	false
SSDEEP:	1536:Prhd7/7Y/iqT5DhWeBRZI9Phi19RXsI+QrfLGhSYCGK2nb8HVgBzol6b62:9qT5VWeBHkA19J5r7YzT8HWVoE
MD5:	03C0F2F494964592ABBA6929095D4091
SHA1:	EE8A081FE74466C37E520BBCD162E2C772AF8BA2
SHA-256:	5D0B1230197060E5AA942AF0A089CA7E747964589823B630AF7F868EEBE1F6F7
SHA-512:	ED66B0F30B8AE2404DEA62FAF8316279B2F76242DBA42664ED50AE1CCCE595A2C72EAB1915617DA4686937374FA3ABEDBB5736DC099367839ED6D22308730EE1
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/730/ss_13bb35638c0267759276f511ee97064773b37a51.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................M.........................!.1.AQ.."aq.2...#B...Rr..$34b...Cs...5..%6Dt..Sc..................................9........................!1A."Q.2a.q#B...3...R..C..$b...............?.b...K..lk...!h..5......!zul.{......8......A..!..=5.D..O].!......B...@.GHq...q.8.....v}5().....Nq....Er..........g':.Ey@..~..".g.R./.......<j..v5.z..K?4.h..R.}.V...O.D.*.A....D=.q.!..9.:t#!eQ.w...N5.....=.@0H.%.. 7.R.d.'.B.J.n...1..u.y<.H..;.v'.j...7.....c$..uk.]).7/'"$<.. s.A.\|...[<..r\|....Q...&.......B.p..q.F..D.5.>.. ....!..RO.R<m..F$d...Q.c.E......-.0%9N.E...Y+K8.4HW.$..q...4~....r...!.....z...\......F<K....ItYE....V.\|....d....-..Gn5.4.-....w.KE.:W.m....%a...0.l~.........G1.Y~!....rO...u7p.....o.7.[\|.$fw_.'..f..C...3E.z.......Xa..DC...../..ts?u..O..{..._..;......V....nvD

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	16620
Entropy (8bit):	7.946570448993533
Encrypted:	false
SSDEEP:	384:apaMfMVn5A/OtKg485m3SxYqQI2dwpKYlXiIs+tC8rCr:FMUhW4wSqz5dwp2IsIrS
MD5:	6EDD605A22CD22DDD06D082DF29A9A8B
SHA1:	25E87BDC3613C76B424F1504F4B4B9BC1832F67C
SHA-256:	57F2B6445CE516EA2AE4C2F168E05FC3F495BE3A2A966EA278F06BD3743F16E7
SHA-512:	D71464F3010A09EFD8621D11F192CE138B4FCD6B6A576B0273774470442724E20A9310BE1689C6754E6816668A550E4A58807D8BAD238BE6DE7AEBD9A857FDB9
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/w9uaLdS7VrQ/0.jpg
Preview:	......JFIF......................................................................................................................................................h...."........................................E......................!.1..AQaq......."....2BR..b....#r..3...CS..s.............................."......................!1.AQ.".a.............?....B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..x.V..}]..]....~...Zn.....!.....g!h...v..?$.....O..z....ooS.I.!.....g.h...v..?$..v..?$..Z?....O./.wooS.A.........(:.....(3P.N.v..?$..v..?$..Z#C.{z.........w...v.e....x..Uo.o...M..-....:..k.............(Z......H...F.....y.\|Z.f.h..v..?$..v..?$..Z#C.{z......2..A......O.og.k..]...B....].1.....(....m....r..=..&Y.f~..hg....A...K....jc<..?.zA.j...W}.0P.?./.T...H{5S.3.....[..5?U>.....T.T...M.D-.vq....J.OC....?$..Zut+......v.~.[....hZ..]..O.L.....~..(Z.....g

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 233, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	131789
Entropy (8bit):	7.99086118070741
Encrypted:	true
SSDEEP:	3072:4mGhNw31jx8MWPEx77TygGsGcIppEB3+r7nfpE:EhNgjxpWcxzucIpEOXnhE
MD5:	00AA9C48005E4B035770E0B95B6F18C6
SHA1:	C19264A4A042297FC2DE45AB5E3E87562F03AC74
SHA-256:	65B897153289D792513F4305E9A2ACC84981C32E8FDAF1B28B86B4D27D077183
SHA-512:	014CB4EE9BE7F3CC5598EF485B15C286356F808966B458C78326006728F2C65206163F2F8694D5C4BA195E15F3132B67B6C72069BBC9CC41CE012FE7DD3910A3
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/categories/homepageimage/category/anime?cc=us&l=english
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............caNv...............<'A......IDATx.\|.w...Y....~.i3g...Q[..vW.{.66...`p .....7@.$.o .o.J....16.8.eq[{{..wi...O....H6....K/iG.3.9.u_..i.....)W.W.8.jH..d...=s.?....{=.=......R...B..@.:=..x...T......[&.&g....\|p..A........y........;..x.+wp..=\?...#.!...B ...-....`,..<%...kAHp .()@8.s8...B...P~.!@.A...s.!. .9.1.u...p.Sg...#...];.S..........#\|.s..._.kt.c.Rg..M..+.r.....#............).7.....C....S.,.Y.P..N.(...,.9$.%%.,.........K...9...`....Ha.R..../../.-.......{0_...6..UvN..w3.^\.......<.......4j...(..Y.V.3...[.d....\|../.=.S...+..k..7'h........#G....Z{.D..y....b.l.Q.^wl...=o...VY_<..&+r.Nq}..>FY.\...L8........Y/bv.,6V<...'...d..)B.e.....d......Xa....T.v.b%..5VZ..G5.b.....}."A.5\|.0d...#...G......uo....>..e....!$A%...L.x...S(e.m..x.2Eg..ZA..Rq..v..........z.<.....,..h4.D....'..kvm.QK..j......w.<.......TA../,.......'.wY.TFj.~...i5{

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	16538
Entropy (8bit):	7.943050394488202
Encrypted:	false
SSDEEP:	384:lA7ad/ZM4PmtxW25uy95PdixtvsYEyuE3e/M0OAo6ArMYtaqSiYF+tFz:lA7oZMl5uI9dByv3OM0OAVArrta5eXz
MD5:	D3DDDE76B6BA89A0418E92C6AFF58DC6
SHA1:	38DE00B3067376F86EEB8E40B23F5F8F7083A0FF
SHA-256:	63875CD182152592938BC570BB7E44DDD86EBD3E6D0A4EB3884FF8965DB3BCCC
SHA-512:	6FC9B0DD662C4711B1775E8A6163C58BB0F8F33513775B064BAF398B33285C0DEEAD9D9376BB31D0D42C797F98B2CB58A3E63174B953748A21BE1459DFA9261D
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/zlEfE7wtvBQ/0.jpg
Preview:	......JFIF............................."'%""""'-(%%.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W.......-../W656WWWWWWWWWWWWWWWWWWWWWWWWWWW]WWWWWWWWWWWWYWWWWWWWWW......h....".......................................I......................!..1.AQa."q....2R.....Bb....#Sr3CT.....4.$Ds.c..t..............................#.......................!1AQ.".a.R............?.............................................................................................................................................................................................`..>JCa.....P.}.W.<O...qg..D.j....qg..Q.5Y.X8I7...B...^,.>H.%^,.>Hk5.K.x...#.x...!..-.B......z.Y.\|..z.....'.....3..!....[..x.%.F..g...&.............y!..........>.}.~o$4.._Q>.?7.>.}.~o$4.._Q>..7.>.}..o$4.._Q>..7.....5.?...+z...~o$t#....HB....g..GB?....+....~o$t.....H)B....g..G@?....&...........}.~o$.!7....y#.......4...Pw....G.m....(.....y#........Nz=..?7...<G..R......H+B``.w.z./.m.@.....{..>.x....P..Wr..+...}...!;..[.E.....!:ve@&

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 292x136, components 3
Category:	dropped
Size (bytes):	17539
Entropy (8bit):	7.959788320282242
Encrypted:	false
SSDEEP:	384:icQk51gj2FK3sqWBiHBf0m5xmuTed9vl900LvSI3p/J0P:ihnScLZxjvDO9X0rI5Bi
MD5:	F845E42F3D7BAA8B503ED041E8F85C38
SHA1:	E8452278AA760B0642608603DD18814FBDF7E60E
SHA-256:	9B1F13479D1041B06E6EE775B9270E2E9B5DB796A0357D30B88AA81A42576524
SHA-512:	F9E0351496EFBCD516752CCD7465239A554B1824D5B06F8169C29963080439865D93D6AB67651A81D21BEF0DFC9101E119AC96EAB013DA608B42F25A05F36BEE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................M..........................!.1A."Qaq..2..BR....#b....3r..$4c..C.....6EFdv..................................9........................!1AQ.aq......."2..B.R...#r..3Cb............?...)R...U...j...~_...!..\.Sl.V.=B......C...Y6A..:$%!#.b...rMX\|+.\Z....g..Z....c.zt. ^.[.>.\ai....[Z..9T\|.$\v..eJ.+.>...~.6W(5...y....Ie..2..,...+u.P.#.....C...I.#.I[..>6...Ij2[..b.E..'.sN..nv.....5R.Hi..q%....W..].......\.]..........TE.\..'.c.E.......B..Ia.....i......i}+.0..x'.s.5:..."4i..7.wqD"......G..Z9[[..sV".D.....J...D..>..TK..$..qJJ~WU.1.N5SrZF.u.W..R.....9j.F4.....`>...{j[hI.z........c....c{u2..PV...".[..[....\.o.@..~....b.+n..KP.....'~.O.....Z..#.X../5..Q......3%B..J..d..q.Ie.p.V.\..U.s]B.*H..e.$.lTmn{'...eM.`'.'.EET...]...0..-m.=..,H?..Yr...Ri9(.n..\|..!U...{

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	36898
Entropy (8bit):	7.97728249265315
Encrypted:	false
SSDEEP:	768:kjKBRKGDcTqPtFjxhsZdzRnn3LUU6DjCTs3eSZCMZ:1BRCTqPt5IRnn7X6Dj4s3eSZxZ
MD5:	4760A9D9636EDB9A02111B441A6CCC7D
SHA1:	C270690FAE2A3D3477D54154E52C2460E1FAA533
SHA-256:	91F3E39957E5A013C6374CA28B63B3A42443DA6BB3AB6334F26932B4C60C7940
SHA-512:	818A9AAE3E755F7BA03EF2C0EF7ECA38699C1CEBB352ECD9BCCA75DD75B228ED82D1FB4D52E89A453493B470505DEAA95CF85C170D207147E48A867221B4B3A5
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................h....".........................................S........................!1.A..."Qaq2......BR...#r.3b...$C....Ss....4c..D...TUd...................................:.......................!.1AQ..aq"...2........#Bb.RT.................?..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..)..G.......$...-n...Fkr..j..Y&t:.j.\...r5EJ.t..f\.."`.9...5.'.7T;....`....('q.O.]....F(.N'..U..Z.....l}..........6.=.A6..0J1RD.`...\|.U.e.%.B:+geGbj,..5.[..\|....E.xY.....W.....t.'..[.EZ...E?....>-..-{s.w..}...ZyR.W...C.....j.......5.K......Q.K..d{.JV.....s..!?..'W...k....T.R.<..".T....@.%....v..)V....0...W."g...O?...]....>.z.=.d9{KN\|..\|..X.Gn.w_3.\|...<Hg..-tv

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 292x136, components 3
Category:	downloaded
Size (bytes):	18318
Entropy (8bit):	7.964040485333037
Encrypted:	false
SSDEEP:	384:zOgJ40E2MIhVz+2U4VT0C36M1EcaRbhGeORr8DO/hLfGw:zvJ40E2M0U410HcaRbQ9w873
MD5:	F5546C8FF1E094459F7B1855EF01B993
SHA1:	E61234F2B358D80CE2C2AF1C57B111EBC1BD3099
SHA-256:	98DECB3493927CDB8F0E2E476E23C5CDB811EDE5F723DC6B21A67C09F3DD8DB7
SHA-512:	806D7160FE55F7DDB6DD65EAF70DC7A62746347BE78704105C159CB7416356236763A84401BCDE5AC8524CA6358D5B28C47EE391DE5E0BD272111D08C34FF3B2
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/629730/header_292x136.jpg?t=1701774481
Preview:	......JFIF.....H.H.....C....................................................................C.........................................................................$............................................A..........................!..1A."Qa.2q...#.BR.br...$3S..%.4Cs..................................4......................!..1A.."Qaq.........#2...3Br............?...m.hK:lq..4.(.S...4.uE... _.E./.Z.`-....o.....c.U..h....../......T..!].-..I.hjV...mr...C.YW.8j.a.`".S...Y..J5.....=..,!.aC......^..s....../..6kA.C!.tqj.I......dz......h.ASj.M..6.5.a...cgUfe<....!..m4.!..J.5.n.....hY>.@.Z1........6..Pr.m.X....]91.?....M.....J...J.......Wgi$.....u..U..........O.8........y...Dq....n.hG..Y=....5..6.#o.}.....'....IUh,I....q.b.ZR...^.X.:.O.z{.....x...R[F..E.AJ...M..K:Xqj7R.....[.7I.}.0...\.17.6.aw.H%.Y.......C\..@...7..P>em.HT(d.:..D...C)..jY=........9.+$Z2G..<..Jn:.)6......E.-........Qd.v.Y..%....:..)..V.@.-K.D..c.+%...\|_#!E....q].KN[....3*..t.JQV..w......

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	7769
Entropy (8bit):	7.933583719269807
Encrypted:	false
SSDEEP:	192:FGPx7FtU2CTTTz7g7sqhO3EGHAsa5X6g+CWc/6nJ7SRuGI6O91Uwy:y7Ft0H7KY3jna5aCWAGJZZUwy
MD5:	7926F254E9C6B7B1BB0B636B96E103AF
SHA1:	C460CCC641786B1E389158B08719036528796E73
SHA-256:	3B6693BCA7BDE565BE569FCEF81A04562AFA328923A2D7508904C5C740D13276
SHA-512:	B7219F5B703BD01AEE1DCBD27D7A722607DD3D8172A9D2FD8F08ADF379C9E511AC2888B6740100E8E1AD3D36EF8820CB1371C58DB1149B47981D95E01782D4AF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E.............................................@..........................!..1A."Qa.2q.#....BRb..3S..$%Cr.....................................5.......................!.1.AQ.."aq.2........3BRr#.............?.oL..q.......J.#W....7.)..G/.s.-Z.i..H\..".Y..>.V..b.Z[...B..BR.U....._.H.....X. .......%;X......I......1)5....D......-cd.u=.C...$....P.3.]E.{/...I....[...T.Z.E ....q.<U...k>...~..R..L....q.....a.K................K.qnJ.I.Y..st.......\|.l=.o..mW....SX..Rv.5....:\|.:M....<.;e5%D...e...vOo........sP.r.\.2.....6R.^Xu.CN...qs..V0.X0...1.#o:....(.PG........ ..I.:.&....m...G..7R.,F..@....)..$..I...c...-O......k.%{...0Sa'S!......\|.T....m7..=....Rx.+.....0.J.+q.......!]Q$.c.5kS...\\|.A)....{b.....u+....=..c.....E.I..Sl....!Imj..<...'.j......ZF.lt.O.c{u.a]^..EGd&.5^....O..D.R=...%...z....q6..`....[..Kj..8O$.%

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9521), with CRLF line terminators
Category:	downloaded
Size (bytes):	103409
Entropy (8bit):	5.382315556409162
Encrypted:	false
SSDEEP:	1536:aZOYEyohcyIE1Dl/1DlLyW3XJ0zMzkSTgjN+1emFrO5dXg71Pp40F91Hycced04t:aZ3UhrD1PpFFxcD+
MD5:	0D90A4CAE4E8FBD41592E790D8A03548
SHA1:	D1D6C79C6905DBF2863A2BE2D347A02C37B4DD17
SHA-256:	44245058A44F3F0085D27571B3C61CC9FA218F347C307A39B39C551BD3B3A975
SHA-512:	54D6F4476EC86206AA2FA610E0A6D8441C7BBB15902F94244538CC089FCBC6CD64A03921CDF79C360240825631BEEB0B31A16AF343BC640129BE665EDFD2EADB
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/global.js?v=B7Vsdo1okyaC&l=english
Preview:	......function RegisterSteamOnWebPanelShownHandler( f )..{...$J(document).on( 'visibilitychange', function() {....if ( document.visibilityState === "visible" ).....f();...});..}....function RegisterSteamOnWebPanelHiddenHandler( f )..{...$J(document).on( 'visibilitychange', function() {....if ( document.visibilityState === "hidden" ).....f();...});..}............function RefreshNotificationArea()..{...// the new way - updates both the old envelope and responsive menu...UpdateNotificationCounts();..}....function vIE()..{...return (navigator.appName=='Microsoft Internet Explorer') ? parseFloat( ( new RegExp( "MSIE ([0-9]{1,}[.0-9]{0,})" ) ).exec( navigator.userAgent )[1] ) : -1;..}....function checkAbuseSub( elForm )..{...if ( !$J(elForm).find('input[name=abuseType]:checked').length )...{....alert( 'Please select a reason for reporting abuse' );....return false;...}.....CModal.DismissActiveModal();.....var params = $J(elForm).serializeArray();...params.push( {name: 'json', value: 1} );...

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	7191
Entropy (8bit):	7.915516774302266
Encrypted:	false
SSDEEP:	192:kUDbUFYj74bDRwmW4fVwFBxWu5rALXkgGF0N4IbFZ5:x8FU43R9dtwdpvF0N4IZb
MD5:	12D351E46089D595272FD5357D6A3891
SHA1:	544C0CF0F72FD2755C637EC192BD4EC5AB527B3F
SHA-256:	D142521EA5204CFDD0B2F70754CC00C63F80138BFAB11AE8B180E9F694275FA6
SHA-512:	DCFA9F904218449A7EDF7CCDE6ACC4C4B7F92ACF55B6F3DBE4253E8FB80A6C20E901877883384537BCF5FD540407ED99CF29BEB9CA4211433338D8F39CEBD5F7
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2668080/capsule_184x69.jpg?t=1714968679
Preview:	......JFIF.............C....................................................................C.......................................................................E.............................................7..........................!.1."AQ.2aq....#BR...3.$b...............................3......................!1.A..Qa"2q.....3Bb....#R..............?..C....t/0/..m..(..>.}...^.x.9:XD)....^x8..B#.u..Z...o<..). ..R.....c#L.U.^-..=.?A...4!3J.ow`.PJ.O...".q.....q...e.1..yN.Vw..)............O?.B.w{n.}kJ.M..R.P..Ft..JAV..>%.v...;s.HpQ.MBTw%).....HH8.I...n..D.@I7.E.}Q..<.m...l.....n}x...n..\.xc..d.G.....-......".y..v.F..u[!L....v.%..ED.I:){/.'..v...N...z.@U.....3......s...Q-.]Fi.0..O..'. h.^.q.'n.....!.V.II=...d.V....d;.....KA.!...,....I..P{/.}..........U..i# }...\..H.........A.....t.$.0pS.,..`..\Nv....k..^#4.V.......Ae...Vr..hA."...(....1..z.+.....F7.)).S.........f...tM...GG.....AV.~....&.G......!\|..h......d.Di...+...l.....UP.JL..}.:.-....}3..'E.!L..d.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 152 x 71, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4512
Entropy (8bit):	7.415680848996788
Encrypted:	false
SSDEEP:	96:2SZYkknmWq2Yf/LVHnLdHYqbJL5gWfVrCCdT/7PT8IQN:2SikknoHBpbflxF/7r81N
MD5:	6B1FEDCD10C0AC040DDC4053BF32B691
SHA1:	75B7C40D3AE5772E3A8AE13BD0558FB4F9B760E4
SHA-256:	8C91B7DA40C2E5FA677A05A0E9E38F2E272E618A641CF2525007467D69534026
SHA-512:	0BDD02B539CE195BB2E7A5A3BFD611569E7D281C8944747F391998DFECE92F0115D6A363817D09AC38B343D48B3D5D1D09A845A328D199B9F5AD1F8A33C3274F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/home/logo_steam_piston.png
Preview:	.PNG........IHDR.......G.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2020-06-17T17:23:07-07:00" xmp:ModifyDate="2020-06-17T17:25:21-07:00" xmp:MetadataDate="2020-06-17T17:25:21-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:56d15902-83e7-0f45-b87f-50e9408da383" xmpMM:Document

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	38421
Entropy (8bit):	7.966042964570306
Encrypted:	false
SSDEEP:	768:A+tFsqAN71nSKjF+T2ihMNZhCQyzTA1UgGy4QH7u0tg:HyqWlSKj42ioDSrIu0tg
MD5:	B1A8E297782BA510340533CDCC8DCF5E
SHA1:	05043777F22D250361D810FC6F1CA0F189BA0AF6
SHA-256:	592141963E4F9D82214E30215CBF133A314F5807ACFAFA2E1E2271302AE8A9A6
SHA-512:	1962A49A61CB8B77502C3DE2EB044B4FA99F42597EB7B1EB55C292BB30D14D0CF4BF1F27F8442FD408AF803CE95BF82561E290FF22B7F98B9758524605E1E8FE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................................................................X..........................!..1A."Qa..2q.B..#..$3Rb......&8Srv.....%47CDu..6UWes.......................................=........................!1A.Q."2aq.#B.....Rr...b......CSTs.............?..V..l...q........E"...".C......4....l.f........ss.b.....]jI...m........A..m...O..O[.~.....f:..T..i.]6.q.akv..b...}.):.n..s.....dIIN.....?}..{...i.d.W.J..D}....N....v.`}.$.Ah...G).b...#.[....-...n4t4.h.r.]...p.......=....:........."A.....H..lJdj!AHu1.q...qc.....\|6x..qS.z.E.)..n.J..%-.(E.....en0..#.....3..3.b...nnm.:..+...NF.F.y.n7....c..x.....H.:..4zeV....Iv..-!..7(-.e...lH..o..Z.vx9.YZ.p.d..9.y....4&Yn+QK..%..ZP.....P...k..C..4..T.gR.X.A$...:\lmq....C.r...<......m.`,..5.;.....z>O.Exo...K..rz..6IY.....X..D..Lv".mR.B\q....U.I.@:Uo..S.)..j...-.....u:.......g>0.Z

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11729), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	11894
Entropy (8bit):	5.459785742809719
Encrypted:	false
SSDEEP:	192:+uPOnC922VPxxRfrK+P4cmxLZylgSa2HpDsotu7WCtsOfDf7DPgL5VTvg240+7gp:+usC9fRj0c8LPSNdszWCtsOrjDPgjc3K
MD5:	47EC69691A08E07F1C00E9D97727C336
SHA1:	EA2A52AE82690C99F0E9564CCB4309C7B29E591D
SHA-256:	740D0D4F394DFF448112F7990084E884430B2F55C57F930458B62160BFAEDD99
SHA-512:	08D888FBF4EBA154F018CA62546A86F2E50440857267EAEA1A8BDE12890DF728573A2119BCA21344E6CC3BD7CDE240C23067D9DAAC3AEFE6F3585F9A593B8DAF
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~d6e1df551.js?contenthash=c94d5b03008b20974b16
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2558],{72869:e=>{e.exports={Bold:"_1opdqAOxXrGF6BBCpWBSwD",Italic:"_3PSCEwXIQOjACd8vcBVCh5",Paragraph:"_3zjknFIbJGBGezHbYjCrVE",Header1:"_38GFQhbMgQS_1y-yV_MAza",Header2:"_2ZqUvIHTeQdmj5n3wCqp5s",Header3:"KePJsJFkRONeGxLE3PKlF",Header4:"_12a97iox1ZnYnQgXLpvafk",Header5:"_4GmIVQlN3tVVTtLvuOhUV",CenterSpan:"_3RAiCNw0-UoPo_4awvb1mA",SmallText:"UvZC_c1WvBWOxlmJu7qCo",Underline:"_3vpZiV7iSLrM6hY_mXk2k2",Strike:"_3dQvq4jSQdWUz4WSgIjESL",Spoiler:"_3CaxnwuIvFNL4Dlz6VYwHm",Revealed:"_35II0clQ4RixPf4ZSRqXPh",SpoilerText:"_1owPz2jY3VWy1TyVCWb7Gs",DisabledMouseEvents:"_3QOEiyJx6JNKSPfGtfeQRO",BlockQuote:"_2sfhtLUZT0Q5XZbbP0ybRr",QuoteAuthor:"_2CMyS9Y6n11x4PMJHri59E",PullQuote:"_3DRIe0jpfxAeqHxvn4iq3m",Code:"_1AelsP7HuMD8QF_8MVP602",CodeBlock:"_1paKwApiKpt_82rqeHdUh2",Li

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 76x76, segment length 16, baseline, precision 8, 540x338, components 3
Category:	dropped
Size (bytes):	50217
Entropy (8bit):	7.978967541095014
Encrypted:	false
SSDEEP:	1536:+T2ObH0WF+G5qkp3Ax7Qm8lVyLgaO64dsWTK:YZXpPXVoO6IG
MD5:	0AACE4E2DABBDA793BD99B673F960C74
SHA1:	4427287E1D55FB6B9CBF237B90044DFE5CD03B66
SHA-256:	5449B88142C10126EC7CF7161B345C4F275130502665C063283511DC1C1892AF
SHA-512:	D9D3C7A41EAE156FF9B5ADB583BC7D80CA7FB9814CABC18413DB95C86C281DEBB4FE2E2D74AA33AD17454BC9961716F4EE2293B26E7A74DC933FFC861F086EB5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....L.L.....C....................................................................C.......................................................................R..............................................Y........................!..1..AQa."q..2....#BRS...3bcr....$CDTt......45Us...%....6Eu..&................................=.......................!1.Q.Aa"2q....R....B...#3CS4br...$..............?..k..._:.<.W.\|..<..P....:.s_[G<..^TY.ds.,... g..H.d.(<4t....-#.a......,......yyp.....0ti.D..8{M.....I.......U..cf.T>..^l..[\|./.&#.....DhA\|..<..PhB....1s..<.%F.$...L.[.W4.c.....&..p).-O..K@+.>..l1q..R...n...,..\. #..c.=+.)qe......W\|...\...v$... .r.."..1...._......PQ.0Fl...;....1..2....F..4,U.e...rz..Q....rXE4S..K..!u...C(........).$.I....K2.3.t...v-<r.>....!..k.I...N.....;..,.....$........QI...-.2@.."../>KX..%.U..z....m...).i.y!.1...+ `...X..]...y.....r....L..X.s.o.<\|q...;b.=..3..,.4 .F.f.H....4.r..y@^...92C..<...LV..T>...r.....<.mRN...H.2N).6(G..

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 1
Category:	dropped
Size (bytes):	620
Entropy (8bit):	7.347357662235319
Encrypted:	false
SSDEEP:	12:Ac150XyQeRg9L6VWQMz+3Yj+6HNJOTvxxWNJ7mWt5ZiUo6R4oB:Ac1sCg1vLyTpxWHHte+4m
MD5:	4200E5D035FDEDDC6E508D39B46388A7
SHA1:	8D292A386315DFB74BDDACD2B2E75899634CF04B
SHA-256:	85C180EAA440F7EFB31E38DE29DD3EC1F0226D178891B567953D2745CE81AB5C
SHA-512:	93E29683D7D2186BDC3FA641FB2987D4E07B4AAECF27612B85521EE7835D2AD1E28621AF82E32ED0E5347DDA63B47F97193F31A093F25EF68E789A7F73FA7EA7
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...... . ..................................'...........................!1.."qAQaR........?...t.z..k.f.cI&.....N &..eU..yT.Y](.1d#26..qYrF....(..s....U...k_K]o6....r....].,}..i.I...E.[...K....G.?z.Y\..A......v}#.....<...S...%3..8.g.........t.e0....9#=....joq.".......0.o~.........1..F..u..A....TL....kZf....t....W.[0..a..Am0"..AL/.=...Gz5l....T.q.\|..z..5.!...U;..S...tU..-CC...D.v. ...p.<...+...&..[I...l..(.8........V.......5../.G.......9.Px.p.Q\|j...n.vS......A...2.m....D.@cw^.A......3.)..G....q..I....

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	4594
Entropy (8bit):	7.597772222605657
Encrypted:	false
SSDEEP:	96:huFS3cGSq0aOqW3RlEtXvzsxG4Qv7mBKqfin:aHaT+DEtrPgBu
MD5:	E79312FBEA4F08B74C2AEB67EA0D7CC1
SHA1:	085E562879E9003250FCEE04B5137E66885371E3
SHA-256:	C447FD517B03929C88DE46612D22D40670DC005B2160499C41D77F4CF55E7DB6
SHA-512:	C0844F80070ACD63A241486F6FBDBEFF0AB887E4A16EFCA35BEB2800E173946D526DC3225B62281A85A15E8759144ED9534CBFEDC10AAF82FCC8A3BD22757F7C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%......ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........5..................................................................}N`............3....C{.E`...n.5<2..jx......DwoY..:.c+<oq..]:.=.MU=.;o.uC.}.Y\x...y.q.OC..Ce{...9.cB.&.k...5y.q...]..6{*.iF.T.5T..r.So...7....F..5..35pq.R..L7r.:....,JzQ.....N.C..=................&.........

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	91657
Entropy (8bit):	7.985487074266619
Encrypted:	false
SSDEEP:	1536:V8m58lamrkjFMO7x7pFFdN4Z94H9DU/oBsyXZM1dfltc+/gssJyNFpY5jz:em58lOZDrNk+9/p6f/cEgPJyNFk3
MD5:	507EC4C003C44484330FC97F280C4EFB
SHA1:	BB865AAC73B9E1EABC0E14C02A59353905707DA9
SHA-256:	8D129552B9152513A527E48BAA04BCD7C5CCFE258EC432ACF3B59E10ED37EE39
SHA-512:	921A0B956D323CABE870DAABBA9DD1D70AFF13A5DC6373B4EB3DB070F1BCCD7A7EA09C69EACDEE34DCA73B0B32C59456355216A2FCE271B1DB366E2C4799DEE5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................a.h.............................................j..........................!.1A.."Qa.2q..B.......#.3Rbr..$C..&46s...%5SVceftu........'(8Tdv...)7FW........................................H........................!1.AQ.aq."2......BRb...#r..3S....4C..$c.5t...s............?...?....R...\|..F..;.....8Io5..'1..(...6.xK.B..RB`].......s...9ehV.S....iO1n~...rM.;L...(:....~..f1.l....4..:....Xr..>g....m......ACb.4....O.4..iF....!0.Ff.!!........}.@,jHA..n....0.#..i.Q:P.w$...4`.^..(....,.&..-@ ..........'...JJ[....`..N...)+>._...0.t.@.Kj~.`..}0.................f.0Q..r6H.rm..U"..j:...i<..z`..JS5..TBm.a.....i.z"&v.A.}m..F.t.B..d.+..x....+U.........:l4.y.#..Q.I.'.,...d.Tux.M..b.X<..j.]D&.....j......z...4.......u.6...bWr...4.X`).q.Cb...... ....v...`DU@.pv.....%.P.\......=f~.....E8ED.\.}...W....[.....TN.t.b7#.H...

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	87472
Entropy (8bit):	5.66569494439992
Encrypted:	false
SSDEEP:	768:DTLiHVcJv7oA7eQW6tNREIqgvRn8QWQMJqiJ30QkUaEFxfsN/WCcZxb98cJbY/cu:nQ0QAEr5C0HP+iSgu873pO9EHUnweoQt
MD5:	D95A196B633C5A1DE4BFE531ABE19544
SHA1:	B4D3E3D225C8F699D2C5661B194E6FEADD9B5807
SHA-256:	8A0E6FB8B50E1DA206A13969EE4F1F904F0B0A430FD6455A10FC7829B6776AE4
SHA-512:	29B85582F682F7D27092FA2A5B6E5C319E7FCB57F8A675FD791DD28877AAE5383F87C5D09CD2EF08C79A11CF8EAEE7C6D2224A8BE559B4F4A3D6690196B314F2
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudflare
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	70541
Entropy (8bit):	7.961922031318809
Encrypted:	false
SSDEEP:	1536:XmH0JzU52ax8hR7SvluYzS3AcawRBXV90I7:XZQ2aehs3e3ZX8c
MD5:	E928BA60A7D9712D1F3B7F411852200D
SHA1:	1BB6F01F9BD51EEF89567530D2D0C2C8B6F7EFE2
SHA-256:	C4075E0AD65AF49E5C1BCBDD9273969F90A48C76D8F1414F3536C128E99FF788
SHA-512:	EBFE6D1871EE77C9A259B8FC299AC835B269D34D66EED4933249A062F72C6CA79F81DE544E1DB4FCD3AA13F2944BD8F34E3D089D1AA426B6DBF4638CECC45C9B
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1726570/ss_c734a0acdcada17a686b636430b0786c0cb08f83.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................]..........................!.1.A."Qa..2q.....#BRTUW....7Vu.....$35rs...b.48CGSc.%Dd....&et..................................A........................!1AQ..."Raq.2......#3BS...4b.r.$.C..5..............?..U@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(........g[......."..P./!........[....P:...z.....7..}...S......uS.>.~....R..N.K.:...x.^?U....O.h...T...o........S.R...\|..7..}...S...)x.U>C........).T...C..!....._.....v.^!.O.........J~.;E/...}.}x.W...?j....uS.>.~....R..N.K.:...x.^?U....O.h...T...o........S.R...\|..7..}...S...)x.U>C........).T...C..!....._.....v.^!.O.........J~.;E/...}.}x.W...?j....uS.>.~....R..N.K

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	56823
Entropy (8bit):	7.979827499971699
Encrypted:	false
SSDEEP:	1536:KL3h1d+suIzpmZgDfuTxCbO8Bs+MsO67hw/qlcGo4u:KLxHzpmZafoCLBOsOBSo4u
MD5:	206FD4A29DC635D7B1D6C7E5D8633350
SHA1:	497BCD06E4C23C6F9B00416F50622F10403FBB31
SHA-256:	B639DE21AD12CE01566A5B0E42FB6AA029FE2E135C1E8BFC552504205144890E
SHA-512:	61D0EC5E3CE158F886681A66F82FC71373B1B83DE9ED27C354223573AB44F1D88F9714B903848C8587A01EEE4FCA57B69FDEC8C7EFE6ADDFA9F4C8483AB6247A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................Z........................!..1..AQa"2q...#B...3Rr..b..$45CSs......%6c..Dtuv....&8T..7Ed....................................F.......................!1.AQaq."2.........3BRr.#4b..$...5...%S.C..s.............?..\|...g.;..PA..2.v.....]p.X...Il...C...y....Ny.*...a.N^(...../;..a.......j.>1....m.0..<7.......>...$.[G.....^F?e ...}+..JX.'G'.._.?5.K#....^.z5....O4p2......2..6....._..M.Rr<i.C.s.T...w...5jMo.W... .#..hi=R~D...3.h....S.......q.Xb.&....01T.........?7..$....H..U...k.N..QO..8..6.e...^_..h]...lue.C.q.F....Z..Lp.=;...1.......h..Z..p....057.....,.I?;{.&1.."...../...)B...Ll.v."..v..O.-Ix..Lm...........$y-.V)1..3A@....Z.......4. .Q`..Qadf).,`.:V...........c1@.g.h.9}).<..3.....3..11.@...d&3@X.Z.....b...@.&(.....r.....\k..=+H....w.j<..........e.a..v.y..Y

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	73624
Entropy (8bit):	7.980918433419721
Encrypted:	false
SSDEEP:	1536:q5vduvMscdXEQCFbW/d5fwUPmAQUtrgjr8RqGGdwdcFuY7:q5vCtFEw+QUtkkRqGHyF37
MD5:	B291EA7B31C1DB3680823B10F89D02AF
SHA1:	2C0FB35553A013A6BEFD07FBB0C115214C2B2703
SHA-256:	F35ADB225FC1B198CE52FF23D4E3E07DD45460E8032A642BAC5B6857E94809FA
SHA-512:	19004A6E5D3D57D619CE13D93FF1568B5E64B1C619D8AE86AA9EA816475C27A6826B09B401B9CCF524092EB301BDC87061DCF6E1FCA488F883D6C673FB794FAB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................P.........................!.1A.."Qaq.2..#....BR..3b..$Cr.4....S...%cs..5DETd...................................;........................!1A."Q.2qa.B....#3....R.4br..5CS.............?..~.8:..y._.....Q....L....z)d....y0..`o........]'.....A.........u.2.........6.$7\Y....)......p...IQ^.y.q.....!..f_.UmD..{cKH...Z......5.>.....'.2............R..AQspz....=.....x..^.J.,.(e.@.S[^..r.^8.:m...c}.G6U...P.Q.:l.,...#+..4H..Ab......0m..\|b.D..f..A....iU-./$$.P..,@.W....1>(.%.c!..om..8.~...7m.)..vG@.....s...t.]..Y.d.$........u..{...U........8.%..2.<...YB..h....65..3.y)..kO#..r..'I..b......\|.`.....Y.y..vk.LT..+..@.6.q..!...\|r8.....J.=4....b.a.......c.,G.o...f....d<.['..:?.Q.........R.....7U,..Qj.h........sM:..c.1..g.-U..O v...lT.rE..E....f..5.0...B....

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	142759
Entropy (8bit):	7.968656938072495
Encrypted:	false
SSDEEP:	3072:NE8NzbwCdKfpMwMiXDFxtE944NiWzRdC2Z6YrQfGaBMb+LcAxtrTQ6:NEwZ6p4iXJEhZn6YrCk+Xxth
MD5:	B3B0EB6972BF8502596E9D90099C16DA
SHA1:	B31B5D487664B2DDE0FACDA31E15411685602356
SHA-256:	44525B848AAF578A89955A368FCF83707CE0509E447B16B11677FB4B3D89C4E7
SHA-512:	2F66BB4C0ECCB4EF5660FC5C10D5F7BF3F43D1CEE948C6FB58759729968549064B6889984872FC0043F00D34670016722A4EB842B30E1CF7CEF88E6A3FABCF95
Malicious:	false
Reputation:	low
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................a.h............................................Z..........................!..1A."Qa.2q.#B..R....3br..$4C....56S....%cst....&7F...'DVu.....................................K.........................!1AQa.."q..2........#BR.3b..$r4C.ST.....%c..56D.............?......T.....1h).j.S.<.-.D)C..{~X....e..Z.+.&2..pjO.....Va..9..+..q.o.).KI...7.......G...Q#j..V+..z.....d.c...=^.c...5.W...{..W...d'...{....z..W.d...W..c.....kY.i..^.....-...^8..q..W...g..V1..d'lbk.W....c.W.\|`V..f.]....;.H..D.._...L./J.7..a...Ri..e..0e....Gl.v........@...Pf.yx8. ..@.....t(&..kz..f...`.nf....V4....\.+F...%..2.,[A..p..:...`..`........'ckm...@..z...g.J.P.U..xTG:.E...........B...n.!3\.......yL...l.=..P...p(..+dq.s.R.....6.Lc.{a. VE.y.5.O.f:..:....j#A.P;....{`A...$..i...%kR.u..7lN.&. &.U.$.D...<..*yD...76..0..SZ.7.m.+....g..DEx\(..

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 292x136, components 3
Category:	downloaded
Size (bytes):	10170
Entropy (8bit):	7.942102848430485
Encrypted:	false
SSDEEP:	192:mlRZRxc4eN+Xw145jYx9UCjp40c380F1lohR/UounWSqEQUbj0F/8:mlRZbneNT145jYqlrTof8JnWDU6/8
MD5:	10E3695E55E1FD42587E9505B3F461A5
SHA1:	00C6E1DE17DD919502BBB209464EC9CC121B2CC9
SHA-256:	CD274025104FCD3D5183B3BC950C31B96B324B4F3B684124E839D5B03C508F46
SHA-512:	AC570CAEA0EB473DCFC958913C1D5743DCB06F3899719209F2FF20B609D7DAC5DDAF435C2486D89EC97989E73BA85D78A04A29D4F929551D5593EE8D62519BD8
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1764400/header_292x136.jpg?t=1704285584
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................\..........................!...1."AQaq...2Bt........#$56ERUdrs....%34CDbe.......V...'STc..................................1.......................!1.2A."Qa...bqBR.....#..............?...G.d.N.}`..q....O\|+.C...Q.............C..aA..XC.f..l+)!d...c..Z\|.!HQ+O\|+..d....C`.V1D..P........B..Y.lT&...&.-s.c.%5..qP......Bn4..(...T&Q..L...-....;..79. ....X@0-...`n......k@M...#J.......e... .ve.I..h.0....O."...l..T.rzT...T....ts...:GzT2..L....u.....)....3....Z.!H..F..>\cV).&...T..(q.8w./u.{.ua..m.......*.6i.d.~Y..D....t..1.....C.]..s>.{.B......e..w.....a&.b..Y7.n.2....y...P,...:.>..c.\|.&...$.,..qM..mS.ltNMF..K..._C&}...n..@..._.T.w;.u%....v^..Ti..hz.S....0.[...I$.Ox.s......G...Y.]RUr....q.....F..b5RLh.5pt.:...(...AK0.......).p....ib..5......L.......B%.WDP.LP...

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HLQSn:rz
MD5:	3549CD09450745427CB4F36188B903D4
SHA1:	3C7A0A9BE4A4D68F81EF6899AC0D435D270D3150
SHA-256:	1FF899B3093E9A3E73E8E39BA9D4D4568FEADD49B77FBA803EDC307B99F76CB3
SHA-512:	C87CCF2C119E964102FBFA7290E2C4BBE9C691DF125FD57FB82F53BAE1FEB0F8CCFB9BA30A7681FF921043647CB5B5E1CE9200D83AFDCAC66BB3F5B3F64C79B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm_XPgQqBMwGxIFDbhge44=?alt=proto
Preview:	CgkKBw24YHuOGgA=

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	dropped
Size (bytes):	54227
Entropy (8bit):	7.984578761339897
Encrypted:	false
SSDEEP:	768:C2F+3Xjj3MWtdU271lrkgE+bmzSlTBnGojeQD0KDpDf2POX0r/5/UknVaFXzFx+1:Cy4XjbvZQkbXlJVAw2POkbCknV0Xd/Q
MD5:	F59DE80B3BE4779D2CCBFDD8C0080549
SHA1:	680C5156BD11F7CFAE0EC04667222CEEA098EE5F
SHA-256:	E4BD8749607DF2DC9C719110290E16CB97836919C2E263C96268525C62B7B5E1
SHA-512:	B05AE4BD3C69476B92248B3DF79AE014D62F824BB694B457ADBCA2C584709D6B728C8261ADBF6AD68686A89704DE0DA7E34FBF5400D4CF566703F08BC2E74FF7
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8.........................................................................y......o5.Vr3dj...H..-1.......5.G..V....j .k.\|.G+i.f...1<....:...cs...m.>....K03......)....DS^...cs..%1.&k....dRG}....."B...2.c...l....D..f.DC.Iy..9...d....a..s....j.%......P...S..rE.....u.6.K,....i....".".cLM.yK.]..A...T.....'...w./.]....sY..H..S..a.}2N..+...7......"....?=I...$J..Rq!.$..KU9b&9HH...#)JX....&.1!...G$9Z.I...d.Xq..{O.c..\...t..$...Ew..A....u....R..y.../.S.^.U....D.6...?Z..GA..M.T.}$.s6..s...3..d.#hv.....}...}...w}..l..=.[B,W.......!rE ...R.H..%<.O_5'V.iH .X.,4g..+1).b.(W+T.!...)r...Qg.w.P2._...T}g+....X..#..o..P[?.5....].....q...Z..C..X..^....D...:..1<H.....)..nr8..zFC..k..HP`f.....W..pJ.?..g.CN./..&.D.....kk.!X...&..B.1,/$...M.j3mh....5A...zS...K...-..W..^....S....$..c..}...a..7o..9

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	7512
Entropy (8bit):	7.783870487893735
Encrypted:	false
SSDEEP:	192:g1sH4jsnPoRApnzD8Vn6HlKuFv1ZcWOmOEy4kw0qZ:gHjsnQRSzDs6HpFvEWOmq4f
MD5:	EE6BA4111742A8624990AEE9D22FA928
SHA1:	2965D8DFD636B7F74CBC97B566717DE7C04FD68D
SHA-256:	C261C516ABA064BD595263D48F88D4F4C0C02A2BE3E4CDABCCA9A749DB2B4527
SHA-512:	61BB1DDF7450B814D547A31ACC32132BF8FC72B849FB9B141F595FA989FE5CD4875B2636E38D5BA5EF19DD5FB5762D44B96D3F444CE152748ACA5CE6066799AA
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2503515705592104286/B31FD93DA2E9BE73D77067C11600F0DDB227B228/?imw=128&imh=128&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........7.....................................................................D..=9M.).....h.@....h.@....i...\1<y..D..........9*S.}.7].3.50...y......S}).dt>.......#;.k..J..u...p..JW..;.}.......N.#"y.....[...2.{[.p.....ntI..bT..:\1.u.6$.[K?..Klv...E.Z.....A.bz7;o.....2..i_..N..l

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	31900
Entropy (8bit):	7.9708168981928145
Encrypted:	false
SSDEEP:	768:Q5bE9EjEXeyh/eqmDGuudSwhQ8F5kdxSzeIKjGvyQPVK:QSEgXeJVgQBk5OSyIDyQNK
MD5:	194B3D80B853EA4183DE64DB31D6A587
SHA1:	535B6D51BCCAE71EB1FE2EC7BDC37F2F58EE7106
SHA-256:	11D49863757DB00A0C61D3A6DE66091B70B38366F473CA1E3183179D5E0473F8
SHA-512:	EAFFCF63E17BD0F3B0B81C1D0D38DF08B95FA85A6497B426FF8403F21F9997CD5B6A06012826D547FCD3EB4074DFBA815CA5925E002BB9B540D9B7697ED12473
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................h....".........................................M........................!1.A..."Qaq2...#BR.....Sr.....3b....$C...Tc..4s...%................................8.......................!1..AQ."...2RaqS.....#Bb...3r.............?...Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@...?..'..o..5...'..o..5{.?.3..i...TWG..c....~_....W.0./.h.e.....h.mEt...+..o..4..._..~....?..j...9......+.._..5...+..o..4{6..a.[_.G5..W...~......F.:..~......F.f...=.k...WM.Jb.[.....G..........B..?..j...9..../.._...../.._..4{:..b.R......z..~......F...q_........?..jZ.h.tWL..b.....~_..z..~......F.f...=.k...tWM..b.....~_..?.+.._..4{:..a.K_....g.\|W.p../

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	53903
Entropy (8bit):	7.977862972312359
Encrypted:	false
SSDEEP:	1536:BSgZgrJ4ZBa1wsS5lLVRN3onB9R1NqDaJAHWbBrRAeWxB:B3qrJ4GU5nRN3ojRbLAKAjT
MD5:	D31ABE8CE61F7D55567943E732E0B61D
SHA1:	8451C2C87987802B9A83E8B893551DB73BEB3152
SHA-256:	E0670CAC6ADDA0CE2B5A05695FCD161267F2881075C8A8A6F3898F4D7105C903
SHA-512:	9BF2878235069FC9A451E97AC870E424A9C41EC29515AD1A176D48D692B016C2221228184B488B438CEF688DA302CC77A12D27810FF1D5E734413EF4633DB7EB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................Q.........................!.1.AQ."aq..2....#BR...3.4br..$C..%56Scst....&7...u...................................-......................!.1.A.Q"2.a.q#3B..R..............?..B.._i.w..\|.........k..g.rR..M.Z.q.qb.<H.2.%X.^...L^..i.....R.\|..$..x..6...h.hq\|...G.....E.....s.F;w<..Z.L.Ohqh.r....v...\.t.R...........!<6..<.;..+.D....m..!".V;....+S.0.......`k]Fi.....>jJB-...r"H..s..74.....F....#.~u%..M.....2...C$...L..\.`}..).f$u...!.I........Vm49t.....b.&..prO??Z....../B.^..o..{#G:...9...(8..E.qO..c.u$.{....[.!...W.......y.........;7.iTm....9...Bh.b...N..P.,..(.x..'.~5-.....Y...`.....w+.Bg.%.h........VBDW...Tax.l....$..s..*..uc.;....hB.o.PTl..EP....=e..@...Z..t.H,...=....f....7.......+.../o..........B.N......nL..>.S..L...i.x.G...,....d..D.g6...J.Q-.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	84340
Entropy (8bit):	7.97994292097791
Encrypted:	false
SSDEEP:	1536:rmfl80PyC8I0Cp7LGLaH4yVuvr/5ukylp3ktff+UOtrVoGyS+Q:if60qC8Izp7K2H4y4jRy05GUOtrVoGyq
MD5:	8F175D2EED224A848C0A52780EFE23A0
SHA1:	AB8FCFE7283EB89B8A38A21183BC5FBA8C124D85
SHA-256:	54C581EDB698D29D5106AA51E2A4AFF3C8801FBCDEAF2C8D5D058AD362CB237B
SHA-512:	7C1F8F02C621745914E38FB0766C736C7D85AD95B349EB6C596B54202D2ED42A4C553797A5C9CF0159A84460CCE232FB1C234BE4C4FEC98F862D939E9950166B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................M.........................!..1A"Qa..2q.#B....R....$3r..4b...5Cs..6St...%u..................................4......................!.1A."Q.2aq.......#B...3R.b$............?.....%G9.4.k.:G.c.>..=..v..^.&.....D..:...H=.....}..i.....8..8...@.....r<..kc.v.v...4N.K....8.C.....h.....4rE.@k%..P`.`."5I..N..."...<..-.. t.-..3..K..o......)....N.l^...{C....!.>-d...8...\...-..,..e.8.@.WH......^...>........-}......^....{L...$.:K..F\.;_l:.B.R.y...T.-...oP.......b.....4Z.EM.F.@P...*....X...I..J..+/.u..Ym....4..w....R..w..j.......m.M]R3..y}]~Q.y..p..\...{X.skZ..b.2..g.D[..i.e.{.eP.i.i......M....+.<..srm?"..`.$( ...oo.5..[,0..$...E.n...er...V.W.h.<.H.....[....X.V.g.l..L..pO....zz.....1..\|q.......b......H...P........(}..k;4.x.j'.V...,.b....I1..... ..u..3o.<R.{[

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1139
Entropy (8bit):	6.532046828421671
Encrypted:	false
SSDEEP:	24:c1hpunQWwjx82lY2T32HEVy1CaKyJ3VGFG6i5NKkNhbOlNvIP7:CitNn2VpMJ3mMTxkY
MD5:	FAC3C1AF93D191D52892FF42E66AE70B
SHA1:	A3D5AC838B61D1B8231D91C7E5492771A452110A
SHA-256:	D87DD24DE2B24AFAA384DD663A471AF4843EA35C40D5FFB325019EB458DFD8C5
SHA-512:	4AF94AF01D40D18A97DC3213E79F308E6C30B11536CC9E4BE8BBDA041F96A52C83816E0847D94A54783D829C272AE8BCB29E8231FBFDE66BA68E3EB57A7211E9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/icon_platform_mac.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:EAD87E4B4CB311E3BF759EB643A791F7" xmpMM:DocumentID="xmp.did:EAD87E4C4CB311E3BF759EB643A791F7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EAD87E494CB311E3BF759EB643A791F7" stRef:documentID="xmp.did:EAD87E4A4CB311E3BF759EB643A791F7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..).....IDATx...?.AQ..qW.$eS.2.............l."...H,..^..BI8.r&.u...<...._...R..f.n.z..B1...4N...B=..F`Q....4.j..(!...H.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	106484
Entropy (8bit):	7.98924079336765
Encrypted:	false
SSDEEP:	1536:j7+dMygtJwJVxyZrnRCt5uuDcDF1hl+9W6WIKh2PW5vYeHLgRUyHjdMizm9F1euc:HX9QxyZrsqDhAW9J2u5geCUyDdJuklj
MD5:	6A5EA19BFED83A196F226EA712E73B90
SHA1:	30DE6D6A2FAD2F25AA9858199CC57B317AEAD3E7
SHA-256:	4F2228619CEA0CD2AC98CC33A8F4E9A3E6E7AACE7B3A498DDB6F8294F0D16ED7
SHA-512:	03D5F8FEECAD26DD62C648D9D5D72B29702C76AAC0CEF28514DBB5D8E10E46297D3AA912DB199B5DC99995192D855828453D4949094029BC6802BEA64EAE2C30
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................a.h............................................e..........................!1A.."Q.aq.2...#BR..3......$4br..C....%&5FScst........6DEVdu....'Te...7...................................O........................!1.AQ.."aq2..........BR...#3b...CSr$4DT....%&EU...cs.............?.....oc...iyN.Q.......7.k..'.o,4......u..F......._..OR..L.$2.dz.i..H..s......l....).\...4h.._}<`1..#...9.S).U...v...........2..Xf@..k.Q`n;../.'.......Y\Sr.t .....F]UL..C.6..o.z...".Nq_)4B........\.._....KG). &.8.+-..x9.7d.D.X.dp.".Q7.PoanI<...b.t..5.......r....ZD..Y$E...].OR.F,....+....+h.\|..R.b.....PJp...!......,(M..K..._...$...B...R..!......'....x.H.H..E......T.mp:..#...K^....m.8pM...s...R;.R...F..[..P...I.@.G_...wi\|-..<X....25..?x.]..E4.J.1G"...o.Po.R..;.....N....."..o..5.,e......h.tN.'I.J.eP..^.t.....+D...e.,.Uz...C...

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	16831
Entropy (8bit):	7.958304901042516
Encrypted:	false
SSDEEP:	192:xlfx4ibPGYDUegb+5pWIOsfEDFvSldUmN4p2QRb3VCRLdm1CEOaRaHQxHX2B0HEQ:LrGYrNCuf8v/RRLiIgHMHX40C6qKce
MD5:	336BF4027A0B2B6AF49FAE8D0A92196F
SHA1:	5210C918C34E01AA0AAE74C5449B4E6321B56B99
SHA-256:	CF40E9DF9C9B9E93A45006903056E773357D57482C5ED5D6CBF08AA90C851C7A
SHA-512:	EB6BF674485B212FFD2E39213EAC688E4C8B6C14B34A26152E05A784DAB8965F38BAE55C12582DB00AF662B7F1AA84FF113EA0DB775869444FC8D0B43B99C1B3
Malicious:	false
Reputation:	low
Preview:	......JFIF............................. % . ..%...%.'10-'-+5=PB58K9--DaEKSV[\[2AemdXlPY[W......./../W67=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW]WWW......h....".......................................E......................!..1..AQa."q...2R..#B....3br..C...$4S...s..Tc..............................#......................1.!.".AQ2aB............?..q.U[.-.J.i...@......6....HU..$..I.d.. dL...Px..+.#.B..%.3..".M..K.)J.=.O...d...Re.eA[...V.g.N.....4......A.q].....tC...Z..7=..e.7RdD..\....j.A.`../uj.@E.^.?Q..[.u....O....i.t.FA......7..j.{.&...t.x.8h p../....^..w....u[......AV.].....S.^3U4......#P.....+f.n$D.+..#.p@9.....o.7.....sN).l.mm..>./.^..nxn.\.<......;.Z.eV.b$..N..u..}.?.q..Y.....!-..<.A.y.V.8.(..E..&..P....I.m...Mf.$.a..i.g.d........pn\..\...s)..k....YJjT..fbD..{....p..\|...rxW$..ugf<.M.[.1.r.....K..M...3...L.f..i.6{O.sp....]..>..r.E..x..vbX.i..K.\.:.-....O.b..t.........d.....'........a....jZ...9A.1.a........H$F.G....coM:......2\...0"......p...

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 233, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	121645
Entropy (8bit):	7.9923460159835695
Encrypted:	true
SSDEEP:	3072:VTUmAg/FVBghclFXH+E+kGSe5VZOs7hOZtS:l/Fv6qFuE+kOV1iS
MD5:	D5A9357F9A5DACBA379ADE344EF37B77
SHA1:	95B86C6044848223A9EA1528A816C101DC6D94EC
SHA-256:	908ED482B1FABECBD0276504B1E1C5D08A3845B2ABB51AD512F2558568C5C6AD
SHA-512:	DB488414FD97B43ED4DFA1118FF4F3BE91EAC74827DB2C55D6511AAE86FCF70A9C1F20C0DB89734A4FBF2F2930243DBC548143D32CB4CAF0B199C3D491D94907
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/categories/homepageimage/category/action?cc=us&l=english
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............caNv...............<'A......IDATx.\.w.m.u...fXi.}r.9......@H$@B.....mY...%.jU..l.;.l.mKj.jY.D..!. ..$...._~..'..Js..c.s........^k.9...o\|C..........@.p..$.6..^...s..u..pX@b........'.....#.R....Xc...`ww........R.\...U....5.v.)...x.....=;K..b{s.$....)...(K...FJ...)%R@..B.....,...)K....@)._..H......[H...!$.Z...A.s.........g.....T......%...V=..2~.......%..?.....c..&yFV.h)i.....1..8.vH.R8...Fk.u....._C.h..0....).......!...`M.1.W..qH.JH....z=$.B..0.$.K...X.s.%5...%Z......4y.g..?O.w..\IY.dY.d<ass......>.4H.`q...nw..e.9...B.,j.s.}..])....5...~../.ZJc....5...?.R......9..P...!.Y...,..).R`.EHI\K(K.t2Ak.z.sH.....<k..#.a....r8...7.....JSV.....,.5..Q8....Z..0.J.(JCim..C..v..$avf. ............".V...@J.TU T......E..U<..H.X^=N.....L&#N.>...8[..c<.0...cr..(nPV...l.h.yx..;.k8W".DH.R"%8....[.p.!.....D..J.... .>wt]...)..\!p..,X........D"..W.......q.......J..a2..

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2792
Entropy (8bit):	7.863273937788299
Encrypted:	false
SSDEEP:	48:A/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODo:ASDZ/I09Da01l+gmkyTt6Hk8nTo
MD5:	2024F24380B48B22D0D1DD5664452B7A
SHA1:	120A6CBBB2C3F97099B573978B810D6D33389E40
SHA-256:	9F60FA47C8E46E872DBDD2B8B2C4BFEED0F1DB835AC3C6CB83740FFC17B9015C
SHA-512:	88CA9237BDBC1DB84987426353888246AF1BC61FB3DA78D76AAFD67CDA5DC845547E5CEEA9EE5881A02F192E941273E658D214293A2026767526D4C248D702D6
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/item_type_hover.png?v=1
Preview:	.PNG........IHDR....................pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65367), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	126695
Entropy (8bit):	5.540423461909037
Encrypted:	false
SSDEEP:	1536:gR0U0E0clXKKSPagNXajvYwkkWscW/yAtpviJr5F/JdYX:gRn7l3SupTcoL+RdYX
MD5:	4186FCD9E8726E564DC1CFA9E2DCE4A9
SHA1:	13AB4726813D5D9AB9070FDECDFE2311C49CD564
SHA-256:	5B4A76772F5B769F8E35A8DA0107925F566B8E24AAE92C19EDC7310CA45A5548
SHA-512:	8933DFD80E184AF59384B283791A65176C57B0BB6ABDE9831E2CBF61AB745020D57B3D44527B40898457D300007CE969D76928C50C5714F1BF491BB13597796E
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~69438e232.js?contenthash=6293693cb55d5d304172
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[9348],{31819:e=>{e.exports={DragTarget:"_2Mg-bStVUsV3zkJRNUaZjq",DragOnTopOfMe:"_3-WTTPMPX4GxufqSR04Gkg",DescriptionCtn:"_3uiaPGqLBYMlnX-So8Uuft",EventEditorLinkInput:"_2tulFiDhA-iah2LXZZ1GlF",DefaultEditor:"_36qAa6zCOyemL0DiCxLwGA",ImportHTMLCtn:"_3uM5YAQEY1LveAKfkgM7j5",ImportHTMLTextArea:"_2NOGRpNcJQWs8pCpFFoCwR",ImportHTMLConvertButtons:"_1nQUAcA5S3aqDJRNQz5oLT",ImportHTMLCheckBoxLine:"_20sWotWCucYxN6u3F0-jTs",OptionRow:"_14XQ_WWE2YD8z5dypSR9Y7",TextEditorToolBarContainer:"_2aKjHRSTLCmwXOd6NKVUA",EmoteOuter:"_1DZyiih48mIow54yGR6XXu",YouTubeInput:"_20wVySXop7eQDzQRcOwNn5",YouTubePreviewInsertOption:"_2yhslIk48Qdy9SMc7DC6eo",DropDownScroll:"_3bxkyg2GKqazMOxFWXhI7",InsertSpeakerCtn:"DC83jus0EoZz3ysXK6MD3",TitleGroup:"_2VErp5BSy8ab7JNAzRyPt0",AssociateRowCtn

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	120659
Entropy (8bit):	5.2177666867072645
Encrypted:	false
SSDEEP:	3072:uo1PChVzkrEAnuEyIZkvSPvjYwYBihp8vGUvX8ZkAXNNf5O/6Js0tU2fYGUz85cE:uo1PChVzkrEAnuEyIZkvSPvjYwYBihpV
MD5:	F7833ADC67269B38749E0987FAF39C0C
SHA1:	ED0DEC3D9F1A7B3B7E6A07C2CA5BD59323DC9C63
SHA-256:	2FA3200C04DCEFA39FEB70882597B1196867903587E3873042433D675936F4ED
SHA-512:	40AD33599465FAF62F10DFF1EABC389A1E18727EEC987F3008258C2DD42D20BA54CC5553538F535C3DA2AA7173B2FB0E010BD6A4D92683890D69C2A74F579F13
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=english
Preview:	.....home_page_content {...position: relative;...width: 940px;...margin: 0 auto;..}.....home_page_body_ctn {...min-width: 972px;...position: relative;...overflow: hidden;..}.........page_background_holder {...position: absolute;...top: 0;...right: 0;...bottom: 0;...left: 0;...background-repeat: no-repeat;...background-position: center top;..}.....page_background_holder_mobile {.. position: absolute;.. top: 0;.. right: 0;.. bottom: 0;.. left: 0;.. background-repeat: no-repeat;.. background-position: center top;.. display: none;..}.....home_page_takeover_sizer_mobile {.. display: none;..}..../* Hide mobile versions by default /..html.responsive .fullscreen-bg__video_mobile {.. display: none;..}....@media all and (max-width: 910px) {.. body.responsive_page .home_page_body_ctn.has_takeover .fullscreen-bg__video {.. height: 46vw;.. }.. / takeovers should now scale down based on the center ~960 pixels */.. body.responsive_page .page_backgrou

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	6.773253103418387
Encrypted:	false
SSDEEP:	24:+y1he91Wwjx82lY2T3ouVGcUWSdoyJ3Vblt3bGlH0MMRsimfvlw:+wqQNn2xhJSdrJ3Flhb/Mimfvi
MD5:	F80E8AD0C744077C189C95726A41A13F
SHA1:	2220CF2E998ED605B974BD0088524832CE896D3A
SHA-256:	DF56BAE04E49BFA572E00837B378194D95530FA915EDF5ADC76E09E0E8F4AB13
SHA-512:	EFA8EF646F517896D597129D167767537D7D00315070230BD6988D85E585433FF321B3504CE1DA3518FB8B4C014797C76F329BDFAB10A060E097A53067BBE7A9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............-.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:AA4360FFA29F11E6BD31A92153A0CB29" xmpMM:DocumentID="xmp.did:AA436100A29F11E6BD31A92153A0CB29"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AA4360FDA29F11E6BD31A92153A0CB29" stRef:documentID="xmp.did:AA4360FEA29F11E6BD31A92153A0CB29"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..c.....IDATx.b...?.....FFF...L.... ......q.@...b...9.....PAv ..J... .C......(.....b{.d...pg@..C.... ...0...@......,d9

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	dropped
Size (bytes):	43198
Entropy (8bit):	7.987893296313363
Encrypted:	false
SSDEEP:	768:ggLhbqLGpJarb4SzY09W0H9Vzm2i8+PREpC42EMP3SGMJbGrHMKqiTJim/w:VeLEJL0H9G8Q/jSGMSHH/im/w
MD5:	B4C4038C4C468E3B780628E17A7C7226
SHA1:	5404945867396C066B7542264C57127DCC7A8DB7
SHA-256:	74FD660D98264D48EFFBC844837D62C20CCD45890B75374DE37C1F6D4DF1AD59
SHA-512:	749449FE9D25BA711C487BD5E5FEB624F8B2DC52B968E84C47FC802C48DBE29FDB9933C4A632B07B7251BE5492B785C04F4EA6290E69698428F35CA13EF3916B
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........7..........................................................................!...9"...s.}..A./..QJ..L._D....QJ.0.2....n..9`.m....2X..J]......J>N.$...X..7..f.?...2\|.X..o...o[.]%..XN.j..../....}....G.z..\|?.....a..>..?=..F......[B... g...?:C.......XN..t.d5..R..E9...Y_\|......=.P=.)...&9r.5..+...y6_^.Y.7\|..8.i..........._1.dS.^.....y......$..p.oW............eX.}[a!.M..5.r...Y..........0+.............P\|.m..\.......\.~.!...~..+....$F...()A....4.L.^..`0.K.>.$...6y.\.+.q...z...R...]..J@.5z.=.z..bo.~C....dO"Nq.&@......v.0..9Jc..Q(CU.0..(...tz.C!..}<0.{.W.N....e.....l{j`.5q5...d...]..V.V)Z6..}..BA.........YwRU..?ij.....V..=.u....w..z....k_0.C.......c..E...:V-S@......Q.M^.<...1..O@..G..'66z.B&S...APw\X.,f.$...]....#B#'t..m.~/t...S9...Wi$...........T,.;F&...M..j.,...V.].k.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 49x49, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	69704
Entropy (8bit):	7.983999662283261
Encrypted:	false
SSDEEP:	1536:3Uo22NidIaMiHWUzngX41wHOogaFOAW1hEVZ4SdbGeTlmzoiQiN:eIaMbUzngYOOogaFOAW9SPTljiQiN
MD5:	EA7D7EDF390E273E21FD0AC06EC7762E
SHA1:	A3984A82C05E7773BEC1F626FDFBA05ED432B824
SHA-256:	382169472668F2C93E063A702C8E9DC4F4CDECA5B7806D92DB410098C4672E03
SHA-512:	28DE7AE3ADC1C55909CBAFF58BEFB31193EBF5313160AB6BD9CBB9B0976C62FA8B983242906F7DFFD579D8344A12D5C8B858962621F1B29F4EEFDB0A470CE0B6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....1.1.....C....................................................................C.......................................................................Q.X............................................I.........................!.1..AQ."aq.2..B...#Rbr...$34....5Cs..&S.7ct...................................C........................!1.A."Q..2aq.B...#....3R$br.....4CS.%5..............?..L..U.....&9.)!....C....A.s.px.D....,.X..Y$.jY...}....O.\|. .... ..r..l"%.)[.)u.Q<QC[..p..;...N...(.y.=.\|E.9..k...N.....!.....Q...l`.....?Oa.[^=.Vf...?...3J..Q....\?...uq...=6\.O.v..:...K..`. .z...Z.+mM...bR.}.....~.B..O..V.3...E.....C.....FTc.j...7>...0r...]..... .;..3EPN..B....i'........p...c{. .dn..!.-(^..]YH.w...94.f.....\......PG95.=M@/:.XP.#t...C.lM.Y...C.Y\....'U.Nj.5+n;.$M........d.95.~..})--'..w.2.O...jj....=.%..j..R.Ii..K.%..*.OzZH....6....%.L.?ZD.....=..ry&...i..).7PX..s.^.6...)W....3....m.Q<.L.\|.n...ME..w5.S^Y...Y.sH.ZK....%C..rT...Jjz...(M^D.x......sN..9

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	12276
Entropy (8bit):	7.966257401851907
Encrypted:	false
SSDEEP:	192:Nz9Osr8ABEAwE8F8DPeBoKYJsXJ+Z5sWRmNQs57e9Je:vfr8ABElF6eBBfMZiWRmNx57IJe
MD5:	312DC433FE1C67412BDE4577A23803E8
SHA1:	435FA1D9E75259E5472B8F4A206028C3924C4873
SHA-256:	D2281232A63748F21D80DAAB2682D1487F09B11906D1FCF19CBC3F4E2A7B3F2F
SHA-512:	8C17BA07F8FD38353CC9E7EA48FF432869DC49E7D0AD4B1FD8D19016F71A94385EFEC9BBCE4A0C5B8FA37F03E7EFFDA04F2505C4A1E4E04F9045039902BB047F
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/webm_page_bg_english.webm?t=1714777083:2f771c0a27d033:1
Preview:	.L....3.....LFc........_...........:.....uZ.0.:....B...Q$R..x.u...?.....Q.ar/..G....fie.U...9<J.;...X.EQ....ppw.....P...,r]]...b.......~..1....Jv4..ia.)=............3$.e..&........&JJ..X.y.....r.i3..o...F{..A.!(.S\.Ypr.......PE.0.D.b.Uy.TL[Z+S...d..5.`...].;..b.f4.D....]S.n..AT.......h.;./. ...R5T...u..t.......GCLxEl....\.=...#.?.F..H.s..3...{..Ln5,E......9!..g...k.b..f...\|...q"C..q..x...^.Jw...V.y.Y... ..rj...&.X...6..\|N."...r...;.....j~..!...k.(NVu...Z.V.L..e..^O.'...@.0.4.h....v..)...mE...'..y-..,..%. .N...K.u0&.iE5...O..% 4?.'..W..tOa..XdR'.Z.'\|.u.ad.0<[..6tI<#%......P......=..-.3.^2.h......7.."..\|.c.gr.....j........i........\....].....~n...... ...]x.....=..@/.;].O.u.. ..r~.......Y...%;..p.c........-..0p.F.....1.\$..9..#.C..Q......K.>.'....J`..d..,R126h.-p4......m.W...)......B..efy...e.8@.[!!4..._{ZZC,.......Y.....G..."....0.<.b.k.m.t.0.@.50.n.<k.[.)L.A(..+....m.KD`.....S6.cLO......%*'...v..T....l. i..8.s..]e.Y.E....>~..tI...[/

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebM
Category:	downloaded
Size (bytes):	243459
Entropy (8bit):	7.987807162090319
Encrypted:	false
SSDEEP:	6144:PMtgv9zjdaC3WL11t1EuxkZfQVwNBd5LkzTJbn9o4MP2tjjw:PSSzxn3ipEf44BdBChn9orP4jw
MD5:	F4978FDB41DCCA1D9FBB4C527CE3B8F8
SHA1:	737B800AE6D6C1CE168BC1A3F5E8CE3AD3E1BF2A
SHA-256:	CEE8B472A356C3FB2A1C41DD652C8C43AB288FE7AE668D2B19E7BDA9ECC78A5F
SHA-512:	8BBCAD98ACC9B1C4B10205C925D5EAA289001EBF3BF3524AA53D23725F4471F4E7E8C3035F1FCBE633425FEC9FDC4874C3CDD258F73C628B4FD58C3A47C6B13C
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/webm_page_bg_mobile_english.webm?t=1714777083:2f771c0a2e98cb:0
Preview:	.E..B...B...B..B..B..webmB...B....S.g.........M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...MM..S...S.kS.............X.........................................................................................I.f....B@M..Lavf59.27.100WA.HandBrake 1.6.1 2023012300Da..1....F.D..@.@......T.k........O..s........"...und..V_VP9...#....U.......^U..U...U...U...U...U...U....T.g.ss.c..g.E..ENCODERD..Lavf59.27.100ss.c..c......g.E..DURATIOND..00:00:08.000000000...C.u".-... .......I.B`.0...8$..\......;_3.......#.2;..........N...X..j"..S..K.]....H.st2.+...G.}.G.o......K..?1..V..i..g......D...>'..(.I.CM..2.EQ..y.....6Y.j~...yo...[E....,..`..?...8..Y.=.FA.f&.2..v...+_Cc..8.q........#_..FjP.....;6.P-\|qE3.Z....p ..%jZ.....4.A....5;.mEL.}...C.(.&.?......^.....Y..K[..Ej.[[..{....x...9.....q T.4......Q....lu.xT..tR.@.._).^......1=.h@.6.9..x...@......s.z..oE ..a.`.T.A..(\|....O\.L.).q.#.K5.0<."...j.q..W.-..d..M;....A...>..^.Qa..u:....]X\|C......\so4...ndI=L.q."..2.~

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	82602
Entropy (8bit):	7.979880803150125
Encrypted:	false
SSDEEP:	1536:0SgtejYiBroIczRSc809iJdzOpN6CqK2pooMbmNey4CnpF8I7CEXR:0RCFoBSc8UdN6CqXoo/EGpWI7Cq
MD5:	046BF9CEA3452B6472E5AF09DB531058
SHA1:	AE0CCF223EF95D31B8FCBBBDB1F2F33B47A2390B
SHA-256:	4706F45910BA439ADB376E021AB13D9CD89030C69462977CF819158DF722735A
SHA-512:	68CC98159B8E32A3739AAFA368E1EE633E6A6E46BA029E13D9EF21E3DB93B6C02344BF104EAC4203615E10B146795A799A5EB72B6410FE38C4077647AC570484
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1128860/ss_3466316c3a6e2ba97aacd4aec717f277c29f8430.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................S.........................!..1A"Qa..2q.#B....R...3br..$45st....6S.%Cu....DEc..7..................................3.....................!..1AQ.."2aq..B......#3R...C............?....\|.....{.=....w....S.f...z`.=...~.q.f?{.5..S.Y.E>5..i...X...............Op.$.rU.`....$..J.S.M..xd.uM=.q.L.......f.d..`.t.QQ...cY..C..Uc.lA.WA..\..e...Re....X...OC.......?OHB..YZ{cY..).,.O.9&.cY.....:.YO[v>...n.(.......#lBO....0QQ..},{..:@....qK!/;[.(..\...Te.Q..d}}.l..L.1@.....z.U.e.....Ri`h..N.*T....6...8.f.%%......W0..t..V.fpI.....l:d..a.Q..M.,.[Hcd%T+..'l.J..@....8Y7.b.aES;.;t....d.<.,...M.B.l/.+..).v........aL.f..I.m........b.m."......R.~..I.m..c&..<>..._\.....a..R..X.e../.5..dul..P.2..N)... q..Z..${5..~......`.H....pE..^....V..?_..y}.MD.+9...[...{4...?...\|...pE$..6...ld_.

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 292x136, components 3
Category:	dropped
Size (bytes):	18318
Entropy (8bit):	7.964040485333037
Encrypted:	false
SSDEEP:	384:zOgJ40E2MIhVz+2U4VT0C36M1EcaRbhGeORr8DO/hLfGw:zvJ40E2M0U410HcaRbQ9w873
MD5:	F5546C8FF1E094459F7B1855EF01B993
SHA1:	E61234F2B358D80CE2C2AF1C57B111EBC1BD3099
SHA-256:	98DECB3493927CDB8F0E2E476E23C5CDB811EDE5F723DC6B21A67C09F3DD8DB7
SHA-512:	806D7160FE55F7DDB6DD65EAF70DC7A62746347BE78704105C159CB7416356236763A84401BCDE5AC8524CA6358D5B28C47EE391DE5E0BD272111D08C34FF3B2
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.........................................................................$............................................A..........................!..1A."Qa.2q...#.BR.br...$3S..%.4Cs..................................4......................!..1A.."Qaq.........#2...3Br............?...m.hK:lq..4.(.S...4.uE... _.E./.Z.`-....o.....c.U..h....../......T..!].-..I.hjV...mr...C.YW.8j.a.`".S...Y..J5.....=..,!.aC......^..s....../..6kA.C!.tqj.I......dz......h.ASj.M..6.5.a...cgUfe<....!..m4.!..J.5.n.....hY>.@.Z1........6..Pr.m.X....]91.?....M.....J...J.......Wgi$.....u..U..........O.8........y...Dq....n.hG..Y=....5..6.#o.}.....'....IUh,I....q.b.ZR...^.X.:.O.z{.....x...R[F..E.AJ...M..K:Xqj7R.....[.7I.}.0...\.17.6.aw.H%.Y.......C\..@...7..P>em.HT(d.:..D...C)..jY=........9.+$Z2G..<..Jn:.)6......E.-........Qd.v.Y..%....:..)..V.@.-K.D..c.+%...\|_#!E....q].KN[....3*..t.JQV..w......

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19100
Entropy (8bit):	5.511198686808868
Encrypted:	false
SSDEEP:	384:fwtVMAjYb2JalUNlpczHK77iHiEiN/mDP+pPIOw6GNNZhweP8/F:fmS6FJJNzczHK7uHix/mP+pPIOwlNzi
MD5:	7A0867F43372098EBBB7948A57E75BC9
SHA1:	6F53FF787F5C1B99A73CC8A3BEDAE946944771B3
SHA-256:	1888D4455D4BBB2B8A15E8834498BC0AC62EC941C6EDC29859A5FDCDD5C1F602
SHA-512:	42EB566C43EAA55DB6338D6AF2DE78BC446BDA4DDAE93C0477E70CB80AAE9014728934008EE8983C9D042B2F4251CB483146CD3F9009809AD4CB03DE209597CC
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...display: none;...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....resp

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	82602
Entropy (8bit):	7.979880803150125
Encrypted:	false
SSDEEP:	1536:0SgtejYiBroIczRSc809iJdzOpN6CqK2pooMbmNey4CnpF8I7CEXR:0RCFoBSc8UdN6CqXoo/EGpWI7Cq
MD5:	046BF9CEA3452B6472E5AF09DB531058
SHA1:	AE0CCF223EF95D31B8FCBBBDB1F2F33B47A2390B
SHA-256:	4706F45910BA439ADB376E021AB13D9CD89030C69462977CF819158DF722735A
SHA-512:	68CC98159B8E32A3739AAFA368E1EE633E6A6E46BA029E13D9EF21E3DB93B6C02344BF104EAC4203615E10B146795A799A5EB72B6410FE38C4077647AC570484
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................S.........................!..1A"Qa..2q.#B....R...3br..$45st....6S.%Cu....DEc..7..................................3.....................!..1AQ.."2aq..B......#3R...C............?....\|.....{.=....w....S.f...z`.=...~.q.f?{.5..S.Y.E>5..i...X...............Op.$.rU.`....$..J.S.M..xd.uM=.q.L.......f.d..`.t.QQ...cY..C..Uc.lA.WA..\..e...Re....X...OC.......?OHB..YZ{cY..).,.O.9&.cY.....:.YO[v>...n.(.......#lBO....0QQ..},{..:@....qK!/;[.(..\...Te.Q..d}}.l..L.1@.....z.U.e.....Ri`h..N.*T....6...8.f.%%......W0..t..V.fpI.....l:d..a.Q..M.,.[Hcd%T+..'l.J..@....8Y7.b.aES;.;t....d.<.,...M.B.l/.+..).v........aL.f..I.m........b.m."......R.~..I.m..c&..<>..._\.....a..R..X.e../.5..dul..P.2..N)... q..Z..${5..~......`.H....pE..^....V..?_..y}.MD.+9...[...{4...?...\|...pE$..6...ld_.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	122171
Entropy (8bit):	4.922780501464006
Encrypted:	false
SSDEEP:	1536:LlFY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWc1Uw4zv6:71XZEl9EvOxzLcGBkQ1WBV4MH
MD5:	39E34882BA4417CB4B1B84916DABB770
SHA1:	0D0CA081FB60C8AAD337091BAFCBE84F966C38B0
SHA-256:	DA708635DA162EA493874627775C3520A42145B79C73BF787B5113BF87C0B27C
SHA-512:	50BB7803DBAFEF5F571B9B36A975B43C26E233DA165C3D9E37856421FD93915B26ACDE47C5948E8E91D19975D8DD0E1F064999288B50297E3FA28824B88F3405
Malicious:	false
Reputation:	low
URL:	"https://gtm.you1.cn/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&load=effects,controls,slider,dragdrop"
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 52 x 32, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	1871
Entropy (8bit):	7.348722999646685
Encrypted:	false
SSDEEP:	48:U6wqQNn2x7gtJ3f6gaOO9EI6rjiFYXkNsa:/Y2g6ZOI6fiyUNX
MD5:	27527A60085AF69D263E4FB0019BD33F
SHA1:	22F79CA55A679E13A09E74500AD30C72B66F749C
SHA-256:	7E395F84BB0649858430AC4DCFBD79BF73BB7660D69B9D4FA2501C08F0690CC8
SHA-512:	87A0074CB0A5B109C43556C34486C2A23F40E8726C2A2313757C7EF64473404A7F45E0FDCC5A4F7C8AF0BFE41632BF681AEFC89FC446A8108BCD8C374CA25E62
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images//v6/ico/ico_info.png
Preview:	.PNG........IHDR...4... .....*8k.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:18006B77135211E88773ABA8DAB20EEC" xmpMM:DocumentID="xmp.did:18006B78135211E88773ABA8DAB20EEC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:18006B75135211E88773ABA8DAB20EEC" stRef:documentID="xmp.did:18006B76135211E88773ABA8DAB20EEC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>v.......IDATx.b...?.......O.E.....O...A.@.1...K.J..b_..@.@..J.1L...)oA.@.1....@..._..l.j.5.Gb3...Aw.6p.....J.....@....

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	45842
Entropy (8bit):	7.9803879959526345
Encrypted:	false
SSDEEP:	768:YU+x05uVE1DYEw7EusacXLWH8tEd/pez27T7nEef8+0hVm:Nk05lqxM7WHqEdxez27vW+0hk
MD5:	AA1DC134917F20D99ADAEAB6859911B3
SHA1:	38E3CB0C6757B28EADFDD923F1D32F55EFD62DF1
SHA-256:	E3C844561D69412AEEB78E5F3E4DE61B7FE78C494CA09268E8C7CBA1A2E21A89
SHA-512:	AC91141C64DA4F728399B42F13C5CFA1117ADCCE0A95581D1F9A1B7935E9528A2C5900270612AE9C2367AADDD067C9DD1BD49E8482CCEECCE356FDC2A4B8CC3E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................a.h............................................e........................!1.AQ..."a.2q...B....#R..$3br....%Cs..&45cd..........67ftu.....'(DEGSTUV....................................6.....................!..1AQ..2aq."3.#$4r...BRb.%5C..............?..P..;....C.L...".....G..U.S....9ISp}A.H....K"...........@-m.Sn.....TF/s}..N..MyY.c.".'...r.:.W...H......2.^..V..T.b....aB...i.J..t.SN .i.....%..a......eT...v..@....u...Z[.....6....l0S..xa..;L.5i.....=..7L..&.i 2,...j...Z..3....].#).........1b..!..4.......R.........%r$..#?....})...p.c.r).#...\|..X@%...7by.s."..Y.I...../........b.N.sNj'."...nH...<y"W....X..2@.3F&Ymo:..G....... ...r.\0B..{..w...s..\|n....K.xkqh...8L.#......Q~....F{....=jvr.A.v..l.8~.v_...5...4.cYXf.(....D..a@._R..}.t.#.dF..$........5F6.....x......lh.uW....&;...>.imRl..BI6..)vw.#\.$f'.7....

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	43044
Entropy (8bit):	7.941199566430419
Encrypted:	false
SSDEEP:	768:biCpgPwHx3MmOzAQx/ltYil1brywCKc+78Fcs19xzSCwgpL+GasvucikRWkql6uP:buwRcmOXxdtYiLbve+0p19hSChpL7Akk
MD5:	A39021717A66BA005CC0CD3C8B01797A
SHA1:	A402A0232D50C22B2E0749E92FAB9B07BA1421BA
SHA-256:	40E1A4F9DA00ECDB455C6947531227787C1C593A6AF4837CAC3CD6CADEFB25D5
SHA-512:	2B691EE956D8F92E33BAF49771F0FFAF9264153B8878EAFBF72E8EB7CC4CDF082EAF0C3621E8150413D318EA2DBFBB623E89C3EC45F40DB86C056FF4DA959555
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................................................................[.......................!....1A..Qa.."q...#2....$B...3R.....%7ru.5Cbct.....'EUWef.........................................6.......................!1.A.Qaq."2.......#.$3B..4..R............?..^O1..f.{~..gf....t=.."...3....$@a.d.$...t6C...&$...M..A.`.Dv#.]K......0L.y..N....d.L.9..R..R.fc.G\..C....)..& .g>.........0..'.h...`.I........?L.H.G.C..G<...R$.;..........AN.~.a.....Y...yp.z`zh.....Y.).(...G('..q.?.._.Zz_v..b7.?S`.IS.I).(@..@.;..l.v....J.U...c..<...R.ue...{j..P.P..mB%a.n..g@Y..=.....4.......P$...$t...-#.....]3.S..H....J....Ud.N.. ..[o.w..).MUZE3.2..H#.N..1.....W...>..o.*.M=....<.\)T L...ziK......A...n.R...-......y..2I..A .....dj\.a.FN...t0....^.HhA.F.$.R....$...:.#.P2@....MMxi.....2.HGfx.\|..!N.~:)},N..4}.r....I.X.b.71K...$g.=#.L....>"..d._...W..

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	6678
Entropy (8bit):	7.744640711825126
Encrypted:	false
SSDEEP:	192:EB7XGMxZ4YdmQlx2DtcuUzDiRkiNH8rr1IKVeJlWR:e7XGcJqtct3iNcXH0H6
MD5:	1B37526B55B6DB55BBC40E5AD20868F8
SHA1:	3AFD631DDCB1927CFA608643B7A1A8999E748174
SHA-256:	8253502EA63E6205C685CB2AC24325D5EE8563A0904F8D36019874AE0A56007D
SHA-512:	4373690B6691CC94D35BB05AD9711C7975DDB6D47AE819E84E3964AE794862E0C907F3EFCE8E54A9910E8BE88785BA3FA65C1A9B95D3FF764654241A034B3C9B
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........5....................................................................I.I.U.+B.fl..}h9Y-.mU.$.*.P.Q]Ai.Y....#.....}..uo..].e.Z.........}..?...~.E.,r...la.u.H5...X..mj.H.a2fKX.O...i0..F...=6t#U.Z.!.w..F.kP..ERr2w...@)..S...r......7.L<^....L...$.......c@M.v.Nx.Wg......J(. .

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	77479
Entropy (8bit):	7.979067362271511
Encrypted:	false
SSDEEP:	1536:pgHOJxRmR3ynmG2BwW/IU8ux3g1N9fok8G3Mb3OoHI3YfQSvOgWKrRugkK8:pgHAi0mTBwCpR3g1N9ghbe+I35kOgWKy
MD5:	7D031AB7A6739FDB13F76F1321AAEFE6
SHA1:	1684C8D18DC8159C69230F200F8B389142DABBD0
SHA-256:	04BCF02BF8B154985BB7A4A55F2A8EE988812A0A361F8F5FF85D3E7DE0468BAF
SHA-512:	9E6F5F08FD5ADA2CDDA98B0B83B496A82FFB791008BE3E2F55000592FB25AC1852F2335535FA323E449AA9FA20E635E5E30C15415BCF5F6ADE6646E480CF42A4
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Q.X............................................N.........................!..1A"Qaq..2.....#B...3Rbr...$.45Cst..67.%.....D...................................7.......................!1.A"Qa.2q..........#3B.R.b4r.............?...YM34..$..7.k..[.".e..V..%.`E....7.....&...B.......RI.v. ...r....Z...;G"..mo0H?\|+~j..i.t+..Zd.+...N..........ZYfD...X.'....I[...$Ja..P.....m.#.r)eHgv...n.......S.6..Z.Q........v'...>..$....Z..V5....\|VMG.\..P..P.].....X]=.[..J.....aC..G#.._.%...i$..x..`.......u40..yz..IQn.PPOm^....:.l\|x..;g....\.Y....5;U..B%.k4.9.@1...T..:.[.k..Xq../..._,..D^.".+$....1.P......DS..D..K..KL..<.J.X@X..l......v.E%.u.Ag(.........2..I..-.;.-..U.uIr.KV.mO..8.XB.H'd..A.."..{u..=...)...99.........)R6...Y.i{!.m...7.t.Kt<9..4.....=l.O[...5vMZ.D....nH6:...KZ.n:..%..(4.....8.Oo.\|]..>J.K2....)U5......%n.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 292x136, components 3
Category:	downloaded
Size (bytes):	17539
Entropy (8bit):	7.959788320282242
Encrypted:	false
SSDEEP:	384:icQk51gj2FK3sqWBiHBf0m5xmuTed9vl900LvSI3p/J0P:ihnScLZxjvDO9X0rI5Bi
MD5:	F845E42F3D7BAA8B503ED041E8F85C38
SHA1:	E8452278AA760B0642608603DD18814FBDF7E60E
SHA-256:	9B1F13479D1041B06E6EE775B9270E2E9B5DB796A0357D30B88AA81A42576524
SHA-512:	F9E0351496EFBCD516752CCD7465239A554B1824D5B06F8169C29963080439865D93D6AB67651A81D21BEF0DFC9101E119AC96EAB013DA608B42F25A05F36BEE
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1619350/header_292x136.jpg?t=1689933372
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................M..........................!.1A."Qaq..2..BR....#b....3r..$4c..C.....6EFdv..................................9........................!1AQ.aq......."2..B.R...#r..3Cb............?...)R...U...j...~_...!..\.Sl.V.=B......C...Y6A..:$%!#.b...rMX\|+.\Z....g..Z....c.zt. ^.[.>.\ai....[Z..9T\|.$\v..eJ.+.>...~.6W(5...y....Ie..2..,...+u.P.#.....C...I.#.I[..>6...Ij2[..b.E..'.sN..nv.....5R.Hi..q%....W..].......\.]..........TE.\..'.c.E.......B..Ia.....i......i}+.0..x'.s.5:..."4i..7.wqD"......G..Z9[[..sV".D.....J...D..>..TK..$..qJJ~WU.1.N5SrZF.u.W..R.....9j.F4.....`>...{j[hI.z........c....c{u2..PV...".[..[....\.o.@..~....b.+n..KP.....'~.O.....Z..#.X../5..Q......3%B..J..d..q.Ie.p.V.\..U.s]B.*H..e.$.lTmn{'...eM.`'.'.EET...]...0..-m.=..,H?..Yr...Ri9(.n..\|..!U...{

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	58596
Entropy (8bit):	7.977338898486892
Encrypted:	false
SSDEEP:	1536:nTn/JgsfdbpLrPMoWE7FpWaBckds0caX5tcqhWxDUyBxe:L/Jrd9LjMoWE71mkdD9ptcq2DUyBxe
MD5:	BB800A097E240E2EC73FEBD2662E63F6
SHA1:	BF42B3390586B36EB8BEB913331E17E2CB008827
SHA-256:	8BF72D1A0EB0DC1E89D18120612581449DEB0F57434381A6C77E8252A326C826
SHA-512:	1AFA3914509CD691D4B86F4979DE71A612043736563016D776AEADB8EEFD46922458A9BF8202E65ADAFA03EA4765985A8F8B06D2C469C86D2DCB76D1ECAC3FD1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................N........................!.1A.."Qa2q.....B...#R....b.$3r...CS...c...%4s.Dd...................................7........................!1A.Q."aq2........#B..R.3Sb.............?.........Q...(.(.TnE..S...].&..X...o.hL.....yS....I.#I{..6..:.\..d.....FE.....NFC.'.H..l1.8...=-.g;.....wm....Tq(..v.F2T..5$"..1....b.,x:...m.F4..)1..;n{{5....0..h.s....4..t..#;.'....m..,.q[....k`..m.?.4"..r...V...E{2..2.HT9m.....s......:.(......mAV...Z.T......_...M..Zm...@.kR..r......s..'.........%.,.:.:. ..N..AE../...)..Du.-.....IfT...I.c.J.........<.-B.....$D..\i......I.a.D.8,.....-......q.c...r.A..Lh.....`#+x.F.#=.fA...._.4&V....MHB...J...Q...g....%...I..i.6p7.#....X... .$x..>....dB_....b...v8.v..{F2..4....h.+..<t..4s.....5...L`P.cj.........U\..c...v4.Y"(........9P....F.y.y

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15632), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	15797
Entropy (8bit):	5.410315109356071
Encrypted:	false
SSDEEP:	384:+q8Wn6f11FGW9D3Me0kFIItiaFFKaFotEZgV1n/5VPjtv6+UA:pu1vXrj2Qia7KaFOEZgVBxVPjtv6+UA
MD5:	6CC649854AC3A6FFB83F76A8B6944823
SHA1:	8EF3D995AF259AC544B9C56F0E5B58FD7FFB80D1
SHA-256:	619435696594851BEDB6897D764BBBDAEEE07B8FCFC4DD21E21055533B89F807
SHA-512:	711CA1BCBC6C2FE0040C96425D588A0168542C665428DEA688A0D73ACD823A6AE4D631590386E05115E69576D26BF79D65AB79998F119BCB624245F63D768691
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/manifest.js?v=6MtRkzKwK42K&l=english&_cdn=cloudflare
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..var CLSTAMP="8896122";(()=>{"use strict";var a,e,n,c,i,o={},d={};function f(a){var e=d[a];if(void 0!==e)return e.exports;var n=d[a]={id:a,loaded:!1,exports:{}};return o[a].call(n.exports,n,n.exports,f),n.loaded=!0,n.exports}f.m=o,f.amdO={},a=[],f.O=(e,n,c,i)=>{if(!n){var o=1/0;for(l=0;l<a.length;l++){for(var[n,c,i]=a[l],d=!0,s=0;s<n.length;s++)(!1&i\|\|o>=i)&&Object.keys(f.O).every((a=>f.O[a](n[s])))?n.splice(s--,1):(d=!1,i<o&&(o=i));if(d){a.splice(l--,1);var b=c();void 0!==b&&(e=b)}}return e}i=i\|\|0;for(var l=a.length;l>0&&a[l-1][2]>i;l--)a[l]=a[l-1];a[l]=[n,c,i]},f.n=a=>{var e=a&&a.__esModule?()=>a.default:()=>a;return f.d(e,{a:e}),e},n=Object.getPrototypeOf?a=>Object.getPrototypeOf(a):a=>a.__proto__,f.t=function(a,c){if(1&c&&(a=this(a)),8&c)return a;if("object"==typeof a&&a){if(4&c&&a.__esModule)return a;if(16&c&&"function"

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1169
Entropy (8bit):	6.53554947966358
Encrypted:	false
SSDEEP:	24:c1hfvWwh82lYSgTqVPdTT3ZyJ3VNIEGVoF5l5aK7l4ew:CAvnzqdp0J3tj5l5aIQ
MD5:	DDBF5745CFD0932E5E18C0EA271F19E7
SHA1:	D9068EDD91F4C01DDFB794AA395843FEB27493A5
SHA-256:	3735B1058C21031892C59D6B52D5F6ACD0B3FC435F7DC0F0F8B586DF29143624
SHA-512:	6D91A3D3905CD835A2936364FE871F9209924EE85DBFB4E22145018DBD2B7EC604DD9F9F7C07758A3F7FF57C6CD40B0471F15AF151D95A0D9A0A6F39D3FFCCB9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:8CD4B3FDC8C611E793BCB6BD713023CE" xmpMM:InstanceID="xmp.iid:8CD4B3FCC8C611E793BCB6BD713023CE" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EFB48ADB4CB311E3AB3FC1E695F5A0EB" stRef:documentID="xmp.did:EFB48ADC4CB311E3AB3FC1E695F5A0EB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>X..G....IDATx.b...?.5..2P...X...X....8....P. ,..2@\|....X.......g@,.....m@.....G.....Hf0. .....h...._@...9...&$.7jD..

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	6638
Entropy (8bit):	7.919394707373773
Encrypted:	false
SSDEEP:	192:L+tt0TeA9ne1+risu4gHyGxAQ1kL7ONeGAYbbosa8:otRAsLsuxAQ87YpASbosd
MD5:	05C55234041E6EAB2A8C9527A6505B58
SHA1:	EE4CF40259C4268BE3C8DED4C6BEDE2A5352C0A7
SHA-256:	9E81D0814B82A650AB8A04D0BE07EFF23D4C77529BFBD5D12158DB23A7C9C244
SHA-512:	904EC732FA9C7C336F9B8DCBC73DDF2429623E1837C6D6505D851937945D3E4A1ABD215E89C38DE83B5ECD0E895E6C9286DDDF239DA1BE145B6406AA9541B8FC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................8.........................!..1.A."2Qa.#B.q..R....$%Cbr.................................6......................!..1..A.Q."2a.#q.B......3Rb...............?.....^.Nd>.....~...R.....m..E..y...B.d....f.....g...k).d.....d.0........a,......'.0.U..J-.[.R&.#..}EW\.Yc......i..v.3.......s.8.'...S.../.p......2.GR\wg<..p21..G...z.>...`v...~..^..V.]..P./b...-l...c:.+.<I.....j.J..y...U.......... j5..F....).9:-Z.Q..C..A..<]}..E...i%M..E..Gi..9p..N..^5.;.P..'.y+.z.u.k.....q...C.z[U.u.4...5`....q..r..././..J..g7.eD....4..B.f\.J...P.......Z.-nG...'\..............rWp..r<.8$..-.t.._J.....V.8...X.c...~V...Ph..r....._.O8...]--3......6b..... ..z.$.0&s.J8=D_......>.^m.U.j.KN....b{...M..AW.u......Q.f. .\|...-.._.h.d.]O.....}..^.q"...m...D...q.[.B*...F.Yk#l'a

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1290
Entropy (8bit):	6.7616543307680725
Encrypted:	false
SSDEEP:	24:Xcy1he91Wwjx82lY2T3ouVW7fyJ3VtZS4GA3FdLZCJurYUgQVI1L12Kz+9:swqQNn2x1J3Jpr3FdIJzQaRz+9
MD5:	CB06992B64D4961EDE5F7DA47804DE5C
SHA1:	228FD206FB76B5A05FBF36B61C8E4E4749D534D0
SHA-256:	61405865FDC0F0B1B658B0AA3098B9676A5E6D7D88403945269497B10D0EBD78
SHA-512:	0B1709FF9B3C6CD8D5ABE177C543835A2004E7C8EDCC9B8EBB2D2B5036CBB0059E5B0409A69DC721B98EF98BE2C61E01C0A8B3BC12E7B87A22561B39C9257501
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......$......".Q....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:9301916979CC11E6BFE9CE978F5FF8DD" xmpMM:DocumentID="xmp.did:9301916A79CC11E6BFE9CE978F5FF8DD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9301916779CC11E6BFE9CE978F5FF8DD" stRef:documentID="xmp.did:9301916879CC11E6BFE9CE978F5FF8DD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......~IDATx....A../J.J...x.=j.)uTj./@<.R(TZ.G@!.5.[......{.L2....\nog.Q.B..C. ;.'!Y.S.[.<.W\ ..@w..Pl..6.Y..Lx.}K

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 1920x1861, components 3
Category:	dropped
Size (bytes):	738184
Entropy (8bit):	7.988035298741717
Encrypted:	false
SSDEEP:	12288:++SKSxIF5kpQ9gdTd0cSQRfMivT0O6rMvq36nb9rd6RC7r2ObEjwr0whjJf52:+EoX0c3lDwOIMtb9rd6y2+EjGjNA
MD5:	A6ACA25A0D869DF520983527632A1042
SHA1:	61A27727670C5C9EC7DE3C03EDC9B0AB4AF00799
SHA-256:	F9AB134EADEFE5F0D0115B4FF58F26541B95A936F58D0DBFEED28618CD2747BC
SHA-512:	1999058CE10E45793F6D3FA17261114D2B7934B955054A6779D9E06638A0866F8C116691A1149C5A11332E918D13E5D8535389D5D2509BBCE6BD006D35C13B22
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.................................................................! !,,;...........................................................! !,,;......E...."..........9............................................................................O..............z.._...3..9{Y.1)..P.....-@........) ..`m....@.% .....................................(...........................................d`....L..t.....d`..s...Bu..V..##..s.P.M..........p............................d`.......................1....d....r.v3............3.y..6..6...........#...@=.........................w#..H..C2]...\|.......KOa............h.........R..........................................................@......X.......................21..........3............................@..........0.............@......(g\.............N}.@.'#..c .. .........`......1..4..7.J...............H.d........N.-x......... .............. .....-;.iP..+.S..vH.Y5g....%....Rs...F..c.m.n.p..J..0........N@.H....................

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13516), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	13681
Entropy (8bit):	5.3754616373014645
Encrypted:	false
SSDEEP:	384:+uYyTkD1oue3ZajrvNAfqeh66oJgXOjVtqAGIr5u:qDBougZajrvN0qU66pXOjJGItu
MD5:	E90F5D6DD601E3716018337ABC7D0EF4
SHA1:	47149B6CB1B378B2D60A102AEA6F1E73E1B638D6
SHA-256:	3F864FDFAC89475BC242D07FF7C60D9A712428759A8ADC10921540A617DF5E4C
SHA-512:	92F1C747F8DD3781EDC7168C0EF994870F68A32AA5CA9CCADD5BA27CFCC9DC4F42C931D3B279E5A7497745AE37361D5223161B11E418D50C654007885DA31640
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/events.js?contenthash=bba0659f6398b0718f9a
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..*/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2136],{92242:e=>{e.exports={"duration-app-launch":"800ms",Container:"_3DZHUf7uLxFhqpWQ03npUj",StoreHeaderAdjust:"_1BdU3ODLnmsZ3KbvtJiHnd",SectionButtonCtn:"_1GTuE6_ao1Qwvew5Lusg6U",SectionButton:"_1-yPTyNLjIAr7TpssNaC3w",EventsSummariesCtn:"_2UHtoCnFCyDjJS4BJk7mwt",LatestUpdateButtonCtn:"fKrItA-LyyNbtBHpBCjT7",LatestUpdateIcon:"zbw9bsuwCymNm_EVq-TxJ",LatestUpdateButton:"_3F6YMCF6Zs8AuGfzk0Ir85"}},87699:(e,t,n)=>{"use strict";n.d(t,{C:()=>c,R:()=>l});var a=n(85556),o=n(54842),s=n(35427),r=n(64936),i=n(82071);class l{constructor(){this.m_mapBroadcasterSteamIDToEvents=new Map,this.m_mapBroadcasterSteamIDData=new Map,(0,o.rC)(this)}static GetBBCodeParam(e,t,n=""){const a=new RegExp(`\\W${t}\\W=\\W\\"(.?)\\"`,"gmi").exec(e);return a?a[1]:n}static ParseCalendar

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	downloaded
Size (bytes):	32316
Entropy (8bit):	7.971621585979904
Encrypted:	false
SSDEEP:	768:5444444tV9D26nGiBlBftpkZ0juY3IaFLBhZN94eyC7pkR:5444444tC6pTXuujJNVhZN94eB7pG
MD5:	860AA7B7BD7CA97449A0044840548BAF
SHA1:	0187995D4F0F969F0B019A3F49FB99B32A6D582C
SHA-256:	59D44DAC41F314559A255C35A182C0B157F944E422A84CDBD582F23F2E012F78
SHA-512:	50E200D6F8D265A4C64A8993803C62B9C8DF9AAB048AE5E795F1CF65832BC3A37133235457EC1D0EE204CFD4DFFF7E50B5957C96C53D72159E9F90C552A1E24A
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2469739341598532857/761A949F4BA4257B9F6A52FB7FE0ACF4DBFB2925/?imw=512&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8......................................................................485...........82D....w...w...w.<..............B;.pH;.pH;.pH;.pH;.pH;.pH;.pH;.pH;.pV).I.a..8,'.'......Y.c.A.S.B{.pj(.!.......X......xB/....;......yx5...P..&.....F.O8..ZG1A.q........@......F........@..Y.5......U....,....Jc..wxI....p{.<...O.....X.paY.sf......r.J."7m.Ht....`....H.HD!.....#[B.H..T....D...Q.a.$..%1QT"....k...\......H...bH..m....oW\..Z.. W1.......ot.ju.S'.4..h.5..... \....&......$......T....,.RQ..F)LVU..5&...7...........!...rb..o.t[A...z.e....g..u........j^.9.x..^......;!..Z.OMww,..._...t..!.L......%@.....10..."D....$\jJ....$..#r.....N.w..=.8I....r....q..../..u.u..[a.......'.j^V..=jU......ke.<#...=5......he.l..g..y.3...h.O..#....V..........%J...IB.....j........+EBF.1j..@T..N......\|%...2c.......O...n

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	4522
Entropy (8bit):	7.894880048690622
Encrypted:	false
SSDEEP:	96:rPToi6+S6X6lVhH5tenJWEotqSGecuePYIRun6DlvA/nRVEXhdn:jTosSnlHZtenJ/otqSGaGu6ZApVyj
MD5:	2E6FCFE977F83AA4B97AF8B979602AEB
SHA1:	0E5427CF9F3F084B7F2920F4361A0D2E937F1349
SHA-256:	75660BBCAF03CAF3DB55DD34A246D19A10A8D21E8C0F8BDE94B2CE8C81796A98
SHA-512:	46E7C492C6B6F1A9CC8171F09118335EDB5C1BF6D8C9A0D8E4102545CB726ADD67D4C4D5757992B1C553FEE6186B3B5C912F8304BB490D9500E7851C02FAC9C7
Malicious:	false
Reputation:	low
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................E..............................................A.........................!...1AQ."aq.2.R...#$B.....3FScdr.....................................&......................!.1AQ.".#aq3B.............?..N>...E.I...B...z.z....%=G.f..M.Zw-..f.%...S.O].....X.`._~pr4...h.ygJ2@I..X.....n.....m...d..QQB..3.%U....aK..{l.....{r...s.Li..u.8...>...#....Em......}4.uF3.tN..>.7.....\.Z.fy.C.4...i]...JS...e!...Z".d..X).=.t...b.E..........]b..!.......)..]gU...'...;.bw.......P.n...#G.....>f.EL...7%...)..j..##.........'..V..t.-..N6..G.....#....+%4..R......k&;....9t.....Uxq.....ak6.K.q.5.....0.'.;...S.v1.\k$...!55h.t...u..=.Oz..Osy...2.....,.U.W.q..K^.ZI.zW..Y.#l-.}.tS...t-Ac.....EN..`..(..L..W...M..1.l.,.o.t.'+%...i.g55..I,.+.%.>.<..:.50...}....a.FNp..i.$..AM7p..uX.D'%D....y..F.$`..x..".8...,.c.S'.2ut..\EQ.d.

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4009), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	39415
Entropy (8bit):	5.7117127930192355
Encrypted:	false
SSDEEP:	768:imOhyrY6dKV7syaFVwoq5chj45KqTUpvSQNHKJb4Ud4xh5VgIzn6:jvkFgro4Ud4x8
MD5:	A53EBB5338F2FCB8177EC17C977D318F
SHA1:	BD64F0FB825B4824C58ADAFB4304B8A3EEBA1F75
SHA-256:	5CFC5E9CC0238B8222C62247CFA3A950E23085495E32A6E563A082F1893351EE
SHA-512:	63B48410C8F0F6115FD04646A34912A006CE131FA9DA6C7B8C1DABE14785C1E40B9F2589617BA2942BDF0130220CEE3F57B41A2209DDE7365CEDCACD3A090A49
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english
Preview:	..html {...height: 100%;..}....body {...background: #1b2838;.....text-align: left;.....color: #8F98A0;...font-size: 14px;.....margin:0;...padding:0;..}....body.flat_page {...position: relative;...min-height: 100%;..}....body.flat_page.black {...background: #000000;..}..body.flat_page.no_bg {...background: none;..}....body.flat_page.blue {...color: #636363;..}..../* this makes the footer appear at the bottom of the window on short pages */..body.flat_page .responsive_page_frame {...position: static;..}....body.standard_page {...min-width: 958px;..}....body, textarea {...font-family:Arial, Helvetica, Verdana, sans-serif;..}....h1, h2, h3, h4, h5, h6 {...margin: 0px;..}.....pagecontent {...padding-bottom: 128px;..}...pagecontent.in_client, .pagecontent.no_header {...background-position: center top;..}..body.flat_page.blue .pagecontent {...background: none;..}..@media screen and (max-width: 910px).{..html.responsive .pagecontent {... padding-bottom: 0;...}...}..html.responsive.touch .pa

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28194), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	121921
Entropy (8bit):	5.850733982659702
Encrypted:	false
SSDEEP:	1536:EEcpFUgj8v3Yt+HC0J/5uBYjs2nkjq1lze5oHsvLNb5O:EpbMuD2vFsv1I
MD5:	E4281C1C4B1618016D6425DF2300B063
SHA1:	8CFCE778176573CEC5C6D9A121E098B1A8136B4B
SHA-256:	16DCA3CB11336084C85464535ADA0B1BB3BF22053174BD163DC88786F23DC02D
SHA-512:	C4FB777D30CD430E944515F9866F0151748E8B286D80704BAB936955F4F718EB93A80FC2BA6D19AF7ADCD5E1712A29D3D7657281833CF334A1BB772FDA56E959
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/applications/community/main.css?v=5CgcHEsWGAFt&l=english
Preview:	............pu9cOpUMN0Q4mmIX2WZPl{position:fixed;top:0;bottom:0;right:0;left:0;z-index:1599}._2qyBZV8YvxstXuSKiYDF19:focus{outline:none}.GreenEnvelopeMenu,.LQkrbbayZPY11qHm01t7F{position:absolute;opacity:1;background:radial-gradient(ellipse farthest-corner at 50% 0%, #3c4047 0%, #3c4047 50%, #33363d 100%);transition:opacity 200ms;box-shadow:0 10px 32px 0px #000000ab;z-index:1600;user-select:none;padding:4px}.web_chat_frame .LQkrbbayZPY11qHm01t7F{max-height:calc(100% - 128px);overflow-y:auto;overflow-x:hidden}.GreenEnvelopeMenu{box-shadow:inset rgba(61,68,80,.75) 1px 1px 1px 0px,inset rgba(61,68,80,.25) -1px -1px 1px 0px;border:1px solid #000;padding:1px}html._2GpKTB_eizdXpH2xVGbMKi .LQkrbbayZPY11qHm01t7F{position:static;box-shadow:none;display:inline-block;padding:0}html._2GpKTB_eizdXpH2xVGbMKi ._2y2tUbsMx8OIwkimGSyHmb{padding:4px}html._2GpKTB_eizdXpH2xVGbMKi .pFo3kQOzrl9qVLPXXGIMp{min-width:fit-content;white-space:nowrap}html._2GpKTB_eizdXpH2xVGbMKi body{background:#000;min-height:100

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 616x353, components 3
Category:	downloaded
Size (bytes):	142759
Entropy (8bit):	7.968656938072495
Encrypted:	false
SSDEEP:	3072:NE8NzbwCdKfpMwMiXDFxtE944NiWzRdC2Z6YrQfGaBMb+LcAxtrTQ6:NEwZ6p4iXJEhZn6YrCk+Xxth
MD5:	B3B0EB6972BF8502596E9D90099C16DA
SHA1:	B31B5D487664B2DDE0FACDA31E15411685602356
SHA-256:	44525B848AAF578A89955A368FCF83707CE0509E447B16B11677FB4B3D89C4E7
SHA-512:	2F66BB4C0ECCB4EF5660FC5C10D5F7BF3F43D1CEE948C6FB58759729968549064B6889984872FC0043F00D34670016722A4EB842B30E1CF7CEF88E6A3FABCF95
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/bundles/40751/resfcyr673l6y9dt/capsule_616x353.jpg?t=1715792253
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................a.h............................................Z..........................!..1A."Qa.2q.#B..R....3br..$4C....56S....%cst....&7F...'DVu.....................................K.........................!1AQa.."q..2........#BR.3b..$r4C.ST.....%c..56D.............?......T.....1h).j.S.<.-.D)C..{~X....e..Z.+.&2..pjO.....Va..9..+..q.o.).KI...7.......G...Q#j..V+..z.....d.c...=^.c...5.W...{..W...d'...{....z..W.d...W..c.....kY.i..^.....-...^8..q..W...g..V1..d'lbk.W....c.W.\|`V..f.]....;.H..D.._...L./J.7..a...Ri..e..0e....Gl.v........@...Pf.yx8. ..@.....t(&..kz..f...`.nf....V4....\.+F...%..2.,[A..p..:...`..`........'ckm...@..z...g.J.P.U..xTG:.E...........B...n.!3\.......yL...l.=..P...p(..+dq.s.R.....6.Lc.{a. VE.y.5.O.f:..:....j#A.P;....{`A...$..i...%kR.u..7lN.&. &.U.$.D...<..*yD...76..0..SZ.7.m.+....g..DEx\(..

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6824
Entropy (8bit):	5.125459986119387
Encrypted:	false
SSDEEP:	192:Lgh01sIHZEUk/kjTNdkzGSz+pscQcPGR9:LvsI5EUmG5dUGSz+pscQpv
MD5:	102F7C6E20DAA0A5210E8FB3786BBD4F
SHA1:	C688BAECBA8E6161D6901C2DEEC80968BAF1454D
SHA-256:	462481FEB218B26C45B970F7C3B5D349DFFFF44DE22D5EAF4F9ED544A2626E7C
SHA-512:	7C51FFD62D38B48A7341B40B7325E1F9F73938F62FAD488D3C9A5B6DCFF09AA72FF878AB701F59A5597BC787F56781CD813CCADA95C7FC6E157E48DB3343E7A3
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/skin_1/communityhome.css?v=EC98biDaoKUh&l=english&_cdn=cloudflare
Preview:	..body..{.. /.background: #262627 url('https://community.cloudflare.steamstatic.com/public/images/skin_1/community_2_background_gradient.png') top repeat-x;.. background-position: 0 105px; /.. background: #1b2838;.. color: #636363;..}.....apphub_background {...height: 100%;..}.....community_home_header..{...position: relative;...max-width: 948px;...margin: 0px auto;...padding-top: 20px;...padding-bottom: 0;...padding-left: 1%;...padding-right: 1%;...text-align: left;.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; /* normal /......}.....community_home_title..{...font-weight: normal;...font-size: 26px;...color: #FFFFFF;.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal */.......text-align: left;..}.....community_home_subtitle..{.. font-weight: normal;.. font-size: 17px;.. color: #9099a1;.. font-family: Arial, Sans-Serif;.. text-align: left;.. padding-top: 5px;..}.....community_home_stats..{...padding-to

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	382725
Entropy (8bit):	5.427513844149021
Encrypted:	false
SSDEEP:	6144:GyKfRh/TqLprRt0nRzznbAxldF0SMLt4Wxowo:G1hqTt0nlsxlH0Sq48owo
MD5:	9154AA93CEA676494A80E48BA854A8E2
SHA1:	D7F64CEA1611742263689775243FA52060BF8E8F
SHA-256:	2109FBD583072E75DC44D32EE27E84A22C567B6D2DEDDE4F89D3D391CD6ABF7F
SHA-512:	0B4DC9B84481F2AF805452149F512D147C3408DE3F0F742C2728C3A8E381F890ECBD9D82250F53BFE55849F794789C8921ABA61506024733D532B5D5873DC7B7
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~d2dd7ecf6.js?contenthash=7e6163823fa1c736f5c0
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2468],{45825:(e,t,n)=>{"use strict";n.d(t,{Z:()=>oe});var r=function(){function e(e){var t=this;this._insertTag=function(e){var n;n=0===t.tags.length?t.insertionPoint?t.insertionPoint.nextSibling:t.prepend?t.container.firstChild:t.before:t.tags[t.tags.length-1].nextSibling,t.container.insertBefore(e,n),t.tags.push(e)},this.isSpeedy=void 0===e.speedy\|\|e.speedy,this.tags=[],this.ctr=0,this.nonce=e.nonce,this.key=e.key,this.container=e.container,this.prepend=e.prepend,this.insertionPoint=e.insertionPoint,this.before=null}var t=e.prototype;return t.hydrate=function(e){e.forEach(this._insertTag)},t.insert=function(e){this.ctr%(this.isSpeedy?65e3:1)==0&&this._insertTag(function(e){var t=document.createElement("style");return t.setAttribute("data-emotion",e.key),vo

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	563845
Entropy (8bit):	7.979185277506617
Encrypted:	false
SSDEEP:	12288:6FNQST5JDtBXjYws1ZcURVDA0M5mshtAi7BVqh2e:ElJZ1jWUBmslzUJ
MD5:	86DCF6AD0BBD70B2793A0546ECAF674D
SHA1:	40F921E498F42983FFB9A793258770E18151996D
SHA-256:	674C1D54CF74BDE441E7C8E50E2FC21EBAB0B4FCB2FEBCDFD55BC3100E756818
SHA-512:	72C5C256DD236D9004453099AF6CDE96550BC50CBB2DD8352808D736F170FB81BC2ECCAE749207276F15BF2C4BE13DCDBC5E90AB7DEA70FCE218451B20417D35
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;......8...."..........8.......................................................................RN\|....H.Y]....\.,W...V.(.hf.F.#.bCE;X.....v..."...w.G&H......'Z..).GQLb.n.J.H.h!.+..p..h%.9......O.Et.g.)..N..0J..+.....z.W......IT.c.....d...z....J.;Ai.;s.6L....\|..;.D.s^.....,.:F.D.....b.:...+a.0.^n.$..Lk.?3.v..N9r..sTv..>..!.7=............u..7`^....`.l@....!....`X. ..`^...j..%...ab.......`......-...........1.B../c....]......................-..y.0"..F..8!.{..0x..g.0...,..X...6<..{,,B......t....xf........b...+........ ...3......@.@.p..!;V.....t..\|..E.F..g7e;...eQe.."....+-.U.H...=.b..`...I*E....jc....I..n.."mr...)..G0...{l..u...,...`4..h..(X.Y....ii.I.W.T.yG..-h....:2..`..L...ti`..M..Z...vZ.yON........ .l...&....W.M+...Q&...][Y..ta.d.b....CV....-......1.g7...<..!..tD.W...Q>...[..v1@X..`.x....,B......... ..@.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2386
Entropy (8bit):	4.19023125963042
Encrypted:	false
SSDEEP:	48:TqnmXMEFR7r74gMWON+Oih7ScqC6xZVdmdUR+IFi:gkMEFRv7PvON++NxP0dm+7
MD5:	A18A9120D299FBF5953C745B46A06B8F
SHA1:	0CFAED4059D25BF42ACB01B720C0AFCFE75282C6
SHA-256:	AA429F60089CC6FA4F5157AC0A842C5295740280F69F156F68898849BEFF799D
SHA-512:	4FE8EA9984418B75AC0E78275E7BBD66AB83A2848C1B12747A5A990791A8BF12594BA0FAC2970091DE983D54270E0D0D2403E71E9542042A40C8CBEC9431901B
Malicious:	false
Reputation:	low
Preview:	<svg width="13" height="21" viewBox="0 0 13 21" fill="none" xmlns="http://www.w3.org/2000/svg">..<path fill-rule="evenodd" clip-rule="evenodd" d="M5.80814 0.197492L5.19324 0.62086C4.96265 0.774812 4.69363 0.851788 4.38619 0.8133L3.92501 0.736324C3.42541 0.697836 2.96424 0.928764 2.73365 1.39062L2.4262 2.04492C2.27248 2.31433 2.08032 2.50677 1.8113 2.62224L1.38856 2.81468C0.92739 3.00712 0.658372 3.46897 0.696803 3.96932L0.735234 4.70059C0.773665 5.00849 0.696803 5.23942 0.504648 5.47035L0.23563 5.85523C-0.0718184 6.24011 -0.0718184 6.77894 0.197199 7.20231L0.619941 7.81812C0.773665 8.04904 0.812097 8.31846 0.812097 8.62636L0.735234 9.08822C0.696803 9.58856 0.92739 10.0504 1.38856 10.2813L2.04189 10.5893C2.31091 10.7432 2.50306 10.9356 2.61836 11.2051L2.77208 11.6284C3.00267 12.0903 3.42541 12.3597 3.96344 12.3212L4.69363 12.2827C4.96265 12.2442 5.23167 12.3212 5.46226 12.5137L5.84657 12.7831C6.23088 13.091 6.76891 13.091 7.19165 12.8216L7.80655 12.3982C8.03714 12.2442 8.30616 12.2057 8

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	7071
Entropy (8bit):	7.9221495060636995
Encrypted:	false
SSDEEP:	192:5o8IzxHrJEC83v4cdnwj2PUbMPItXC6yl1:5oPEC83G2PUbMPN6y7
MD5:	0ED711B0BEE2FEE236E09C1BF4CE08A5
SHA1:	E01995DE407BA5EEA4F1977AD6C70C04A0128D8C
SHA-256:	31E10D1593454CBEC4FEC397F4554F92EBBBC2320AAA520C5E213760C010EEA7
SHA-512:	76BD8428FE393FBBAED1088F31C46C41A34354106383B8BB5ED727C705CF720130BCBF11338092C82536FFD224C0C1895C813BFA74122AACBA313DDEE0CFD97B
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1128860/capsule_184x69_alt_assets_0.jpg?t=1715795672
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................E..............................................<..........................!..1AQ.."2aq.BRb...#C..$r..35....................................4.......................!.1..AQ.aq."....#2.....BRb.............?..G...5.6O......2S..J..d.$........PV.2<c.(=.)khm$...I9.I[RiNB.......O)V@<._:...$).Qu3..aQ......P...($...(raX.q...8...&...N..<..O.}....`.. d.%).V.:.2.%M.o!.s.,.Ci.R.5.[.t./9.;.5...K..S.e....N;.I...k...8A..[...,..3A.....G?...j..;]C=.A...7..ZrN......%).....J.0../Oj7.UP...m=..P.[G...k...J...6...w...K.).O`.......z.......y...>2}..X.. .a.v......N.A..T...J6>.R;.(Vx....k...5=.+..ON.=.. ....t..iQ;....y.....VCA...(......&.~..N.!.R9.>..MO.)P<..Fe<l.Tf.!.M2.q-...VV.V.N.>..8...A..=..~}..0.S....B0.N.i.8.Li(k...iA.,.....2..H. .:e{.l5=.<....8.SB....t...zm.5...[.nMAEJ.JDf.'8...g.=o.F.'.v...8...V.kw..G].D..j..n\

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	10191
Entropy (8bit):	7.9325106354111075
Encrypted:	false
SSDEEP:	192:FT6SR0SmWoEvx5WXWXJwm3tvgCVhvHKmD84z92f4G5gorZ29TzAdM86dBHRt:56SR/mx4ug9r3Q4J2f4GP2TzAgrt
MD5:	55A23BABD5C6F1F65F76B325F689BBC3
SHA1:	5ED451E60A284B8749C605C57F2AF155B80AF752
SHA-256:	B1F91FCBF766E7D9AB172DDFA1BA541A4D67ECEC810F5DE00F8AD9B9B8BFEC0A
SHA-512:	AE0BA7F9E4D0F5668D17668787D837FCFAC3A59721D03CB0943DBB5828C5D8B1B1283AF70D7416C829F1AA743B027A0DB3EB57094E05404F2BB8B15AE8C53539
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/553850/capsule_184x69.jpg?t=1709666906
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................;..........................!.1.."AQ.a.2q.#BR..r..3.....b...................................8.......................!..1AQ."aq....2.....#B...R$b...............?......o*.....~..j.9......Me.d..N..m....c5.B.H..+uL.C...:=I'.~5....gx.zP..6..?s..Ix.....W#..2B3...!....T0k..S........~t{N..i"....).N..%e...x..h...,.x.ib.T.....Mt..5...!!.%!)Kc.Oo..L....U...B.h..$..;...e....Rw.g..Y..3.ZU.......S9.b.,..]z...G....>. .q.~.C6....P.Z.k.B. ...O.N.`.....U....%R"8@.%....?....kjdW.-..-%.....I......k.2.^....Om1.J6..u.k...L...J.C..#..}..rIZ0A<...m.n.q._......b)...R.......%......p .{{..a....>..#uF.M......;....0.....d...:S..-..o..0...[B.!!A..~.Tw..[f....T.L....@i......k....!.>.%.HT&..K....w6@!#....4=.M.E.}.......}'...1.<.f.....R/T;..BP..0.w...Y.........j.j\5..

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	73337
Entropy (8bit):	7.981437097576115
Encrypted:	false
SSDEEP:	1536:OKrMrzzAn8qhkGWlI24//eaEh8ZBpWOsNUzzH98+CTF:OgMDA8qBWiZlEhuBpWTNU3I
MD5:	869DBEB981AF68F9D55A2FBDC3512BAB
SHA1:	D6812827A87D6CBD110F5B535124AE6A48F16C67
SHA-256:	D970607C617AA69256D9BE48711797D20BA48ACA8AE4FE79E80C8241A269467F
SHA-512:	8BC94F971988F02162E157B15B21930655B0CA94BCA95AADBEA282D2C6BA245D94B2CBBBAEAF527A907BBFD8380B8626889156F3EB7DB53473B5FF6277A37C03
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1604030/ss_262496a8c3ed1335d63398fe06f8dd4d43d311cf.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................L.........................!.1A."Qaq..2..#B.....3R..br..$4..5Cs..S.%DTct....................................7.......................!1.AQ"a.2q.......#...B.R3.$Cb.............?....!..$.....7...-......l.......A.R...O...8.~%)S..#. /}..Wb...A..4F.....+<.[g...L.N..g.......H%cp$_........r+.....C..V.....U.:0..E..c.\|.%..+..s.(....sh#6...<T....q..0>.q..>.:x2..7..x.....K.............xg.si..G%...y&o.L5t.;7e,Q....ks......R..Id......sNqpk..\|..N.yl..2w...?..q4....&..te.X..$m...\|'......."..9jV.._...H.Y=z.....p..N..B0N.....c1..k......?.Q#..L.$.Ji...]6.7...s...#..P.k...T ...8....%.2.....-.S.]=..Oo....9......K.........j.].......aT.K.-S.zB].i..OQ.....uf.IL..J.....-...q.2......F..J...2.i.....~Y....._R..Qo......t.3....V.T.......cgK.=.....&..k...<rv}...6`z.:O.1.&...

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19112), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	30770
Entropy (8bit):	5.9192193919145355
Encrypted:	false
SSDEEP:	768:kM/TQ4O/wWvLA6fLYj0M2dYEuoCHjvQeIn9/wWLq:k8s4O/wWvDfLYj0M2dYEuoCHrQe69/w5
MD5:	668D9B56F55F6D79DDD295267B68518A
SHA1:	AD521277E7BA515FEEE28E4FB3CD62AFDB6CA218
SHA-256:	DDC12EFF57A9E957968AF6B2B8619545DD26F3FEC3D85C4C607E5D0560FED7D5
SHA-512:	4B998E0CB01E3318F0F4D6709DAE9D18A18157328164EAF5B072454B2258712D0C9BD8DF9A3D4C721470F07B9C53D00B7DDA74159071A42448CF90E11967C83B
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/applications/community/chunk~f036ce556.css?contenthash=65008c72e7e5586e0c2d
Preview:	............ZOBYq36SukEm_Fi_77g2q{position:relative;display:flex;flex-direction:column}.ZOBYq36SukEm_Fi_77g2q ._1Wl13domZv872ZcbC_PVbv{display:flex;flex-direction:row;flex:1;padding-top:10px}@media screen and (max-width: 700px){.ZOBYq36SukEm_Fi_77g2q ._1Wl13domZv872ZcbC_PVbv{flex-direction:column}}.ZOBYq36SukEm_Fi_77g2q .ERYporYCW1a-i4hFKkqM9{display:flex;flex-direction:row}.ZOBYq36SukEm_Fi_77g2q ._30Wg_JuATv6bZVQSiEOa3n{margin-top:5px}.ZOBYq36SukEm_Fi_77g2q ._1KeaVf4k5xaici5wKntAlv{flex:2}.ZOBYq36SukEm_Fi_77g2q ._1S9pkF1XVQsK6z-06HLup{display:flex;flex:2}.ZOBYq36SukEm_Fi_77g2q ._2ZDySoTopw8XofnCKLNxDL{flex:0;display:grid;gap:4px;margin-left:40px}@media screen and (max-width: 700px){.ZOBYq36SukEm_Fi_77g2q ._2ZDySoTopw8XofnCKLNxDL{display:flex;flex-direction:column;align-items:center;margin-left:0;margin-top:48px}}.ZOBYq36SukEm_Fi_77g2q ._2ZDySoTopw8XofnCKLNxDL ._3ph6wntM-n97-sHIlGQBnD{display:flex;flex-direction:column;align-items:flex-start;width:200px}.ZOBYq36SukEm_Fi_77g2q ._2ZDySoT

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 49x49, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	49038
Entropy (8bit):	7.985828723079919
Encrypted:	false
SSDEEP:	768:NhTD9euR+UbJ1wtSthkWzLqebJAASat9fIXowiass2uJdRQdg+ho+OV2cIUkhAT/:PTDxR+I2YrkWzjJ2y18sfqrQHWfDIPAb
MD5:	789A6BB98EBFC27664D282F021E64B7A
SHA1:	65A9E63146B92702BBF0A03FF59F52C6DA0BBC44
SHA-256:	DD1588B721C3DA4865B215B3F690B51D3A465702AF8E3552F464FD7D2C2EAFB9
SHA-512:	B6F501BB285150E40A8138482577FFA4FDC9D6114ECA254A5DE4C8567540BF6AF06FE4A32D7612AD682A2D551AF4465CD989670AA15CA1A75AA2DF322D287624
Malicious:	false
Reputation:	low
Preview:	......JFIF.....1.1.....C....................................................................C.......................................................................Q.X............................................S..........................!1A.."Qa.2q...#....B.$3Rbr.....45....7Cst.S...%68Tcu...................................C........................!1..AQ"2aq.........#3B..R.4$6CSrs..5.................?....ON.@.X.q.b..?.zE....P.._............E.H.......<. ..u(".od@.4m.....9@(A}....]!.}...W.(.#.......0#@....dh[.l`\r....z.D6.dH,7b...Yo%.l...^......m.D.$.$...%F..z.....x..R..B...vF..s... .m.....]B......7..p..9..%....w.@d..K.....U59=.B.HE...Q....B.s...6v@d`.B....@Z.t...W$@&I.,%."....V>...D..i&.. ........^.^v.P#O.8.>...S.[.F.....q.FF.n.9...f... ......o.n..E...D21.?.$5.{.d...X-5.....@7Mdc.yo...F:K.B.J...n..)y-!A.....n .v....)..v.V+....5.Vd.-...G&.:$ .+2-h5.^.e.$3S&..K'cEP.q(...(.mj...^.... ..?..0..B...E..k(.M.y(.m...%.+........=T../P&5...v8/u(...5...2B..!.J.......P.....

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 305 x 126, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24341
Entropy (8bit):	7.988461533051581
Encrypted:	false
SSDEEP:	384:IN/O4BDtg37obANr8v8MyscvM6L+21h3WFnmzG5ajTJpe5fEyyv:INtBDKrocNK6L+21VymzGAjD4fNU
MD5:	480AB236D2CCA062E8D1E623887E465E
SHA1:	6C16204EE617E33B7472DD0010D7F5F3DFAADC7C
SHA-256:	BFF63013B4AEB2D2A71F3FBDCA0360DA66289022FB70AC9914DB529113BC7E9E
SHA-512:	75BB286342F0EA6029044E0A5B038B18E50410111CA94D3579B5B496C6C0392E1593DF24441151C2F3EEE864DF4930EB5743CED98AAA5CFDC6E7F6A0A5D1BA43
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/bg_workshopitem.png?v=1
Preview:	.PNG........IHDR...1...~.....L.&e....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:A179F13944F011E4B899D7B63C97495B" xmpMM:DocumentID="xmp.did:A179F13A44F011E4B899D7B63C97495B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A179F13744F011E4B899D7B63C97495B" stRef:documentID="xmp.did:A179F13844F011E4B899D7B63C97495B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>-}.y..[.IDATx..i.$.%..<.n..H. xM7..gVFv>........;.=...&A. .B..*3.u..T3S;<2..t..U......O...........o..W.s.../.....{

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 1920x858, components 3
Category:	dropped
Size (bytes):	91289
Entropy (8bit):	7.965865201970232
Encrypted:	false
SSDEEP:	1536:EpswNuZpYFc4ODO4EIjTP7XXsZBVUrNHTxDMOz3iNmT53ISPWSV:EKB3pO7IjT7XuoNT24Kg5Bz
MD5:	529950193C4740AB3FA4E309DFE8C3C4
SHA1:	D68848FB9AFDDEC4D9730006467D78C0A54DE99B
SHA-256:	D09CAF51DF43370B86B4799B4174800E26655A80D5D7C9AFC55EE75B84D27921
SHA-512:	7F86A772FCD7EB109A3D245725C3098F230012870F9E403890CFAC0A2DD0E25EC2F1C4A64321F4644C922E4A4E4AB773A481DD8CE470BAB480F08B995014F9A0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.................................................................! !,,;...........................................................! !,,;......Z...."..........6.......................................................................GL..g=F.%.....Si..L..F..:,...(;.].-.r...d,.-...........6..Zd;l..8UgG..9X`hF'..>v..+-(..tq..e...."..r.)vZ.DR.;A.+F......r.iP.F.,..gp.9.YH.P.:..d....................... ..j.R..S.... ...U-lU-LP.j....Jt+l.z.P.&..(.b.X...^.+..Y.hTJ.]...jZ].AQ.."..l.a.U.....tHj5T..Zw..Z.b.Z...."..+..k.f.@Y.y.%.J%.R.b....V.]t.7EU......N=.~G..7......vR..tyY...3.,.D+2..+(zY.#....%"....Z#.U.3...c..cT.;......qe.!.8.L....m.2].BvU..gTp.td+.......TvU..%eU..l....B.hH.7d....7v.8.).....4u.G((....X. u.....h......ikj.R...........Z.ib.Z.`(.@.X.%...V.MV..@....[".X+.....d...)`k.-M..]..E..OI`.....,h.UcbGY.).9k...JK...z..N..j..F......w..Z..3D.*.U........{4..nz._.....F..6.-..!.`6-.yQ.,..0fDtD(yQ...4......E.b{.tN..86.r..%.Q..X.5L..:<.19.....`..TugFC..tE

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18959), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	55610
Entropy (8bit):	5.86994013391966
Encrypted:	false
SSDEEP:	768:Y5xnT9/P7wGIzuAncQ7D9T0C1J0ya5TD+8638XbjlWIWTw/L:Y9/TwGIAQ7Dpha5TDO3MbjlQkz
MD5:	560D2598602F672298C47A6B0C60E580
SHA1:	9A36D765055140B52F08ED0615A1E9EBCDB84421
SHA-256:	610EB486D354F75DBB10104A609DB68062C10B5083457F4FBBC47695B60D01D9
SHA-512:	721B27C0F9A2B4CF34B9ABD581F2BEEE7B59DCB5F259850F47B7D6D224F13B8A6DB1EE53DEB95836BF0FFBCD16699C4BC4A94C361A8C61938C9494F91CD9CD9D
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/applications/community/chunk~69438e232.css?contenthash=4a16a80208a2f1b32986
Preview:	............_1bkURvo-kTAM9QVTbhu8KU{position:absolute;left:0;right:0}._1bkURvo-kTAM9QVTbhu8KU.GamepadMode,.GamepadMode ._1bkURvo-kTAM9QVTbhu8KU{bottom:40px;z-index:10}._3cYwTZottPHUZlRdtGxHI0{position:absolute;bottom:6px;left:0;right:0;background:#2c3036;padding:12px 0px 12px 12px;box-shadow:0 0 32px 0px #000000ab;overflow-y:auto;overflow-x:hidden;white-space:nowrap;text-overflow:ellipsis}._3cYwTZottPHUZlRdtGxHI0.GamepadMode,.GamepadMode ._3cYwTZottPHUZlRdtGxHI0{padding:4px 0px 2px 4px}._3cYwTZottPHUZlRdtGxHI0:focus{outline:none}._3YEqWFipelXM8TorxOM0-B{color:#818181;margin-bottom:10px;font-size:12px}._2vKzaUZjsSot6P6v7AhDga{color:#adaeaf;transition-property:padding-left,color;transition-duration:.15s;transition-timing-function:ease-out;line-height:26px;cursor:pointer;margin-top:0px;padding-left:22px;margin-right:12px;overflow:hidden}._2vKzaUZjsSot6P6v7AhDga.GamepadMode,.GamepadMode ._2vKzaUZjsSot6P6v7AhDga{margin-bottom:4px;font-size:10px;line-height:12px;padding-left:20px;overflow:vi

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25789), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	25954
Entropy (8bit):	5.40449223073466
Encrypted:	false
SSDEEP:	384:+ulSheeHpFm5ZQG8ma+EciToFIu46vBArZuUVRY5ICo:4eeHLmd8muciTijn0ugR
MD5:	4EC1E7B2B071C19DC97C101DF3033EC4
SHA1:	C36AD325B1E1CBEE8673834B48F95F9EC14753F1
SHA-256:	57AC71FAF2FC6B2E9448BEB0711691F86D4956BEFA11DF2C28A81D79DA8EBF74
SHA-512:	4A9F3579544501B0C2C05BA83C5559E985847704459D7A8042630E7496050A463F13F90C746725B35587C75E2B6D5060503CBC32F9C4CC04D27AF6A0632D0346
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~4b330692b.js?contenthash=32fdb0c2c16cbd1f7255
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[6148],{42363:(e,t,r)=>{"use strict";function n(e){return e&&"object"==typeof e&&"default"in e?e.default:e}var i=n(r(31628)),a=n(r(67377)),o=r(47427),u=n(o),s=n(r(7207)),l=n(r(93637)),c={arr:Array.isArray,obj:function(e){return"[object Object]"===Object.prototype.toString.call(e)},fun:function(e){return"function"==typeof e},str:function(e){return"string"==typeof e},num:function(e){return"number"==typeof e},und:function(e){return void 0===e},nul:function(e){return null===e},set:function(e){return e instanceof Set},map:function(e){return e instanceof Map},equ:function(e,t){if(typeof e!=typeof t)return!1;if(c.str(e)\|\|c.num(e))return e===t;if(c.obj(e)&&c.obj(t)&&Object.keys(e).length+Object.keys(t).length===0)return!0;var r;for(r in e)if(!(r in t))return!1;for(r

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	7184
Entropy (8bit):	7.921201957252253
Encrypted:	false
SSDEEP:	192:tFxxYr9vmYLXlbmdPOuyZspOWZUGHYJX7p9r6++ppdm:tFxCpvlRa+ZOEG4JLp9e+oc
MD5:	6042A810518F910A6F8B99B4A59D1324
SHA1:	6B284511347BDA30369091BDCBF34F1C60D6B171
SHA-256:	24CA9BC328480509046B5BF5F2B3ECF45F19FA1A3552E4141C2D9BD4E0013B0D
SHA-512:	B71DB5782CA85236D0602DEF848EED8C8F9EE94C8BF69FD62176A49F6DBA06B89FB3EBC831CC0CEF5E62AE0D19CB5D858FC9E8F08A1AB017F9A3CA21C4906A31
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/239140/capsule_184x69.jpg?t=1715341001
Preview:	......JFIF.............C....................................................................C.......................................................................E...............................................=...........................!..1A.."Qa.2Bq..#3b......RScr...................................0........................!1A.Qaq......."...B...............?....4....@........`.....g.6Ew.q.....^....@(#...A..x..AJ.9l.d...@.c'.U...}....Z..4...B.-..;.........<..c..../dQ..J.4.6.NK...59)r@J...<TJ...}D....?..z-.k...-.t?...%...F...s.i8R...ODh.......=..FK.Q..h.......)>.B....T.p.2Owd%D...l0.h.#..F....0..@..'.'99...D}.]s...6,f..9...!Gu..9..mj..(....m.^.7....=.r.p.."...++...B..Y...J.Q..Y..!.....m.#...Z&!..>g$.......G\.G....&..Q.....QnCo.XSkB<.0....).............V..[..O>...1......%e..8.2.!J...C..^N."D.S..u.(.r.i.P...J......u..&..p=.j....{.bn.%+5.WK..$..n/....]......v..,W.Ij<v.....m..T......$.c].Prj.......Sv.....8..A(.r\|...@&...5R.@.+U.]-T......@.T..

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32086), with CRLF line terminators
Category:	downloaded
Size (bytes):	95790
Entropy (8bit):	5.394132126458497
Encrypted:	false
SSDEEP:	1536:EPEkjP+iADIOr/NEe876nmBu3HvF38sEeL8FoqqhJ7SerN5wVI+xcBpPv7E+nzmN:bNMzqhJvN32cBd7M6Whca98Hr4
MD5:	4DC834D16A0D219D5C2B8A5B814569E4
SHA1:	4FBE0563917D6F6289E4E1B4A0A8758E4E43BDA9
SHA-256:	91222F96F34735EBC88DF208017E54D4329B9202E3E52367FB8B149698A1A5EF
SHA-512:	6FBEC4785A21520FA623D1A151C6C8B64BAA1321AC6918A127BCFC22E49EC2E3BCD161AF9C237BD5C70BC4046EB12CF434563F86CBDC9876EB67FB2DEA87034B
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC
Preview:	/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /..!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){re

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (455), with CRLF line terminators
Category:	downloaded
Size (bytes):	457
Entropy (8bit):	5.021186977081009
Encrypted:	false
SSDEEP:	12:wYlF7wX2ZXfXqr9MzLTUdDp7TJoTaT+YTQjkTbj:w8F8eP6xMzLYd17iWCYf/j
MD5:	1FC0E266E0C35F24BF232E1015CA7064
SHA1:	DCFA89F38D3BAC32A02F28C662CFA4F4855EC8B7
SHA-256:	C5527D218AB87FB08C01DBDB65039651A55BE1BF70FB19AEF70930C2E81C7698
SHA-512:	4C2B68BDC493ACF2C12C1B0341C6DD56ECCA718AAF766B1350E63751BD036EFF8B97D15304C200FF17AA03ECE4BA137A4244256853893180F771A1467612F9B5
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/localization/loyaltyrewards_manifest.js?v=H8DiZuDDXyS_&l=english&_cdn=cloudflare
Preview:	(typeof LocalizationManifestReady != 'undefined' ? LocalizationManifestReady : (function(){ if ( !window.g_rgPendingLocManifests ) window.g_rgPendingLocManifests = []; window.g_rgPendingLocManifests.push( arguments ); }))( 'loyaltyrewards', 'manifest', {"RewardsReaction_1":"Deep Thoughts","RewardsReaction_2":"Heartwarming","RewardsReaction_3":"Hilarious","RewardsReaction_4":"Hot Take","RewardsReaction_5":"Poetry","RewardsReaction_6":"Extra Helpful"});..

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2386
Entropy (8bit):	4.183316172102115
Encrypted:	false
SSDEEP:	48:TqnmXMEFR7r74gMWON+Oih7ScqC6xZVdmdUg+IFH:gkMEFRv7PvON++NxP0dUg+mH
MD5:	FFBF4A94D94A5FD3849D3583F2567F54
SHA1:	58BE3D7CDD61E323C08B5986B8D89B71167E4F85
SHA-256:	06F503B84511C712AC8105D8C0CBB72923ED4B53FF67FEAD87C6415209A8AA06
SHA-512:	DAB2EEC9932622AD549F97801908BF0F5AB1102E32BA4F43F50E44000F62F7F7F868C5D57789060CD5D6FB255FB3329120708C2F43F3587C3FAB98F784FCE44E
Malicious:	false
Reputation:	low
Preview:	<svg width="13" height="21" viewBox="0 0 13 21" fill="none" xmlns="http://www.w3.org/2000/svg">..<path fill-rule="evenodd" clip-rule="evenodd" d="M5.80814 0.197492L5.19324 0.62086C4.96265 0.774812 4.69363 0.851788 4.38619 0.8133L3.92501 0.736324C3.42541 0.697836 2.96424 0.928764 2.73365 1.39062L2.4262 2.04492C2.27248 2.31433 2.08032 2.50677 1.8113 2.62224L1.38856 2.81468C0.92739 3.00712 0.658372 3.46897 0.696803 3.96932L0.735234 4.70059C0.773665 5.00849 0.696803 5.23942 0.504648 5.47035L0.23563 5.85523C-0.0718184 6.24011 -0.0718184 6.77894 0.197199 7.20231L0.619941 7.81812C0.773665 8.04904 0.812097 8.31846 0.812097 8.62636L0.735234 9.08822C0.696803 9.58856 0.92739 10.0504 1.38856 10.2813L2.04189 10.5893C2.31091 10.7432 2.50306 10.9356 2.61836 11.2051L2.77208 11.6284C3.00267 12.0903 3.42541 12.3597 3.96344 12.3212L4.69363 12.2827C4.96265 12.2442 5.23167 12.3212 5.46226 12.5137L5.84657 12.7831C6.23088 13.091 6.76891 13.091 7.19165 12.8216L7.80655 12.3982C8.03714 12.2442 8.30616 12.2057 8

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	37187
Entropy (8bit):	7.96934635356005
Encrypted:	false
SSDEEP:	768:XITwVNmqhk1C7UnUoj5lPe+2/cJSkxuEhSnoTObK4dLJuq:Xnq1C7UlS+2/IxPsfvZoq
MD5:	D2377A059F7D5E79F48122B351888C83
SHA1:	44D944E685B1B53D203F5A80419139084304D782
SHA-256:	D05B4F62853FCAD4481A7C8B14C5840E3FEC0479E2B2814785C41237B42D6A19
SHA-512:	F632597ECB86D07342C4528DABF9CEB99DCF307B5AA9DB16BE7F693702AA76CEC5A4C0B7A94F3E23404F78EFBC3F443A2989F624CF303D475B0086D882EFE2D3
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................................................................N...........................!1..AQ."a.2Bq...#R.$b...34r.....CDS....%&'7cs..................................:........................!1AQa.."q..2.......#R.B..3r$C...............?.....t.}4.\|E.>5.E....-%Lo..u.Q.....4hb'JjPvh...q....;..O!<.S9h.N2`V$.....g....Rw.....G....5.~.\|....c.).H.Q.#26.d.S.....n.q.....t..I.VG.../).....o..a.h..4x{..I-..i[....^I...bf...H.:.N_.....I....SZq\...Tm.......A.d.g#......I..SW.K...Q....RLs.......R)>$....)a..'$i3J.p!...?.3...:.hj.jm;...0......M.V..}yc...KOD.e....#?y0A..%...'.z.#3.....>+..~...J.....R..M4.$.h\:H.d2..A. .l&..9F.].....T.C4i42)G.E...`..pG..C........\6......z.,...Ju.c=.}...Oeb0.x......R..w.........x..N..U..R....4..2.Rq.3...+.1mjQ.T..D.{i..!Q....^{j.jX..$..}..(..e-C....Q.:\.3..'.N.....j-.7.U..kc.......F...i.G.Q..

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	60854
Entropy (8bit):	7.971956310640623
Encrypted:	false
SSDEEP:	1536:uf4kJhPjOBq7MNKIDRLsAX5KNnipIpBemLhwy78N9bIUZI:uf4kJhPjL7MIIDR55WikpNVuI
MD5:	468C8E992BC09C92FEB079B9417733E9
SHA1:	037F0E76BCBEFB7267223DD8EC5F8161AD61205D
SHA-256:	D763D17798C0B5A978B968F7ACA5C5C2AB970EBF878C01FC245866FFC5BC81A9
SHA-512:	A0764BB638EC36F7DA266100732AC632903E502FBFD199F5C4F3CB776BD9FAF1D7A0AA5B2FD30C88CF03B16B51E11A8FCC98AD18B99AF58B56D80277CF82CFD8
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2668080/ss_4924762e48ea2e5f835de9dc20dc0a958535e81e.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................Q.........................!.1A.."Qa.2q...B....#R3br....$4CSc..%5..st..67DTd...E..................................;........................!1A..Qa"2q..........#B.3Rb$.r.4C.............?....W.g...>.F....l......e..r.y.%D}.7..ku..Z:.w......v ....E.<.Y$.........m.f.4....&B....@P.C..=...Q.j..5....!\...l..l../...}....4[..\.....^IP..]M6....w.>'~.y.a.....ei.)>.S.^..........h.....g...d)..P..........B.gT.f..j.(:.)...,...2C...%c..Y...h..n.I...z.b.2....#...#@...]..Ny.a.o...G.4...n.9,..}A.....R[...-.E.Fm..Ko ..,..H$..1.vt........y.W...I.......YU.m...^.5....l....)'c.9....b...._......D..S.{u......_23~......B....W.Bv.....................+....9..J[#9n....K.V.T..H.5..j.......v_.vHp.......o.X&...m..T.....#.G.....9.$.....d.}.Wi...g.7..d..6.{._x...C9)V

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	489851
Entropy (8bit):	7.990768037477039
Encrypted:	true
SSDEEP:	12288:JSsluEyB0qJ1gVO/ihiuS2iJub7Na03Bbwz:r8EG0aCY/ihhpBbwz
MD5:	6738BAFE48640F890CDB47D1B0569B2E
SHA1:	ECA49CE790C82FA699EBE4233F093BA0125DB0B0
SHA-256:	C45762A678A80D38DBE8D55AE338FE64DDD9B995D6358028F91CA9A5159F5F9D
SHA-512:	6941A6B383B36251D0D73AE9397109079F3B4ED0288713AB2C132D3E58D23D43B9107FB34E69EE4B26EEE4BD88AC96376EB33D4747723AEFDF9A94F57AA0E7AD
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2464109928229428542/898BD49A4929C779E97993188F5D33E927C479AB/?imw=1920&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;......8...."..........8.......................................................................C.aIa5.!Xk..<...P.d..@[..<{..F..<.........w.K.......u/{.K....{....{.K....}....x]K..R...o<......$.7.Ll...J.!......'...9...)..WE...........Lt...q.-..}CQ.....G.M.....LB..$.m..%.L!t.E.i.!&..$.._.A.._@..4s.Yd.~.+.......}.z...,..Uic...2.\....^.N....,f..R... l.......>3....W...N.=dI.?g.kX...:6.i.L..9".n..,..r.M=....G./@..h.7..R.~=.V.j6j. 6(}fvt..I...!It..c!gc....J... ../q.2....\|L.......P..i.9.D.U.v.l....b..B..j.(Gk.vB$I...v....!..1V.....irk.x0.L.........y.H.......T.R.os.O.....8..,l..8(\.R.$......K........Y..NiL.....Q....'.u....$.sdN.K7.....~.~......S..(.._'..~.....z.4.$....w.;.%.w.s..A.z.%.I{..].:...%...{..^......xIp^.]R.K!.BtY.J.N..H.I..P.E...........7(&....}.\3.J@...IKS.D.s.!/..F9.8DsHE._."w..U.+.;..7.M...X.t.....

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	74763
Entropy (8bit):	7.980890820697891
Encrypted:	false
SSDEEP:	1536:j4OdyIdj49vX8h3SG0rD1Iob42Ao1NspmCgyEuDQn6rtYQR8+Dqu93:j4myIB4F8k1Io1NsECgydDQQRPWY3
MD5:	5653CB5F32556AC3E891D15E9F4B6CB4
SHA1:	116CBB7328FC1FD299C0893CE222FC80426460E6
SHA-256:	321F5A327721535E2A694D0F1482C873859C6CDF1220FCE7D3FF5BC1CD6AAACB
SHA-512:	046A626A1F513DCC7A3E27E93CB94BC0E020D1694A23FFFC65885577A960075C3F362BC331AB0417D565DE8966DDB2B73C57585F0FB2FAD1BF24601586E17224
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Q.X............................................Q.........................!..1A"Qaq....2B...#..3Rr...$45bst....C....6.%DESc......................................:.......................!1.A."Q2aq........#3B...R4.Cb..r.............?.....c.G-..b.`...q.'.(.........P...d... q .Q..b7....R8...f2...\|.Gcv.]E.BN.S8N.6."aQ.6.b.bgh.;.QV..{..........8.....0h.>.2,.#...2..<.-.0..z.E..g).:%..l.L....CV...T......V...+..&?<@h.....K..}.-l.G.EN..I.w..t.].....S;..4y.c.=.\.. ...W...$pg..4.c....1.9..BQ.+..5.#."E[.. .4a...q.3.\ATpa.....V..4c.-.q..Fr.1.4".C\..Q..B..b..C\.B...........M.2..i..v<.(.U..7.....74..I5!.B..\|.:..m..i..+l0.3..J3..J3..J3..U...%....C9X.3..!(.V..9X..98..\.B.!.!...q...l#.8fJ.).}..-..U.c.mT%..j..K4q..E....vEz...g.2u.lH....V..P.....\|@......F...........`[...r8C.."%.\|..A.Q.(..n.*.Wc..I.N3.....b.p`.. .o

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 233, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	131789
Entropy (8bit):	7.99086118070741
Encrypted:	true
SSDEEP:	3072:4mGhNw31jx8MWPEx77TygGsGcIppEB3+r7nfpE:EhNgjxpWcxzucIpEOXnhE
MD5:	00AA9C48005E4B035770E0B95B6F18C6
SHA1:	C19264A4A042297FC2DE45AB5E3E87562F03AC74
SHA-256:	65B897153289D792513F4305E9A2ACC84981C32E8FDAF1B28B86B4D27D077183
SHA-512:	014CB4EE9BE7F3CC5598EF485B15C286356F808966B458C78326006728F2C65206163F2F8694D5C4BA195E15F3132B67B6C72069BBC9CC41CE012FE7DD3910A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............caNv...............<'A......IDATx.\|.w...Y....~.i3g...Q[..vW.{.66...`p .....7@.$.o .o.J....16.8.eq[{{..wi...O....H6....K/iG.3.9.u_..i.....)W.W.8.jH..d...=s.?....{=.=......R...B..@.:=..x...T......[&.&g....\|p..A........y........;..x.+wp..=\?...#.!...B ...-....`,..<%...kAHp .()@8.s8...B...P~.!@.A...s.!. .9.1.u...p.Sg...#...];.S..........#\|.s..._.kt.c.Rg..M..+.r.....#............).7.....C....S.,.Y.P..N.(...,.9$.%%.,.........K...9...`....Ha.R..../../.-.......{0_...6..UvN..w3.^\.......<.......4j...(..Y.V.3...[.d....\|../.=.S...+..k..7'h........#G....Z{.D..y....b.l.Q.^wl...=o...VY_<..&+r.Nq}..>FY.\...L8........Y/bv.,6V<...'...d..)B.e.....d......Xa....T.v.b%..5VZ..G5.b.....}."A.5\|.0d...#...G......uo....>..e....!$A%...L.x...S(e.m..x.2Eg..ZA..Rq..v..........z.<.....,..h4.D....'..kvm.QK..j......w.<.......TA../,.......'.wY.TFj.~...i5{

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	7403
Entropy (8bit):	7.925292633313291
Encrypted:	false
SSDEEP:	192:shUbUuHO0E+Ql7L/qtZ2+EePbyaQGDR7iVvao0cq/:shk6nV/qtZrEeWaQWcap1
MD5:	1AF4E7137ECE0F7AB8AFE34B5697BD45
SHA1:	74AF389D37D432FA749E9E91A997EC1D34065E56
SHA-256:	D5D3A943F37C0DAADEF800BC58ED93E3381322284F1FBAFE71CE1F3835FF337D
SHA-512:	68E9FEFA93C2BA6DAE59E72541F4844492D7215CB9757090A8AEA86741BCFF88B38D941B838F3F3B16B4CDD7A7A513B2681ECF6EB3F3081AA2926070D90831EF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................E...........................!.1A.."Q.#2aq..Br...$3CV.......4RTbcs..................................1......................!..1AQ.aq."2.......B...R.............?..k&K....9.......(...O.........2]_....G...#.;.^3..]s.G.....K!..N8....IZ.-.p.....\|.%;E..YJ.j.....1..>...t.3.%]...k,.T...]..q..M.......G.)C....g.@u..Jp.6q...+.E..%QV..r..>.>.=O...O.t.{....f3ej.4.<..........I~.X....I..ZH[.$.2Tr..h...ck.q..'}..V..9.PY.D..g.h.4..W...l.m.#.]./..?w#.\s.j]}.Qyy......^i:.=.....1..}.)....u...}..:.F...'.......d-..W:+.Q#.B.B.@........dms...D^C[.8.......S.Qi....-..x.E..W.)\|N1...@....4.....%.B}...7..G.';B..U.M.7...`Ho...^J....9.#..k..H.'/4<.~.....s.....2.......T.&k~......_x...W#........W.).......#....^{........U!..........W.P}...W.t6.H..u.j.Z..cX.+*...tz...2..B<U.6.z$'....T&{

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13124), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	141821
Entropy (8bit):	5.84895261266736
Encrypted:	false
SSDEEP:	3072:TXraRjF6y6Hdjms5AiWZjP5nrqk7oyY/kK+q49rfpDjH:TORjF6y6Hdjms5AiWZdrXhjH
MD5:	A399FED9E80EB6FC3B0F5C99B40A71A0
SHA1:	E59F1C39A5F58A7AFCCBD478910A81E4A0C8FAFC
SHA-256:	C25EF56FB4DF5BB3062ABB51EC475037BC76B138BF503EA5C6B469FC6F6FFD4E
SHA-512:	E081311DCF461B69B32C7B8C3F7A35CAA56210D8F7D1D481F88F5782E5E67AF79308E9740ED8E1BE311A38E7648FAB87AA2729D01A6368CFEA50440CD435F0BF
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/applications/community/chunk~d2dd7ecf6.css?contenthash=97854aa28eb090f068fb
Preview:	............_3ZlRVLZBBJ5AlqcTXgH39I{width:100vw;height:100vh;max-width:none;max-height:none;background:#000;margin:0;padding:0;box-sizing:border-box;overflow:hidden;overscroll-behavior:contain}._3ZlRVLZBBJ5AlqcTXgH39I::backdrop{overscroll-behavior:contain}._3ZlRVLZBBJ5AlqcTXgH39I img{max-width:100%;max-height:100%}._2Q0i393KuCPDvhYcQE_8hn{position:absolute;top:0;left:0;right:0;bottom:0;width:100%;height:100%;display:flex;align-items:center;justify-content:center;transition:transform 300ms linear}._1QaLXa9BqcHtuXQn-WeKKB{transform:translateX(0)}._3CBDhewhtAYADfOEKQ088x{transform:translateX(-100vw)}._1bAQfVTEag1iry95f9aB5b{transform:translateX(100vw)}._1peagr4kB_Df9EaBgyqNw_{position:absolute;top:0;left:0;right:0;height:50px;background-color:rgba(0,0,0,.5);display:flex;justify-content:space-between}._1SOhddmKueqNM0bBsPezHq{line-height:50px;padding-left:20px;color:#fff;font-size:120%;max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.hK1C_5FvGkWxVfYm1K5O-{padding-ri

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3737
Entropy (8bit):	7.906671945599965
Encrypted:	false
SSDEEP:	96:OSDZ/I09Da01l+gmkyTt6Hk8nTqviwYZP2H51:OSDS0tKg9E05Tqviw6451
MD5:	1626F52ADDB7C56FE3679D82108C62E9
SHA1:	2B414092D66ECFF528950093A655F755C3C7F3B5
SHA-256:	AE9F6C61E25D15882BF57BDE193D10D375BD315C9741CABDA11D700FD1BB7DD1
SHA-512:	05548831477CC421556C404F3411F581E98A84FF2E699882CB4F5DCA17D1C5F77B55ED2B8211EEC32D0A4317BE1C4EBC636277F840262491B753415F6F198276
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/images/skin_1/footerLogo_valve.png?v=1
Preview:	.PNG........IHDR...`.........H!Y.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	16620
Entropy (8bit):	7.946570448993533
Encrypted:	false
SSDEEP:	384:apaMfMVn5A/OtKg485m3SxYqQI2dwpKYlXiIs+tC8rCr:FMUhW4wSqz5dwp2IsIrS
MD5:	6EDD605A22CD22DDD06D082DF29A9A8B
SHA1:	25E87BDC3613C76B424F1504F4B4B9BC1832F67C
SHA-256:	57F2B6445CE516EA2AE4C2F168E05FC3F495BE3A2A966EA278F06BD3743F16E7
SHA-512:	D71464F3010A09EFD8621D11F192CE138B4FCD6B6A576B0273774470442724E20A9310BE1689C6754E6816668A550E4A58807D8BAD238BE6DE7AEBD9A857FDB9
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................h...."........................................E......................!.1..AQaq......."....2BR..b....#r..3...CS..s.............................."......................!1.AQ.".a.............?....B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..x.V..}]..]....~...Zn.....!.....g!h...v..?$.....O..z....ooS.I.!.....g.h...v..?$..v..?$..Z?....O./.wooS.A.........(:.....(3P.N.v..?$..v..?$..Z#C.{z.........w...v.e....x..Uo.o...M..-....:..k.............(Z......H...F.....y.\|Z.f.h..v..?$..v..?$..Z#C.{z......2..A......O.og.k..]...B....].1.....(....m....r..=..&Y.f~..hg....A...K....jc<..?.zA.j...W}.0P.?./.T...H{5S.3.....[..5?U>.....T.T...M.D-.vq....J.OC....?$..Zut+......v.~.[....hZ..]..O.L.....~..(Z.....g

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	7340
Entropy (8bit):	7.940077484745219
Encrypted:	false
SSDEEP:	192:6xM/jQMq58pzu/t5Q43TVUMNW5bobPufM2CjNgwf2y:6oQMq5kzm5Q4W2bPufLCRF2y
MD5:	B83E765D7CB0D2D1AD427524EB3F5C7E
SHA1:	B4725659FBB8FE8A70338DA8C41BF02E36E7596B
SHA-256:	404986DB2FCA9B77E3CA1204C40427929FD791BF2E54437470CB29457D39BA15
SHA-512:	98B2CE7E523C22562EDAB882855D146610AF33D1A30CC85882F51D3E039FCEDC65AA0FED30E476FAC45D88A0F4EC9134C78A9ADAFAC803F200FBCE229DF74565
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1172470/capsule_184x69.jpg?t=1715104113
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@..........................!.1.AQ.."aq.2...#$.%BRr....45CSc......................................:.........................!1.AQ."aq...2..#...3BR....S.Cr.............?..w.'...ax...t....6......l..(..X<...P.P.+..)..za..E......kI...>...$....y...V...g...m.z.o....+..s.3.[LR.~....D..t.#..T....{~B..CI.s[..`.....(.l.S...P..j.;..........n{:..=~..F...-.;0;.#...w..M.3....+..jj........$v..T.j.....yt.j_3........a.i..YER.V...x.1o.T..._.x.Z\K4.?.Rig].y.....sL...hi...Q...j'..O.%.......M._..M...x.xK...e."...$...?Aw.}.u..b.-...a...`.^..b.............s..;x.....l.Z..axg..&.U..-...G.//;...Ru.9..il.....W&G.........6..h.EIj.2......}pci8.7U.,.C..oN.r.@:....n...5.p..\|..j.......\|...[..C....b.fid.;...=%..j.C.e..}.A....,..O6.......n..:.!uN......][..-.5:.mN}.v....k^.n..=..

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 306x260, components 3
Category:	downloaded
Size (bytes):	98215
Entropy (8bit):	7.975711413386814
Encrypted:	false
SSDEEP:	1536:404SLzP2W62NHi/f6/emvHBHiZtFcSiFNbuZlv8556Q7JnpNYhKrT2z7RhOBMxae:4bSLzP2W62GSXfBHWt1iFl4lE5h9pNqP
MD5:	F5864CA263EC1051BBF2F4FCBF811DE1
SHA1:	7EBBCBB3403F993E4D9B51DAFE072A3CD3563BDF
SHA-256:	9796B7309C20638E60FDE302C1C3609EBC5BACFD48332CE3CB0A37155BD90872
SHA-512:	ADAF34ECABA8D78D6081CCD6931260C0BD6EEA0185A321E1DA055A93FADC1BB10ED75BC85152BED12D4AD3296027E3689AF11F68CBC73E20EBF6F7F2AD8393F9
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/spotlights/f34a3a6eedf174a39998d1f2/spotlight_image_english.jpg?t=1715274766
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	60854
Entropy (8bit):	7.971956310640623
Encrypted:	false
SSDEEP:	1536:uf4kJhPjOBq7MNKIDRLsAX5KNnipIpBemLhwy78N9bIUZI:uf4kJhPjL7MIIDR55WikpNVuI
MD5:	468C8E992BC09C92FEB079B9417733E9
SHA1:	037F0E76BCBEFB7267223DD8EC5F8161AD61205D
SHA-256:	D763D17798C0B5A978B968F7ACA5C5C2AB970EBF878C01FC245866FFC5BC81A9
SHA-512:	A0764BB638EC36F7DA266100732AC632903E502FBFD199F5C4F3CB776BD9FAF1D7A0AA5B2FD30C88CF03B16B51E11A8FCC98AD18B99AF58B56D80277CF82CFD8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................Q.........................!.1A.."Qa.2q...B....#R3br....$4CSc..%5..st..67DTd...E..................................;........................!1A..Qa"2q..........#B.3Rb$.r.4C.............?....W.g...>.F....l......e..r.y.%D}.7..ku..Z:.w......v ....E.<.Y$.........m.f.4....&B....@P.C..=...Q.j..5....!\...l..l../...}....4[..\.....^IP..]M6....w.>'~.y.a.....ei.)>.S.^..........h.....g...d)..P..........B.gT.f..j.(:.)...,...2C...%c..Y...h..n.I...z.b.2....#...#@...]..Ny.a.o...G.4...n.9,..}A.....R[...-.E.Fm..Ko ..,..H$..1.vt........y.W...I.......YU.m...^.5....l....)'c.9....b...._......D..S.{u......_23~......B....W.Bv.....................+....9..J[#9n....K.V.T..H.5..j.......v_.vHp.......o.X&...m..T.....#.G.....9.$.....d.}.Wi...g.7..d..6.{._x...C9)V

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65256), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	186966
Entropy (8bit):	5.054363743475159
Encrypted:	false
SSDEEP:	1536:zvAA36oGqNyyrdiEEUl6SoZsJcl1jnXvQErjituf3FwJzr6oQfVxlSgLOd8vlx+:z6CdipMm1rQErjMuf3FwJzr6oQzEgLH+
MD5:	5D0C339C5FF74EF037A852D9F9BFD31F
SHA1:	1382CEF36FF82D88401FBE795923F1B5961C89A4
SHA-256:	D095C4A537F42F6C9AC380B4136C2895A0EC25177E37F4C82CEAC5A96D57E34D
SHA-512:	73437ED124558B47CCFD8B6713FAB3612943358C383AD55643E794F2BC89AE135D62899ACA934A22751E5DF947CD1033EDC9E41AB325AEF850B5FABE654B96C3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=99f4a06d3498b0736099
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[7975],{44965:e=>{e.exports=JSON.parse('{"language":"english","Steam_Platform":"Steam","Button_About":"About","Button_Append":"Append","Button_Back":"Back","Button_Cancel":"Cancel","Button_Close":"Close","Button_Clone":"Clone","Button_Confirm":"Confirm","Button_Copy":"Copy","Button_Copied":"Copied","Button_CopyClipboard":"Copy to Clipboard","Button_CopyLink":"Copy Link","Button_Continue":"Continue","Button_Create":"Create","Button_Delete":"Delete","Button_Discuss":"Discuss","Button_Dismiss":"Dismiss","Button_Edit":"Edit","Button_Learn":"Learn more here","Button_Publish":"Publish","Button_Post":"Post","Button_OK":"OK","Button_Done":"Done","Button_Overwrite":"Overwrite","Button_Retry":"Retry","Button_Remove":"Remove","Button_Revert":"Revert","Button_Save":

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2103
Entropy (8bit):	7.428875646425908
Encrypted:	false
SSDEEP:	48:swqQNn2xYJ3m6piUaNLmGQ71BPD/rqXBquFUj:8Y2k8vm77DJuFw
MD5:	70DD94DB2CC784EE7D1D4E711E1C4260
SHA1:	F04A6007DA546006B008B1A7D143B4DCB4A3147A
SHA-256:	16D0421C9B126BA66695653318780CBD30FEF1FE2093F9135EEB323A37143A1E
SHA-512:	BC3BAE539458647145262590EC96496EE6AAE6985FF3FE0D4BDFB7E6FF7748C861D7E874FEEA32E301FD437BF68274E203BB2C75E8BC779BE69973A746DEC2D8
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/images/userreviews/icon_thumbsUp.png?v=1
Preview:	.PNG........IHDR...(...(........m....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:8BABEDF13D2B11E499A8960F9E7800EB" xmpMM:DocumentID="xmp.did:8BABEDF23D2B11E499A8960F9E7800EB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8BABEDEF3D2B11E499A8960F9E7800EB" stRef:documentID="xmp.did:8BABEDF03D2B11E499A8960F9E7800EB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>d..z....IDATx..X]O"g.~a.>e.(.@......j...&\.7m...j.@.E.4....m/..VSC.M.5`(.@G.D@.d.3.&.8..0.z.o2.q..{.y.s.h.~..1..

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	7340
Entropy (8bit):	7.940077484745219
Encrypted:	false
SSDEEP:	192:6xM/jQMq58pzu/t5Q43TVUMNW5bobPufM2CjNgwf2y:6oQMq5kzm5Q4W2bPufLCRF2y
MD5:	B83E765D7CB0D2D1AD427524EB3F5C7E
SHA1:	B4725659FBB8FE8A70338DA8C41BF02E36E7596B
SHA-256:	404986DB2FCA9B77E3CA1204C40427929FD791BF2E54437470CB29457D39BA15
SHA-512:	98B2CE7E523C22562EDAB882855D146610AF33D1A30CC85882F51D3E039FCEDC65AA0FED30E476FAC45D88A0F4EC9134C78A9ADAFAC803F200FBCE229DF74565
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@..........................!.1.AQ.."aq.2...#$.%BRr....45CSc......................................:.........................!1.AQ."aq...2..#...3BR....S.Cr.............?..w.'...ax...t....6......l..(..X<...P.P.+..)..za..E......kI...>...$....y...V...g...m.z.o....+..s.3.[LR.~....D..t.#..T....{~B..CI.s[..`.....(.l.S...P..j.;..........n{:..=~..F...-.;0;.#...w..M.3....+..jj........$v..T.j.....yt.j_3........a.i..YER.V...x.1o.T..._.x.Z\K4.?.Rig].y.....sL...hi...Q...j'..O.%.......M._..M...x.xK...e."...$...?Aw.}.u..b.-...a...`.^..b.............s..;x.....l.Z..axg..&.U..-...G.//;...Ru.9..il.....W&G.........6..h.EIj.2......}pci8.7U.,.C..oN.r.@:....n...5.p..\|..j.......\|...[..C....b.fid.;...=%..j.C.e..}.A....,..O6.......n..:.!uN......][..-.5:.mN}.v....k^.n..=..

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	43044
Entropy (8bit):	7.941199566430419
Encrypted:	false
SSDEEP:	768:biCpgPwHx3MmOzAQx/ltYil1brywCKc+78Fcs19xzSCwgpL+GasvucikRWkql6uP:buwRcmOXxdtYiLbve+0p19hSChpL7Akk
MD5:	A39021717A66BA005CC0CD3C8B01797A
SHA1:	A402A0232D50C22B2E0749E92FAB9B07BA1421BA
SHA-256:	40E1A4F9DA00ECDB455C6947531227787C1C593A6AF4837CAC3CD6CADEFB25D5
SHA-512:	2B691EE956D8F92E33BAF49771F0FFAF9264153B8878EAFBF72E8EB7CC4CDF082EAF0C3621E8150413D318EA2DBFBB623E89C3EC45F40DB86C056FF4DA959555
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/394360/header.jpg?t=1715685474
Preview:	......JFIF.............C....................................................................C.......................................................................................................................[.......................!....1A..Qa.."q...#2....$B...3R.....%7ru.5Cbct.....'EUWef.........................................6.......................!1.A.Qaq."2.......#.$3B..4..R............?..^O1..f.{~..gf....t=.."...3....$@a.d.$...t6C...&$...M..A.`.Dv#.]K......0L.y..N....d.L.9..R..R.fc.G\..C....)..& .g>.........0..'.h...`.I........?L.H.G.C..G<...R$.;..........AN.~.a.....Y...yp.z`zh.....Y.).(...G('..q.?.._.Zz_v..b7.?S`.IS.I).(@..@.;..l.v....J.U...c..<...R.ue...{j..P.P..mB%a.n..g@Y..=.....4.......P$...$t...-#.....]3.S..H....J....Ud.N.. ..[o.w..).MUZE3.2..H#.N..1.....W...>..o.*.M=....<.\)T L...ziK......A...n.R...-......y..2I..A .....dj\.a.FN...t0....^.HhA.F.$.R....$...:.#.P2@....MMxi.....2.HGfx.\|..!N.~:)},N..4}.r....I.X.b.71K...$g.=#.L....>"..d._...W..

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 76x76, segment length 16, baseline, precision 8, 540x338, components 3
Category:	downloaded
Size (bytes):	50217
Entropy (8bit):	7.978967541095014
Encrypted:	false
SSDEEP:	1536:+T2ObH0WF+G5qkp3Ax7Qm8lVyLgaO64dsWTK:YZXpPXVoO6IG
MD5:	0AACE4E2DABBDA793BD99B673F960C74
SHA1:	4427287E1D55FB6B9CBF237B90044DFE5CD03B66
SHA-256:	5449B88142C10126EC7CF7161B345C4F275130502665C063283511DC1C1892AF
SHA-512:	D9D3C7A41EAE156FF9B5ADB583BC7D80CA7FB9814CABC18413DB95C86C281DEBB4FE2E2D74AA33AD17454BC9961716F4EE2293B26E7A74DC933FFC861F086EB5
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/281990/ss_7f4d7cc160c43e77aa523e910b365e0ca436e6bb.600x338.jpg
Preview:	......JFIF.....L.L.....C....................................................................C.......................................................................R..............................................Y........................!..1..AQa."q..2....#BRS...3bcr....$CDTt......45Us...%....6Eu..&................................=.......................!1.Q.Aa"2q....R....B...#3CS4br...$..............?..k..._:.<.W.\|..<..P....:.s_[G<..^TY.ds.,... g..H.d.(<4t....-#.a......,......yyp.....0ti.D..8{M.....I.......U..cf.T>..^l..[\|./.&#.....DhA\|..<..PhB....1s..<.%F.$...L.[.W4.c.....&..p).-O..K@+.>..l1q..R...n...,..\. #..c.=+.)qe......W\|...\...v$... .r.."..1...._......PQ.0Fl...;....1..2....F..4,U.e...rz..Q....rXE4S..K..!u...C(........).$.I....K2.3.t...v-<r.>....!..k.I...N.....;..,.....$........QI...-.2@.."../>KX..%.U..z....m...).i.y!.1...+ `...X..]...y.....r....L..X.s.o.<\|q...;b.=..3..,.4 .F.f.H....4.r..y@^...92C..<...LV..T>...r.....<.mRN...H.2N).6(G..

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	85322
Entropy (8bit):	5.68226737451887
Encrypted:	false
SSDEEP:	768:DT5iHXsJv7oANuwW6tNhEIqwvR38QWQMJ6iJnEAUUaEFxfsN/WCcZxb98cZbYBci:r8EAQEr5C231+iSgu873pO9EHUnweoQH
MD5:	675FA9DCCA7DF359707CED27B295E51E
SHA1:	263DD37696EE9E53532716EC8FA3B79665C5F0CB
SHA-256:	6F374979A1F8477451693F51BF2C0F55B797C6AB95AF91C6E2E3F74F629BCC92
SHA-512:	A8021595F717C0DEE7C873EED6CE0142D1EDA0F3E9C24E721E92CB3AD93778CE9FD4B97C2F47D2A27A80891F6C37A75D3B384D305559CC875933160499358C01
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=english
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	169399
Entropy (8bit):	4.976254040069433
Encrypted:	false
SSDEEP:	1536:CZXcWblD1ySId1u6p3JuZolKvI28mGY7NIj4WT0PjXsW0NKWzcEjpPrmcGKJ/jfT:ocWblASIdIv8tXYPjkrmgD8d3dI
MD5:	6A39E0B509FECB928D47B8A2643FED2A
SHA1:	F67FA6CB1D09963D10BA117D6553C8E7D5BC7863
SHA-256:	D8BDEA7FFF893DBDBEAF6C2AFFEC091A77483B9EC10E7958486BC3B6CC170C96
SHA-512:	B9B8C6D9AC4928686C5EA254AC8F765C4F3690F79E5B1CCAAFFC48D4BD47872B9CC5475C038F70D804740C81915FDFCE315EBE553B628D12F7CA1CC4467075D0
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare
Preview:	../* Prototype JavaScript framework, version 1.7.. * (c) 2005-2010 Sam Stephenson.. .. Prototype is freely distributable under the terms of an MIT-style license... * For details, see the Prototype web site: http://www.prototypejs.org/.. .. --------------------------------------------------------------------------/....var Prototype = {.... Version: '1.7',.... Browser: (function(){.. var ua = navigator.userAgent;.. var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';.. return {.. IE: !!window.attachEvent && !isOpera,.. Opera: isOpera,.. WebKit: ua.indexOf('AppleWebKit/') > -1,.. Gecko: ua.indexOf('Gecko') > -1 && ua.indexOf('KHTML') === -1,.. MobileSafari: /Apple.Mobile/.test(ua).. }.. })(),.... BrowserFeatures: {.. XPath: !!document.evaluate,.... SelectorsAPI: !!document.querySelector,.... ElementExtensions: (function() {.. var constructor = window.Element

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	189427
Entropy (8bit):	7.992607279014738
Encrypted:	true
SSDEEP:	3072:QEaNV9kVtVCJkv2eThOT82xrBjSDPiTE4qnrMq59Aqk65Y6F//HyxJA:QE89kVeqhUHRE4irMq59+65Y6VSY
MD5:	70D3FF4273D0B164FE6415DE819A5216
SHA1:	1ED442D5137688C6CD685D6AC93A628E9AAC6206
SHA-256:	2BAE90ADC868D17ACA695FD140B96E496CA4E20515B4196AC8C3B258FE1D072D
SHA-512:	6324B404A8BB44EF75B8AF02EB679470594084D316C0610B80C6792594BBF153916777D7C88E0DAE42C37BFB123F18BE38D854E68238E3FCF2B2AE6570E561D3
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;......8...."..........9....................................................................../....y....IH.......^.H..C.....q....[...../.@..G......B...\x. ...eD[.)r.pg..T.$..Y..F..\|.B.Q..lo$.D..NNh..M..a.M.!...:C..+..&.l...a..J..T..r[...7..(.q.x....M..jR..E...8.K.e.z%..H,.Y....=.o....".S...f....(.....-..n..zgP..Z6.....Z..nT......xkh..a...)J..t..,..&,M.%......Q.....9'.>+3NGX%.iIJ.#Lht.....a.-...I../......;.a.7....eF.O.........5..=.D.#.w...r.,...^.-.$nYJ..p.z.......x.s[....5....UJk.OIj....u.1...mW.....DCh]\..m.......M.^.C.B4Fm..31.G1...u=.-..s.h.wJ-;.;..z..9 '=.3.[..%A.w..Q.\lkJ...#i...........fl.T...n.U)r.....X.....L0. ..:M..q-....E....!....E....?....0&..F..5..V\|.{..n...B.]%....M....QI....IF_..Z5...l.zV...%.31..eDRR.b...........oM..d. ....i'\|4k.R$.)..&....F.vFIRE.....,....M.Z'.D;....K.Z

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 800, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	161187
Entropy (8bit):	7.990584731304817
Encrypted:	true
SSDEEP:	3072:bZ9L5Lw6SelSTdibeeotIIwQTHchAMXBDjLjtFzVEJJU:bZ99w6SelSsDomIMxD3jFEfU
MD5:	1D7363064D454B57F9C84DF28F566CE7
SHA1:	773B8A0F0C6CBDA10B0C2BA62FB53D323946E311
SHA-256:	F2F4D59A808653E110B074AB0DC600B249E7451CC609EEEFF3EFDA1E32CCF7D8
SHA-512:	F8A9E4C39D6C3E12AD9D01DB9C0318FCB82B5DBE97B57CA6576A482CE157F456786752825E397122EA45FBCE77E6C3CF62A2671C1973E40DCBF3CF26852CD49C
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/colored_body_top.png?v=2
Preview:	.PNG........IHDR....... ......n$....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:4F55FCD074F3E4119506ED59260C4062" xmpMM:DocumentID="xmp.did:17B3CA22F37811E492C4CBECAFB1AE21" xmpMM:InstanceID="xmp.iid:17B3CA21F37811E492C4CBECAFB1AE21" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F44166A275F3E411A027CF77346B534E" stRef:documentID="xmp.did:4F55FCD074F3E4119506ED59260C4062"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>B....q.IDATx......(O...........W.I$@.$.(2..^...

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	3634
Entropy (8bit):	7.794028345481188
Encrypted:	false
SSDEEP:	96:xgefOw79InHborYQ7F81WnO4r6dj78VEc185Yv:owJGorv1WJ/2
MD5:	29733FC12120D092DE74B80D415327F0
SHA1:	EAFE269D3119E5E8A312459E67363A3FB7397663
SHA-256:	0A46FA735671FEB45F2E432D9DF993D44DB85BF701D0D8B8F2ECD67870F58797
SHA-512:	77DBECFEBD7926EAE62814F0C19FAA37C4966C5A1C7E8267543A16EB34018DFA76F1F944AB71C7752520E581B045BAAE0BC0B0CEFE299671918550138FD4A6BF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................;...........................!1A.Qa.."q...2B..Rb...#3St.....................................0........................!1.A.Qaq..2.."R....C..............?...O.l....`...@.g$..$I..(.0..8.$A........u?X..I.`...OH..8... .....9.L... q..s........A.....\|........E@...."..0...`.. .I......<s.:NL.{...\@...y@.$.....{@........3....8.D s..d`..... .....`..H.V..g.~.R.Jy.....AF...#..iYw&.Za..u..!#....1..T'UOd~..Uz.n..p..3.[u02.3..~.....:.uL:...........+..O..#.S)...6......,y.F?...........Gk...<.t...b......S.}L?...d~....?u...;%1K.zRm....(q.~R#..r....r..21.b...b.\5.".^...rt....@....&I..f.d.s.....%<s.:H..}L.7....R@..s..............."..A..#..H.h......\......r\|...L.......iI\|...t..h..f.g.Ya.T....D.....x_....c....>]..O..g;?H..>...u..GJ..-.s.....O..z...2.k]4...y.).J.....9.NG..:..

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	122660
Entropy (8bit):	6.047516179670634
Encrypted:	false
SSDEEP:	3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh
MD5:	D45F521DBA72B19A4096691A165B1990
SHA1:	2A08728FBB9229ACCCBF907EFDF4091F9B9A232F
SHA-256:	6B7A3177485C193A2E80BE6269B6B12880E695A8B4349F49FCCF87F9205BADCC
SHA-512:	9262847972A50F0CF8FC4225C6E9A72DBF2C55CCBCC2A098B7F1A5BD9EA87502F3C495A0431373A3C20961439D2DAE4AF1B1DA5B9FADE670D7FCAED486831D8C
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..n)...l..ujGSUB.d....v.....OS/2t.....\|...`cmap.d..........cvt F).....d....fpgm.6!....,....gasp.......\....glyf...d...l....head...A...$...6hhea...+...\...$hmtxv.x.........loca..g....h....maxp........... name.\....0....post............prep.......D...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	4964
Entropy (8bit):	7.696254000684786
Encrypted:	false
SSDEEP:	96:1+iMq7rHV/pGkkhdqcNlYTwfUf5Gpm9LxghZd88eS1V9aj:P7D9sgVTBompwBVIj
MD5:	984DD309F9F0D37E0B8D115C152529B3
SHA1:	CB2427F43F3BDC0E6C79498020119748EFC7821F
SHA-256:	8ADAD69E83A2F2416C316299F91DAA1E61B9F48FF2314575BEF4339097A8E3E8
SHA-512:	B04EAB0A63B60E4E401AB7D4384DE50EB2ED2A7BC061B731C129EA13F4F4314E1728E12CBA3241125DDF1475870700747CE6528E67FE5036FA1B5CDF255F3617
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/0SlXGG18Kco/0.jpg
Preview:	......JFIF....................................%.....'10-'8+@=PH4=K9+-DaELSW^\[>DqydXlQe[X.......%..%W6-6WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h...."......................................8........................!1.2a.."AQqr....b..R.#3B..................................................................?......)..Q...6...v.........nn.y..M7..3.Mh.3.Mh.3.K.@.4.4..Mi4..K.@..F.4.]..4.]5.gF.....h.nG/7.z/G/7.Td.j.bRAbZf........r.(..6..J.P2..........l...O7....?...D.T..A@E.....A.X...h...........#.......(.. .0......$. ....F.P.i .(.(.. .(...(......X...(..............,#@.......9dwc.......+..QQa.j%..k@.."..f.......Qje........A.Q.Q.%..z,t.pv....Q........Q@..@...j.j..T....r;..ye......`..,,.......Q6l.@...f.`..E.YjY.....E.B@..P...k=<.]...A.j..(. .............".5......Ov>/-OVOv>/-K..Q.E...5.D4.i@M...1[lV......i.@A@A@E.dP.P.P..@Gk]<...3....j..\|>..^.PE8g../.......>.........p.....2..>.T........t}S.N~.R'....H.......p0.4U.....}.....w>...F......8.G.X..t~...q.......9.

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	8810
Entropy (8bit):	7.945302887252746
Encrypted:	false
SSDEEP:	192:mIKwZWEJJm3FYMu/MZjtAWh+Rbqy0PO8dl5JtZOZSgtK:mIptR/69+RV0Ph75JyZSgtK
MD5:	5F49AD0320396C09B3355A8E68E3EF40
SHA1:	3B28F5A8DBEF34FB738EF45F6CF9C360F284A9CF
SHA-256:	775C0F7D8E825F8656EBE6A9F99B51192F2A989341B6ABEEDEE112719F497A63
SHA-512:	35C816AC6186374C0FDF531BBDBD6189416EB6830F1BD4B931A4E921F50914B51BA62EAD38339A779A7D4B702C1528922698223552F318A1F7544037B21010D0
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2195250/capsule_184x69.jpg?t=1713799333
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................F............................!.1AQ.."a.#2BRq..3b.....$45..'Scr......................................;......................!..1A.Qa.."q..........2..BC#$.34Rb.............?..z...Hn..u`.{w.E.tT..sJS.ZN....6[....w.o.....K,..PI....8...._...j.(.5.e.E$.....QR..HU...n.+'&..0n....,..K^...i..J............n....=.X.+....../<bHjp{.2.Q..\|...(7..u.Q.Tn..2..T.....P?...E.p..o.....:..n..........p....,.5K]=,....%G.....q.2xQE.ovF.."]:%.M,5.2N.TF./(.@....v..]N...\|W-ip.,._n...SCQO[.'~.dN.<`.......,u.=on}UZ..7.-...e.....k.$J.K+...\..=.. ....O.t.... .^.../-2.,...1...}K....6....{.G.s..(.PjY.q$Y.d...a.#.`2CJW.\|D.9...J.... ..........~...&.H.....D..+..U.....,._.>...pu@t..NZ..y........h~]....H...g.....3....T;#KZ,y..R\|..;4.R......g.a[..r~.]..fZd...d..A.Q$O..,J.Og9..?.A.E.&I0..

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1816
Entropy (8bit):	7.335413459481553
Encrypted:	false
SSDEEP:	48:mwqQNn2xkJ3n7OO8oPTFC+6vUycoKGCAHcDsr9CQ:6Y2w72o7Fh68yLdHcYr9CQ
MD5:	C8A9A5322C7A32D42405AEC4ECC91E8C
SHA1:	A6A04E08067EBBC6E9D70361FAD164CAB634BD9D
SHA-256:	02E650004D02B883D1F77E3C9AB18F556D470CC4F41500917D0CDA68EC62D197
SHA-512:	F057B313CE4AEED427AC04B1278A8FFE105843CD0998CAC5E01DDBCD53CAFFCB5584239646A73C40281D671D22C2E163E0FC3F1A589FFF9E9479CAC206EB241B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............c....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D62C327C9D6211E6BC85ED92E7B3F4DB" xmpMM:DocumentID="xmp.did:D62C327D9D6211E6BC85ED92E7B3F4DB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D62C327A9D6211E6BC85ED92E7B3F4DB" stRef:documentID="xmp.did:D62C327B9D6211E6BC85ED92E7B3F4DB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`......IDATx.U.k.W.?....fg?21..hT.......H-..VQ.-.......`...(>H...R,B.7...t.iM.i01...nv....;....1...M....a...=...

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 306x260, components 3
Category:	dropped
Size (bytes):	49403
Entropy (8bit):	7.957131113762543
Encrypted:	false
SSDEEP:	768:4YyamyrnR98IT/OiGBqPpU5j7DVxc7z61AeGm2NN8ry/Xr7FCTYM/I0914ZdURAk:4G/zRNKMhU7+21iD/Xr5C00I09or6
MD5:	06A7C0D9BC8C28D6FA8B93B5813419A4
SHA1:	BE8BA54BA8ADBB305A101008B94C89BF68AE7708
SHA-256:	43B8E5770B562F1922E98909020E20B4F5CE8504BD3B84B87A07299DBF65285D
SHA-512:	5230CB8448798F4B46AADE2ADAED317F5FC8632164E521296BA412DC912852621D464BBE617AF79188ADDDFF2226D12AF0E759F978ECC61419BAA47D554B08C4
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 369x353, components 3
Category:	downloaded
Size (bytes):	14577
Entropy (8bit):	7.864346510667554
Encrypted:	false
SSDEEP:	384:JT7C8EzMfitRkllhOVNewoTmiT1PYL03tgUhhC8x7vNUZ0rj9:JT7C8Ez+inkP1LKzUhhC8xWKB
MD5:	9657670EEFB782A590993D109F8432C5
SHA1:	0E7FDA37E045A70DC19E9432DA502BBC008703D8
SHA-256:	06BE12F654ACEC50204D5BE9B5E054E3C1EBB62CE0FFA8821F8C65055BAB92E6
SHA-512:	30C72EC34D61A647D2DF5DFC3477940F5A90993DCB1F3E479E141510B054E97BB3A7B57675D48CAF756FDF7D0A2F6D0E1EF1D6E0CD13143BF7CB584EF5D14923
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/home/background_maincap_2.jpg
Preview:	......Exif..II*.................Ducky.......Z.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:AFC2F315A24911E6B6C8933CD867CC7B" xmpMM:DocumentID="xmp.did:AFC2F316A24911E6B6C8933CD867CC7B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AFC2F313A24911E6B6C8933CD867CC7B" stRef:documentID="xmp.did:AFC2F314A24911E6B6C8933CD867CC7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d...........................8.....................................................................................................

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65256), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	186973
Entropy (8bit):	5.054410402123722
Encrypted:	false
SSDEEP:	1536:BAA36oGqNyyrdiEEUl6SoZsJcl1jnXvQErjituf3FwJzr6oQfVxlSgLOd8vlx+:oCdipMm1rQErjMuf3FwJzr6oQzEgLH+
MD5:	76A6C3EAF572F8C7855D809FC1ED609B
SHA1:	EE4764D903C14735CD5AF4A665542D0DCE8890B3
SHA-256:	C91A6559DDED66F478C616D54A204BB5C1D889F8F3BDD95E281D0F922BE3227B
SHA-512:	1E0550BF55E1CA40B69115DCE2845A8079DFE3A1CD8ACC2397427E24F165DC5B742FD59496E84D024091D5010DB5E7B738482392FEC7EC728BD8D57B12B51605
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/localization/shared_english-json.js?contenthash=53a212bf3cf7a843dedd
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[131],{44965:e=>{e.exports=JSON.parse('{"language":"english","Steam_Platform":"Steam","Button_About":"About","Button_Append":"Append","Button_Back":"Back","Button_Cancel":"Cancel","Button_Close":"Close","Button_Clone":"Clone","Button_Confirm":"Confirm","Button_Copy":"Copy","Button_Copied":"Copied","Button_CopyClipboard":"Copy to Clipboard","Button_CopyLink":"Copy Link","Button_Continue":"Continue","Button_Create":"Create","Button_Delete":"Delete","Button_Discuss":"Discuss","Button_Dismiss":"Dismiss","Button_Edit":"Edit","Button_Learn":"Learn more here","Button_Publish":"Publish","Button_Post":"Post","Button_OK":"OK","Button_Done":"Done","Button_Overwrite":"Overwrite","Button_Retry":"Retry","Button_Remove":"Remove","Button_Revert":"Revert","Button

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 291 x 107, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25286
Entropy (8bit):	7.987583348057773
Encrypted:	false
SSDEEP:	768:oiqlwBKgZDTSqA5UXqJ0gGocupTTgM7YCNPi1GBN:Yl2QDJ0pocwgMLFzX
MD5:	E0B66ABD08331C9AF1034CE915A5E1C7
SHA1:	3010E55C0566A30CB0C71D6A182E09AF7DF3CBC1
SHA-256:	15442D410E832F6D63C620956D87B7C50346FA6B6E6BA233052D2785ECB5212B
SHA-512:	25F553BDA1BD5DDFA028B708260C4B98675FD6F199495374051E74C955C56C80FBFBF2ED40D11E8A136E4AA6C1A3F25895712C03065B539F742C5A031EFE54C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...#...k.....<\.....pHYs.................sRGB.........gAMA......a...b[IDATx....\E.>.....m....'...$..A.Q@.WV....w...tf...:?...(....,A..........}.o.k9..n...D.....w..u.o}.;.9u.(.B).B9...k.L....X.%R....B...x.v..(.B)..Hy.............Vo.+tZ...e.[WU.P..P...5.F..T@\)J.9."...o.g.7.x.z..>..bN..kZ.Tto.#...zY...P..oR^3`4i....m..1(..kRT.../..........dv.J.v.....j.."yo$Rk.7....+.B).._^3`4q....9...U......^.I.H.'._...rP....)W.A.}..'.Z..=.$.M.`..J...2...N={h.${"^E%..R......qXB...o.mB...fJ....n{r.9...^....d...8.J........o...U(..T.ac.7.JlSh.Vh1\F..l-.t.R(...0.:...9.=.F....%..#5t.2_.7_dx..F..f.R...."...0.c.P.z...z.{....i.5[...<.....C.M.{.k..}...n;.\|.\|....v [..........!....J..........XV.!(.B.X.p.4g...D../E..WC...v..R..... .......f..DA..M!...P..~T..)..TO~....n,^..$1.m...........R...V..Q(..[.."J)....Y.5m}.hN...A.W..$..T....L.B).1i..2..V4~.F}.........Q../y.{.a....T.O2._w.%.;;......O.>!\..=#$I. ... ..!...&3.k..u....%.C.u.J....3$.[8...2...

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 49x49, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	68391
Entropy (8bit):	7.97268897022121
Encrypted:	false
SSDEEP:	1536:VffuYMQEbFTAP0Un8aXpyrlwPb4XnCndP2Y8nMvn6EI:V3HbiFTAPB8fmjQCnxlJva
MD5:	92084F766DECF9CB903FE4FA887FAD62
SHA1:	37DF9E848A4D85477BF9EE9862B36D0C9DF885C2
SHA-256:	BC36BE0A35BF1DD7C57F789CB131C94EBA34B10BF8DEC3E8DA2F1991FFED4A74
SHA-512:	7B0FC9D0B7F2BEA2D95B19CEEE896DC648BE2E38F0FAA737B9B3663139C98B7386C2EC1A7E57196FCF89B128AF1F1232B3F66DACE0F4125CBC922BABFAA88257
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2195250/ss_6c1ef918ffe94050e72dcb2cfad3a95ee3d69f08.600x338.jpg
Preview:	......JFIF.....1.1.....C....................................................................C.......................................................................Q.X............................................R..........................!.1.AQ.."aq.2..#BR..3br...$456s...%8Ct....DSu...7Tc...................................C........................!1.A.Qa."2q........#B.34.Rbr..$5.C...s...............?......y.......F..@...<....Rh....P?..I.s^.....S.......4.Jc8.~.3@.......Dx.S......h....?...W..g...=.2.)..8E"Y.y.Mg8X.T...7...6..(.@.g..U...H.DzL.!..L..x....HA...N.w#..""..r.F~i.x6C...P#...Q.....l.H...b......#.i...>...C.S........Hj.].(.$.@.,.H...q..Z...A.F..H......P#.a-.~ .=E,!..)......-#R}.%C)P?CK.y..^.\.Z2#(ym..D\|....65.L~7...GBcShr....G..~GUS.rb..@.V...4.MI1p.#)V~t....t....4..y...9.:.h...4...@..i......:C3..x...`....q........i..Ex.<....F....M....sR.2..<...<.....4`..\|..Q.q.@o.($`..k...&]9>.-.h.s...d..@e.I.....n.....:..Q.vr...().-.m.^..U..S.T%....G4~....PS..

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	7071
Entropy (8bit):	7.9221495060636995
Encrypted:	false
SSDEEP:	192:5o8IzxHrJEC83v4cdnwj2PUbMPItXC6yl1:5oPEC83G2PUbMPN6y7
MD5:	0ED711B0BEE2FEE236E09C1BF4CE08A5
SHA1:	E01995DE407BA5EEA4F1977AD6C70C04A0128D8C
SHA-256:	31E10D1593454CBEC4FEC397F4554F92EBBBC2320AAA520C5E213760C010EEA7
SHA-512:	76BD8428FE393FBBAED1088F31C46C41A34354106383B8BB5ED727C705CF720130BCBF11338092C82536FFD224C0C1895C813BFA74122AACBA313DDEE0CFD97B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................E..............................................<..........................!..1AQ.."2aq.BRb...#C..$r..35....................................4.......................!.1..AQ.aq."....#2.....BRb.............?..G...5.6O......2S..J..d.$........PV.2<c.(=.)khm$...I9.I[RiNB.......O)V@<._:...$).Qu3..aQ......P...($...(raX.q...8...&...N..<..O.}....`.. d.%).V.:.2.%M.o!.s.,.Ci.R.5.[.t./9.;.5...K..S.e....N;.I...k...8A..[...,..3A.....G?...j..;]C=.A...7..ZrN......%).....J.0../Oj7.UP...m=..P.[G...k...J...6...w...K.).O`.......z.......y...>2}..X.. .a.v......N.A..T...J6>.R;.(Vx....k...5=.+..ON.=.. ....t..iQ;....y.....VCA...(......&.~..N.!.R9.>..MO.)P<..Fe<l.Tf.!.M2.q-...VV.V.N.>..8...A..=..~}..0.S....B0.N.i.8.Li(k...iA.,.....2..H. .:e{.l5=.<....8.SB....t...zm.5...[.nMAEJ.JDf.'8...g.=o.F.'.v...8...V.kw..G].D..j..n\

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	81923
Entropy (8bit):	7.982671033894948
Encrypted:	false
SSDEEP:	1536:VOc0SKLTCUM/m4sNEJRaUp4NKkjmNX7Ss4Lwr1cWVVhvvq7aiq4g/llPzt5n:V5Q8O4ujm5nAwr1cWV3vvq7/cpzz
MD5:	74545078F76D008983608A474C18429D
SHA1:	12FDA74528C3363227818BA37510D33E2FC942C5
SHA-256:	3F763E440E1F94C5B31BEE12FAC5277A49E2CC9165602A56B884ED03CB37A259
SHA-512:	C087F3DDA6C86DFBE0B501C699E8119CB4E6847980B518CBA2438836D376AA2FBBAFDE235C8396E0303E133B81B61BA62811CFD014D4025AABA5222FFE8DE9D0
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2344520/ss_068ff4b736f39eb4a06721a28dbcb1014ec19336.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X...........................................I.........................!.1A.."Qaq.2..B...#R...3br..$4s...5...CS.6.&t................................4......................!.1A."Q.aq2......#B.....3Rr.............?...e....R.P...E/...r..../......}\|....U.y._N&.....+.K..`.?.,u:...U.<...~....-.F.E..2.K....t.R7..A..;... .eUMOY.B.f.G..P.o.j...............t....p..I..oK......`..a......JtV ........M+M.I=4..Q.....-.MQ..yc@...J.\|."F#'.{..S...a..S.._Ug.).O...d/... ..J.y_......8.?.3.{...S..4..t..S..,v.8..N.$.L.2.F_+..K.w..0..<]J?$............x!&.I"eR\|.nx1.n...J..U.o....tl.zJ+....8..K.....);...:..:XC......&.Y..'.P..!.8..L.* BS.L..[S.....oA..E[...:...fm.Jg.I....Mo.nf..&...<...Gf.g...`;..T...}l./.z....0x.....^mM.....,..f.%. ...t.Q`E..+...J>..y..S]..K....A!....}....R''a.Nq-4...F....k...{".e.........t5.e..9.</<+

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	417
Entropy (8bit):	7.262641689932086
Encrypted:	false
SSDEEP:	6:6v/lhPVjnDs7fcQ5wiBGoV6M25AiJxyhXn1BgUELclMFkV1l4fyZJGqDmHbZTvwM:6v/727fcQlg/9E3cho7DXJGqWBGv6
MD5:	2E6556310CF788ABCC905DC522FE8375
SHA1:	F721B02ABEDCA660D17F7C7D2F38AAC2A89E4155
SHA-256:	32285E351F9647F9B357AA997D5E1F6C1C521DAC197BEE998B17041EE5297D7D
SHA-512:	BCA2C58FE50A210054774AAD059BBCF537F00E3B0EAD05B91F7AE6ED2A3BE93FE5B01BDFB155DA4BB14D8CFD3C7A72C5BC8BA4541D5C5097CD29AAABDBB3DA29
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.S]N.@..m8@.....p..Ay.P...i\|3.hR...J..r.{..A.......?Z.`L..%..3..... ...1..@k..Gn\...`...Qs...jR\|.....ZXm16{~.....v.7iO...))7.O3.RPG.a.C.I..!:(..s......g-..M.b.r.%....B....W1G..._y}.o...w%..Je...5!...S.`..)..`..#y.....[.. ;.\R......;.;.f..9P1..?-.0...4z.y..<{..Q......e........n.$.X-..25!X.G[\"[..........z.........IEND.B`.

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 292x136, components 3
Category:	downloaded
Size (bytes):	20473
Entropy (8bit):	7.957826403057926
Encrypted:	false
SSDEEP:	384:qBCf6m2ItGyM+IsQnTetnvaU/qczHM6ZJ0w9VU6u2qL9q6vsahtX:eCfqPjn2qGFJ08RqL9q6vsahV
MD5:	4EF827E22FCE5986B7A94FDDCF4DB81C
SHA1:	23F172F9FF4D467D69807A0D4B925AA4E110E421
SHA-256:	C8B5B4F343C8272BAA3D1187EE6CF4E4E3E35C653A7820BEA5A59FF21755FEA5
SHA-512:	59DD915D8B08687FA495F93F82F58F413B7AA57173793516F013C51C87E8BC6FAE3687F369EA6CC54CCB8C81ACDFFA53FA53E03DE5F04F23AB4B8362FA2C2124
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2582650/header_292x136.jpg?t=1715400017
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................G..........................!.1."AQ..aq2...#BR..$..%3br......C..4s...................................6......................!..1A.."Qaq......2.....#B.Rb..............?...M...+.).C..Y..~I?.Z.....8.%..No..(..M.6.BU....>.....i..>.F.TG.h......y.%-.i?BJ..#..2........H...Q-E..Q-E..Qz..E............r..p2...<}.u..:....z}.....o.0...]@8#Z.p{w.......)Ci+)B}2u.....n.Ps...R.KjF<..#.Y.N_a...>....Du..Z#.0..N..VOo.u.D.F...%..q..O[.7.+%x..m2 gT.tM.q...).....g#..G\.s.,.#.[.p...('..MG.m......4..mH.8.H...k..B...xjqGj7h.".9..X...{.....cA0..s.c..}.)T@O.8O..?.ig.Z.s..EG....C..eX.'.W......{....tE....x ...F......x:...n.AX>........X.W.$..B.T..H....6..U<..w...Q.....z.M..tc.;..yLe..\A.8XW.q.Y<..f.V..*&tIL...i./<.I.]..I)W9.;..j.......G..J......x99...6.........A.i..].Z..{...p

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 49x49, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	69704
Entropy (8bit):	7.983999662283261
Encrypted:	false
SSDEEP:	1536:3Uo22NidIaMiHWUzngX41wHOogaFOAW1hEVZ4SdbGeTlmzoiQiN:eIaMbUzngYOOogaFOAW9SPTljiQiN
MD5:	EA7D7EDF390E273E21FD0AC06EC7762E
SHA1:	A3984A82C05E7773BEC1F626FDFBA05ED432B824
SHA-256:	382169472668F2C93E063A702C8E9DC4F4CDECA5B7806D92DB410098C4672E03
SHA-512:	28DE7AE3ADC1C55909CBAFF58BEFB31193EBF5313160AB6BD9CBB9B0976C62FA8B983242906F7DFFD579D8344A12D5C8B858962621F1B29F4EEFDB0A470CE0B6
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2195250/ss_f3d31c7cffc2a6ab42fb76aaac2bc9d5258bc142.600x338.jpg
Preview:	......JFIF.....1.1.....C....................................................................C.......................................................................Q.X............................................I.........................!.1..AQ."aq.2..B...#Rbr...$34....5Cs..&S.7ct...................................C........................!1.A."Q..2aq.B...#....3R$br.....4CS.%5..............?..L..U.....&9.)!....C....A.s.px.D....,.X..Y$.jY...}....O.\|. .... ..r..l"%.)[.)u.Q<QC[..p..;...N...(.y.=.\|E.9..k...N.....!.....Q...l`.....?Oa.[^=.Vf...?...3J..Q....\?...uq...=6\.O.v..:...K..`. .z...Z.+mM...bR.}.....~.B..O..V.3...E.....C.....FTc.j...7>...0r...]..... .;..3EPN..B....i'........p...c{. .dn..!.-(^..]YH.w...94.f.....\......PG95.=M@/:.XP.#t...C.lM.Y...C.Y\....'U.Nj.5+n;.$M........d.95.~..})--'..w.2.O...jj....=.%..j..R.Ii..K.%..*.OzZH....6....%.L.?ZD.....=..ry&...i..).7PX..s.^.6...)W....3....m.Q<.L.\|.n...ME..w5.S^Y...Y.sH.ZK....%C..rT...Jjz...(M^D.x......sN..9

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	57867
Entropy (8bit):	7.977752077799411
Encrypted:	false
SSDEEP:	1536:zwX8K/+SW/q7GBYL7drFxNCq+KcwwWieGgHaYqQmM:MsK9ZyBYL7hNCcnw14l
MD5:	B358780DF7F80D22F1A032D065A2A9C3
SHA1:	CAFE6F2C9A81A9CFFA0559DF936D6705D515D309
SHA-256:	DFDE5B9454029AAC2D7501415E7D8492E53D2626E380F61D86C3DCF8CC0D7426
SHA-512:	77B5E9E906B10AD9A1AF8DCAF723F0D377DDCEDECE6466AB7874C99CBFF1D4C59B0F34BD34DD372F938BF243039240D9ED0E1A448EE665CEB885D066724F3C2B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X...........................................F........................!.1AQ."aq.2.....#B.....3Rr..$45bs....tCc....................................7.....................!1..AQa."q.2....B....34...5R.#rs............?...mkq.#..<....$.O:...dyQs..Hh&..3.a...@.v..r...C..p.r..6..R.XH$..sR.#.wel.p..O.co....\lI.....(..n!..H...{..W<>..B<.3.0>...z.Eh_....G........'s.i.P..Y).Z.......Q.S......>(.........d...h...k.Y.&...0zoB...E.3...e$..b@#5w.d.47..E9..V.......^C`H.?h.2r.....p....Y.ZG......,..4..L....L ".$...He..........$.=....I.J._. c..42../..c5%.- D#+.9T..PB.....C......@......\|......0!...+Df.F..*....."]2...~.:cV...F2\|;.....).U./.i.eW...mK.P..@2^.....Dv..x......K...d.......pJ...U=....ZZG...2.....y'..t...w.....lq....ZE.Gf@8... ..H\....."..."FU.A..%.7.....{P...y.....7m.0El.Dj...k!I...U.....j(WL..[..c....`.

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	13186
Entropy (8bit):	7.872519878092322
Encrypted:	false
SSDEEP:	384:rP+/pl0NCktaazs6IV0ceIKxfXFD3irO1Tyr+:z+XktAVqvxPFAOUr+
MD5:	F5F04C053B96F870FFD298F71147AD8E
SHA1:	D2C7472528E5E472ED3F04276EDF4101435197F3
SHA-256:	0063C46D7ACA842C8EADB42E95ACF4F9FF0A00772ECF0C3BD7D070A0D7BA82ED
SHA-512:	A817EA21CAFDACE3308DACCC8E7E7AF854F8A8FEC78B95FE377ED9E1FACC3CC28D3CF414FEC0F5B5C7C6E42C4610B62A2AD43EBF9D79781BE420AD6286633FC3
Malicious:	false
Reputation:	low
Preview:	......JFIF...............................%. .%%.%%.'10-'--5=PB58K9+-EaEKSV[\[2AemeXlPY[W......./../W?5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................D.........................!1AQ..Raq......"2B...3br#CS.....$s..%d.........................................................!1Q.AR"2aq....B............?.........................................................................................................................../....s~..58..=....].5=(....jq.7.=.S.9.A..~d...........MN0...K....S.:+CU{.....%^.9.A.j.Z...?.....5U....t..C.............a...t...o.t..85=(....ju....t...o.t...S./....s~..58......N.OJ...a...t...o.t..85=(....jq.7.ehz.hs~..........G..:...B/DT.C......V~>.}(....jq.7.=.S.9.A..~e85=(....ju.....u.....[.'....t}.S.O..0.D..O......W......_t...1...7.^.[.,q_..{.\|c...wO.y.A.k~e8..L.=.>1......<..5.2q...{.\|c...wO.y.A.k~d.0\.t.......~......oJ`....7.=.>1...I......s....o.{.\|c....[.'..)...<..t....&..N;zS.

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	7769
Entropy (8bit):	7.933583719269807
Encrypted:	false
SSDEEP:	192:FGPx7FtU2CTTTz7g7sqhO3EGHAsa5X6g+CWc/6nJ7SRuGI6O91Uwy:y7Ft0H7KY3jna5aCWAGJZZUwy
MD5:	7926F254E9C6B7B1BB0B636B96E103AF
SHA1:	C460CCC641786B1E389158B08719036528796E73
SHA-256:	3B6693BCA7BDE565BE569FCEF81A04562AFA328923A2D7508904C5C740D13276
SHA-512:	B7219F5B703BD01AEE1DCBD27D7A722607DD3D8172A9D2FD8F08ADF379C9E511AC2888B6740100E8E1AD3D36EF8820CB1371C58DB1149B47981D95E01782D4AF
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2357570/capsule_184x69.jpg?t=1715731747
Preview:	......JFIF.............C....................................................................C.......................................................................E.............................................@..........................!..1A."Qa.2q.#....BRb..3S..$%Cr.....................................5.......................!.1.AQ.."aq.2........3BRr#.............?.oL..q.......J.#W....7.)..G/.s.-Z.i..H\..".Y..>.V..b.Z[...B..BR.U....._.H.....X. .......%;X......I......1)5....D......-cd.u=.C...$....P.3.]E.{/...I....[...T.Z.E ....q.<U...k>...~..R..L....q.....a.K................K.qnJ.I.Y..st.......\|.l=.o..mW....SX..Rv.5....:\|.:M....<.;e5%D...e...vOo........sP.r.\.2.....6R.^Xu.CN...qs..V0.X0...1.#o:....(.PG........ ..I.:.&....m...G..7R.,F..@....)..$..I...c...-O......k.%{...0Sa'S!......\|.T....m7..=....Rx.+.....0.J.+q.......!]Q$.c.5kS...\\|.A)....{b.....u+....=..c.....E.I..Sl....!Imj..<...'.j......ZF.lt.O.c{u.a]^..EGd&.5^....O..D.R=...%...z....q6..`....[..Kj..8O$.%

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, progressive, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	5030
Entropy (8bit):	7.883727173429045
Encrypted:	false
SSDEEP:	96:9q20lOHgV7ltQ819rC2RRivAKX1TVeGiwJMYHvAmIFoxx:pelZC4ivJ1IzK3HImIax
MD5:	C18DBF24DC622ACE5338CD853AF58B5F
SHA1:	FA7148E1EC83810A8F3651E9676A2031A2C801E2
SHA-256:	8CDE824773681B69FB259CEE56E1C25F1DB2D58B922C00E6CF2F796F2C1EE44A
SHA-512:	D1C33150CCDB2584CFE8D9FCDDED10DD903E56E8BAE0B76291304523943E9FF982CBE98C9F864EC5F2B4C14B505C1B1774C8F9D7DB56D3130BA2664B1CCEF736
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2521530104088148458/1FBB748C908C5183D90CDAA37C5AC83657D3F64E/?imw=128&imh=128&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true
Preview:	......JFIF.....v.v.................................................................! !,,;...........................................................! !,,;..........."..........9....................................................................................7..Z........F..%.....6_..q.Z.R=.GRe.J.. (z+K...H.vg..$.m.M...........7.....`TM..{n..pn.s.)u...}....-gwE..._.$f.7;....x..K.}...5..\.8....Ln..13..-....;...^q..MEiQ...>M}.;JV.Jjb..G....I.<O.....,n..f~..\..~...9.zn{..P=.B...(..;.)......'.t.h.w...'..^...h....k...06.L@+.p..............&............................!....2P1............U... L@..+ff...N2^zM.8..F.H.q.]..L...wS..H..97br.&H.<.%. .....D..o..Pv,.%..Jr.~9.=..A.h..gN.E.....ES.N..{.c.L.....<........*?Ju.!w.r..\SK......<...d........]7..c.<M0..s91..T.I....~..N.........3.......Ncs.6.....h..b...GG.Zv.h..8.RI..?W..C...v.......T..;...(..&<.z....y..x...4o./..Z..LV..kbi2.ed].$ER&.9...#.ll.1....R.37.G.)R.X.J89...=\|..<...u.3F.j...N.<k".T.bwnT.

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	7512
Entropy (8bit):	7.783870487893735
Encrypted:	false
SSDEEP:	192:g1sH4jsnPoRApnzD8Vn6HlKuFv1ZcWOmOEy4kw0qZ:gHjsnQRSzDs6HpFvEWOmq4f
MD5:	EE6BA4111742A8624990AEE9D22FA928
SHA1:	2965D8DFD636B7F74CBC97B566717DE7C04FD68D
SHA-256:	C261C516ABA064BD595263D48F88D4F4C0C02A2BE3E4CDABCCA9A749DB2B4527
SHA-512:	61BB1DDF7450B814D547A31ACC32132BF8FC72B849FB9B141F595FA989FE5CD4875B2636E38D5BA5EF19DD5FB5762D44B96D3F444CE152748ACA5CE6066799AA
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........7.....................................................................D..=9M.).....h.@....h.@....i...\1<y..D..........9*S.}.7].3.50...y......S}).dt>.......#;.k..J..u...p..JW..;.}.......N.#"y.....[...2.{[.p.....ntI..bT..:\1.u.6$.[K?..Klv...E.Z.....A.bz7;o.....2..i_..N..l

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	40410
Entropy (8bit):	7.967893497377233
Encrypted:	false
SSDEEP:	768:49qmI+Znlwx1IOf4u6yY8Gp6c7Y9hWIJIFWw+0U8GHULP8OqJXgr5P:Lz+Zlwx1Xf47XoIF+5P69qO
MD5:	0817BB72AE1BE3FF5E5CC710D3453677
SHA1:	19FF2C79A3E783B219E7DDE019D5AE68A81FCF15
SHA-256:	B282FF900CB1D0AD7814A7D21E76DB133C143A1DE18254644F50D9200A00AE77
SHA-512:	ED963EC30C36D9727208B7742DCC2B0E4218541D288E1B34B802161BBA78FB1B86DE629C6395FD9852AF0700240245AFAA041128D58545ABAF681316E69D2AEB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................................................................O.........................!..1.A."Qa.2q..#B...R.3....$CSbr.%....Ecds....4t....................................<.......................!.1AQ.....q."BRa...2..$3S....#.Cbr.............?..]..}AB.}..H.9..@."u..`..c.#.r......O...A.....Z..3.....@..-.N..2.~....K,j......?..@...T........E...2.#9.............cr{>c.#@..lt.R%0(.......?.a...P"...T.'.;..H....T.._BbO..r.....=.......-..D.,ZEY._.7..f........+i.'...IU.....Ow...s.o..0....#..n....%cZ...x.62@....N......L'f..[.8...8..j..-kRGL.=0..y.8.AD....w)....u#..j..>.@...<..:..<..'U..G9-...7.....G..)..{s.BSQ.+'r09r.).....T. #.rO..0.MG........1....1..,..N[..q.!..c..a\|.w......@.......Wd[k...j...P.......N...9.'.[.u%.".jk....JV..E.AY. :.p..x.>x...&w...6...Sm.L...J....w............1..u ]}.....\....n7..bu....w..+..)

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	4173
Entropy (8bit):	7.8672227521341505
Encrypted:	false
SSDEEP:	96:cS6wnNEtKCj6LaSJYHKULGVupfrUGAKSSnUDso:cS6f85LaSCqULBpfrG/DDso
MD5:	17601F77BB8A0E934320566ECF483ACD
SHA1:	716E72C24FB88AD855C608D9752EE0FF829100B1
SHA-256:	602F92D8AE71E0009DA303351F982D7A7E3E14BEDAC00BF26133AF92564435C0
SHA-512:	846316E0D17A84F0642BC77AC5A305E273927A8A7F57C72B44166A4560F901305B0745AC9638C5838D9E874A3ABF43C5ED288B748E725A4162C97F59945891D5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................5........................!...1A.Qa."q.2.....#..Rb....................................6.......................!1..AQaq.".....R...#2r....C..............?...H..j....)1.D`P....HtJ(t..4.j....A....qLT0.?..+'N)....H......I...PF.F8."qBljH/.m.@.M..\|v.F..K.Uw_f..P)W%.ae..C..H.L..V.....R... j.7.E..b..$0P.4...f...j@)Q......2..p..(...[Z,.O.......ZM....X..".....+...n....%z\..7..b6..Y..'q...G..p...5.....x......2..z....#p=.4.....%....2R.?..Z)I{F..mw......V...S3...t....?...Q.Es.....W-.K..-..p..#9...i..>..5.......m...........w...D\.8...8..^.w...J"%.V.......}..+..5....7..........t.m.lf.@.....h...s...W....2....j..\|W#.,. .6?....@....>i.;.`.`.@@..t.U..%l.....pi..rFq.@..U.w.R.]....=)?..)$...m.8..r?&....U.~..{.R....$.*..9m.Va...c..n.n..r......+...e.0....3].....J

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 81 x 14, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3607
Entropy (8bit):	7.781463130328037
Encrypted:	false
SSDEEP:	48:DitNn2VCJ3NFPqvG+xqd1ZOf9slPQ06of/cPKdCU8g6a1sIKOw3P8Yr8oCq1p0KS:82oFQxqzZOYQU8rqs2ib6eNT0P
MD5:	956D1961CFD6B92681F8DC0DC564D926
SHA1:	C0CD9A97D29D1C01741B6041ABEAD05DD50BDFDD
SHA-256:	BBB200E8E328FC92A566BCA5227E0CDCF7121A15F4DC1BB88184D8EFE661B79E
SHA-512:	69F626DFE30A8D82DD2BB8890A9FFBA05832D9A8997514D49D4ED69D9D653BD5A3284D9B9471F185F4B5BEF7A98ADDBDE45272FD631B7DB5A5FDEF40FD759447
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Q.........WW......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:D14B5470A10911E1A047AB7661ADD874" xmpMM:DocumentID="xmp.did:D14B5471A10911E1A047AB7661ADD874"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D14B546EA10911E1A047AB7661ADD874" stRef:documentID="xmp.did:D14B546FA10911E1A047AB7661ADD874"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>EI .....IDATx.\|..t.....<v7.M6.$(Hx.. ..Z.$.+.....p...._.....Ez.jJ.W.....P..CTj..."..y'... .}ggv..;.....s.$;.}.........

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1131
Entropy (8bit):	6.4092903344223995
Encrypted:	false
SSDEEP:	24:K1hpunQWwjx82lY2T32HEVcFIlyJ3V3ApRYGPbni6/9VrI/Z/:oitNn2V6aUJ39eRYmbi6gh/
MD5:	96C60098E888AF1BC5AE43C93034B017
SHA1:	44317B6E92C020C7B467737DF6702858972830D8
SHA-256:	101DCAAB2AD4A31C11DBD87A661B1324C5DD52B43A1EA814234F5BBC78993286
SHA-512:	5CF976F8A16F946A24CC5E5ADD367ED58BD3A824947285902ECA30660EEA29758FBCB443A7A1D201BF7409EE6A8BFEF64C7C5616A56A86D7FA08D5A8C641B4E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:241EC21AC7C111E18697A146FF52EB58" xmpMM:DocumentID="xmp.did:241EC21BC7C111E18697A146FF52EB58"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:241EC218C7C111E18697A146FF52EB58" stRef:documentID="xmp.did:241EC219C7C111E18697A146FF52EB58"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>N.......IDATx.b...?.6P{.O..z.l.r...`...H...\|........v ...AP..l..$v=>..A...%..Gr:.............}....h..\. .S......X.h..l

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1290
Entropy (8bit):	6.7616543307680725
Encrypted:	false
SSDEEP:	24:Xcy1he91Wwjx82lY2T3ouVW7fyJ3VtZS4GA3FdLZCJurYUgQVI1L12Kz+9:swqQNn2x1J3Jpr3FdIJzQaRz+9
MD5:	CB06992B64D4961EDE5F7DA47804DE5C
SHA1:	228FD206FB76B5A05FBF36B61C8E4E4749D534D0
SHA-256:	61405865FDC0F0B1B658B0AA3098B9676A5E6D7D88403945269497B10D0EBD78
SHA-512:	0B1709FF9B3C6CD8D5ABE177C543835A2004E7C8EDCC9B8EBB2D2B5036CBB0059E5B0409A69DC721B98EF98BE2C61E01C0A8B3BC12E7B87A22561B39C9257501
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/arrows.png
Preview:	.PNG........IHDR.......$......".Q....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:9301916979CC11E6BFE9CE978F5FF8DD" xmpMM:DocumentID="xmp.did:9301916A79CC11E6BFE9CE978F5FF8DD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9301916779CC11E6BFE9CE978F5FF8DD" stRef:documentID="xmp.did:9301916879CC11E6BFE9CE978F5FF8DD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......~IDATx....A../J.J...x.=j.)uTj./@<.R(TZ.G@!.5.[......{.L2....\nog.Q.B..C. ;.'!Y.S.[.<.W\ ..@w..Pl..6.Y..Lx.}K

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	123884
Entropy (8bit):	6.07029634687136
Encrypted:	false
SSDEEP:	1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9
MD5:	6168553BEF8C73BA623D6FE16B25E3E9
SHA1:	4A31273B6F37F1F39B855EDD0B764EC1B7B051E0
SHA-256:	D5692B785E18340807D75F1A969595BC8B1C408FB6FD63947775705E6D6BAA66
SHA-512:	0246CEE85A88068CA348694D38E63D46C753B03AFADF8BE76ECA18D21E3DE77B495215ED2384D62658A391104F9E00DF8605EDB77339366DF332C75691928EFB
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOSD.`>...l..u.GSUB.d....wT....OS/2vb.........`cmap.d.....X....cvt Hg.....,....fpgm.6!.........gasp.......$....glyf..........Xhead...a...@...6hhea.......x...$hmtx.NL.........loca{.:.........maxp.......,... name.s.U...L...Kpost............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2217), with CRLF line terminators
Category:	downloaded
Size (bytes):	118885
Entropy (8bit):	5.314234433456834
Encrypted:	false
SSDEEP:	3072:1MkHeAhR4TXXWFlY0YJygc5XspmfudjxdOw0FlUZq/Y6:1MkHeAQXXWFlY0Ysgc5XsLOw0FlEq/Y6
MD5:	DF9C2F6922DD14CEA7436582F325358F
SHA1:	1B7364DD31734A3994F59C2E6B06BA8B1446134D
SHA-256:	F29EDF636EA8E4000D142660FEF9A078439C0171D09830E01ED93AE464E8189B
SHA-512:	522FCF618833D2C522F2FA73A8047DCFA627DB66A9E91C92EF0ACD30482A07A12923B2A8B34519F962DBA5949E19A2CC523C069FF89A3C922D9DC9CF8C1B4BC6
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/home.js?v=35wvaSLdFM6n&l=english
Preview:	..function OnHomepageException(e)..{...if ( typeof console != 'undefined' && console.log )...{....console.log( 'Exception rendering homepage:', e );....if ( e.stack ).....console.log( e.stack );...}..}....InitializeGPFocusRestoreTimeout();....GHomepage = {...oSettings: {},...oApplicableSettings: {"main_cluster":{"top_sellers":true,"early_access":true,"games_already_in_library":true,"recommended_for_you":true,"prepurchase":true,"games":"always","software":true,"dlc_for_you":true,"dlc":null,"recently_viewed":null,"new_on_steam":null,"popular_new_releases":"always","games_not_in_library":null,"only_current_platform":true,"video":true,"localized":true,"virtual_reality":true,"recommended_by_curators":true,"hidden":null},"new_on_steam":{"top_sellers":null,"early_access":true,"games_already_in_library":true,"recommended_for_you":null,"prepurchase":null,"games":"always","software":true,"dlc_for_you":null,"dlc":null,"recently_viewed":null,"new_on_steam":null,"popular_new_releases":null,"games_n

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11062
Entropy (8bit):	5.217710023717478
Encrypted:	false
SSDEEP:	192:E7red3QmPZCVGiCWJ5SiYV1ViEXXV5o4kKOaVJCiZ8KqA5XEi6vcyX62u5BJtOj0:Eved3QmPZCVWWJ5S5V1ViEXXV5o4kKOa
MD5:	AE830B57B9039FFB0D5130D6272945F6
SHA1:	D653C649E9C9957D592A06AE0E340D96AC1BC444
SHA-256:	613569C4A8092B813B9D1A2FDBF007A0FE43F6BB0A2D2C87AC998050F473938D
SHA-512:	B941C7D7E40C2C461BA4EBD4732979583CAFD0A751F8F1E6F2067FE0A74B0B97DACCEAE41F915D0DE7806EFC3187CE3AC1A9F46B9CAD210C8B8F646777E52C11
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/skin_1/apphubs.css?v=roMLV7kDn_sN&l=english&_cdn=cloudflare
Preview:	../* override the background for now /..body..{...background: #1b2838;...background-position: 0 105px;..}.......appHubsHeaderBG..{...background-image:url('https://community.cloudflare.steamstatic.com/public/images/apphubs/home_banner_top.jpg');...background-repeat: no-repeat;...background-position: center top;...min-width: 948px;..}.....appHubsHeader..{...width: 948px;...height: 170px;...margin: 0px auto;...position: relative;..}.....appHubsHeaderText..{...width: 535px;...font-size: 14px;...line-height: 18px;...color: #aac8f3;...position: absolute;...left: 365px;...top: 32px;...text-align: left;..}..../ stats /...appHubsHeaderCommunityStats..{...top: 110px;...left: 55px;...text-align: left;...position: absolute;..}....#userNumbers..{...font-size: 15px;...font-weight: bold;...color:#4d4d4d;..}....#iContributions..{...color: #ffffff;..}....#iAccountsInGame..{...color: #8BC53F;..}....#iAccountsOnline..{...color: #62A7E3;..}..../ page itself */...appHubsPage..{...width: 948px;...min-he

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	dropped
Size (bytes):	54136
Entropy (8bit):	7.982847595090487
Encrypted:	false
SSDEEP:	1536:q2jIpIVVaHMPSIJcARBaFtnUQLiTjWY3Ema3U:jMcVaHMPSKcaBafLojWYmU
MD5:	DD573D719F059DD4F6DD5EFFE467DCE3
SHA1:	A29D9CDCAE6318F1F6424895CB6554EEE489DB5A
SHA-256:	676BED35CBC9C579BA0DA1739C479D80937E22039D5C86B43A652B126665ACCF
SHA-512:	0DE5FF362053D616A1B65825CB232D65E3C9856F4170EB9B865EDF05CC56F85ACD1D1BC66EA22558BEC4B5643E62B8EDA498A8FE9CFC84DF9C961022F3F848EA
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........9......................................................................3........ .p..c}.B...A.X........./64\.".UZ...%.<m.&=.c.j..{.}.D9Pr..;\|.P,.2<..<.Hj.EB...F...=.{8^.!.....&q.w{.y;_o..<&;...N.;g..5!.:.......k.2..G...e..q.....63.F.b.D.Dh..f...=..\|..gnM..i.M..1....:..SA..ox.$.F.td.(."....A..c.am..{M..o..Z...N...w../{..w..M..(.b....X..6d.....gnv..9=.{..o....7F]!U:q..S..........^.c.'.j]X.^s..L..2...{].u.%.A`..<8.....qJ.8eF+8zcl>.c:.5......O{...s. y.dp>...{o/k..T?..-..,hB....&.o.p>.G......"...]...\#.sR.X..\3,M.=....._...D..b..%1..1._....>X.?.z.r..r.V.V\|.....'xA.]...'.B.x.. r.....q.0...r..6........c.eXH.o..FA..G.D....8..=^.....0..6.n.&.. :........?...<..c...QO..m....1.1dK?.AkP^]C.:..\..F.L....!sy......?..%...p......K...h...}.Q..#....@.o'd\|.D@c...H.0f7....).T\|...P......#..-

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 306x260, components 3
Category:	downloaded
Size (bytes):	115834
Entropy (8bit):	7.977668111692992
Encrypted:	false
SSDEEP:	3072:4UAFtsn1Oa39iDsuWxmcwOT3lrzTkSo3uhuhtG6T:IC539lmeovT
MD5:	0508C31452D7ADD8A076B1FC33CED408
SHA1:	0CE64FF773327AD35EAB89CA658ED241B6CCBF75
SHA-256:	BA9D9B26B6DBA7DE16DCB072C0E7686D07EDFCE3F482D8E35E72C7529B9751A6
SHA-512:	5D955C9DBA7673894D59558267A0B99677DDA081F08B4CB6836EED5F642661A7029CF1DC66753579ACF945BA63A3324B8409831AE048B7C680F9FC9B523FCCB1
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/spotlights/2a9368174c54dd6fe7fe643e/spotlight_image_english.jpg?t=1715121064
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	51575
Entropy (8bit):	7.976578046158211
Encrypted:	false
SSDEEP:	1536:a9cBI1Kn6M4/vtDD2BD6uIc73Rr0eDVDM4Xg9Uskw:aePC/vtfkueBr0exDRXMXkw
MD5:	C76EC305186C6FBAA097DF08C734E9D9
SHA1:	E20180ECDDBC4EE000D0A9A2D0DEE7E1FA28FB66
SHA-256:	92BF90225FE458561742A827DC4A58E702292874DA1F57F59C75F1A145A57DD4
SHA-512:	46E1EFEC4F3D48CB37989092563BCB86037D3FD0EC1A9F4B76CEA9572E5C5E9EA10F908114B1E591E8EA0C9FF4B0878FFE57062686534015F3671BCFF8029C05
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................................................................Y..........................!..1A."Qa.2q#B.........R...$br....%347CVu....56STt....8Dcs....................................I.......................!1A..Qaq......"2.....#BRr...34b.5S...$%T...D.Cs.............?..L:.ZJ.*..=q..hi..lqp.`..e~xD..+........Wil...c..........c..%..l.>.....J.k`BX.c.....$..R."......j\.3...G/N...B>.........G..8.^..K..c..9zp5.b......,5..Z.&.6.r...R. .a....<=&.t......c..\...r...^.Q..1..r..x..?f#."..8....0.rl...9....0..Q....@.....&1B.T..y\|......U...2..Sd.........o..."..5T.UE6....Q.1"#0.oJZH...z..m...2..+.\|.....Q.Tl...OS..,v..\1....jKV#H..c...Rd.7.W.....g%..]...".B9..Ki......@....n.....$.....1...O...f$....)..F.U..2.1......Gp-...pF..\Ik..#%....s...+.V.co....BT.+bOS~..`.d...M....d........=.N.N......@'..m..f.U2.S.7.~X.xV.).\a......-..Las....)...

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2785), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	304557
Entropy (8bit):	6.2524545483992595
Encrypted:	false
SSDEEP:	6144:aZ+yaUJDG1GvW/A2NMv+3o0YU+OiMp0yIJEBgAkVrZ/lvBdFlhdIu:6Ji1auA+t3o0YU7pjIIkVrDBd9
MD5:	FBC1EF3ED1D5A4D4BE56906BB8B99C1D
SHA1:	7D7023589BF1BBE95423FD2F8C3C5865211053C3
SHA-256:	1C0106CAFF292FE7814F33D4807B5889BB18B7C12FEB63C8A463ACE105C61B29
SHA-512:	F1EF31057FA9D5336B9F5CCA45B8B43927506F67F7416C6E038CA52FAA078BF579F1D03ABF15631D1B62F800D95C5D3179AC18CABA32CFC65118C62C9CAF3BDA
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~9e353dc2d.js?contenthash=a354f433049b20f1e568
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[7948],{75436:function(e,a,t){!function(e){"use strict";..//! moment.js locale configuration..e.defineLocale("af",{months:"Januarie_Februarie_Maart_April_Mei_Junie_Julie_Augustus_September_Oktober_November_Desember".split("_"),monthsShort:"Jan_Feb_Mrt_Apr_Mei_Jun_Jul_Aug_Sep_Okt_Nov_Des".split("_"),weekdays:"Sondag_Maandag_Dinsdag_Woensdag_Donderdag_Vrydag_Saterdag".split("_"),weekdaysShort:"Son_Maa_Din_Woe_Don_Vry_Sat".split("_"),weekdaysMin:"So_Ma_Di_Wo_Do_Vr_Sa".split("_"),meridiemParse:/vm\|nm/i,isPM:function(e){return/^nm$/i.test(e)},meridiem:function(e,a,t){return e<12?t?"vm":"VM":t?"nm":"NM"},longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"DD/MM/YYYY",LL:"D MMMM YYYY",LLL:"D MMMM YYYY HH:mm",LLLL:"dddd, D MMMM YYYY HH:mm"},calendar:{sameDay:"[Vandag om] LT

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	7013
Entropy (8bit):	7.940014840126126
Encrypted:	false
SSDEEP:	96:oE5jPKRnqGpPF2L/k1jiz12H+ljngIjlOGW9DBnzKopzHGzNd/blx8xsRiJ1/bdL:oKu11hukG4egIpOFOopzQbJRi/dsKr6i
MD5:	A0B18D7B76B3B5D87676E8D007076B65
SHA1:	44256BBF500B7F9E50FF824D6B523ECE38B3CD8F
SHA-256:	4FE182430AE2655125FEAECBD12DA607A2356DCB7C3E8874AC76C7B5BF05EB5D
SHA-512:	B9DDA9E0AE18016C43557686E8B5891A9C293AAC3C8C4FA7E1B716076481489F77F06A26A6DB573E1296D4C77AA6AA3BD9517EA5AE99B94B3581DB44691D0523
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....1......*..,m.xaI...lLJq.!7.$......{.k.....4......,..k.E......s...['}1.!...r...40d.~.2Z.....w..f.l.F'.....?.3..^..B.il.8..)..M.Kg...a\P..(.8.(.A.R@..a.e..3.....q@.FQ..(.\K.m....E.`..J..o..>.#`.W.P....n!.%..Y.....1...c.........&Gs.%.)5.'...l...h.m.....].#8C..V.n.N..)}.4...'dnY..Xc....I\.gJ..@./.J.GC7"..i.........Qy..(:...I...5$.......54....tr...\V..

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	4925
Entropy (8bit):	7.892295617252778
Encrypted:	false
SSDEEP:	96:o/YDi8oEUE6SXI7OB74+ODMVsET1Q7lMOM+uUkdL+2XVFC7wL:f3UtANVx1Q+OZuUgtXswL
MD5:	AA4871F2A1B19DB3C61C779AB453399B
SHA1:	95216C79095F80FBCC6D75E4DB658E384C263F69
SHA-256:	60CE5C2314F8A5E0A20DF60C504F89D9F3BAC8A17FF01DF22C708D5884DB9E7F
SHA-512:	CA20E344E857EA30B22D6406CA4F0F9A433007C97A4FE9992DC8429FE34E2D5BCC040847061D62D33298BC3548178920C73100173ADCDDAB0591E77CC053936D
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/281990/capsule_184x69.jpg?t=1715759591
Preview:	......JFIF.............C....................................................................C.......................................................................E.............................................@...........................!1A.."Qaq.2....#B..$.......4Rbcst.........................................................!.1.Aq"Qa.2B.3b...............?..:.T...D...RV..!.s.=.M...x..3.DV(.....1....v..v.}R..K.....^VV8...^c........<..u..G.)>M.86....(.<..'...aA.r..9..~..:.B.+..y=..ER$..>\|...q)..y).....=..n.....Q..23............@.`.w..n~.7c.....?..@_`.cJ..W.....F.m{0.a[...x.Q&..).S.t.....f.m(.$c.=...5..+<....S...5.J.#v3.a;..l..$....a..d'.u.YZ.y..m...Ob.c.0...#SZZ@.I.=...<%J.R:..S....7.y..8..a....e@.....Ve%............{.i._.c.u...%Q..1/'{K.../?.Z....RJ...PKJ#..1...:...V.Zb..v\K.*.TQ.l\|..-...sg..18wQ......H.l.1..s.a....`...R8...J...l..W...A.m.M$`.....F.2l\.....Fx.........N@$`.:.<P...K.....u..4e6.....p.....[5ps.z.....5.-.aA`zO.....u..7........d.......q.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	38421
Entropy (8bit):	7.966042964570306
Encrypted:	false
SSDEEP:	768:A+tFsqAN71nSKjF+T2ihMNZhCQyzTA1UgGy4QH7u0tg:HyqWlSKj42ioDSrIu0tg
MD5:	B1A8E297782BA510340533CDCC8DCF5E
SHA1:	05043777F22D250361D810FC6F1CA0F189BA0AF6
SHA-256:	592141963E4F9D82214E30215CBF133A314F5807ACFAFA2E1E2271302AE8A9A6
SHA-512:	1962A49A61CB8B77502C3DE2EB044B4FA99F42597EB7B1EB55C292BB30D14D0CF4BF1F27F8442FD408AF803CE95BF82561E290FF22B7F98B9758524605E1E8FE
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/239140/header.jpg?t=1715341001
Preview:	......JFIF.............C....................................................................C.......................................................................................................................X..........................!..1A."Qa..2q.B..#..$3Rb......&8Srv.....%47CDu..6UWes.......................................=........................!1A.Q."2aq.#B.....Rr...b......CSTs.............?..V..l...q........E"...".C......4....l.f........ss.b.....]jI...m........A..m...O..O[.~.....f:..T..i.]6.q.akv..b...}.):.n..s.....dIIN.....?}..{...i.d.W.J..D}....N....v.`}.$.Ah...G).b...#.[....-...n4t4.h.r.]...p.......=....:........."A.....H..lJdj!AHu1.q...qc.....\|6x..qS.z.E.)..n.J..%-.(E.....en0..#.....3..3.b...nnm.:..+...NF.F.y.n7....c..x.....H.:..4zeV....Iv..-!..7(-.e...lH..o..Z.vx9.YZ.p.d..9.y....4&Yn+QK..%..ZP.....P...k..C..4..T.gR.X.A$...:\lmq....C.r...<......m.`,..5.;.....z>O.Exo...K..rz..6IY.....X..D..Lv".mR.B\q....U.I.@:Uo..S.)..j...-.....u:.......g>0.Z

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 27 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1283
Entropy (8bit):	6.804522396238829
Encrypted:	false
SSDEEP:	24:Iy1he91Wwjx82lY2T3ouVgy28yULyJ3Vey7uytbGKIg2NXxqa37SV:IwqQNn2xDWLJ3xXJKg2NXjK
MD5:	6FD845DB37342E49CAF9A1B3D1268EA4
SHA1:	E380BB0F718887BA15FA5A62E06C368F39095660
SHA-256:	2B5E58C85345DCB11D869C8033CA7B7EB00A15C73554A59B553045BDE1A94ABD
SHA-512:	83DBC8420F91AB206D66981D6763017169927E68545629BC22C1265A773546196A2EA67F91F95D6C0EB7035E689D4581A8BA3B3A3AC797D2AE6CA8A237BB51A6
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images//v6/icon_cluster_controls.png
Preview:	.PNG........IHDR...............%....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D0D315BC12A911E49EBED2AEC7E84312" xmpMM:DocumentID="xmp.did:D0D315BD12A911E49EBED2AEC7E84312"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D0D315BA12A911E49EBED2AEC7E84312" stRef:documentID="xmp.did:D0D315BB12A911E49EBED2AEC7E84312"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......wIDATx...J.0..3...Z<..9....>......^[.=...>.{P..F/...i.5~Y'K(Im]....L3.d&)I)...\|8.....B.`p..I..1>.......=.

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	9500
Entropy (8bit):	7.942619010647389
Encrypted:	false
SSDEEP:	192:cdgk+CcqFUJ8aVDFcScM0vYUy5vOqeumvV/qPKR6ppOhSqQ9bK53hMtDQH:cdtNKJ8apKScM0AUy5vOZySR6ppOh7Iu
MD5:	484E48DC73BE0686335488CCDDDAEEBE
SHA1:	DB75D20221C8172307EC29786D01C647C7F995CE
SHA-256:	FB9F786F288D6DFB992C3197E189AFB9550932DDC83C05FD29D63BBE6DFE2759
SHA-512:	9AA331A2E164F4799E84A89CD7E88475D2606D866CD825F7F34A58601D43F777788A4D2673D7CA1816AA5A284459A4DE6DA7CBFAEAB61E9DAD4B2F3DAEE69BBF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................E..............................................;..........................!..1A."Qa..2q.#..B..3br..%4.CR..................................:.........................!1.AQ"aq.........#2B..b.$3CRr..............?..Cj.,.. ..[l.@.8....n6.....~.f.....l.t.9..G.7...$.<.....\|..Y..G7...6J."....g..e.Z...7.t..R.....+D*.B#.0KN............[.M....D.~....fJs.f.^.fp.,+..>x.YS...O1a..p...............d\\...o..uK.wWV... .'mG_:.....:.=Kx3%n;..$.......GlTb7...$h}g.uMXY7...X:.....O..O-..dIr.%.K..i`....m{X....Ke..U.......JOR.=.,....%>.\|..t..6.....{..M....}d.Q......r._.+N`.....H.G2..,>.L.ImI.I...........l8..Y.:.....[e?.$.&#.Q.EZ..N.umm#..T......T...$....]....".5.Z..BQk..Jn:u..!#....C.\|....,...n%e5..=..z..b.e.t.X....v+.K.......F?.-.....SA.0.B..~.....^\|..;.WU../...Wu..[.;..+..Lw.V&...+....}..\...FC5<..YimL@.(Zn

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	76195
Entropy (8bit):	7.974202646931448
Encrypted:	false
SSDEEP:	1536:/FjPV+1aQIyyKUcHdvpabRNg1rBc3ka3W57yVNswm/E1zY:/FDV2y2dhWzgJBqkRMF8E1zY
MD5:	E217E2F684CD1ADB74504EE55CC96449
SHA1:	FA4913196DF46629B527E7F6FD9D78A5E7952163
SHA-256:	AC19E0EE8BA6BA1930C03E4572B5050F3F2C785EB552746B2D8A4C24D837CFAF
SHA-512:	89620E6A82617B4635CBB91D8D7FBA11DC4ED22577946BBAC73BCC1E9C37A53C61C42C9CFA53DB1D0CF7A5307625A3DB9E8C466B46C10A3D80F15AA532618C26
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................`..........................!.1.AQ."aq..2...#B....3Rb$4Cr......%Sc....&5Usu....EVe...Td...67DF...................................E.......................!1.A..Q"2aq.......3....#BRSTr..4Cb.D....$.%.............?...'._...ir..G.D....v....hFB).....Gz.].Zm.....{v.<......N.l...<.@.f...8......m.=3.R..pk....x2.B.m..T..8C.-......la#.)..v&..?*H....n.\|..SB=.......Z....B....aY...Y.......Y.c.R.fB{..)o4.d..#.......t.^..$...w$.....M.6...$`zQF.r..O8.Aj4Ccp...o\|P3+[.!.Z.6.BT.BFrp<..P.V..l.....BQw.L..\#.G.S!......"f.g4PX....b6y-.T.(....J.f.....b...+#<.Hi.[#...S.I..{.N\|3.Q"."Y._..P.E..[........x.)$.u=.`..p..O.XA....O`..:.P:....R.....'..%-..&.D.].y9.Al6,\|(`U....a.v.=.lU........<U=.W.R.So..9.....3uA7..........JKv({.4.....$&..j....Kb..H....n.g...c...2..

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	7987
Entropy (8bit):	7.927181818576695
Encrypted:	false
SSDEEP:	192:eTrCqQ+1aNj/B+xSL62TeXVSP1qOJkZV+o78wJn2z/7K3S63bC:PP+AJ+xSPTeXwdqOJkZh7JnQzK3SsbC
MD5:	91BFA893C6E8C1C435099489C1E325DE
SHA1:	479F9415A85E123FC7F486BC79717A86CF51664F
SHA-256:	B0DE1AF2EEDE9E080EC8B9085399A04AA75C10B917374972319CCEEAE6434066
SHA-512:	9ECCED4136A9D4A5ECAC529647AA516C371A8BDF0574CEA4410A57B560D0B4592FC10599768D75E0668A15731EFAF286F96A3ED2831EE711A83EB985CB2B9708
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................=..........................!..1"A..Qaq2.#B..b......$3R...4Cr................................1.......................!1.AQ."aq...2......B..#3............?..t.Ah...}....Ey.....PA). .td....x..0.B..o.8.%....a.Hm.z........i...5..-.1Om.e. ..........j...c.PG.^...R..t.]..U. .q.>....ig.C0H.1.J..v}H...O....6t..QM5.Kr:Pv.U......#.4...j.\|[U.}..J..rq...E....@4....v...]\c.3.#i)..#.;"B...L.) ...$...~.D.Ls5..+v..s.k...y(m.d..-$..<..y..$..6v...$........GReE.E[.e...1%..4x....p...?<.n=..L.T...,9....+b3RP.n..G.T...q$...\|.oQ..Z.}.....Yy2....\R...............,.....\.a.m e.~..G.UE......4..=.R..Y#....?...[..U2m.aH.[Q.i.?Rq.?0..LR..[....@k...B.?I..+...1.B...S.%>.M=..NR..-...*.<~t$;s:.....O]H.e.......W..Tq....g......!v\.P...s....c.......)..H#.O?..&.`3..a.a...

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	928101
Entropy (8bit):	5.377009194479813
Encrypted:	false
SSDEEP:	6144:d4fuN26Vv8rzhMHp06bl0xlx52RWirV+hI8Zz49ezdCZTaCbvjrgxf5i6NEjeoXi:nCMH26bl0x6lB6NEjdsYG
MD5:	F66A42F617F6D659B4EC3F55516162BB
SHA1:	129C9E6DFB9344152954DD4D64A7E146CAC308C0
SHA-256:	0BFA8A87C8061A6B6F4D4F7F7D444D866EFB69AFBF33B5C0A5C62F68CE89A32E
SHA-512:	E92E279B7373A72DDBD01286CABA934C71520C8B4710C267B4DCE710D67F7C2FDB7ECECB14DA260788BA77F549428ECF204112B06466A2CF0375FBA5EB2F4351
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~b28b7af69.js?v=hOyTweQkD3Cx&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..*/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[3250],{58627:e=>{e.exports=c,e.exports.match=function(e,t){var r=[];return i(c(e,r,t),r)},e.exports.regexpToFunction=i,e.exports.parse=n,e.exports.compile=function(e,t){return o(n(e,t),t)},e.exports.tokensToFunction=o,e.exports.tokensToRegExp=u;var t="/",r=new RegExp(["(\\\\.)","(?:\\:(\\w+)(?:\$((?:\\\\.\|[^\\\\()])+)\$)?\|\$((?:\\\\.\|[^\\\\()])+)\$)([+?])?"].join("\|"),"g");function n(e,n){for(var i,o=[],l=0,u=0,c="",g=n&&n.delimiter\|\|t,d=n&&n.whitelist\|\|void 0,p=!1;null!==(i=r.exec(e));){var f=i[0],m=i[1],h=i.index;if(c+=e.slice(u,h),u=h+f.length,m)c+=m[1],p=!0;else{var y="",_=i[2],b=i[3],v=i[4],S=i[5];if(!p&&c.length){var B=c.length-1,w=c[B];(!d\|\|d.indexOf(w)>-1)&&(y=w,c=c.slice(0,B))}c&&(o.push(c),c="",p=!1);var E="+"===S\|\|""===S,R="?"===S\|\|""===S,T

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2822
Entropy (8bit):	5.149837401024155
Encrypted:	false
SSDEEP:	48:1Tv1eesmyGNyfAwWNP9qgAWNWp9ssibZhAONlX84LpeMs9bZhAOaX8xLseMspbZF:tKmyIX0pdONd50aO2mvLOGQFxE
MD5:	D83F7D0B2E5BDD0D337F8532983AF9BE
SHA1:	BE5B7396C173A1E5E4E68224B97D516DEBA57F0E
SHA-256:	E818B5CBCB128619F2A3C86E6417084E137081165FBDC093AF6C60A40557933D
SHA-512:	CE5A1AB6C61CFA5915CCCAE8FC480FA99031F9E9D5A8B1D2E92267DFDAABDB234B410AFC4D4B8E1C72F4B582E5E9DAA64332D17E9A8CC82B2F60A63E9143E190
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/user_reviews_community.js?v=st0tzXwxiGks&l=english&_cdn=cloudflare
Preview:	..function RequestCurrentUserRecommendationVotes( recommendationIDs )..{...if ( !g_steamID )....return;.....$J.post( 'https://gtm.you1.cn/userreviews/ajaxgetvotes/', {.....'recommendationids' : recommendationIDs....}...).done( function( response ) {.....if ( response.success == 1 ).....{......var votes = response.votes;......for ( var i = 0; i < votes.length; ++i )......{.......var vote = votes[i];.......if ( vote.voted_up ).......{........$J('#RecommendationVoteUpBtn' + vote.recommendationid).addClass('btn_active');.......}.......else if ( vote.voted_down ).......{........$J('#RecommendationVoteDownBtn' + vote.recommendationid).addClass('btn_active');.......}......}.....}....} );..}....function UserReviewVoteUp( bLoggedIn, strLoginURL, id )..{...if ( !bLoggedIn )...{....var dialog = ShowConfirmDialog( 'Error', 'You must be logged in to perform that action.', 'Sign In' );....dialog.done( function() {.....top.location.href = strLoginURL;....} );....return;...}.....UserReview_Rate( id, t

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	345842
Entropy (8bit):	7.996232738283067
Encrypted:	true
SSDEEP:	6144:Aj5+Ylai/nRLAWucNXbK+KYK4iVI37uufMST/J3VTE1cPT:etiWuwdeI373f9T/4m
MD5:	14CE0FE63A4A415302040FD5F18F9EA1
SHA1:	3F72CA238CD5BC66405B38B283C7F5893DB739B0
SHA-256:	48694073968844EA5CCA51438FE00BF8385FCB64F0E7AEDEADF4870CEFA62905
SHA-512:	7295A8E6696E9C782AA9589A4EE14D33E1F07A4597691E5C8E4150C3A81922FBEC2821E54B094409097D4B1137F184C51E0499ADA05724FB6278A64D853D3ECB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......pHYs...............F.IDATx.\|.Y.e...}.....s..U."Y..~...[..F..$@.^..(@.... .Bk [$.EV.Yu.73#2"..Z.......N"#N..w.>...\..?..TE...@....!.HC[.....u.T:.-..:W..H.;.P4{..................@..X...]....].....U M.<?.g7..S ....r........cF...P.w.....uZ%.......)D%h.i..f>.-.ks6..}.......>...w...Dm,j.S...5.J..Q.G.wP`..T'......:...b..Y!....t....y.....9...j#.....P.h..N.........iS<..~.....Wo...#.IW...pyx....3..ulX..e.<...e6<h.6<.`..Y.h....g.>=.<^..N.G....<..K..m.@...hS1.l...u..L`..Hs=k.T0....P....E...........N......1g...W..9....x....my....>f.9..N...}.o..=..r..n@'8$Q@..[...M..&.....m.w..:..H.W.m....3Mp.S..N.\|.....>.....Y.y.Y~.i.i..B..I.Z.:?up...2'Q@+rM.X..)~..F.).;.U.=e;.k..Fw...S.%..S..E&._&'..@(b'e..-8J...+ .,W/...1.v"...m.......Tb..7.....!?1.~x...s.....\|..K.8.4..H7C.U..P....-....1...SK.....sc`.0c7U..B.jC..@...`..\|.?\|?7~...B..&.\...W\.7.1...k(...j2i.;.Y.....VA.....0..4.$CK. ....L.B..<).U...T*..O@.9ht.T....uTu....t...

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebM
Category:	downloaded
Size (bytes):	734200
Entropy (8bit):	7.998491896448801
Encrypted:	true
SSDEEP:	12288:1DzXAMKWkFf8Yes6yPbaKPoUj8KL96/QfqwlH4HoRewbxvz1Swfs35bR9uXrT:dUSYeGbaKH8KaQZH4yLfSwYbRET
MD5:	25081476466948E2DF11ADC8C9937804
SHA1:	A8BB6209D8264DE390513E4E44DF781260CE6C32
SHA-256:	40D8DF14959A05AB2648D03121318A336D5B346B997619DC4C76423317B04476
SHA-512:	9B274130212F0C07C1BEFBE3702FEBE0457FAA5455A64455CB8F1372CD7108A6AB7D9192CA2F8FBF4CB121D826A345DF7049CCCBBA28B848ABC9FB9E3BF228D3
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_webm_english.webm?t=1713912919:2f771c0a2f5f1b:0
Preview:	.E..B...B...B..B..B..webmB...B....S.g......3..M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...LM..S...S.kS...3.........X.........................................................................................I.f....B@M..Lavf59.27.100WA.HandBrake 1.6.1 2023012300Da..5......D..@........T.k........N..s.....1;;b..."...und..V_VP9...#..\|k-.......U..U...U...U...U...U...U....T.g.ss.c..g.E..ENCODERD..Lavf59.27.100ss.c..c.....1;;bg.E..DURATIOND..00:00:07.967000000...C.u'Q.... Y......I.B`:....8$..\.........vo........7.._O...........{......Ufeo.....g..w..?...'......u..H.?...../...Y_.....4..R......@.v.+...[../....w0..@.....yr.,.,)A]$.C.....8....c9.,..4Q..4...........M..%..qK?.'L.yO.k....O...eN1f.z..6.q...?v.....I..,...:.5_...'..k.]&.Jp.l...P-..b....j ._fD}.O.QU.G..I$....a.;..w...!.......A......a9l..bh.:...._.V...yD.Qs...gzLKj2-d......$;.V.%..._.......}.h>.....I(.>{s....... j..a...../...j..Q.h._V..0.....VU..Y2.w....u...?..DB...&c.5^..!..&.HD./.-Q.&..h9..6.m 8.G.+

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	588429
Entropy (8bit):	5.6521496035252445
Encrypted:	false
SSDEEP:	6144:0LEg99gRSXzvmCVRHI4NOO6XsR5D7sk65B//KQwd:0LZbgR6z1VRovNsDeBHKjd
MD5:	7C3A3D612F83FFBDC8C7AC04ED2DBF3E
SHA1:	D81A4AC8501CE15045E8F0398198D45F07E39BE6
SHA-256:	552FCF3F1D93B8B7BA38436D153E80581168A4BFE7BFF24A9E0EE472882DEFBD
SHA-512:	266804F282C5500161BF040C25651175358E1A1CB102469B4AD6BBA1F6436027F3131E231E1B84C740A96E95626123649EC37B6EA4AC2246465CB693CDA9F875
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/main.js?v=soQOTmUzl-9y&l=english&_cdn=cloudflare
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[179],{76430:(e,t,n)=>{var o={"./sales_brazilian.json":[56195,9513],"./sales_bulgarian.json":[59784,3591],"./sales_czech.json":[33497,5494],"./sales_danish.json":[7401,9561],"./sales_dutch.json":[57409,9828],"./sales_english.json":[12445,1546],"./sales_finnish.json":[87956,3007],"./sales_french.json":[98965,2235],"./sales_german.json":[43093,4293],"./sales_greek.json":[45906,7971],"./sales_hungarian.json":[6131,867],"./sales_indonesian.json":[48340,7192],"./sales_italian.json":[16260,4979],"./sales_japanese.json":[53461,9991],"./sales_koreana.json":[2335,5439],"./sales_latam.json":[55341,7924],"./sales_norwegian.json":[90497,960],"./sales_polish.json":[80600,2723],"./sales_portuguese.json":[57278,6658],"./sales_romanian.json":[30499,9316],"./sales_russian.jso

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 940x250, components 3
Category:	downloaded
Size (bytes):	71723
Entropy (8bit):	7.975046220353434
Encrypted:	false
SSDEEP:	1536:4EIBQ3IpJ/fDOsyOHl9eQ4A9fFVyrYbYo95yAj8dmZ4W0AIX:4EI23aasyGFfOrU9Zj8O0AU
MD5:	02A0ADB8033EACFB33FBA9BB1B771B71
SHA1:	BE35A2AF2AEC81B8D1C7B091713446C841964948
SHA-256:	0FD28202E936544C1119CFCB0696ECC75576D64D7A12AC04912B9C9A1AD4612F
SHA-512:	37F93BAAFD7502D1143F98298D5E94225C4CFC4EC8347C23D3BACF11BA3817E3883DFF5DC502AC25BE0DCEA2E534A29E2814E718540CBFF2BE38A5B9867FED67
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_english.jpg?t=1713912919
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x900, components 3
Category:	downloaded
Size (bytes):	158160
Entropy (8bit):	7.985812822561219
Encrypted:	false
SSDEEP:	3072:/1iunZkHtePW/qWwmn2eszuifiBGlsPG/DYYYjXbsYrwxDuz9FUPx9g5EAT:/1iung+CguKlKmDYYYjXtZTUP/guAT
MD5:	5296D18DC5C5C8BC6D172B964721BFFC
SHA1:	F44CC1EFD10AC3DB129704863EBDFDA93AA3C4B7
SHA-256:	2D49576108AD80B11C1D82EB2BA7BE24A075BB11353E0271780BF68778FE0446
SHA-512:	7944AF518E58BDA83E6F09AB75D4A72050D2D9DDD88C79039D75BDCEEE6216F14D8EE641B9A7BFF565CF04CCD5049D6D49C3F94BEFDC0A34E745ED8B06CD8497
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2462983942160090892/EF46F0461D54256EC4AE4BFD7C75FF2DE58A7991/?imw=1920&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;........@.."..........8.....................................................................@....I.2...GR<.l......w..{&B...<..q.]..j^h.....9...b...MRD..s.wl.jdy._,.9........7.M'II..BI.$$..BI.$$..BI.$$..BI.$$..BI.$$..BI..%$..BI.$$..P.l.HR...!....X.Q..r.0.M.c".2..G...HY.L...H.Y1...!.PE...Vg.l...a.U...+.V......B.....`E..,.Dm..@&.HI)..W.I.$$..BI.s.u.34..1.t......].a.v.s....*t.........&..P.`.U2..].6g.J.q../.....L...!9..L....!yo.^].t...$$..BI.$$..BI.$$..BI.$$..BI.$$..BI.$$..BI.$$..BI.$$..BI.$$......t@%...3..@.ym..(y3...!..G.$8.C..8...c.....$&..a..0IQ.HQ..c.B....u5......,fI``i..i.A..eaK8HI!$...HI!$...?.y,....H...n...#..a.`..&cq.7J..y...n8jXkR8."...f...H^.k.tmUV...H..3.i.....e.l.<.L.../...W..%7I!$...HI!$...HI!$...HI!$...HI!$...HI!$...HI!$...HI!$...HI!$.H.x.JX..JIP.U.M...j..j..j....J%g...(..Yp.......I!$..$$..$$..$$..U$..HI).H..Q..

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	6244
Entropy (8bit):	7.932526575005615
Encrypted:	false
SSDEEP:	96:yES897qNvwm699bTzcwfs5rn6ZAPLEGAI2nwmO2jwJXVC3wBZ15/5XHUw4g6:y9JqTzX05rzPLQIRak/C3e5/5X8g6
MD5:	E166C1FB9BDF57E622D3BD2FCFDB60B5
SHA1:	584597C880732F0980405B4BEE87EA996B0D1960
SHA-256:	F3CF0ACBF00E5DAE02902A139D3C8417E0D5C4282AED430BDDAD27A5DAC63253
SHA-512:	11B29A7F1B0780DFE97726CFBD9D749A6A7A9DCD6C97C698DF2B38924BA9871C8D7180B8C46DDC9779DAB9BDF5D30429CF4E3D7AD939138596CE03D70C2E6428
Malicious:	false
Reputation:	low
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................E.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..{....}..")X..9X.O...".K\|.....i........{.6F...d.3..>....9.;..Vmt...J....b...yr......*M..mFO2S..-.\....q.B..v2.....9<.>XA.oZ..W....,..0.....Q..s\e.e.i0[....s&;Yu)...d...5.....GcP.j.Q...0....y.;T..Gl......j........5.....X".on(..N.R.-6..!....;......T....+..!.$;.<.Oas=.....g.W+.q....u6,,m.kBX.lu=h...e.k....c.Z.+-E..-.p./..J..>b.^.6..z..a.ck.^....Y..9...(..

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	405096
Entropy (8bit):	7.990618528389654
Encrypted:	true
SSDEEP:	12288:oIkW2+LWolhU/Qw07yQRPkQHHrWSVjVr7:hQ+LDlhU/LyySHKS7r7
MD5:	1D93E1852D23CC9AD127A094A477634C
SHA1:	BCECA17B05AA4FC7CE26C70B2D5411451B1CB677
SHA-256:	6FBC4219F8D4F9730FC90C54CE8130DAEAE7EDCF66EA94193549033A6C5466F2
SHA-512:	B56672D2F6A63943A96B64138AD1265BB0FFF5B1EF5C53C107E8E01DC9CBE67FF75ED482B460947181DA32B324DD49E4A9ED578903B7ADA8A0AD24F2C59A8F16
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2493383326786745000/75E91AD7FB0B703702346DED1EED63D08CA520B0/?imw=1920&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;......8...."..........9......................................................................?0\....K7.Kz.HY.Kz.$..).B.h...\]bA.L..N..X.@K...d..).N.H.....E.u].1..Af.,...@I.. ...:..-.i..R.pAt....l)ff%..K6.L<.33.a..qJ..R.r......%;&..i......X...........L..]..5....%...$....{hs..4...0.ZC4...%...iF#BrB...I...g8...0'9vpM..pN..2..B.U...S...b....w.....u.....X..8w@.=.E...v.x..v....s...O.Du.y\....U....N..!<2q<..9%..[.ZU.......".'%4.$.....6.......[].vJ....C.vz..:..........~..'..%t..l...4..$em{R..M.b..x..B.$..".P..bU..2P..N.tP.._=.h...Fa.`..H..y4l.f.Z...f......03x.!.....&..u...[.r.a..PI. .B{.m.!....Qx.GN.fbY..A..,...`D...Y.{..fH)..)..ZB..Ea.e.=<\9.....@7C........FL..=j%..#...`$.p$...Z..z.af.8...........i..-..k.... .1..Q.h..cYd....V..\|^j.@Q..'0%.'.6U.l)...>.7lF'.[.uP.3O5r.GKA\|.+......,9*.......5J..,y..\.JQ..BkL.\1...i.d..9.a

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	51575
Entropy (8bit):	7.976578046158211
Encrypted:	false
SSDEEP:	1536:a9cBI1Kn6M4/vtDD2BD6uIc73Rr0eDVDM4Xg9Uskw:aePC/vtfkueBr0exDRXMXkw
MD5:	C76EC305186C6FBAA097DF08C734E9D9
SHA1:	E20180ECDDBC4EE000D0A9A2D0DEE7E1FA28FB66
SHA-256:	92BF90225FE458561742A827DC4A58E702292874DA1F57F59C75F1A145A57DD4
SHA-512:	46E1EFEC4F3D48CB37989092563BCB86037D3FD0EC1A9F4B76CEA9572E5C5E9EA10F908114B1E591E8EA0C9FF4B0878FFE57062686534015F3671BCFF8029C05
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2488510/header.jpg?t=1715042344
Preview:	......JFIF.............C....................................................................C.......................................................................................................................Y..........................!..1A."Qa.2q#B.........R...$br....%347CVu....56STt....8Dcs....................................I.......................!1A..Qaq......"2.....#BRr...34b.5S...$%T...D.Cs.............?..L:.ZJ.*..=q..hi..lqp.`..e~xD..+........Wil...c..........c..%..l.>.....J.k`BX.c.....$..R."......j\.3...G/N...B>.........G..8.^..K..c..9zp5.b......,5..Z.&.6.r...R. .a....<=&.t......c..\...r...^.Q..1..r..x..?f#."..8....0.rl...9....0..Q....@.....&1B.T..y\|......U...2..Sd.........o..."..5T.UE6....Q.1"#0.oJZH...z..m...2..+.\|.....Q.Tl...OS..,v..\1....jKV#H..c...Rd.7.W.....g%..]...".B9..Ki......@....n.....$.....1...O...f$....)..F.U..2.1......Gp-...pF..\Ik..#%....s...+.V.co....BT.+bOS~..`.d...M....d........=.N.N......@'..m..f.U2.S.7.~X.xV.).\a......-..Las....)...

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1850x450, components 3
Category:	dropped
Size (bytes):	211959
Entropy (8bit):	7.9876745737858155
Encrypted:	false
SSDEEP:	6144:u64nNe7j28hRgWTIputn9bPMum27JX0+D+:SNe/28hEEn9bUst/+
MD5:	A6BC6D0A85ED368BA9E259F0B9069D05
SHA1:	24C8E744EB15EA5327FD2C9DED55C9F07A97476E
SHA-256:	A8024C525DB117F5BC01C4A557A5B1F327C7846AEBE22EB608461C438BCCAEEF
SHA-512:	435E4FCD04E6DE34496CBE2925CAB6704683DCDB26B266FF0DB6BE1CB7FD1114FD60472997230B76BAD6AEA8DF2044732FE59FEAA953A3A2BCF1378F73CF168F
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	16831
Entropy (8bit):	7.958304901042516
Encrypted:	false
SSDEEP:	192:xlfx4ibPGYDUegb+5pWIOsfEDFvSldUmN4p2QRb3VCRLdm1CEOaRaHQxHX2B0HEQ:LrGYrNCuf8v/RRLiIgHMHX40C6qKce
MD5:	336BF4027A0B2B6AF49FAE8D0A92196F
SHA1:	5210C918C34E01AA0AAE74C5449B4E6321B56B99
SHA-256:	CF40E9DF9C9B9E93A45006903056E773357D57482C5ED5D6CBF08AA90C851C7A
SHA-512:	EB6BF674485B212FFD2E39213EAC688E4C8B6C14B34A26152E05A784DAB8965F38BAE55C12582DB00AF662B7F1AA84FF113EA0DB775869444FC8D0B43B99C1B3
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/FE07nT30TBg/0.jpg
Preview:	......JFIF............................. % . ..%...%.'10-'-+5=PB58K9--DaEKSV[\[2AemdXlPY[W......./../W67=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW]WWW......h....".......................................E......................!..1..AQa."q...2R..#B....3br..C...$4S...s..Tc..............................#......................1.!.".AQ2aB............?..q.U[.-.J.i...@......6....HU..$..I.d.. dL...Px..+.#.B..%.3..".M..K.)J.=.O...d...Re.eA[...V.g.N.....4......A.q].....tC...Z..7=..e.7RdD..\....j.A.`../uj.@E.^.?Q..[.u....O....i.t.FA......7..j.{.&...t.x.8h p../....^..w....u[......AV.].....S.^3U4......#P.....+f.n$D.+..#.p@9.....o.7.....sN).l.mm..>./.^..nxn.\.<......;.Z.eV.b$..N..u..}.?.q..Y.....!-..<.A.y.V.8.(..E..&..P....I.m...Mf.$.a..i.g.d........pn\..\...s)..k....YJjT..fbD..{....p..\|...rxW$..ugf<.M.[.1.r.....K..M...3...L.f..i.6{O.sp....]..>..r.E..x..vbX.i..K.\.:.-....O.b..t.........d.....'........a....jZ...9A.1.a........H$F.G....coM:......2\...0"......p...

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3737
Entropy (8bit):	7.906671945599965
Encrypted:	false
SSDEEP:	96:OSDZ/I09Da01l+gmkyTt6Hk8nTqviwYZP2H51:OSDS0tKg9E05Tqviw6451
MD5:	1626F52ADDB7C56FE3679D82108C62E9
SHA1:	2B414092D66ECFF528950093A655F755C3C7F3B5
SHA-256:	AE9F6C61E25D15882BF57BDE193D10D375BD315C9741CABDA11D700FD1BB7DD1
SHA-512:	05548831477CC421556C404F3411F581E98A84FF2E699882CB4F5DCA17D1C5F77B55ED2B8211EEC32D0A4317BE1C4EBC636277F840262491B753415F6F198276
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`.........H!Y.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2386
Entropy (8bit):	4.19023125963042
Encrypted:	false
SSDEEP:	48:TqnmXMEFR7r74gMWON+Oih7ScqC6xZVdmdUR+IFi:gkMEFRv7PvON++NxP0dm+7
MD5:	A18A9120D299FBF5953C745B46A06B8F
SHA1:	0CFAED4059D25BF42ACB01B720C0AFCFE75282C6
SHA-256:	AA429F60089CC6FA4F5157AC0A842C5295740280F69F156F68898849BEFF799D
SHA-512:	4FE8EA9984418B75AC0E78275E7BBD66AB83A2848C1B12747A5A990791A8BF12594BA0FAC2970091DE983D54270E0D0D2403E71E9542042A40C8CBEC9431901B
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/images//award_icon.svg
Preview:	<svg width="13" height="21" viewBox="0 0 13 21" fill="none" xmlns="http://www.w3.org/2000/svg">..<path fill-rule="evenodd" clip-rule="evenodd" d="M5.80814 0.197492L5.19324 0.62086C4.96265 0.774812 4.69363 0.851788 4.38619 0.8133L3.92501 0.736324C3.42541 0.697836 2.96424 0.928764 2.73365 1.39062L2.4262 2.04492C2.27248 2.31433 2.08032 2.50677 1.8113 2.62224L1.38856 2.81468C0.92739 3.00712 0.658372 3.46897 0.696803 3.96932L0.735234 4.70059C0.773665 5.00849 0.696803 5.23942 0.504648 5.47035L0.23563 5.85523C-0.0718184 6.24011 -0.0718184 6.77894 0.197199 7.20231L0.619941 7.81812C0.773665 8.04904 0.812097 8.31846 0.812097 8.62636L0.735234 9.08822C0.696803 9.58856 0.92739 10.0504 1.38856 10.2813L2.04189 10.5893C2.31091 10.7432 2.50306 10.9356 2.61836 11.2051L2.77208 11.6284C3.00267 12.0903 3.42541 12.3597 3.96344 12.3212L4.69363 12.2827C4.96265 12.2442 5.23167 12.3212 5.46226 12.5137L5.84657 12.7831C6.23088 13.091 6.76891 13.091 7.19165 12.8216L7.80655 12.3982C8.03714 12.2442 8.30616 12.2057 8

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17753), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	17918
Entropy (8bit):	5.900356403434612
Encrypted:	false
SSDEEP:	384:+uVpWr8v9dGbIDjYmYRkw+TCtocu83v3TQIjGErneiErnl3i2R2uzdi1hmvOSrjf:oHtId2uzdihmvOSrjxxWxMX+wD
MD5:	F7FB6A99CD1FFB696E0E2E272700AE4C
SHA1:	12A7D0EACA5349CCD65846160206E18B93B6060C
SHA-256:	89ADE8EC427CA62425BBEA0029BC66FC822BD6E14BE7B379407CA3A124ADB157
SHA-512:	4E925745C19E9846DF186FD3907CB2EF3E2CEE94BDF57A27D4BB3766B5FA643FBA7BD7B203912F0574D39FDD2523FE27A86879C9289FA170CC26578FE9A3C35E
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~4e3b43bb2.js?contenthash=840feb837a4ed2373734
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[3973],{45557:t=>{t.exports={Container:"_3BVe_okecnI7b_bHj5SS42",VoteContainer:"_1uhQYKdgwmtsVDpLxrmOc4",DiscussContainer:"_3tXYJmiDltr-fLKAH0O_yp",ShareContainer:"cLK_FdqhScxUTzHU6WVEN",InnerContainer:"_3kQsDl2VqtKxYObNcKcTVz",DiscussionButton:"wnKan9V1Aug0Ikn_ocWfG",DiscussIcon:"_3-isHseXYy0NiS2EMloR6s",linkField:"_1mRpVfH7FCfqC4kv0HvdNt",ShareButtonContainer:"_3tMDZdkB4JFahcyZ-ZqGkC",LinkInputLabel:"GaizoI364TtkUVx4j5XFj",LinkButton:"q5-pgvboIYgB5PsbsqgFe",ShareSteamBtn:"_3Gc7yZsdAguNlVxs5x0JP6",ClipboardText:"_3iQp-l1OFokCv4AbbWBJKL",LinkInput:"_2IeAww_mcYOwEY7ZZbPoif",ShareIcon:"_1kFSvBY1FBwKo9soxdfuZJ",ClipboardIcon:"sEXEiP0uJF49Xe8H5mmNc",SteamIcon:"_3ZAOLAqggc_1irxdu2cB5o",share_controls_ctn:"_1PRQmS4u1ehnJ0UPHgjRlG",ShareLanguagePicker:"c-WS8_0smXtwy

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	31900
Entropy (8bit):	7.9708168981928145
Encrypted:	false
SSDEEP:	768:Q5bE9EjEXeyh/eqmDGuudSwhQ8F5kdxSzeIKjGvyQPVK:QSEgXeJVgQBk5OSyIDyQNK
MD5:	194B3D80B853EA4183DE64DB31D6A587
SHA1:	535B6D51BCCAE71EB1FE2EC7BDC37F2F58EE7106
SHA-256:	11D49863757DB00A0C61D3A6DE66091B70B38366F473CA1E3183179D5E0473F8
SHA-512:	EAFFCF63E17BD0F3B0B81C1D0D38DF08B95FA85A6497B426FF8403F21F9997CD5B6A06012826D547FCD3EB4074DFBA815CA5925E002BB9B540D9B7697ED12473
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/xQOMy02LbNQ/0.jpg
Preview:	......JFIF......................................................................................................................................................h....".........................................M........................!1.A..."Qaq2...#BR.....Sr.....3b....$C...Tc..4s...%................................8.......................!1..AQ."...2RaqS.....#Bb...3r.............?...Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@...?..'..o..5...'..o..5{.?.3..i...TWG..c....~_....W.0./.h.e.....h.mEt...+..o..4..._..~....?..j...9......+.._..5...+..o..4{6..a.[_.G5..W...~......F.:..~......F.f...=.k...WM.Jb.[.....G..........B..?..j...9..../.._...../.._..4{:..b.R......z..~......F...q_........?..jZ.h.tWL..b.....~_..z..~......F.f...=.k...tWM..b.....~_..?.+.._..4{:..a.K_....g.\|W.p../

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 233, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	127133
Entropy (8bit):	7.990730885534633
Encrypted:	true
SSDEEP:	3072:TpZpGeGgFKXOSwDvmVWjNqDeWtY912HxjP:TpPHEUDcWjAqyY/yxjP
MD5:	24933E83B3BFC2081D99FFC24F448C20
SHA1:	932B3F9283FB3F29D0B6999F1A4EEA2078304C92
SHA-256:	C266214DC0A56C895FF22BC6784F3674363AEE2519CF59F6764E31FBAF2DC381
SHA-512:	5B9CD1A226C960423EDB1A965E5BA362BED973F7DF42AC4CB014AF8D08A0D00E6423692AF36DA42A050F83D4D5E853ED354BC145AFFF67DFA96FB7F36C3B5013
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............caNv...............<'A......IDATx.t.w.e.u.....'.\.....s@.F.... H...DS.adYa,..#.c....{..c{l...F..%J.%1.. ...@w.sWUW.7.......j.S.SOw.Uu.{.w..]._....!......Z..\|c.c...1...n..!@......J....B`..s=\..$~.....Tx~...(..y.m^\|.Yfgg..)..\%.]...x..1...%zQJ..$YF.gXcP..4.Q..w.@..V:..ap....p..X,.(!N2t..z...@..r...,I...q.]7.kb.S.\.......,/.....i..\.j..k..A..,..-Rv+\|..G8r.a...m........l.3./.....@...h.."....Z...m.R.8F).....E.8...&.I. $...D....!.........O...D......\|.O....6.(.'.)..J"..WJ...+MQ9...=~#.F..-r..eV2I..6..fl.RKf$.Z..)......dY.v`...0.&\|.S...............s/qe..Z;....2.E...MJy...yV...c...<.....;......J.......s.Rb..d....]..-A..j8.....A.............X...N....."en\..&....k...?3.....B....Z.1.cRZ....kI...\.4E;.8.4M..K..bss.8...Dd..!)..CC..8B[....(&.4q.c..w...0..&.RH1.....>Qfi.:diL..buB...i..`._..).+.......R..P.KC....^..SS.....j.fd..fum.4.q....&.b.KQ......

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19092
Entropy (8bit):	5.511106072147819
Encrypted:	false
SSDEEP:	384:fwtVMAjYb2JalUNlpczHK7DYiHiEiN/mDP+pPIOw6GNNZhweP8/F:fmS6FJJNzczHK7DFHix/mP+pPIOwlNzi
MD5:	7BE183DFBCFB68E7BBB8084AE6286674
SHA1:	CD11E711622EE7705B9258027C4F065FD55F9E00
SHA-256:	14A9F76C1AE6A675422A20FB69BB89FBCB42ED68915FB86CD0A16DCD5D185E57
SHA-512:	023EA3EF7D646843D31F6BB10E6E6F5B1C4EB59E9FD0D11FCAB0D59606BAB2D78ED68CDDAC5722F0023D5E36BD65FD6B77EACBC41713F5F89257223E398C5596
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=e-GD37z7aOe7&l=english
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...display: none;...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....resp

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	16538
Entropy (8bit):	7.943050394488202
Encrypted:	false
SSDEEP:	384:lA7ad/ZM4PmtxW25uy95PdixtvsYEyuE3e/M0OAo6ArMYtaqSiYF+tFz:lA7oZMl5uI9dByv3OM0OAVArrta5eXz
MD5:	D3DDDE76B6BA89A0418E92C6AFF58DC6
SHA1:	38DE00B3067376F86EEB8E40B23F5F8F7083A0FF
SHA-256:	63875CD182152592938BC570BB7E44DDD86EBD3E6D0A4EB3884FF8965DB3BCCC
SHA-512:	6FC9B0DD662C4711B1775E8A6163C58BB0F8F33513775B064BAF398B33285C0DEEAD9D9376BB31D0D42C797F98B2CB58A3E63174B953748A21BE1459DFA9261D
Malicious:	false
Reputation:	low
Preview:	......JFIF............................."'%""""'-(%%.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W.......-../W656WWWWWWWWWWWWWWWWWWWWWWWWWWW]WWWWWWWWWWWWYWWWWWWWWW......h....".......................................I......................!..1.AQa."q....2R.....Bb....#Sr3CT.....4.$Ds.c..t..............................#.......................!1AQ.".a.R............?.............................................................................................................................................................................................`..>JCa.....P.}.W.<O...qg..D.j....qg..Q.5Y.X8I7...B...^,.>H.%^,.>Hk5.K.x...#.x...!..-.B......z.Y.\|..z.....'.....3..!....[..x.%.F..g...&.............y!..........>.}.~o$4.._Q>.?7.>.}.~o$4.._Q>..7.>.}..o$4.._Q>..7.....5.?...+z...~o$t#....HB....g..GB?....+....~o$t.....H)B....g..G@?....&...........}.~o$.!7....y#.......4...Pw....G.m....(.....y#........Nz=..?7...<G..R......H+B``.w.z./.m.@.....{..>.x....P..Wr..+...}...!;..[.E.....!:ve@&

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	5448
Entropy (8bit):	7.690935354941968
Encrypted:	false
SSDEEP:	96:h9/CiHbWVtGFeSt7qBK1h95WlApa2vKNXV+FxElKT9u0K3R+CUvZ3Yqf:n/Ci7WGsSt7qBKXppz+A0KTwdUX
MD5:	4085095E7A8A9BFD95AD1E5CDCB0FA59
SHA1:	9C0EF9168A5F0E5D6782529EBE46999BC8BFCB15
SHA-256:	2E5D276DC305318FBE1F98DE8C78D7261647FA0C6F81B6BFCC9ACB63AD6B1B8C
SHA-512:	803EF2016C684298B56ED26E694CAEBAF77A33940345307233C40AC652D5B0BEAC311F2ACBE612491EBF89A5BF356B7060DE43AB992C2240FB2AEE95662FC582
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2484375407155795747/E7A33EB4D048D9176D3D880D579B3BDCF33171D4/?imw=128&imh=128&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true
Preview:	......JFIF.....%.%......ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........6.......................................................................{.TDi.mT......>0..^..]..LP...]..........\.hK.r..........b..b@.D.....a.`.Z......t...b.T.]...b....}.Uz..@..h......Q.^.........9..K,P...~...230....Y.~=.I:....tA.x.y..n4s..t.<.............9B.xf.6.I6.n..

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	7013
Entropy (8bit):	7.940014840126126
Encrypted:	false
SSDEEP:	96:oE5jPKRnqGpPF2L/k1jiz12H+ljngIjlOGW9DBnzKopzHGzNd/blx8xsRiJ1/bdL:oKu11hukG4egIpOFOopzQbJRi/dsKr6i
MD5:	A0B18D7B76B3B5D87676E8D007076B65
SHA1:	44256BBF500B7F9E50FF824D6B523ECE38B3CD8F
SHA-256:	4FE182430AE2655125FEAECBD12DA607A2356DCB7C3E8874AC76C7B5BF05EB5D
SHA-512:	B9DDA9E0AE18016C43557686E8B5891A9C293AAC3C8C4FA7E1B716076481489F77F06A26A6DB573E1296D4C77AA6AA3BD9517EA5AE99B94B3581DB44691D0523
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/381210/capsule_184x69.jpg?t=1715700452
Preview:	......JFIF.............C....................................................................C.......................................................................E.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....1......*..,m.xaI...lLJq.!7.$......{.k.....4......,..k.E......s...['}1.!...r...40d.~.2Z.....w..f.l.F'.....?.3..^..B.il.8..)..M.Kg...a\P..(.8.(.A.R@..a.e..3.....q@.FQ..(.\K.m....E.`..J..o..>.#`.W.P....n!.%..Y.....1...c.........&Gs.%.)5.'...l...h.m.....].#8C..V.n.N..)}.4...'dnY..Xc....I\.gJ..@./.J.GC7"..i.........Qy..(:...I...5$.......54....tr...\V..

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 500x350, components 3
Category:	downloaded
Size (bytes):	168027
Entropy (8bit):	7.984278844590707
Encrypted:	false
SSDEEP:	3072:4Rmxo6sK0y3TK7XCRyyC/XINccLqNij6Jnxwz0bhK3KFmxZVEwfb:1x5sKXTcCRveYNccLqAGJxwzuH+Ewfb
MD5:	669737F7DAC464B171D9CF3D424DD967
SHA1:	2AB1BD4DBCD9565F3C4D51EC9ABE15A1688FCEF6
SHA-256:	DE7B7CEDB7958DC828D61D365FA909C98180E97E0DFC63A16396167D6BB69E97
SHA-512:	8DF57331B2D397A06FF3DAAD5175C20E91700EAF619F60FB756E6E4FABB4BE021AD6769FE67BDEE5917053E8783A606D12579B8945FD57BDC78C3D4279E8DADB
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_mobile_english.jpg?t=1714777083
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/logo_steam_footer.png
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	downloaded
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 1920x858, components 3
Category:	downloaded
Size (bytes):	91289
Entropy (8bit):	7.965865201970232
Encrypted:	false
SSDEEP:	1536:EpswNuZpYFc4ODO4EIjTP7XXsZBVUrNHTxDMOz3iNmT53ISPWSV:EKB3pO7IjT7XuoNT24Kg5Bz
MD5:	529950193C4740AB3FA4E309DFE8C3C4
SHA1:	D68848FB9AFDDEC4D9730006467D78C0A54DE99B
SHA-256:	D09CAF51DF43370B86B4799B4174800E26655A80D5D7C9AFC55EE75B84D27921
SHA-512:	7F86A772FCD7EB109A3D245725C3098F230012870F9E403890CFAC0A2DD0E25EC2F1C4A64321F4644C922E4A4E4AB773A481DD8CE470BAB480F08B995014F9A0
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2478746540855851802/0BF2D8E3138F50105E60DB9FB97DA481C0611E2A/?imw=1920&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.....%.%.................................................................! !,,;...........................................................! !,,;......Z...."..........6.......................................................................GL..g=F.%.....Si..L..F..:,...(;.].-.r...d,.-...........6..Zd;l..8UgG..9X`hF'..>v..+-(..tq..e...."..r.)vZ.DR.;A.+F......r.iP.F.,..gp.9.YH.P.:..d....................... ..j.R..S.... ...U-lU-LP.j....Jt+l.z.P.&..(.b.X...^.+..Y.hTJ.]...jZ].AQ.."..l.a.U.....tHj5T..Zw..Z.b.Z...."..+..k.f.@Y.y.%.J%.R.b....V.]t.7EU......N=.~G..7......vR..tyY...3.,.D+2..+(zY.#....%"....Z#.U.3...c..cT.;......qe.!.8.L....m.2].BvU..gTp.td+.......TvU..%eU..l....B.hH.7d....7v.8.).....4u.G((....X. u.....h......ikj.R...........Z.ib.Z.`(.@.X.%...V.MV..@....[".X+.....d...)`k.-M..]..E..OI`.....,h.UcbGY.).9k...JK...z..N..j..F......w..Z..3D.*.U........{4..nz._.....F..6.-..!.`6-.yQ.,..0fDtD(yQ...4......E.b{.tN..86.r..%.Q..X.5L..:<.19.....`..TugFC..tE

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 292x136, components 3
Category:	dropped
Size (bytes):	13336
Entropy (8bit):	7.9608729443721655
Encrypted:	false
SSDEEP:	192:yRSoNERDbL0+m5/ssbq2hB96T+i+eK0DwjwJ4lXan6+Q3pWu6JTMxNJf:6SJn/m5/tNr9W+iI0ExK6+Gpe6H
MD5:	06A6484EE4DBE057FD2056DD0C648BC6
SHA1:	13FD230A0F25E1CF41082F3E73AADF6278646CD9
SHA-256:	6EF09E4AF6DB9E10D6A1DCA56ED819DC29C36EA827EC70579CC25F1590403479
SHA-512:	53637474917A98C7217C76848ABF86C21198EC23E25637946AD9FF77D152DC7D46FAFA7C9D60A206853C88F3A0A0788678042C63B5A448110459A455ABE640C1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................R..........................!...1a.AQq"2....BRbr...#3....$Ccs....%4TUe...'7DSu.....................................>.........................!.1AQq...."2a...3BR.....#4Cb$%r.S..............?..2..{....`.V.y:\|.A....t.r6..a.0\|.`........).Ti.#g..?]....e..........G.S..V...`E....Y .,.H..Y ...`...`.VK).tY,....e0].J.]+%h......V0].D.&.$_.....HX.VK)..YL.N.e0].G)..YL+..d..K$.M,.].G$.N.d..#..Y...dr.vK$.E....9a.;).F4.l.[...Y.....mjmc..H#. .b..M.W...2ZUFiM.b....A.7...q.b,^m....u....;..4..../...d..;...$..H2E....i.s...dt=.d.%..].K$;.,.......J.X.WN.yAtY#h.. ...vX..!`...].D.{.d.#...d.-.HY".....a..Om.8.P..-F.).$... 7+ .v.>...... .......!....S..C.mG.U.r.MLK.,...%.@..dpkN.IC<M/p.`.D..VGw....d.......dCf..[.wE...j....wF)n.X..........,...v_K.v.#U...nN].[2kJTJ.A.d.4..W.%.k....

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	dropped
Size (bytes):	52294
Entropy (8bit):	7.988040055146957
Encrypted:	false
SSDEEP:	1536:GMjgZMN53NsyGNTUbA2jWulb2rmz0zx7/tGx:G7MN5dsRTUA2aQNE+
MD5:	D186AF4E74AAD63F47F73B4ED683FE99
SHA1:	B578178FC45C5412855CEFDEFEF68BE98E1D4BC3
SHA-256:	7D5774EFCA63D9AD49620ABD66217CA649DFBE8061DB71DCE131A22F9E471AFE
SHA-512:	A5EC3B78DF869AF9D2BA253DDEEE08A7C42A9819F0C4580C6A69075A5C5F87488FAB4CCCE12C72066E573D19B06824DD4643C4279C2ED8FE644E935D56FD020F
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........9........................................................................h.\.#_.....Q.R,..<.7J...H..O.....'..a\......SMw....=....o........M..k8Am.P.x....7..=My./..w{8.8<..Mw.TO{......{>........owk...m. ....+'.7.h#o..8.D.Ik@...........,.A!.u".h!..l.s...3....o/j....$t.....m..h..7..[.8.....{RC<X..d"....M..NL..q.....{...3..g.s...G.....:.....`b.....]s..C...>.w..5.1...t%.I1..0.....k..........y.%...9...d#\|..k.{,..i.......W....X....Zj'...&...}....2..{n.3.......t.(..f...%y...J".S..2..R..wk..}W...^..g.M7.....8...h. G......A6...>RaN..T.z...3..(..L.........^..P.y.gdy..x........F.4P4.%.....c..i..5B.QQ.l. ...G...uV.......w....\..%e.B2..0..N(.l.o...ft ..rk.....<...7.....z.=d.a..n....:S-.b=...E.zPO..P..Z....lV.$...o....=.. ...D.&6.<3fN.Ji...B...L.]gW1,..w".W.Y..8R!...?....Hx.`..

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	dropped
Size (bytes):	49103
Entropy (8bit):	7.986546537597201
Encrypted:	false
SSDEEP:	768:Ll24R/TV72exBOMy34zQ70w3f1jiOLDm9+WKwy/vNyBI5QUpJSizmBbwBcUNuYgp:LlLRbV7pBfyVzffE+ybcQjiIJUNveB+4
MD5:	BC4068B34BD4571C62F7133AB18E2AE6
SHA1:	26D89C79D195A0CB54630490423A884262545301
SHA-256:	DCD3A87713F36E3927562A85531908DD6ABF4C59ED6AC706586E0AA7F1D83A9C
SHA-512:	3E5C8FED8D0BDBF62DE5A1984341510AC3CC82292C31824ED664EECA42AC271A7DC6BA5A86807C444FDFE5D8CC377E23AF03CFF1E9AB6631714A7D4792B18E24
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........9......................................................................3....0h...>t..c}.Bg.!.R,`D.W....r65\.H.t^..l.a..a.m.L{mS......y.T...'...o...G...).O.CC.H.........r....rg..w.........c.\...3.{..(.1.T.>..v..]..\.>..<{/`[..<....!..>0.URdb!SE,+4.\|.......q..S.Z....&".y..t5.C:.d..BQPM....P,@.A2..............o..=.l.....{......{..RNQ..c....\|l.=.y;....=.r{..v4.E.0 n..B.\|..T....2..i.w^.c0.'.*.a..k.>o'Hl.n.k....7..0.\!.......j\R...A.........M}.s..{...yq....D.8/o.3.....m{...l.c.K...w..I........3.hy...>Wk........B\|(..'f...r.p...m.&.....[..'!}...3.....F.....]-..B....;..h_..}....B.(.j /..c.n..+.cl....#..c,yl.....W.<R.Q.;C.=..@....d.#.6.f'..[...}...a..5^..m......vYs.X.X.r;.....n#...L....P.nU.>.Htv..B.b...X...72\|.::w.iM.....<=t..(....X.....o"d." #....&....lc1JD..9..T.Q(..ya....l.e.FH..8

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1169
Entropy (8bit):	6.53554947966358
Encrypted:	false
SSDEEP:	24:c1hfvWwh82lYSgTqVPdTT3ZyJ3VNIEGVoF5l5aK7l4ew:CAvnzqdp0J3tj5l5aIQ
MD5:	DDBF5745CFD0932E5E18C0EA271F19E7
SHA1:	D9068EDD91F4C01DDFB794AA395843FEB27493A5
SHA-256:	3735B1058C21031892C59D6B52D5F6ACD0B3FC435F7DC0F0F8B586DF29143624
SHA-512:	6D91A3D3905CD835A2936364FE871F9209924EE85DBFB4E22145018DBD2B7EC604DD9F9F7C07758A3F7FF57C6CD40B0471F15AF151D95A0D9A0A6F39D3FFCCB9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/icon_platform_win.png?v=3
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:8CD4B3FDC8C611E793BCB6BD713023CE" xmpMM:InstanceID="xmp.iid:8CD4B3FCC8C611E793BCB6BD713023CE" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EFB48ADB4CB311E3AB3FC1E695F5A0EB" stRef:documentID="xmp.did:EFB48ADC4CB311E3AB3FC1E695F5A0EB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>X..G....IDATx.b...?.5..2P...X...X....8....P. ,..2@\|....X.......g@,.....m@.....G.....Hf0. .....h...._@...9...&$.7jD..

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1057 x 453, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	134600
Entropy (8bit):	7.975500968858445
Encrypted:	false
SSDEEP:	3072:CUnFasOIVyHQCFbeIxsaFHePkAq+y0I7TMOE9A4B:DnFLOIpnYhAq+y0UMnA2
MD5:	ED96AF112AE58CC87D257E3A15A15058
SHA1:	2FB2963CA13D8E2DFF6BC71E9EAD9B0FDC686CD0
SHA-256:	FC76B07C4A37F312FF1883EFEFC994E48BFC407942ABBE823D665D46C2A883D2
SHA-512:	16ADB69862AF3C24CBF37BE97C366D441112222FB4F39938295E89CEE92344914C346F5672D146A1EDF0008EED491EB66CD91615318374A4A9E12598EE48224E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...!................pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	6244
Entropy (8bit):	7.932526575005615
Encrypted:	false
SSDEEP:	96:yES897qNvwm699bTzcwfs5rn6ZAPLEGAI2nwmO2jwJXVC3wBZ15/5XHUw4g6:y9JqTzX05rzPLQIRak/C3e5/5X8g6
MD5:	E166C1FB9BDF57E622D3BD2FCFDB60B5
SHA1:	584597C880732F0980405B4BEE87EA996B0D1960
SHA-256:	F3CF0ACBF00E5DAE02902A139D3C8417E0D5C4282AED430BDDAD27A5DAC63253
SHA-512:	11B29A7F1B0780DFE97726CFBD9D749A6A7A9DCD6C97C698DF2B38924BA9871C8D7180B8C46DDC9779DAB9BDF5D30429CF4E3D7AD939138596CE03D70C2E6428
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1840080/capsule_184x69.jpg?t=1715643382
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................E.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..{....}..")X..9X.O...".K\|.....i........{.6F...d.3..>....9.;..Vmt...J....b...yr......*M..mFO2S..-.\....q.B..v2.....9<.>XA.oZ..W....,..0.....Q..s\e.e.i0[....s&;Yu)...d...5.....GcP.j.Q...0....y.;T..Gl......j........5.....X".on(..N.R.-6..!....;......T....+..!.$;.<.Oas=.....g.W+.q....u6,,m.kBX.lu=h...e.k....c.Z.+-E..-.p./..J..>b.^.6..z..a.ck.^....Y..9...(..

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	downloaded
Size (bytes):	49103
Entropy (8bit):	7.986546537597201
Encrypted:	false
SSDEEP:	768:Ll24R/TV72exBOMy34zQ70w3f1jiOLDm9+WKwy/vNyBI5QUpJSizmBbwBcUNuYgp:LlLRbV7pBfyVzffE+ybcQjiIJUNveB+4
MD5:	BC4068B34BD4571C62F7133AB18E2AE6
SHA1:	26D89C79D195A0CB54630490423A884262545301
SHA-256:	DCD3A87713F36E3927562A85531908DD6ABF4C59ED6AC706586E0AA7F1D83A9C
SHA-512:	3E5C8FED8D0BDBF62DE5A1984341510AC3CC82292C31824ED664EECA42AC271A7DC6BA5A86807C444FDFE5D8CC377E23AF03CFF1E9AB6631714A7D4792B18E24
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2479872440761762678/B5B4B1F905325582021823AD5C917DB8F5164836/?imw=512&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........9......................................................................3....0h...>t..c}.Bg.!.R,`D.W....r65\.H.t^..l.a..a.m.L{mS......y.T...'...o...G...).O.CC.H.........r....rg..w.........c.\...3.{..(.1.T.>..v..]..\.>..<{/`[..<....!..>0.URdb!SE,+4.\|.......q..S.Z....&".y..t5.C:.d..BQPM....P,@.A2..............o..=.l.....{......{..RNQ..c....\|l.=.y;....=.r{..v4.E.0 n..B.\|..T....2..i.w^.c0.'.*.a..k.>o'Hl.n.k....7..0.\!.......j\R...A.........M}.s..{...yq....D.8/o.3.....m{...l.c.K...w..I........3.hy...>Wk........B\|(..'f...r.p...m.&.....[..'!}...3.....F.....]-..B....;..h_..}....B.(.j /..c.n..+.cl....#..c,yl.....W.<R.Q.;C.=..@....d.#.6.f'..[...}...a..5^..m......vYs.X.X.r;.....n#...L....P.nU.>.Htv..B.b...X...72\|.::w.iM.....<=t..(....X.....o"d." #....&....lc1JD..9..T.Q(..ya....l.e.FH..8

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	75366
Entropy (8bit):	5.133411725255152
Encrypted:	false
SSDEEP:	1536:nBBAiZ3ruxQM9GiQo8OPD7MkP87a3E+wDfnBDNw1ni7irFacv4JUkPqxDRGo3xy4:nH/2
MD5:	D7203B2C472F7F39AC3381BCC2519A38
SHA1:	77B0AE4A05FABB9ABB63230DAE7B6A9AEBB55DA9
SHA-256:	6BD5E4A63CA620FCB802680F412B2A6EC96850636FABEF9F5AC1A287C09332DB
SHA-512:	B2DAA2A1C71C7A8FA97B61B0014E43EAF3698A861D9B5C1E7E3B2CCB87254A18131B322E625D0A961563FC3D3C07DFEEA5BA63063A3438B62586B9960A937422
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~69438e232.js?contenthash=fb8a441e33487b799219
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[7978],{73799:e=>{var r,t=function(){function e(e,r){if("function"!=typeof e)throw new TypeError("DataLoader must be constructed with a function which accepts Array<key> and returns Promise<Array<value>>, but got: "+e+".");this._batchLoadFn=e,this._maxBatchSize=function(e){var r=!e\|\|!1!==e.batch;if(!r)return 1;var t=e&&e.maxBatchSize;if(void 0===t)return 1/0;if("number"!=typeof t\|\|t<1)throw new TypeError("maxBatchSize must be a positive number: "+t);return t}(r),this._batchScheduleFn=function(e){var r=e&&e.batchScheduleFn;if(void 0===r)return i;if("function"!=typeof r)throw new TypeError("batchScheduleFn must be a function: "+r);return r}(r),this._cacheKeyFn=function(e){var r=e&&e.cacheKeyFn;if(void 0===r)return function(e){return e};if("function

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	9500
Entropy (8bit):	7.942619010647389
Encrypted:	false
SSDEEP:	192:cdgk+CcqFUJ8aVDFcScM0vYUy5vOqeumvV/qPKR6ppOhSqQ9bK53hMtDQH:cdtNKJ8apKScM0AUy5vOZySR6ppOh7Iu
MD5:	484E48DC73BE0686335488CCDDDAEEBE
SHA1:	DB75D20221C8172307EC29786D01C647C7F995CE
SHA-256:	FB9F786F288D6DFB992C3197E189AFB9550932DDC83C05FD29D63BBE6DFE2759
SHA-512:	9AA331A2E164F4799E84A89CD7E88475D2606D866CD825F7F34A58601D43F777788A4D2673D7CA1816AA5A284459A4DE6DA7CBFAEAB61E9DAD4B2F3DAEE69BBF
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1651560/capsule_184x69.jpg?t=1715609768
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................E..............................................;..........................!..1A."Qa..2q.#..B..3br..%4.CR..................................:.........................!1.AQ"aq.........#2B..b.$3CRr..............?..Cj.,.. ..[l.@.8....n6.....~.f.....l.t.9..G.7...$.<.....\|..Y..G7...6J."....g..e.Z...7.t..R.....+D*.B#.0KN............[.M....D.~....fJs.f.^.fp.,+..>x.YS...O1a..p...............d\\...o..uK.wWV... .'mG_:.....:.=Kx3%n;..$.......GlTb7...$h}g.uMXY7...X:.....O..O-..dIr.%.K..i`....m{X....Ke..U.......JOR.=.,....%>.\|..t..6.....{..M....}d.Q......r._.+N`.....H.G2..,>.L.ImI.I...........l8..Y.:.....[e?.$.&#.Q.EZ..N.umm#..T......T...$....]....".5.Z..BQk..Jn:u..!#....C.\|....,...n%e5..=..z..b.e.t.X....v+.K.......F?.-.....SA.0.B..~.....^\|..;.WU../...Wu..[.;..+..Lw.V&...+....}..\...FC5<..YimL@.(Zn

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	107192
Entropy (8bit):	7.981524170682696
Encrypted:	false
SSDEEP:	3072:ki206AjGidSVaAv52R8SqcSrmzAq/jZOf4pA8mctGqpT2R:kf04iEhMSrmMIxmcB8R
MD5:	21FB6E4E0B7E9CA26B2B9A493C9007D0
SHA1:	B178D60D8E2C77FF0FD6D59AA4F0A185D1BB5337
SHA-256:	4D43933AFB10D4EF54522C1B62D78C6728A2CD3A69D66DA3076735968DC16B11
SHA-512:	298F2A344B178E7E4BA1989346855E3DD13C32BDBD2D023DADBABC4A770ECA542B5A2DEC8435568EAB8066A1AB4AEAE2DC072EE73FA0F0D43253DE916753D527
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................a.h............................................J........................!..1A.."Qaq..2..#BR.....b..$3..r..CS..%4cDTs.....................................;......................!..1AQaq.."...2......#.B.3R.$Cb................?..T.u.V.3.J.%.3..(jV4#..(..x.s.J0..Y..i.8.......[..ES.L...K.$.v$tS.W..B{..F9!........n.M..C...c..B.8.. 7.?A.$..`L.....y........~X...S.\|.Y..r....gBp.!3L. ....3F.%.......I.!/...d..K:....Xeps..{.P..Q...#E...9...@Rz.Ba^...n4S.+q...T..=....uj'.R.-.v..%.q.F9......uZ5\..R.b~.6....qK\..s.@..N...J..)..t).n/.E....,c...I...'...k.`L...H...d....1 ...7.A..U..../r..J.$If....8&F..N..=..i`..-.(.$....6R\|=ni.I<.c].+.....}..l...l87..+..xN#o....`.......$.b@vfm...'X/.\C}.Z..`e.i...J...$......y..%p7G.......Gwb....(.:.n..k-O.....i....0.~.x.nF_.9.3... ...\.-........5.!.xcG5....w.b0.h..g....^o.'a..X...

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 81 x 14, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3475
Entropy (8bit):	7.77266892162709
Encrypted:	false
SSDEEP:	96:82CqFl6AthP9bTuywmhewX45av6vyZ1gPWDFH:OqFljP566wwCqgs
MD5:	99B0B7CE794818EB24DD6D5287588936
SHA1:	AE4AD007AD10371BF4A35F1D4AE2B871D2B809E7
SHA-256:	E957985B47C64E1D65EC3C377170D5C0BBEA810EAB863824F305838493BE7427
SHA-512:	8DE899F5824D6E79D1C4BAFEDB59ADAF8134C9C9AEFAE5A7C0CDEBA45258A7A632D105136BCA33461CD97F7ABAADB98ECF3F70EA8DCFF49807E5D1FCDE69A25A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Q.........WW......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:C3233700A10911E19F2BAEBFABB72EAC" xmpMM:DocumentID="xmp.did:C3233701A10911E19F2BAEBFABB72EAC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C32336FEA10911E19F2BAEBFABB72EAC" stRef:documentID="xmp.did:C32336FFA10911E19F2BAEBFABB72EAC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>;1P'....IDATx.W.tT....73.I2I...I...h.H ...!..4X.............b.G.z4...Q...RA.X.Ai+X.....!...@.2.....f&L....s...w..../W

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	405096
Entropy (8bit):	7.990618528389654
Encrypted:	true
SSDEEP:	12288:oIkW2+LWolhU/Qw07yQRPkQHHrWSVjVr7:hQ+LDlhU/LyySHKS7r7
MD5:	1D93E1852D23CC9AD127A094A477634C
SHA1:	BCECA17B05AA4FC7CE26C70B2D5411451B1CB677
SHA-256:	6FBC4219F8D4F9730FC90C54CE8130DAEAE7EDCF66EA94193549033A6C5466F2
SHA-512:	B56672D2F6A63943A96B64138AD1265BB0FFF5B1EF5C53C107E8E01DC9CBE67FF75ED482B460947181DA32B324DD49E4A9ED578903B7ADA8A0AD24F2C59A8F16
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;......8...."..........9......................................................................?0\....K7.Kz.HY.Kz.$..).B.h...\]bA.L..N..X.@K...d..).N.H.....E.u].1..Af.,...@I.. ...:..-.i..R.pAt....l)ff%..K6.L<.33.a..qJ..R.r......%;&..i......X...........L..]..5....%...$....{hs..4...0.ZC4...%...iF#BrB...I...g8...0'9vpM..pN..2..B.U...S...b....w.....u.....X..8w@.=.E...v.x..v....s...O.Du.y\....U....N..!<2q<..9%..[.ZU.......".'%4.$.....6.......[].vJ....C.vz..:..........~..'..%t..l...4..$em{R..M.b..x..B.$..".P..bU..2P..N.tP.._=.h...Fa.`..H..y4l.f.Z...f......03x.!.....&..u...[.r.a..PI. .B{.m.!....Qx.GN.fbY..A..,...`D...Y.{..fH)..)..ZB..Ea.e.=<\9.....@7C........FL..=j%..#...`$.p$...Z..z.af.8...........i..-..k.... .1..Q.h..cYd....V..\|^j.@Q..'0%.'.6U.l)...>.7lF'.[.uP.3O5r.GKA\|.+......,9*.......5J..,y..\.JQ..BkL.\1...i.d..9.a

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	588429
Entropy (8bit):	5.6521496035252445
Encrypted:	false
SSDEEP:	6144:0LEg99gRSXzvmCVRHI4NOO6XsR5D7sk65B//KQwd:0LZbgR6z1VRovNsDeBHKjd
MD5:	7C3A3D612F83FFBDC8C7AC04ED2DBF3E
SHA1:	D81A4AC8501CE15045E8F0398198D45F07E39BE6
SHA-256:	552FCF3F1D93B8B7BA38436D153E80581168A4BFE7BFF24A9E0EE472882DEFBD
SHA-512:	266804F282C5500161BF040C25651175358E1A1CB102469B4AD6BBA1F6436027F3131E231E1B84C740A96E95626123649EC37B6EA4AC2246465CB693CDA9F875
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/main.js?v=soQOTmUzl-9y&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[179],{76430:(e,t,n)=>{var o={"./sales_brazilian.json":[56195,9513],"./sales_bulgarian.json":[59784,3591],"./sales_czech.json":[33497,5494],"./sales_danish.json":[7401,9561],"./sales_dutch.json":[57409,9828],"./sales_english.json":[12445,1546],"./sales_finnish.json":[87956,3007],"./sales_french.json":[98965,2235],"./sales_german.json":[43093,4293],"./sales_greek.json":[45906,7971],"./sales_hungarian.json":[6131,867],"./sales_indonesian.json":[48340,7192],"./sales_italian.json":[16260,4979],"./sales_japanese.json":[53461,9991],"./sales_koreana.json":[2335,5439],"./sales_latam.json":[55341,7924],"./sales_norwegian.json":[90497,960],"./sales_polish.json":[80600,2723],"./sales_portuguese.json":[57278,6658],"./sales_romanian.json":[30499,9316],"./sales_russian.jso

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 501 x 201, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	171987
Entropy (8bit):	7.991429122289166
Encrypted:	true
SSDEEP:	3072:t7dbUjnD70yaCrsm0am3oSNfM16lIpCkzqdWpzQUAjlbvdDHBwttu0IgXDyuurKH:5OZDsm0mcfMwbkmCAjdvhBw+0IgHurO9
MD5:	2117FCAE8DA5A36277DB9981F00F3543
SHA1:	E1CBE102B0CD54187B8E190ABC09C1974D1FFA84
SHA-256:	8FFCD94DE035BA1CC5BD109CCB61E3DC8C12EA96DF43F3CF69FDD57F7B1F47EA
SHA-512:	353BA4736DAD09912EB9CD1F5C8525C7CE27E1101EE5423B5080DF690D919A824FE8CDF1A84C48936E941EBD7181A09E3E476223A173B3E6479FA1333C7F530C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............:..s....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop 23.0 (Windows)" xmp:CreateDate="2023-11-14T10:08:43-08:00" xmp:ModifyDate="2024-02-09T14:20:51-08:00" xmp:MetadataDate="2024-02-09T14:20:51-08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:da85ff5b-

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2612), with CRLF line terminators
Category:	downloaded
Size (bytes):	154313
Entropy (8bit):	5.339057804972366
Encrypted:	false
SSDEEP:	1536:QAh60TGB1e5lnl9jPdVcTzWMIyN3qxVqGotoM6kQuOEmTsojv6slCZ6uaqFkQzam:jY1e5/9zdVcN9qVqZDrUEXIm
MD5:	1A4B1DBE0536A0AFE37348D4D2548199
SHA1:	49DCAF79D92615A0238CBC6D355938843C4FB594
SHA-256:	E4154E41AD96E6BB89EF07C46E0BB1914411FFEEEAA4BADAEE6E114D6D2CCBFD
SHA-512:	8B84BB15A021B2411EEDBD2214D558F497387DBCF28CAC373AB5040DDDFA5B4DB014A54A2C943179216D90B6D65386588DC869EACBDB3936E190FD2EB703752E
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 292x136, components 3
Category:	dropped
Size (bytes):	25243
Entropy (8bit):	7.978699269947841
Encrypted:	false
SSDEEP:	384:3av3EnaDlkqbDY1tKQejmlClCwEYp5EyjPZhbiWWj:qv0nar+tPmJwCtWj
MD5:	EDAE5B9749BE8D4EFE89DE3FA507B92B
SHA1:	656ABBB6277C797EED72D7822B3409CBC7F3BA90
SHA-256:	EE55B3084D1F6A553315F3C5DAD0160D1B4006FC7FF51A94BB2C5BFA46A07D0C
SHA-512:	55D92AB9E2132F834C54A1ABFECFEC527E3F51B3C762D000A23EE539CB23DAC47FB71D13287C31D5CE16B1DB9E9B937BE75BD67EC09F465AA1FCDEC40DD6D90A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................F...........................!1."AQ..aq2...#B..3Rbr..$C....4c.....ST..................................?........................!1.AQ.aq.."2........#B..r$Rb..3C..c..............?..:..\|...!.N.Y.y.........Y.3..m....4...y.wS.O._}#!m.I.t..Ga....n....(.P.6L{g.....=.../.Zz.\|DE.$...t.:w..f.5I...K..[.{...RUo.....$.2.ps..".S.N...cM.c..Z.)F.E.......Xe..T....1.y..3K....8.....(05F.g.b.0.3...@uO..33.......Kh...$....J~@.".9.EL.K)$..Ammx&...-.;.....7.....3nM...?..[.....]{.w>..a...5.j.IT.....?.._s.....40e.....t.lM.7..>.M...&.J..~O.9g8..=z.OA.'...fi.......W.P..g...s...M...[..o....<R.xt.......T...!...@9:..+..."...7x.w..<V.@..;.A....n.~..}5d-Ok.)$..)..4.@..Wn.NG.S0."..v....?.y..B(._......._..0M"...FX...[.P..e..........1.......wq.......n=.xw...#..@.".].....

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	10191
Entropy (8bit):	7.9325106354111075
Encrypted:	false
SSDEEP:	192:FT6SR0SmWoEvx5WXWXJwm3tvgCVhvHKmD84z92f4G5gorZ29TzAdM86dBHRt:56SR/mx4ug9r3Q4J2f4GP2TzAgrt
MD5:	55A23BABD5C6F1F65F76B325F689BBC3
SHA1:	5ED451E60A284B8749C605C57F2AF155B80AF752
SHA-256:	B1F91FCBF766E7D9AB172DDFA1BA541A4D67ECEC810F5DE00F8AD9B9B8BFEC0A
SHA-512:	AE0BA7F9E4D0F5668D17668787D837FCFAC3A59721D03CB0943DBB5828C5D8B1B1283AF70D7416C829F1AA743B027A0DB3EB57094E05404F2BB8B15AE8C53539
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................;..........................!.1.."AQ.a.2q.#BR..r..3.....b...................................8.......................!..1AQ."aq....2.....#B...R$b...............?......o*.....~..j.9......Me.d..N..m....c5.B.H..+uL.C...:=I'.~5....gx.zP..6..?s..Ix.....W#..2B3...!....T0k..S........~t{N..i"....).N..%e...x..h...,.x.ib.T.....Mt..5...!!.%!)Kc.Oo..L....U...B.h..$..;...e....Rw.g..Y..3.ZU.......S9.b.,..]z...G....>. .q.~.C6....P.Z.k.B. ...O.N.`.....U....%R"8@.%....?....kjdW.-..-%.....I......k.2.^....Om1.J6..u.k...L...J.C..#..}..rIZ0A<...m.n.q._......b)...R.......%......p .{{..a....>..#uF.M......;....0.....d...:S..-..o..0...[B.!!A..~.Tw..[f....T.L....@i......k....!.>.%.HT&..K....w6@!#....4=.M.E.}.......}'...1.<.f.....R/T;..BP..0.w...Y.........j.j\5..

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (57851), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	58046
Entropy (8bit):	5.004825187457945
Encrypted:	false
SSDEEP:	1536:s7aiXrClR0oLeh4iS726I7CsrpzAuIRmE:EklR1Leh4iS79I7CsmuIRmE
MD5:	8D4A5EA4013FD55EF27F1427DA71432B
SHA1:	0F9D4FBEB0EBA5477665AD31CB3D135CBFE5FFDD
SHA-256:	542CC3E6E4DAA5960A449A35A22D159CB9F70C45339C8F4C6E920758C4D821A9
SHA-512:	BCAF35FCA5F7605426176C5C523D582408EEDD930E4AE75ABC552BF63568BB2C01E6E313DA70913D29001F9E3BBDAE7D4D1F16B94E4B3F22537CD9E7CD5340DA
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/main_english-json.js?contenthash=6c5add9f48c608fe2aaa
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6815],{63336:e=>{e.exports=JSON.parse('{"language":"english","CuratorAdmin_RSSFeed_title":"Manage my RSS Feeds","CuratorAdmin_RSSFeed_desc":"Setting up RSS feeds allows you to automate the Steam Events and Announcement creation from your existing content management platform. Your content from your site will automatically surface to Steam customers who follow you as News. ","CuratorAdmin_RSSFeed_lang_only":"Feed Language:","CuratorAdmin_Curator_lang_only":"NOTE: The curator is set to %1$s language which is different from the feed language of %2$s. Re-save the feed to update to this language.","CuratorAdmin_RSSFeed_lang":"The language is set on the group to \'%1$s\'. If this is not correct, you can edit the group profile and then re-setup this feed.","Cu

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16631
Entropy (8bit):	5.233282628886546
Encrypted:	false
SSDEEP:	384:sCTepbgyZM3KwVH/eGwH7tDmjVxCqfMHaG3aBd04qg4Te3EV3ZAMMfiDiAiAif7B:EpbgyZIeGVuqJz04qg4Te3ExK7B
MD5:	5CE6BB1BE046A76C593DC5F9AA706226
SHA1:	64E2C5B91DC1FBB25A4E76EF3A960FF4A34FEBAF
SHA-256:	8584C8CA39F9C0DB8DD5D299D575A056AD34AFD1D3BEF62BC31700DE106284A1
SHA-512:	40AA30012CEB625F6FF8953A8572E1BFD0EFE34BBB787D1035308E64CF87B009D916C7CD95C41B9BA005D632BDF89C944EEC3DBBEB77577694C5884C78C42C17
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/skin_1/apphub_home.css?v=XOa7G-BGp2xZ&l=english&_cdn=cloudflare
Preview:	../* override the background for now */.....apphub_HomeHeader..{...margin: 0 auto 8px auto;...max-width: 948px;..}...apphub_HomeHeader .responsive_tab_ctn {...margin-top: 8px;..}...apphub_HomeHeaderContent..{...padding: 10px 0 0 0;..}..body.apphub_blue..{...background: #1b2838;...color: #636363;..}...apphub_Cards..{...position: relative;..}.....apphub_GetMoreContent, .apphub_GetMoreContentWait..{...max-width: 948px;...height: 300px;...line-height: 300px;...text-align: center;...margin: 0 auto;...border: 1px solid transparent;...padding-top: 10px;...padding-bottom: 10px;...margin-bottom: 10px;...font-size: 20px;..}.....apphub_GetMoreContentWait img..{...vertical-align: middle;...padding-right: 10px;..}.....apphub_NoMoreContent..{...max-width: 948px;...margin: 0 auto;...height: 229px;...color: #c4c4c4;...background: url( 'https://community.cloudflare.steamstatic.com/public/images/apphubs/bg_hubbottom.png' ) no-repeat center top;...text-align: center;..}.....apphub_NoMoreContentText1..{.

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59433), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	59598
Entropy (8bit):	5.15751605280197
Encrypted:	false
SSDEEP:	1536:tB9QlIKQ16unlmOlzQwGBCiK8xfTaF6nUFbzx5dZKFNtMvrH4b+iFZLgA/vtZ3gS:G33
MD5:	6CEB3929555C27D6F1AF2A7B32C6FA8A
SHA1:	EF99C1DE1566CB1BD9927260CFE461BBE7E28854
SHA-256:	DA71039A3007366B335E8F09504AEB3E1AB2BACA7DA9BDD51EB1F6E04BC05E13
SHA-512:	89E4EBEB2F00F42433A52CBFB6684C6E37DBF1ECAF3277B5E0950B3ADBE411EA58831E2E5F270C11E05B0E5CACEF176B5CD754C4DABB1DB5A13003A4578D6F65
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~c7a3fa389.js?contenthash=28f31dbe47f6b6412c17
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[3275],{88016:(e,r,t)=>{t.d(r,{FE:()=>V,GE:()=>ie,HW:()=>p,Yl:()=>F,aO:()=>l,eQ:()=>N,f_:()=>O,hW:()=>re,pQ:()=>ne,tE:()=>se,xs:()=>Y});var i=t(10059),a=t(39087),n=t(79545);const s=i.Message;class l extends s{static ImplementsStaticInterface(){}constructor(e=null){super(),l.prototype.steamid\|\|a.aR(l.M()),s.initialize(this,e,0,-1,void 0,null)}static M(){return l.sm_m\|\|(l.sm_m={proto:l,fields:{steamid:{n:1,br:a.FE.readFixed64String,bw:a.Xc.writeFixed64String}}}),l.sm_m}static MBF(){return l.sm_mbf\|\|(l.sm_mbf=a.Bh(l.M())),l.sm_mbf}toObject(e=!1){return l.toObject(e,this)}static toObject(e,r){return a.TA(l.M(),e,r)}static fromObject(e){return a.aD(l.M(),e)}static deserializeBinary(e){let r=new i.BinaryReader(e),t=new l;return l.deserializeBinaryFromR

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65049), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	785950
Entropy (8bit):	4.124569406371002
Encrypted:	false
SSDEEP:	3072:ANzpzlXl+DD/DCD/DCD/DD/DCD/DCD/DD/DCD/DCD/DDCD/DD/DCD/DCD/DD/DCs:OpZdI2D
MD5:	529707D316F3D29BD9A65E355F0BF4E8
SHA1:	1158E45E5F771027A027E8A7286D59017F14828B
SHA-256:	A76F94BA9DEBB1BE7592A3F8F32669F0E2F13114DE693AA8969265719EA89513
SHA-512:	B7A0C445F823B6BADE2DC387000EF1F0B7926BAEC8CB6C096145A2EE97EBE20A2FD712C275A2FA1C7630A2BFD7BEF839B3F815FD43C3369B7B0756A7B5895ACB
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~7bb437d7f.js?contenthash=db9788aa72093ef41f9a
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[4264],{98973:(M,z,b)=>{(M.exports=b(81417)).tz.load(b(11565))},81417:function(M,z,b){var p,O,A;//! moment-timezone.js..//! version : 0.5.44..//! Copyright (c) JS Foundation and other contributors..//! license : MIT..//! github.com/moment/moment-timezone..!function(c,q){"use strict";M.exports?M.exports=q(b(37485)):(O=[b(37485)],void 0===(A="function"==typeof(p=q)?p.apply(z,O):p)\|\|(M.exports=A))}(0,(function(M){"use strict";void 0===M.version&&M.default&&(M=M.default);var z,b={},p={},O={},A={},c={};M&&"string"==typeof M.version\|\|C("Moment Timezone requires Moment.js. See https://momentjs.com/timezone/docs/#/use-it/browser/");var q=M.version.split("."),o=+q[0],W=+q[1];function d(M){return M>96?M-87:M>64?M-29:M-48}function R(M){var z=0,b=M.split("."),p=b[0],O=b[

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	83704
Entropy (8bit):	7.971367759711945
Encrypted:	false
SSDEEP:	1536:C7M3dQK+7Qtv7wiBQQwJowpGzs0OjUtqFn2eBiOz7OzeloVWNJSyJGyj:C7M3+AtEbowKRWUeRTuzeuVWhJGyj
MD5:	7D4DA243FF3464766E1EFA5858E5A0FE
SHA1:	ED52699BEB4C6DF0BE349167B21ECE3AD3FEB546
SHA-256:	38F57A5CD6D284BE09D0048E88D29B46821E4FE84628B384AB7CA9BE667DA934
SHA-512:	11FBFB4D5A279B74BFBB1CBEA1C56E4D5725965FA2C512DE78765ECE630A17382A10FDFAD286AC71EA351C4F8D65FE82C965C62E4ED74D20D8CD7ADA8CDB9706
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1145350/ss_f28befd916e59b8bf0a8a801b8a498b8adaa01eb.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................V.........................!.1..AQ"aq.2....#B...3Rb..$r...45Cs....%6DS..u..&7ct....ET..................................:.......................!1.A."Qa.2q.......#...3BR.4r.$5D.............?............zU......0..F.7...........E.JX./..o,.r.....=.x....`..4...+7........pG$..1.. .Ty.e....^W..r.Je.j#C.p2..N...._..!.E.r.E.P......j...=$.T.#.vP.X....}.:...4dt...=..P...).'.2.O. .{..X..........R".)R.....Y.........X'.d....Or....O=Z.3B.....Tp.(...1.F....6t.i...............Q...b.......}.z..]~...<T.+v....o}..GZ..J..K.._.._..Bu.T..ko.r\|.2........W?....7..Y...z%._.....bX.......Z.[....\......8.k2f..}.C3.M...A..:...Kp.ia.H..0v.[?.Mi!(......9e>k..X.%....e.t<.(..2..U.m..Z:'p.e.y....2.w........r..,.xa......E..$.....@.G\.[......m6w....F.JQ.I.\|;..b.x`d..........J..

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	81245
Entropy (8bit):	7.985763195495334
Encrypted:	false
SSDEEP:	1536:nGroG2QEwO5QFp5tu5KAl8N2xZudpPup1U7kDmtW8h+3m9uGWZ:nyxyKAluQW9rymtVICha
MD5:	33772E90810294C755B6C1D31CE4E092
SHA1:	55A8D65CC804B86231D2387EF783C144315EEB4A
SHA-256:	7218F2E5D5D8FD538461CB4160F5994A0FA95CA9FA1A619CFBA53A289AD24EAC
SHA-512:	CE9D1B8E7DE459E4513AEA90EAB64E389D1CD625AEE21F352BB55A5F5E8EF19BDF9AE8182B757F8A9FA99541A71527B6EB7CAD2F44CA0E80C5EDEF43A9443B7A
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1672981/ss_02b994c796adfc5fc5984ec658caee4ce34fe69f.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................R.........................!.1A.."Qaq.2..B....#Rr..3b...4$Cs....56Sc..Tt....%DE....................................?........................!1.AQ.a"q..2......#...3BR..br$S.%4CT.............?........,);...Iz,=p.%(..I`u.L.k.\$.q/.....+...........n5...-.KV!.#I.^.8...".p.,..\|....L........1......s.........]........Pg...{.u......=n..<...+Y{B....U.w.l......4........U.LjH....~.A2.......L.5Ws.R.Rm`0P.........B.RT....(..r>.P.......+.S@.5%..X..-.O[.>.[.Tkd+..SR..u....7..s..q{..7 ^...F..TEE..o."Z..(.h.}...V..VL.5..(..-1.,L.w7.b.\Ch2D..\.....j........:.......... ..k..4...m.\|.%..mNY...0..N...'P..yyZ.9....g..]..7........AiE.@.R]i.G..8c....E..O_....&.V..2...5R.. m..!.G.9...c.0.......y ....A6....u....ZrJ.E.p..5c.......R..^C.@..$....%..$......H.K.B..H@....lgd.r..

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	99971
Entropy (8bit):	7.9860149662065405
Encrypted:	false
SSDEEP:	3072:Nhjb/0hkjgVi+bfa3gLCTQ6PMJDLUNy20EyRhgNX:N1/kDTa3XTbU5LUNy20EGuX
MD5:	4952BE52A651E9BCB98041CDDE4FAD04
SHA1:	8AF46B43F4AF428C2327974D638E53A664B8A8D1
SHA-256:	C7B631A40F4C69B05129E662C627CA9F32919A7CCD41DE68DDE3589501B7601B
SHA-512:	281F38199F7D1A22F94C9C1CD9973AFDE8ECF88ACCF56BCA9B6A63E7C71B8E414F933F9D6E3F7FFFA71AB9A86503B350953467A13A7BC569023249CD68DA2FDF
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1672980/ss_faecee368ca05e4d08ddf7db64f154df152a3722.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................P.........................!..1A"Qa..2q.#B....R....$3r..45Cbs.6..t.%Su...Dv......................................9......................!..1AQ."aq.2.......#B..34R$bs..............?..}eO..T3 /.h.r......N...X.-E<I).V).........1....z....@.4.....$.K..n..,.s.U..c..c.hd.(.1va.....!.'...F..)s......f...6c;.-`..!..jb.(F..o\|[...).)...i.E.6.'..X......Q..F9....`?.!..pl....BR..P9.X^.u\|.\Q....Q..s...D....U..(e..W.e..'o...!.J...~..Q.....f..6........H..'.9P..m.d.H.....x.."..&..X.....x..6.b..Er..\.G~..E.tT....(.(. !V.+xH.Ri....@.YE.o..l.F.xD...24.f...Z.)..G....8...R...L;...).5....X..BCw..z.\t.K.v.c).Y.VQ..V."....1i......{...m.G..p1:..].'.5h.i.J.,..+...;\|.1ek..^.77....i..l"......).....2.9...'....5T0..1.m./.. _..lg..w15L..Q..GZ.......U>.s..XY.g......V*...#..).iN

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	89771
Entropy (8bit):	5.3082829776469165
Encrypted:	false
SSDEEP:	1536:imsvf3ZcGj0CqB26gdz5a70sfFo1KnVn6z4EBYfhlOPBr90Q6ssOZrQSysmHN4jU:K046g+Dn6z4EBFlWN4A
MD5:	B2E1D832E9A40D7469ACE7B710E138CD
SHA1:	BA52B1B42F4B6139EB571DA7795FC3501A748DA8
SHA-256:	68BD0A72EABB055E969805AFF7360CFDD81FBAA2F0A10D3C9C18608D1179AD79
SHA-512:	4D3A923403EDFD9AF724C1112BDBEE60579ED8E42735A24F9ABF3E3045335164EF8E0479A9405236924F2F60429613177DDEBD83F12A3CA0EC7FDCBC33AB44C7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=suHYMumkDXRp&l=english
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight Italic4.015;Plau;M
Category:	downloaded
Size (bytes):	133600
Entropy (8bit):	6.0674472145735345
Encrypted:	false
SSDEEP:	3072:D0000yU00000p4hvCgblYq4AYpbVvQ8U/VMxLseW8Yafj9:D0000GWCClpnYpxvRamfh
MD5:	07247CBD12D4E4160EFD413823D0DEF8
SHA1:	517A80968AA295D0A700A338C22BA41E3A8B78A7
SHA-256:	41464EFD9A32A5967B30ADDC21FE16CD0A35870FDA56658B531A9A2434B4D829
SHA-512:	27E0E7505D41891E70BD06733F96E82E45061D621A1D20BBC524FC89C5406A799CF53D98C0FA256CB4EBFC19750C9A05531A8D273CEBC260D48948EDFFDF6244
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Preview:	........... DSIG............GDEF.\|.@...,...:GPOS.r....h...dGSUB.e.........POS/2t.........`cmap.......\|....cvt Ft..... ....fpgm.6!.........gasp............glyf`..........head...1...0...6hhea.......h...$hmtx.[O".......locap.+........maxp.......@... name.H.....`....post.v.....L....prep...........................................w...x.y...z.3.........&.W.............D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J......................................................................................................................................

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12821), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	12986
Entropy (8bit):	5.1754602570473205
Encrypted:	false
SSDEEP:	384:+XuJ2jmTb8yPpOJ/KJFoHFJ78W01f9PM/EZelBsFSogYf58YqnjnANAYOXuJ63qM:U026Tb8yPpU/YgP7t/88swoGVnrF084G
MD5:	8ECD2C2A4EED13BBE3BBDA580AAAC465
SHA1:	6C0BF51D1530798DB071BD17A984942AE57E5C59
SHA-256:	DED69548F3AB9D2D82AB988C8A9E8D1270D856426B41AE5E2910BDB4285061B6
SHA-512:	24088BC786350B148583BBE25A08ECB25B42D789AE625C0CA07B707FF5B956E72422B3388CA31CBFC5D15DF30FCFC3D28486018BD43A60E54FA7861E726BE470
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~5a92743e8.js?contenthash=dabd8f9cfdbfdd68c5e2
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2829],{54879:(e,r,t)=>{t.d(r,{K9:()=>w,Vy:()=>b,fG:()=>_,tR:()=>m});var i=t(10059),n=t(39087),a=t(79545);const s=i.Message;class o extends s{static ImplementsStaticInterface(){}constructor(e=null){super(),o.prototype.recommendationid\|\|n.aR(o.M()),s.initialize(this,e,0,-1,void 0,null)}static M(){return o.sm_m\|\|(o.sm_m={proto:o,fields:{recommendationid:{n:1,br:n.FE.readUint64String,bw:n.Xc.writeUint64String},review_text:{n:2,br:n.FE.readString,bw:n.Xc.writeString},voted_up:{n:3,br:n.FE.readBool,bw:n.Xc.writeBool},is_public:{n:4,br:n.FE.readBool,bw:n.Xc.writeBool},language:{n:5,br:n.FE.readString,bw:n.Xc.writeString},is_in_early_access:{n:6,br:n.FE.readBool,bw:n.Xc.writeBool},received_compensation:{n:7,br:n.FE.readBool,bw:n.Xc.writeBool},comments_d

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	81923
Entropy (8bit):	7.982671033894948
Encrypted:	false
SSDEEP:	1536:VOc0SKLTCUM/m4sNEJRaUp4NKkjmNX7Ss4Lwr1cWVVhvvq7aiq4g/llPzt5n:V5Q8O4ujm5nAwr1cWV3vvq7/cpzz
MD5:	74545078F76D008983608A474C18429D
SHA1:	12FDA74528C3363227818BA37510D33E2FC942C5
SHA-256:	3F763E440E1F94C5B31BEE12FAC5277A49E2CC9165602A56B884ED03CB37A259
SHA-512:	C087F3DDA6C86DFBE0B501C699E8119CB4E6847980B518CBA2438836D376AA2FBBAFDE235C8396E0303E133B81B61BA62811CFD014D4025AABA5222FFE8DE9D0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X...........................................I.........................!.1A.."Qaq.2..B...#R...3br..$4s...5...CS.6.&t................................4......................!.1A."Q.aq2......#B.....3Rr.............?...e....R.P...E/...r..../......}\|....U.y._N&.....+.K..`.?.,u:...U.<...~....-.F.E..2.K....t.R7..A..;... .eUMOY.B.f.G..P.o.j...............t....p..I..oK......`..a......JtV ........M+M.I=4..Q.....-.MQ..yc@...J.\|."F#'.{..S...a..S.._Ug.).O...d/... ..J.y_......8.?.3.{...S..4..t..S..,v.8..N.$.L.2.F_+..K.w..0..<]J?$............x!&.I"eR\|.nx1.n...J..U.o....tl.zJ+....8..K.....);...:..:XC......&.Y..'.P..!.8..L.* BS.L..[S.....oA..E[...:...fm.Jg.I....Mo.nf..&...<...Gf.g...`;..T...}l./.z....0x.....^mM.....,..f.%. ...t.Q`E..+...J>..y..S]..K....A!....}....R''a.Nq-4...F....k...{".e.........t5.e..9.</<+

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	12663
Entropy (8bit):	7.946661743068701
Encrypted:	false
SSDEEP:	192:YIxW1+jgMCf8BRbXoHpfpXIfBRFL0SMpqW7HJOzB5O2mRU5Fm2KzET6:DK+cXUBJXoDqVgpz7HJsUUFm9Ee
MD5:	7D760AD2BF5CA126F6DAD66FB309261A
SHA1:	B4B8E661CB6F7119195B74375245CA93F3ED927F
SHA-256:	94C080DFE33878E9D4B17317629436996E2AD64A9D2AD027CD625468F9CFA9CC
SHA-512:	8116D69D1B169DDE5D2FD4DFFCF760FAB72D79A4B7C9DBC1DE2B2679C739911303E4EB2528BCB425000DD878D74F5B492BBE59081D99D3A6FE81CB52894C03EA
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@............................!."1.AQa..#2Bq..3b$Rr....&C..45SUs.................................C.........................!1AQa.."q2.....#BRbr......3.Cc....S..%..............?....Ev.+.Q]....Q.....Y[h_I]..I..i........9.dW#.M.......FSG.J2.RP...........:.6....N..B..J.y...#.Ugr.:...Fr...ihT..Y,c.......a..H.......$}....r..k..?T..."....@...~%$}.G.....Sl.&\..._.m...q........-N..uA.Sojyi.xS.NX.!..(.D..p..=........).`.G.'..Dq.RD.w.W.m..e:.......m.U..B~;.....`.i...g..T.l..(...Z.-...4 ....2<.N....j....etT.7...n..n....@IW$d.t..R.Iq...\d.Jt....;.u.m\Vv\.tj'..X<Nn....^....#c.)=>..vL...^;Aa..YT:mY]J[.BH..q.`.!8Z.*.......`o.[...H&.H.p`.T.@0\|1;UV%...}......G.......W.. ..DiM..qHCO..D..E.~.:N.=.{....p'..9...A...P....?.\|..^.$.U.y..{......{Y6...w{...V.s)T.b...}...

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	70541
Entropy (8bit):	7.961922031318809
Encrypted:	false
SSDEEP:	1536:XmH0JzU52ax8hR7SvluYzS3AcawRBXV90I7:XZQ2aehs3e3ZX8c
MD5:	E928BA60A7D9712D1F3B7F411852200D
SHA1:	1BB6F01F9BD51EEF89567530D2D0C2C8B6F7EFE2
SHA-256:	C4075E0AD65AF49E5C1BCBDD9273969F90A48C76D8F1414F3536C128E99FF788
SHA-512:	EBFE6D1871EE77C9A259B8FC299AC835B269D34D66EED4933249A062F72C6CA79F81DE544E1DB4FCD3AA13F2944BD8F34E3D089D1AA426B6DBF4638CECC45C9B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................]..........................!.1.A."Qa..2q.....#BRTUW....7Vu.....$35rs...b.48CGSc.%Dd....&et..................................A........................!1AQ..."Raq.2......#3BS...4b.r.$.C..5..............?..U@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(........g[......."..P./!........[....P:...z.....7..}...S......uS.>.~....R..N.K.:...x.^?U....O.h...T...o........S.R...\|..7..}...S...)x.U>C........).T...C..!....._.....v.^!.O.........J~.;E/...}.}x.W...?j....uS.>.~....R..N.K.:...x.^?U....O.h...T...o........S.R...\|..7..}...S...)x.U>C........).T...C..!....._.....v.^!.O.........J~.;E/...}.}x.W...?j....uS.>.~....R..N.K

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	58596
Entropy (8bit):	7.977338898486892
Encrypted:	false
SSDEEP:	1536:nTn/JgsfdbpLrPMoWE7FpWaBckds0caX5tcqhWxDUyBxe:L/Jrd9LjMoWE71mkdD9ptcq2DUyBxe
MD5:	BB800A097E240E2EC73FEBD2662E63F6
SHA1:	BF42B3390586B36EB8BEB913331E17E2CB008827
SHA-256:	8BF72D1A0EB0DC1E89D18120612581449DEB0F57434381A6C77E8252A326C826
SHA-512:	1AFA3914509CD691D4B86F4979DE71A612043736563016D776AEADB8EEFD46922458A9BF8202E65ADAFA03EA4765985A8F8B06D2C469C86D2DCB76D1ECAC3FD1
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1604030/ss_4a88ba3b0353f3d43f045e5230c9d600e19daae8.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................N........................!.1A.."Qa2q.....B...#R....b.$3r...CS...c...%4s.Dd...................................7........................!1A.Q."aq2........#B..R.3Sb.............?.........Q...(.(.TnE..S...].&..X...o.hL.....yS....I.#I{..6..:.\..d.....FE.....NFC.'.H..l1.8...=-.g;.....wm....Tq(..v.F2T..5$"..1....b.,x:...m.F4..)1..;n{{5....0..h.s....4..t..#;.'....m..,.q[....k`..m.?.4"..r...V...E{2..2.HT9m.....s......:.(......mAV...Z.T......_...M..Zm...@.kR..r......s..'.........%.,.:.:. ..N..AE../...)..Du.-.....IfT...I.c.J.........<.-B.....$D..\i......I.a.D.8,.....-......q.c...r.A..Lh.....`#+x.F.#=.fA...._.4&V....MHB...J...Q...g....%...I..i.6p7.#....X... .$x..>....dB_....b...v8.v..{F2..4....h.+..<t..4s.....5...L`P.cj.........U\..c...v4.Y"(........9P....F.y.y

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	8542
Entropy (8bit):	7.9437736739802665
Encrypted:	false
SSDEEP:	192:DwEZmrV+/Z97rBweEAW3DJpVdRqlDMo82FBCuCil8YOn8Fah8Ca:0Ese97JszJvSJ3T5CiyKF05a
MD5:	B0A9E0F6F7C636BD343C2D6AA8FFDACF
SHA1:	A71ACB0DC032729FB06121130B1428B81FC6E430
SHA-256:	8CA56E3D4347CACDE89F34AA61E96E931C7A3E2396D6B9583089CD45835DB0DF
SHA-512:	4E0FC96D04A86DF6D564FA62226ADF50BE1ECA48C05D7B49CCBB8206F7FD84A6F432096024DF904CF92F3A75FEF0D8AB0546F9A92F07A13D523D0BA67F08AA7F
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1203220/capsule_184x69.jpg?t=1715253758
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................;...........................!1.A."Qa..2q#B...$R.3Cb...Sr..................................2........................!1.AQa.q.."2.....B.#3R..............?...B8.$.'C....y...q.T..[...M...D.j....f,O...Ge.>m...@Y...<.iY......b.m.......1NJz.r+..0J...y.9.3...m...6.}..Od.Q...x#"6..pI......T.....6.........#,......r@-.g..T.z.n.........J.).......p.V^.MM-.?\.+zkPFO...)'...<Bg..lf....D...$.J_k..P.U...d...M,. .[d.,Q....&8..'...uN.......nN...$.9..C..../..Uv{.O#.........xe.......A6.v7EwWPn.....8U.J...a...gn.....q..p./.......hE*.....fJ..T-P]Tr...&..}.\|.lw..O......x....M..2.(..}..r.J....._..`....).....%.#...........[...ae....\|6...d(.}...uK)j.#i!.T.@O..\|.H....K...q,.Ct.c.Ra.kUv{}n...Q....C...Q..1......u..a$Z...Iu..]....iZ.W..\..B..{.8.`.#.<...8:V......(uu#R.....7d9..H.

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	90430
Entropy (8bit):	7.968912702227343
Encrypted:	false
SSDEEP:	1536:1/946oq9DVrwDT9dBZPDUm2GIvKoNQfLd2dUaEITQ4LDM9DLC92juG97l99iMmAd:A6oqPcDpdzom22wCZ2qaEp4vMc92yG9r
MD5:	057BF5E56FDC090467FC7CF5F9282AF0
SHA1:	2C0FA39619949CEB6B0E691024CDF6E4A43E3AA7
SHA-256:	85BB2DFD67B4E474A376155211EDC06FE43F798026A4698EABE02E2BD0983771
SHA-512:	1501DC6F57E66A40B33AF8E30A85A2811633885A976B142822CFD85AD1D492FBCD00D010914E31DBCE46D7F1AE3B6B26EAA0285B23AF4755C11FEB0E2E0E0FF7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................V.........................!.1.."AQ.a2q..#B..3R...5brs.$467tu.....CS......%..8v..DTc..................................7......................!.1A.."Qa2q...B....#3..R...C4b.............?...z..wGN.C..mR1kl...FwWz);2?...l.......tx..w...u.Md....j...].\|..M@../R...~;gKF..]h..r.d=....z.....#T.UJ.Nt.0.}....8....i...F@c.x......b}m.0......o.Y%..`H."e.e..wmp..2{.p.NRubiv:-E.LxQKm......J* ..B.IF.g..*?x.0A9...u..?$VK...}MW..]d.....gtX.h.bI....+....w.M&.9eLjZ....'G....2...Ts.X......k...Vc...l...RI..g.s...B.R.H.'...Z..+..t../.n.. .a..D..H<.`XB.......2c......;...9.I8..k..d.r..]aI.._...PJ.OV.....i.[.........F-.2`.P..Tb=..D.=..F=..t.:.......l.5..q......<..E.N.h.pty0QZX..Z.Ec.'Z.G.\w.&.:.1.B3...4MG.B.rx..P...S...0.....2t....%..S...Q ..7,i..7hP.7..k..n@....A.Hl6..T..C.

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	3475
Entropy (8bit):	7.82391106031112
Encrypted:	false
SSDEEP:	96:PVb3cB3FHRHklW5v7nbOOJlgWsnKOfJfk1kG:Q3FHmcTbhbgWsnKOxO
MD5:	6F4A0B74BA2F83D92C003FB5E8492203
SHA1:	331A8353BA4DC76D906ABBBB02550030A257D7DC
SHA-256:	AAB775FE3029C051B926114AFE9B5BCC7B50B851DEEED5F83097A13B31A463D6
SHA-512:	7CA6CFED18A3D773255149896559F2591B2CEBFAC8DF9E33E265CB81BBE264718D21E223E99622D91C3E06711FAAEE538D242AC8E6D40921C2B8A291A98E7A8F
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2523781903903083492/B6F4C07905839056E8E89AB40F7DC7786B3189D1/?imw=128&imh=128&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."........../.............................................................$$.DL..t>C4./....BF..L#.h.V..BI....d.p6.......M."./..).j.....'.qV.~Z...."..;..-.K.y..E.#..?....x..7..'.x.F<I.{GG......C..8..T.<D[d.dr.b....5.D6.&....v...G.0..:.o....%n.2.D.M:l2.#...L....H..#}w..-..S.h...e`.&r.Z.}...z..1.HX.....Gh....3.B(1W.(.Ur...+.. .....g.Q..(.%i.HI!...4v>..).../......~.m.h.k.eb...H...-.............................!.... 12Q."%&6...........(:.`_.U.qw\.......+....?.......SVsJ.K.M...$;)..V.Y...;9o...^.(.tf..ez..2...VP....$..L......K.n...........q}.B........tVni.3Y+..i.N...1..y....J.(.9....Z...Z'#j....Z........IT5k2.7%;.v.....b.~.A...........Zf...L......Q....S.....$.0Z$...s.[...Z.n..mu.9.PQ6...c.7..AV.?.d.A....zQ...g.uM.+.Q....e5...Gu@.9.>i.*......,..b.&...~]......6..9s..R.@..(...(.D...}............6E.

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 81 x 14, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2441
Entropy (8bit):	7.562660515761875
Encrypted:	false
SSDEEP:	48:DitNn2VIhJ37VsKSFsf+KlvE5MMpL8NMENYUn4FoDqAmVc:82aDRSWf+KhEZL8SiYFlVc
MD5:	9467CD36FA8D637F6025E405A8A8EE81
SHA1:	8D028C12F3EF3EDBECFAFE5217C734003B739967
SHA-256:	1396FFD3FDDA47E9634BBAAFFA5C1B8FA3DAFBEEF347FA2504E2C636EF316636
SHA-512:	33A712B98462D7750A37999E948E3CD258EDA9E0F8B617768729E2A3FA809E712C6FD9920731C9D0FE160018F45C0EA0293FFC539B9B98F41244932CAF4BAB5E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Q.........WW......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:FC2506A0A10911E18FC7B75195E1F38D" xmpMM:DocumentID="xmp.did:FC2506A1A10911E18FC7B75195E1F38D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FC25069EA10911E18FC7B75195E1F38D" stRef:documentID="xmp.did:FC25069FA10911E18FC7B75195E1F38D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>m.......IDATx..o.TU...{....]7T..V.....K.v[.....2..c.(..YF.....(..$.(H......@.eI.2.SkIP6IJ....7..o...Y.i....{..s...

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	4594
Entropy (8bit):	7.597772222605657
Encrypted:	false
SSDEEP:	96:huFS3cGSq0aOqW3RlEtXvzsxG4Qv7mBKqfin:aHaT+DEtrPgBu
MD5:	E79312FBEA4F08B74C2AEB67EA0D7CC1
SHA1:	085E562879E9003250FCEE04B5137E66885371E3
SHA-256:	C447FD517B03929C88DE46612D22D40670DC005B2160499C41D77F4CF55E7DB6
SHA-512:	C0844F80070ACD63A241486F6FBDBEFF0AB887E4A16EFCA35BEB2800E173946D526DC3225B62281A85A15E8759144ED9534CBFEDC10AAF82FCC8A3BD22757F7C
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2477620007728569722/81BC4C3EFDD2D6179D4E0B30295E428E9F921945/?imw=128&imh=128&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true
Preview:	......JFIF.....%.%......ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........5..................................................................}N`............3....C{.E`...n.5<2..jx......DwoY..:.c+<oq..]:.=.MU=.;o.uC.}.Y\x...y.q.OC..Ce{...9.cB.&.k...5y.q...]..6{*.iF.T.5T..r.So...7....F..5..35pq.R..L7r.:....,JzQ.....N.C..=................&.........

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	61474
Entropy (8bit):	7.9741045219306255
Encrypted:	false
SSDEEP:	768:UHBB5KieMgXfLdMgXMnXC/XlnhOFvn2HwWUo2T73oAwSC/gvJT9ZNC0eOOu/:UhifMsLjX+YG2QHT7MSC/gRT7tRf/
MD5:	B28F8EB8E2C86998A7A5096C41E3DA30
SHA1:	E95BD1DED8989933F11337FA165125D70DBC88CA
SHA-256:	D38AC85C8FC1BCDF56AB8FF9D3877455217F1BDFCE1F7C664928B0B01AABFA40
SHA-512:	18298EE9E4C81A081F92CBC4716590AAE5E43D7BDA405ED5D4F96625DA9F8EEB1577759CFD35471AABA2D4B418467604DB883072548C645853DE7922B518B9F2
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X...........................................L.........................!.1AQ."aq2...#B.....R..3.4br.$5Cs.t....6DScu....................................-.....................!.1A.Q"aq.2B....#R................?...O=C$wmf...lyp..r..z...b..w..._..e@..v.m.]..NR.2..".j.l8....D.A...@.....zA.eK.`o.............?.e}.0.[.....j%.Xm.;....@.S,......A...`.y....r......D......]#...W...CP.6`....^.r..E hj. .ga........M1..<.........%...M.....e\|%.....?.X_....!......M......@.Je.a.R.\\.s...@..7.......}.!]@...z...TsD.E..u..\Q!`...........%b......Xh....H.uV...Q...>. ..6..!...3"........4..[V$..7.%E%....d....k.k..4g$..\.ko..../..Er.6.\|2}........nW..Zf&A.D)(..8$.....h...h.....X9Jr.9.n\....`.(.X..JJ.....w..k......A..R....f..#1.K.l.........d...AO2.....X..)&..h.u..~....s...V.+.o\.H...{.\l,0!0.Tp......'....V6..S.P.

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	44531
Entropy (8bit):	7.962251015463104
Encrypted:	false
SSDEEP:	768:wt8tMdhIZYzxi/1InQEGYpULABJ3fyoc5Pl58o/2XAudYdBn:wtDPXzxi/inQnYpMXoul54DKD
MD5:	370CCED07D7A9031FA406EF8A692F083
SHA1:	7E0B2D5BE30FFAA7A4482EEF82AAEE7FC4682724
SHA-256:	C9D71EC1EDE98A3CCF09DC8FA680D6A0E28F87F98DB200B3D9227798BD3E55AA
SHA-512:	C28AD720FE4DAF00408A3AF71E3978705EC54FAF8CBBF1C1CA7F7E38B15651E8D7734E7FAA0DD648E87B577D7329C4480FDAAAF1611433C3E0749C2213013E0C
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2208920/header.jpg?t=1697654233
Preview:	......JFIF.............C....................................................................C......................................................................................................................T..........................!..1A."Qa.2q..#B...R.b...$3Cr..%4.....Se........&Ds.....................................6.......................!1.AQ."aq...2..#......B.34CR.............?...x.E...t..&P...N%........l.(.o......9)..e.( Z...IlX..&..5`. ..F...as..,3.aQ.o.@.Y.#....0Y.q...L"...n.6.)..A6..p...N..W.\|=...pA..\|J.>U@.Z-oM..C[r9.E.I..s.@Z.$...@.P.m.ka".M.{..`7..vGd7\|g......R^.q.}.C.B......\|..A.D.=...6...V...............'.....S.... ...$.Y..[.:=.....@h..0..A....Q..=1,.y....rp.xY..d5...%..4>..C .%..F%...,p.hq.pl.u........S.@..<...&W@..H......D.....S.....:I....6$`.`Q....l[{..d@..['..F:..sJ.B.-..`..A.Yy.i.XJ.@n.&.....I...j.U.!.[.zc.j......3.".a.;!e..e)S....<..(.....B.,w..Y....{..j.o.`.`PH+.2.`...l4.J:.E.%..Q.>.).B.U.l5......P.....`..%..\hV....R4.@sP.GP{.XhP.`.

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	44531
Entropy (8bit):	7.962251015463104
Encrypted:	false
SSDEEP:	768:wt8tMdhIZYzxi/1InQEGYpULABJ3fyoc5Pl58o/2XAudYdBn:wtDPXzxi/inQnYpMXoul54DKD
MD5:	370CCED07D7A9031FA406EF8A692F083
SHA1:	7E0B2D5BE30FFAA7A4482EEF82AAEE7FC4682724
SHA-256:	C9D71EC1EDE98A3CCF09DC8FA680D6A0E28F87F98DB200B3D9227798BD3E55AA
SHA-512:	C28AD720FE4DAF00408A3AF71E3978705EC54FAF8CBBF1C1CA7F7E38B15651E8D7734E7FAA0DD648E87B577D7329C4480FDAAAF1611433C3E0749C2213013E0C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................T..........................!..1A."Qa.2q..#B...R.b...$3Cr..%4.....Se........&Ds.....................................6.......................!1.AQ."aq...2..#......B.34CR.............?...x.E...t..&P...N%........l.(.o......9)..e.( Z...IlX..&..5`. ..F...as..,3.aQ.o.@.Y.#....0Y.q...L"...n.6.)..A6..p...N..W.\|=...pA..\|J.>U@.Z-oM..C[r9.E.I..s.@Z.$...@.P.m.ka".M.{..`7..vGd7\|g......R^.q.}.C.B......\|..A.D.=...6...V...............'.....S.... ...$.Y..[.:=.....@h..0..A....Q..=1,.y....rp.xY..d5...%..4>..C .%..F%...,p.hq.pl.u........S.@..<...&W@..H......D.....S.....:I....6$`.`Q....l[{..d@..['..F:..sJ.B.-..`..A.Yy.i.XJ.@n.&.....I...j.U.!.[.zc.j......3.".a.;!e..e)S....<..(.....B.,w..Y....{..j.o.`.`PH+.2.`...l4.J:.E.%..Q.>.).B.U.l5......P.....`..%..\hV....R4.@sP.GP{.XhP.`.

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 306x260, components 3
Category:	dropped
Size (bytes):	115834
Entropy (8bit):	7.977668111692992
Encrypted:	false
SSDEEP:	3072:4UAFtsn1Oa39iDsuWxmcwOT3lrzTkSo3uhuhtG6T:IC539lmeovT
MD5:	0508C31452D7ADD8A076B1FC33CED408
SHA1:	0CE64FF773327AD35EAB89CA658ED241B6CCBF75
SHA-256:	BA9D9B26B6DBA7DE16DCB072C0E7686D07EDFCE3F482D8E35E72C7529B9751A6
SHA-512:	5D955C9DBA7673894D59558267A0B99677DDA081F08B4CB6836EED5F642661A7029CF1DC66753579ACF945BA63A3324B8409831AE048B7C680F9FC9B523FCCB1
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1408), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1421
Entropy (8bit):	5.572647612314806
Encrypted:	false
SSDEEP:	24:0HEYHPL3N4kCOn1PgKEDuFfPkv85KVSML3NCOVS+FVenYOFL3NYDuFfPKbvR3:7G3N4f0yKESFfZK463NCO4KenYC3NYSs
MD5:	D0CCEB905A589A6F0B6C44103B989E95
SHA1:	80F100012222CEA4D4019F3B6B30B1A1CAA4DB82
SHA-256:	AE87D0009227D28E89B9D38FDAC10206F489AA1F6D8C6CF1627281809F9FC7F9
SHA-512:	5B7D8A8236DB1E54D5F605BD885D54DB4E3C794017EB5A0E675A58DFB3A59E8C1AAFB9958F29F87FF59AA72D2FEEAB4503617B8800E4C1FDC1CECD13A59258B5
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/applications/community/events.css?contenthash=5c2ed144a3bfd464f943
Preview:	............_3DZHUf7uLxFhqpWQ03npUj{padding-top:5px}._3DZHUf7uLxFhqpWQ03npUj h2{font-family:"Motiva Sans",Arial,Sans-serif;font-size:14px;text-transform:uppercase;color:#fff;margin:0 0 10px;letter-spacing:2px;font-weight:normal;padding-top:2px}@media screen and (max-width: 910px){._1BdU3ODLnmsZ3KbvtJiHnd{margin-top:58px}}._1GTuE6_ao1Qwvew5Lusg6U{display:flex;flex-direction:row-reverse;margin-bottom:-21px;margin-top:-5px}._1-yPTyNLjIAr7TpssNaC3w{background:transparent;border:1px solid rgba(255,255,255,.4);border-radius:2px;color:#fff;font-size:11px;padding:2px 15px;line-height:normal;width:fit-content;cursor:pointer;position:relative;bottom:30px}._1-yPTyNLjIAr7TpssNaC3w:hover{border:1px solid #fff}._2UHtoCnFCyDjJS4BJk7mwt{font-family:"Motiva Sans",Arial,Helvetica,sans-serif;display:flex;margin-bottom:5px;margin-top:5px;overflow-x:auto}.BasicUI ._2UHtoCnFCyDjJS4BJk7mwt{margin:unset;gap:var(--gpSpace-Gap)}.fKrItA-LyyNbtBHpBCjT7{display:flex;flex-direction:row;align-items:center}.zbw9bsuwC

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x900, components 3
Category:	dropped
Size (bytes):	158160
Entropy (8bit):	7.985812822561219
Encrypted:	false
SSDEEP:	3072:/1iunZkHtePW/qWwmn2eszuifiBGlsPG/DYYYjXbsYrwxDuz9FUPx9g5EAT:/1iung+CguKlKmDYYYjXtZTUP/guAT
MD5:	5296D18DC5C5C8BC6D172B964721BFFC
SHA1:	F44CC1EFD10AC3DB129704863EBDFDA93AA3C4B7
SHA-256:	2D49576108AD80B11C1D82EB2BA7BE24A075BB11353E0271780BF68778FE0446
SHA-512:	7944AF518E58BDA83E6F09AB75D4A72050D2D9DDD88C79039D75BDCEEE6216F14D8EE641B9A7BFF565CF04CCD5049D6D49C3F94BEFDC0A34E745ED8B06CD8497
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;........@.."..........8.....................................................................@....I.2...GR<.l......w..{&B...<..q.]..j^h.....9...b...MRD..s.wl.jdy._,.9........7.M'II..BI.$$..BI.$$..BI.$$..BI.$$..BI.$$..BI..%$..BI.$$..P.l.HR...!....X.Q..r.0.M.c".2..G...HY.L...H.Y1...!.PE...Vg.l...a.U...+.V......B.....`E..,.Dm..@&.HI)..W.I.$$..BI.s.u.34..1.t......].a.v.s....*t.........&..P.`.U2..].6g.J.q../.....L...!9..L....!yo.^].t...$$..BI.$$..BI.$$..BI.$$..BI.$$..BI.$$..BI.$$..BI.$$..BI.$$......t@%...3..@.ym..(y3...!..G.$8.C..8...c.....$&..a..0IQ.HQ..c.B....u5......,fI``i..i.A..eaK8HI!$...HI!$...?.y,....H...n...#..a.`..&cq.7J..y...n8jXkR8."...f...H^.k.tmUV...H..3.i.....e.l.<.L.../...W..%7I!$...HI!$...HI!$...HI!$...HI!$...HI!$...HI!$...HI!$...HI!$.H.x.JX..JIP.U.M...j..j..j....J%g...(..Yp.......I!$..$$..$$..$$..U$..HI).H..Q..

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14435), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	14600
Entropy (8bit):	4.923276824957442
Encrypted:	false
SSDEEP:	384:+jMnP6zXL3CqVGE9HueUlKEghpE9umuwaswSgkT:+zWqVGsHhHE/ywadWT
MD5:	4FFE3BE8CFAEDE0FB95692C808CE2EB7
SHA1:	9D14194BB51EE2FAD09D1A1D093DD2AC85535A00
SHA-256:	B2DF480B94E8B072F260C85D501EA7D323F2949A5835B01E943B61C516F9E29F
SHA-512:	7E3D398D85098997FBB9958D88503EEF4F7E1DB31F661F6E593D7CDE57B11EF44D135C774D8D66721DBE59F6C09760C11270339EA585AD9C79FF2ADB514338F3
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/navevents.js?contenthash=3afb60572704da653a1f
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[4103],{199:e=>{e.exports=JSON.parse('{"unknown":0,"gtm.you1.cn/storesteam":1,"gtm.you1.cn":2,"global":3,"default":4,"application":5,"subscription":6,"search":7,"cart":8,"app":9,"global-nav":10,"global-account":11,"storemenu":12,"search-suggestion":13,"about":14,"suggest":15,"dlc":16,"storemenu-recommendedtags":17,"footer-genre-dropdown":20,"footer-category-dropdown":21,"footer-about-dropdown":22,"footer-help-dropdown":23,"footer-publisher-catalogs":24,"spotlight":40,"message":41,"marketing-message":42,"daily-deal":43,"footer":44,"header":45,"name":46,"more-details":47,"notification":48,"login":60,"prompt":61,"join-steam":62,"successful-login":63,"successful-joinsteam":64,"main-cluster":100,"featured-win-games":101,"featured-mac-games":102,"tab-N

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	6.773253103418387
Encrypted:	false
SSDEEP:	24:+y1he91Wwjx82lY2T3ouVGcUWSdoyJ3Vblt3bGlH0MMRsimfvlw:+wqQNn2xhJSdrJ3Flhb/Mimfvi
MD5:	F80E8AD0C744077C189C95726A41A13F
SHA1:	2220CF2E998ED605B974BD0088524832CE896D3A
SHA-256:	DF56BAE04E49BFA572E00837B378194D95530FA915EDF5ADC76E09E0E8F4AB13
SHA-512:	EFA8EF646F517896D597129D167767537D7D00315070230BD6988D85E585433FF321B3504CE1DA3518FB8B4C014797C76F329BDFAB10A060E097A53067BBE7A9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/icon_platform_linux_dark.png
Preview:	.PNG........IHDR...............-.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:AA4360FFA29F11E6BD31A92153A0CB29" xmpMM:DocumentID="xmp.did:AA436100A29F11E6BD31A92153A0CB29"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AA4360FDA29F11E6BD31A92153A0CB29" stRef:documentID="xmp.did:AA4360FEA29F11E6BD31A92153A0CB29"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..c.....IDATx.b...?.....FFF...L.... ......q.@...b...9.....PAv ..J... .C......(.....b{.d...pg@..C.... ...0...@......,d9

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	110095
Entropy (8bit):	7.981276203197958
Encrypted:	false
SSDEEP:	3072:MQn+bWQRYMCxHkTdmMgV4HkWnLFnAoLo7/nac:MQnk2MCxHkTa4EiFAwo7nac
MD5:	7AD61B4390D8A6E42A8617488C5C278B
SHA1:	DE5F43FCFCEA9E26B41954291336EB8517B82004
SHA-256:	BA9B184DD43787A62C3D7D4DF49E4207DC606BFC6632BDBD5335AE40FA139670
SHA-512:	99A012968B3CD7980C2D86ABCD0B44FA982E54B3DEDA51513A4544DF58D71ACF162BAAC4362915FFAEFE27566DBF45933288533A44ECE37F6CF0B435B986AC81
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................a.h.............................................`..........................!.1A.."Qa.2q...#B...R....$3br..4C..%58Scs..u.....&DWtv.......'dew....................................N......................!..1AQa.."q....2.....B.#3R.br......4S.$%5CT.6Ds....Ec.............?..Q.S+...".....M.....j{q#.....!>g.......6..tP....}.1(I.]..........P.re....>.b.mO.Ru...(./.s..h...Fc..O...W.Kw.?..S.d..e.l.BfTw.QXH.U(_....#.......n..$'.#.`\)....`..A.K...=l/.d.q.. 2Tz...".b[`...).7?.......'Pi..D...*..I~K.h......\|0D.d......#....T..........2W.x...d.-{.\|..q{.(.U}D.w.".......zu. Q.@...... ...7b....}.0..t.Scq`w#.L...{..lA.l.......J.l.....CD.+./eX\....u:t..6...._E..7..?,DB=..e.M.n.X.......E....)F...<. Q.......k.[.(.Z@ .....".R.......x......k....Q...~].+z."..D...[{.B3e..sp9xm..aI..A.y...r..D.;.....W.w#.;]_..P^)$.J..#..\..\B4....u

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 233, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	122989
Entropy (8bit):	7.9926752165280766
Encrypted:	true
SSDEEP:	3072:XS9qnyev6BLrDp1MkPh5jIg0WPzkxcfZ5N57I:XS9qDSrp1MkPIgTzNfZu
MD5:	113F4FA6F146E91D8D82CF2A94210AD2
SHA1:	1E6C0C7E1DD9788400119B28892C11801028E0DC
SHA-256:	46B19283CE070D34D3E6671AC5694164A9BC874D0D90C42D956E12F8744ADD22
SHA-512:	DA7A36B675736603D40032015F1718E6D6D05CA3F1A5DA890F3D3F02B1C2F720CDDD4386DB701F9A51248276256867BE859127EA60692C65777FD0D05D8E2E33
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............caNv...............<'A......IDATx..w..yv..~~.q...7.mUe.,..V.n.Z.R..B.V+iW. ..ebf.b.e.f.bwb'`Y.a..b$.iIm.j[.e.LfVUzs......3..........F..x..9.s..\|..#j.c.{.....z.P.!.A..&5.V..C.@.L.I'..}.T..&2..B .g-....Dq.D.e9.Y.l.R.hw0^. .C.3L'....-.R.0........i..R.....p.#.C.f..!.x...D ....x..B..x<^X..!4Q.)....H..<..<..s}{..1...y.C.H..r.O.8...c!..%.+-.;...V`~.[.....d.[..\|..+./..m........+=......%......;j.S.c.PROB:q...i..\|...dZX..M8.........6.Db...LK......C.$.9...d8.r.^.._.iA.x.8...,/.....u.$..f..F.@...0.[...+(....z..t@d....-$...:&.32..k...}..8......8..x.(dH...%6.!=.r.S9YY.!C../...q......l..l...2....B.P.L.R..x..V.o}..L6eNB..T-...$ZPL.t.-.n.z.....`...?......<e...U.\ .5!..Dh....+x....K..9N.G.\|..l.q......$.s..h...w.0@.....H%pe..s.)q.......N`..KI.G..Mt...5t.`QxS....ki.....z.X...5.I.Nq....8.B..$B..E..2j....XS.38kQJ`."..7..c,%...........cqx...).W.....{..*`..y....G9..

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1177
Entropy (8bit):	6.590984258866245
Encrypted:	false
SSDEEP:	24:c1hfvWwh82lYSgT2EV5CT3ZyJ3VNIEGdvzQvAXeho0f9Fcup2:CAvntm0J3tmzSAI4uk
MD5:	3EA2CC27536CC740703ED4554D5ACEEF
SHA1:	80EE5C2D61272C33A2D36F536CA47A38CF1A743D
SHA-256:	055F04346E95B75C4260E7064374E908FC213041679DD172DF80D6551CB5D15C
SHA-512:	969F45A845F94E02D5A5859CA033A20C7DD83774E8D032CA529A3692E74FE1816EFC3994D26E6AB874DD94F0901DC381BFA385FF096DF77B7A0C930A5B9C4734
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:95752D8EC8C611E7A1BBDD153715961C" xmpMM:InstanceID="xmp.iid:95752D8DC8C611E7A1BBDD153715961C" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EFB48ADB4CB311E3AB3FC1E695F5A0EB" stRef:documentID="xmp.did:EFB48ADC4CB311E3AB3FC1E695F5A0EB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..Q.....IDATx..1..0..M[....VQZo.&."x....G.....+.... .`A....J.I.....6.~.^...a..eG...6........&.c..F.p<...0.]P.y)..G.=.

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 292x136, components 3
Category:	downloaded
Size (bytes):	25243
Entropy (8bit):	7.978699269947841
Encrypted:	false
SSDEEP:	384:3av3EnaDlkqbDY1tKQejmlClCwEYp5EyjPZhbiWWj:qv0nar+tPmJwCtWj
MD5:	EDAE5B9749BE8D4EFE89DE3FA507B92B
SHA1:	656ABBB6277C797EED72D7822B3409CBC7F3BA90
SHA-256:	EE55B3084D1F6A553315F3C5DAD0160D1B4006FC7FF51A94BB2C5BFA46A07D0C
SHA-512:	55D92AB9E2132F834C54A1ABFECFEC527E3F51B3C762D000A23EE539CB23DAC47FB71D13287C31D5CE16B1DB9E9B937BE75BD67EC09F465AA1FCDEC40DD6D90A
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2421410/header_292x136.jpg?t=1715738345
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................F...........................!1."AQ..aq2...#B..3Rbr..$C....4c.....ST..................................?........................!1.AQ.aq.."2........#B..r$Rb..3C..c..............?..:..\|...!.N.Y.y.........Y.3..m....4...y.wS.O._}#!m.I.t..Ga....n....(.P.6L{g.....=.../.Zz.\|DE.$...t.:w..f.5I...K..[.{...RUo.....$.2.ps..".S.N...cM.c..Z.)F.E.......Xe..T....1.y..3K....8.....(05F.g.b.0.3...@uO..33.......Kh...$....J~@.".9.EL.K)$..Ammx&...-.;.....7.....3nM...?..[.....]{.w>..a...5.j.IT.....?.._s.....40e.....t.lM.7..>.M...&.J..~O.9g8..=z.OA.'...fi.......W.P..g...s...M...[..o....<R.xt.......T...!...@9:..+..."...7x.w..<V.@..;.A....n.~..}5d-Ok.)$..)..4.@..Wn.NG.S0."..v....?.y..B(._......._..0M"...FX...[.P..e..........1.......wq.......n=.xw...#..@.".].....

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	90489
Entropy (8bit):	7.972910737807521
Encrypted:	false
SSDEEP:	1536:EUus0dSWFa/V5u9jzxV4H0uwMIL676KALyfycz4yBaoxqdeW:E5hdSCyy9jNV4UQIW7qqyclaoxA9
MD5:	F355F858E533C946023609E6B55DAAA9
SHA1:	CA8213DFD94C6534DD55814EA810EBEF8D3F1427
SHA-256:	B29F26AB43D2FB64FCDD8583F675D64947CD0074B2F529A1EDF2E01D4495BCC3
SHA-512:	46FCAAAB2BBCB030E10F6290E9E43E8D13D9ACB091790731C8625DC8032A7F1B102E1D4A46B6A8AF80FC578F48260A5F4CAF23DE2B274025BE9F41E8E5FE5150
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X...........................................Q.........................!1.A."Qa.2q.....#B.R....$34brst....56.....7FSu%C.....................................6.....................!..1AQ"a..2q...3B.....#..CR.br.............?._Z.....o...T..?....4..+....1.,...M...N..-.D.....HSk....JiV.F,.@:n..V.6.'...3&.F....O..F9.u..ncW4>Dsv.s.-..Q..rM.+........./.0...].;.....dh...O:...D...&....55a..I......9:g.\3.1.).N...,tj\|[.fP.$..G..cU[.Os......j..!$ ....>.rF6L_.a#B.F.[Iby.....TI%H..20!....q...c$a.9.....S....%..Z...._L2v.....+'..5<_..b....$_.oAl2F?3.y}W.s).+d.{t.....za...~$....^.u...&..'..(..iJ....m..o..:....%i3)-M.......'..:..r.....M...H.{[.....p.5..._c....G.E..).7Y..#.s}.0... .2.C....V..j.HY.. ..a..a....[..]...q4...dT.r.w&.......N'.z..h..U.Y..V.8e.x.....\|...s....B..........#.......Ia.....I.??l7.0.%.....H\|..>[.a.y7..

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 27 x 21, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1283
Entropy (8bit):	6.804522396238829
Encrypted:	false
SSDEEP:	24:Iy1he91Wwjx82lY2T3ouVgy28yULyJ3Vey7uytbGKIg2NXxqa37SV:IwqQNn2xDWLJ3xXJKg2NXjK
MD5:	6FD845DB37342E49CAF9A1B3D1268EA4
SHA1:	E380BB0F718887BA15FA5A62E06C368F39095660
SHA-256:	2B5E58C85345DCB11D869C8033CA7B7EB00A15C73554A59B553045BDE1A94ABD
SHA-512:	83DBC8420F91AB206D66981D6763017169927E68545629BC22C1265A773546196A2EA67F91F95D6C0EB7035E689D4581A8BA3B3A3AC797D2AE6CA8A237BB51A6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............%....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D0D315BC12A911E49EBED2AEC7E84312" xmpMM:DocumentID="xmp.did:D0D315BD12A911E49EBED2AEC7E84312"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D0D315BA12A911E49EBED2AEC7E84312" stRef:documentID="xmp.did:D0D315BB12A911E49EBED2AEC7E84312"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......wIDATx...J.0..3...Z<..9....>......^[.=...>.{P..F/...i.5~Y'K(Im]....L3.d&)I)...\|8.....B.`p..I..1>.......=.

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	91108
Entropy (8bit):	7.977125947721282
Encrypted:	false
SSDEEP:	1536:SXR5Sqz6w7ofUeTcbUSqB445sJgs6gAntLp3gu+8Y3wLukGRAHb/6+KmoSbt7Krc:gMqz6FUeP9pm6s6gAnFp3r+8okGm7t+Q
MD5:	886E8293B71A6A4E81D79A0A6A7423BD
SHA1:	1D54E4412C275972A26D95BC8D88CA1AFCA28A52
SHA-256:	799AD8521DBBF455DFD3BF92214EDDBF3EABF4446794B36D62D11F77665C7F7E
SHA-512:	1F2D0B258276C1342A00EF2D296561E7118ECCF9237E73AC4D885C6AB5CB72A1E54D651293624603F59D34F2C9C75B949C490572AAA3BF67D9D8176A8C44240F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X...........................................Q.........................!..1A"Qaq.2..#....B..3Rbs..$45rt....6.%Cu.......7FSc.................................7.....................!..1AQ"a..2q...3B....#....CRb4r.............?...2.. j..}.q.b.......v..l.k..HTe.....tY..C..E.....N.6.'.ht..Ri%.#pM...F.........U.!.E.IML.".@.x.j..O^..%/%$..?..,....H0..mk..q...._...C..T.T..E...(....m...X.+.\.....]..Kk.Z2...}v[.W`J.....6j3...E=.UE58....C.u...L5...Z1.-..I.S..F.%..@T......eM.i:.e.sRWTQN..Gi..6.#.Z..8t.....R.O...M..{_k.z....R[ck...c[...P.99.5F.D...N...OM...K.7i.q..<.ey.&]...".....{..B.`..c.{bZ[.....>_.+*.J&...F.$...u...m.:..hg,X%NZ.Tu..L.4R.}[\..H.v..u4.E..7b\.5\.?..Z.S.!...1..{{u.h.......t...Hu.;...9uT....E.r;m......;:S.B.....O....>...7C\...Q}.:.U.+..J....v6.....<.#%......e.c ..F..L5..U..>.C....>.....w.Lk7..

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	34238
Entropy (8bit):	7.958365150954292
Encrypted:	false
SSDEEP:	768:CJbH68fffTtqx1rYHq0FTZ7fHgnLBEH+wxO3MWT4m6h0cvfCpyb2/G17fffffffO:A+8fffTa1rz0FN7fSLCH9xjWsm6Ocvf6
MD5:	82DCF8DB44D21319F3E29B02364AB500
SHA1:	3D34EA22A6D5401A9B111AD161B2A2CCF088B752
SHA-256:	A0D14D4B583F2006190DA6D8C79C44BC7779B24522C826C08EFC910815751A9A
SHA-512:	52ADFE214E90BDC1C7397597C43D8BEC367EA8FC5DC9BC678BD83C94E38B46F3B40682A8D47C73EAAD74D7A427AA9F9F675A3FF44D33CBB86C0A0A7F4E7B7967
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/DW6VDDih8nM/0.jpg
Preview:	......JFIF......................................................................................................................................................h....".........................................Q.........................!.1."A..2Qa.#q..B....$3RT....4CUbr..%......5DEds.....................................=.......................!1..AQaq........".2..#Br..Rb...3...............?..)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)\...W$W......)@)JP.W%k..JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....fBb..rGo\.=>...IN.....0.\.....R..].M)./...ZS.......~.02.Cb.\T....2...w.&Q......;.>~...;..!.,...S=1.<..c....;.;.=......}...:....b..!..`v.J...HQ....,`.7^.J<o.U.E......b.C..E;}.,.k..A%~ 6.#...8=.GP.1w$.....x.....r..O ..5....R.<K4r...#0,....n.c\|..T.....2'%k..5j..

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	91108
Entropy (8bit):	7.977125947721282
Encrypted:	false
SSDEEP:	1536:SXR5Sqz6w7ofUeTcbUSqB445sJgs6gAntLp3gu+8Y3wLukGRAHb/6+KmoSbt7Krc:gMqz6FUeP9pm6s6gAnFp3r+8okGm7t+Q
MD5:	886E8293B71A6A4E81D79A0A6A7423BD
SHA1:	1D54E4412C275972A26D95BC8D88CA1AFCA28A52
SHA-256:	799AD8521DBBF455DFD3BF92214EDDBF3EABF4446794B36D62D11F77665C7F7E
SHA-512:	1F2D0B258276C1342A00EF2D296561E7118ECCF9237E73AC4D885C6AB5CB72A1E54D651293624603F59D34F2C9C75B949C490572AAA3BF67D9D8176A8C44240F
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1128860/ss_ccbcb9f7680336d745fdc7db036961f312073710.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X...........................................Q.........................!..1A"Qaq.2..#....B..3Rbs..$45rt....6.%Cu.......7FSc.................................7.....................!..1AQ"a..2q...3B....#....CRb4r.............?...2.. j..}.q.b.......v..l.k..HTe.....tY..C..E.....N.6.'.ht..Ri%.#pM...F.........U.!.E.IML.".@.x.j..O^..%/%$..?..,....H0..mk..q...._...C..T.T..E...(....m...X.+.\.....]..Kk.Z2...}v[.W`J.....6j3...E=.UE58....C.u...L5...Z1.-..I.S..F.%..@T......eM.i:.e.sRWTQN..Gi..6.#.Z..8t.....R.O...M..{_k.z....R[ck...c[...P.99.5F.D...N...OM...K.7i.q..<.ey.&]...".....{..B.`..c.{bZ[.....>_.+*.J&...F.$...u...m.:..hg,X%NZ.Tu..L.4R.}[\..H.v..u4.E..7b\.5\.?..Z.S.!...1..{{u.h.......t...Hu.;...9uT....E.r;m......;:S.B.....O....>...7C\...Q}.:.U.+..J....v6.....<.#%......e.c ..F..L5..U..>.C....>.....w.Lk7..

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2792
Entropy (8bit):	7.863273937788299
Encrypted:	false
SSDEEP:	48:A/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODo:ASDZ/I09Da01l+gmkyTt6Hk8nTo
MD5:	2024F24380B48B22D0D1DD5664452B7A
SHA1:	120A6CBBB2C3F97099B573978B810D6D33389E40
SHA-256:	9F60FA47C8E46E872DBDD2B8B2C4BFEED0F1DB835AC3C6CB83740FFC17B9015C
SHA-512:	88CA9237BDBC1DB84987426353888246AF1BC61FB3DA78D76AAFD67CDA5DC845547E5CEEA9EE5881A02F192E941273E658D214293A2026767526D4C248D702D6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 306x260, components 3
Category:	downloaded
Size (bytes):	44480
Entropy (8bit):	7.985585094569795
Encrypted:	false
SSDEEP:	768:U9AYihV0WHeASoA00xKi98A4uDiCKpScHj6OkUZSU3ChdxRFpbEYX5mTuJ9Jq1:U9fC6weNoA00xKi98A4uDiCKW+VMdJ1U
MD5:	E35CE4B6552171FAE1034EC05548F388
SHA1:	F24267B1FAC223124F9AD23407553279F91735BF
SHA-256:	398FC7F35BB07813E84581D0D1C6891B03960C4F69A75C8CA3CC81E95BA07C63
SHA-512:	CF7E127149D60172537CFE148EF9629A6BFBE5D16BF05E9038DA560537C57F004C7F1645413C9A323582B9D963B2EBD432FFFEBDC8B070230FA47F1F8383C2DA
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/spotlights/6cc6099ab60aa21df29b4bb7/spotlight_image_english.jpg?t=1715207848
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.dba3da3b5, 2023/12/15-10:42:37 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:EA415E2BAEA1DF11A752BC80D643D9CD" xmpMM:DocumentID="xmp.did:4E4E70CE0D8B11EF8A26C35F49564894" xmpMM:InstanceID="xmp.iid:4E4E70CD0D8B11EF8A26C35F49564894" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ae816ce9-e789-ca42-ab33-dee815bd128e" stRef:documentID="adobe:docid:photoshop:7db59958-11e4-0f43-98c5-7f3c083c60f5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d...............)J..M...t........

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 49x49, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	68391
Entropy (8bit):	7.97268897022121
Encrypted:	false
SSDEEP:	1536:VffuYMQEbFTAP0Un8aXpyrlwPb4XnCndP2Y8nMvn6EI:V3HbiFTAPB8fmjQCnxlJva
MD5:	92084F766DECF9CB903FE4FA887FAD62
SHA1:	37DF9E848A4D85477BF9EE9862B36D0C9DF885C2
SHA-256:	BC36BE0A35BF1DD7C57F789CB131C94EBA34B10BF8DEC3E8DA2F1991FFED4A74
SHA-512:	7B0FC9D0B7F2BEA2D95B19CEEE896DC648BE2E38F0FAA737B9B3663139C98B7386C2EC1A7E57196FCF89B128AF1F1232B3F66DACE0F4125CBC922BABFAA88257
Malicious:	false
Reputation:	low
Preview:	......JFIF.....1.1.....C....................................................................C.......................................................................Q.X............................................R..........................!.1.AQ.."aq.2..#BR..3br...$456s...%8Ct....DSu...7Tc...................................C........................!1.A.Qa."2q........#B.34.Rbr..$5.C...s...............?......y.......F..@...<....Rh....P?..I.s^.....S.......4.Jc8.~.3@.......Dx.S......h....?...W..g...=.2.)..8E"Y.y.Mg8X.T...7...6..(.@.g..U...H.DzL.!..L..x....HA...N.w#..""..r.F~i.x6C...P#...Q.....l.H...b......#.i...>...C.S........Hj.].(.$.@.,.H...q..Z...A.F..H......P#.a-.~ .=E,!..)......-#R}.%C)P?CK.y..^.\.Z2#(ym..D\|....65.L~7...GBcShr....G..~GUS.rb..@.V...4.MI1p.#)V~t....t....4..y...9.:.h...4...@..i......:C3..x...`....q........i..Ex.<....F....M....sR.2..<...<.....4`..\|..Q.q.@o.($`..k...&]9>.-.h.s...d..@e.I.....n.....:..Q.vr...().-.m.^..U..S.T%....G4~....PS..

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	374275
Entropy (8bit):	5.6314649639133485
Encrypted:	false
SSDEEP:	3072:AW0or4sMLaSOafzHKrY4me4szrNPtSeWvP3VwBvweWlSycaGsPcI6LZUDbrrI:AW0YMLaSOafTKE9szxPtu3VwgcImZf
MD5:	BD31A94B07342A088724F5F41906841F
SHA1:	010C718A8E3E8515E95720607EBF350F6FF10C96
SHA-256:	8DFF9574E46B21A7A84249A49D76BAD706BE83653A37D1FB80174E275877DDA7
SHA-512:	5B06D47250686B9D799909462948569D6B77014D7161EE5828A208788ED32E92305FA903134C4F5A022370AB110CC22B1146EFC1E0E83E499CD042A588B4B243
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~c18a43282.js?contenthash=fb0b0d449ada85165b39
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[8931],{13450:e=>{e.exports={GotSteamDialog:"_3omvMUz87j0yawFEnNUpdS",DownloadSteamUrl:"Glr7kbVMNyFur1bzL7ac-",GameName:"_255OnfCFrK-e5SyuTm1h3a",Buttons:"_2zw5J4QnSb8pqzaVIp6mP0",Button:"dbZlJ93UlfDlDbXX3XrRS",LeftButton:"_3SS7192x_6V1LiidD4fVWd",AnswerText:"_25aqmnjgtHJ-sKbn-IQQov",ActionText:"_1FxxORT1M7piw0uyPMA0QR",Footer:"G3DY56cL7XbiZD17ze7rK",Logo:"_18ytKKJf8e9ZkNLqId_2m2"}},22593:e=>{e.exports={"duration-app-launch":"800ms",BannerContainer:"_2b4ehY-W6zKuz_RcJb_bFS",BannerHeader:"_1IgJ0p8H9jPJgPosle6xdl",BannerContentDesktop:"_2qr1fNbf66KPlKVUK9DPxU",BannerContent:"_1B2KFfSCeANfYXihoXz87_",LearnMore:"_1VhpnbFYLe10F8k2MVp3eU",DeveloperBlockLinkDesktop:"_3OZo0-lBqXXl_Q3-LziNYZ",CategoryIcon:"_2yDLeYzL4M39ePif4Ul1Yt",LearnMoreCtn:"EEiwnhVESZ3uAla6gxdWx",

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65369), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	88811
Entropy (8bit):	5.651192695362781
Encrypted:	false
SSDEEP:	1536:SjlfVSlF7Z95GHeCSIRwvu4wYkxW1+uG8tA:SjmX5G+BuHVuRC
MD5:	CF31676C0A903B629076BA1F255D0BDF
SHA1:	F98DA9121DDA6D58424BD03A2DDC18B4140E3A20
SHA-256:	4D592C62F16BE1454BE9D743099DD41F3923153D2A017BE1AEA94F81E745EB21
SHA-512:	40D7B8DACE588C6174141CC675F30603FEBD13207676DC3B8D139BF5A293A8D3DDE83E6B3854A42B70F5BBD6B089DCFC7511E38291C209593F90E280075B7619
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~f036ce556.js?contenthash=7596e2084d8e091adc87
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2530],{68628:e=>{e.exports={Login:"ZOBYq36SukEm_Fi_77g2q",SideBySide:"_1Wl13domZv872ZcbC_PVbv",GuestContainer:"ERYporYCW1a-i4hFKkqM9",GuestLayout:"_30Wg_JuATv6bZVQSiEOa3n",GuestText:"_1KeaVf4k5xaici5wKntAlv",GuestLink:"_1S9pkF1XVQsK6z-06HLup",QRSection:"_2ZDySoTopw8XofnCKLNxDL",MessagingContainer:"_3ph6wntM-n97-sHIlGQBnD",MessagingTag:"_3jy5Rn5GIHTYnS11f6AxKR",MessagingSubtitleCtn:"_3dSxvAKKoM5S0cN040E9VX",MessagingIcon:"_2H3fBxcnfFRliKqacCx-mk",MessagingSubtitle:"toeaxcVL2sJxvNYVGOeTB",MessagingButton:"-jjqvX7USmuMWI_3UH8vk",MessagingLink:"_1ozceuqRCXj0l4MNlnW_RC",ScanQRButton:"IsYb298MVFqJfTgMC-IrG",QRIcon:"_2zKSqxWHmjgxS59xmS6YFT",QRCodeContainer:"_3YjUmVPnH4QB_0Uthh9BmI",QR:"_1d6FZEReqGY-LD8AuorTdZ",QRHideLink:"_1mk4Aeuk_PYS54ayHqgqHQ",HideButton:"u88sc3

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 616x353, components 3
Category:	downloaded
Size (bytes):	107192
Entropy (8bit):	7.981524170682696
Encrypted:	false
SSDEEP:	3072:ki206AjGidSVaAv52R8SqcSrmzAq/jZOf4pA8mctGqpT2R:kf04iEhMSrmMIxmcB8R
MD5:	21FB6E4E0B7E9CA26B2B9A493C9007D0
SHA1:	B178D60D8E2C77FF0FD6D59AA4F0A185D1BB5337
SHA-256:	4D43933AFB10D4EF54522C1B62D78C6728A2CD3A69D66DA3076735968DC16B11
SHA-512:	298F2A344B178E7E4BA1989346855E3DD13C32BDBD2D023DADBABC4A770ECA542B5A2DEC8435568EAB8066A1AB4AEAE2DC072EE73FA0F0D43253DE916753D527
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2344520/capsule_616x353_alt_assets_1.jpg?t=1715714373
Preview:	......JFIF.............C....................................................................C.......................................................................a.h............................................J........................!..1A.."Qaq..2..#BR.....b..$3..r..CS..%4cDTs.....................................;......................!..1AQaq.."...2......#.B.3R.$Cb................?..T.u.V.3.J.%.3..(jV4#..(..x.s.J0..Y..i.8.......[..ES.L...K.$.v$tS.W..B{..F9!........n.M..C...c..B.8.. 7.?A.$..`L.....y........~X...S.\|.Y..r....gBp.!3L. ....3F.%.......I.!/...d..K:....Xeps..{.P..Q...#E...9...@Rz.Ba^...n4S.+q...T..=....uj'.R.-.v..%.q.F9......uZ5\..R.b~.6....qK\..s.@..N...J..)..t).n/.E....,c...I...'...k.`L...H...d....1 ...7.A..U..../r..J.$If....8&F..N..=..i`..-.(.$....6R\|=ni.I<.c].+.....}..l...l87..+..xN#o....`.......$.b@vfm...'X/.\C}.Z..`e.i...J...$......y..%p7G.......Gwb....(.:.n..k-O.....i....0.~.x.nF_.9.3... ...\.-........5.!.xcG5....w.b0.h..g....^o.'a..X...

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	3149
Entropy (8bit):	7.767927625415787
Encrypted:	false
SSDEEP:	48:vozjUQ9Ulm0gZIbyhc4uHvEk4y4vkqzA+7a1Qwg1yDCGnlHPQZ:QzYQ3yLzHv4P8nk1yDCGlHPQZ
MD5:	49070C5878D6755F571686741BDB1696
SHA1:	3C6EFCC5BB3E5B09F97B4C498A6895F32384BE81
SHA-256:	F560C50EC9C260E76FEFC066C174A318CACE6734D097340AFD05BD893EEF15D0
SHA-512:	0AD0D2A3DE7DDA04CE1117E7C31D4EB1787C261500490C2640335ADFB5D89848CFF6728BADF874A036C34F45EE687B0284EA09B95A7C044A9B06BCB71B86ECD1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................3...........................!.1A."..Qa2BR..$%3q..................................1........................!1A.Q.2aq......"..3B#b.............?.......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(........)=E..P..@(......P..@T!G.......P..@(..?w]...Z..$.C.2.K.,o.R..".8o.Y......C.Y.X..1...~...a.r.,L?.).....H.BS......]6....eI.Y.8..]]..iW..y.n+n......>.8.....k...m.[..K..).A.^G....IKCD...s.q..v.l.Z.....ci.c....{...S...%.8....)$..........O.RI)4H7.5.\|o.......rALhL..-......<...J..l...Y..,...P.#)7.w.}=7`...i.x.#..(..s!..w..i..V.py.....5..BQ.8.}=..8.y....a........q........2.&C...P@..%J..........uq.%..s\..7........#....~..F[kQ.c..D..J.....e(.(..n.Qr.k...^.."P..p....a....P....m6.nl.Q.u/..S..Q.....^.b...p.....,.5.b....[-...q.Jm......XN.>...js.

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 306x260, components 3
Category:	dropped
Size (bytes):	86549
Entropy (8bit):	7.973737592082251
Encrypted:	false
SSDEEP:	1536:4IZHMs+FIiIMBdr0zSCL44hzLIdzh1Gk/gi0AHH0Ez0sF0A25/L03VnV+:4LbQMfAS4adiG3tFuxaVnI
MD5:	8F754D9071A177F600383B3A7660802B
SHA1:	CB6DAB45D0C44817755A8A8FB73DD115C8678AD2
SHA-256:	15626B08F326ED89DF364705BB33978EDA7B3F3759B052C9DC88B90A9423797F
SHA-512:	72A6A2BE71D479B900F535313D8F096AC38FECF94ED56468739DDCDD69F0640F8D3F6F495D85D704AFDB1F121AA39F5E64603C77BD49ABFB68DEBCECF695275D
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	80656
Entropy (8bit):	7.979237033696159
Encrypted:	false
SSDEEP:	1536:bWxiUEfhV1jKTzKT6WWikTbWVcxBdxQz1FFFj8y2b3SKM2aUdlojUeaHwoHy:JbKTuT6rd/WifQz1tPI3SKeiKpaQoHy
MD5:	78B7FA872541FCDB16B357F09364C72F
SHA1:	94C8727C2B7EE308964579344D0024E0360B5E96
SHA-256:	F25683DB8A8FD021E2AD52A99D84CEF9F1480ED1C00783F6619C6DA0E39A2F00
SHA-512:	41A8AA63120D3E724FD232E505F241DF72EF8720DC1E04B2B65F09C774956FFD6597BCA7B64E7CC04400AECCBEB41D5608F49DCFD0EA7DB5EE8E0BD37EE163BA
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Q.X............................................J.........................!..1A."Qa.2q......#B..3Rr..b.$4Cs..5...Dc..Stu.................................6......................!.1A.Q."a.2q...B....#...R3.$br............?.....8v:....U.P@.S..".L.\|.. ...,..\|~g/I.3......>....e......dY.W.Y6i%.lN.}"....k..X.3..b......q...U..5.1..fY.f.M45y`.+.....$...Y.Z."=v......k..c./.b.nq...n....&yU....MY]I@.Z....U..v..2.S!:..[........)....}%.p.@.q.4.=.5.-..:Q.........f.qh.Ve...EI.p.Y...T.5T.....MK5D....B-....%.S...8.!.>.'...c.)...P..P...-vS....._.Ya.Ei......"qokk..J.....?...+CY-". 8G 0.qp/n..IRk.,.../.#......v:.......\..,8.=....\.:..KKS4..8.p...j.....OK.........nG..x.E.I.<......54a.U..G[.+r..E..l,r$.......o.y<G..P.L..$.......(....-...]L...K......`.,;..?3./.....g.CGG....\.9.2B..F.Q,rz.,.._..\|p.G.W....(.<..j.-.l..

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	65185
Entropy (8bit):	7.981945974052145
Encrypted:	false
SSDEEP:	1536:OAV+SeQkIUiiOVLSc+mRTM0XKMg315gL/01QKDULoxh5:F+SDkIpzVLL+m4SKN1g0xT
MD5:	80CC967F126EE735F4E83D595EDF42AA
SHA1:	08A05850D66E0B6EA56B42020527766A28587C17
SHA-256:	02B3C74ED80F06211B4572B09EB8770C970DD10F832C2861D50EA9A7E46414FD
SHA-512:	DC1FB75898D8A3134485BA2D34CD0ED10239DF322C32F36CA9F84001677C90C4740DBA3A492759BDE3FAF2D3C7723E1321636848E961E88F9F1EAFCE46E69511
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/281990/ss_034b0d55a5c370bec4709f09d0914f9d131b7788.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................Q.........................!.1.AQa."q.2....#B...Rbr...$3..45st..67...CDc.%STu...................................9........................!1A.Q."2aq....#3B....R...$..CSr............?..3@...'..x.5.9..},K-.v`.....N(....%..KtR.y[.{..w..Ru.Zk......#..;..U5...7x1.C..+"rAEoK..a..\.........>.z.ZIc....9$.4.......o..,..}.R+.>X..O..kF#.;}.<b..+idS.P....s.T..Y...~..O..5.J.b.s.........%..I..'.qt.v......e........%.. G...j.1M2..o..K#..\|.._.I6e.l&q......@.q.Lu'EtU.[6G..k..C.....`..`P.P.!...{.>F....o....>bx.SMPj.B.dC..QE..b1b..m./.Y.9....c...d.;.CxC(..`.\.{)...M...i.e.&FO.....X......9.%......sLL..:R".+.QOk.':. WO...z{.U.h.,z.Q.A..3.......;F.Oo.^[-...g?....u9.f..-.........7.=..W1..V. ....f....i.0.I...g.=.E*.[...H..;.....H]<A...=.E..T.....!.q!$&...9

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 292x136, components 3
Category:	dropped
Size (bytes):	20473
Entropy (8bit):	7.957826403057926
Encrypted:	false
SSDEEP:	384:qBCf6m2ItGyM+IsQnTetnvaU/qczHM6ZJ0w9VU6u2qL9q6vsahtX:eCfqPjn2qGFJ08RqL9q6vsahV
MD5:	4EF827E22FCE5986B7A94FDDCF4DB81C
SHA1:	23F172F9FF4D467D69807A0D4B925AA4E110E421
SHA-256:	C8B5B4F343C8272BAA3D1187EE6CF4E4E3E35C653A7820BEA5A59FF21755FEA5
SHA-512:	59DD915D8B08687FA495F93F82F58F413B7AA57173793516F013C51C87E8BC6FAE3687F369EA6CC54CCB8C81ACDFFA53FA53E03DE5F04F23AB4B8362FA2C2124
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................G..........................!.1."AQ..aq2...#BR..$..%3br......C..4s...................................6......................!..1A.."Qaq......2.....#B.Rb..............?...M...+.).C..Y..~I?.Z.....8.%..No..(..M.6.BU....>.....i..>.F.TG.h......y.%-.i?BJ..#..2........H...Q-E..Q-E..Qz..E............r..p2...<}.u..:....z}.....o.0...]@8#Z.p{w.......)Ci+)B}2u.....n.Ps...R.KjF<..#.Y.N_a...>....Du..Z#.0..N..VOo.u.D.F...%..q..O[.7.+%x..m2 gT.tM.q...).....g#..G\.s.,.#.[.p...('..MG.m......4..mH.8.H...k..B...xjqGj7h.".9..X...{.....cA0..s.c..}.)T@O.8O..?.ig.Z.s..EG....C..eX.'.W......{....tE....x ...F......x:...n.AX>........X.W.$..B.T..H....6..U<..w...Q.....z.M..tc.;..yLe..\A.8XW.q.Y<..f.V..*&tIL...i./<.I.]..I)W9.;..j.......G..J......x99...6.........A.i..].Z..{...p

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	8856
Entropy (8bit):	7.942818324768091
Encrypted:	false
SSDEEP:	192:4viBHqIPU09TO+yS75NlOgTnYC5kd2Axi72Yi/2pNLksphNj:eiHzUu1yS75nYC5w2AxI2YiWSsph1
MD5:	B558978285A43C4FCE2E9852A16DBA76
SHA1:	F7E08B2DBC20C9F8044F2A1AD6D7F4ACFE129B6B
SHA-256:	A1A1E7CE6BCB28E82BC5E365CCF4AC3F83600C38B636736ACFB64B5215A91C8D
SHA-512:	8FFFBA5B11D26B0029512012CF58781FF3D5277DEF7441D3E9EFC4E3054B35B4F8EE465DC975B217400765788B5CE9BDE931388DDCC50B8B83F0BA89964802ED
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1145350/capsule_184x69.jpg?t=1715727000
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................X...........................!.1..AQ"a2q.....#B..$&RV.......3c....%467CFSTbdrsu.........................................C......................!..1.AQ.."aq..2r.........CDRT.....5BS#$b..%............?....Y./.ve..1......bc.@..X*........W..Ml.V...A....I..\|.Z.....5....m_....>.......8.V..m.]...E...:...xy...9......I.S..m....E.../.........g.lY.<..V.Q.}..6..........EO...._.i.2.......;_..S..g.(.%..s......s.......s.....4. . 5.>.G.$..o.[......cc~...~........k.)..mT...}.1U.z..K.q.v.-.&-u...p'.o........Ll...o..d.b....b...5!..J...B..w.....$.k.....$]e.6...QuZxF.......H.cI=KIN.mv....QM@.......,..Wn=.^g..^I..O`q.......$ ..W.(+...4!.....y..w^..Vw...oo\Z.D.+}.....1..-..kyPL...qI[.....&.G\|....3....){......U.....A.l../..;.X?.y.U..z..6..}B.......E....'.........w.-.

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 1920x988, components 3
Category:	downloaded
Size (bytes):	183437
Entropy (8bit):	7.990958870314879
Encrypted:	true
SSDEEP:	3072:6p19yQMal/SMdIzJw+JXU56YbEg+PFtR9x8AZqwTaFt3Kcgzto+:u19tlZd6HEPERNj9x8s+KFBo+
MD5:	0FCC21CDB2D7998BDB0414DEBD14F3B0
SHA1:	748E43C1A9FE91D7674690E86D2794166323A12D
SHA-256:	CA1645B511A884A4881A939EF38A760ABF7B3E9FEC94811571532D8D8EF7D44B
SHA-512:	3C399FE1255FFAA3C025B2313FA3B8939902D7F696DA9DBE9CD9251DD77CF88F3C4924A9A258AA401C9A77CFDC52BF47F2FCE996E17A975AE7F0BB2129992A05
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2486627840204294611/CB1C998FF27BB70CA436270A4E6BFE38312F1B16/?imw=1920&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.....%.%.................................................................! !,,;...........................................................! !,,;..........."..........8.....................................................................(...$.....n.....].kf.H.F..jk.X...v..>.]..j@..`.....r.....@.}..X.N......>.f.l...5..I.......Z.j.(v.k..,P2...K...EZe....s+"=n~.7<.Zz^....K.h.k2[......c.....q......R.R"..8.......a.......,d......b..}/'...,.P.G.2.....7RQ.."...... ....D...V2...3/&5.!.N.....J......w..y..Ms....s./.z.....\>5k.s-..+..>[......{.....O%..G...h..'..M6....7..4.j_)...!..M>...........O..=.7....K.../..h....k....[...z:.?].W.s.~P..6.._...<G/........V.S.-v....E.y]..!.e%.....{2....Wo.'.et...b.OC.g..O7.s)g....+...3...Igq.......Z..._;....x.....3.DX....4...2O8.U.d.Z./cZ.K.........l....t../.\h..i....1&.[...y.9]c.{V.%gS.ig..........l2..E.#.+!..Vs`eg.....R UAN:rh.=.K(.L#...l`..`qun.[8..TJr.[.v.....\.K..,..h........i1+.7."#..iE...J.rS...[.Q./"JM..k_o.

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	55559
Entropy (8bit):	7.979472468861487
Encrypted:	false
SSDEEP:	1536:zK5sc0r8TVRCv3vdYaUbHQ1ZtohkW5MlZIVMR:zKSuSvSa/akwC
MD5:	2F96194356D3AA79AED0986877A8CBE8
SHA1:	71E4AF73E572F6EA7FD6226AB964D834B11764FA
SHA-256:	6CB077841092435502C7E532C391C244C48C434AEA7D91A6FA5FD8F771FFF9C3
SHA-512:	432DE192BF43936CB06E8522455CBBC405560BD5EECF40E9D2432ABEDC825C7DF64A055DF8B550CD952772BEE0B723691DA2F1C56CD2F22F4D31ADA0B62E5A82
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................................................................b...........................!1.."AQa.q..#2B...3Rbr.....%C.....$Tcfs.....46Dtu.....&578EGSUVd......................................K.........................!1.AQ."aq.2........#3BRr...4b...$56s..C...%t.STc............?...._...d'.......4.:aTvNlS.:aS.KZ..aS,.7O.<.e.._..[.L..<.[.M.<.mn..$.._..5nn.}1.....N..emM(.<..M/...%..R...$..O..5nE...../-...aR,...N<.y.E...Y.W..1d._.."..lyybi~.<..M3...&%,.../%MRy./-...nE.'...P.I.....{tM..N.....,"P.B.......?.p.Yb.&..]%..._..^.l.9...r.Y...m....z....E$a..E.G..&..}.Z.hB.}.........K........4.5.:B\|L....}.......}..-.8.I..Y..z}Ba..2....z.ly..{ad9E..;D.$.S;T.\..O[.,...F<"..XC....F....O..... .6.F...m.p..Yir...O.%@....q..4...S.K.....:y..ms.OR}..ru ..f.;...S!)K@.4.J...O..lUiZ..CT....m..M%D...}.).:*.vQe.."X..t...h...'

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	47940
Entropy (8bit):	7.982125939444349
Encrypted:	false
SSDEEP:	768:u9eULTg2t3IEHpGSqmB6qRYuBvj3FTyoKP802xqYdUmRX4PjN//y23C8f1ugJvPG:LU3g2HVqmB6qRYuVjVeRE0E/RluV/rBO
MD5:	BA2FC5EC7E6556BD124CD6FDE7FEA9F6
SHA1:	49F096BEDB72F75696CDC00F8FCCD475B200B58F
SHA-256:	8D73CAB994B7BB25AF353F873F924F12488972D4FBD659FF2C89351DDA825F7C
SHA-512:	EACD5C13C3E8E26DE59C0CD5DC1465E6951A3106ADC56F171C28F5F82DBDF7E0E45B64987B5EAE22073F021B26E88DA6707E945A6513525CFF94586684F8F075
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2379780/header.jpg?t=1713537191
Preview:	......JFIF.............C....................................................................C.......................................................................................................................`.........................!..1..AQ.."2aq.B.....#R.$3b.....%8Crtv...'7Su.....DTcdes....&45Uf......................................I.........................!1AQ.."aq..2.......3B#Rb..$r..4...%.CDS..&c...............?..0\|.}.(.B.@......@.B.`....,.t.#F2(...1.QY(.tVF....P..X(.&.WGEd.P.J..VN......7..]..(.`f.......VTVJF.G..@.....p.9..3H.r.4.psB..F...fY..?.Gu...@RR.....S..v3....2.d.}.K#p.c...XB..@?.lD.O...h.....QO.4..%@...b..%v.!x..r<. ....ZltC.....&.@.C.T..EB.@.D..0.$y.X.".].Rl.t(....VK..>4V.@...B.@..y....t`r.l....VGt9h....VF..%.....A.(.B..PA.H4..c.:....tk.....%.#..P!..p.9.d.Q.Y,..4VK.. .h......QY).+%.d))`.Ed.V@.M....VJ..$.P..M...e.Rl...b...(.)6N.....U.R...`...y.l...~.)6K..'.d.PBJ.3A+0....S...)..O..>..F..v..NR7.u.5.(..t......2NU.q.<.NAr.R.fpcS..iwW.1Q...6....$

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	73693
Entropy (8bit):	7.9779042902190795
Encrypted:	false
SSDEEP:	1536:9Sd2qmiBNAmDrJeGByiAF1OHfMexnEe/9C9o70e5Yim5IcnQOmaH3DUQm:E2mvAmcr1wMiC9o70TVeaH3DUQm
MD5:	5E59E7CD6EF6BF6DE1B636348F535BEA
SHA1:	43ABB72CF331870D7EBC073A94B08E2C9BC0A99C
SHA-256:	4BBD3AFEB5203FF9929575A1A637895099E4C6FA652539FF5700EDEC2CA5D083
SHA-512:	95B3AE659800674F751E541E47EBED1AFCE6773C5D6E5D5DA8137CC7DBC04A67E6BE43883ED88287629BED284CFC855E6C628E03461919AD85E7F59E14294C3E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................Q.X..!.........................................J.........................!..1A"Qaq..2.#....B..3Rr...$4b...C.5D...%s..Sc..................................;......................!..1AQa.."q.....2.....#B.3b$R4Cr...............?..].H...8.E."or;[.....(...rGL\#+..h....4..4.b..?"p=E/&}. ....a.G.M.6..)....`.J.C.X..$X......#.$R@.lt.C....E..6.g..Q..eP.....b..l.4....d..u.....P.....3..\.`$.b.lq&."..D.'. X..Q.S!FqPY..e...q]....?..&.......+.<.:............t...=6..&....Ar.O..7.A.j...@s.\|H..q..7Q..N.Ri."....7..o..r$9.u..OS.Q.6.f`z[...-..R.....u......e........I.9.ib!&.o.q...}....R.dn....3.h.c....a....s.V..5T.dJ`..A.....\....T.x3..R..g*d4.U..<...~...1\|.F..E......e#TVC...fzj...3....y.v......G.<6....(q..........E.......>!g...Dv..n]...m~.6.-h...[.".!..)X....:.....Qv....`n...B...$..!.....c........7........0X_D~Z

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	9704
Entropy (8bit):	7.852258265067526
Encrypted:	false
SSDEEP:	192:5uiHXz28iiteW4DitUZBEvvw0bhMYQEyY12vN1ps:1HXSavS1/EvYEhMTVY101ps
MD5:	1BF0D477DE39BB26A712AE840DB99655
SHA1:	77043F1AC7647030DE3C9EC090AC8090F00E184A
SHA-256:	F20D2A9EC99F970F6EB3BC24CAACF6C362901540993F389C241F4688DB980A59
SHA-512:	04C406408C351B6FAC7A0F5D13225521343963897FC3E3C83A63900440D339DE0446B9238DBDB9E694181A01C4B9015C9F1B4EE2A78A5A1369606E94D1434C42
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........8.....................................................................+...a2qn......Lo.@.......-...Q..(sz.{...s..[\|..X.Y.S...M.....I.aJQ...;P.OPgIk...F.}......{..o.-YwV.FJW.uv..o.].._.(..;..O..k.R'....n.b..!.8<......0...8...../.m..{..3........ .....A/.M..`.Eq..V.<{.`.

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	39796
Entropy (8bit):	7.975068797043556
Encrypted:	false
SSDEEP:	768:lAbIWRn4ZfcfgX8p87svBN1ayuVApSdxhGUEQg988yxZXGN5yE5dRjsPF4YQ+TJw:lAbMZAgXNsvBtzyoUEQy88aZXGN5zOPO
MD5:	B8A83737A14A6705D9CD766B60F6D086
SHA1:	F981282186E17CF39077938CA1802BAE34EBF752
SHA-256:	83C36A64F6D0CFDA70E19D92DF5EA064768B25E1BC27242C338002F099FA0581
SHA-512:	9EB361E57CA5434605FE336AB07CD35F43B720DE4E6E8B32C86E628B9AFC436946CB90C915C1F46CB116BC779587E1ED703D989D480E0AE8816A4C1952EC72BB
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/281990/ss_692532123e560e6b866baee59b1e310a291a110d.600x338.jpg
Preview:	......JFIF.....&.&.....C....................................................................C.......................................................................Q.X............................................B........................!1.A.."Qaq...2.B...#R...3r....$4b%C..D...................................4........................!1A.Q."a.2q..........#BR$b............?...J:g(AMP.o..".C..xP4...\!\|.".dR?....,_q.%.....~4.c..(.".....6.<...4..I.?Q..K<....Q..fD4.r.9%a.i..;Mpj.W@.c/.:G..{{...z<.T.e.g..qc..sZ..q..t1..w..\"..K.]bv.........\4k.....$../h..q).K..../.".q.>J#n(....n.EU...B/,...=..G$....U.......(S.IE..yM^_Q.ge...hp..d.-..1.`u..4.-'.*...W..Y...}.t..e...Nk%..Z.....W4..ZbB..,......6I%.Hp.S....:. ..\|.f..cI....$.R..v@..aB12\6..Q,1..I.6....%.t.a..!....(80...V.........."i%......hQ...C.7B.....D,.F.cd..]V.Is5G.$7....!..L.KN.n#...c......,L.+..)..'...m&.S..3.S..l...g.Vd0.NL.N$..i....{Zrf...f.#...`S..h.')..";.j...{.D..@].b3....i..P'.h.3....b..X.>2..2........hj.X7+.!..B

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33670
Entropy (8bit):	5.264499514061852
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJ+JIJB:FpP1vZR8
MD5:	4101184747AF6E473E344436C74B6900
SHA1:	C3A623B848A5B749569EFF41146F96250DB369EE
SHA-256:	1BEFB2FC5AF9EF88487C3A3A2B6689955E293DEE75F7E4D2B9BE6CE472374740
SHA-512:	CC272B7235B7485D1BE7D128106B4EE754FE039081B3C4DBE769B94B7334D7A4CED32204A9C7C7C64BB116E63663D93798C24C6C1DECB9918F5A1FBE94F4F562
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	4522
Entropy (8bit):	7.894880048690622
Encrypted:	false
SSDEEP:	96:rPToi6+S6X6lVhH5tenJWEotqSGecuePYIRun6DlvA/nRVEXhdn:jTosSnlHZtenJ/otqSGaGu6ZApVyj
MD5:	2E6FCFE977F83AA4B97AF8B979602AEB
SHA1:	0E5427CF9F3F084B7F2920F4361A0D2E937F1349
SHA-256:	75660BBCAF03CAF3DB55DD34A246D19A10A8D21E8C0F8BDE94B2CE8C81796A98
SHA-512:	46E7C492C6B6F1A9CC8171F09118335EDB5C1BF6D8C9A0D8E4102545CB726ADD67D4C4D5757992B1C553FEE6186B3B5C912F8304BB490D9500E7851C02FAC9C7
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1604030/capsule_184x69.jpg?t=1715590903
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................E..............................................A.........................!...1AQ."aq.2.R...#$B.....3FScdr.....................................&......................!.1AQ.".#aq3B.............?..N>...E.I...B...z.z....%=G.f..M.Zw-..f.%...S.O].....X.`._~pr4...h.ygJ2@I..X.....n.....m...d..QQB..3.%U....aK..{l.....{r...s.Li..u.8...>...#....Em......}4.uF3.tN..>.7.....\.Z.fy.C.4...i]...JS...e!...Z".d..X).=.t...b.E..........]b..!.......)..]gU...'...;.bw.......P.n...#G.....>f.EL...7%...)..j..##.........'..V..t.-..N6..G.....#....+%4..R......k&;....9t.....Uxq.....ak6.K.q.5.....0.'.;...S.v1.\k$...!55h.t...u..=.Oz..Osy...2.....,.U.W.q..K^.ZI.zW..Y.#l-.}.tS...t-Ac.....EN..`..(..L..W...M..1.l.,.o.t.'+%...i.g55..I,.+.%.>.<..:.50...}....a.FNp..i.$..AM7p..uX.D'%D....y..F.$`..x..".8...,.c.S'.2ut..\EQ.d.

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	807
Entropy (8bit):	0.4261982118465057
Encrypted:	false
SSDEEP:	3:CUlFE/xlzeze:zFEGze
MD5:	39BC952559E5A8F4E84BA035FB2F7390
SHA1:	4F415467396B4A50149373CA75BCB4C04C2F60B6
SHA-256:	8F73EF54EFC672061F69CA881FE318DCCC6DD67D993CBB8E76E53E52C84EE493
SHA-512:	C7E107E803941A965A173EC8DC7DDFB052C042AB0070E92E5FF47D0E02ECB38446BDC13BBF201D68B2F5696AFBEEA1AF494A65EED4B086EF368CF147892E4409
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/blank.gif
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,................;

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2855), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	24732
Entropy (8bit):	5.351671661631429
Encrypted:	false
SSDEEP:	384:tYpqInFbE8Z++En4GO6fLgobSGy+abTJLW5qVd4Lfq/zTnMppYdhQ6fLgobSGy+P:tYpqInFbEZSH/7GwoJpTqIZw
MD5:	BB9491D90BEDA17290F97270E1C8B4C2
SHA1:	0B3C972E9F7B571488CF63AAC4370DBFE9C79724
SHA-256:	78708D568BA20F23C730C56AEAEEDB67A0AD9F861EB46B7C77F5C0493DAC9A90
SHA-512:	5B90A497FD382BFC80F0BDDFFD502D14CC5D0FE576AAC3DDBD71BF142BA31FBD1A90EF0DEFE5FBE2E009D0DF58630F30207D9645EAF8EA5A89C76048D768DE4F
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/app/2143540
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Steam Community :: Error</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://gtm.you1.cn/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english" rel="stylesheet" type="text/css" >.<link href="https://gtm.you1.cn/public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english" rel="stylesheet" type="text/css" >.<link href="https://gtm.you1.cn/public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=english" rel="stylesheet" type="text/css" >.<link href="https://gtm.you1.cn/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english" rel="stylesheet" type="text/css" >.<link href="https://gtm.you1.cn/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=english" rel="stylesheet" typ

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 292x136, components 3
Category:	downloaded
Size (bytes):	18156
Entropy (8bit):	7.959937239112083
Encrypted:	false
SSDEEP:	384:nXZQjYhTbs7XeXRhjrflFUrEY0q+O97AZ6dlMoCq+hlWQs8E8yuO+Dw:XZ8Y6bMRhjpFK0q+O97ASlMZqQlLs8fA
MD5:	BC0E2EE31105B4240719E4775ABF6E0B
SHA1:	B69B026D80F09E962472AFB6E6F761CDD3078E50
SHA-256:	97DECFF9E48FEDDEFC89419262E8BD8390D1E55D46247CF720D3642C009D3148
SHA-512:	3C18893693D72503E4539F4BC2DCBE6FF961807D75F865F27F86231AF371D175360B51AF32747D3D9093B323F6036E1F158EA420C680A239D0090A59653C64E0
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/447040/header_292x136.jpg?t=1692817739
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................C..........................!..1A.Qa.."2q.BR..#b..$3r...CS.c.......................................9........................!1.A.Qa"2q........#B...3.$..%5R............?.....\}..J&/.%.IT.....D.>X...LC....U0.?l.Q(!./....`....G.7.h..i.....J.}.LKR..?...GM;.\|KQ.S...Q.So..\.0.z`jE........KC...JZ.vzbjB..m.~.:.....&.-........U6......g.....v.%.h..n..I..~.!.$......Q&.y...lR.....oL.Qp.a.\|.Qw...b.........i..#.%..TC.\|.Q&a.bZ..).x..%.O.p5(.M?\|.J.d....kQ.....J...E/F.u\|...U&uO.n`..oh..H6.._,-.....>&...?....fr.~..2MG...s..M...K_...:.o>.h7..Nj.:.@Sh.R..V.BfG[%`u#P...;$....u..3.../"V....Z.t..5q...;..N......FDe....X.:o.Q....E}.U..............R.QFv.../.....DqGX.....k.Q.2.u-6.q[%.I*'......(.;'s...Z..dCZ....'..U....K\.BE....J....!E...6( ....J(.)...$y.l.`.H.HR...$.._

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	90489
Entropy (8bit):	7.972910737807521
Encrypted:	false
SSDEEP:	1536:EUus0dSWFa/V5u9jzxV4H0uwMIL676KALyfycz4yBaoxqdeW:E5hdSCyy9jNV4UQIW7qqyclaoxA9
MD5:	F355F858E533C946023609E6B55DAAA9
SHA1:	CA8213DFD94C6534DD55814EA810EBEF8D3F1427
SHA-256:	B29F26AB43D2FB64FCDD8583F675D64947CD0074B2F529A1EDF2E01D4495BCC3
SHA-512:	46FCAAAB2BBCB030E10F6290E9E43E8D13D9ACB091790731C8625DC8032A7F1B102E1D4A46B6A8AF80FC578F48260A5F4CAF23DE2B274025BE9F41E8E5FE5150
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1128860/ss_6a6e8fb986c72dd4436566373debb93bfa9d5f57.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X...........................................Q.........................!1.A."Qa.2q.....#B.R....$34brst....56.....7FSu%C.....................................6.....................!..1AQ"a..2q...3B.....#..CR.br.............?._Z.....o...T..?....4..+....1.,...M...N..-.D.....HSk....JiV.F,.@:n..V.6.'...3&.F....O..F9.u..ncW4>Dsv.s.-..Q..rM.+........./.0...].;.....dh...O:...D...&....55a..I......9:g.\3.1.).N...,tj\|[.fP.$..G..cU[.Os......j..!$ ....>.rF6L_.a#B.F.[Iby.....TI%H..20!....q...c$a.9.....S....%..Z...._L2v.....+'..5<_..b....$_.oAl2F?3.y}W.s).+d.{t.....za...~$....^.u...&..'..(..iJ....m..o..:....%i3)-M.......'..:..r.....M...H.{[.....p.5..._c....G.E..).7Y..#.s}.0... .2.C....V..j.HY.. ..a..a....[..]...q4...dT.r.w&.......N'.z..h..U.Y..V.8e.x.....\|...s....B..........#.......Ia.....I.??l7.0.%.....H\|..>[.a.y7..

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	84340
Entropy (8bit):	7.97994292097791
Encrypted:	false
SSDEEP:	1536:rmfl80PyC8I0Cp7LGLaH4yVuvr/5ukylp3ktff+UOtrVoGyS+Q:if60qC8Izp7K2H4y4jRy05GUOtrVoGyq
MD5:	8F175D2EED224A848C0A52780EFE23A0
SHA1:	AB8FCFE7283EB89B8A38A21183BC5FBA8C124D85
SHA-256:	54C581EDB698D29D5106AA51E2A4AFF3C8801FBCDEAF2C8D5D058AD362CB237B
SHA-512:	7C1F8F02C621745914E38FB0766C736C7D85AD95B349EB6C596B54202D2ED42A4C553797A5C9CF0159A84460CCE232FB1C234BE4C4FEC98F862D939E9950166B
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2344520/ss_2f6e682e3e72703728d2502efacefdababa03493.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................M.........................!..1A"Qa..2q.#B....R....$3r..4b...5Cs..6St...%u..................................4......................!.1A."Q.2aq.......#B...3R.b$............?.....%G9.4.k.:G.c.>..=..v..^.&.....D..:...H=.....}..i.....8..8...@.....r<..kc.v.v...4N.K....8.C.....h.....4rE.@k%..P`.`."5I..N..."...<..-.. t.-..3..K..o......)....N.l^...{C....!.>-d...8...\...-..,..e.8.@.WH......^...>........-}......^....{L...$.:K..F\.;_l:.B.R.y...T.-...oP.......b.....4Z.EM.F.@P...*....X...I..J..+/.u..Ym....4..w....R..w..j.......m.M]R3..y}]~Q.y..p..\...{X.skZ..b.2..g.D[..i.e.{.eP.i.i......M....+.<..srm?"..`.$( ...oo.5..[,0..$...E.n...er...V.W.h.<.H.....[....X.V.g.l..L..pO....zz.....1..\|q.......b......H...P........(}..k;4.x.j'.V...,.b....I1..... ..u..3o.<R.{[

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	79227
Entropy (8bit):	7.979642682067971
Encrypted:	false
SSDEEP:	1536:Xn42K+4NeQ5w6kEHr9oZtz8piI1w8wq8lSs7RSmKFSxOjq6n:Xn42475w6TrI8RK17Sk3uSxon
MD5:	E7A855B8C120764FBF4935515CE23041
SHA1:	E2AD0FD7AE82A2C5252433728E5867F6AC2E4531
SHA-256:	34B8EE17B4BD2E3FB51296B631946920B54B0D74353C8144AB3090CF53F28113
SHA-512:	1ACD8271C646F1191AFEC9FA24F2496AE79D0BE5BFE5DCFC0FF0AAB226B3C1EE3ED024E41E5D2B50EB3B4E0D4300788C6FE03D4B119793AEE9055CE40D0C8817
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................a.h............................................O.........................!..1A."Qa.2q....#3BR...b....$r.4CS...%..&cds.(DTt..................................<.......................!1.A.Qa"q....2......#B3R.$4r.5S..C.............?........!3.@7{.<......).I......S{..m.[.......A.b%.._...dp..6...L..ic.Y....m.ZM.bQ{..m.k.q..l.F...#,J.p...w.uDz..e4.?.dC..k...Kgd.....Y.......w...'8..'...uy.Ek.{t8....wD(..[..m.D...4FqC9.c.......z..$`.t...%..,h....f..........-Y.T.t3..h..z.J:..^[.......{c."M.4tcm.R.,...2G...r........W....M.k.Dj...!.WT..=z.t...7.68.n..cfD..5...L^...dk..Cm.}qd.V.A....!,..,.H.].s.p.T.-:C4..*@Y9.+......E$..K.i...6..b..x.......\..........y.........X.S.g.n..-.XYXjS.....]F.6.....G...^....N...h........f...3..}.....g.F/rI....K.I.M]a.}nok.cE.Q..n.....n..t..I..p.Io...k.G#`9{....."Dl.....p..k.BW

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 152 x 71, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4512
Entropy (8bit):	7.415680848996788
Encrypted:	false
SSDEEP:	96:2SZYkknmWq2Yf/LVHnLdHYqbJL5gWfVrCCdT/7PT8IQN:2SikknoHBpbflxF/7r81N
MD5:	6B1FEDCD10C0AC040DDC4053BF32B691
SHA1:	75B7C40D3AE5772E3A8AE13BD0558FB4F9B760E4
SHA-256:	8C91B7DA40C2E5FA677A05A0E9E38F2E272E618A641CF2525007467D69534026
SHA-512:	0BDD02B539CE195BB2E7A5A3BFD611569E7D281C8944747F391998DFECE92F0115D6A363817D09AC38B343D48B3D5D1D09A845A328D199B9F5AD1F8A33C3274F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......G.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2020-06-17T17:23:07-07:00" xmp:ModifyDate="2020-06-17T17:25:21-07:00" xmp:MetadataDate="2020-06-17T17:25:21-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:56d15902-83e7-0f45-b87f-50e9408da383" xmpMM:Document

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1219), with CRLF line terminators
Category:	downloaded
Size (bytes):	134412
Entropy (8bit):	5.411790436118701
Encrypted:	false
SSDEEP:	1536:ZFaLKxzId2RnFsNfBWOCfI2iDjJDfmysAEg2kcgEHETJiteE2uMvwant1f4dcO/+:NavH
MD5:	98FA5AB1A83EA142EF26CE7CC1648CBE
SHA1:	107DC8D76CB3343FD9F69ED78BC06978A1495117
SHA-256:	E68BC1D7D5351121C95EF811174298C025712CD3F84E2BB6CE826D9440F1DD23
SHA-512:	4BCF0B1ADABA84DADC0BBB9FC73FC5D94BB81A69EA50640D62A3A2F5E7E2D26228CCBD8A8478B4ECA541CED9A698410823AAC4FE2E7F9D83C32AEAA2C0B4AD9B
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/apps/allcontenthome?l=english&browsefilter=trend&appHubSubSection=11&forceanon=1
Preview:	<div id="page1">...<div data-panel="{"focusable":true,"clickOnActivate":true}" class="apphub_Card modalContentLink interactable" style="display: none" data-modal-content-url="https://gtm.you1.cn/profiles/76561198389231209/recommended/427410/" data-modal-content-sizetofit="false">...<div class="apphub_CardContentMain">....<div class="apphub_UserReviewCardContent">.....<div class="found_helpful">......2,111 people found this review helpful<br>17 people found this review funny....<div class="review_award_aggregated tooltip" data-tooltip-html="<div class="review_award_ctn_hover">....<div class="review_award" data-reaction="18" data-reactioncount="61">.......<img class="review_award_icon tooltip" src="https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/18.png?v=5"/>.......<span class="review_award_count ">61</span>......</div>..........<

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	downloaded
Size (bytes):	54136
Entropy (8bit):	7.982847595090487
Encrypted:	false
SSDEEP:	1536:q2jIpIVVaHMPSIJcARBaFtnUQLiTjWY3Ema3U:jMcVaHMPSKcaBafLojWYmU
MD5:	DD573D719F059DD4F6DD5EFFE467DCE3
SHA1:	A29D9CDCAE6318F1F6424895CB6554EEE489DB5A
SHA-256:	676BED35CBC9C579BA0DA1739C479D80937E22039D5C86B43A652B126665ACCF
SHA-512:	0DE5FF362053D616A1B65825CB232D65E3C9856F4170EB9B865EDF05CC56F85ACD1D1BC66EA22558BEC4B5643E62B8EDA498A8FE9CFC84DF9C961022F3F848EA
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2479872440761773408/15BEF100D715F0FE0CA4335289FB0C6929E2F881/?imw=512&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........9......................................................................3........ .p..c}.B...A.X........./64\.".UZ...%.<m.&=.c.j..{.}.D9Pr..;\|.P,.2<..<.Hj.EB...F...=.{8^.!.....&q.w{.y;_o..<&;...N.;g..5!.:.......k.2..G...e..q.....63.F.b.D.Dh..f...=..\|..gnM..i.M..1....:..SA..ox.$.F.td.(."....A..c.am..{M..o..Z...N...w../{..w..M..(.b....X..6d.....gnv..9=.{..o....7F]!U:q..S..........^.c.'.j]X.^s..L..2...{].u.%.A`..<8.....qJ.8eF+8zcl>.c:.5......O{...s. y.dp>...{o/k..T?..-..,hB....&.o.p>.G......"...]...\#.sR.X..\3,M.=....._...D..b..%1..1._....>X.?.z.r..r.V.V\|.....'xA.]...'.B.x.. r.....q.0...r..6........c.eXH.o..FA..G.D....8..=^.....0..6.n.&.. :........?...<..c...QO..m....1.1dK?.AkP^]C.:..\..F.L....!sy......?..%...p......K...h...}.Q..#....@.o'd\|.D@c...H.0f7....).T\|...P......#..-

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	39796
Entropy (8bit):	7.975068797043556
Encrypted:	false
SSDEEP:	768:lAbIWRn4ZfcfgX8p87svBN1ayuVApSdxhGUEQg988yxZXGN5yE5dRjsPF4YQ+TJw:lAbMZAgXNsvBtzyoUEQy88aZXGN5zOPO
MD5:	B8A83737A14A6705D9CD766B60F6D086
SHA1:	F981282186E17CF39077938CA1802BAE34EBF752
SHA-256:	83C36A64F6D0CFDA70E19D92DF5EA064768B25E1BC27242C338002F099FA0581
SHA-512:	9EB361E57CA5434605FE336AB07CD35F43B720DE4E6E8B32C86E628B9AFC436946CB90C915C1F46CB116BC779587E1ED703D989D480E0AE8816A4C1952EC72BB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....&.&.....C....................................................................C.......................................................................Q.X............................................B........................!1.A.."Qaq...2.B...#R...3r....$4b%C..D...................................4........................!1A.Q."a.2q..........#BR$b............?...J:g(AMP.o..".C..xP4...\!\|.".dR?....,_q.%.....~4.c..(.".....6.<...4..I.?Q..K<....Q..fD4.r.9%a.i..;Mpj.W@.c/.:G..{{...z<.T.e.g..qc..sZ..q..t1..w..\"..K.]bv.........\4k.....$../h..q).K..../.".q.>J#n(....n.EU...B/,...=..G$....U.......(S.IE..yM^_Q.ge...hp..d.-..1.`u..4.-'.*...W..Y...}.t..e...Nk%..Z.....W4..ZbB..,......6I%.Hp.S....:. ..\|.f..cI....$.R..v@..aB12\6..Q,1..I.6....%.t.a..!....(80...V.........."i%......hQ...C.7B.....D,.F.cd..]V.Is5G.$7....!..L.KN.n#...c......,L.+..)..'...m&.S..3.S..l...g.Vd0.NL.N$..i....{Zrf...f.#...`S..h.')..";.j...{.D..@].b3....i..P'.h.3....b..X.>2..2........hj.X7+.!..B

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32086), with CRLF line terminators
Category:	downloaded
Size (bytes):	95790
Entropy (8bit):	5.394132126458497
Encrypted:	false
SSDEEP:	1536:EPEkjP+iADIOr/NEe876nmBu3HvF38sEeL8FoqqhJ7SerN5wVI+xcBpPv7E+nzmN:bNMzqhJvN32cBd7M6Whca98Hr4
MD5:	4DC834D16A0D219D5C2B8A5B814569E4
SHA1:	4FBE0563917D6F6289E4E1B4A0A8758E4E43BDA9
SHA-256:	91222F96F34735EBC88DF208017E54D4329B9202E3E52367FB8B149698A1A5EF
SHA-512:	6FBEC4785A21520FA623D1A151C6C8B64BAA1321AC6918A127BCFC22E49EC2E3BCD161AF9C237BD5C70BC4046EB12CF434563F86CBDC9876EB67FB2DEA87034B
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare
Preview:	/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /..!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){re

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	6978
Entropy (8bit):	7.924405937601194
Encrypted:	false
SSDEEP:	96:4SaayeYG1vyw0hGTyH4xf9RnIWZx4jLIUupGysT0CjpNkB3qkJayduwbHxFS/:4SqigtHqCep5sICFNkIk8yduyHxFS/
MD5:	484630BD463AE1E70A7561545DB82D61
SHA1:	6DD65027A0B4EC9B3E42B669417EEF6C419C6454
SHA-256:	68C18E956504A495656D12FAEA016665CC9E59960976C27E2704048E220887E3
SHA-512:	C58087061FB622F002C1BE2CA10CB4365B784CCD37D5512D9747C20D014189CA83CAECDE455993E00EEE58DD61801B66AF89DF405E3A40F0DCF8866126043E19
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E.............................................?..........................!.1..AQ."a2Bq....#..$3br.....7Rg...................................5......................!...1AQaq.."2.....$..br.#34..............?..$.H.>.}u.\..[&.w.l...R...zF......6/yB.%.I\e.).....d.F.....I.' .mD9ZX..E-....F....X..2]..R>..O..m.Aj.J.ip..l.?!...a<..8p.....m.m..xz.hT....C9...I...I.^3..% wWl.gm{9V..`W...6..[....sS.R.......Ooc.9....]...rA=...i.p...~....=..$.W.`H..IV.>...b....zl......s...e...._t._9..t@...^....V.iQk....O.1V%Y..'IG...$.v.R.s.i.X....8.V.....I...O..L..FS.=.=.J.Q.....W.d..8.5C.V..s...._X..;......QF.Kv...PP.\x...:...%a.$...J.y.....`.\K.r...]z.)q.c.ae$u..N@8.$c..Z..pBp.7 ..'w...A.-)* "j8.....Y4.}...l.6......'.....gY..%..K..l..y)qiAt...@.=q.1}.......Y....mG.Z4W.X``.../<.`O.7p0.5S...'...&(..P....m-.E.

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	8856
Entropy (8bit):	7.942818324768091
Encrypted:	false
SSDEEP:	192:4viBHqIPU09TO+yS75NlOgTnYC5kd2Axi72Yi/2pNLksphNj:eiHzUu1yS75nYC5w2AxI2YiWSsph1
MD5:	B558978285A43C4FCE2E9852A16DBA76
SHA1:	F7E08B2DBC20C9F8044F2A1AD6D7F4ACFE129B6B
SHA-256:	A1A1E7CE6BCB28E82BC5E365CCF4AC3F83600C38B636736ACFB64B5215A91C8D
SHA-512:	8FFFBA5B11D26B0029512012CF58781FF3D5277DEF7441D3E9EFC4E3054B35B4F8EE465DC975B217400765788B5CE9BDE931388DDCC50B8B83F0BA89964802ED
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................X...........................!.1..AQ"a2q.....#B..$&RV.......3c....%467CFSTbdrsu.........................................C......................!..1.AQ.."aq..2r.........CDRT.....5BS#$b..%............?....Y./.ve..1......bc.@..X*........W..Ml.V...A....I..\|.Z.....5....m_....>.......8.V..m.]...E...:...xy...9......I.S..m....E.../.........g.lY.<..V.Q.}..6..........EO...._.i.2.......;_..S..g.(.%..s......s.......s.....4. . 5.>.G.$..o.[......cc~...~........k.)..mT...}.1U.z..K.q.v.-.&-u...p'.o........Ll...o..d.b....b...5!..J...B..w.....$.k.....$]e.6...QuZxF.......H.cI=KIN.mv....QM@.......,..Wn=.^g..^I..O`q.......$ ..W.(+...4!.....y..w^..Vw...oo\Z.D.+}.....1..-..kyPL...qI[.....&.G\|....3....){......U.....A.l../..;.X?.y.U..z..6..}B.......E....'.........w.-.

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 1440x2560, components 3
Category:	dropped
Size (bytes):	575568
Entropy (8bit):	7.991159007756189
Encrypted:	true
SSDEEP:	12288:/oZ1OLBqQaJhk2D5bQzrakLA+i7LP6o7NUU6uRaMP3qOu:/M0BqQaJhdD5bQ/cZ7TyJqag+
MD5:	4791595B9A9F8A79676C82F30FEAED1D
SHA1:	8E230B9E67E8ABD6B592967CCF7034B1145393DA
SHA-256:	FBF0E5CE9C7246082D32C8EA9DFC92605D7BE498B24536B71706772CE426F9FF
SHA-512:	0628C9DF983FD6AA4DB9208CB7DC7E7C464187ADF52D6D0D0678B0D0E62CFD758D2B80A535FA6EA15F0BB0087E114EB3E6FD2434F493F4231EE46503FE9C9DF0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.................................................................! !,,;...........................................................! !,,;..........."..........9.............................................................................[h...@..".\..$.8.%..:.....=._...?L..N....F.......]..L.Y.j..J..v....Vf...Y&..$....Y...a.@.f.(z...a.N......+.#@..$..I;%......7.P.goy/;...i.K...r..,.CdM4!..lh...\|.x.f.I..I$.I$.I$.I$..s..i..E.r...d..$d.I$.I$.{...[....~..GC?..............b.....J.'y.,@...+.Gg.. ......HR.FN.$.I9$...g$.;$..MprL..MPrL.I$$.\.K.I ....2j.Cj..;4+.\.&.Jg \\|: .n<@...a..N.E...~..?..l:Wk~.._0..V....X.. ...../.........;.H.C..)R...h.z..,u...O.s.h............>.&.M#[T.;$......<66.G..t.N$W............NT.\.cB....$.I$.I$.I$.vI$.I.$....H.9#$.I$.I$.I'....o...O..\|.....x.X:)........=..3....D.y%.0.).k.G.hXz.G.....GN.C....I$.I$.I$.K..k.I .$.T.I$.I$.I$.I5...;a.+LR<.2.*.p..Y$..#.;tb........O...s{.g....8&.....mm.QC.........".{h'^.`.>B....-IuNJ.f.

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	50133
Entropy (8bit):	7.965114015650832
Encrypted:	false
SSDEEP:	768:eKMI4yqxd2etzGgiXfkCHXhve4TGhmdVa9inG6MKYvCBS7R5fiKwZiapeSOnKEY:DMjtSLXcIXh7Van6MHRhxEFEKEY
MD5:	FE5CF840033DD55E6B055AC77BDBB73D
SHA1:	62D98D4546A07A97F3EBED60BF09AB92A6A2F3AC
SHA-256:	CF316316D92320EAF0CDCECC80A197276D52A2B1F818ECE9EEF87D06E88A5FA5
SHA-512:	A2FDF67ADCEF94D43FE5665E04AE8FEAFDE6377D48398716A0F8BDC901F65F0CF2778A29CA349BB5DC128F0394F524611D884E3D68263CF4E878942901965B20
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................U..........................!1.AQ."aq.2......#BR..br.$3CS.....45cs....%DEt...&T.6F...................................6.......................!1.AQ.a."2q....#R....3B..b.C.............?......<.{B.h.p.Q8G8.2'...XdT...aSQ#.(.-5Eu...G...:ds.B.}d..(X.P&..b..<.,A.'..b}'......u++6H=..B.qZh....S.W.F.\|.......e8......E.%....T.&....'....l...g..Qfi..)...8.....If.u..`..X....#.).K.[...%..n...d......S.F-.5..=u..3G..T..i/.cO............Q.q..WYq..h .0c4m2.....+B.CF..l...&x...d."...<z...Vh...YG....1...R.q..6.2.V.D....T...1T\|..1.g&\2.w:...GK+`UJ!...$..-"[$.MM.3..&.(..G..M...Y.iD..Pe$..l.[....CA"..D(...PL.;.(;.....5>......m...2_.^. ....{...^-...,I.....H.>.R`qC..b..8~.T.....(.#.XF../....h.;}.\|*...f.......6..&u".L.4.`..qE_.,z.I..,....G.-.ME...V.Z..ajd.. .i.....;.V>@CS%.

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19987), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	20152
Entropy (8bit):	5.336311250203322
Encrypted:	false
SSDEEP:	384:+/fIOCWaxNWJb2ucCJRGZ43ftUwP/tkL/91a8+ei/RuDbCiaybs4MHpanb5:zhsbhNJZ1ttkuQmR1wbs4MHpanl
MD5:	7F0748E35C63405C3FEAE7DA0D361703
SHA1:	80120C33868393AD4B3BB505855A0AD3AE9D4D5C
SHA-256:	51C618259A98EF7027953BF3ABA4304E20B8B08DB9CA30263235E9309220ACF2
SHA-512:	950A1882E489C095646FE37C3C3DCC0875A14EB1619C825F5026969385CA3DA97B521CF8D9D1DAF0617961C5B40C6E65638365DFD898CFDADC4A994D2E187493
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=fwdI41xjQFw_&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="8896117";(()=>{"use strict";var e,a,n,s,d,c={},f={};function b(e){var a=f[e];if(void 0!==a)return a.exports;var n=f[e]={id:e,loaded:!1,exports:{}};return c[e].call(n.exports,n,n.exports,b),n.loaded=!0,n.exports}b.m=c,e=[],b.O=(a,n,s,d)=>{if(!n){var c=1/0;for(i=0;i<e.length;i++){for(var[n,s,d]=e[i],f=!0,o=0;o<n.length;o++)(!1&d\|\|c>=d)&&Object.keys(b.O).every((e=>b.O[e](n[o])))?n.splice(o--,1):(f=!1,d<c&&(c=d));if(f){e.splice(i--,1);var r=s();void 0!==r&&(a=r)}}return a}d=d\|\|0;for(var i=e.length;i>0&&e[i-1][2]>d;i--)e[i]=e[i-1];e[i]=[n,s,d]},b.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return b.d(a,{a}),a},n=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,b.t=function(e,s){if(1&s&&(e=this(e)),8&s)return e;if("object"==typeof e&&e){if(4&s&&e.__esModule)return e;if(16&s&&"function"==typeof e.t

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	dropped
Size (bytes):	63
Entropy (8bit):	4.449633005985324
Encrypted:	false
SSDEEP:	3:CtMfhExlHr/lXYrP:OCP
MD5:	D1C5AA274C0F681D02317D33026E93D2
SHA1:	07CE7DDD50B6C56DC35A08128A161CDD78C08BE4
SHA-256:	563401248387CB3CF47D04E1DDA78508467889CE4EBB80D24A074E0C24A0183C
SHA-512:	5CDC105BA2500B00A8FAA70B89CA62C28F6BEC16B2198452AE408C65C316293E1512731F3EBBF811C83F3251D34C1EB5B6D8F7E1A3DCA6FB6943B8E858FDFB4D
Malicious:	false
Reputation:	low
Preview:	GIF89a.......MML...&&&...!.......,..............w....h!f.n....;

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	9379
Entropy (8bit):	7.947406934677942
Encrypted:	false
SSDEEP:	192:2baMksbymsyp52d1svdcuttPBpc6tzcxeSk5USITJmJzJU:hMkKs8tZpc6tzMXrsNJU
MD5:	8271D501559ACC08BB4719D18ACEAC62
SHA1:	15F98B9711FC1665D7E6E809F199F799B2A10B8B
SHA-256:	ABD815390A7D75FD81E228910E3D5CBCA637178ABFB3C016C396601BF2338F74
SHA-512:	2C37210AE86FD1BD0FA1629FABC5FCFD7E0AEEFCC4DDC54DCDF4A79D8079655B36A035BA3B46894E59859ABAA1719949714D59F0C9E7A0FDD984067A4148EB56
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/271590/capsule_184x69.jpg?t=1714055751
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................E..............................................<..........................!.1.."AQ..#2aq.r....$3Rb..B..%C..................................:.........................!1.AQaq...B......"2R...#$3.Sbr.............?.].........M....^.g.....t.....D..X.T..l7^J....7.V.....-.....H..Kl;.@s.+[!6.....t..ND;.&.a.....%KQ.R...8.........../....k.]>gh.A..o^k0..[N.Jq.b...c.!N(.y....5..v..i......Djk.l'F.....UIQB.R.$.}.H.m..#U.q.!...bz.Pc.!...)...`~...L..n.j...^.I1.._.=V.]..T`F........K,.{y.. ..' `....#..Xu.O.....W~..>../O*.......jJeS..y.!JJ.$.....}..Q...T8.W...-..T.B.......i...4.W%.d..ol..Q....r.....5/..t...K.rY...D..SFK...A.M.]..H.P..Y82C..uR)..Nxsj>....j1....I....<.%i<.......l..L........H.......].L.:.J....SKW..R8.w....$...s..s.c.......P..U..!......O.9.pp.c..y,....^.@.`....v.-Qa.:..U.....] zx..}s.%..nM...v

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	6978
Entropy (8bit):	7.924405937601194
Encrypted:	false
SSDEEP:	96:4SaayeYG1vyw0hGTyH4xf9RnIWZx4jLIUupGysT0CjpNkB3qkJayduwbHxFS/:4SqigtHqCep5sICFNkIk8yduyHxFS/
MD5:	484630BD463AE1E70A7561545DB82D61
SHA1:	6DD65027A0B4EC9B3E42B669417EEF6C419C6454
SHA-256:	68C18E956504A495656D12FAEA016665CC9E59960976C27E2704048E220887E3
SHA-512:	C58087061FB622F002C1BE2CA10CB4365B784CCD37D5512D9747C20D014189CA83CAECDE455993E00EEE58DD61801B66AF89DF405E3A40F0DCF8866126043E19
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/394360/capsule_184x69.jpg?t=1715685474
Preview:	......JFIF.............C....................................................................C.......................................................................E.............................................?..........................!.1..AQ."a2Bq....#..$3br.....7Rg...................................5......................!...1AQaq.."2.....$..br.#34..............?..$.H.>.}u.\..[&.w.l...R...zF......6/yB.%.I\e.).....d.F.....I.' .mD9ZX..E-....F....X..2]..R>..O..m.Aj.J.ip..l.?!...a<..8p.....m.m..xz.hT....C9...I...I.^3..% wWl.gm{9V..`W...6..[....sS.R.......Ooc.9....]...rA=...i.p...~....=..$.W.`H..IV.>...b....zl......s...e...._t._9..t@...^....V.iQk....O.1V%Y..'IG...$.v.R.s.i.X....8.V.....I...O..L..FS.=.=.J.Q.....W.d..8.5C.V..s...._X..;......QF.Kv...PP.\x...:...%a.$...J.y.....`.\K.r...]z.)q.c.ae$u..N@8.$c..Z..pBp.7 ..'w...A.-)* "j8.....Y4.}...l.6......'.....gY..%..K..l..y)qiAt...@.=q.1}.......Y....mG.Z4W.X``.../<.`O.7p0.5S...'...&(..P....m-.E.

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	78350
Entropy (8bit):	7.983737487882643
Encrypted:	false
SSDEEP:	1536:1bkL039wBgZErD5fOy06WnaugyOoKaIqqP48W6/8fK7c3lq9ArCB2bDiey:dk7BtD526WnaurdKaLr8W60C9ACBK3y
MD5:	C95EDB1ADF2E60DE04484F7987B5753B
SHA1:	D6EE3A7331450EB3C37B95723FB9B4A0A4871890
SHA-256:	8F79DA18B5CD943A4451A06A965D9C387F703B3ED7B5843DCFC77B806C020F40
SHA-512:	F2F0CD2F7C245A8B4C022D83B2A2FF75FD8751B5500CB028385BED83A73199A23E5F4A625CFBFF85097B9F3C53B3899D56CE9EF53C431F4A0F7BDB4BB9A19728
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/730/ss_d830cfd0550fbb64d80e803e93c929c3abb02056.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................R.........................!.1A.."Qaq.2..B....#Rb..3r..$...4CSs..6ct...%&5...7Dd...................................;........................!1A.Q."a.2q...#BR...3....Cb.$4r..............?..3G(O..0.8.P.Y.....t.....$..C....7.P.?\b...0....pn.P1....J..a.M...K,._.L.Z...+/..q$D...\|M.L..x...0+..._.3..F1.0..ez.$......."..q"U.mc}...).U^..$...<X.,...].)X....e..Q...<...9c!.N.3...}Z..+V..".G.J..&..........y..t.0U@.~...h..../.hH.G...k.8....3...ka..E./...`.....A....)S^.F..._.#{..Zx..M36w/NVI... n...8..jE..B.#!.......&c %I;.0W.}....Cs....eC)...{.y.Q.@i > lV...T. .......0.!..U......E%ts.E..$>/#\|Z3...J....[.-.<MV...ap5].....!.S-.Ty}_..i!..%..H.\|t. ..)..9.Jv....0..n9?..H.g....J...A......>....?.-.3..!..H#u"..u4.6.".m.>......g.......Q.Q...t....j.....E.....y_.....

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	8875
Entropy (8bit):	7.943430297823669
Encrypted:	false
SSDEEP:	192:LO6718JR9g1sH0WW0YEWnsTfP8rDoGG8Ov+jsGRNbp:VZ8tqWW07Wnsb8YGhOWjBjp
MD5:	35A0572EEB5B02C3F04C9E42920956E6
SHA1:	2CAF295055F1122B24148F4D9C7E8BB7584029A9
SHA-256:	DBBD1104E8A928CB11588858EBB0724E03CC5979C0E0002C44249411CBA4B511
SHA-512:	6205AF2268470050FB99D553F8A99D045C46591AB373B727ADD6C73E3DD631AC14191F26F6F263895A9697B18958B031BF8228E41C294AD5EBB5D7882C3C7D43
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/427410/capsule_184x69.jpg?t=1714694871
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@...........................!.1A.Q."a.#2Bq.R....3C..%bs.(4Dr.....................................:.......................!..1AQ.aq.".....2.....#3Bbr...RS.............?...M..se!..0j2...)..}..YJd.{. ..x=...../\|.FF..9.0K....UI..,2.j[B-..."..._..8..-..Nv..1.......X${..`"o.;....X...N.T&.O.%..e:...X.Q.7#m..u.lI.&.E.ip..X.....:..s...q.Z..'..,>d.M.\|+.w<.`...5.........hS....AK.>.....{X{....;l.m.....TIm<T.Jmm.$.{....LE..".o...K:e=..c2..uim...Q6.../{.m.=....XZn.f?N:.@...)5...D{........e..p......:..K..g.....d...IJ.G.I.<.^.S....f!D....&.Z.......s....EWW.b..9.....1...^..u.?lEr.#l\....T....O.={w8...'.D[.yJ...<so#...w...H.dH.$@...`p...7...Al.OoUI.....8.....m9........Ev76...BW.jqd.<....._E.....,..;c.?..H.....I.....8.ej...\|.E.....;3...?..9L..-\\+i.'.)7I...

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	downloaded
Size (bytes):	43198
Entropy (8bit):	7.987893296313363
Encrypted:	false
SSDEEP:	768:ggLhbqLGpJarb4SzY09W0H9Vzm2i8+PREpC42EMP3SGMJbGrHMKqiTJim/w:VeLEJL0H9G8Q/jSGMSHH/im/w
MD5:	B4C4038C4C468E3B780628E17A7C7226
SHA1:	5404945867396C066B7542264C57127DCC7A8DB7
SHA-256:	74FD660D98264D48EFFBC844837D62C20CCD45890B75374DE37C1F6D4DF1AD59
SHA-512:	749449FE9D25BA711C487BD5E5FEB624F8B2DC52B968E84C47FC802C48DBE29FDB9933C4A632B07B7251BE5492B785C04F4EA6290E69698428F35CA13EF3916B
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2479872440761792649/BE4471DE3911AD4445FE37476053ABFD568A728B/?imw=512&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........7..........................................................................!...9"...s.}..A./..QJ..L._D....QJ.0.2....n..9`.m....2X..J]......J>N.$...X..7..f.?...2\|.X..o...o[.]%..XN.j..../....}....G.z..\|?.....a..>..?=..F......[B... g...?:C.......XN..t.d5..R..E9...Y_\|......=.P=.)...&9r.5..+...y6_^.Y.7\|..8.i..........._1.dS.^.....y......$..p.oW............eX.}[a!.M..5.r...Y..........0+.............P\|.m..\.......\.~.!...~..+....$F...()A....4.L.^..`0.K.>.$...6y.\.+.q...z...R...]..J@.5z.=.z..bo.~C....dO"Nq.&@......v.0..9Jc..Q(CU.0..(...tz.C!..}<0.{.W.N....e.....l{j`.5q5...d...]..V.V)Z6..}..BA.........YwRU..?ij.....V..=.u....w..z....k_0.C.......c..E...:V-S@......Q.M^.<...1..O@..G..'66z.B&S...APw\X.,f.$...]....#B#'t..m.~/t...S9...Wi$...........T,.;F&...M..j.,...V.].k.

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	6678
Entropy (8bit):	7.744640711825126
Encrypted:	false
SSDEEP:	192:EB7XGMxZ4YdmQlx2DtcuUzDiRkiNH8rr1IKVeJlWR:e7XGcJqtct3iNcXH0H6
MD5:	1B37526B55B6DB55BBC40E5AD20868F8
SHA1:	3AFD631DDCB1927CFA608643B7A1A8999E748174
SHA-256:	8253502EA63E6205C685CB2AC24325D5EE8563A0904F8D36019874AE0A56007D
SHA-512:	4373690B6691CC94D35BB05AD9711C7975DDB6D47AE819E84E3964AE794862E0C907F3EFCE8E54A9910E8BE88785BA3FA65C1A9B95D3FF764654241A034B3C9B
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2486627206982237380/FDEF7805807494827752F93DD26526DC2F81EE8C/?imw=128&imh=128&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........5....................................................................I.I.U.+B.fl..}h9Y-.mU.$.*.P.Q]Ai.Y....#.....}..uo..].e.Z.........}..?...~.E.,r...la.u.H5...X..mj.H.a2fKX.O...i0..F...=6t#U.Z.!.w..F.kP..ERr2w...@)..S...r......7.L<^....L...$.......c@M.v.Nx.Wg......J(. .

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, progressive, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	5030
Entropy (8bit):	7.883727173429045
Encrypted:	false
SSDEEP:	96:9q20lOHgV7ltQ819rC2RRivAKX1TVeGiwJMYHvAmIFoxx:pelZC4ivJ1IzK3HImIax
MD5:	C18DBF24DC622ACE5338CD853AF58B5F
SHA1:	FA7148E1EC83810A8F3651E9676A2031A2C801E2
SHA-256:	8CDE824773681B69FB259CEE56E1C25F1DB2D58B922C00E6CF2F796F2C1EE44A
SHA-512:	D1C33150CCDB2584CFE8D9FCDDED10DD903E56E8BAE0B76291304523943E9FF982CBE98C9F864EC5F2B4C14B505C1B1774C8F9D7DB56D3130BA2664B1CCEF736
Malicious:	false
Reputation:	low
Preview:	......JFIF.....v.v.................................................................! !,,;...........................................................! !,,;..........."..........9....................................................................................7..Z........F..%.....6_..q.Z.R=.GRe.J.. (z+K...H.vg..$.m.M...........7.....`TM..{n..pn.s.)u...}....-gwE..._.$f.7;....x..K.}...5..\.8....Ln..13..-....;...^q..MEiQ...>M}.;JV.Jjb..G....I.<O.....,n..f~..\..~...9.zn{..P=.B...(..;.)......'.t.h.w...'..^...h....k...06.L@+.p..............&............................!....2P1............U... L@..+ff...N2^zM.8..F.H.q.]..L...wS..H..97br.&H.<.%. .....D..o..Pv,.%..Jr.~9.=..A.h..gN.E.....ES.N..{.c.L.....<........*?Ju.!w.r..\SK......<...d........]7..c.<M0..s91..T.I....~..N.........3.......Ncs.6.....h..b...GG.Zv.h..8.RI..?W..C...v.......T..;...(..&<.z....y..x...4o./..Z..LV..kbi2.ed].$ER&.9...#.ll.1....R.37.G.)R.X.J89...=\|..<...u.3F.j...N.<k".T.bwnT.

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	7621
Entropy (8bit):	7.9417322249485505
Encrypted:	false
SSDEEP:	192:pnKPu69+XrKVkv66zTAvZoj9lVMLF7f6fIho/5KbKiF:R+uK+X+VkvrAvujfV2Nywm8J
MD5:	4FD05E0F68843582BECC9D62FDFC7E65
SHA1:	8C2C5E334AC0777559016A6F0A21E9C48D7F9DF3
SHA-256:	4FB3F956C60899C9337BAD764A9A05BB518718F4348059CD00CD8C65FE7EC430
SHA-512:	B22CC5FAA6E98386CECD48B7CC825FC431F44577D38DBC2317F80EB90F9A1506E00C8032264197AE761D878EAE5A7B0E8E158DACC5168DFAAD8310C2D5837F6A
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1056640/capsule_184x69.jpg?t=1715705326
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@..........................!.1.."AQaq.2B.#...3b...CS......$R....................................9.......................!.1..AQ.aq".......2B.....#R.................?....H...@.-.?...Z.7H.;.tr..k..s...!Ba2...'....TwP....(....6.hFz$. /g ..W........s{..%..Y.@n.g....X.nm....Z. ..=SR.....x......TXXJ.}....M........IT,O...J.....~y...NT.)"PM.;..s..b.`Q9.(R..n....1`.....f.zOk.....(/$.........b.z(......$[..1M.D....,.....t\|UV$.X$..V.8qbT....#.p .IMyq...o4?...'.........!6...@fR.>...".d [j..\|(.;".B.-b.T.a....j.}..!...,r.........F+..De].d...+.l......a....I..\.P.uW.gL.j.4.U...T..(..#....M..<.j.).F...S..pmn.i..eTV..e?M3.X.J..!.#...X.~...0E68AS...P.n...!.K,J-.(R.=..'.3....!VML...Y..w........_\|au..}.q.IU.f[{\...a%...).,#rC.f w#..-....{X.$...{\|..P,l.. .........F...a{..

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	83704
Entropy (8bit):	7.971367759711945
Encrypted:	false
SSDEEP:	1536:C7M3dQK+7Qtv7wiBQQwJowpGzs0OjUtqFn2eBiOz7OzeloVWNJSyJGyj:C7M3+AtEbowKRWUeRTuzeuVWhJGyj
MD5:	7D4DA243FF3464766E1EFA5858E5A0FE
SHA1:	ED52699BEB4C6DF0BE349167B21ECE3AD3FEB546
SHA-256:	38F57A5CD6D284BE09D0048E88D29B46821E4FE84628B384AB7CA9BE667DA934
SHA-512:	11FBFB4D5A279B74BFBB1CBEA1C56E4D5725965FA2C512DE78765ECE630A17382A10FDFAD286AC71EA351C4F8D65FE82C965C62E4ED74D20D8CD7ADA8CDB9706
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................V.........................!.1..AQ"aq.2....#B...3Rb..$r...45Cs....%6DS..u..&7ct....ET..................................:.......................!1.A."Qa.2q.......#...3BR.4r.$5D.............?............zU......0..F.7...........E.JX./..o,.r.....=.x....`..4...+7........pG$..1.. .Ty.e....^W..r.Je.j#C.p2..N...._..!.E.r.E.P......j...=$.T.#.vP.X....}.:...4dt...=..P...).'.2.O. .{..X..........R".)R.....Y.........X'.d....Or....O=Z.3B.....Tp.(...1.F....6t.i...............Q...b.......}.z..]~...<T.+v....o}..GZ..J..K.._.._..Bu.T..ko.r\|.2........W?....7..Y...z%._.....bX.......Z.[....\......8.k2f..}.C3.M...A..:...Kp.ia.H..0v.[?.Mi!(......9e>k..X.%....e.t<.(..2..U.m..Z:'p.e.y....2.w........r..,.xa......E..$.....@.G\.[......m6w....F.JQ.I.\|;..b.x`d..........J..

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 55, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2184
Entropy (8bit):	7.4962331219708025
Encrypted:	false
SSDEEP:	48:yitNn2VQWWJ3erslfUJimlLGNI1MOFz+4zjgN6:T2uWjrslfUJXt1Mt4zg6
MD5:	080C457AF88EF213CF315AF1221F74C2
SHA1:	44C7475D69E1F3D8780B6F638960B670C2C0FA58
SHA-256:	47CCA726B04188AB33A403AC206822B96D6789FE5FF568DDCBD9BA972688F6D4
SHA-512:	A0BC577168B5774085BAB0FD868D0B5D285691B5D7A52796EAB684D892FB47D44AD2495757983D5A13D7658CAE0AA80D8A46D73070301494F3750AADF05D23D0
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/images/apphubs/play_icon80.png
Preview:	.PNG........IHDR...P...7........O....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:863F3845A5C311E1AB34C8DE0133D6B6" xmpMM:DocumentID="xmp.did:863F3846A5C311E1AB34C8DE0133D6B6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:863F3843A5C311E1AB34C8DE0133D6B6" stRef:documentID="xmp.did:863F3844A5C311E1AB34C8DE0133D6B6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.o......IDATx..]H[g..1..{.j.....'4l.Q;X:u.^..D..7^....+..0.p...(...'S.P.#.(l....e2.M.h.&&1..s..gq&59....'z....y./.

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	118736
Entropy (8bit):	6.0569560995718
Encrypted:	false
SSDEEP:	1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9
MD5:	CE6BDA6643B662A41B9FB570BDF72F83
SHA1:	87BCF1D2820B476AAEAEA91DC7F6DBEDD73C1CB8
SHA-256:	0ADF4D5EDBC82D28879FDFAAF7274BA05162FF8CBBDA816D69ED52F1DAE547F6
SHA-512:	8023DA9F9619D34D4E5F7C819A96356485F73FDDCB8ADB452F3CEEFA8C969C16CA78A8C8D02D8E7A213EB9C5BBE5C50745BA7602E0EE2FE36D2742FB3E979C86
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS".j....l..j.GSUB.d....k.....OS/2t..........`cmap.d..........cvt E...........fpgm.6!.........gasp............glyf;9.........Thead.z.;.......6hhea...........$hmtxj4.w...8....locaijV... ....maxp........... name............post.......\|....prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............)........................ .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	7053
Entropy (8bit):	7.211495654944814
Encrypted:	false
SSDEEP:	192:FgmgPrhKGDRYukv1dRWa40jQ4DpHNJ21rYBN8:FMPNPRYnv1m0jdDptJ2xL
MD5:	EC895931C16F8DCBD8D9A0C1AFE08845
SHA1:	143DDC996B670FCE6147D87938000B5E1CAB2C5F
SHA-256:	97F99E57549097C32D5E4A18B9C21F431264EEF9F4D9C55F1281E5422E4BA6FC
SHA-512:	5AAFB810B5E24A4E05CDEAF8CAB5C75E7904AD136CF4687BB5EF1F62CC0C2054A53C2D6864035294B3AA3EDD9D3685C9D4ECAD808E048ACEFFB41671FFCE219E
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/38vMxU9UwZc/0.jpg
Preview:	......JFIF............................."-&$""!-'+%/2553273/5>PB78K:.-EaEKSV[\[2AemdXlPY[W.......%..%W6-6WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\WWWWWWWWWWWWWWWW......h....".......................................@........................!1.AQ."aq..2....BR...#....br..$3...Sc...................................................1!A.............?..................................y....R..@......N6.U..Z...-8.....X)7.Kb........nXd.7Own...p........................................................w..8:W].;.\.H...Z.....;~'J.#..(..y..}G.3J.KIJ.l..R....=..E5.\........F+y...}.l.jN.j9].N.C.........w....RO$.o.S{z..o.\|.r.P.k.....^..$.0....................................................n.a.Z.i.y;yu......g..5.....~e..Jm.7..[n..\|..J1.L.o.~;...MEomu......\p.~...Eu........6.v..g....ck;]...,C.BNQ...mm..}...(O7.f.k...J.....S..7.".W..93fzy..^.Q.)RM....N.\...\.sr....................................................d..c..Z9]F]..k.6S.xn)..R....jYz....8...F.WQ..en..%YfM.W.]}K.!..Rp..%...V[3..E8)..O=...

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	114090
Entropy (8bit):	7.976579332203342
Encrypted:	false
SSDEEP:	3072:8Qgc5Pc2R0Nz0f9rpxaE1HgoJeSLcnVHbm:8QgcS2Rcz0THgokXVbm
MD5:	AED49C09B134C5B273D0F02172D3AE0D
SHA1:	F130152AE127BE5F9DC8427F4C89A9E6A9E71BC5
SHA-256:	556B0B618E7CE655B299A7BF2EC8650870898328ACC0B2BCD9C8F383AD44EE28
SHA-512:	B29ACEBE264CF13F5FD3459F3AC4D097DFC803047785DC387080D99BA2D5D0FF3198AAFB3F4BE5F5C1BEA8ACE492CE51F1339FF3A461609CBF45E5A8FF4A88EC
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1145350/ss_b88cb7b48a86f07a7288bf37141f6558279f9bfc.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................Q.........................!.1..AQ."aq.2..#B..R...$3br....45s....%6St..C...78DT...................................?.......................!.1.AQa."q.......2..#B...3Rbr...$4...5............?...N.$..4.+...iq.@>.h.1.TK..x..%}...f...".H.../...]..28:..C...l.......<...T.......$Zp...TUK;..$..$....G.c...2'. G...?.c.M.Z...I'r.....X...\....g.9E.#..?....<6.A.....!.q....-...7....&..(..%..h.U.......j..Z..}.....<[.I..`.....l......"Bp.Y......}~.].:UX._b[....\2.z.{.Pc...>....?vcv...u.' .c.....RM....@.....x.....T.g&...-..c.kjk..K..y,..._o...5...I.eX...7H.5R.!....a.?..Aj.._......$......FW<....-..N.{g:`...sK.RQ..S.u.e...%....O.x...$..(!.P.J).q.7/..R.`.....HO.V+.....A..B...Q@..&OJ..3c....cFV.DU...<.XN.aq....FP.....n9.4z.\|.J.1)w.!M...q..%.a..H.\.'....?(.".t..#...L,:

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	6655
Entropy (8bit):	7.761968692201283
Encrypted:	false
SSDEEP:	192:4eaObTkwrb1i5YQNxVIJMyh1ngxWgpU8noKB:taOntrb1qY+mJMyrngx3U+1B
MD5:	3F40D6C570E35358D507F5DA783F20D4
SHA1:	F80AFDC4E1EF207B293BF52FCF341E266D0DFD9F
SHA-256:	77F220CBF69CED19160E50ABED1C6A28FC23AD13EB4DCAA1C93AE19C5E9594E9
SHA-512:	86E4882B6A6D32B0417D1BE4212DBA9CC8E01E348F3C1E5250552F6A279083EED6800E29F4A495375434BFB214BE6368ADC9D922A5A79378E656945B91DECF4E
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2521530104084608955/F6BB5DAF342F8DE59DE363966B9FD2CE6B60EB01/?imw=128&imh=128&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true
Preview:	......JFIF.....%.%......ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........7....................................................................}.....;..1.O..k.....kR...xld..Vr#23.\.s..t@..."..d ../.w.T.d.u.7Ia...Ib......6.0Y5...D....$On...u..+.....0Zj.+m*. B..t...;j.20/e.+........5.K..........I.....J.K.r&R,..6.p.ug..l.P.V.K.'V....;...V.....Z..C.

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54516), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	54681
Entropy (8bit):	5.297960129184194
Encrypted:	false
SSDEEP:	1536:+rg62DqfnqoMoFJ+Z/Agh6L9NXCL8AOq0:+rgrVsfAOq0
MD5:	C6B7522A5502124067306833081ABE0E
SHA1:	170CBE41F08FFE0C536D995CC6FF2C22FD8D24F6
SHA-256:	D577DE520F76770D23A775A308F4243614A3B3972D9F0BC226CD55C548E31874
SHA-512:	A8BBCEC96EA2AF263BCF04576D081E3533D6574C008C67BBEB93DB2D43026E614E75B99BDE298B605339CBF148D14CEB475030153DB27AC62510D39C0D258F7A
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~c1dfbefd5.js?contenthash=d2079aedcfe78a98a843
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[4040],{16833:(e,t,s)=>{s.d(t,{Z6:()=>l,p8:()=>_,NO:()=>m,pA:()=>h,yp:()=>u,iP:()=>c});var r=s(47427),i=s(77936),n=s(37563),a=s(4481),o=s(7294);class l extends o.AX{constructor(e,t,s){super(e,null!=t?t:()=>new a.LT),this.m_renderingLanguage=s\|\|(0,i.jM)(n.De.LANGUAGE)}UpdateOverrideLanguage(e){this.m_renderingLanguage=e\|\|(0,i.jM)(n.De.LANGUAGE)}ParseBBCode(e,t,s=!1){let i=0;const n=this.Parse(e,((e,s,...n)=>r.createElement(e,Object.assign(Object.assign({},s),{context:t,language:this.m_renderingLanguage,key:"bbnode_"+i++}),...n)),s);return n.length>1?r.createElement(r.Fragment,null,...n):1==n.length?n[0]:null}}const u=["h1","h2","h3","h4","h5","smalltext","b","u","hr","i","img","strike","spoiler","noparse","url","list","olist","quote","pullquote","

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	517
Entropy (8bit):	4.513978417181636
Encrypted:	false
SSDEEP:	12:trw90ruJlrlDyoEcd7AWVbgthDdYHptmekRHF4TndtiHp:tC0ruJlluoEsEWVgtoO2ndtY
MD5:	C9DD22AF273DE76CE331C16CA162C3CB
SHA1:	1654CC37A3E647C7A4274FAE22A987CE55852D3B
SHA-256:	80DD1F0A38053D83CCB30EF39E0A34DB0C22C47F097D48857DE8321DF50F63B2
SHA-512:	0E4AE92807DF74DCC7B8EB037937528DFF0A4735E37F575DFEFB96A59C89E3AB993016460DC725421291B8167393317A24912857409EE5FE33B3918CC2583B03
Malicious:	false
Reputation:	low
Preview:	<svg width="8" height="13" viewBox="0 0 8 13" fill="none" xmlns="http://www.w3.org/2000/svg">..<path d="M1.58121 12.7508C1.409 12.9121 1.18982 13 0.931507 13C0.414873 13 0 12.6189 0 12.1353C0 11.8935 0.10959 11.6736 0.289629 11.5051L5.76908 6.49267L0.289629 1.49493C0.10959 1.32638 0 1.09921 0 0.864713C0 0.38106 0.414873 0 0.931507 0C1.18982 0 1.409 0.0879369 1.58121 0.249154L7.67123 5.81849C7.89041 6.00902 7.99217 6.24352 8 6.5C8 6.75648 7.89041 6.97632 7.67123 7.17418L1.58121 12.7508Z" fill="white" />..</svg>..

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	517
Entropy (8bit):	4.513978417181636
Encrypted:	false
SSDEEP:	12:trw90ruJlrlDyoEcd7AWVbgthDdYHptmekRHF4TndtiHp:tC0ruJlluoEsEWVgtoO2ndtY
MD5:	C9DD22AF273DE76CE331C16CA162C3CB
SHA1:	1654CC37A3E647C7A4274FAE22A987CE55852D3B
SHA-256:	80DD1F0A38053D83CCB30EF39E0A34DB0C22C47F097D48857DE8321DF50F63B2
SHA-512:	0E4AE92807DF74DCC7B8EB037937528DFF0A4735E37F575DFEFB96A59C89E3AB993016460DC725421291B8167393317A24912857409EE5FE33B3918CC2583B03
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/ResponsiveChevron.svg
Preview:	<svg width="8" height="13" viewBox="0 0 8 13" fill="none" xmlns="http://www.w3.org/2000/svg">..<path d="M1.58121 12.7508C1.409 12.9121 1.18982 13 0.931507 13C0.414873 13 0 12.6189 0 12.1353C0 11.8935 0.10959 11.6736 0.289629 11.5051L5.76908 6.49267L0.289629 1.49493C0.10959 1.32638 0 1.09921 0 0.864713C0 0.38106 0.414873 0 0.931507 0C1.18982 0 1.409 0.0879369 1.58121 0.249154L7.67123 5.81849C7.89041 6.00902 7.99217 6.24352 8 6.5C8 6.75648 7.89041 6.97632 7.67123 7.17418L1.58121 12.7508Z" fill="white" />..</svg>..

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1201321
Entropy (8bit):	5.350701818252423
Encrypted:	false
SSDEEP:	12288:vLQVfUTLFru30N4Hgf2je6NEjPoPa13ejSF2f:vLQV6r+0T+eDoBx
MD5:	393D4B81A5AEE5BA1AD0F35F9D62E7D9
SHA1:	8502B4EE805E73351D7A0D72AB4EC2DF4AE44030
SHA-256:	7535867C3AC307F584ED2A95DB3E627B7666FAAC152CF3AB49CD5187C1730D44
SHA-512:	65A918D70BC87857F405FCE7366DDCE65EBDBEC72306EA59A2845A3071666C5B948C5A9F3F9AF2DC17EE9115D8174B77E29AEE0D3DCBE306189779890043B815
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=OT1LgaWu5boa&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[3250],{80751:(e,t,r)=>{e.exports=r(19862)},24291:(e,t,r)=>{"use strict";var i=r(86435),n=r(36551),a=r(57675),s=r(35597),o=r(3951),l=r(9452),u=r(11197),c=r(34399),d=r(76e3),g=r(6123),m=r(91586);e.exports=function(e){return new Promise((function(t,r){var p,f=e.data,y=e.headers,h=e.responseType;function b(){e.cancelToken&&e.cancelToken.unsubscribe(p),e.signal&&e.signal.removeEventListener("abort",p)}i.isFormData(f)&&i.isStandardBrowserEnv()&&delete y["Content-Type"];var _=new XMLHttpRequest;if(e.auth){var B=e.auth.username\|\|"",w=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";y.Authorization="Basic "+btoa(B+":"+w)}var S=o(e.baseURL,e.url);function v(){if(_){var i="getAllResponseHeaders"in _?l(_.getAllResponseHeaders()):null,a={data:h&&"text"!==h&&"json

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	42338
Entropy (8bit):	7.979013911578064
Encrypted:	false
SSDEEP:	768:oYxy4nEKjhpggQiOjtC6i+PQGvXljmdFtSjZvFHSjhqdxM7OOfiKPDqUcID+C1:oqlEKjMEOjtC6KaXEd+yjsHuPKK1cvC1
MD5:	9B07C2DE27D91268204E7A112C4E8BC2
SHA1:	BAEC7723F7E5CFD08D9A8BD66299165E4A2B8066
SHA-256:	01FCF6D505F65A26FD5795EE8142ABC458B138AE9B5966FB5122584630062FD8
SHA-512:	34FB227AFADC0CC3E63253513A8A0667A8A7AB2D3DD071CB013E2894A4CA9AE39C66CDD5C59A8E55ABB6245F5CF9B94BB17014A55C36E496342B9D584E000338
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................E.........................!.1..AQ."aq.2..#B...Rb...$3r....%C...4DScs.................................A........................!1.AQ.."aq.2..........#B..$3Cr.RS.Db...............?....U!..hB....!..hB....$.P.Q.%J..9.-.....%.V&..jR.J...J.0.9....../-.+.mJBr.C.h.\|...`.$....&.E`..}~...e......?6.%..~..?.y..E#5% .... ..:`..)......\|...#.@.....F.......~.......B)..@n.>`..j.me-1.xLQ..>.c.....M..Y....ii.j.H.....!..Z.[3\r.J2[,......F.)Z[3@......[.D.......{. ....0..ub.j5..l..X..^.3..._.Ve.Z.......U.qF..J...c...[.mVw.....\..F.......Se\...N7.Q../...Ru..I....Jp.~...._..OT....f........j.@./.[./OR.~..J...gPGW<...0..c..^....-.o.m.....U.%S...9P{..A.....31.$.;....H...y......]U.n....x..4..7x.}6`.FF./..Z...c.......Qv.(j..F.. . a....tf...f.)l..p2.H......:.R....n

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	60366
Entropy (8bit):	7.981066679773402
Encrypted:	false
SSDEEP:	1536:h4MGqvWaVwQg0DGYzMJ8qxht/wOa0gghmFMcFj1WcL:ZvW8+LJprTaXgh+j1tL
MD5:	1AACED2901B2B8334BB5C13C6F92E1BE
SHA1:	62C4E30554D29BE14D70B044522327A9AD6C4B18
SHA-256:	9C4288518B113E9F44C4F1B7EA2A07D7C154DF4DD5BB40017DF8E64989408224
SHA-512:	A779FC54EB0CC8F260C321647F15AE7284954A3AA476E7FAEAA8293BDBB71D97EC5095189A219E7DBD98AECC22B8C3237E80C2D3DA8F9F474E007A16F8939C25
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/281990/ss_f844372cc220e3858aa17205e9fec0ae79a4e665.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X...........................................W........................!..1.AQa.."2q.......#BRr..3b..CST..$456Dcs....t.Ed.....%Ueu..................................>........................!1.AQaq..."2......RB.#3S..4Cbr.$................?.....i......]K.(.N..%{.H.w.q........+....~g....=^.7.m3J.M....^>gxW.E!.`<..o...(..t.J.M.H.t..dW...+..pH.s..W.R...[.=.&..&............+@&....Z.]...L.nI..p...X..n....v:....hC.......o/m...V.Y..y....c.:.x...O..i.m......j..K..E..Q9K.b...........^JW..V4.N.T.[V.^..N[].M#W...."......_d.W.\|.H......-.;...5;]r.;.Ql..W..........m...'.R../....r:..5p....?..U..:......0.s..'<.>....)..i.......5QI...x......Q.L^\....O0.......ZT!.0r.9.MI../...O.+.o.i.m9DA....c.P....c.ry. ....x.+O]m......z8.P...pQij.=...m..,.8..{'...:...{>.m)..qq.r....ke^.1...zu...).R.R2.w..?#...U:p.M

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	6638
Entropy (8bit):	7.919394707373773
Encrypted:	false
SSDEEP:	192:L+tt0TeA9ne1+risu4gHyGxAQ1kL7ONeGAYbbosa8:otRAsLsuxAQ87YpASbosd
MD5:	05C55234041E6EAB2A8C9527A6505B58
SHA1:	EE4CF40259C4268BE3C8DED4C6BEDE2A5352C0A7
SHA-256:	9E81D0814B82A650AB8A04D0BE07EFF23D4C77529BFBD5D12158DB23A7C9C244
SHA-512:	904EC732FA9C7C336F9B8DCBC73DDF2429623E1837C6D6505D851937945D3E4A1ABD215E89C38DE83B5ECD0E895E6C9286DDDF239DA1BE145B6406AA9541B8FC
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1449850/capsule_184x69.jpg?t=1715145592
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................8.........................!..1.A."2Qa.#B.q..R....$%Cbr.................................6......................!..1..A.Q."2a.#q.B......3Rb...............?.....^.Nd>.....~...R.....m..E..y...B.d....f.....g...k).d.....d.0........a,......'.0.U..J-.[.R&.#..}EW\.Yc......i..v.3.......s.8.'...S.../.p......2.GR\wg<..p21..G...z.>...`v...~..^..V.]..P./b...-l...c:.+.<I.....j.J..y...U.......... j5..F....).9:-Z.Q..C..A..<]}..E...i%M..E..Gi..9p..N..^5.;.P..'.y+.z.u.k.....q...C.z[U.u.4...5`....q..r..././..J..g7.eD....4..B.f\.J...P.......Z.-nG...'\..............rWp..r<.8$..-.t.._J.....V.8...X.c...~V...Ph..r....._.O8...]--3......6b..... ..z.$.0&s.J8=D_......>.^m.U.j.KN....b{...M..AW.u......Q.f. .\|...-.._.h.d.]O.....}..^.q"...m...D...q.[.B*...F.Yk#l'a

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	28716
Entropy (8bit):	5.265764413097818
Encrypted:	false
SSDEEP:	768:inyGc//q/+C4JhJJBhDIEyduyESfT2TqhAuzoayAFYzqE4kI:9Xa
MD5:	55930734CC6FF3D626CE432EAD66BECA
SHA1:	D1CEA2D0AB6FC3A6947C643D04B45A1BB0D2CFBC
SHA-256:	87E6DC07FBAA78BADDA6F59EB39A817C6CAA1107417D851D33B3C04D012A282D
SHA-512:	29C44FC52339E20F1C6C1D6827778F5619D272356CB6A37AABF43DAFC02922BFE3EB6705ED76AE7B55D9063BF9295901FF41156F8DFE26D5FF8A6E7FA1CDA2B3
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/css/apphub.css?v=VZMHNMxv89Ym&l=english&_cdn=cloudflare
Preview:	..body..{.. background: #1b2838;.. color: #acb2b8;..}....center..{....}../* admin /...apphub_NormallyHiddenBanner..{...max-width: 918px;...margin: 0px auto;...margin-top: 10px;...padding: 15px;...background-color: #3a3a3a;...border: 1px solid #529cde;...font-size: 1.125em;...color: #ffffff;...text-align: left;....}..../ header */...apphub_HeaderTop..{...position: relative;...margin: 0 auto;...text-align: left;...padding-top: 12px;..}.........apphub_background..{...background-position: center top;...background-attachment: fixed;...background-repeat: no-repeat;...background-size: cover;..}.......apphub_HeaderTop.workshop..{...background-image:url('https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/bg_workshop_header.png?v=3');..}...BasicUI.gpnav_active .apphub_HeaderTop.workshop..{...background-image: none;..}.....apphub_HeaderStandardTop..{...position: relative;...margin: 0px auto;...text-align: left;...padding-top: 7px;...min-height: 46px;...background-im

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 1440x2560, components 3
Category:	downloaded
Size (bytes):	575568
Entropy (8bit):	7.991159007756189
Encrypted:	true
SSDEEP:	12288:/oZ1OLBqQaJhk2D5bQzrakLA+i7LP6o7NUU6uRaMP3qOu:/M0BqQaJhdD5bQ/cZ7TyJqag+
MD5:	4791595B9A9F8A79676C82F30FEAED1D
SHA1:	8E230B9E67E8ABD6B592967CCF7034B1145393DA
SHA-256:	FBF0E5CE9C7246082D32C8EA9DFC92605D7BE498B24536B71706772CE426F9FF
SHA-512:	0628C9DF983FD6AA4DB9208CB7DC7E7C464187ADF52D6D0D0678B0D0E62CFD758D2B80A535FA6EA15F0BB0087E114EB3E6FD2434F493F4231EE46503FE9C9DF0
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2458480342533257560/AAEBD0FA88712EC3110E52BEC02A2F592F4F5FA8/?imw=1920&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.....%.%.................................................................! !,,;...........................................................! !,,;..........."..........9.............................................................................[h...@..".\..$.8.%..:.....=._...?L..N....F.......]..L.Y.j..J..v....Vf...Y&..$....Y...a.@.f.(z...a.N......+.#@..$..I;%......7.P.goy/;...i.K...r..,.CdM4!..lh...\|.x.f.I..I$.I$.I$.I$..s..i..E.r...d..$d.I$.I$.{...[....~..GC?..............b.....J.'y.,@...+.Gg.. ......HR.FN.$.I9$...g$.;$..MprL..MPrL.I$$.\.K.I ....2j.Cj..;4+.\.&.Jg \\|: .n<@...a..N.E...~..?..l:Wk~.._0..V....X.. ...../.........;.H.C..)R...h.z..,u...O.s.h............>.&.M#[T.;$......<66.G..t.N$W............NT.\.cB....$.I$.I$.I$.vI$.I.$....H.9#$.I$.I$.I'....o...O..\|.....x.X:)........=..3....D.y%.0.).k.G.hXz.G.....GN.C....I$.I$.I$.K..k.I .$.T.I$.I$.I$.I5...;a.+LR<.2.*.p..Y$..#.;tb........O...s{.g....8&.....mm.QC.........".{h'^.`.>B....-IuNJ.f.

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	42771
Entropy (8bit):	7.972718464873951
Encrypted:	false
SSDEEP:	768:2Ev6MC6IM+KCXI1t6gdkzkTPAjz+Uy2KTLXf39Cx7/a4xOA9p403FBGYPKRwWbmh:0MCpYNdkeoOUBIT967/RxRPGYPswKmM6
MD5:	67E5503CC56FC212160D70D1B4BD6DF2
SHA1:	465F1AFF2AC41D8855B6C75C8FF9CEEDF37F3828
SHA-256:	283CE465A4B9EB377655084D9DDBA2A8603D007D2E79F8C54B19E83621F0CEA8
SHA-512:	34E22311D7C0F1E92C1C8FC154EFF7564827CAFA3CDA578C59C31EC4ADACC1B414932AC07B9C0546ECC24F2EF199750D434BE530AC0BB22FBB5E4E06B170ADD3
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/lqj9G6oisic/0.jpg
Preview:	......JFIF......................................................................................................................................................h....".........................................O......................!...1A.."Qa.2q...#B....R...3br..U.......Ss.$C....4T....................................3........................!1.A."Qa.q...2.....#B...R............?...(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".w.............SEE..y.=....Q.=....QE..:).......G......E.j.....{y.....sy.....5..y.9....WV.[...Lu..5........!b`.....a.=....QE...tS....??....??.(...O?g.....J?g.....J(..gE=.5....Pxky.....5..y.=....Q.9....QE..:)...??....c..(..A1..~.o1...~.o1...QF...O.f.....J..sy.....a3....o1.....m..(..A0...d7..'..4...AYf.$.l@..Y...AEQRZ.......0LJ..c..O.cy......cE>..

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2493
Entropy (8bit):	5.242722476429439
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR32nk5kSR32nkywR32nktStR32nkFXR32nkRCR32nk50woR32nkP:ip1p6eGdekZdw/+2AIw
MD5:	E3A0969B028DEA66549CC6C61D97D66A
SHA1:	6B815BA3299A4A0B574B8444658C67C80E37C05A
SHA-256:	E22307BF09C5484500209EDB91C734A92962194323EE4D9C81BEDA49A0DB5D81
SHA-512:	9DBBF7C3200B8158D9B9149623DD7BB8EC4E3DFC3B677E5AB4FC85CC22836EEA14600210A2DC3874E0492CDD14F55D9FA716034F3D0A806C4BBFE5E1E1AA390D
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://gtm.you1.cn/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://gtm.you1.cn/public/shared/fonts/MotivaSans-Light.ttf?v=4.015') format('truetype');...font-wei

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	345842
Entropy (8bit):	7.996232738283067
Encrypted:	true
SSDEEP:	6144:Aj5+Ylai/nRLAWucNXbK+KYK4iVI37uufMST/J3VTE1cPT:etiWuwdeI373f9T/4m
MD5:	14CE0FE63A4A415302040FD5F18F9EA1
SHA1:	3F72CA238CD5BC66405B38B283C7F5893DB739B0
SHA-256:	48694073968844EA5CCA51438FE00BF8385FCB64F0E7AEDEADF4870CEFA62905
SHA-512:	7295A8E6696E9C782AA9589A4EE14D33E1F07A4597691E5C8E4150C3A81922FBEC2821E54B094409097D4B1137F184C51E0499ADA05724FB6278A64D853D3ECB
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2447221343464701634/3F72CA238CD5BC66405B38B283C7F5893DB739B0/
Preview:	.PNG........IHDR..............x......pHYs...............F.IDATx.\|.Y.e...}.....s..U."Y..~...[..F..$@.^..(@.... .Bk [$.EV.Yu.73#2"..Z.......N"#N..w.>...\..?..TE...@....!.HC[.....u.T:.-..:W..H.;.P4{..................@..X...]....].....U M.<?.g7..S ....r........cF...P.w.....uZ%.......)D%h.i..f>.-.ks6..}.......>...w...Dm,j.S...5.J..Q.G.wP`..T'......:...b..Y!....t....y.....9...j#.....P.h..N.........iS<..~.....Wo...#.IW...pyx....3..ulX..e.<...e6<h.6<.`..Y.h....g.>=.<^..N.G....<..K..m.@...hS1.l...u..L`..Hs=k.T0....P....E...........N......1g...W..9....x....my....>f.9..N...}.o..=..r..n@'8$Q@..[...M..&.....m.w..:..H.W.m....3Mp.S..N.\|.....>.....Y.y.Y~.i.i..B..I.Z.:?up...2'Q@+rM.X..)~..F.).;.U.=e;.k..Fw...S.%..S..E&._&'..@(b'e..-8J...+ .,W/...1.v"...m.......Tb..7.....!?1.~x...s.....\|..K.8.4..H7C.U..P....-....1...SK.....sc`.0c7U..B.jC..@...`..\|.?\|?7~...B..&.\...W\.7.1...k(...j2i.;.Y.....VA.....0..4.$CK. ....L.B..<).U...T*..O@.9ht.T....uTu....t...

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	14771
Entropy (8bit):	5.14316705081015
Encrypted:	false
SSDEEP:	384:uHJ06ecDuQIz06yxgVdjt9fXZC8tCg3+1y:+J06XDuF06yxEt9FtC4cy
MD5:	33722FDF29200BE7A00049B96942D98C
SHA1:	CE35445EFA796B2A55FD9DA68D9300E7ADDA4BFF
SHA-256:	75778C00D3D38631975A854E1166D9896CAC95E08C3C5B92A737143EBB5345BB
SHA-512:	AA5BA2C7DBE4656D9A2F5DEDC448FBDAC5CF9FAE1DE00A4A686BFF1E02CB27D1268343B3601C9911EFAD68F4D8977E0A5F961BA6B97888F100C4ED9446D4640A
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/javascript/user_reviews.js?v=LRs2cUK5D3j7&l=english&_cdn=cloudflare
Preview:	..function UserReview_Award( bLoggedIn, loginURL, recommendationID, callbackFunc, selectedAward )..{...if ( bLoggedIn )...{....fnLoyalty_ShowAwardModal( recommendationID, 1, callbackFunc, undefined, selectedAward );...}...else...{....var dialog = ShowConfirmDialog( 'Error', 'You must be logged in to perform that action.', 'Sign In' );....dialog.done( function() {.....top.location.href = loginURL;....} );...}..}....function UserReview_ShowMoreAwards( elem )..{...elem = $J( elem );...var container = elem.closest( ".review_award_ctn" );...container.addClass( "show_all_awards" );..}....function UserReview_Rate( recommendationID, bRateUp, baseURL, callback )..{...$J.post( baseURL + '/userreviews/rate/' + recommendationID,{......'rateup' : bRateUp,......'sessionid' : g_sessionID...}).done( function( results ) {....if ( results.success == 1 )....{.....callback( results );....}....else if ( results.success == 21 )....{.....ShowAlertDialog( 'Error', 'You must be logged in to perform that action

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	40410
Entropy (8bit):	7.967893497377233
Encrypted:	false
SSDEEP:	768:49qmI+Znlwx1IOf4u6yY8Gp6c7Y9hWIJIFWw+0U8GHULP8OqJXgr5P:Lz+Zlwx1Xf47XoIF+5P69qO
MD5:	0817BB72AE1BE3FF5E5CC710D3453677
SHA1:	19FF2C79A3E783B219E7DDE019D5AE68A81FCF15
SHA-256:	B282FF900CB1D0AD7814A7D21E76DB133C143A1DE18254644F50D9200A00AE77
SHA-512:	ED963EC30C36D9727208B7742DCC2B0E4218541D288E1B34B802161BBA78FB1B86DE629C6395FD9852AF0700240245AFAA041128D58545ABAF681316E69D2AEB
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/subs/94174/header_ratio.jpg?t=1476893662
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................................................................O.........................!..1.A."Qa.2q..#B...R.3....$CSbr.%....Ecds....4t....................................<.......................!.1AQ.....q."BRa...2..$3S....#.Cbr.............?..]..}AB.}..H.9..@."u..`..c.#.r......O...A.....Z..3.....@..-.N..2.~....K,j......?..@...T........E...2.#9.............cr{>c.#@..lt.R%0(.......?.a...P"...T.'.;..H....T.._BbO..r.....=.......-..D.,ZEY._.7..f........+i.'...IU.....Ow...s.o..0....#..n....%cZ...x.62@....N......L'f..[.8...8..j..-kRGL.=0..y.8.AD....w)....u#..j..>.@...<..:..<..'U..G9-...7.....G..)..{s.BSQ.+'r09r.).....T. #.rO..0.MG........1....1..,..N[..q.!..c..a\|.w......@.......Wd[k...j...P.......N...9.'.[.u%.".jk....JV..E.AY. :.p..x.>x...&w...6...Sm.L...J....w............1..u ]}.....\....n7..bu....w..+..)

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	11504
Entropy (8bit):	7.930413068890721
Encrypted:	false
SSDEEP:	192:4gloX60QiQJ3OKHTCw3rL6mN9yNzirTVS2LuyVlRt1W7D3T4AVJNn4cgas6:4L9+3n7LrQNePvLuKp12X3n3gas6
MD5:	66AAA7AC03A4A6D25FACC44DDF72B3EC
SHA1:	2B5B663FEB0DAC9960E9868B066FE5B5B4128BDD
SHA-256:	1AF2C556FB935CB69B720824F5A521D8ED61533FA5752EC8241898B39C746611
SHA-512:	C69BBFA93E17E0581009C188B68E4D9973BB0915DEBF100E7EFE320121F907DF20030C697B1BE28E42351CEC955E23C866A27C0C83DE05E1B6E2BE43DB95649E
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1847150/capsule_184x69.jpg?t=1715747566
Preview:	......JFIF.............C....................................................................C.......................................................................E.............................................;..........................!..1."A.Q.2aq..#B...3CRr......................................9.........................!1AQa.q....."2...#R..B..b.34r.............?...(..mC.Y>.>:'.Z.....A....%M......N...r.A.D.2......:.$.y...j..D....x....b....\....u..!..y)....H>G...h...T.)HLN...Z.@.!.s..W...... y....<.Kr..)p.\|hZ..3.Zj;..$p...XW..x..^.M...+...0fR..Nc....I.0.n+.. .......2R\|.\|..s......P.i.T...<.9............P.........\|2.Rj.h...`...ze.{......re...9.F...L..s...)...r.n._...>a.o.b..h.....].h.......l.N.....rPO...(.&.jT.&@.....Q.I...vX...QH.RK.H...W[V\.<...e...}B...D.V..kU.:..B;.n..$..[..?'K.i.1..Om....EG.4+U..v.=...."$&.N..(...c,#c=.i..7.\|.l ..c.$...SeB$Y.J.-...%....K..~.}MZ-..x......UUm~~U.\|%.[irR.zj^Hq......m*....'.,...iHj..411O-=.E....F.4...}W..YBb.."LV...

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 616x353, components 3
Category:	downloaded
Size (bytes):	45842
Entropy (8bit):	7.9803879959526345
Encrypted:	false
SSDEEP:	768:YU+x05uVE1DYEw7EusacXLWH8tEd/pez27T7nEef8+0hVm:Nk05lqxM7WHqEdxez27vW+0hk
MD5:	AA1DC134917F20D99ADAEAB6859911B3
SHA1:	38E3CB0C6757B28EADFDD923F1D32F55EFD62DF1
SHA-256:	E3C844561D69412AEEB78E5F3E4DE61B7FE78C494CA09268E8C7CBA1A2E21A89
SHA-512:	AC91141C64DA4F728399B42F13C5CFA1117ADCCE0A95581D1F9A1B7935E9528A2C5900270612AE9C2367AADDD067C9DD1BD49E8482CCEECCE356FDC2A4B8CC3E
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/281990/capsule_616x353.jpg?t=1715759591
Preview:	......JFIF.............C....................................................................C.......................................................................a.h............................................e........................!1.AQ..."a.2q...B....#R..$3br....%Cs..&45cd..........67ftu.....'(DEGSTUV....................................6.....................!..1AQ..2aq."3.#$4r...BRb.%5C..............?..P..;....C.L...".....G..U.S....9ISp}A.H....K"...........@-m.Sn.....TF/s}..N..MyY.c.".'...r.:.W...H......2.^..V..T.b....aB...i.J..t.SN .i.....%..a......eT...v..@....u...Z[.....6....l0S..xa..;L.5i.....=..7L..&.i 2,...j...Z..3....].#).........1b..!..4.......R.........%r$..#?....})...p.c.r).#...\|..X@%...7by.s."..Y.I...../........b.N.sNj'."...nH...<y"W....X..2@.3F&Ymo:..G....... ...r.\0B..{..w...s..\|n....K.xkqh...8L.#......Q~....F{....=jvr.A.v..l.8~.v_...5...4.cYXf.(....D..a@._R..}.t.#.dF..$........5F6.....x......lh.uW....&;...>.imRl..BI6..)vw.#\.$f'.7....

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	81245
Entropy (8bit):	7.985763195495334
Encrypted:	false
SSDEEP:	1536:nGroG2QEwO5QFp5tu5KAl8N2xZudpPup1U7kDmtW8h+3m9uGWZ:nyxyKAluQW9rymtVICha
MD5:	33772E90810294C755B6C1D31CE4E092
SHA1:	55A8D65CC804B86231D2387EF783C144315EEB4A
SHA-256:	7218F2E5D5D8FD538461CB4160F5994A0FA95CA9FA1A619CFBA53A289AD24EAC
SHA-512:	CE9D1B8E7DE459E4513AEA90EAB64E389D1CD625AEE21F352BB55A5F5E8EF19BDF9AE8182B757F8A9FA99541A71527B6EB7CAD2F44CA0E80C5EDEF43A9443B7A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................R.........................!.1A.."Qaq.2..B....#Rr..3b...4$Cs....56Sc..Tt....%DE....................................?........................!1.AQ.a"q..2......#...3BR..br$S.%4CT.............?........,);...Iz,=p.%(..I`u.L.k.\$.q/.....+...........n5...-.KV!.#I.^.8...".p.,..\|....L........1......s.........]........Pg...{.u......=n..<...+Y{B....U.w.l......4........U.LjH....~.A2.......L.5Ws.R.Rm`0P.........B.RT....(..r>.P.......+.S@.5%..X..-.O[.>.[.Tkd+..SR..u....7..s..q{..7 ^...F..TEE..o."Z..(.h.}...V..VL.5..(..-1.,L.w7.b.\Ch2D..\.....j........:.......... ..k..4...m.\|.%..mNY...0..N...'P..yyZ.9....g..]..7........AiE.@.R]i.G..8c....E..O_....&.V..2...5R.. m..!.G.9...c.0.......y ....A6....u....ZrJ.E.p..5c.......R..^C.@..$....%..$......H.K.B..H@....lgd.r..

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	404
Entropy (8bit):	5.299448197741661
Encrypted:	false
SSDEEP:	12:KXrjK0Tpmea/qUc1deqeAEJ1sJVTtrQ44rRO44bdo:+Ub/47d1d3t8robe
MD5:	D47786B8B8BDA3A8210D7DF0E47A6B8D
SHA1:	86D1237B5A3AFC96DE83D46EC9628BF2F16D0D4C
SHA-256:	B5FC2468C0AD062FDCC0DA0449927FDFFD7546163A499598E2817D669A3D90FF
SHA-512:	F60A50E0AA1B99D7B66C380102B0D5BB1150EE1D0CB5B806B39A10B3867196939AEE126F2D18C8A87CB07B6799EF3DC93CB822A3D36B78062D1C1B0E919C6EFB
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/communityawardsapp.js?contenthash=afc3d1cf46d793a7e76b
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[238],{97953:(e,n,t)=>{t.r(n),t.d(n,{default:()=>c});var u=t(47427),l=t(81030);function c(e){return u.createElement("div",null,u.createElement(l.ZP,null))}}}]);

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10476), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	18020
Entropy (8bit):	5.933961204200808
Encrypted:	false
SSDEEP:	384:GcLA6fLdGj0M2dYEuoCHjvQeys1wrJuDomJWyCkKmsYXomYs/mrwjHc:DLA6fLYj0M2dYEuoCHjvQev+DR
MD5:	31869693D352D644E6F5EC47A6FBDE6B
SHA1:	89DBB3CC6AFB83288D55A2F19907F7791BA7A06F
SHA-256:	32FE829A2100907418AA0C1339794071D5C9FFD1DE8117E4E519C0628EB7E082
SHA-512:	CF2B119A5BBA560C1194837310353C9C61A8A8102D5A26805CCA2EEF61A3807F9609E8CC9B512D2AF2C9EE778FCCF1B826780A789C6701462D02D31D347661C4
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/applications/community/communityawardsapp.css?contenthash=9697f81cbeeb8cd9b3dc
Preview:	............_3Z36hMlC0g5rhADc86JeV8{display:flex;flex-direction:column;margin:0}._3Z36hMlC0g5rhADc86JeV8.kwzRJNhtPiQO0D4Wn0PLU{animation-name:_2iT5lTDKhbxllUncFnJhS0}._3Z36hMlC0g5rhADc86JeV8.kwzRJNhtPiQO0D4Wn0PLU *{animation-name:_2iT5lTDKhbxllUncFnJhS0 !important;stroke-dasharray:initial !important;stroke-dashoffset:initial !important;stroke-width:5px !important;opacity:1 !important}._3Z36hMlC0g5rhADc86JeV8.kwzRJNhtPiQO0D4Wn0PLU ._3-sjxBwrq1aRP-xn0Pwx37 path{stroke-width:0 !important}._3Z36hMlC0g5rhADc86JeV8.M4pF_ij_g5aN0m2FqZc7u{flex-direction:row}._3Z36hMlC0g5rhADc86JeV8 ._7MdwTzlZhzNS1NzYBn7Sk,._3Z36hMlC0g5rhADc86JeV8 .SVGIcon_Throbber,._3Z36hMlC0g5rhADc86JeV8 .SVGIcon_Throbber path{width:100%;height:100%;position:relative}._3Z36hMlC0g5rhADc86JeV8 ._7MdwTzlZhzNS1NzYBn7Sk{align-self:center;margin:0px;width:100%;height:100%}._3Z36hMlC0g5rhADc86JeV8._29-XTCJVnFYwvPS6oJ6liL ._7MdwTzlZhzNS1NzYBn7Sk{width:32px;height:32px}._3Z36hMlC0g5rhADc86JeV8._1yqSoIPxWwEa9VRtAQdhdy ._7MdwTzlZhzNS1Nz

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	50133
Entropy (8bit):	7.965114015650832
Encrypted:	false
SSDEEP:	768:eKMI4yqxd2etzGgiXfkCHXhve4TGhmdVa9inG6MKYvCBS7R5fiKwZiapeSOnKEY:DMjtSLXcIXh7Van6MHRhxEFEKEY
MD5:	FE5CF840033DD55E6B055AC77BDBB73D
SHA1:	62D98D4546A07A97F3EBED60BF09AB92A6A2F3AC
SHA-256:	CF316316D92320EAF0CDCECC80A197276D52A2B1F818ECE9EEF87D06E88A5FA5
SHA-512:	A2FDF67ADCEF94D43FE5665E04AE8FEAFDE6377D48398716A0F8BDC901F65F0CF2778A29CA349BB5DC128F0394F524611D884E3D68263CF4E878942901965B20
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2668080/ss_fe0f704abb30337d15a509b7a8a5a6f0e6bc9c46.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................U..........................!1.AQ."aq.2......#BR..br.$3CS.....45cs....%DEt...&T.6F...................................6.......................!1.AQ.a."2q....#R....3B..b.C.............?......<.{B.h.p.Q8G8.2'...XdT...aSQ#.(.-5Eu...G...:ds.B.}d..(X.P&..b..<.,A.'..b}'......u++6H=..B.qZh....S.W.F.\|.......e8......E.%....T.&....'....l...g..Qfi..)...8.....If.u..`..X....#.).K.[...%..n...d......S.F-.5..=u..3G..T..i/.cO............Q.q..WYq..h .0c4m2.....+B.CF..l...&x...d."...<z...Vh...YG....1...R.q..6.2.V.D....T...1T\|..1.g&\2.w:...GK+`UJ!...$..-"[$.MM.3..&.(..G..M...Y.iD..Pe$..l.[....CA"..D(...PL.;.(;.....5>......m...2_.^. ....{...^-...,I.....H.>.R`qC..b..8~.T.....(.#.XF../....h.;}.\|*...f.......6..&u".L.4.`..qE_.,z.I..,....G.-.ME...V.Z..ajd.. .i.....;.V>@CS%.

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	3208
Entropy (8bit):	7.513425698289387
Encrypted:	false
SSDEEP:	48:3FHwXprWPLjhl4TRpiPvZmjkzpB0IdmXgl7gpx2DgG1LyZtngoA/3zlSMilKNhGa:3u5CPxl9hUQipx2k3ZtgoC3sMnNhOQ
MD5:	928E54C4C9683D8DD32867EE992D73C4
SHA1:	83B3252952E1E8C98DEB5E6EB64E150C594DD97B
SHA-256:	0C4D1B66CBED8C0BA7BFE1D047409E80B99684794BA66E9556503890EAE17F2D
SHA-512:	C15C4090AA376F1DB432B300A265BA504BCB5884F5FD312CEB662E9CEFA921E5D606D332601F4D593F04DCA33EB9FA22BC5110632406DE232A0EB38A1872B488
Malicious:	false
Reputation:	low
Preview:	GIF89a . ..........,,,aaa999PPP............555...............!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ......Iia....bK.$.F...R.A.T.,..2S.05//.m.p!z...0...;$.0C....I!.HC(A@.o...!39T5.\.8)....`..d..wxG=Y..g...wHb..v.A=.0.V\.\.;........;...H.........0..t%.Hs..rY<H..........b..Z.b.OEg:...GY]..=.A.OQ.s....\b.h.9.=sg...c..e....*...f.7D..!.......,.... . ......IiY...YF5..F..R..Tb.G.J....L..d...&.Ymx...... \...@........ ....1..&R....H..4.1Q..\|V..%.z.v...#j0....l.Gg{0~..<.<..[.[.h.x..G...y.........[.0....G.....P.z...h...kz..i....y....h\|z.h.G..V.......\h..[........&.+..W.7.8...!..!.......,.... . ......I)1....1G5d].(..R..T2..jL.{..< .[.5.M....0..)... L...I...m..E..`....p..U....^f.%..^.......u.;..zz.}0.X....S0.ew.y.k<..%..O.......z..{....\|......%......F.i.1.0......Y.....8.x.....z..@....<...............8..Y<......8.\.P.$...!......!.......,.... . ......I.....g.EU... .R.a.TB.....p>'...e..$.."...\.#E1C.n.....~...J.,..,Aa.....Uw^4.I%P....u.Q.33.{0..i1T

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 305 x 126, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24341
Entropy (8bit):	7.988461533051581
Encrypted:	false
SSDEEP:	384:IN/O4BDtg37obANr8v8MyscvM6L+21h3WFnmzG5ajTJpe5fEyyv:INtBDKrocNK6L+21VymzGAjD4fNU
MD5:	480AB236D2CCA062E8D1E623887E465E
SHA1:	6C16204EE617E33B7472DD0010D7F5F3DFAADC7C
SHA-256:	BFF63013B4AEB2D2A71F3FBDCA0360DA66289022FB70AC9914DB529113BC7E9E
SHA-512:	75BB286342F0EA6029044E0A5B038B18E50410111CA94D3579B5B496C6C0392E1593DF24441151C2F3EEE864DF4930EB5743CED98AAA5CFDC6E7F6A0A5D1BA43
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...1...~.....L.&e....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:A179F13944F011E4B899D7B63C97495B" xmpMM:DocumentID="xmp.did:A179F13A44F011E4B899D7B63C97495B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A179F13744F011E4B899D7B63C97495B" stRef:documentID="xmp.did:A179F13844F011E4B899D7B63C97495B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>-}.y..[.IDATx..i.$.%..<.n..H. xM7..gVFv>........;.=...&A. .B..*3.u..T3S;<2..t..U......O...........o..W.s.../.....{

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	76195
Entropy (8bit):	7.974202646931448
Encrypted:	false
SSDEEP:	1536:/FjPV+1aQIyyKUcHdvpabRNg1rBc3ka3W57yVNswm/E1zY:/FDV2y2dhWzgJBqkRMF8E1zY
MD5:	E217E2F684CD1ADB74504EE55CC96449
SHA1:	FA4913196DF46629B527E7F6FD9D78A5E7952163
SHA-256:	AC19E0EE8BA6BA1930C03E4572B5050F3F2C785EB552746B2D8A4C24D837CFAF
SHA-512:	89620E6A82617B4635CBB91D8D7FBA11DC4ED22577946BBAC73BCC1E9C37A53C61C42C9CFA53DB1D0CF7A5307625A3DB9E8C466B46C10A3D80F15AA532618C26
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2668080/ss_a2e873c749f7303529b471ba9e9ed793abd409f6.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................`..........................!.1.AQ."aq..2...#B....3Rb$4Cr......%Sc....&5Usu....EVe...Td...67DF...................................E.......................!1.A..Q"2aq.......3....#BRSTr..4Cb.D....$.%.............?...'._...ir..G.D....v....hFB).....Gz.].Zm.....{v.<......N.l...<.@.f...8......m.=3.R..pk....x2.B.m..T..8C.-......la#.)..v&..?*H....n.\|..SB=.......Z....B....aY...Y.......Y.c.R.fB{..)o4.d..#.......t.^..$...w$.....M.6...$`zQF.r..O8.Aj4Ccp...o\|P3+[.!.Z.6.BT.BFrp<..P.V..l.....BQw.L..\#.G.S!......"f.g4PX....b6y-.T.(....J.f.....b...+#<.Hi.[#...S.I..{.N\|3.Q"."Y._..P.E..[........x.)$.u=.`..p..O.XA....O`..:.P:....R.....'..%-..&.D.].y9.Al6,\|(`U....a.v.=.lU........<U=.W.R.So..9.....3uA7..........JKv({.4.....$&..j....Kb..H....n.g...c...2..

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	8875
Entropy (8bit):	7.943430297823669
Encrypted:	false
SSDEEP:	192:LO6718JR9g1sH0WW0YEWnsTfP8rDoGG8Ov+jsGRNbp:VZ8tqWW07Wnsb8YGhOWjBjp
MD5:	35A0572EEB5B02C3F04C9E42920956E6
SHA1:	2CAF295055F1122B24148F4D9C7E8BB7584029A9
SHA-256:	DBBD1104E8A928CB11588858EBB0724E03CC5979C0E0002C44249411CBA4B511
SHA-512:	6205AF2268470050FB99D553F8A99D045C46591AB373B727ADD6C73E3DD631AC14191F26F6F263895A9697B18958B031BF8228E41C294AD5EBB5D7882C3C7D43
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@...........................!.1A.Q."a.#2Bq.R....3C..%bs.(4Dr.....................................:.......................!..1AQ.aq.".....2.....#3Bbr...RS.............?...M..se!..0j2...)..}..YJd.{. ..x=...../\|.FF..9.0K....UI..,2.j[B-..."..._..8..-..Nv..1.......X${..`"o.;....X...N.T&.O.%..e:...X.Q.7#m..u.lI.&.E.ip..X.....:..s...q.Z..'..,>d.M.\|+.w<.`...5.........hS....AK.>.....{X{....;l.m.....TIm<T.Jmm.$.{....LE..".o...K:e=..c2..uim...Q6.../{.m.=....XZn.f?N:.@...)5...D{........e..p......:..K..g.....d...IJ.G.I.<.^.S....f!D....&.Z.......s....EWW.b..9.....1...^..u.?lEr.#l\....T....O.={w8...'.D[.yJ...<so#...w...H.dH.$@...`p...7...Al.OoUI.....8.....m9........Ev76...BW.jqd.<....._E.....,..;c.?..H.....I.....8.ej...\|.E.....;3...?..9L..-\\+i.'.)7I...

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 501 x 201, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	171987
Entropy (8bit):	7.991429122289166
Encrypted:	true
SSDEEP:	3072:t7dbUjnD70yaCrsm0am3oSNfM16lIpCkzqdWpzQUAjlbvdDHBwttu0IgXDyuurKH:5OZDsm0mcfMwbkmCAjdvhBw+0IgHurO9
MD5:	2117FCAE8DA5A36277DB9981F00F3543
SHA1:	E1CBE102B0CD54187B8E190ABC09C1974D1FFA84
SHA-256:	8FFCD94DE035BA1CC5BD109CCB61E3DC8C12EA96DF43F3CF69FDD57F7B1F47EA
SHA-512:	353BA4736DAD09912EB9CD1F5C8525C7CE27E1101EE5423B5080DF690D919A824FE8CDF1A84C48936E941EBD7181A09E3E476223A173B3E6479FA1333C7F530C
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/store/steamdeck/steamdeck_promo_08.png?v=2%20alt=
Preview:	.PNG........IHDR.............:..s....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop 23.0 (Windows)" xmp:CreateDate="2023-11-14T10:08:43-08:00" xmp:ModifyDate="2024-02-09T14:20:51-08:00" xmp:MetadataDate="2024-02-09T14:20:51-08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:da85ff5b-

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 616x353, components 3
Category:	downloaded
Size (bytes):	91657
Entropy (8bit):	7.985487074266619
Encrypted:	false
SSDEEP:	1536:V8m58lamrkjFMO7x7pFFdN4Z94H9DU/oBsyXZM1dfltc+/gssJyNFpY5jz:em58lOZDrNk+9/p6f/cEgPJyNFk3
MD5:	507EC4C003C44484330FC97F280C4EFB
SHA1:	BB865AAC73B9E1EABC0E14C02A59353905707DA9
SHA-256:	8D129552B9152513A527E48BAA04BCD7C5CCFE258EC432ACF3B59E10ED37EE39
SHA-512:	921A0B956D323CABE870DAABBA9DD1D70AFF13A5DC6373B4EB3DB070F1BCCD7A7EA09C69EACDEE34DCA73B0B32C59456355216A2FCE271B1DB366E2C4799DEE5
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2195250/capsule_616x353_alt_assets_8.jpg?t=1713799333
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................a.h.............................................j..........................!.1A.."Qa.2q..B.......#.3Rbr..$C..&46s...%5SVceftu........'(8Tdv...)7FW........................................H........................!1.AQ.aq."2......BRb...#r..3S....4C..$c.5t...s............?...?....R...\|..F..;.....8Io5..'1..(...6.xK.B..RB`].......s...9ehV.S....iO1n~...rM.;L...(:....~..f1.l....4..:....Xr..>g....m......ACb.4....O.4..iF....!0.Ff.!!........}.@,jHA..n....0.#..i.Q:P.w$...4`.^..(....,.&..-@ ..........'...JJ[....`..N...)+>._...0.t.@.Kj~.`..}0.................f.0Q..r6H.rm..U"..j:...i<..z`..JS5..TBm.a.....i.z"&v.A.}m..F.t.B..d.+..x....+U.........:l4.y.#..Q.I.'.,...d.Tux.M..b.X<..j.]D&.....j......z...4.......u.6...bWr...4.X`).q.Cb...... ....v...`DU@.pv.....%.P.\......=f~.....E8ED.\.}...W....[.....TN.t.b7#.H...

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebM
Category:	downloaded
Size (bytes):	511151
Entropy (8bit):	7.9974412304832585
Encrypted:	true
SSDEEP:	12288:zwOx7QVmtCbAGPfuNglKbosAM7FOMRn9BpBMYQQjr0k6tUU:+V2IA9FbDh7Fx9BpXp0k6tUU
MD5:	D07FE0483ACBC3805F1E48CB971C606D
SHA1:	A8D9FCDE781B5045CF6572297DAB853097A2178D
SHA-256:	1B8A56DA98C2552790865D9295586B5116C9F2F08CDF69BB4479432F249C6380
SHA-512:	03CF0C25EA172525572CE45687207854A3A5D9C7A69D44B2DE295529DA7205322846D611BAF9F2DCAA48235796EEEE4568439CC201EA9FDFD53CFB19F2001232
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_webm_mobile_english.webm?t=1713912919:2f771c0a2f60fe:0
Preview:	.E..B...B...B..B..B..webmB...B....S.g.........M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...LM..S...S.kS....i........X.........................................................................................I.f....B@M..Lavf59.27.100WA.HandBrake 1.6.1 2023012300Da..5.NA...D..@........T.k........N..s......._...."...und..V_VP9...#..\|k-.......U..U...U...U...U...U...U....T.g.ss.c..g.E..ENCODERD..Lavf59.27.100ss.c..c......._.g.E..DURATIOND..00:00:07.967000000...C.u%..... J......I.B`.0...8$..\..x..._3.?.._....o.<7..\..o.....k.Ov>..._.../.?.....w..6?......~?..4/..Z..~1...K.%-7.OQZ.K,..~.2..PA..qWk(.........-2x.a.#.9....C%Gq.........&....uv.jDM.u.....hc.QA.t..!...%oz.3,.K...k...WN....&.N. ..$h..T.-.g&.]eQ.+.,.1p.}.R.~M..k) ..]...:.....M..5Yj....dF.]/h....+...\......>F.t(/.n5c..P...w.A=....Pf.l.wM...M.....tP}M..(.._Jj..#.{...!g.I..&.<..A.R...z...!...<&..I..#..x.....:...E....z.:5!w......f.3..8.".s....?.<aU1.s...ap8....+.D...I.g.....imz......>*3..........c..Qq4..:.S

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	122171
Entropy (8bit):	4.922780501464006
Encrypted:	false
SSDEEP:	1536:LlFY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWc1Uw4zv6:71XZEl9EvOxzLcGBkQ1WBV4MH
MD5:	39E34882BA4417CB4B1B84916DABB770
SHA1:	0D0CA081FB60C8AAD337091BAFCBE84F966C38B0
SHA-256:	DA708635DA162EA493874627775C3520A42145B79C73BF787B5113BF87C0B27C
SHA-512:	50BB7803DBAFEF5F571B9B36A975B43C26E233DA165C3D9E37856421FD93915B26ACDE47C5948E8E91D19975D8DD0E1F064999288B50297E3FA28824B88F3405
Malicious:	false
Reputation:	low
URL:	"https://gtm.you1.cn/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop"
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33738
Entropy (8bit):	5.263546738678096
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJGMJhpJfS2:FpP1vZRxGzS2
MD5:	0ABAE40EE6CFA8B72ABFB79829D53400
SHA1:	E87D3AA5EBFEAC3D486FB3D9913A81BE19AF3762
SHA-256:	C54F7E964FABEFC31C2DF4864777DB262E62C3236A293FBD075DEAF1D538C2ED
SHA-512:	A347D51254A5BA555F5CFCFFAAEB40F687C549B8E2C76EAF98F4E4522A8F5AE5A358F10119608C2657E30176D4675FD11C2670DD3F923BD788F8D30CA45A5575
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	7621
Entropy (8bit):	7.9417322249485505
Encrypted:	false
SSDEEP:	192:pnKPu69+XrKVkv66zTAvZoj9lVMLF7f6fIho/5KbKiF:R+uK+X+VkvrAvujfV2Nywm8J
MD5:	4FD05E0F68843582BECC9D62FDFC7E65
SHA1:	8C2C5E334AC0777559016A6F0A21E9C48D7F9DF3
SHA-256:	4FB3F956C60899C9337BAD764A9A05BB518718F4348059CD00CD8C65FE7EC430
SHA-512:	B22CC5FAA6E98386CECD48B7CC825FC431F44577D38DBC2317F80EB90F9A1506E00C8032264197AE761D878EAE5A7B0E8E158DACC5168DFAAD8310C2D5837F6A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@..........................!.1.."AQaq.2B.#...3b...CS......$R....................................9.......................!.1..AQ.aq".......2B.....#R.................?....H...@.-.?...Z.7H.;.tr..k..s...!Ba2...'....TwP....(....6.hFz$. /g ..W........s{..%..Y.@n.g....X.nm....Z. ..=SR.....x......TXXJ.}....M........IT,O...J.....~y...NT.)"PM.;..s..b.`Q9.(R..n....1`.....f.zOk.....(/$.........b.z(......$[..1M.D....,.....t\|UV$.X$..V.8qbT....#.p .IMyq...o4?...'.........!6...@fR.>...".d [j..\|(.;".B.-b.T.a....j.}..!...,r.........F+..De].d...+.l......a....I..\.P.uW.gL.j.4.U...T..(..#....M..<.j.).F...S..pmn.i..eTV..e?M3.X.J..!.#...X.~...0E68AS...P.n...!.K,J-.(R.=..'.3....!VML...Y..w........_\|au..}.q.IU.f[{\...a%...).,#rC.f w#..-....{X.$...{\|..P,l.. .........F...a{..

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	563845
Entropy (8bit):	7.979185277506617
Encrypted:	false
SSDEEP:	12288:6FNQST5JDtBXjYws1ZcURVDA0M5mshtAi7BVqh2e:ElJZ1jWUBmslzUJ
MD5:	86DCF6AD0BBD70B2793A0546ECAF674D
SHA1:	40F921E498F42983FFB9A793258770E18151996D
SHA-256:	674C1D54CF74BDE441E7C8E50E2FC21EBAB0B4FCB2FEBCDFD55BC3100E756818
SHA-512:	72C5C256DD236D9004453099AF6CDE96550BC50CBB2DD8352808D736F170FB81BC2ECCAE749207276F15BF2C4BE13DCDBC5E90AB7DEA70FCE218451B20417D35
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2495635126600553841/EEB1316641662E10C088F075B34698EC65EDE104/?imw=1920&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;......8...."..........8.......................................................................RN\|....H.Y]....\.,W...V.(.hf.F.#.bCE;X.....v..."...w.G&H......'Z..).GQLb.n.J.H.h!.+..p..h%.9......O.Et.g.)..N..0J..+.....z.W......IT.c.....d...z....J.;Ai.;s.6L....\|..;.D.s^.....,.:F.D.....b.:...+a.0.^n.$..Lk.?3.v..N9r..sTv..>..!.7=............u..7`^....`.l@....!....`X. ..`^...j..%...ab.......`......-...........1.B../c....]......................-..y.0"..F..8!.{..0x..g.0...,..X...6<..{,,B......t....xf........b...+........ ...3......@.@.p..!;V.....t..\|..E.F..g7e;...eQe.."....+-.U.H...=.b..`...I*E....jc....I..n.."mr...)..G0...{l..u...,...`4..h..(X.Y....ii.I.W.T.yG..-h....:2..`..L...ti`..M..Z...vZ.yON........ .l...&....W.M+...Q&...][Y..ta.d.b....CV....-......1.g7...<..!..tD.W...Q>...[..v1@X..`.x....,B......... ..@.

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	6085
Entropy (8bit):	7.911655083746525
Encrypted:	false
SSDEEP:	96:ZH9sQF0XRFIDkk09MYaJEjcFXUvUo9CN/wHt1JIuVoJXUMWr/:59s00YkvajUcJwtZoEr/
MD5:	74DDDF95662C80BBA5D98F2FC52EF1B1
SHA1:	627B1AEDB14C1C395D0F8942D67AF85A47B6B5F0
SHA-256:	EF3474B02CECBCEAA93CD6CC5FB8A2E11DF93B3D5D4F5C993F2894705E81F84B
SHA-512:	43D9E3D55CAA9DEF93E3CF981C8E0D1E44C1AFE1F959FD028A8EAD1BC4B890A03603C29EB0444F075E510D5788633B7D593BA2C3CF0056C34624D12211EC6B68
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2215430/capsule_184x69.jpg?t=1715792238
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@...........................!1.A."Qa.2q....#$R.....3Bb...6c...................................2........................!1.Q..."2AR.Baq..#3..S..............?..w{\.{..qQK..(..`...I........ ..p.B.$.uw...@.\|...s.....IV......\..=..AAI$.v....\|. ......g_Q.y...yRCI.{Q...v&..L..Bx..1..].7'[.....7.5[...8A..K......d7Uya.l..hZ......"eQI,F....i[...M..qq.[I$_....W.$.n.w.:..I........:.7.}...F..\|...{aP......w>.)..M.Y,.9.9.r!.}....!..o..o...5..MBn.5.9Mn.3.....O...j!..,..z....\_.8.....N..~&.............U...s.6..p7.P..H..T.c)....j>Z.b`.H)u'.t......Yc.*pv.....]......r.=.{...6..m.H.j&!N$jp.J.P..........b....s.63&G....)Y....MX.B...:.!....+@(..W..OjJ.tw..._.S_.M......'{...........K..^tJ)......N....bL...,8M..(N.)D.ok.}....JK._m....Z...v...?....@.....)_..}g.1T.......S-.6.a"

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6719
Entropy (8bit):	7.901529029287266
Encrypted:	false
SSDEEP:	192:5hA6M4WnkyWwqmnHAXF50kzSvF3eIoAOpyj:5yvnkyTnhv8AOgj
MD5:	49B920CA1495FC302A0ED1515CE53491
SHA1:	6CCE254202C4DC378CF31AAA7D05C8538267F078
SHA-256:	472165755644972C17E4BBAF1300926AB99724D95599415B2EA7F9C16A27737C
SHA-512:	F25A18A9433F4CAF2106D2D95CC4CB58C053395AE7341EEF0CD143134F10A00C6AFE7301B0EC58D57705641B42F1375D9BA8491C823DAB804D48AA8B75F4AAB8
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5
Preview:	.PNG........IHDR...@... .....c..D....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8C87CFB10319E411A236C2B21919E765" xmpMM:DocumentID="xmp.did:9BC4BE959C4B11E4A75E88529746DCED" xmpMM:InstanceID="xmp.iid:9BC4BE949C4B11E4A75E88529746DCED" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4328D7F2BF9AE41194B9DA16F2E1AD04" stRef:documentID="xmp.did:8C87CFB10319E411A236C2B21919E765"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.p.....oIDATx..]....~=........:.1..$...*...BP....G

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	7184
Entropy (8bit):	7.921201957252253
Encrypted:	false
SSDEEP:	192:tFxxYr9vmYLXlbmdPOuyZspOWZUGHYJX7p9r6++ppdm:tFxCpvlRa+ZOEG4JLp9e+oc
MD5:	6042A810518F910A6F8B99B4A59D1324
SHA1:	6B284511347BDA30369091BDCBF34F1C60D6B171
SHA-256:	24CA9BC328480509046B5BF5F2B3ECF45F19FA1A3552E4141C2D9BD4E0013B0D
SHA-512:	B71DB5782CA85236D0602DEF848EED8C8F9EE94C8BF69FD62176A49F6DBA06B89FB3EBC831CC0CEF5E62AE0D19CB5D858FC9E8F08A1AB017F9A3CA21C4906A31
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E...............................................=...........................!..1A.."Qa.2Bq..#3b......RScr...................................0........................!1A.Qaq......."...B...............?....4....@........`.....g.6Ew.q.....^....@(#...A..x..AJ.9l.d...@.c'.U...}....Z..4...B.-..;.........<..c..../dQ..J.4.6.NK...59)r@J...<TJ...}D....?..z-.k...-.t?...%...F...s.i8R...ODh.......=..FK.Q..h.......)>.B....T.p.2Owd%D...l0.h.#..F....0..@..'.'99...D}.]s...6,f..9...!Gu..9..mj..(....m.^.7....=.r.p.."...++...B..Y...J.Q..Y..!.....m.#...Z&!..>g$.......G\.G....&..Q.....QnCo.XSkB<.0....).............V..[..O>...1......%e..8.2.!J...C..^N."D.S..u.(.r.i.P...J......u..&..p=.j....{.bn.%+5.WK..$..n/....]......v..,W.Ij<v.....m..T......$.c].Prj.......Sv.....8..A(.r\|...@&...5R.@.+U.]-T......@.T..

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	7053
Entropy (8bit):	7.211495654944814
Encrypted:	false
SSDEEP:	192:FgmgPrhKGDRYukv1dRWa40jQ4DpHNJ21rYBN8:FMPNPRYnv1m0jdDptJ2xL
MD5:	EC895931C16F8DCBD8D9A0C1AFE08845
SHA1:	143DDC996B670FCE6147D87938000B5E1CAB2C5F
SHA-256:	97F99E57549097C32D5E4A18B9C21F431264EEF9F4D9C55F1281E5422E4BA6FC
SHA-512:	5AAFB810B5E24A4E05CDEAF8CAB5C75E7904AD136CF4687BB5EF1F62CC0C2054A53C2D6864035294B3AA3EDD9D3685C9D4ECAD808E048ACEFFB41671FFCE219E
Malicious:	false
Reputation:	low
Preview:	......JFIF............................."-&$""!-'+%/2553273/5>PB78K:.-EaEKSV[\[2AemdXlPY[W.......%..%W6-6WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\WWWWWWWWWWWWWWWW......h....".......................................@........................!1.AQ."aq..2....BR...#....br..$3...Sc...................................................1!A.............?..................................y....R..@......N6.U..Z...-8.....X)7.Kb........nXd.7Own...p........................................................w..8:W].;.\.H...Z.....;~'J.#..(..y..}G.3J.KIJ.l..R....=..E5.\........F+y...}.l.jN.j9].N.C.........w....RO$.o.S{z..o.\|.r.P.k.....^..$.0....................................................n.a.Z.i.y;yu......g..5.....~e..Jm.7..[n..\|..J1.L.o.~;...MEomu......\p.~...Eu........6.v..g....ck;]...,C.BNQ...mm..}...(O7.f.k...J.....S..7.".W..93fzy..^.Q.)RM....N.\...\.sr....................................................d..c..Z9]F]..k.6S.xn)..R....jYz....8...F.WQ..en..%YfM.W.]}K.!..Rp..%...V[3..E8)..O=...

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	6568
Entropy (8bit):	7.926040560239071
Encrypted:	false
SSDEEP:	192:gRsNKDDuOI3B+AhEbVJoklDHW9B0zGJB3uzV:ssSViC9HWz008zV
MD5:	E109F7B419A6DB3148F635B9042AE1C8
SHA1:	0C1A9E47DB424E1F5ED70AA2FE7E25D6B865BDBE
SHA-256:	E52BD14D28698E0586930AAB172E8B99B268A14E8FEFD339DD013F0BDB2BC1C0
SHA-512:	8CE5B3235B726A266E87EC15BF3A37982A6F6740548ACCD4ACF0E117C36C6CA0A6B5C4C7014FDEEC20C06BFD4EA98FD094F9C10E0F9EC1C37B71CF6731BB3297
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@...........................!1A.."Q.aq#2....Bb...3CR....G.......................................>........................!1.AQaq.."..2B.....T...#RSr...&3d...............?...V.I<..\._..(....TI$...8...w{.;.....[.bx....Zt...3.R.......'isa.R...!\p.clc..F.h...,L....Z2..........e....Na..... $.Gae'.E..,..g.u9........F....>...Z..p.....x.EZ.......QN...I.m..q8.b....@.R.m......n......V`N\..:...\`{.B?..K..7.L..P.;...V.V..3..bw...a.:..I2..s"=T...DXl.!o9.Q...I......i3ky>..q...J..SQ.J...}......#...uB.U....?.K..G...,P......I...k.r..~..6v<.t....#..t.}...bL....;.?52.zp1.+......`B.c....y....p1+E......%.\.H.<R..HJv...D.g....0!..B.c.vB.DRs....O8..Is.h.lU.\.D..E..V./3.v4.n.1&..kL.i..,e..%.%.. .cp...+.o..b.?&LXD....MlG.;....l.&.......[...p.#z.....32.7N......m{cF....9.V...u.ma

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64579), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	77742
Entropy (8bit):	5.176136494159179
Encrypted:	false
SSDEEP:	1536:xby7jdhwwZ4oyRld/WpEQo2lief0Y/1ME3sOIyY00RpziD07KzCc9gGY5m3pF3kU:xOWYJ
MD5:	AFAB6039D4A65CCD2869D3A08AF7AD25
SHA1:	BD6AA385B9AB861366256BDF7457C448C5CAE816
SHA-256:	76CE56FCF410E77BF89B458FAEF3DD5E20777C4790CEAB32A911E2B773F796D2
SHA-512:	696AF987DD603B99956B83D353B29C55D96B786ADA2DC31EF8DC7473DCEEADE4E381B04835977668972F037BA1FD770952DAA386045AB9B19101C0668CF1FD41
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~c18a43282.js?contenthash=1797f4a7ab8c2f27a11c
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ../.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[483],{54674:(e,r)=>{var t,i=Symbol.for("react.element"),n=Symbol.for("react.portal"),a=Symbol.for("react.fragment"),s=Symbol.for("react.strict_mode"),o=Symbol.for("react.profiler"),l=Symbol.for("react.provider"),c=Symbol.for("react.context"),u=Symbol.for("react.server_context"),m=Symbol.for("react.forward_ref"),d=Symbol.for("react.suspense"),B=Symbol.for("react.suspense_list"),b=Symbol.for("react.memo"),y=Symbol.for("react.lazy"),p=Symbol.for("react.offscreen");../.. * @license React.. * react-is.production.min.js.. .. Copyright (c) Facebook, Inc. and its affiliates... .. This source code is licensed under the MIT license found in the.. * LICENSE file in the root directory of this source tree... */function f(e){if("object"==typeof e&&nul

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	56823
Entropy (8bit):	7.979827499971699
Encrypted:	false
SSDEEP:	1536:KL3h1d+suIzpmZgDfuTxCbO8Bs+MsO67hw/qlcGo4u:KLxHzpmZafoCLBOsOBSo4u
MD5:	206FD4A29DC635D7B1D6C7E5D8633350
SHA1:	497BCD06E4C23C6F9B00416F50622F10403FBB31
SHA-256:	B639DE21AD12CE01566A5B0E42FB6AA029FE2E135C1E8BFC552504205144890E
SHA-512:	61D0EC5E3CE158F886681A66F82FC71373B1B83DE9ED27C354223573AB44F1D88F9714B903848C8587A01EEE4FCA57B69FDEC8C7EFE6ADDFA9F4C8483AB6247A
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2668080/ss_07b95e43d4229270333d7fcbea6ba428a80253e4.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................Z........................!..1..AQa"2q...#B...3Rr..b..$45CSs......%6c..Dtuv....&8T..7Ed....................................F.......................!1.AQaq."2.........3BRr.#4b..$...5...%S.C..s.............?..\|...g.;..PA..2.v.....]p.X...Il...C...y....Ny.*...a.N^(...../;..a.......j.>1....m.0..<7.......>...$.[G.....^F?e ...}+..JX.'G'.._.?5.K#....^.z5....O4p2......2..6....._..M.Rr<i.C.s.T...w...5jMo.W... .#..hi=R~D...3.h....S.......q.Xb.&....01T.........?7..$....H..U...k.N..QO..8..6.e...^_..h]...lue.C.q.F....Z..Lp.=;...1.......h..Z..p....057.....,.I?;{.&1.."...../...)B...Ll.v."..v..O.-Ix..Lm...........$y-.V)1..3A@....Z.......4. .Q`..Qadf).,`.:V...........c1@.g.h.9}).<..3.....3..11.@...d&3@X.Z.....b...@.&(.....r.....\k..=+H....w.j<..........e.a..v.y..Y

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1430
Entropy (8bit):	6.915444207165524
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVag7yJ3VR7GmXF54+mC8yq8/23CMwMIE+b8Dllc:HZNn2lpWJ3nnwDNmlPbUI
MD5:	AFC159FE5F0F26FA7282505DA9887CC3
SHA1:	C1CD55380C2AF435876989F94E8B0715042C2ADE
SHA-256:	4BE942A34871DD6F8F14B43D27C31B049BE7F6544C05685D4F35ABDD329DE176
SHA-512:	8F7DCB7E99CEED8F86575A05FF7D329EE2FC67CD18C6D53B2833A6AA1EEDE2586D57688F27901D941D2B6351412957468CCE5CA69101D86911390BF04FD82763
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:6E745BD792D411EE8F80E4F5B5148EC9" xmpMM:DocumentID="xmp.did:6E745BD892D411EE8F80E4F5B5148EC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E745BD592D411EE8F80E4F5B5148EC9" stRef:documentID="xmp.did:6E745BD692D411EE8F80E4F5B5148EC9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{KL.....IDATx.b..U.d``.......@...4.....0.4.9...[`...e.5U...6V..G..d.....I2.].......?y.............^./....&.....

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 1920x988, components 3
Category:	dropped
Size (bytes):	183437
Entropy (8bit):	7.990958870314879
Encrypted:	true
SSDEEP:	3072:6p19yQMal/SMdIzJw+JXU56YbEg+PFtR9x8AZqwTaFt3Kcgzto+:u19tlZd6HEPERNj9x8s+KFBo+
MD5:	0FCC21CDB2D7998BDB0414DEBD14F3B0
SHA1:	748E43C1A9FE91D7674690E86D2794166323A12D
SHA-256:	CA1645B511A884A4881A939EF38A760ABF7B3E9FEC94811571532D8D8EF7D44B
SHA-512:	3C399FE1255FFAA3C025B2313FA3B8939902D7F696DA9DBE9CD9251DD77CF88F3C4924A9A258AA401C9A77CFDC52BF47F2FCE996E17A975AE7F0BB2129992A05
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.................................................................! !,,;...........................................................! !,,;..........."..........8.....................................................................(...$.....n.....].kf.H.F..jk.X...v..>.]..j@..`.....r.....@.}..X.N......>.f.l...5..I.......Z.j.(v.k..,P2...K...EZe....s+"=n~.7<.Zz^....K.h.k2[......c.....q......R.R"..8.......a.......,d......b..}/'...,.P.G.2.....7RQ.."...... ....D...V2...3/&5.!.N.....J......w..y..Ms....s./.z.....\>5k.s-..+..>[......{.....O%..G...h..'..M6....7..4.j_)...!..M>...........O..=.7....K.../..h....k....[...z:.?].W.s.~P..6.._...<G/........V.S.-v....E.y]..!.e%.....{2....Wo.'.et...b.OC.g..O7.s)g....+...3...Igq.......Z..._;....x.....3.DX....4...2O8.U.d.Z./cZ.K.........l....t../.\h..i....1&.[...y.9]c.{V.%gS.ig..........l2..E.#.+!..Vs`eg.....R UAN:rh.=.K(.L#...l`..`qun.[8..TJr.[.v.....\.K..,..h........i1+.7."#..iE...J.rS...[.Q./"JM..k_o.

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15632), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	15797
Entropy (8bit):	5.410315109356071
Encrypted:	false
SSDEEP:	384:+q8Wn6f11FGW9D3Me0kFIItiaFFKaFotEZgV1n/5VPjtv6+UA:pu1vXrj2Qia7KaFOEZgVBxVPjtv6+UA
MD5:	6CC649854AC3A6FFB83F76A8B6944823
SHA1:	8EF3D995AF259AC544B9C56F0E5B58FD7FFB80D1
SHA-256:	619435696594851BEDB6897D764BBBDAEEE07B8FCFC4DD21E21055533B89F807
SHA-512:	711CA1BCBC6C2FE0040C96425D588A0168542C665428DEA688A0D73ACD823A6AE4D631590386E05115E69576D26BF79D65AB79998F119BCB624245F63D768691
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/manifest.js?v=6MtRkzKwK42K&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..var CLSTAMP="8896122";(()=>{"use strict";var a,e,n,c,i,o={},d={};function f(a){var e=d[a];if(void 0!==e)return e.exports;var n=d[a]={id:a,loaded:!1,exports:{}};return o[a].call(n.exports,n,n.exports,f),n.loaded=!0,n.exports}f.m=o,f.amdO={},a=[],f.O=(e,n,c,i)=>{if(!n){var o=1/0;for(l=0;l<a.length;l++){for(var[n,c,i]=a[l],d=!0,s=0;s<n.length;s++)(!1&i\|\|o>=i)&&Object.keys(f.O).every((a=>f.O[a](n[s])))?n.splice(s--,1):(d=!1,i<o&&(o=i));if(d){a.splice(l--,1);var b=c();void 0!==b&&(e=b)}}return e}i=i\|\|0;for(var l=a.length;l>0&&a[l-1][2]>i;l--)a[l]=a[l-1];a[l]=[n,c,i]},f.n=a=>{var e=a&&a.__esModule?()=>a.default:()=>a;return f.d(e,{a:e}),e},n=Object.getPrototypeOf?a=>Object.getPrototypeOf(a):a=>a.__proto__,f.t=function(a,c){if(1&c&&(a=this(a)),8&c)return a;if("object"==typeof a&&a){if(4&c&&a.__esModule)return a;if(16&c&&"function"

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 616x353, components 3
Category:	downloaded
Size (bytes):	79227
Entropy (8bit):	7.979642682067971
Encrypted:	false
SSDEEP:	1536:Xn42K+4NeQ5w6kEHr9oZtz8piI1w8wq8lSs7RSmKFSxOjq6n:Xn42475w6TrI8RK17Sk3uSxon
MD5:	E7A855B8C120764FBF4935515CE23041
SHA1:	E2AD0FD7AE82A2C5252433728E5867F6AC2E4531
SHA-256:	34B8EE17B4BD2E3FB51296B631946920B54B0D74353C8144AB3090CF53F28113
SHA-512:	1ACD8271C646F1191AFEC9FA24F2496AE79D0BE5BFE5DCFC0FF0AAB226B3C1EE3ED024E41E5D2B50EB3B4E0D4300788C6FE03D4B119793AEE9055CE40D0C8817
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2668080/capsule_616x353.jpg?t=1714968679
Preview:	......JFIF.............C....................................................................C.......................................................................a.h............................................O.........................!..1A."Qa.2q....#3BR...b....$r.4CS...%..&cds.(DTt..................................<.......................!1.A.Qa"q....2......#B3R.$4r.5S..C.............?........!3.@7{.<......).I......S{..m.[.......A.b%.._...dp..6...L..ic.Y....m.ZM.bQ{..m.k.q..l.F...#,J.p...w.uDz..e4.?.dC..k...Kgd.....Y.......w...'8..'...uy.Ek.{t8....wD(..[..m.D...4FqC9.c.......z..$`.t...%..,h....f..........-Y.T.t3..h..z.J:..^[.......{c."M.4tcm.R.,...2G...r........W....M.k.Dj...!.WT..=z.t...7.68.n..cfD..5...L^...dk..Cm.}qd.V.A....!,..,.H.].s.p.T.-:C4..*@Y9.+......E$..K.i...6..b..x.......\..........y.........X.S.g.n..-.XYXjS.....]F.6.....G...^....N...h........f...3..}.....g.F/rI....K.I.M]a.}nok.cE.Q..n.....n..t..I..p.Io...k.G#`9{....."Dl.....p..k.BW

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	11504
Entropy (8bit):	7.930413068890721
Encrypted:	false
SSDEEP:	192:4gloX60QiQJ3OKHTCw3rL6mN9yNzirTVS2LuyVlRt1W7D3T4AVJNn4cgas6:4L9+3n7LrQNePvLuKp12X3n3gas6
MD5:	66AAA7AC03A4A6D25FACC44DDF72B3EC
SHA1:	2B5B663FEB0DAC9960E9868B066FE5B5B4128BDD
SHA-256:	1AF2C556FB935CB69B720824F5A521D8ED61533FA5752EC8241898B39C746611
SHA-512:	C69BBFA93E17E0581009C188B68E4D9973BB0915DEBF100E7EFE320121F907DF20030C697B1BE28E42351CEC955E23C866A27C0C83DE05E1B6E2BE43DB95649E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E.............................................;..........................!..1."A.Q.2aq..#B...3CRr......................................9.........................!1AQa.q....."2...#R..B..b.34r.............?...(..mC.Y>.>:'.Z.....A....%M......N...r.A.D.2......:.$.y...j..D....x....b....\....u..!..y)....H>G...h...T.)HLN...Z.@.!.s..W...... y....<.Kr..)p.\|hZ..3.Zj;..$p...XW..x..^.M...+...0fR..Nc....I.0.n+.. .......2R\|.\|..s......P.i.T...<.9............P.........\|2.Rj.h...`...ze.{......re...9.F...L..s...)...r.n._...>a.o.b..h.....].h.......l.N.....rPO...(.&.jT.&@.....Q.I...vX...QH.RK.H...W[V\.<...e...}B...D.V..kU.:..B;.n..$..[..?'K.i.1..Om....EG.4+U..v.=...."$&.N..(...c,#c=.i..7.\|.l ..c.$...SeB$Y.J.-...%....K..~.}MZ-..x......UUm~~U.\|%.[irR.zj^Hq......m*....'.,...iHj..411O-=.E....F.4...}W..YBb.."LV...

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	8458
Entropy (8bit):	7.934646387011779
Encrypted:	false
SSDEEP:	192:9LY6fgNGloArF6BvNJsuWTQGSH3f4yt9isss8v47+S1aV7:9LYuwGLM3sSH3f4ytEWl87
MD5:	A8C39725A43ACE487A165D0B4AF74354
SHA1:	6AC1A312BCAE516772E2F095E36ADED03BC83E6B
SHA-256:	15CB6D34EC42AD3520CEF8782C089F56051983D165B1B7C00DBE6F440F0BEEC2
SHA-512:	A66E37EA9D3B91CCD4DE86AFE191C212D5F7583BCBE46933D4437F3C51EA2959FB60EAA0776533BC0D78DC367007D0D64956719637F8BF433E0E86817EE925B3
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/578080/capsule_184x69.jpg?t=1713943796
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................<...........................!1..A."Q2a..#q.B...$.Rb.%&'3Cc.................................7......................!1..AQaq.".......#2...BR.b3r...............?....Br......v-A..8.....%..%c.O.i.qu8.h.~u7..o.d4U.....G....M.mW.i...-F.< ....nI{..........$V=9.....ez.).H.&..{...qB.L?M[.........oLO.e.......xJ...k.z.\.....+.>2.y......2.{.:.....(_J.e.4.i..RRp?c.........vp..'.....O..X.u....F<W.v:...pR.G....cET.::.A#...0O.i..KP.3...4q.Y.CQ...D............c...I...p..y$..@........rjz..;.....q..S..b.j.,.{..V@....'.z.d..j.%..2..q..e.=....v..5$'R7o....].0oj..bV.Rp...I.....NpNO..UL..ag.)^%Z]..39..nH[.-.[....jJVU.8..:$...........qV.({AC.<I.>s....h.7.-...E=..^.n;rbBg.>CD.8.0....!i...+".@.%..V.\|>`.v...3..{.0.G.}...7......XR...R....4.....8.t..W..t.....,.c..

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	37187
Entropy (8bit):	7.96934635356005
Encrypted:	false
SSDEEP:	768:XITwVNmqhk1C7UnUoj5lPe+2/cJSkxuEhSnoTObK4dLJuq:Xnq1C7UlS+2/IxPsfvZoq
MD5:	D2377A059F7D5E79F48122B351888C83
SHA1:	44D944E685B1B53D203F5A80419139084304D782
SHA-256:	D05B4F62853FCAD4481A7C8B14C5840E3FEC0479E2B2814785C41237B42D6A19
SHA-512:	F632597ECB86D07342C4528DABF9CEB99DCF307B5AA9DB16BE7F693702AA76CEC5A4C0B7A94F3E23404F78EFBC3F443A2989F624CF303D475B0086D882EFE2D3
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1710170/header.jpg?t=1683621796
Preview:	......JFIF.............C....................................................................C.......................................................................................................................N...........................!1..AQ."a.2Bq...#R.$b...34r.....CDS....%&'7cs..................................:........................!1AQa.."q..2.......#R.B..3r$C...............?.....t.}4.\|E.>5.E....-%Lo..u.Q.....4hb'JjPvh...q....;..O!<.S9h.N2`V$.....g....Rw.....G....5.~.\|....c.).H.Q.#26.d.S.....n.q.....t..I.VG.../).....o..a.h..4x{..I-..i[....^I...bf...H.:.N_.....I....SZq\...Tm.......A.d.g#......I..SW.K...Q....RLs.......R)>$....)a..'$i3J.p!...?.3...:.hj.jm;...0......M.V..}yc...KOD.e....#?y0A..%...'.z.#3.....>+..~...J.....R..M4.$.h\:H.d2..A. .l&..9F.].....T.C4i42)G.E...`..pG..C........\6......z.,...Ju.c=.}...Oeb0.x......R..w.........x..N..U..R....4..2.Rq.3...+.1mjQ.T..D.{i..!Q....^{j.jX..$..}..(..e-C....Q.:\.3..'.N.....j-.7.U..kc.......F...i.G.Q..

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 306x260, components 3
Category:	dropped
Size (bytes):	44480
Entropy (8bit):	7.985585094569795
Encrypted:	false
SSDEEP:	768:U9AYihV0WHeASoA00xKi98A4uDiCKpScHj6OkUZSU3ChdxRFpbEYX5mTuJ9Jq1:U9fC6weNoA00xKi98A4uDiCKW+VMdJ1U
MD5:	E35CE4B6552171FAE1034EC05548F388
SHA1:	F24267B1FAC223124F9AD23407553279F91735BF
SHA-256:	398FC7F35BB07813E84581D0D1C6891B03960C4F69A75C8CA3CC81E95BA07C63
SHA-512:	CF7E127149D60172537CFE148EF9629A6BFBE5D16BF05E9038DA560537C57F004C7F1645413C9A323582B9D963B2EBD432FFFEBDC8B070230FA47F1F8383C2DA
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.dba3da3b5, 2023/12/15-10:42:37 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:EA415E2BAEA1DF11A752BC80D643D9CD" xmpMM:DocumentID="xmp.did:4E4E70CE0D8B11EF8A26C35F49564894" xmpMM:InstanceID="xmp.iid:4E4E70CD0D8B11EF8A26C35F49564894" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ae816ce9-e789-ca42-ab33-dee815bd128e" stRef:documentID="adobe:docid:photoshop:7db59958-11e4-0f43-98c5-7f3c083c60f5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d...............)J..M...t........

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	dropped
Size (bytes):	50090
Entropy (8bit):	7.9877696521936645
Encrypted:	false
SSDEEP:	1536:bQhVRDUtqA4L7Bt8B8BH1gEvY2rC2oN/WBhE2K8Rs8t:bQ9DUtqTLF6aluEvpC2s/r8Rbt
MD5:	E43EF1D4C2404E0B359BD4863CB8F5F2
SHA1:	B15538ECF51528D788BB702AB31446CC4CF5118B
SHA-256:	A892940C16B624634E7AEE70B4A8CA4485C952BFF0A85FDBBD13428C54B762F1
SHA-512:	A83E866F6BB39F50179602C1E0E6E02DB8D9A51FDA31DB1930335929BBA90B05F523F6ECB74A33A2731B9594699B41334573955F10051A49EFF8B835F5D2A415
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........7.......................................................................x.).)W..x.......c.{..........>...P....'...O....]..k...{......Q..mwu....r...j...'.mv....Y.._.fh5.. .. .E,..Tb...d..E.`=..N..........G...t......f"...\T:@.+...g....og.Om..}.t.M...."]=P...M.J.4TH..Vb.S..#4r.4..+%....{Y..2.B.j...qY.OJ........W..P...%...g8G?.."......p.U..i#.6.....:{.tk.6..}../......M...Z........su,...S4.L.................3...78..........W..yA..l.ro3dr.s/?....tCl..z{p.y.U.Ry....pTJ...R.6..F.../FUV..{qn....)N{../..a.o..0v<(4..........&....z;....d.c(p....Q..$\|i.i..A.mg..2..P.W.W.O..$] `N....v).^j.Z-....%.. N.Hb....L5K/%3.K.8b.Qx.CoWy.8...%\.[C=x...s.Rv./.n.(.Om.s...&.E#(hr....E3s....m......[.........:&.k.!n<..@.*.L.8..=.i>..[.....&[F-......CVX..%.4..d.iD..].c..+l(...$).m...M:WB.V.... ]\|..:s..h..,..^.}

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	downloaded
Size (bytes):	58
Entropy (8bit):	4.407754547912838
Encrypted:	false
SSDEEP:	3:CMTkaasJusJE9RoE:/orsJrKfoE
MD5:	C85B970B4C832E361445C1B446CC2343
SHA1:	57E60C2F1F1F919A871B7C171C6D59D42E3ADBE5
SHA-256:	5CE28D7CF05F0E6EEAA3788A393D9980E9B51130963C6B9672D3447B6B11DE6D
SHA-512:	060B2BA825CD60EA3FAD5FCACE496A77B528210AEAB0092A24B4C438EB2ACAC4166E0C3B704CD3A4D8FA8FB034B0C7A4B5F45E242A7BDAD26580F3236382620E
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/images/x9x9.gif
Preview:	GIF89a.............!.......,.............h....I.Q9+\|.S]..;

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 292x136, components 3
Category:	dropped
Size (bytes):	26303
Entropy (8bit):	7.976085264063717
Encrypted:	false
SSDEEP:	768:f+EwBejCr6u23NGTNA6hmCtydwbrvKKLIU6:XDCrCdWmD2HKkID
MD5:	F53551637B14F8AF9CC1723E62FCF062
SHA1:	2A0386E7F3263575199C30AFB40AE8698FEE5BD8
SHA-256:	568E271AAD4E1634B5D56A77D1CCCFFDF95C559F0FEF258CA4E3085990BC6CC2
SHA-512:	78D13DA738074359CA37F86795C4764128FE3E15EECAD86762F2678B5C64CFACFA2D7B1599B9C07F5DB5E312525F76D3839DF34EFD9DB9F83BDC98E810BB6161
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................B.........................!...1AQ.."a2q...#B.Rb....$r..C..%34c....................................>.......................!1..AQ.aq."........#2...BR$b...3r................?..z=bi..\|=...W..y...i...!l...}T..V....f.w..,...M.\.n....p?>....(2..:.AR0s.Q.u.~$t...I..[....K..YJ.v..5....=..b...Ci.O..........._'9v ei.....HE...Q+..F.^.(....Y...eu..@....DQ.(.Q..[.....7,DlF.....w)..XV..>c.......W.l.4.\....Jp^....Q.i.v.L....%..N....s.N...U..DYP...2...i{.+./.Ew...,.uV.iR..2..*.9...$......+.dQ;y.&...oXTv.}V.Z.;U(.%d.D`..p.N}.=G.M...y..d......Y..UW..&..(^.9$...8.8#.{.P<...W}..k..;.QB.9..c.p.... .....U_.T..5~1q...........0:u&....@.Z..>\z.....Y%..s..@..v..,...p..W......I.;A...2....=%%^..'..r....n../&!..%.^<!.R.. U.=2..x...HP...Fd.&D.......o[FP.......o..U..A9S....y_

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 500x350, components 3
Category:	dropped
Size (bytes):	168027
Entropy (8bit):	7.984278844590707
Encrypted:	false
SSDEEP:	3072:4Rmxo6sK0y3TK7XCRyyC/XINccLqNij6Jnxwz0bhK3KFmxZVEwfb:1x5sKXTcCRveYNccLqAGJxwzuH+Ewfb
MD5:	669737F7DAC464B171D9CF3D424DD967
SHA1:	2AB1BD4DBCD9565F3C4D51EC9ABE15A1688FCEF6
SHA-256:	DE7B7CEDB7958DC828D61D365FA909C98180E97E0DFC63A16396167D6BB69E97
SHA-512:	8DF57331B2D397A06FF3DAAD5175C20E91700EAF619F60FB756E6E4FABB4BE021AD6769FE67BDEE5917053E8783A606D12579B8945FD57BDC78C3D4279E8DADB
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 800, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	161187
Entropy (8bit):	7.990584731304817
Encrypted:	true
SSDEEP:	3072:bZ9L5Lw6SelSTdibeeotIIwQTHchAMXBDjLjtFzVEJJU:bZ99w6SelSsDomIMxD3jFEfU
MD5:	1D7363064D454B57F9C84DF28F566CE7
SHA1:	773B8A0F0C6CBDA10B0C2BA62FB53D323946E311
SHA-256:	F2F4D59A808653E110B074AB0DC600B249E7451CC609EEEFF3EFDA1E32CCF7D8
SHA-512:	F8A9E4C39D6C3E12AD9D01DB9C0318FCB82B5DBE97B57CA6576A482CE157F456786752825E397122EA45FBCE77E6C3CF62A2671C1973E40DCBF3CF26852CD49C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....... ......n$....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:4F55FCD074F3E4119506ED59260C4062" xmpMM:DocumentID="xmp.did:17B3CA22F37811E492C4CBECAFB1AE21" xmpMM:InstanceID="xmp.iid:17B3CA21F37811E492C4CBECAFB1AE21" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F44166A275F3E411A027CF77346B534E" stRef:documentID="xmp.did:4F55FCD074F3E4119506ED59260C4062"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>B....q.IDATx......(O...........W.I$@.$.(2..^...

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2646
Entropy (8bit):	5.186625633836425
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3+Muik5kSR3+MuikywR3+MuiktStR3+MuikFXR3+MuikRCR3+Mm:ip1p6eUMuotMuYjMuvFMuboMu3dMuIw9
MD5:	45CDA1A73836131DD3614C2C3854CA4D
SHA1:	8C5F6023535CB883463E83170430B31EE72B5176
SHA-256:	218BEDD2A2817DFDE5F3A900B6204C7E378E1B747FF98AE89AEDFF2391E4429C
SHA-512:	EFA13E0D107CB9915BB8AB250B417880F08E255FF2D6457306FEF6A6FF0DEE0FC2F0FCA15738B71CE1AACCD3B2556B677881BEF4A6CB182D696B583F10E78559
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.01

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	928101
Entropy (8bit):	5.377009194479813
Encrypted:	false
SSDEEP:	6144:d4fuN26Vv8rzhMHp06bl0xlx52RWirV+hI8Zz49ezdCZTaCbvjrgxf5i6NEjeoXi:nCMH26bl0x6lB6NEjdsYG
MD5:	F66A42F617F6D659B4EC3F55516162BB
SHA1:	129C9E6DFB9344152954DD4D64A7E146CAC308C0
SHA-256:	0BFA8A87C8061A6B6F4D4F7F7D444D866EFB69AFBF33B5C0A5C62F68CE89A32E
SHA-512:	E92E279B7373A72DDBD01286CABA934C71520C8B4710C267B4DCE710D67F7C2FDB7ECECB14DA260788BA77F549428ECF204112B06466A2CF0375FBA5EB2F4351
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~b28b7af69.js?v=hOyTweQkD3Cx&l=english&_cdn=cloudflare
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..*/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[3250],{58627:e=>{e.exports=c,e.exports.match=function(e,t){var r=[];return i(c(e,r,t),r)},e.exports.regexpToFunction=i,e.exports.parse=n,e.exports.compile=function(e,t){return o(n(e,t),t)},e.exports.tokensToFunction=o,e.exports.tokensToRegExp=u;var t="/",r=new RegExp(["(\\\\.)","(?:\\:(\\w+)(?:\$((?:\\\\.\|[^\\\\()])+)\$)?\|\$((?:\\\\.\|[^\\\\()])+)\$)([+?])?"].join("\|"),"g");function n(e,n){for(var i,o=[],l=0,u=0,c="",g=n&&n.delimiter\|\|t,d=n&&n.whitelist\|\|void 0,p=!1;null!==(i=r.exec(e));){var f=i[0],m=i[1],h=i.index;if(c+=e.slice(u,h),u=h+f.length,m)c+=m[1],p=!0;else{var y="",_=i[2],b=i[3],v=i[4],S=i[5];if(!p&&c.length){var B=c.length-1,w=c[B];(!d\|\|d.indexOf(w)>-1)&&(y=w,c=c.slice(0,B))}c&&(o.push(c),c="",p=!1);var E="+"===S\|\|""===S,R="?"===S\|\|""===S,T

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136665
Entropy (8bit):	5.309075995831851
Encrypted:	false
SSDEEP:	1536:bZuIBobvWn/B3xfemTMnPKE8wt/1YJO0MMxZTEZ5jpYwr0svwWVjg9WN:bNYnPKE89AfMwZ5jWs0svwWVjg9u
MD5:	EDBD9E8B595A18EAAE835662B0EEAD1C
SHA1:	23405F4265A71B15EEDCDA4C95FE22F77374AC1D
SHA-256:	F24B9397B3AFBFA8240C56890731E2F61573CF85DE11EC763C149C6230AA37CD
SHA-512:	D1772AAFFA5B963834ACC42224F1523E322BFDDE7A2876A973C63D99B195E033D24005D69D9AAF669D82981EB0D5257CAA67F44480F561823991B23A43B0AAF8
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=english
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}......html {...height: 100%;..}....body.v6 {...position: relative;...min-height: 100%;...font-family: Arial, Helvetica, sans-serif;...color: #c6d4df;...font-size: 12px;..}....body.v6.in_client {...background-position: center top;..}....body.v6.game_bg {.. background: #1b2838;..}....body.v6 > div#global_header {...border-bottom-color: #171a21;..}.....v6_bg {.../* background: url( '/public/images/v6/tag_browse_header_bg.png' ) no-repeat center top; */..}....body.blue .v6_bg {...background:....url( '/public/images/v6/blue_top_center.png' ) center top no-repeat,....url( '/public/images/v6/blue_top_repeat.png' ) center top repeat-x..;.....min-height: 370px;..}....body.v6 div#store_header {...background-color: transparent;..

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	83456
Entropy (8bit):	7.979452529242036
Encrypted:	false
SSDEEP:	1536:OBSMA03jU3jzafE8S3WGaJQKxUGE94r8+E5vHj9Sl9rCueWTc6wj:OBS/oAjz18SmGT8UGE99++pSl9rCueW8
MD5:	9A6495F1E2705831C1F5851D2C909F65
SHA1:	5D908832E3C3B353419E8F2EED0A03F00A3EA1D5
SHA-256:	AF166357F389F9493C769BA6B7AEA0E65682D2F6578633109E005C973A95E44C
SHA-512:	A576C0A14BB4FBB54A3864DCBCAFEB500C6D26BA9FA376BAF6B90FDF76C47BE97989C008CF13BB3D8BB8F5141D59FFE4CBF087C8787BCAE3B1764ED1E3B45F89
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................O.........................!1.A."Qa..2q...#BR....3b...r.$456Cs...Stu.7...%D..8..................................=.......................!1.A."Qa.q.2.........#3BR.$4Cb.r................?....Z...i.1............d....a..[.c`....o.#m;.z>..s.{a.._..b.dP0.$.m..gN.q.z;:..z..1.w.1=.D.#.-...h...&.t...=.n....[.Bf..4...@...?M.;..\|1...'.?....\...T..T..1....m...3.7)6.t..WFJ..=.......2...F.....D.6....a..%..=....S.F...$J...[...0.aa.....{6.);Z....C0...V.W...8......k\.8..E......E..%.9pk.JX..e.m.LN=...".. .../..\|..@.:H.{..\0.........!....Um...%A;v......J.lE...B$..PB........\.y,.9O.}SAQH/$^.m..@.8JJKa.X...M.]p.H....H..ie..aMl7X..[..7[...M6\.\r....<.m.+..>$_r.:.......1.b..,)1.m..*.v....0<.0.T0...y!...o$.\|.......r.Y.9p7.)..5...p.....7v@x..s.....t..J......L........

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2718
Entropy (8bit):	5.1885781810824785
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3Yk5kSR3YkywR3YktStR3YkFXR3YkRCR3Yk50woR3Yke+oR3Yks:ip1p6e8NOkXNwf+WAow
MD5:	19F4A36C629C358690FC93DBD234D105
SHA1:	6BBC819E64172D57A4ABDAA20C8E2B8A32DD662C
SHA-256:	E753A6B743187C7D592E6E2D3580336751E6211CD228AD7410E02DB29EC91AD8
SHA-512:	9D5B920DCFF126BFC338E167B0BE6A82650E8B3BF1DEEB40E9573541A050E152731509ED85D17175A165307D989176A96E586A7DDD9C2394F40413ABD72482CF
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudflare
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://community.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 616x353, components 3
Category:	downloaded
Size (bytes):	110095
Entropy (8bit):	7.981276203197958
Encrypted:	false
SSDEEP:	3072:MQn+bWQRYMCxHkTdmMgV4HkWnLFnAoLo7/nac:MQnk2MCxHkTa4EiFAwo7nac
MD5:	7AD61B4390D8A6E42A8617488C5C278B
SHA1:	DE5F43FCFCEA9E26B41954291336EB8517B82004
SHA-256:	BA9B184DD43787A62C3D7D4DF49E4207DC606BFC6632BDBD5335AE40FA139670
SHA-512:	99A012968B3CD7980C2D86ABCD0B44FA982E54B3DEDA51513A4544DF58D71ACF162BAAC4362915FFAEFE27566DBF45933288533A44ECE37F6CF0B435B986AC81
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1145350/capsule_616x353.jpg?t=1715727000
Preview:	......JFIF.............C....................................................................C.......................................................................a.h.............................................`..........................!.1A.."Qa.2q...#B...R....$3br..4C..%58Scs..u.....&DWtv.......'dew....................................N......................!..1AQa.."q....2.....B.#3R.br......4S.$%5CT.6Ds....Ec.............?..Q.S+...".....M.....j{q#.....!>g.......6..tP....}.1(I.]..........P.re....>.b.mO.Ru...(./.s..h...Fc..O...W.Kw.?..S.d..e.l.BfTw.QXH.U(_....#.......n..$'.#.`\)....`..A.K...=l/.d.q.. 2Tz...".b[`...).7?.......'Pi..D...*..I~K.h......\|0D.d......#....T..........2W.x...d.-{.\|..q{.(.U}D.w.".......zu. Q.@...... ...7b....}.0..t.Scq`w#.L...{..lA.l.......J.l.....CD.+./eX\....u:t..6...._E..7..?,DB=..e.M.n.X.......E....)F...<. Q.......k.[.(.Z@ .....".R.......x......k....Q...~].+z."..D...[{.B3e..sp9xm..aI..A.y...r..D.;.....W.w#.;]_..P^)$.J..#..\..\B4....u

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	38790
Entropy (8bit):	7.974130803045187
Encrypted:	false
SSDEEP:	768:GWStLc4uQ//gExVVzrHmRwbNqg468YTjBHqWG3uXUdsFuF:GWSeLQXNzrHGUoo9TjBHqW3XU
MD5:	A01DF7F7769714E8D6FC41592FE1D85C
SHA1:	2F5FC39AC4C701D1EFD1B7566F63D50BE9414AC2
SHA-256:	9C7C9D4821A2F08CA8135F99644895C1F9B8239BC0170151BB8D8D32D750E655
SHA-512:	4F2FAD084DEC096A8A6B5B21FB9554834E14B8C3FB79003F36F4C356E39F44A0A67BAAEFD34CB5FDD26CFFAFF1415583F95F1CA1525A7C317A33105ED9153C31
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2194530/header.jpg?t=1712738249
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................................................................H...........................!1.."AQa.q...#2B.Rb.3r.....$C...4S.cs.D....................................7.......................!1.A..Q"2aq.........B#R..$3b..............?....J.sl].G...'...l..y.1..`T8o..G.@.u^d.......uyb..o.K..I..y.q..#f...U..o`...CHe.)......N...:.....[.'.E..T....\|0............d~&....\|.;.............QQ$......>d..o.......0.......\|..........N.8.tS....:.~........+w...t...HR.....A....8.Kj'......b.pn8..J.rI'.h8t.<..v...M...Tn.m....y..y.s....I8F.ej7%D...`m.......:....... .,.....W..Tw.G,%..R.V.)[..H...\|y-_..5..e.J....6.>5...]......3&..i.w(.Ufb.t}../Fe.9x..... ._.H.....N..o...x.g......Z.J]:sScH[2.Xu...T...#..I.g..........Nr=N.P./<\.^@j,v.\|..qeD.........F.J=..7/.l.W\qd...(.Z...=*.......qHf.S,..B.q...\|.....uO;...J..1[.....yrj.Ya(....A

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	dropped
Size (bytes):	32316
Entropy (8bit):	7.971621585979904
Encrypted:	false
SSDEEP:	768:5444444tV9D26nGiBlBftpkZ0juY3IaFLBhZN94eyC7pkR:5444444tC6pTXuujJNVhZN94eB7pG
MD5:	860AA7B7BD7CA97449A0044840548BAF
SHA1:	0187995D4F0F969F0B019A3F49FB99B32A6D582C
SHA-256:	59D44DAC41F314559A255C35A182C0B157F944E422A84CDBD582F23F2E012F78
SHA-512:	50E200D6F8D265A4C64A8993803C62B9C8DF9AAB048AE5E795F1CF65832BC3A37133235457EC1D0EE204CFD4DFFF7E50B5957C96C53D72159E9F90C552A1E24A
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8......................................................................485...........82D....w...w...w.<..............B;.pH;.pH;.pH;.pH;.pH;.pH;.pH;.pH;.pV).I.a..8,'.'......Y.c.A.S.B{.pj(.!.......X......xB/....;......yx5...P..&.....F.O8..ZG1A.q........@......F........@..Y.5......U....,....Jc..wxI....p{.<...O.....X.paY.sf......r.J."7m.Ht....`....H.HD!.....#[B.H..T....D...Q.a.$..%1QT"....k...\......H...bH..m....oW\..Z.. W1.......ot.ju.S'.4..h.5..... \....&......$......T....,.RQ..F)LVU..5&...7...........!...rb..o.t[A...z.e....g..u........j^.9.x..^......;!..Z.OMww,..._...t..!.L......%@.....10..."D....$\jJ....$..#r.....N.w..=.8I....r....q..../..u.u..[a.......'.j^V..=jU......ke.<#...=5......he.l..g..y.3...h.O..#....V..........%J...IB.....j........+EBF.1j..@T..N......\|%...2c.......O...n

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	downloaded
Size (bytes):	54227
Entropy (8bit):	7.984578761339897
Encrypted:	false
SSDEEP:	768:C2F+3Xjj3MWtdU271lrkgE+bmzSlTBnGojeQD0KDpDf2POX0r/5/UknVaFXzFx+1:Cy4XjbvZQkbXlJVAw2POkbCknV0Xd/Q
MD5:	F59DE80B3BE4779D2CCBFDD8C0080549
SHA1:	680C5156BD11F7CFAE0EC04667222CEEA098EE5F
SHA-256:	E4BD8749607DF2DC9C719110290E16CB97836919C2E263C96268525C62B7B5E1
SHA-512:	B05AE4BD3C69476B92248B3DF79AE014D62F824BB694B457ADBCA2C584709D6B728C8261ADBF6AD68686A89704DE0DA7E34FBF5400D4CF566703F08BC2E74FF7
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2447221343464645894/310BF7F05EEFF0110627D7FA9137C7FBBE1ED028/?imw=512&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8.........................................................................y......o5.Vr3dj...H..-1.......5.G..V....j .k.\|.G+i.f...1<....:...cs...m.>....K03......)....DS^...cs..%1.&k....dRG}....."B...2.c...l....D..f.DC.Iy..9...d....a..s....j.%......P...S..rE.....u.6.K,....i....".".cLM.yK.]..A...T.....'...w./.]....sY..H..S..a.}2N..+...7......"....?=I...$J..Rq!.$..KU9b&9HH...#)JX....&.1!...G$9Z.I...d.Xq..{O.c..\...t..$...Ew..A....u....R..y.../.S.^.U....D.6...?Z..GA..M.T.}$.s6..s...3..d.#hv.....}...}...w}..l..=.[B,W.......!rE ...R.H..%<.O_5'V.iH .X.,4g..+1).b.(W+T.!...)r...Qg.w.P2._...T}g+....X..#..o..P[?.5....].....q...Z..C..X..^....D...:..1<H.....)..nr8..zFC..k..HP`f.....W..pJ.?..g.CN./..&.D.....kk.!X...&..B.1,/$...M.j3mh....5A...zS...K...-..W..^....S....$..c..}...a..7o..9

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	53903
Entropy (8bit):	7.977862972312359
Encrypted:	false
SSDEEP:	1536:BSgZgrJ4ZBa1wsS5lLVRN3onB9R1NqDaJAHWbBrRAeWxB:B3qrJ4GU5nRN3ojRbLAKAjT
MD5:	D31ABE8CE61F7D55567943E732E0B61D
SHA1:	8451C2C87987802B9A83E8B893551DB73BEB3152
SHA-256:	E0670CAC6ADDA0CE2B5A05695FCD161267F2881075C8A8A6F3898F4D7105C903
SHA-512:	9BF2878235069FC9A451E97AC870E424A9C41EC29515AD1A176D48D692B016C2221228184B488B438CEF688DA302CC77A12D27810FF1D5E734413EF4633DB7EB
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/730/ss_0f8cf82d019c614760fd20801f2bb4001da7ea77.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................Q.........................!.1.AQ."aq..2....#BR...3.4br..$C..%56Scst....&7...u...................................-......................!.1.A.Q"2.a.q#3B..R..............?..B.._i.w..\|.........k..g.rR..M.Z.q.qb.<H.2.%X.^...L^..i.....R.\|..$..x..6...h.hq\|...G.....E.....s.F;w<..Z.L.Ohqh.r....v...\.t.R...........!<6..<.;..+.D....m..!".V;....+S.0.......`k]Fi.....>jJB-...r"H..s..74.....F....#.~u%..M.....2...C$...L..\.`}..).f$u...!.I........Vm49t.....b.&..prO??Z....../B.^..o..{#G:...9...(8..E.qO..c.u$.{....[.!...W.......y.........;7.iTm....9...Bh.b...N..P.,..(.x..'.~5-.....Y...`.....w+.Bg.%.h........VBDW...Tax.l....$..s..*..uc.;....hB.o.PTl..EP....=e..@...Z..t.H,...=....f....7.......+.../o..........B.N......nL..>.S..L...i.x.G...,....d..D.g6...J.Q-.

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	downloaded
Size (bytes):	52294
Entropy (8bit):	7.988040055146957
Encrypted:	false
SSDEEP:	1536:GMjgZMN53NsyGNTUbA2jWulb2rmz0zx7/tGx:G7MN5dsRTUA2aQNE+
MD5:	D186AF4E74AAD63F47F73B4ED683FE99
SHA1:	B578178FC45C5412855CEFDEFEF68BE98E1D4BC3
SHA-256:	7D5774EFCA63D9AD49620ABD66217CA649DFBE8061DB71DCE131A22F9E471AFE
SHA-512:	A5EC3B78DF869AF9D2BA253DDEEE08A7C42A9819F0C4580C6A69075A5C5F87488FAB4CCCE12C72066E573D19B06824DD4643C4279C2ED8FE644E935D56FD020F
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2479872440761778578/7CC51C0AC855E2F5C323848D9C0F4121B66C6E04/?imw=512&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........9........................................................................h.\.#_.....Q.R,..<.7J...H..O.....'..a\......SMw....=....o........M..k8Am.P.x....7..=My./..w{8.8<..Mw.TO{......{>........owk...m. ....+'.7.h#o..8.D.Ik@...........,.A!.u".h!..l.s...3....o/j....$t.....m..h..7..[.8.....{RC<X..d"....M..NL..q.....{...3..g.s...G.....:.....`b.....]s..C...>.w..5.1...t%.I1..0.....k..........y.%...9...d#\|..k.{,..i.......W....X....Zj'...&...}....2..{n.3.......t.(..f...%y...J".S..2..R..wk..}W...^..g.M7.....8...h. G......A6...>RaN..T.z...3..(..L.........^..P.y.gdy..x........F.4P4.%.....c..i..5B.QQ.l. ...G...uV.......w....\..%e.B2..0..N(.l.o...ft ..rk.....<...7.....z.=d.a..n....:S-.b=...E.zPO..P..Z....lV.$...o....=.. ...D.&6.<3fN.Ji...B...L.]gW1,..w".W.Y..8R!...?....Hx.`..

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 49x49, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	77617
Entropy (8bit):	7.979189231681901
Encrypted:	false
SSDEEP:	1536:lDNUSrylt71GnEnvmOTPKmrr6E0zPEkIalNLmKCCOuDnHJ0Mhe84U6hR:liSW1WEnr76bzPBXHyKdFHJ0ob4P
MD5:	472DD7512046DA979FE759F597DD3159
SHA1:	7A4BE725CB3F06B2BD2C536A15C3E37830113593
SHA-256:	844035168D867E2D6CB22E3F168C1E56A060852677577C5088C6D670736CC70B
SHA-512:	0F1637509A546CF78670BE07338398DD90CD72B75C96FB197AD9C3446CE03C0E0CE84B8BDC7CE279C1C5EF67F71980CFE2B3C70EB3FC37B28D25E814D6B550AA
Malicious:	false
Reputation:	low
Preview:	......JFIF.....1.1.....C....................................................................C.......................................................................Q.X.............................................J..........................!.1."AQ..aq#2..3B....R...$4br.5s.67.....%CSt...................................C........................!.1A.Q"a..2q.....#B..3.4Rr..b..$5C....%S.............?...-g8...}D`E.GK[.qGG.1.P....r.Pd.l.W.#>SW.J........Cs.m.=......\#...."9.Z$.]..2MWy....2d...+..gR.)...b&...K.Ktf4..y...=.SI.}a..6...%RN.i{\m.4......zm@c...........q ....X.."...R}c....PV.61.Z...i.\|.z}6.....E...mJ...r........Sa..P).E......}B.M.,.i4..T.Om..R&KiW7...Pn.......6.H.bM.\|:...8@.G....'.&.L.....j..C)HZ{.GN..q....W.W...SkR.>.+4.'c..Z.....+J8L..m..2(U...a......'/L...c)..8.Z.4.;.u7.{K6..m.........K..!gc...V...m.@....r.-....5.Dl.h.m-.+..[@..Jk\.e..~..c.v.S}../"..Keg....q.J......uK.,....y...Q.`..KF;.,.U.i.BV..'.[Tu._.....}.%..%....K.B.^.EW..f..ioX..h..9y(Q.4SNy

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1816
Entropy (8bit):	7.335413459481553
Encrypted:	false
SSDEEP:	48:mwqQNn2xkJ3n7OO8oPTFC+6vUycoKGCAHcDsr9CQ:6Y2w72o7Fh68yLdHcYr9CQ
MD5:	C8A9A5322C7A32D42405AEC4ECC91E8C
SHA1:	A6A04E08067EBBC6E9D70361FAD164CAB634BD9D
SHA-256:	02E650004D02B883D1F77E3C9AB18F556D470CC4F41500917D0CDA68EC62D197
SHA-512:	F057B313CE4AEED427AC04B1278A8FFE105843CD0998CAC5E01DDBCD53CAFFCB5584239646A73C40281D671D22C2E163E0FC3F1A589FFF9E9479CAC206EB241B
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/search_icon_btn.png
Preview:	.PNG........IHDR...............c....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D62C327C9D6211E6BC85ED92E7B3F4DB" xmpMM:DocumentID="xmp.did:D62C327D9D6211E6BC85ED92E7B3F4DB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D62C327A9D6211E6BC85ED92E7B3F4DB" stRef:documentID="xmp.did:D62C327B9D6211E6BC85ED92E7B3F4DB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`......IDATx.U.k.W.?....fg?21..hT.......H-..VQ.-.......`...(>H...R,B.7...t.iM.i01...nv....;....1...M....a...=...

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 292x136, components 3
Category:	downloaded
Size (bytes):	13336
Entropy (8bit):	7.9608729443721655
Encrypted:	false
SSDEEP:	192:yRSoNERDbL0+m5/ssbq2hB96T+i+eK0DwjwJ4lXan6+Q3pWu6JTMxNJf:6SJn/m5/tNr9W+iI0ExK6+Gpe6H
MD5:	06A6484EE4DBE057FD2056DD0C648BC6
SHA1:	13FD230A0F25E1CF41082F3E73AADF6278646CD9
SHA-256:	6EF09E4AF6DB9E10D6A1DCA56ED819DC29C36EA827EC70579CC25F1590403479
SHA-512:	53637474917A98C7217C76848ABF86C21198EC23E25637946AD9FF77D152DC7D46FAFA7C9D60A206853C88F3A0A0788678042C63B5A448110459A455ABE640C1
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1745170/header_292x136.jpg?t=1714383419
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................R..........................!...1a.AQq"2....BRbr...#3....$Ccs....%4TUe...'7DSu.....................................>.........................!.1AQq...."2a...3BR.....#4Cb$%r.S..............?..2..{....`.V.y:\|.A....t.r6..a.0\|.`........).Ti.#g..?]....e..........G.S..V...`E....Y .,.H..Y ...`...`.VK).tY,....e0].J.]+%h......V0].D.&.$_.....HX.VK)..YL.N.e0].G)..YL+..d..K$.M,.].G$.N.d..#..Y...dr.vK$.E....9a.;).F4.l.[...Y.....mjmc..H#. .b..M.W...2ZUFiM.b....A.7...q.b,^m....u....;..4..../...d..;...$..H2E....i.s...dt=.d.%..].K$;.,.......J.X.WN.yAtY#h.. ...vX..!`...].D.{.d.#...d.-.HY".....a..Om.8.P..-F.).$... 7+ .v.>...... .......!....S..C.mG.U.r.MLK.,...%.@..dpkN.IC<M/p.`.D..VGw....d.......dCf..[.wE...j....wF)n.X..........,...v_K.v.#U...nN].[2kJTJ.A.d.4..W.%.k....

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	807
Entropy (8bit):	0.4261982118465057
Encrypted:	false
SSDEEP:	3:CUlFE/xlzeze:zFEGze
MD5:	39BC952559E5A8F4E84BA035FB2F7390
SHA1:	4F415467396B4A50149373CA75BCB4C04C2F60B6
SHA-256:	8F73EF54EFC672061F69CA881FE318DCCC6DD67D993CBB8E76E53E52C84EE493
SHA-512:	C7E107E803941A965A173EC8DC7DDFB052C042AB0070E92E5FF47D0E02ECB38446BDC13BBF201D68B2F5696AFBEEA1AF494A65EED4B086EF368CF147892E4409
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,................;

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	75765
Entropy (8bit):	5.208166538449924
Encrypted:	false
SSDEEP:	1536:+2Lui8uGr1tUL3eYHpYUKHjPn8VrUirZLYnGXKhbBM+HdfozNnMNJv:oY21tULRk
MD5:	1EC1A73B6E39812312A29A1D6D8E7AED
SHA1:	B513B828A59C1D55A4AD5DE6DF50D964A2AB0E62
SHA-256:	5A5E9B92BB93B57309D676530266A4BAA454DA036B231AC550DD9DC433771BCB
SHA-512:	1CCF33BAD47879BDF16C3F74858CB4E9FBA0C018BE42F89B680B0C2AA0B9E1CF08B3A74D1ED86202A4A9C8AB90759334DD862FA98BDDFC9408528A24679B6622
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~642602239.js?contenthash=5dd5b4d316afbe01d44f
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[6656],{40029:(e,t,r)=>{r.d(t,{Mi:()=>Ze,P1:()=>be,Rq:()=>j,iR:()=>tt,jp:()=>oe,oT:()=>Oe,ro:()=>K,sj:()=>te});var i=r(47427);function n(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,i)}return r}function a(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?n(Object(r),!0).forEach((function(t){c(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):n(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(!(e instanceof t))throw new TypeErro

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2103
Entropy (8bit):	7.428875646425908
Encrypted:	false
SSDEEP:	48:swqQNn2xYJ3m6piUaNLmGQ71BPD/rqXBquFUj:8Y2k8vm77DJuFw
MD5:	70DD94DB2CC784EE7D1D4E711E1C4260
SHA1:	F04A6007DA546006B008B1A7D143B4DCB4A3147A
SHA-256:	16D0421C9B126BA66695653318780CBD30FEF1FE2093F9135EEB323A37143A1E
SHA-512:	BC3BAE539458647145262590EC96496EE6AAE6985FF3FE0D4BDFB7E6FF7748C861D7E874FEEA32E301FD437BF68274E203BB2C75E8BC779BE69973A746DEC2D8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:8BABEDF13D2B11E499A8960F9E7800EB" xmpMM:DocumentID="xmp.did:8BABEDF23D2B11E499A8960F9E7800EB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8BABEDEF3D2B11E499A8960F9E7800EB" stRef:documentID="xmp.did:8BABEDF03D2B11E499A8960F9E7800EB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>d..z....IDATx..X]O"g.~a.>e.(.@......j...&\.7m...j.@.E.4....m/..VSC.M.5`(.@G.D@.d.3.&.8..0.z.o2.q..{.y.s.h.~..1..

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	206869
Entropy (8bit):	7.9804127725777585
Encrypted:	false
SSDEEP:	6144:QL7wh/vmkbGoLpo1QNOJD0RQARPJq16//IZV:KUh2QG2AQNOJDuQARPJ2iaV
MD5:	A5CD255E7AC8DB5B6777BBC7193E4C17
SHA1:	E8A9657A27B8EA715BE93FA4DC15147AFF93734E
SHA-256:	6FBF27B3833A0286BE02E56EF153DEFAA1CA509D7DA7D2896E7A3C706ED31557
SHA-512:	1FCC63CA1847FCA4CB437D876FB885BAE4870B3D2F55D722F5AEC3EE779162DDE17BA114F90BC100F2052A370D5FF4AFE68BA95295FA54A7436A84A5BDA7D6A4
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;......8...."..........6...................................................................'..H...U.:.R.B.R.Q.5...a,.Y...I..4U.T.C`.-Q@v.......J......K..'V.,.gpV5b.e.6.9.4Q....H..0.Z-.1.:\......M...>....z]..zy...mFz.r6,.y@L.h.3....O?.5...e?4......y.n'o.tyG...0..y..Z...R...PJ.B...?.Yw....\|.NN..\|....P.....C"_.V...Y....~S..........._J...c^...~~._.o.t.o.....}.\|.?...}..".c....5...\....iz....x..Tk..f..k4.&$..L.8.S....j...F.YW.1i'.@Wa.$(.C. j.k+i.q-S.2.`...R..[.FBC.e.$.I...o....y..g./F..{..J1b..'Q.k....kL.0..G[.;...gt47;....tET.J...0.J...f.`D.U.D6....mi9..@.(d@d........].Ql.#..UY.R.@)DJ...#(......T&.."C._O....I..4..Hu.z.o2.......'.^I+...9aK.S.V.Q..W.........s~..}?..\|_J.....o6..WH..Mit..].d.....%...=.....S...Q....Iv".M.....y...C5%J......O..NGg..>....o.2.O..W......y.._...\.L(.^...>;.....p...M.\....L....J}-

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12036), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	80741
Entropy (8bit):	5.836891653085002
Encrypted:	false
SSDEEP:	1536:uAQoyr+AhvJvXbxTPJ64Ct+n69bB6460YRgZVHbOmvQf:CsVbOsQf
MD5:	3A930CD34CF243458D1CB9218B168C84
SHA1:	F882A94F311F543BE438BE3B1CDA2D41498C2C02
SHA-256:	FFE2ACD52A07911550AB3C08E6DB46D5E93F36C03FE8AA22C33293D297C76B8B
SHA-512:	5A04F682972BEC2AB3D172E99E1C6AC6A6BE5A92400007F36580B93385B40F3594D0395CDD707253473790DB57DF2F9137BFBA8F94CDF46FBB9F33EC2C58CF97
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/applications/community/chunk~b1f9f17fd.css?contenthash=89633ec89e0fda129395
Preview:	............_3QxOk9vRCMtECRA_UQ0Dv3{background-color:#1e1724;margin-bottom:20px}._2LfKB_VzYGZoYoASldOwHP ._1wsxj0X0psRSaMuSl-HjJF{background:#1e1724;color:#fff;display:flex}._2LfKB_VzYGZoYoASldOwHP .-WzN3d0FUMoINI1QX5nC4{display:flex;position:relative;margin-bottom:15px}._2LfKB_VzYGZoYoASldOwHP ._3vRv1Gn-ZFBQTbvFmxI0Y3{display:flex;flex-direction:column}._2LfKB_VzYGZoYoASldOwHP ._3Sq0joZJ3GK-OEKFtYjh_R{color:#fff;text-transform:uppercase;font-weight:800;font-size:36px;line-height:36px;margin:20px 0}._2LfKB_VzYGZoYoASldOwHP ._3kVDtwum3nesOw6HPtv5fh{width:80px;margin-right:30px}._2LfKB_VzYGZoYoASldOwHP ._1Y6BPiGTlbpxVBM-mp9mXC{margin-bottom:10px}._2LfKB_VzYGZoYoASldOwHP ._1Y6BPiGTlbpxVBM-mp9mXC *{cursor:pointer}._2LfKB_VzYGZoYoASldOwHP ._25wr68strIQ_SCCi9rbezQ{font-weight:bold}._2LfKB_VzYGZoYoASldOwHP ._1GmmxI5NXrD2soG4p359gM{margin:10px 0}._2LfKB_VzYGZoYoASldOwHP ._1GmmxI5NXrD2soG4p359gM a{text-decoration:underline}._1etNGx-mR8tEakPZNAkrvW{padding:10px;background-color:#6d5934;color:#db

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	81759
Entropy (8bit):	5.164806371858404
Encrypted:	false
SSDEEP:	1536:4xmec6nvUaCtfx8KXTiKQ0WNmgriO9eHn6I5gTGOGJq3bnuhNQXvXvdpOCPQ57Hl:4tmB1vjj
MD5:	62CBCAFDE36F477E14341CC48A7E16FB
SHA1:	F2805D6083551B7033D5E04E7F5A1182C55CDC2A
SHA-256:	64D31726E54FEECCAE91DA26DB58E11CFCAB9C015D6680434CC5B4C591605F19
SHA-512:	D05F7B26552635EDB97F85C1523999826D70DE13CE60E1EF64F9252C081B4D10F3E4D4E255C1EF891FF76E3DCA54C1939056B7F28942B560F8725BF1C77233C4
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~c1dfbefd5.js?contenthash=d3fb7b7d10d08f0d7ff8
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[3801],{38079:(e,r,t)=>{t.d(r,{AY:()=>o,KQ:()=>l,_v:()=>s,q8:()=>c});var i=t(10059),a=t(39087);const n=i.Message;class s extends n{static ImplementsStaticInterface(){}constructor(e=null){super(),s.prototype.sale_filter\|\|a.aR(s.M()),n.initialize(this,e,0,-1,[3],null)}static M(){return s.sm_m\|\|(s.sm_m={proto:s,fields:{sale_filter:{n:1,c:l},content_hub_filter:{n:2,c:o},store_filters:{n:3,c:u,r:!0,q:!0}}}),s.sm_m}static MBF(){return s.sm_mbf\|\|(s.sm_mbf=a.Bh(s.M())),s.sm_mbf}toObject(e=!1){return s.toObject(e,this)}static toObject(e,r){return a.TA(s.M(),e,r)}static fromObject(e){return a.aD(s.M(),e)}static deserializeBinary(e){let r=new i.BinaryReader(e),t=new s;return s.deserializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){return a

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14187), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	55976
Entropy (8bit):	5.856422338632499
Encrypted:	false
SSDEEP:	768:01X+K5CPcdPlsPVTCK2WiOh9TTDz8mSDZ8nZGCc:09IPcdPlsJ9TTk5
MD5:	AC0E5658BB64FCF4843E2F9CA9831C39
SHA1:	7BBC6DFB754788F2FB8AF20A0D90988F390FA75A
SHA-256:	FCB55E0E6C79520E46B5322BF9234C1BF54BFF41382680A2B10E2F506A2CFC57
SHA-512:	722137560B16FEE8FCD09CE902BF92565F5D672430855FAB106285D28AA706CCC14DBEFD165CDD97DF9B51CDA80AD3FFD5C45133F793F75EBA0AE90AA5489235
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/applications/community/chunk~642602239.css?contenthash=59316afb14f0823f60a9
Preview:	............_1miMhQTx-6BvBZ1LsOjdgc,._1jG_-tTU53X85RGx_FABL2{display:inline-flex;white-space:nowrap}._1miMhQTx-6BvBZ1LsOjdgc span._3D4jIToP-g1jxP4iLT74dh,._1jG_-tTU53X85RGx_FABL2 span._3D4jIToP-g1jxP4iLT74dh{margin:0px 4px;color:#6c767f}._1jG_-tTU53X85RGx_FABL2{display:inline-flex}._2ZcVE43ISqOFTj9Zbw3msS{color:#a3cf06;display:flex}._2ZcVE43ISqOFTj9Zbw3msS ._y2DQDJ5toIRanQZFjDCx{background:#a3cf06;font-size:11px;color:#222;padding:0px 5px;border-radius:2px;display:flex;flex-direction:row;align-items:center;position:relative;text-transform:uppercase;font-weight:500;margin-right:4px;margin-top:1px}._3sPONDb9e2ctNJ23X97Rxx{font-size:12px;font-weight:200;color:#b1b4b9;text-transform:uppercase;letter-spacing:1px}._3zhjahHCGX4slI7ziVhROt{padding:3px 8px;border-radius:2px;background-color:#5e6068;color:#fff;text-transform:uppercase;box-shadow:1px 1px 2px 2px rgba(0,0,0,.3)}._4K3Bl-RZYjH0IHfPO10FC{margin:0px 4px;text-transform:initial;color:#868f98;letter-spacing:normal}._3sqcQTW9oCh_HBrotB1Dk

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	206869
Entropy (8bit):	7.9804127725777585
Encrypted:	false
SSDEEP:	6144:QL7wh/vmkbGoLpo1QNOJD0RQARPJq16//IZV:KUh2QG2AQNOJDuQARPJ2iaV
MD5:	A5CD255E7AC8DB5B6777BBC7193E4C17
SHA1:	E8A9657A27B8EA715BE93FA4DC15147AFF93734E
SHA-256:	6FBF27B3833A0286BE02E56EF153DEFAA1CA509D7DA7D2896E7A3C706ED31557
SHA-512:	1FCC63CA1847FCA4CB437D876FB885BAE4870B3D2F55D722F5AEC3EE779162DDE17BA114F90BC100F2052A370D5FF4AFE68BA95295FA54A7436A84A5BDA7D6A4
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2485501307081282805/44E15EBA5E7ED7F9897D7B31DE948477553F9DAF/?imw=1920&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;......8...."..........6...................................................................'..H...U.:.R.B.R.Q.5...a,.Y...I..4U.T.C`.-Q@v.......J......K..'V.,.gpV5b.e.6.9.4Q....H..0.Z-.1.:\......M...>....z]..zy...mFz.r6,.y@L.h.3....O?.5...e?4......y.n'o.tyG...0..y..Z...R...PJ.B...?.Yw....\|.NN..\|....P.....C"_.V...Y....~S..........._J...c^...~~._.o.t.o.....}.\|.?...}..".c....5...\....iz....x..Tk..f..k4.&$..L.8.S....j...F.YW.1i'.@Wa.$(.C. j.k+i.q-S.2.`...R..[.FBC.e.$.I...o....y..g./F..{..J1b..'Q.k....kL.0..G[.;...gt47;....tET.J...0.J...f.`D.U.D6....mi9..@.(d@d........].Ql.#..UY.R.@)DJ...#(......T&.."C._O....I..4..Hu.z.o2.......'.^I+...9aK.S.V.Q..W.........s~..}?..\|_J.....o6..WH..Mit..].d.....%...=.....S...Q....Iv".M.....y...C5%J......O..NGg..>....o.2.O..W......y.._...\.L(.^...>;.....p...M.\....L....J}-

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 369x353, components 3
Category:	dropped
Size (bytes):	14577
Entropy (8bit):	7.864346510667554
Encrypted:	false
SSDEEP:	384:JT7C8EzMfitRkllhOVNewoTmiT1PYL03tgUhhC8x7vNUZ0rj9:JT7C8Ez+inkP1LKzUhhC8xWKB
MD5:	9657670EEFB782A590993D109F8432C5
SHA1:	0E7FDA37E045A70DC19E9432DA502BBC008703D8
SHA-256:	06BE12F654ACEC50204D5BE9B5E054E3C1EBB62CE0FFA8821F8C65055BAB92E6
SHA-512:	30C72EC34D61A647D2DF5DFC3477940F5A90993DCB1F3E479E141510B054E97BB3A7B57675D48CAF756FDF7D0A2F6D0E1EF1D6E0CD13143BF7CB584EF5D14923
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......Z.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:AFC2F315A24911E6B6C8933CD867CC7B" xmpMM:DocumentID="xmp.did:AFC2F316A24911E6B6C8933CD867CC7B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AFC2F313A24911E6B6C8933CD867CC7B" stRef:documentID="xmp.did:AFC2F314A24911E6B6C8933CD867CC7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d...........................8.....................................................................................................

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	58243
Entropy (8bit):	7.984169597905209
Encrypted:	false
SSDEEP:	1536:hU3C2PxyH/VZI39roDiOs3NQc2ckrM1l7bK0NTd:hU3dP4H/VZgrn3NQ+k2lXxNTd
MD5:	A61E5E68A8AC2FF2180890D12DD08E05
SHA1:	E2F2AFC6A8A71BB19B48C3DC0C34B96AEC6CFFA4
SHA-256:	ECBE8AFE2E56652D92E66984158E77C3BC131772B1F0156C8A094C07A3DE9175
SHA-512:	903A6A3033D84709A7F5DACCA5E27FA6BF104AADF1DBF3BA1DF97C4D738D7D1DFE9A2981EDA72213F4C10ADC0FD53A6CEA90FF396822D43B88A4C2F630469B2A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................a.h............................................V........................!..1A..Qa."q..2..#BR..b....3r.$C...%DSct....69Tsu...4Uef....................................;.......................!1.A.Q."aq....2......#B3.$CR...b..............?..Lq...p.P....5...0..-.b.H.K.U.c.(. ..MB..J.Y-.X....C...L.0..OB.0`Q.Dy.cB.........A%M@.+@. 9j.-H9..S ./L.h....J.,._#.V..'!.X!&#.u.......d..F...A..v.bM[8]WP.i.7C...Up...V.....+...n.-...yUy"....UNo#...%._,.oc..D...#L......,.B..[..vQ.-5..N..(.oOTP..e......7.e.i[=.G.=<4.......sX...5-..E...m..U'F.njmlbT.:...5$...O.i....$..{.rt..J0.....u...$Pg;1.:..Z.\..g..$.\|..iZ..T(.X...){.V]Y..A..h.I.8.6....\|o....'.."f....=W.....}JU..B'.g..z..M..L-..y.....m..._U.....q...L'$K..wl.n..U/U.V.P..8<...X.!.3..f.V............8...`....t.bY...^..r*..]4...?.>.I..........sm../..o..z........

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	702
Entropy (8bit):	6.805425587929178
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9roNN0kEW0YIzKwbpcdFYOiEscTlEkUJfT2:Ac1spMroN7AYiDbpcdFY8sipGb2
MD5:	E89EE7BC3EEF1CA9184F69758BA3FE36
SHA1:	1D33AE6EF98078966C625BBD7A67A5538DADF4CC
SHA-256:	9498210D8F9B4268D4396C6E0756A0F414895AE89C8ED5EA972E13B172E4DCD3
SHA-512:	D409E6B849F5A54CE98050A2049BA9AA210B73B1900C8A27E2DF2C91D601D678C0E81C1390774D1D2CA07799B48D9F1E8CCE2200F4735BF41575A68622973434
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . .."....................................-.........................1..!Aa.#.."..$2Qq...........................&......................1.!....."Aa...............?...j.V....+).6......o....J.$..........ezT.b.FK.`g.).=..?..S._..o.n:RmV...E.~T...3.\|....wf..4..0.....(d.....-.z.-...z....O.S.F1..+.N......R..G%z{r..M.$.............@...R"....P.e'aZ.EDT...-.4.$..........=..2.!...i-.FB...\|....z..i..g"d.\......>.ZaF................7'.}.[......'.....8..WH&Y.$...9....,.....he..1...rB..........:.:U..>u.(L...u.......6...h.P.4H.j..

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	86788
Entropy (8bit):	5.666574779805543
Encrypted:	false
SSDEEP:	1536:ONnreaPWZxrmucwoMf1abY1oB2n70HupuF8P+WaVgDYqiaiiP1rNUEs1+5T7EeEA:EtlDKpUnweoQk
MD5:	948E15DEA2CB3EB318103DF666ED3DC9
SHA1:	B1F032A7B9195DFB0926F7116C09BB82A50625BE
SHA-256:	AACB641E19DC550A0C4B521D54AB80D66E96CDE21B96774409DD62201F66D639
SHA-512:	EBB734F0E6A39A5C27B234A642C1C3B365601B03B1080E972C2FD7718584D27812652694DDCC643ECF72451CD05D4952FF7AD2AEB3EE287F9BC5FEA01AE4E97C
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=lI4V3qLLPrMY&l=english
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3706
Entropy (8bit):	4.968151243504802
Encrypted:	false
SSDEEP:	96:aeOCGSO9TuD2YD+pQrprgx2VuJA8RoWdA:aDBu
MD5:	FF40A59671699AE63A3A37C9338612F4
SHA1:	C6F166F3847630F0591589511BD42FF9B7035B26
SHA-256:	46A9C57E77A87A44E59346C3C5A1C6AF49EF045D2CC4CFFBA98264783712822D
SHA-512:	64138A29AF3C1B7EBBDEEB6191C8400496049D28F258EED044A75B8C05459D36DEC8318F743DC7F94ABC2AC099EEA92B491372923CB13F4C49A31A6CBE331D22
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/css/apphub_images.css?v=_0CllnFpmuY6&l=english&_cdn=cloudflare
Preview:	.......appHubNewsIconHolder.eurogamer..{...background-image:url('https://community.cloudflare.steamstatic.com/public/shared/images/news/img_eurogamer.gif');..}.....appHubNewsIconHolder.kotaku..{...background-image:url('https://community.cloudflare.steamstatic.com/public/shared/images/news/img_kotaku.gif');..}.....appHubNewsIconHolder.pcgamer..{...background-image:url('https://community.cloudflare.steamstatic.com/public/shared/images/news/img_pcgamer.gif');..}.....appHubNewsIconHolder.kotaku..{...background-image:url('https://community.cloudflare.steamstatic.com/public/shared/images/news/img_kotaku.gif');..}.....appHubNewsIconHolder.rps..{...background-image:url('https://community.cloudflare.steamstatic.com/public/shared/images/news/img_rockpapershotgun.gif');..}.....appHubNewsIconHolder.shacknews..{...background-image:url('https://community.cloudflare.steamstatic.com/public/shared/images/news/img_shacknews.gif');..}.....appHubNewsIconHolder.steam_release..{...background-image:url('http

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	77479
Entropy (8bit):	7.979067362271511
Encrypted:	false
SSDEEP:	1536:pgHOJxRmR3ynmG2BwW/IU8ux3g1N9fok8G3Mb3OoHI3YfQSvOgWKrRugkK8:pgHAi0mTBwCpR3g1N9ghbe+I35kOgWKy
MD5:	7D031AB7A6739FDB13F76F1321AAEFE6
SHA1:	1684C8D18DC8159C69230F200F8B389142DABBD0
SHA-256:	04BCF02BF8B154985BB7A4A55F2A8EE988812A0A361F8F5FF85D3E7DE0468BAF
SHA-512:	9E6F5F08FD5ADA2CDDA98B0B83B496A82FFB791008BE3E2F55000592FB25AC1852F2335535FA323E449AA9FA20E635E5E30C15415BCF5F6ADE6646E480CF42A4
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/553850/ss_33e684e9cb2517af1599f0ca2b57d65ee82c2e51.600x338.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Q.X............................................N.........................!..1A"Qaq..2.....#B...3Rbr...$.45Cst..67.%.....D...................................7.......................!1.A"Qa.2q..........#3B.R.b4r.............?...YM34..$..7.k..[.".e..V..%.`E....7.....&...B.......RI.v. ...r....Z...;G"..mo0H?\|+~j..i.t+..Zd.+...N..........ZYfD...X.'....I[...$Ja..P.....m.#.r)eHgv...n.......S.6..Z.Q........v'...>..$....Z..V5....\|VMG.\..P..P.].....X]=.[..J.....aC..G#.._.%...i$..x..`.......u40..yz..IQn.PPOm^....:.l\|x..;g....\.Y....5;U..B%.k4.9.@1...T..:.[.k..Xq../..._,..D^.".+$....1.P......DS..D..K..KL..<.J.X@X..l......v.E%.u.Ag(.........2..I..-.;.-..U.uIr.KV.mO..8.XB.H'd..A.."..{u..=...)...99.........)R6...Y.i{!.m...7.t.Kt<9..4.....=l.O[...5vMZ.D....nH6:...KZ.n:..%..(4.....8.Oo.\|]..>J.K2....)U5......%n.

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 306x260, components 3
Category:	dropped
Size (bytes):	98215
Entropy (8bit):	7.975711413386814
Encrypted:	false
SSDEEP:	1536:404SLzP2W62NHi/f6/emvHBHiZtFcSiFNbuZlv8556Q7JnpNYhKrT2z7RhOBMxae:4bSLzP2W62GSXfBHWt1iFl4lE5h9pNqP
MD5:	F5864CA263EC1051BBF2F4FCBF811DE1
SHA1:	7EBBCBB3403F993E4D9B51DAFE072A3CD3563BDF
SHA-256:	9796B7309C20638E60FDE302C1C3609EBC5BACFD48332CE3CB0A37155BD90872
SHA-512:	ADAF34ECABA8D78D6081CCD6931260C0BD6EEA0185A321E1DA055A93FADC1BB10ED75BC85152BED12D4AD3296027E3689AF11F68CBC73E20EBF6F7F2AD8393F9
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 616x353, components 3
Category:	downloaded
Size (bytes):	64237
Entropy (8bit):	7.951636807269081
Encrypted:	false
SSDEEP:	768:ekmOsLYOyjI/Gn2+Bthjt1xvYVzmgwDxaHUWQ+XDOYyO+BcQgcK42MoIDBcf6C2o:FsHynfLZizmgw34O3cC95DB26Ca4
MD5:	C96FCF0CDBF68806A49770174811F320
SHA1:	0BCD897ADEF4B4A45A4EC91F8F37495C79CEFA18
SHA-256:	47F02AC4DC3E55FA3F916F05DCEBB0E748EBB73AB459F3ABD22537E1E2B22C2F
SHA-512:	64EF7A8805ECD4AD40B82E8A2460E286AB8FFA80B063764D9411DE51D4D41289D65438A6721B2580F5CA9A98FDC27FBB93B53795F82C877DE21E8FEF0481A181
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/730/capsule_616x353.jpg?t=1698860631
Preview:	......JFIF.............C....................................................................C.......................................................................a.h............................................b..........................!1.AQ..."aq.2....B........#RU...$3Wbr..&4Vs....CSTu...68...%'57Dct....................................J........................!1A....Qq...."Sa......2..$BR#TUbr.%34...&5...Ccs............?...a.]X..b.B.K...x..{8S..Wy.X<.......+-.<...b.qC/......<..rK.f..]1..................W...^I...8rp...%...\.s.9..p........... .k... ..J_D7D..>..._7N...0...0....T....... ..p.B..o.}....%k...d.'3.!..w.........HH$..S.E.BiR..\.o.....5...@..J}7...ja....Uk....j..'t..d.i..i..Q......>..\|.50.L.......~.@..)92[4.....H.Q....\..y..sS.$..j..Ze...#.N.I.J. ....-S'.:C.....&A.]...U...I...wU...LJ. .,..'zw..g.\|.`..N]...K.T..0...a2..Y.w......UUJ...S=b\.(3..h..I=.Bs.89..-Y:p.I.A]..y....x-..Fp8...w'&O .....g..c.....==.b.#.\|..8,,0..U....dh.v...^%..js....w..IK@..

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 312x205, components 3
Category:	downloaded
Size (bytes):	11100
Entropy (8bit):	7.89198577869451
Encrypted:	false
SSDEEP:	192:J7SAva1ogiBNXXLpMwHn9+GI7LXweaqOmqB9SskTz8SEIW07UvkL:J7F+1ivXdMwdYraZSskUSEimA
MD5:	F4F0B6326C2003EB4402B54C58F94EEA
SHA1:	DB85DADC5D6AF60916109C7A0CBE271E136499AD
SHA-256:	7C5E12F86A8D057BF3CA1E838261E461363078FA52B23628D0D628106D87E5AF
SHA-512:	3FD46E921029E1902DA3F61C81267738A34A9066677BA8963A57D29ADD2D64D0D584DF27DACB9D118227989473BEC5ADB992EF20F4836D45A680A8F29C73DB15
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/home/background_spotlight.jpg
Preview:	......Exif..II*.................Ducky.......Z.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:087FE64A8C0311E6AFFD9C9877AAAA54" xmpMM:DocumentID="xmp.did:087FE64B8C0311E6AFFD9C9877AAAA54"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:087FE6488C0311E6AFFD9C9877AAAA54" stRef:documentID="xmp.did:087FE6498C0311E6AFFD9C9877AAAA54"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d....................;...n..+Z....................................................................................................

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 292x136, components 3
Category:	dropped
Size (bytes):	10170
Entropy (8bit):	7.942102848430485
Encrypted:	false
SSDEEP:	192:mlRZRxc4eN+Xw145jYx9UCjp40c380F1lohR/UounWSqEQUbj0F/8:mlRZbneNT145jYqlrTof8JnWDU6/8
MD5:	10E3695E55E1FD42587E9505B3F461A5
SHA1:	00C6E1DE17DD919502BBB209464EC9CC121B2CC9
SHA-256:	CD274025104FCD3D5183B3BC950C31B96B324B4F3B684124E839D5B03C508F46
SHA-512:	AC570CAEA0EB473DCFC958913C1D5743DCB06F3899719209F2FF20B609D7DAC5DDAF435C2486D89EC97989E73BA85D78A04A29D4F929551D5593EE8D62519BD8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................\..........................!...1."AQaq...2Bt........#$56ERUdrs....%34CDbe.......V...'STc..................................1.......................!1.2A."Qa...bqBR.....#..............?...G.d.N.}`..q....O\|+.C...Q.............C..aA..XC.f..l+)!d...c..Z\|.!HQ+O\|+..d....C`.V1D..P........B..Y.lT&...&.-s.c.%5..qP......Bn4..(...T&Q..L...-....;..79. ....X@0-...`n......k@M...#J.......e... .ve.I..h.0....O."...l..T.rzT...T....ts...:GzT2..L....u.....)....3....Z.!H..F..>\cV).&...T..(q.8w./u.{.ua..m.......*.6i.d.~Y..D....t..1.....C.]..s>.{.B......e..w.....a&.b..Y7.n.2....y...P,...:.>..c.\|.&...$.,..qM..mS.ltNMF..K..._C&}...n..@..._.T.w;.u%....v^..Ti..hz.S....0.[...I$.Ox.s......G...Y.]RUr....q.....F..b5RLh.5pt.:...(...AK0.......).p....ib..5......L.......B%.WDP.LP...

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65358), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	217380
Entropy (8bit):	4.884806326778741
Encrypted:	false
SSDEEP:	3072:O8mdKzaFhOyAow8mi5Wri2/hqHhRm+8CmY9yfF8Kd:OBdKziOyQ8miGi2/4m+8xa8F7
MD5:	655BFC2BB8E47CE3FA9D2C8DC02AB7CA
SHA1:	09B413B97B90363AE5F7BDC77C4193424837DF85
SHA-256:	079BC1EE2C7D69B253FC5288544E73F188809EBD7FF831B47341F6AE291DA2F4
SHA-512:	71AEE92F9B9716CE5FD926C42CA164A2CE5DBF071DA0C56C53276A729AA8DF2DD6740325D1CCB37C01F001762C45B65AC0EDD637A669B6027FE3B21BAC11AF9F
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/localization/main_english-json.js?contenthash=cfcee568a9b043acaadb
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[9665],{63336:e=>{e.exports=JSON.parse('{"language":"english","Hello_Friend":"Hello, %1$s! Glad to meet you!","AgeGate_Content":"Content posted in this community","AgeGate_MayContain_2":"may contain %1$s or %2$s","AgeGate_MayContain_4":"may contain %1$s, %2$s, %3$s or %4$s","AgeGate_Violence":"Strong Violence","AgeGate_Gore":"Gore","AgeGate_Sex":"Sexual Content","AgeGate_Nudity":"Nudity","AgeGate_Generic1":"may not be appropriate for all ages,","AgeGate_Generic2":" or may not be appropriate for viewing at work.","AgeGate_DontWarnMe":"Don\'t warn me again for %1$s","AgeGate_Reason":"Your preferences are configured to warn you when images may be sensitive.","AgeGate_Edit":"Edit Preferences","AgeGate_LoadingPreferences":"Loading Your Preferences","C

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 616x353, components 3
Category:	downloaded
Size (bytes):	58243
Entropy (8bit):	7.984169597905209
Encrypted:	false
SSDEEP:	1536:hU3C2PxyH/VZI39roDiOs3NQc2ckrM1l7bK0NTd:hU3dP4H/VZgrn3NQ+k2lXxNTd
MD5:	A61E5E68A8AC2FF2180890D12DD08E05
SHA1:	E2F2AFC6A8A71BB19B48C3DC0C34B96AEC6CFFA4
SHA-256:	ECBE8AFE2E56652D92E66984158E77C3BC131772B1F0156C8A094C07A3DE9175
SHA-512:	903A6A3033D84709A7F5DACCA5E27FA6BF104AADF1DBF3BA1DF97C4D738D7D1DFE9A2981EDA72213F4C10ADC0FD53A6CEA90FF396822D43B88A4C2F630469B2A
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1604030/capsule_616x353.jpg?t=1715590903
Preview:	......JFIF.....v.v.....C....................................................................C.......................................................................a.h............................................V........................!..1A..Qa."q..2..#BR..b....3r.$C...%DSct....69Tsu...4Uef....................................;.......................!1.A.Q."aq....2......#B3.$CR...b..............?..Lq...p.P....5...0..-.b.H.K.U.c.(. ..MB..J.Y-.X....C...L.0..OB.0`Q.Dy.cB.........A%M@.+@. 9j.-H9..S ./L.h....J.,._#.V..'!.X!&#.u.......d..F...A..v.bM[8]WP.i.7C...Up...V.....+...n.-...yUy"....UNo#...%._,.oc..D...#L......,.B..[..vQ.-5..N..(.oOTP..e......7.e.i[=.G.=<4.......sX...5-..E...m..U'F.njmlbT.:...5$...O.i....$..{.rt..J0.....u...$Pg;1.:..Z.\..g..$.\|..iZ..T(.X...){.V]Y..A..h.I.8.6....\|o....'.."f....=W.....}JU..B'.g..z..M..L-..y.....m..._U.....q...L'$K..wl.n..U/U.V.P..8<...X.!.3..f.V............8...`....t.bY...^..r*..]4...?.>.I..........sm../..o..z........

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	7191
Entropy (8bit):	7.915516774302266
Encrypted:	false
SSDEEP:	192:kUDbUFYj74bDRwmW4fVwFBxWu5rALXkgGF0N4IbFZ5:x8FU43R9dtwdpvF0N4IZb
MD5:	12D351E46089D595272FD5357D6A3891
SHA1:	544C0CF0F72FD2755C637EC192BD4EC5AB527B3F
SHA-256:	D142521EA5204CFDD0B2F70754CC00C63F80138BFAB11AE8B180E9F694275FA6
SHA-512:	DCFA9F904218449A7EDF7CCDE6ACC4C4B7F92ACF55B6F3DBE4253E8FB80A6C20E901877883384537BCF5FD540407ED99CF29BEB9CA4211433338D8F39CEBD5F7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E.............................................7..........................!.1."AQ.2aq....#BR...3.$b...............................3......................!1.A..Qa"2q.....3Bb....#R..............?..C....t/0/..m..(..>.}...^.x.9:XD)....^x8..B#.u..Z...o<..). ..R.....c#L.U.^-..=.?A...4!3J.ow`.PJ.O...".q.....q...e.1..yN.Vw..)............O?.B.w{n.}kJ.M..R.P..Ft..JAV..>%.v...;s.HpQ.MBTw%).....HH8.I...n..D.@I7.E.}Q..<.m...l.....n}x...n..\.xc..d.G.....-......".y..v.F..u[!L....v.%..ED.I:){/.'..v...N...z.@U.....3......s...Q-.]Fi.0..O..'. h.^.q.'n.....!.V.II=...d.V....d;.....KA.!...,....I..P{/.}..........U..i# }...\..H.........A.....t.$.0pS.,..`..\Nv....k..^#4.V.......Ae...Vr..hA."...(....1..z.+.....F7.)).S.........f...tM...GG.....AV.~....&.G......!\|..h......d.Di...+...l.....UP.JL..}.:.-....}3..'E.!L..d.

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 1920x1861, components 3
Category:	downloaded
Size (bytes):	738184
Entropy (8bit):	7.988035298741717
Encrypted:	false
SSDEEP:	12288:++SKSxIF5kpQ9gdTd0cSQRfMivT0O6rMvq36nb9rd6RC7r2ObEjwr0whjJf52:+EoX0c3lDwOIMtb9rd6y2+EjGjNA
MD5:	A6ACA25A0D869DF520983527632A1042
SHA1:	61A27727670C5C9EC7DE3C03EDC9B0AB4AF00799
SHA-256:	F9AB134EADEFE5F0D0115B4FF58F26541B95A936F58D0DBFEED28618CD2747BC
SHA-512:	1999058CE10E45793F6D3FA17261114D2B7934B955054A6779D9E06638A0866F8C116691A1149C5A11332E918D13E5D8535389D5D2509BBCE6BD006D35C13B22
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2497886839272572847/40AE9162BE1DAD72D1A4146FD73BBF1E44834D24/?imw=1920&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.....%.%.................................................................! !,,;...........................................................! !,,;......E...."..........9............................................................................O..............z.._...3..9{Y.1)..P.....-@........) ..`m....@.% .....................................(...........................................d`....L..t.....d`..s...Bu..V..##..s.P.M..........p............................d`.......................1....d....r.v3............3.y..6..6...........#...@=.........................w#..H..C2]...\|.......KOa............h.........R..........................................................@......X.......................21..........3............................@..........0.............@......(g\.............N}.@.'#..c .. .........`......1..4..7.J...............H.d........N.-x......... .............. .....-;.iP..+.S..vH.Y5g....%....Rs...F..c.m.n.p..J..0........N@.H....................

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	189427
Entropy (8bit):	7.992607279014738
Encrypted:	true
SSDEEP:	3072:QEaNV9kVtVCJkv2eThOT82xrBjSDPiTE4qnrMq59Aqk65Y6F//HyxJA:QE89kVeqhUHRE4irMq59+65Y6VSY
MD5:	70D3FF4273D0B164FE6415DE819A5216
SHA1:	1ED442D5137688C6CD685D6AC93A628E9AAC6206
SHA-256:	2BAE90ADC868D17ACA695FD140B96E496CA4E20515B4196AC8C3B258FE1D072D
SHA-512:	6324B404A8BB44EF75B8AF02EB679470594084D316C0610B80C6792594BBF153916777D7C88E0DAE42C37BFB123F18BE38D854E68238E3FCF2B2AE6570E561D3
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2494509226693636192/4F814796FC399EC38DC52285FD9B67316F9F9F82/?imw=1920&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;......8...."..........9....................................................................../....y....IH.......^.H..C.....q....[...../.@..G......B...\x. ...eD[.)r.pg..T.$..Y..F..\|.B.Q..lo$.D..NNh..M..a.M.!...:C..+..&.l...a..J..T..r[...7..(.q.x....M..jR..E...8.K.e.z%..H,.Y....=.o....".S...f....(.....-..n..zgP..Z6.....Z..nT......xkh..a...)J..t..,..&,M.%......Q.....9'.>+3NGX%.iIJ.#Lht.....a.-...I../......;.a.7....eF.O.........5..=.D.#.w...r.,...^.-.$nYJ..p.z.......x.s[....5....UJk.OIj....u.1...mW.....DCh]\..m.......M.^.C.B4Fm..31.G1...u=.-..s.h.wJ-;.;..z..9 '=.3.[..%A.w..Q.\lkJ...#i...........fl.T...n.U)r.....X.....L0. ..:M..q-....E....!....E....?....0&..F..5..V\|.{..n...B.]%....M....QI....IF_..Z5...l.zV...%.31..eDRR.b...........oM..d. ....i'\|4k.R$.)..&....F.vFIRE.....,....M.Z'.D;....K.Z

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3869
Entropy (8bit):	5.202974641159808
Encrypted:	false
SSDEEP:	96:dzr17blMqpVDifmMLRIQUiZoYwFkgfDNcnKeGDj1ICqjM4Hv:J15/WOMLRIQUtSgLNcnlGDj1IZjMev
MD5:	75F321BB2F8BAE9CA8E5C4C6D72521BD
SHA1:	8ED540DC9DA8C5D7C2BBE390FC663E6DE0B1EF0C
SHA-256:	92A217685EDA5E8319D193142AEADF80AE7A9C9E04A9A365D9CF01078D459985
SHA-512:	DD411A60FA6BFCFC2CFFACEC1F0FCFA6665710D744D64077C992DFB3D21E8071155EE59B3C5FC1DE67440F701D480FC2B28D99A7EEB79C456F6FFE17BF77A7CD
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english&_cdn=cloudflare
Preview:	var g_fnModalDismissHandler = false;..var g_bIsMobileController = false;....function showGotSteamModal( contentEl, steamURL, appName )..{...$('gotSteam_SteamURL').href = steamURL;...$('gotSteam_AppName').update( appName );...showModal( contentEl );..}....function showContentAsModal( idModal, elContent, bExplicitDismissalOnly )..{...var elModal = $(idModal);...var elModalContent = elModal.down('.modal_box_ctn');.....if ( elContent.parentNode != elModalContent )...{....if ( elContent.parentNode ).....elContent.remove();......elModalContent.appendChild( elContent );...}...elContent.siblings().invoke('hide');...elContent.show();......showModal( elModal, bExplicitDismissalOnly );..}....function showModal( contentEl, bExplicitDismisalOnly, bIgnoreResizeAndScrollEvents )..{...var cEl = $(contentEl);...if ( cEl.is_visible_modal )...{....modalSizing( cEl, true );....return;...}.....var bgEl = $('modalBG');...if(!bgEl)...{....bgEl = document.createElement('div');....$J(document.body ).append(bgE

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1210
Entropy (8bit):	7.459664429384581
Encrypted:	false
SSDEEP:	24:5f+b0o0XxDuLHeOWXG4OZ7DAJuLHenX3bq1qvFFEHJS8Bsdcgt5iv6QBO25+b0:5fIFuERAZgCFSH5Bsd9Cvty0
MD5:	BA4E51640291BB03CBD41951D9672584
SHA1:	0BBB630D63262DD66D2FDD0F7D37E8661A410075
SHA-256:	3520B13DD1A7954829EB15CD6ABAFCE4F908EA5C624B9DE40C25CCAEFF74F87B
SHA-512:	244A8848BD0D21B9E6B608244346FD4837E513ACF88B2C9599F921530AD440C9737C2B33E253CFBDC163453C9114F15B669410B1C55109DE44A883A5181EF564
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0f7d37e8661a410075.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C....................................................................... . .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......!.k.TZ..$.\...[.2....1h.q.I+a~...W..em.x...5....t?...n.MW..V.a.-.. .....u.Q.z..r+...r.%....#.JX\...C....9E^V...e....4$.u...d.....w..o..<K../.....&........6p.>.5......}:+......8.3.........i......e...8.3.....j)..#.'{.7-.,%z..E..Q.....xG.......4E...E'.a2..A....M..............~6.>.u.W..o..~.

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1219), with CRLF line terminators
Category:	dropped
Size (bytes):	133992
Entropy (8bit):	5.412975158481911
Encrypted:	false
SSDEEP:	1536:ZFXypwKzCXU4qZca07dCfZHZOKyKeHNZZFNDRjgOHraAx+HE2uR0Z3GgU24dcRuh:VlA6
MD5:	3DCB9646727BDED3FA65E04788097B27
SHA1:	C5084763EAC10C312652077A3EFE527EC0B21B52
SHA-256:	487B59CE7D17A761DF7F5A76E33907FEFB271011E14F515C4673780245FF4B25
SHA-512:	2FA173C3A475A40C305316237F819088CAEA3CBA94AE2AE3F87CAB0702F92EE3F3A2E53A8FD6B228378387A41ED1E29E653CBD7284B72C1DD95A455FC73ED12F
Malicious:	false
Reputation:	low
Preview:	<div id="page1">...<div data-panel="{"focusable":true,"clickOnActivate":true}" class="apphub_Card modalContentLink interactable" style="display: none" data-modal-content-url="https://gtm.you1.cn/profiles/76561198389231209/recommended/427410/" data-modal-content-sizetofit="false">...<div class="apphub_CardContentMain">....<div class="apphub_UserReviewCardContent">.....<div class="found_helpful">......2,111 people found this review helpful<br>17 people found this review funny....<div class="review_award_aggregated tooltip" data-tooltip-html="<div class="review_award_ctn_hover">....<div class="review_award" data-reaction="18" data-reactioncount="61">.......<img class="review_award_icon tooltip" src="https://store.akamai.steamstatic.com/public/images/loyalty/reactions/still/18.png?v=5"/>.......<span class="review_award_count ">61</span>......</div>..........<div

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	downloaded
Size (bytes):	38024
Entropy (8bit):	7.984256611051493
Encrypted:	false
SSDEEP:	768:KrbxhkFX/BmSQyZMThKeVS5/pFYjKGdox18U4W4p70IEswblUX+FCLsAFhz4:ixjSQyZMTRS9YjK4ox154W070N1k5sKs
MD5:	669F8E6C638794B57D5455A35E40D8D8
SHA1:	61C7604A0E7F63017118B13BD9AAF51B21538795
SHA-256:	CB2580C4F2E80C3AA1C0773B489CD8D798C335A511FC91BE5EDD18A4FF27D5F7
SHA-512:	DEFC4A782A4F8BD89C518AC082DAAD30D14A34E4FA445847B3FE0369817DDD745B1111BD59E51D494E74478377FF304DBBF8575E887A56BB4D0D131844DB17EA
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2447221343464649418/E3CAF387BB0B0CF79AD22EB83E46568345D93B6D/?imw=512&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8......................................................................>...E.9B..n..@.....MTI../d.&<..."d.pe.../........P..x....lC.R.....e...W......:'..v.fPR.u......)...Vt..C.zV.>#>.".."2[...".l.C.....e..o..j.0.pe.."V.J.q..:1~s..#......Tv.n.VF.........4\..4..a....N..R]".GR.Q.P.kW.J....3.:...lP..L.n}8#...^fh.q.YS.ym.+.y$$......n.`.z..c...1..7...h..-._.2.S.K..7.:...YSO.+...C..{.:'$J...\.#.....hS.Q..6L ../W..G..a...,..sH..".T;<.(.Mp;Q...8..TTm..A..a.A.....9.KY..'T3'v....B..Ub'*...p.bO.......+.BBm.b\|..r. ....G..9/.>."Ly]/....%b(.pE....?#>...l........h.:/x....I.H....i..o.?.........~'.....}...C.....n.WE.h.R..b..tx..w..$.9.+...vH..B.C.)7[..v....S.;.'O;L~"G...[).e...U..K.V,.]s..q.a...C..\.._..v8.f)B...aB%....;E.H.G...p....6zU..9$.../Z...DK.(.........Y...g.=...c...z.....#(..5~K

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	3149
Entropy (8bit):	7.767927625415787
Encrypted:	false
SSDEEP:	48:vozjUQ9Ulm0gZIbyhc4uHvEk4y4vkqzA+7a1Qwg1yDCGnlHPQZ:QzYQ3yLzHv4P8nk1yDCGlHPQZ
MD5:	49070C5878D6755F571686741BDB1696
SHA1:	3C6EFCC5BB3E5B09F97B4C498A6895F32384BE81
SHA-256:	F560C50EC9C260E76FEFC066C174A318CACE6734D097340AFD05BD893EEF15D0
SHA-512:	0AD0D2A3DE7DDA04CE1117E7C31D4EB1787C261500490C2640335ADFB5D89848CFF6728BADF874A036C34F45EE687B0284EA09B95A7C044A9B06BCB71B86ECD1
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1245620/capsule_184x69.jpg?t=1710261394
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................3...........................!.1A."..Qa2BR..$%3q..................................1........................!1A.Q.2aq......"..3B#b.............?.......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(........)=E..P..@(......P..@T!G.......P..@(..?w]...Z..$.C.2.K.,o.R..".8o.Y......C.Y.X..1...~...a.r.,L?.).....H.BS......]6....eI.Y.8..]]..iW..y.n+n......>.8.....k...m.[..K..).A.^G....IKCD...s.q..v.l.Z.....ci.c....{...S...%.8....)$..........O.RI)4H7.5.\|o.......rALhL..-......<...J..l...Y..,...P.#)7.w.}=7`...i.x.#..(..s!..w..i..V.py.....5..BQ.8.}=..8.y....a........q........2.&C...P@..%J..........uq.%..s\..7........#....~..F[kQ.c..D..J.....e(.(..n.Qr.k...^.."P..p....a....P....m6.nl.Q.u/..S..Q.....^.b...p.....,.5.b....[-...q.Jm......XN.>...js.

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	37743
Entropy (8bit):	7.96864728287564
Encrypted:	false
SSDEEP:	768:ydcjDoCcWU8asGAS+sEFqarHQJ5XTeM5ue2NVV5akwa72Qbm7:yGWWmAS+mazqtTeM5uNv8kwnl7
MD5:	A6B21F0060089B3FDDD49A893046C9F8
SHA1:	B89D5E33930E8617288CF604012CBDE32AFF75EB
SHA-256:	2D3D364652CCB44B9EC92A6C4CACFBA2D964BAABE150C6F26B00DA085D8ECE26
SHA-512:	3B7154572800C94B7E0AF0E958F160F3E95293BA7C43D54C59BED368DD53F47DF4AF56991689376A6FE85F0D7389401B5FC7A77A16C3C24FF729DEAB6FCFBDA8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................_...........................!.1."AQ..a.2q.#B.....3R...%bw......$8HXr......45CScsu(DEUdf.......................................;........................!1A."Q.2aq.......#S..3BR....$Cb45............?...e.....>..fs..%[b.L1HP$D....8..@.."....%............V..E..,z..&.....a.... C!C..-....%..aK......h.r"Yj>...x065F/.@.eEI.E.6lv..a.H%<,z@.F..9cq.4SE..F..vbpqt.....%rL..bxI.TxB..I...B=.R..H...{....".F%.91...\|.'..mR...`..&}b...b...N....A.p.1..BC..D..............BQ..B...lB..D..Q.V...C IFE..E.Fc.(..N....-..q.U.....o...b..f..YT....+...Y@.X=.....>.C.I.)" ..Pq.........e.>.,.(.........BA.E..!......!..B.`..1\...`...b...>8.lJ&...E=."$........#$.:...........Dr....p...16-...1..)......;9...b*>...a.X..'..X.%."..N.a...HH'1b....D@].b....D...Z"..A.N....rT....#8H!`..........{zEX...

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	57867
Entropy (8bit):	7.977752077799411
Encrypted:	false
SSDEEP:	1536:zwX8K/+SW/q7GBYL7drFxNCq+KcwwWieGgHaYqQmM:MsK9ZyBYL7hNCcnw14l
MD5:	B358780DF7F80D22F1A032D065A2A9C3
SHA1:	CAFE6F2C9A81A9CFFA0559DF936D6705D515D309
SHA-256:	DFDE5B9454029AAC2D7501415E7D8492E53D2626E380F61D86C3DCF8CC0D7426
SHA-512:	77B5E9E906B10AD9A1AF8DCAF723F0D377DDCEDECE6466AB7874C99CBFF1D4C59B0F34BD34DD372F938BF243039240D9ED0E1A448EE665CEB885D066724F3C2B
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2344520/ss_9ba2c9634f88f684f069d42d4de6a42f63b07911.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X...........................................F........................!.1AQ."aq.2.....#B.....3Rr..$45bs....tCc....................................7.....................!1..AQa."q.2....B....34...5R.#rs............?...mkq.#..<....$.O:...dyQs..Hh&..3.a...@.v..r...C..p.r..6..R.XH$..sR.#.wel.p..O.co....\lI.....(..n!..H...{..W<>..B<.3.0>...z.Eh_....G........'s.i.P..Y).Z.......Q.S......>(.........d...h...k.Y.&...0zoB...E.3...e$..b@#5w.d.47..E9..V.......^C`H.?h.2r.....p....Y.ZG......,..4..L....L ".$...He..........$.=....I.J._. c..42../..c5%.- D#+.9T..PB.....C......@......\|......0!...+Df.F..*....."]2...~.:cV...F2\|;.....).U./.i.eW...mK.P..@2^.....Dv..x......K...d.......pJ...U=....ZZG...2.....y'..t...w.....lq....ZE.Gf@8... ..H\....."..."FU.A..%.7.....{P...y.....7m.0El.Dj...k!I...U.....j(WL..[..c....`.

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	36898
Entropy (8bit):	7.97728249265315
Encrypted:	false
SSDEEP:	768:kjKBRKGDcTqPtFjxhsZdzRnn3LUU6DjCTs3eSZCMZ:1BRCTqPt5IRnn7X6Dj4s3eSZxZ
MD5:	4760A9D9636EDB9A02111B441A6CCC7D
SHA1:	C270690FAE2A3D3477D54154E52C2460E1FAA533
SHA-256:	91F3E39957E5A013C6374CA28B63B3A42443DA6BB3AB6334F26932B4C60C7940
SHA-512:	818A9AAE3E755F7BA03EF2C0EF7ECA38699C1CEBB352ECD9BCCA75DD75B228ED82D1FB4D52E89A453493B470505DEAA95CF85C170D207147E48A867221B4B3A5
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/9aQhbmoFhuY/0.jpg
Preview:	......JFIF......................................................................................................................................................h....".........................................S........................!1.A..."Qaq2......BR...#r.3b...$C....Ss....4c..D...TUd...................................:.......................!.1AQ..aq"...2........#Bb.RT.................?..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..(..(.....(..(..)..G.......$...-n...Fkr..j..Y&t:.j.\...r5EJ.t..f\.."`.9...5.'.7T;....`....('q.O.]....F(.N'..U..Z.....l}..........6.=.A6..0J1RD.`...\|.U.e.%.B:+geGbj,..5.[..\|....E.xY.....W.....t.'..[.EZ...E?....>-..-{s.w..}...ZyR.W...C.....j.......5.K......Q.K..d{.JV.....s..!?..'W...k....T.R.<..".T....@.%....v..)V....0...W."g...O?...]....>.z.=.d9{KN\|..\|..X.Gn.w_3.\|...<Hg..-tv

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2375
Entropy (8bit):	5.034891669580451
Encrypted:	false
SSDEEP:	48:goUClhKEM0I5EMKMMnMxHETerESRQwe9b+eVeDB0eq6VOPe8HFfye8lCUhkez8Mn:eClhKEM0OEMKM6MxkTebewe9aeVeDB0u
MD5:	7BAA3114E2389272E8B3A3001BD7A210
SHA1:	B564E0589F539175547971422C1E7042801B01EF
SHA-256:	9ACE5CCF7BA2E85D33D19BD36F69E6778C79BD6426A48934BE4E29F7FD98C5F0
SHA-512:	6274E8644D640FC0ACD68C6A9C680BED598E82F61A98D640BE0234AA7BE7CAA383B11718662596F5CEC9A9B6F33DA4F25630DBF4B473A2672110482714DDF6E8
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/creator_hub.css?v=e6oxFOI4knLo&l=english
Preview:	../* Recommended creators widget /.. .recommended_creators_ctn .home_smallcaps a.home_smallcap .recommended_creators_container img {... width: 32px;... height: 32px;.. }.....recommended_creators_ctn .home_smallcaps a.home_smallcap {...float: none;...display: inline-block;...white-space: normal;./ override the nowrap we set above /..}.....recommended_creators_ctn:not( .home_ctn ) {... margin: 20px auto 25px auto;.. }.....recommended_creators_ctn .store_capsule {...width: 228px;...background-image: url( '/public/images/v6/home/background_spotlight.jpg' );..}.....recommended_creators_ctn .store_capsule .capsule_header {...height: 107px;..}.....recommended_creators_ctn .store_capsule:not(:last-child) {...margin-right: 9px; / 9 * 2 + 3 * 200 = 618 */..}.....recommended_creators_ctn .store_capsule .discount_block {...min-height: 18px;.. justify-content: flex-end;..}.....recommended_creators_ctn .carousel_container .arrow {...top: 65px;..}...recommended_creators_ctn .carousel_container

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	5448
Entropy (8bit):	7.690935354941968
Encrypted:	false
SSDEEP:	96:h9/CiHbWVtGFeSt7qBK1h95WlApa2vKNXV+FxElKT9u0K3R+CUvZ3Yqf:n/Ci7WGsSt7qBKXppz+A0KTwdUX
MD5:	4085095E7A8A9BFD95AD1E5CDCB0FA59
SHA1:	9C0EF9168A5F0E5D6782529EBE46999BC8BFCB15
SHA-256:	2E5D276DC305318FBE1F98DE8C78D7261647FA0C6F81B6BFCC9ACB63AD6B1B8C
SHA-512:	803EF2016C684298B56ED26E694CAEBAF77A33940345307233C40AC652D5B0BEAC311F2ACBE612491EBF89A5BF356B7060DE43AB992C2240FB2AEE95662FC582
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%......ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........6.......................................................................{.TDi.mT......>0..^..]..LP...]..........\.hK.r..........b..b@.D.....a.`.Z......t...b.T.]...b....}.Uz..@..h......Q.^.........9..K,P...~...230....Y.~=.I:....tA.x.y..n4s..t.<.............9B.xf.6.I6.n..

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	55559
Entropy (8bit):	7.979472468861487
Encrypted:	false
SSDEEP:	1536:zK5sc0r8TVRCv3vdYaUbHQ1ZtohkW5MlZIVMR:zKSuSvSa/akwC
MD5:	2F96194356D3AA79AED0986877A8CBE8
SHA1:	71E4AF73E572F6EA7FD6226AB964D834B11764FA
SHA-256:	6CB077841092435502C7E532C391C244C48C434AEA7D91A6FA5FD8F771FFF9C3
SHA-512:	432DE192BF43936CB06E8522455CBBC405560BD5EECF40E9D2432ABEDC825C7DF64A055DF8B550CD952772BEE0B723691DA2F1C56CD2F22F4D31ADA0B62E5A82
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/945770/header.jpg?t=1715790219
Preview:	......JFIF.............C....................................................................C.......................................................................................................................b...........................!1.."AQa.q..#2B...3Rbr.....%C.....$Tcfs.....46Dtu.....&578EGSUVd......................................K.........................!1.AQ."aq.2........#3BRr...4b...$56s..C...%t.STc............?...._...d'.......4.:aTvNlS.:aS.KZ..aS,.7O.<.e.._..[.L..<.[.M.<.mn..$.._..5nn.}1.....N..emM(.<..M/...%..R...$..O..5nE...../-...aR,...N<.y.E...Y.W..1d._.."..lyybi~.<..M3...&%,.../%MRy./-...nE.'...P.I.....{tM..N.....,"P.B.......?.p.Yb.&..]%..._..^.l.9...r.Y...m....z....E$a..E.G..&..}.Z.hB.}.........K........4.5.:B\|L....}.......}..-.8.I..Y..z}Ba..2....z.ly..{ad9E..;D.$.S;T.\..O[.,...F<"..XC....F....O..... .6.F...m.p..Yir...O.%@....q..4...S.K.....:y..ms.OR}..ru ..f.;...S!)K@.4.J...O..lUiZ..CT....m..M%D...}.).:*.vQe.."X..t...h...'

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	7987
Entropy (8bit):	7.927181818576695
Encrypted:	false
SSDEEP:	192:eTrCqQ+1aNj/B+xSL62TeXVSP1qOJkZV+o78wJn2z/7K3S63bC:PP+AJ+xSPTeXwdqOJkZh7JnQzK3SsbC
MD5:	91BFA893C6E8C1C435099489C1E325DE
SHA1:	479F9415A85E123FC7F486BC79717A86CF51664F
SHA-256:	B0DE1AF2EEDE9E080EC8B9085399A04AA75C10B917374972319CCEEAE6434066
SHA-512:	9ECCED4136A9D4A5ECAC529647AA516C371A8BDF0574CEA4410A57B560D0B4592FC10599768D75E0668A15731EFAF286F96A3ED2831EE711A83EB985CB2B9708
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/230410/capsule_184x69.jpg?t=1715792355
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................=..........................!..1"A..Qaq2.#B..b......$3R...4Cr................................1.......................!1.AQ."aq...2......B..#3............?..t.Ah...}....Ey.....PA). .td....x..0.B..o.8.%....a.Hm.z........i...5..-.1Om.e. ..........j...c.PG.^...R..t.]..U. .q.>....ig.C0H.1.J..v}H...O....6t..QM5.Kr:Pv.U......#.4...j.\|[U.}..J..rq...E....@4....v...]\c.3.#i)..#.;"B...L.) ...$...~.D.Ls5..+v..s.k...y(m.d..-$..<..y..$..6v...$........GReE.E[.e...1%..4x....p...?<.n=..L.T...,9....+b3RP.n..G.T...q$...\|.oQ..Z.}.....Yy2....\R...............,.....\.a.m e.~..G.UE......4..=.R..Y#....?...[..U2m.aH.[Q.i.?Rq.?0..LR..[....@k...B.?I..+...1.B...S.%>.M=..NR..-...*.<~t$;s:.....O]H.e.......W..Tq....g......!v\.P...s....c.......)..H#.O?..&.`3..a.a...

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	169399
Entropy (8bit):	4.976254040069433
Encrypted:	false
SSDEEP:	1536:CZXcWblD1ySId1u6p3JuZolKvI28mGY7NIj4WT0PjXsW0NKWzcEjpPrmcGKJ/jfT:ocWblASIdIv8tXYPjkrmgD8d3dI
MD5:	6A39E0B509FECB928D47B8A2643FED2A
SHA1:	F67FA6CB1D09963D10BA117D6553C8E7D5BC7863
SHA-256:	D8BDEA7FFF893DBDBEAF6C2AFFEC091A77483B9EC10E7958486BC3B6CC170C96
SHA-512:	B9B8C6D9AC4928686C5EA254AC8F765C4F3690F79E5B1CCAAFFC48D4BD47872B9CC5475C038F70D804740C81915FDFCE315EBE553B628D12F7CA1CC4467075D0
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw
Preview:	../* Prototype JavaScript framework, version 1.7.. * (c) 2005-2010 Sam Stephenson.. .. Prototype is freely distributable under the terms of an MIT-style license... * For details, see the Prototype web site: http://www.prototypejs.org/.. .. --------------------------------------------------------------------------/....var Prototype = {.... Version: '1.7',.... Browser: (function(){.. var ua = navigator.userAgent;.. var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';.. return {.. IE: !!window.attachEvent && !isOpera,.. Opera: isOpera,.. WebKit: ua.indexOf('AppleWebKit/') > -1,.. Gecko: ua.indexOf('Gecko') > -1 && ua.indexOf('KHTML') === -1,.. MobileSafari: /Apple.Mobile/.test(ua).. }.. })(),.... BrowserFeatures: {.. XPath: !!document.evaluate,.... SelectorsAPI: !!document.querySelector,.... ElementExtensions: (function() {.. var constructor = window.Element

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	702
Entropy (8bit):	6.805425587929178
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9roNN0kEW0YIzKwbpcdFYOiEscTlEkUJfT2:Ac1spMroN7AYiDbpcdFY8sipGb2
MD5:	E89EE7BC3EEF1CA9184F69758BA3FE36
SHA1:	1D33AE6EF98078966C625BBD7A67A5538DADF4CC
SHA-256:	9498210D8F9B4268D4396C6E0756A0F414895AE89C8ED5EA972E13B172E4DCD3
SHA-512:	D409E6B849F5A54CE98050A2049BA9AA210B73B1900C8A27E2DF2C91D601D678C0E81C1390774D1D2CA07799B48D9F1E8CCE2200F4735BF41575A68622973434
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steamcommunity/public/images/apps/730/8dbc71957312bbd3baea65848b545be9eae2a355.jpg
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . .."....................................-.........................1..!Aa.#.."..$2Qq...........................&......................1.!....."Aa...............?...j.V....+).6......o....J.$..........ezT.b.FK.`g.).=..?..S._..o.n:RmV...E.~T...3.\|....wf..4..0.....(d.....-.z.-...z....O.S.F1..+.N......R..G%z{r..M.$.............@...R"....P.e'aZ.EDT...-.4.$..........=..2.!...i-.FB...\|....z..i..g"d.\......>.ZaF................7'.}.[......'.....8..WH&Y.$...9....,.....he..1...rB..........:.:U..>u.(L...u.......6...h.P.4H.j..

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7559), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	7724
Entropy (8bit):	5.314185694719717
Encrypted:	false
SSDEEP:	192:+MiuYuBJoYYXyIovHnRc8I82qA3VJUyaBWvJ8I3Zv95dH5avn3V7w4W:+MiuYuBJokSlfHOqR
MD5:	3A46E3058B0417FEF43B2B9C7C0F3C0F
SHA1:	7DAD4886E58266D416657CE45CA6DF49DA1F2490
SHA-256:	32DAA29F5CA0177D99D1C3094A41D0EEC24F7B94EC1963086FFEE77C3B6EC022
SHA-512:	3D702ED15133C58617C4A171697AFF56BC91B05EFB0B2AE9CFB57DBFF2F778CB3508A75F222CF662066C7B73DD3C10EF03835B905390B44B8D8BA01F0425CC8F
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~0c880f568.js?contenthash=93d22b575087d05a7708
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[6680],{45944:(e,t,n)=>{n.d(t,{Q8:()=>A,md:()=>g});var i=n(85556),o=n(54842),s=n(77936),a=n(79545),p=n(22520),r=n(37563);class c{constructor(e){this.m_nLastUpdated=0,this.m_mapLanguages=o.LO.map(),this.m_fetching=null,this.m_appid=e}GetAppID(){return this.m_appid}GetTokenList(e){return this.m_mapLanguages.has(e)?this.m_mapLanguages.get(e):null}Localize(e,t){let n=r.De.LANGUAGE;return h(e,this.GetTokenList(n),"english"!=n?this.GetTokenList("english"):null,this.m_appid,t)}SubstituteParams(e,t){let n=r.De.LANGUAGE;return l(e,this.GetTokenList(n),"english"!=n?this.GetTokenList("english"):null,this.m_appid,t)}}function h(e,t,n,i,o){if(!e.startsWith("#"))return console.log("Token doesn't start with #:",e,"appid",i,"tokens",t),"";let s=e;e=e.toLowerCase

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	80072
Entropy (8bit):	7.973507439340328
Encrypted:	false
SSDEEP:	1536:Prhd7/7Y/iqT5DhWeBRZI9Phi19RXsI+QrfLGhSYCGK2nb8HVgBzol6b62:9qT5VWeBHkA19J5r7YzT8HWVoE
MD5:	03C0F2F494964592ABBA6929095D4091
SHA1:	EE8A081FE74466C37E520BBCD162E2C772AF8BA2
SHA-256:	5D0B1230197060E5AA942AF0A089CA7E747964589823B630AF7F868EEBE1F6F7
SHA-512:	ED66B0F30B8AE2404DEA62FAF8316279B2F76242DBA42664ED50AE1CCCE595A2C72EAB1915617DA4686937374FA3ABEDBB5736DC099367839ED6D22308730EE1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................M.........................!.1.AQ.."aq.2...#B...Rr..$34b...Cs...5..%6Dt..Sc..................................9........................!1A."Q.2a.q#B...3...R..C..$b...............?.b...K..lk...!h..5......!zul.{......8......A..!..=5.D..O].!......B...@.GHq...q.8.....v}5().....Nq....Er..........g':.Ey@..~..".g.R./.......<j..v5.z..K?4.h..R.}.V...O.D.*.A....D=.q.!..9.:t#!eQ.w...N5.....=.@0H.%.. 7.R.d.'.B.J.n...1..u.y<.H..;.v'.j...7.....c$..uk.]).7/'"$<.. s.A.\|...[<..r\|....Q...&.......B.p..q.F..D.5.>.. ....!..RO.R<m..F$d...Q.c.E......-.0%9N.E...Y+K8.4HW.$..q...4~....r...!.....z...\......F<K....ItYE....V.\|....d....-..Gn5.4.-....w.KE.:W.m....%a...0.l~.........G1.Y~!....rO...u7p.....o.7.[\|.$fw_.'..f..C...3E.z.......Xa..DC...../..ts?u..O..{..._..;......V....nvD

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6719
Entropy (8bit):	7.901529029287266
Encrypted:	false
SSDEEP:	192:5hA6M4WnkyWwqmnHAXF50kzSvF3eIoAOpyj:5yvnkyTnhv8AOgj
MD5:	49B920CA1495FC302A0ED1515CE53491
SHA1:	6CCE254202C4DC378CF31AAA7D05C8538267F078
SHA-256:	472165755644972C17E4BBAF1300926AB99724D95599415B2EA7F9C16A27737C
SHA-512:	F25A18A9433F4CAF2106D2D95CC4CB58C053395AE7341EEF0CD143134F10A00C6AFE7301B0EC58D57705641B42F1375D9BA8491C823DAB804D48AA8B75F4AAB8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@... .....c..D....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8C87CFB10319E411A236C2B21919E765" xmpMM:DocumentID="xmp.did:9BC4BE959C4B11E4A75E88529746DCED" xmpMM:InstanceID="xmp.iid:9BC4BE949C4B11E4A75E88529746DCED" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4328D7F2BF9AE41194B9DA16F2E1AD04" stRef:documentID="xmp.did:8C87CFB10319E411A236C2B21919E765"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.p.....oIDATx..]....~=........:.1..$...*...BP....G

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	3634
Entropy (8bit):	7.794028345481188
Encrypted:	false
SSDEEP:	96:xgefOw79InHborYQ7F81WnO4r6dj78VEc185Yv:owJGorv1WJ/2
MD5:	29733FC12120D092DE74B80D415327F0
SHA1:	EAFE269D3119E5E8A312459E67363A3FB7397663
SHA-256:	0A46FA735671FEB45F2E432D9DF993D44DB85BF701D0D8B8F2ECD67870F58797
SHA-512:	77DBECFEBD7926EAE62814F0C19FAA37C4966C5A1C7E8267543A16EB34018DFA76F1F944AB71C7752520E581B045BAAE0BC0B0CEFE299671918550138FD4A6BF
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/570/capsule_184x69.jpg?t=1714502360
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................;...........................!1A.Qa.."q...2B..Rb...#3St.....................................0........................!1.A.Qaq..2.."R....C..............?...O.l....`...@.g$..$I..(.0..8.$A........u?X..I.`...OH..8... .....9.L... q..s........A.....\|........E@...."..0...`.. .I......<s.:NL.{...\@...y@.$.....{@........3....8.D s..d`..... .....`..H.V..g.~.R.Jy.....AF...#..iYw&.Za..u..!#....1..T'UOd~..Uz.n..p..3.[u02.3..~.....:.uL:...........+..O..#.S)...6......,y.F?...........Gk...<.t...b......S.}L?...d~....?u...;%1K.zRm....(q.~R#..r....r..21.b...b.\5.".^...rt....@....&I..f.d.s.....%<s.:H..}L.7....R@..s..............."..A..#..H.h......\......r\|...L.......iI\|...t..h..f.g.Ya.T....D.....x_....c....>]..O..g;?H..>...u..GJ..-.s.....O..z...2.k]4...y.).J.....9.NG..:..

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 616x353, components 3
Category:	downloaded
Size (bytes):	106484
Entropy (8bit):	7.98924079336765
Encrypted:	false
SSDEEP:	1536:j7+dMygtJwJVxyZrnRCt5uuDcDF1hl+9W6WIKh2PW5vYeHLgRUyHjdMizm9F1euc:HX9QxyZrsqDhAW9J2u5geCUyDdJuklj
MD5:	6A5EA19BFED83A196F226EA712E73B90
SHA1:	30DE6D6A2FAD2F25AA9858199CC57B317AEAD3E7
SHA-256:	4F2228619CEA0CD2AC98CC33A8F4E9A3E6E7AACE7B3A498DDB6F8294F0D16ED7
SHA-512:	03D5F8FEECAD26DD62C648D9D5D72B29702C76AAC0CEF28514DBB5D8E10E46297D3AA912DB199B5DC99995192D855828453D4949094029BC6802BEA64EAE2C30
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/553850/capsule_616x353.jpg?t=1709666906
Preview:	......JFIF.............C....................................................................C.......................................................................a.h............................................e..........................!1A.."Q.aq.2...#BR..3......$4br..C....%&5FScst........6DEVdu....'Te...7...................................O........................!1.AQ.."aq2..........BR...#3b...CSr$4DT....%&EU...cs.............?.....oc...iyN.Q.......7.k..'.o,4......u..F......._..OR..L.$2.dz.i..H..s......l....).\...4h.._}<`1..#...9.S).U...v...........2..Xf@..k.Q`n;../.'.......Y\Sr.t .....F]UL..C.6..o.z...".Nq_)4B........\.._....KG). &.8.+-..x9.7d.D.X.dp.".Q7.PoanI<...b.t..5.......r....ZD..Y$E...].OR.F,....+....+h.\|..R.b.....PJp...!......,(M..K..._...$...B...R..!......'....x.H.H..E......T.mp:..#...K^....m.8pM...s...R;.R...F..[..P...I.@.G_...wi\|-..<X....25..?x.]..E4.J.1G"...o.Po.R..;.....N....."..o..5.,e......h.tN.'I.J.eP..^.t.....+D...e.,.Uz...C...

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	8542
Entropy (8bit):	7.9437736739802665
Encrypted:	false
SSDEEP:	192:DwEZmrV+/Z97rBweEAW3DJpVdRqlDMo82FBCuCil8YOn8Fah8Ca:0Ese97JszJvSJ3T5CiyKF05a
MD5:	B0A9E0F6F7C636BD343C2D6AA8FFDACF
SHA1:	A71ACB0DC032729FB06121130B1428B81FC6E430
SHA-256:	8CA56E3D4347CACDE89F34AA61E96E931C7A3E2396D6B9583089CD45835DB0DF
SHA-512:	4E0FC96D04A86DF6D564FA62226ADF50BE1ECA48C05D7B49CCBB8206F7FD84A6F432096024DF904CF92F3A75FEF0D8AB0546F9A92F07A13D523D0BA67F08AA7F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................;...........................!1.A."Qa..2q#B...$R.3Cb...Sr..................................2........................!1.AQa.q.."2.....B.#3R..............?...B8.$.'C....y...q.T..[...M...D.j....f,O...Ge.>m...@Y...<.iY......b.m.......1NJz.r+..0J...y.9.3...m...6.}..Od.Q...x#"6..pI......T.....6.........#,......r@-.g..T.z.n.........J.).......p.V^.MM-.?\.+zkPFO...)'...<Bg..lf....D...$.J_k..P.U...d...M,. .[d.,Q....&8..'...uN.......nN...$.9..C..../..Uv{.O#.........xe.......A6.v7EwWPn.....8U.J...a...gn.....q..p./.......hE*.....fJ..T-P]Tr...&..}.\|.lw..O......x....M..2.(..}..r.J....._..`....).....%.#...........[...ae....\|6...d(.}...uK)j.#i!.T.@O..\|.H....K...q,.Ct.c.Ra.kUv{}n...Q....C...Q..1......u..a$Z...Iu..]....iZ.W..\..B..{.8.`.#.<...8:V......(uu#R.....7d9..H.

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9689), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	9854
Entropy (8bit):	5.369051443934769
Encrypted:	false
SSDEEP:	192:+j+bctYPe0uGgITa541JE9ARJ4J9JIffol6fIs1xApfNS3zax6HSH:+yAtY6GBa54Xfzwox+NSDaHH
MD5:	96CA8FB2D0D305122CCE043B72E1C539
SHA1:	16559EB881DACA7011396DAC3D0124DD5F7FB15B
SHA-256:	5C0DF574403D0D0E70CEB14DB9B2DA5DD32C47D0D05205B7865EDF16942C95B0
SHA-512:	31C34C7EBFDC1888A269ADA1B4D1AB305438EC6B1EBA71C966FEDB526313CF3ABD58304C5CE1C91BEE0C3E4D562CC179C541D4946BA35D4BE44FC8BD82AF1BC4
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~1d39298d0.js?contenthash=fb50f99e2f712a7bd546
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[5824],{42411:(e,t,a)=>{a.d(t,{Pv:()=>l,U0:()=>m.U,WV:()=>m.W,sB:()=>u});var n=a(85556),r=a(54842),i=a(24289),s=a(45944),o=a(31846),_=a(37563),m=a(48760);function u(e){let t="offline";return e&&(e.is_ingame?t="ingame":e.m_broadcastAccountId?t="watchingbroadcast":e.is_online&&(t="online"),e.is_awayOrSnooze&&(t+=" awayOrSnooze")),t}class l{constructor(e){this.m_bInitialized=!1,this.m_ePersonaState=0,this.m_unGamePlayedAppID=0,this.m_gameid="0",this.m_unPersonaStateFlags=0,this.m_strPlayerName="",this.m_strAvatarHash=m.W,this.m_strAccountName="",this.m_rtLastSeenOnline=0,this.m_strGameExtraInfo="",this.m_unGameServerIP=0,this.m_unGameServerPort=0,this.m_game_lobby_id="",this.m_bPlayerNamePending=!1,this.m_bAvatarPending=!1,this.m_broadcastId=void 0,

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33770
Entropy (8bit):	5.264425830603697
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJMJIJx:FpP1vZRA
MD5:	B6E362692C17C1C613DFC67197952242
SHA1:	FED8F68CDFDD8BF5C29FB0EBD418F796BC8AF2DD
SHA-256:	151DC1C5196A4CA683F292AE77FA5321F750C495A5C4FFD4888959EB46D9CDC1
SHA-512:	051E2A484941D9629D03BB82E730C3422BB83FDEBE64F9B6029138CD34562AA8525BB8A1EC7971B9596AACA3A97537CC82A4F1A3845B99A32C5A85685F753701
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 49x49, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	49038
Entropy (8bit):	7.985828723079919
Encrypted:	false
SSDEEP:	768:NhTD9euR+UbJ1wtSthkWzLqebJAASat9fIXowiass2uJdRQdg+ho+OV2cIUkhAT/:PTDxR+I2YrkWzjJ2y18sfqrQHWfDIPAb
MD5:	789A6BB98EBFC27664D282F021E64B7A
SHA1:	65A9E63146B92702BBF0A03FF59F52C6DA0BBC44
SHA-256:	DD1588B721C3DA4865B215B3F690B51D3A465702AF8E3552F464FD7D2C2EAFB9
SHA-512:	B6F501BB285150E40A8138482577FFA4FDC9D6114ECA254A5DE4C8567540BF6AF06FE4A32D7612AD682A2D551AF4465CD989670AA15CA1A75AA2DF322D287624
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2195250/ss_96496b17bd35a97ceb926231e963762d3b86c3c8.600x338.jpg
Preview:	......JFIF.....1.1.....C....................................................................C.......................................................................Q.X............................................S..........................!1A.."Qa.2q...#....B.$3Rbr.....45....7Cst.S...%68Tcu...................................C........................!1..AQ"2aq.........#3B..R.4$6CSrs..5.................?....ON.@.X.q.b..?.zE....P.._............E.H.......<. ..u(".od@.4m.....9@(A}....]!.}...W.(.#.......0#@....dh[.l`\r....z.D6.dH,7b...Yo%.l...^......m.D.$.$...%F..z.....x..R..B...vF..s... .m.....]B......7..p..9..%....w.@d..K.....U59=.B.HE...Q....B.s...6v@d`.B....@Z.t...W$@&I.,%."....V>...D..i&.. ........^.^v.P#O.8.>...S.[.F.....q.FF.n.9...f... ......o.n..E...D21.?.$5.{.d...X-5.....@7Mdc.yo...F:K.B.J...n..)y-!A.....n .v....)..v.V+....5.Vd.-...G&.:$ .+2-h5.^.e.$3S&..K'cEP.q(...(.mj...^.... ..?..0..B...E..k(.M.y(.m...%.+........=T../P&5...v8/u(...5...2B..!.J.......P.....

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 306x260, components 3
Category:	downloaded
Size (bytes):	49403
Entropy (8bit):	7.957131113762543
Encrypted:	false
SSDEEP:	768:4YyamyrnR98IT/OiGBqPpU5j7DVxc7z61AeGm2NN8ry/Xr7FCTYM/I0914ZdURAk:4G/zRNKMhU7+21iD/Xr5C00I09or6
MD5:	06A7C0D9BC8C28D6FA8B93B5813419A4
SHA1:	BE8BA54BA8ADBB305A101008B94C89BF68AE7708
SHA-256:	43B8E5770B562F1922E98909020E20B4F5CE8504BD3B84B87A07299DBF65285D
SHA-512:	5230CB8448798F4B46AADE2ADAED317F5FC8632164E521296BA412DC912852621D464BBE617AF79188ADDDFF2226D12AF0E759F978ECC61419BAA47D554B08C4
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/spotlights/dde8d7c40e4c6dadb9d04c58/spotlight_image_english.jpg?t=1715642754
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	6568
Entropy (8bit):	7.926040560239071
Encrypted:	false
SSDEEP:	192:gRsNKDDuOI3B+AhEbVJoklDHW9B0zGJB3uzV:ssSViC9HWz008zV
MD5:	E109F7B419A6DB3148F635B9042AE1C8
SHA1:	0C1A9E47DB424E1F5ED70AA2FE7E25D6B865BDBE
SHA-256:	E52BD14D28698E0586930AAB172E8B99B268A14E8FEFD339DD013F0BDB2BC1C0
SHA-512:	8CE5B3235B726A266E87EC15BF3A37982A6F6740548ACCD4ACF0E117C36C6CA0A6B5C4C7014FDEEC20C06BFD4EA98FD094F9C10E0F9EC1C37B71CF6731BB3297
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/730/capsule_184x69.jpg?t=1698860631
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@...........................!1A.."Q.aq#2....Bb...3CR....G.......................................>........................!1.AQaq.."..2B.....T...#RSr...&3d...............?...V.I<..\._..(....TI$...8...w{.;.....[.bx....Zt...3.R.......'isa.R...!\p.clc..F.h...,L....Z2..........e....Na..... $.Gae'.E..,..g.u9........F....>...Z..p.....x.EZ.......QN...I.m..q8.b....@.R.m......n......V`N\..:...\`{.B?..K..7.L..P.;...V.V..3..bw...a.:..I2..s"=T...DXl.!o9.Q...I......i3ky>..q...J..SQ.J...}......#...uB.U....?.K..G...,P......I...k.r..~..6v<.t....#..t.}...bL....;.?52.zp1.+......`B.c....y....p1+E......%.\.H.<R..HJv...D.g....0!..B.c.vB.DRs....O8..Is.h.lU.\.D..E..V./3.v4.n.1&..kL.i..,e..%.%.. .cp...+.o..b.?&LXD....MlG.;....l.&.......[...p.#z.....32.7N......m{cF....9.V...u.ma

Chrome Cache Entry: 789

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	90123
Entropy (8bit):	5.32544539194823
Encrypted:	false
SSDEEP:	1536:KBJtu6wr048dCHASHY9ZmruYYmF0qwSds2lyUYt7LvXB60I7cxe3tHJq6J3HyPf2:L
MD5:	64AC66E91BF33DFAE695D141A2AA3F6D
SHA1:	2E95D221F5E7FBDB57C68D60F66053396B96DC62
SHA-256:	12E49F2087E2BF967C5C1B7FDAA621776E5D600DEF9F803D0383AF8F7CDC7B38
SHA-512:	CDB3E1BAE81CB712F883F8A88899F61905662D44C24EE23408687D0C2F93F491FCFDE5C7DA5D602E548326A8ED0149CB67E0D10CF3EDCC20D58C167F478FCD7F
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[6588],{59223:(e,r,t)=>{var i=t(99928),n=t(62679),a=function(e,r){var t=new i((r=r\|\|{}).typeNumber\|\|-1,r.errorCorrectLevel\|\|n.H);return t.addData(e),t.make(),t};a.ErrorCorrectLevel=n,e.exports=a},72529:(e,r,t)=>{var i=t(83415);function n(e){this.mode=i.MODE_8BIT_BYTE,this.data=e}n.prototype={getLength:function(e){return this.data.length},write:function(e){for(var r=0;r<this.data.length;r++)e.put(this.data.charCodeAt(r),8)}},e.exports=n},6438:e=>{function r(){this.buffer=new Array,this.length=0}r.prototype={get:function(e){var r=Math.floor(e/8);return 1==(this.buffer[r]>>>7-e%8&1)},put:function(e,r){for(var t=0;t<r;t++)this.putBit(1==(e>>>r-t-1&1))},getLengthInBits:function(){return this.length},putBit:function(e){var r=Math.floor(this.length/8);this.buffer.le

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 312x205, components 3
Category:	dropped
Size (bytes):	11100
Entropy (8bit):	7.89198577869451
Encrypted:	false
SSDEEP:	192:J7SAva1ogiBNXXLpMwHn9+GI7LXweaqOmqB9SskTz8SEIW07UvkL:J7F+1ivXdMwdYraZSskUSEimA
MD5:	F4F0B6326C2003EB4402B54C58F94EEA
SHA1:	DB85DADC5D6AF60916109C7A0CBE271E136499AD
SHA-256:	7C5E12F86A8D057BF3CA1E838261E461363078FA52B23628D0D628106D87E5AF
SHA-512:	3FD46E921029E1902DA3F61C81267738A34A9066677BA8963A57D29ADD2D64D0D584DF27DACB9D118227989473BEC5ADB992EF20F4836D45A680A8F29C73DB15
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......Z.....+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:087FE64A8C0311E6AFFD9C9877AAAA54" xmpMM:DocumentID="xmp.did:087FE64B8C0311E6AFFD9C9877AAAA54"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:087FE6488C0311E6AFFD9C9877AAAA54" stRef:documentID="xmp.did:087FE6498C0311E6AFFD9C9877AAAA54"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d....................;...n..+Z....................................................................................................

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	42771
Entropy (8bit):	7.972718464873951
Encrypted:	false
SSDEEP:	768:2Ev6MC6IM+KCXI1t6gdkzkTPAjz+Uy2KTLXf39Cx7/a4xOA9p403FBGYPKRwWbmh:0MCpYNdkeoOUBIT967/RxRPGYPswKmM6
MD5:	67E5503CC56FC212160D70D1B4BD6DF2
SHA1:	465F1AFF2AC41D8855B6C75C8FF9CEEDF37F3828
SHA-256:	283CE465A4B9EB377655084D9DDBA2A8603D007D2E79F8C54B19E83621F0CEA8
SHA-512:	34E22311D7C0F1E92C1C8FC154EFF7564827CAFA3CDA578C59C31EC4ADACC1B414932AC07B9C0546ECC24F2EF199750D434BE530AC0BB22FBB5E4E06B170ADD3
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................h....".........................................O......................!...1A.."Qa.2q...#B....R...3br..U.......Ss.$C....4T....................................3........................!1.A."Qa.q...2.....#B...R............?...(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".w.............SEE..y.=....Q.=....QE..:).......G......E.j.....{y.....sy.....5..y.9....WV.[...Lu..5........!b`.....a.=....QE...tS....??....??.(...O?g.....J?g.....J(..gE=.5....Pxky.....5..y.=....Q.9....QE..:)...??....c..(..A1..~.o1...~.o1...QF...O.f.....J..sy.....a3....o1.....m..(..A0...d7..'..4...AYf.$.l@..Y...AEQRZ.......0LJ..c..O.cy......cE>..

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	833245
Entropy (8bit):	5.6419404094839125
Encrypted:	false
SSDEEP:	6144:At07zYO2+G4PtCPhXuv4JG92zPpGM4g6vpW8w8fzkOPtV99wHgHdQEGigIT:At0gYPtKhyYG92DN4TpW8jDMiB
MD5:	867A2BE130F352D7177A39DEF6E59547
SHA1:	E3C0DAA08654876543DEB1F3B1E54C56AFEA3319
SHA-256:	18A35E4A8C4E9AD919870D50E2C4A5B36A92A3F8F046815AEEBB5B79790FF9B6
SHA-512:	44C9378217638BB51DF0F2A4824F8501FC873317A146D1052DE9EFD8B904F54AA5EE5C4781A67FDE64ABBE744F0718C04CA46E53985F7C49BE8D4C06922D9F66
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/main.js?v=hnor4TDzUtcX&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[179],{51194:e=>{e.exports={FocusRingRoot:"_3PH_XZYjqRMfVtlm5hbWz3",FocusRing:"_1IZrQ5Gmmvv0TMVF07zSq0",flash:"_1YTKZzpZzBEruHqjfaSm2q",growOutline:"Z3LxSTUmQb5RlaA4-G2RD",fadeOutline:"_2hZu3k2oOq-M2UmoA0An2N",blinker:"_3wFMMgT2t6sECeNlGtBjDN",DebugFocusRing:"YxeOZVLgl_cW7IESy3NHt",FocusRingOnHiddenItem:"_2OusVQKikkszayzpUDX35h"}},87123:e=>{e.exports={ScrollPanel:"_1CXdiS1qYxpxp_UoUYeo1k",ScrollY:"_313lBO-jwNHzNrjZznA-74",ScrollX:"_1oRGoiP88OvaMu0R8O6zNR",ScrollBoth:"_3S2KoD34fIYgAqKqp_j4F4"}},74736:e=>{e.exports={HoverPosition:"_3XUANycKE9h4rEXlPo3TIW",Ready:"qEo88cpdjUGTMNgC_QK8c",NoSpace:"_2NTbbe3ZK4ExTBIfPyPTpZ",EnablePointerEvents:"_2MP9nTdz-JMvAvlIcFdd8r",HoverAboveModal:"_1SHX2kGS9WtIThx3v7JOV-",HoverPositionOuter:"EUN4GPmCCaj1QX2Yy9CVb"}},27241:e=>{e.exports=

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	4173
Entropy (8bit):	7.8672227521341505
Encrypted:	false
SSDEEP:	96:cS6wnNEtKCj6LaSJYHKULGVupfrUGAKSSnUDso:cS6f85LaSCqULBpfrG/DDso
MD5:	17601F77BB8A0E934320566ECF483ACD
SHA1:	716E72C24FB88AD855C608D9752EE0FF829100B1
SHA-256:	602F92D8AE71E0009DA303351F982D7A7E3E14BEDAC00BF26133AF92564435C0
SHA-512:	846316E0D17A84F0642BC77AC5A305E273927A8A7F57C72B44166A4560F901305B0745AC9638C5838D9E874A3ABF43C5ED288B748E725A4162C97F59945891D5
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2344520/capsule_184x69.jpg?t=1715714373
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................5........................!...1A.Qa."q.2.....#..Rb....................................6.......................!1..AQaq.".....R...#2r....C..............?...H..j....)1.D`P....HtJ(t..4.j....A....qLT0.?..+'N)....H......I...PF.F8."qBljH/.m.@.M..\|v.F..K.Uw_f..P)W%.ae..C..H.L..V.....R... j.7.E..b..$0P.4...f...j@)Q......2..p..(...[Z,.O.......ZM....X..".....+...n....%z\..7..b6..Y..'q...G..p...5.....x......2..z....#p=.4.....%....2R.?..Z)I{F..mw......V...S3...t....?...Q.Es.....W-.K..-..p..#9...i..>..5.......m...........w...D\.8...8..^.w...J"%.V.......}..+..5....7..........t.m.lf.@.....h...s...W....2....j..\|W#.,. .6?....@....>i.;.`.`.@@..t.U..%l.....pi..rFq.@..U.w.R.]....=)?..)$...m.8..r?&....U.~..{.R....$.*..9m.Va...c..n.n..r......+...e.0....3].....J

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1121
Entropy (8bit):	5.20384064156755
Encrypted:	false
SSDEEP:	24:BhEFvZiL3LWEefK4LaQ333cpTO/P+nbyVby+wu8tnbHj/5t6DR:BAvZiL3LCy4LV3Hc1Oen2VOJuUnP/5wN
MD5:	4B38FFD17055EB4D80ECBFCA24531E66
SHA1:	B9F8457FA8F87DFD8D848EAE33D943C5561EC7C0
SHA-256:	D340FB2A9E88F33E7018727CE410262D84354CEBB6B87662A77EAE794EBB0475
SHA-512:	FEF23E9F8927D4E1E32CDE842575E3C943B897EE1C06DF4B04DADC011E8A6CB6D2BFBF7B6D63103DCC55DAB9D08F9164C0154988449EBAB55FEBFCF8B55E1E04
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/skin_1/apphub_broadcast.css?v=Szj_0XBV602A&l=english&_cdn=cloudflare
Preview:	...Broadcast_Card .apphub_CardContentAppName..{...margin-left: 0px;...margin-right: 5px;...padding: 0px;..}.....Broadcast_Card a..{...outline: 0;..}.....Broadcast_Card.apphub_Card.interactable:hover .apphub_CardContentAppName a,...Broadcast_Card.apphub_Card.interactable:hover .apphub_CardContentViewers,...Broadcast_Card.apphub_Card.interactable:hover .apphub_CardContentTitle..{...color: #898989;..}.....Broadcast_Card .apphub_CardContentViewers..{...font-size: 13px;.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; /* normal */.......color: #636363;...float: right;...padding: 5px;..}.....Broadcast_Card.apphub_Card..{...max-width: 468px;...max-height: 362px;..}.....Broadcast_Card .apphub_CardContentMain..{...max-height: 267px;..}.....Broadcast_Card .apphub_CardContentPreviewImage..{...display: none;...max-width: 458px;...max-height: 257px;..}.....Broadcast_Card .apphub_CardContentMain..{...background-image: url( 'https://community.cloudflare.steamstatic.com/public/image

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1139
Entropy (8bit):	6.532046828421671
Encrypted:	false
SSDEEP:	24:c1hpunQWwjx82lY2T32HEVy1CaKyJ3VGFG6i5NKkNhbOlNvIP7:CitNn2VpMJ3mMTxkY
MD5:	FAC3C1AF93D191D52892FF42E66AE70B
SHA1:	A3D5AC838B61D1B8231D91C7E5492771A452110A
SHA-256:	D87DD24DE2B24AFAA384DD663A471AF4843EA35C40D5FFB325019EB458DFD8C5
SHA-512:	4AF94AF01D40D18A97DC3213E79F308E6C30B11536CC9E4BE8BBDA041F96A52C83816E0847D94A54783D829C272AE8BCB29E8231FBFDE66BA68E3EB57A7211E9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:EAD87E4B4CB311E3BF759EB643A791F7" xmpMM:DocumentID="xmp.did:EAD87E4C4CB311E3BF759EB643A791F7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EAD87E494CB311E3BF759EB643A791F7" stRef:documentID="xmp.did:EAD87E4A4CB311E3BF759EB643A791F7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..).....IDATx...?.AQ..qW.$eS.2.............l."...H,..^..BI8.r&.u...<...._...R..f.n.z..B1...4N...B=..F`Q....4.j..(!...H.

Chrome Cache Entry: 797

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	49524
Entropy (8bit):	7.972098604142182
Encrypted:	false
SSDEEP:	768:5bM50EPXrZr1zvyELlp9yquBUrUbUe7wm6BSZ415j/7x6ZA:5bMhdr17tP0EYvUSeGZA
MD5:	F61AB715AC3CB4A012DAAA14A65DCBF8
SHA1:	49EAC9FD830FCB5F3609D8A4E5087B0BC3AD8294
SHA-256:	B08ABB0C798DE7DB2BE0098A73C979D2998AAC8AF4E096DCAC5943D6741FB12B
SHA-512:	70E919685C332F8131307E8FA57DABB361327FD3C9BF06F6DCDB059B263D151294F0EA9289987FC3C717F881516A125190C5A023AE38F506132699F8F6F1F736
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Q.X............................................B........................!1.A."Qa.q..2B...#R....b...$3r..5s%CS..4...............................2......................!.1A.Q."2aq.........#..3BR............?........,. 3.....J mTU..d.nF7..,...H..#!.0..RD.u.[.\|>q.I..z."..m..qG......C.J..J(.&.3...M!.u.....@.....@.(.r.%...WW.....+.....P.?O...[.FhdY.eMhH9..q...mP.a:..un.sz`.....n.c\.Q.Dc.P9X.....U.f.$.M ..m..\r2.(.y.k`5.o."..#K....E....>4gnE4....v...9...kZ2......S.1..i.g&[Gh.`.I>.......HRO..mN.e...N.G.RB......:. m.N.,5.M....l..:.......4.D.dH.}...@.i.-......i]`..pu/+.F..6..V.}.?E..L.4l...."...5..#.....@\|..9.C.rF$X...]9D.m..z....V7 )l..8...d.vM^..,....#..(.......4.d...s..E...\rh."m.. c.)0R..:.Gan.oo.....<...X...l...dw6......vv.[f6v......{..V.Q..;1.\|...Z.............W.......j..9.R._.n....e.._ .8. ..

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	87263
Entropy (8bit):	7.984546927405535
Encrypted:	false
SSDEEP:	1536:k+LNQ9CX/G7uB8/0luESwHvWNypFqKy6MWZbDGdfJ2Q+CGZAwnN9kjqu:kw/GDguEnHueFD/bDGdfJMHZ3Ejqu
MD5:	45CD19D66DEF0853E6E11B4E93D5DA00
SHA1:	1D5AA7733AFE132D57D4634C69D690CB30F21B3B
SHA-256:	BC128660EEB36ECCBA90EC854774321FDA094BC682410DA145DE3F1ADE6F08BB
SHA-512:	6270D49B4D18C200197E738DA3818C87A4D732EBED67B12D75B1D04005B0F6C05E200B53BF4808272D2DEC5D1872A94D1BD0218548867CCACBDD9A9A45057266
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1145350/ss_c8d2b18451a2cc4d5b4fdd78ed84a5e64e051eac.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................Q.........................!.1A."Qaq..2..#BR...br...$3....4C.DS.5cs....%..67ETt...................................<......................!..1AQ..aq"...2........#B.3R$%b..4Cr............?.....eZ...R.B_..b.8....;o.....`..Q\|...q.Y..-..Ad/....c?..QPH..{..Eh...."..\|....y..J-..IkX.?\.Q.....(......+4...>.!.w.#R....) r...l.YdR.s.....~{\|.G).....q..a...m..`..@.<...7E.4..,q...$m.0Pnm.Y..!"...W{.3..Zh...............L.mH.N... .D`..Uc..l.l.....CTK)...}@........U.,r0.B.?.......x.X.....l~x..a.....RtW..8(P(.g.S..O ...&B...{....`.R.".i.K.......K!o..D..W.rbl~..B.......Y$.YY.m...;..4..F..[j..0.&\|P.....,....:.h......Y....~?.i^Ux.t.I...{....H..3.t<>?.$t+.".E]O(2v.!H......;.,=..m.mn]7g..@.m:u.P..........M.......X.T.4q2....i...ck..-...[U..u.......s...c<...3.,7....m..H....

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1177
Entropy (8bit):	6.590984258866245
Encrypted:	false
SSDEEP:	24:c1hfvWwh82lYSgT2EV5CT3ZyJ3VNIEGdvzQvAXeho0f9Fcup2:CAvntm0J3tmzSAI4uk
MD5:	3EA2CC27536CC740703ED4554D5ACEEF
SHA1:	80EE5C2D61272C33A2D36F536CA47A38CF1A743D
SHA-256:	055F04346E95B75C4260E7064374E908FC213041679DD172DF80D6551CB5D15C
SHA-512:	969F45A845F94E02D5A5859CA033A20C7DD83774E8D032CA529A3692E74FE1816EFC3994D26E6AB874DD94F0901DC381BFA385FF096DF77B7A0C930A5B9C4734
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/icon_platform_win_dark.png?v=3
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:95752D8EC8C611E7A1BBDD153715961C" xmpMM:InstanceID="xmp.iid:95752D8DC8C611E7A1BBDD153715961C" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EFB48ADB4CB311E3AB3FC1E695F5A0EB" stRef:documentID="xmp.did:EFB48ADC4CB311E3AB3FC1E695F5A0EB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..Q.....IDATx..1..0..M[....VQZo.&."x....G.....+.... .`A....J.I.....6.~.^...a..eG...6........&.c..F.p<...0.]P.y)..G.=.

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3133
Entropy (8bit):	7.878926440205633
Encrypted:	false
SSDEEP:	48:V/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODVxj1yWJ:VSDZ/I09Da01l+gmkyTt6Hk8nTjjTJ
MD5:	2369B839B9785EF55718452E674A45C6
SHA1:	EBB0C36D260C53308855DA5B3B7D38B1F767D84B
SHA-256:	CDECCEA3FFAFE66820780DD41F2231E99976467FA8363481F16D91C4B8435739
SHA-512:	FAC4A2A58BA3A582AC62761CFBEF66106607EC20FC31F2413DAEEE61408CB034C374F7F002A3A569D160266B6F3D37DB273B74AA862AAEFF3B6C91BD8CC31FAA
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/icon_platform_linux.png
Preview:	.PNG........IHDR.....................pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	8810
Entropy (8bit):	7.945302887252746
Encrypted:	false
SSDEEP:	192:mIKwZWEJJm3FYMu/MZjtAWh+Rbqy0PO8dl5JtZOZSgtK:mIptR/69+RV0Ph75JyZSgtK
MD5:	5F49AD0320396C09B3355A8E68E3EF40
SHA1:	3B28F5A8DBEF34FB738EF45F6CF9C360F284A9CF
SHA-256:	775C0F7D8E825F8656EBE6A9F99B51192F2A989341B6ABEEDEE112719F497A63
SHA-512:	35C816AC6186374C0FDF531BBDBD6189416EB6830F1BD4B931A4E921F50914B51BA62EAD38339A779A7D4B702C1528922698223552F318A1F7544037B21010D0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................F............................!.1AQ.."a.#2BRq..3b.....$45..'Scr......................................;......................!..1A.Qa.."q..........2..BC#$.34Rb.............?..z...Hn..u`.{w.E.tT..sJS.ZN....6[....w.o.....K,..PI....8...._...j.(.5.e.E$.....QR..HU...n.+'&..0n....,..K^...i..J............n....=.X.+....../<bHjp{.2.Q..\|...(7..u.Q.Tn..2..T.....P?...E.p..o.....:..n..........p....,.5K]=,....%G.....q.2xQE.ovF.."]:%.M,5.2N.TF./(.@....v..]N...\|W-ip.,._n...SCQO[.'~.dN.<`.......,u.=on}UZ..7.-...e.....k.$J.K+...\..=.. ....O.t.... .^.../-2.,...1...}K....6....{.G.s..(.PjY.q$Y.d...a.#.`2CJW.\|D.9...J.... ..........~...&.H.....D..+..U.....,._.>...pu@t..NZ..y........h~]....H...g.....3....T;#KZ,y..R\|..;4.R......g.a[..r~.]..fZd...d..A.Q$O..,J.Og9..?.A.E.&I0..

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 233, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	121645
Entropy (8bit):	7.9923460159835695
Encrypted:	true
SSDEEP:	3072:VTUmAg/FVBghclFXH+E+kGSe5VZOs7hOZtS:l/Fv6qFuE+kOV1iS
MD5:	D5A9357F9A5DACBA379ADE344EF37B77
SHA1:	95B86C6044848223A9EA1528A816C101DC6D94EC
SHA-256:	908ED482B1FABECBD0276504B1E1C5D08A3845B2ABB51AD512F2558568C5C6AD
SHA-512:	DB488414FD97B43ED4DFA1118FF4F3BE91EAC74827DB2C55D6511AAE86FCF70A9C1F20C0DB89734A4FBF2F2930243DBC548143D32CB4CAF0B199C3D491D94907
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............caNv...............<'A......IDATx.\.w.m.u...fXi.}r.9......@H$@B.....mY...%.jU..l.;.l.mKj.jY.D..!. ..$...._~..'..Js..c.s........^k.9...o\|C..........@.p..$.6..^...s..u..pX@b........'.....#.R....Xc...`ww........R.\...U....5.v.)...x.....=;K..b{s.$....)...(K...FJ...)%R@..B.....,...)K....@)._..H......[H...!$.Z...A.s.........g.....T......%...V=..2~.......%..?.....c..&yFV.h)i.....1..8.vH.R8...Fk.u....._C.h..0....).......!...`M.1.W..qH.JH....z=$.B..0.$.K...X.s.%5...%Z......4y.g..?O.w..\IY.dY.d<ass......>.4H.`q...nw..e.9...B.,j.s.}..])....5...~../.ZJc....5...?.R......9..P...!.Y...,..).R`.EHI\K(K.t2Ak.z.sH.....<k..#.a....r8...7.....JSV.....,.5..Q8....Z..0.J.(JCim..C..v..$avf. ............".V...@J.TU T......E..U<..H.X^=N.....L&#N.>...8[..c<.0...cr..(nPV...l.h.yx..;.k8W".DH.R"%8....[.p.!.....D..J.... .>wt]...)..\!p..,X........D"..W.......q.......J..a2..

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	4964
Entropy (8bit):	7.696254000684786
Encrypted:	false
SSDEEP:	96:1+iMq7rHV/pGkkhdqcNlYTwfUf5Gpm9LxghZd88eS1V9aj:P7D9sgVTBompwBVIj
MD5:	984DD309F9F0D37E0B8D115C152529B3
SHA1:	CB2427F43F3BDC0E6C79498020119748EFC7821F
SHA-256:	8ADAD69E83A2F2416C316299F91DAA1E61B9F48FF2314575BEF4339097A8E3E8
SHA-512:	B04EAB0A63B60E4E401AB7D4384DE50EB2ED2A7BC061B731C129EA13F4F4314E1728E12CBA3241125DDF1475870700747CE6528E67FE5036FA1B5CDF255F3617
Malicious:	false
Reputation:	low
Preview:	......JFIF....................................%.....'10-'8+@=PH4=K9+-DaELSW^\[>DqydXlQe[X.......%..%W6-6WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h...."......................................8........................!1.2a.."AQqr....b..R.#3B..................................................................?......)..Q...6...v.........nn.y..M7..3.Mh.3.Mh.3.K.@.4.4..Mi4..K.@..F.4.]..4.]5.gF.....h.nG/7.z/G/7.Td.j.bRAbZf........r.(..6..J.P2..........l...O7....?...D.T..A@E.....A.X...h...........#.......(.. .0......$. ....F.P.i .(.(.. .(...(......X...(..............,#@.......9dwc.......+..QQa.j%..k@.."..f.......Qje........A.Q.Q.%..z,t.pv....Q........Q@..@...j.j..T....r;..ye......`..,,.......Q6l.@...f.`..E.YjY.....E.B@..P...k=<.]...A.j..(. .............".5......Ov>/-OVOv>/-K..Q.E...5.D4.i@M...1[lV......i.@A@A@E.dP.P.P..@Gk]<...3....j..\|>..^.PE8g../.......>.........p.....2..>.T........t}S.N~.R'....H.......p0.4U.....}.....w>...F......8.G.X..t~...q.......9.

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3133
Entropy (8bit):	7.878926440205633
Encrypted:	false
SSDEEP:	48:V/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODVxj1yWJ:VSDZ/I09Da01l+gmkyTt6Hk8nTjjTJ
MD5:	2369B839B9785EF55718452E674A45C6
SHA1:	EBB0C36D260C53308855DA5B3B7D38B1F767D84B
SHA-256:	CDECCEA3FFAFE66820780DD41F2231E99976467FA8363481F16D91C4B8435739
SHA-512:	FAC4A2A58BA3A582AC62761CFBEF66106607EC20FC31F2413DAEEE61408CB034C374F7F002A3A569D160266B6F3D37DB273B74AA862AAEFF3B6C91BD8CC31FAA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19075
Entropy (8bit):	5.511951501475996
Encrypted:	false
SSDEEP:	384:fwtVMAjYb2JalUNlpczHK7riHiEiN/mDP+pPIOw6GNNZhweP8/F:fmS6FJJNzczHK7eHix/mP+pPIOwlNzi
MD5:	42A676F275BBD41662F29E701761E86B
SHA1:	572030577CF916F3F0E5745EAA1D22798EB3EC06
SHA-256:	B174B82996BF83140E2038CA17D6D6134BDCB3250A1517BEAFFB13A2B887C6B5
SHA-512:	0AEF6A676FDA8C2714873DE779A8A3A159997F6F70D3310EFFD5E32D4B21D4833E79871EEE4EDC7B631C927F17B1A3027B25CF4198D208FFA61CDDDC690141E1
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&l=english
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...display: none;...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....resp

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	5587
Entropy (8bit):	7.91930589678469
Encrypted:	false
SSDEEP:	96:B5s3nxuQoC0355pYTVXmWka/kml4rYB3GAau1ma/YjkztIAanlPG6d4yMQlb:BNQo/3pYToWJGrYJUu11/8kNanYo4bQ5
MD5:	CECEDE0A8C154D0A476EB4AAD54AB65E
SHA1:	B4743F421C5D97EEEEE0C1F19E4EADC4B90693CC
SHA-256:	6B872A1F8C735897E38D6562147480D218E55F1C41F6E939E0EEF0E939170B8B
SHA-512:	914C3381F26780B04DA024411A2BCC6E07181B9CD04B8DBDA6D9F77544C7C6286363B1FDF2DA16070F2F303D9CB2F57A52EF4EFDF12CF500316B6A3112965D24
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................>.........................!...1A."Qaq...2...BR..#..3b.Scr...................................'......................!.1.AQ.2Ba"................?....\|5bD..i...\...3D\......rs...P,.J.0........Sv.....=:B..t\......+ #...lV..D..ia...b..iS.....)..T9>.#.-....E.$~.IC.`"@...>~GC..(Eu>@yd..F.7..../..C.&.......x... .....Q...?.u........4Q.".@....9..H.H.....TD.&..2. .....].\g^}.FJ....F.U...t.E..y..`.(?...B..0...L..H"9;NNG.X..\|..~Z&..z......L....+. ...:.....%eC....@.4.H......cB....A[..!.....!....h.........rOa..k??......E.}....B.Tv.~...#...MtB......*y.....ZT9.[..T.h.@.N...\Cf...c..tq5....>A]d..(..{....`...x...N^..#l.Z;...@3.:.5~1.. 2N.\|...E:.....of...,..M...Od...<}.$...9...."!a.`=..oc...o....Q.w...G:SKV)j.......)...r)......t..H..c].J.._q..U.......)....P.t..

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	49524
Entropy (8bit):	7.972098604142182
Encrypted:	false
SSDEEP:	768:5bM50EPXrZr1zvyELlp9yquBUrUbUe7wm6BSZ415j/7x6ZA:5bMhdr17tP0EYvUSeGZA
MD5:	F61AB715AC3CB4A012DAAA14A65DCBF8
SHA1:	49EAC9FD830FCB5F3609D8A4E5087B0BC3AD8294
SHA-256:	B08ABB0C798DE7DB2BE0098A73C979D2998AAC8AF4E096DCAC5943D6741FB12B
SHA-512:	70E919685C332F8131307E8FA57DABB361327FD3C9BF06F6DCDB059B263D151294F0EA9289987FC3C717F881516A125190C5A023AE38F506132699F8F6F1F736
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1604030/ss_712d9885b750317ab0be515158e51c03cf5944b6.600x338.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Q.X............................................B........................!1.A."Qa.q..2B...#R....b...$3r..5s%CS..4...............................2......................!.1A.Q."2aq.........#..3BR............?........,. 3.....J mTU..d.nF7..,...H..#!.0..RD.u.[.\|>q.I..z."..m..qG......C.J..J(.&.3...M!.u.....@.....@.(.r.%...WW.....+.....P.?O...[.FhdY.eMhH9..q...mP.a:..un.sz`.....n.c\.Q.Dc.P9X.....U.f.$.M ..m..\r2.(.y.k`5.o."..#K....E....>4gnE4....v...9...kZ2......S.1..i.g&[Gh.`.I>.......HRO..mN.e...N.G.RB......:. m.N.,5.M....l..:.......4.D.dH.}...@.i.-......i]`..pu/+.F..6..V.}.?E..L.4l...."...5..#.....@\|..9.C.rF$X...]9D.m..z....V7 )l..8...d.vM^..,....#..(.......4.d...s..E...\rh."m.. c.)0R..:.Gan.oo.....<...X...l...dw6......vv.[f6v......{..V.Q..;1.\|...Z.............W.......j..9.R._.n....e.._ .8. ..

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	dropped
Size (bytes):	58
Entropy (8bit):	4.407754547912838
Encrypted:	false
SSDEEP:	3:CMTkaasJusJE9RoE:/orsJrKfoE
MD5:	C85B970B4C832E361445C1B446CC2343
SHA1:	57E60C2F1F1F919A871B7C171C6D59D42E3ADBE5
SHA-256:	5CE28D7CF05F0E6EEAA3788A393D9980E9B51130963C6B9672D3447B6B11DE6D
SHA-512:	060B2BA825CD60EA3FAD5FCACE496A77B528210AEAB0092A24B4C438EB2ACAC4166E0C3B704CD3A4D8FA8FB034B0C7A4B5F45E242A7BDAD26580F3236382620E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,.............h....I.Q9+\|.S]..;

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	downloaded
Size (bytes):	63
Entropy (8bit):	4.449633005985324
Encrypted:	false
SSDEEP:	3:CtMfhExlHr/lXYrP:OCP
MD5:	D1C5AA274C0F681D02317D33026E93D2
SHA1:	07CE7DDD50B6C56DC35A08128A161CDD78C08BE4
SHA-256:	563401248387CB3CF47D04E1DDA78508467889CE4EBB80D24A074E0C24A0183C
SHA-512:	5CDC105BA2500B00A8FAA70B89CA62C28F6BEC16B2198452AE408C65C316293E1512731F3EBBF811C83F3251D34C1EB5B6D8F7E1A3DCA6FB6943B8E858FDFB4D
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/images/skin_1/ico_external_link.gif
Preview:	GIF89a.......MML...&&&...!.......,..............w....h!f.n....;

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	downloaded
Size (bytes):	89265
Entropy (8bit):	5.293210754522105
Encrypted:	false
SSDEEP:	1536:qOpYuxcehc6Ac/Erc3h5N/a8axkNM2EVshJQIxrMKvPQfsPsdCkCatn0noz4:3Yjg9MDsooz1
MD5:	843D5EB5F11DA06CF5D519FF829FA5EF
SHA1:	03CB7E4D550D829922AEA7E0A972722F481FDFE2
SHA-256:	2C32183F1689099AF144F01E1C36EF60AFD6D1682831655055E9305C31DE912B
SHA-512:	6F426A0D1F14F248A2DCB8D9B6F3C97E698CFBC144D0AB018D2B014DDF15F08154718F9C76B30A91BE3E19C2AF9F1A8CA8AE125CDC6B18ED18C72534AD755090
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/main.js?v=hD1etfEdoGz1&l=english
Preview:	..function GotFlashPopup()..{...var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');...win.focus();..}....//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, del

Chrome Cache Entry: 813

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 1
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	7.347357662235319
Encrypted:	false
SSDEEP:	12:Ac150XyQeRg9L6VWQMz+3Yj+6HNJOTvxxWNJ7mWt5ZiUo6R4oB:Ac1sCg1vLyTpxWHHte+4m
MD5:	4200E5D035FDEDDC6E508D39B46388A7
SHA1:	8D292A386315DFB74BDDACD2B2E75899634CF04B
SHA-256:	85C180EAA440F7EFB31E38DE29DD3EC1F0226D178891B567953D2745CE81AB5C
SHA-512:	93E29683D7D2186BDC3FA641FB2987D4E07B4AAECF27612B85521EE7835D2AD1E28621AF82E32ED0E5347DDA63B47F97193F31A093F25EF68E789A7F73FA7EA7
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steamcommunity/public/images/apps/1938090/8eaf32220060344996cbf11f697a4f4be943e5f3.jpg
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...... . ..................................'...........................!1.."qAQaR........?...t.z..k.f.cI&.....N &..eU..yT.Y](.1d#26..qYrF....(..s....U...k_K]o6....r....].,}..i.I...E.[...K....G.?z.Y\..A......v}#.....<...S...%3..8.g.........t.e0....9#=....joq.".......0.o~.........1..F..u..A....TL....kZf....t....W.[0..a..Am0"..AL/.=...Gz5l....T.q.\|..z..5.!...U;..S...tU..-CC...D.v. ...p.<...+...&..[I...l..(.8........V.......5../.G.......9.Px.p.Q\|j...n.vS......A...2.m....D.@cw^.A......3.)..G....q..I....

Chrome Cache Entry: 814

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 815

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	99971
Entropy (8bit):	7.9860149662065405
Encrypted:	false
SSDEEP:	3072:Nhjb/0hkjgVi+bfa3gLCTQ6PMJDLUNy20EyRhgNX:N1/kDTa3XTbU5LUNy20EGuX
MD5:	4952BE52A651E9BCB98041CDDE4FAD04
SHA1:	8AF46B43F4AF428C2327974D638E53A664B8A8D1
SHA-256:	C7B631A40F4C69B05129E662C627CA9F32919A7CCD41DE68DDE3589501B7601B
SHA-512:	281F38199F7D1A22F94C9C1CD9973AFDE8ECF88ACCF56BCA9B6A63E7C71B8E414F933F9D6E3F7FFFA71AB9A86503B350953467A13A7BC569023249CD68DA2FDF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................P.........................!..1A"Qa..2q.#B....R....$3r..45Cbs.6..t.%Su...Dv......................................9......................!..1AQ."aq.2.......#B..34R$bs..............?..}eO..T3 /.h.r......N...X.-E<I).V).........1....z....@.4.....$.K..n..,.s.U..c..c.hd.(.1va.....!.'...F..)s......f...6c;.-`..!..jb.(F..o\|[...).)...i.E.6.'..X......Q..F9....`?.!..pl....BR..P9.X^.u\|.\Q....Q..s...D....U..(e..W.e..'o...!.J...~..Q.....f..6........H..'.9P..m.d.H.....x.."..&..X.....x..6.b..Er..\.G~..E.tT....(.(. !V.+xH.Ri....@.YE.o..l.F.xD...24.f...Z.)..G....8...R...L;...).5....X..BCw..z.\t.K.v.c).Y.VQ..V."....1i......{...m.G..p1:..].'.5h.i.J.,..+...;\|.1ek..^.77....i..l"......).....2.9...'....5T0..1.m./.. _..lg..w15L..Q..GZ.......U>.s..XY.g......V*...#..).iN

Chrome Cache Entry: 816

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	73337
Entropy (8bit):	7.981437097576115
Encrypted:	false
SSDEEP:	1536:OKrMrzzAn8qhkGWlI24//eaEh8ZBpWOsNUzzH98+CTF:OgMDA8qBWiZlEhuBpWTNU3I
MD5:	869DBEB981AF68F9D55A2FBDC3512BAB
SHA1:	D6812827A87D6CBD110F5B535124AE6A48F16C67
SHA-256:	D970607C617AA69256D9BE48711797D20BA48ACA8AE4FE79E80C8241A269467F
SHA-512:	8BC94F971988F02162E157B15B21930655B0CA94BCA95AADBEA282D2C6BA245D94B2CBBBAEAF527A907BBFD8380B8626889156F3EB7DB53473B5FF6277A37C03
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................L.........................!.1A."Qaq..2..#B.....3R..br..$4..5Cs..S.%DTct....................................7.......................!1.AQ"a.2q.......#...B.R3.$Cb.............?....!..$.....7...-......l.......A.R...O...8.~%)S..#. /}..Wb...A..4F.....+<.[g...L.N..g.......H%cp$_........r+.....C..V.....U.:0..E..c.\|.%..+..s.(....sh#6...<T....q..0>.q..>.:x2..7..x.....K.............xg.si..G%...y&o.L5t.;7e,Q....ks......R..Id......sNqpk..\|..N.yl..2w...?..q4....&..te.X..$m...\|'......."..9jV.._...H.Y=z.....p..N..B0N.....c1..k......?.Q#..L.$.Ji...]6.7...s...#..P.k...T ...8....%.2.....-.S.]=..Oo....9......K.........j.].......aT.K.-S.zB].i..OQ.....uf.IL..J.....-...q.2......F..J...2.i.....~Y....._R..Qo......t.3....V.T.......cgK.=.....&..k...<rv}...6`z.:O.1.&...

Chrome Cache Entry: 817

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 306x260, components 3
Category:	dropped
Size (bytes):	38467
Entropy (8bit):	7.980375413851907
Encrypted:	false
SSDEEP:	768:HQxWpagKqTExmwoGNVOwOzUW6vtHWS5kyf3rv6uIPgLA6DlO:HQxWpNKmE7ol8V2Svfz6ILA6DlO
MD5:	687535BF67264A4A79838F71153B8EC9
SHA1:	84EA1CB9979B285D4F18AF8C70A8B1D980865D2F
SHA-256:	1273D57E980AFE8C5F6CB1354C2AFE451ABCDB663E6DAAB3B8A32EAD350D85A7
SHA-512:	531AC6BEAE34268F81CB9D9CED598EE49B5BF01BBA6F7B983E88A7D16A982F5A7B0D81D6F409F1A095225E5A14B54132DB29E77EF359D21B38E2A5DB73A30BF1
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:EA415E2BAEA1DF11A752BC80D643D9CD" xmpMM:DocumentID="xmp.did:C03567ED0D7D11EFABB6DA227201C8AE" xmpMM:InstanceID="xmp.iid:C03567EC0D7D11EFABB6DA227201C8AE" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6f2038f6-7b6f-af48-ab15-bc24ffa4694d" stRef:documentID="adobe:docid:photoshop:21838ae6-7fbd-0a4d-82d2-a5869c55efac"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d...............#?..8...^~...A...

Chrome Cache Entry: 819

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 498 x 498
Category:	dropped
Size (bytes):	43245
Entropy (8bit):	7.880207922595169
Encrypted:	false
SSDEEP:	768:LULIn4VhSeMpvey624Skr37fj/49bNIXp1nQxv1rkbUgCA05W01hm4:LULU4TPMUpekDv49JIXeNaUDWuhN
MD5:	303365411E0791A3AFBC714CC5041A09
SHA1:	BCC2EC10ED726AB3F3861DA8E91EBBA83C10346F
SHA-256:	696D7631AA2DC279B2F8920A258128940B48BC26D959B378E81FB1102591D607
SHA-512:	DC919DCE8BCB424BA369B6251376E37BBF9131CFCDEBD072B04DBCFACF80449AAD5244406F16AC31F95469F455AE91FCE92ADC822898FF6F92C1B328484AC1EC
Malicious:	false
Reputation:	low
Preview:	GIF89a.....................;..........................'......................................6.."................:............................W. L.....2..?.....\|. c ..!..!"j!'I!'J"..#..#'A#K$(F$)H%I%+G'..'G'+H(..)..))K..++E-&f."5/../"./1L0+;1 )2..2,020E3..4/}60h73.86.9$.93.:!.=-4>*@65B:MD .E..E-.E4CF.F.G;.G>.L82MC.NCDNJNO).P..P/.R5.S7/S@;TA<U..U=eY7!Z-.ZP.ZQ.[W^\:/\LP]$.]E9`8.b!.cadf?/fHCiK5lWPn9.oD.pF.pM5qjktWDvo.wN/xw{\|H.~9..M..ZM.pk.Q/.X1.~..N..U..U!.bC.>....._/.X..kN._.....J...z.,..d)....f).pB....b..X........n/.e..i ....f........x3....o..r .\|..L...n..r.....Y..w......4..}.....)......#.5.............. ................I.....+...s.3.a.V.i.........................J..k..^......B............w.?...........<...........................!..NETSCAPE2.0.....!.......,...............H......\....#J.H....3j.....n}.I...(S.\...!_.I...8s.\.s..@...J.d.H.]...N.J.J.jR.V.j...F.^..K6+.h.]{.,.p....v..x....._.{...L.....+..x...A..L..e../k...`..

Chrome Cache Entry: 820

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58761), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	58926
Entropy (8bit):	5.128201689681733
Encrypted:	false
SSDEEP:	1536:pV3mZGP8c/bpFlo8bpe9G2Kn9Yx+axMSBkxmBYe91aZYKjsFGRMx7RJ+pXZtr0wQ:J+tQVze
MD5:	536091B60806E5B59DFD55F69D35057E
SHA1:	4E1E0E1755FC4B489516B9D20C7D2BCA6B78C86E
SHA-256:	93231DA32D20967027D9BDF30E1D8F4DDD689CA4846C0055A2685E2AEB6861A6
SHA-512:	C3658C35BDC5922E538608E98FE852444C2D9C0DE6E0D66E3CD5AA65132FD2AD755FE1FC4F09CCB854BB5FB49CEDEE211EEC52EAF67BCAE593E7789976ECA844
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/libraries~b1f9f17fd.js?contenthash=2a42aa43b78d464bc342
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[1421],{20020:(e,r,t)=>{function i(e,r,...t){console.assert?0==t.length?console.assert(!!e,r):console.assert(!!e,r,...t):e\|\|console.warn(r,...t)}t.d(r,{X:()=>i})},5697:(e,r,t)=>{t.d(r,{Ly:()=>N,nd:()=>le,z7:()=>D});var i=t(10059),n=t(39087),a=t(79545);const s=i.Message;class l extends s{static ImplementsStaticInterface(){}constructor(e=null){super(),l.prototype.promotion_id\|\|n.aR(l.M()),s.initialize(this,e,0,-1,void 0,null)}static M(){return l.sm_m\|\|(l.sm_m={proto:l,fields:{promotion_id:{n:1,br:n.FE.readFixed64String,bw:n.Xc.writeFixed64String},admin_jsondata:{n:2,br:n.FE.readString,bw:n.Xc.writeString},partner_jsondata:{n:3,br:n.FE.readString,bw:n.Xc.writeString},input_jsondata:{n:4,br:n.FE.readString,bw:n.Xc.writeString},partner_readonly_jsonda

Chrome Cache Entry: 822

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	73624
Entropy (8bit):	7.980918433419721
Encrypted:	false
SSDEEP:	1536:q5vduvMscdXEQCFbW/d5fwUPmAQUtrgjr8RqGGdwdcFuY7:q5vCtFEw+QUtkkRqGHyF37
MD5:	B291EA7B31C1DB3680823B10F89D02AF
SHA1:	2C0FB35553A013A6BEFD07FBB0C115214C2B2703
SHA-256:	F35ADB225FC1B198CE52FF23D4E3E07DD45460E8032A642BAC5B6857E94809FA
SHA-512:	19004A6E5D3D57D619CE13D93FF1568B5E64B1C619D8AE86AA9EA816475C27A6826B09B401B9CCF524092EB301BDC87061DCF6E1FCA488F883D6C673FB794FAB
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/730/ss_796601d9d67faf53486eeb26d0724347cea67ddc.600x338.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................P.........................!.1A.."Qaq.2..#....BR..3b..$Cr.4....S...%cs..5DETd...................................;........................!1A."Q.2qa.B....#3....R.4br..5CS.............?..~.8:..y._.....Q....L....z)d....y0..`o........]'.....A.........u.2.........6.$7\Y....)......p...IQ^.y.q.....!..f_.UmD..{cKH...Z......5.>.....'.2............R..AQspz....=.....x..^.J.,.(e.@.S[^..r.^8.:m...c}.G6U...P.Q.:l.,...#+..4H..Ab......0m..\|b.D..f..A....iU-./$$.P..,@.W....1>(.%.c!..om..8.~...7m.)..vG@.....s...t.]..Y.d.$........u..{...U........8.%..2.<...YB..h....65..3.y)..kO#..r..'I..b......\|.`.....Y.y..vk.LT..+..@.6.q..!...\|r8.....J.=4....b.a.......c.,G.o...f....d<.['..:?.Q.........R.....7U,..Qj.h........sM:..c.1..g.-U..O v...lT.rE..E....f..5.0...B....

Chrome Cache Entry: 823

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 292x136, components 3
Category:	downloaded
Size (bytes):	26303
Entropy (8bit):	7.976085264063717
Encrypted:	false
SSDEEP:	768:f+EwBejCr6u23NGTNA6hmCtydwbrvKKLIU6:XDCrCdWmD2HKkID
MD5:	F53551637B14F8AF9CC1723E62FCF062
SHA1:	2A0386E7F3263575199C30AFB40AE8698FEE5BD8
SHA-256:	568E271AAD4E1634B5D56A77D1CCCFFDF95C559F0FEF258CA4E3085990BC6CC2
SHA-512:	78D13DA738074359CA37F86795C4764128FE3E15EECAD86762F2678B5C64CFACFA2D7B1599B9C07F5DB5E312525F76D3839DF34EFD9DB9F83BDC98E810BB6161
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/2239550/header_292x136.jpg?t=1692817793
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................B.........................!...1AQ.."a2q...#B.Rb....$r..C..%34c....................................>.......................!1..AQ.aq."........#2...BR$b...3r................?..z=bi..\|=...W..y...i...!l...}T..V....f.w..,...M.\.n....p?>....(2..:.AR0s.Q.u.~$t...I..[....K..YJ.v..5....=..b...Ci.O..........._'9v ei.....HE...Q+..F.^.(....Y...eu..@....DQ.(.Q..[.....7,DlF.....w)..XV..>c.......W.l.4.\....Jp^....Q.i.v.L....%..N....s.N...U..DYP...2...i{.+./.Ew...,.uV.iR..2..*.9...$......+.dQ;y.&...oXTv.}V.Z.;U(.%d.D`..p.N}.=G.M...y..d......Y..UW..&..(^.9$...8.8#.{.P<...W}..k..;.QB.9..c.p.... .....U_.T..5~1q...........0:u&....@.Z..>\z.....Y%..s..@..v..,...p..W......I.;A...2....=%%^..'..r....n../&!..%.^<!.R.. U.=2..x...HP...Fd.&D.......o[FP.......o..U..A9S....y_

Chrome Cache Entry: 824

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	7403
Entropy (8bit):	7.925292633313291
Encrypted:	false
SSDEEP:	192:shUbUuHO0E+Ql7L/qtZ2+EePbyaQGDR7iVvao0cq/:shk6nV/qtZrEeWaQWcap1
MD5:	1AF4E7137ECE0F7AB8AFE34B5697BD45
SHA1:	74AF389D37D432FA749E9E91A997EC1D34065E56
SHA-256:	D5D3A943F37C0DAADEF800BC58ED93E3381322284F1FBAFE71CE1F3835FF337D
SHA-512:	68E9FEFA93C2BA6DAE59E72541F4844492D7215CB9757090A8AEA86741BCFF88B38D941B838F3F3B16B4CDD7A7A513B2681ECF6EB3F3081AA2926070D90831EF
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1158310/capsule_184x69_alt_assets_4.jpg?t=1715685390
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................E...........................!.1A.."Q.#2aq..Br...$3CV.......4RTbcs..................................1......................!..1AQ.aq."2.......B...R.............?..k&K....9.......(...O.........2]_....G...#.;.^3..]s.G.....K!..N8....IZ.-.p.....\|.%;E..YJ.j.....1..>...t.3.%]...k,.T...]..q..M.......G.)C....g.@u..Jp.6q...+.E..%QV..r..>.>.=O...O.t.{....f3ej.4.<..........I~.X....I..ZH[.$.2Tr..h...ck.q..'}..V..9.PY.D..g.h.4..W...l.m.#.]./..?w#.\s.j]}.Qyy......^i:.=.....1..}.)....u...}..:.F...'.......d-..W:+.Q#.B.B.@........dms...D^C[.8.......S.Qi....-..x.E..W.)\|N1...@....4.....%.B}...7..G.';B..U.M.7...`Ho...^J....9.#..k..H.'/4<.~.....s.....2.......T.&k~......_x...W#........W.).......#....^{........U!..........W.P}...W.t6.H..u.j.Z..cX.+*...tz...2..B<U.6.z$'....T&{

Chrome Cache Entry: 825

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	6679
Entropy (8bit):	7.910442870450011
Encrypted:	false
SSDEEP:	96:0CudPITXfCldhm5yo2ovFpoIQVuUZCUVrtQ3vhovxp6IFwgG3/H7vZwYW/+iRIOa:0VoP0hgdvjQVuUVrGZovxphqR761Bzne
MD5:	50974B3FCD845D0FE040F4BB53CD686D
SHA1:	F93E0160D11F310C43EAEE0A439A43844C3A5193
SHA-256:	3FB5DC06D72401F74DE947E0400DD7FEF7F990011899F2C8C89D49092CA65F4F
SHA-512:	E3B86B57EC9C4DEC65080AC123F024EC5B3B8B9CCB818740D5B44F923E1DBA24F13813859AFDB83C254B87D3BB0BE1BADCF6981523B899624DC1F0578308B5F6
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........7.......................................................................m........'!s....d...I.MV.Q0j.qE...:..)[E.2.P.q!..z..\|.j.z.5..2....;^P...Z.^.e"..E:j....t..j...&..b.3...B..l.b9}.]wE..d~....9..i$.....+..!.)..-....x._c..m.\.4.\|..!....lT".x@.......Z..N..I..D]..Y....\|.R.9......\|F.cR@+X.,....Y/.u..Z.rR.b....1...(..^h....q.....E..%d\|.....H..+#....:...'.J..[t..M..{..hCF.o...}dZ#u.g....1..4...hG.@R\......:.H........$.......................... ....!.3.............=E..........3...?....5\|.L....,6..a..C..s...bc..a.....u#...KW. V.Z.1O.....7..U..D.M.......~..^...:y._T...NU..d..:..cK.q..m...[.t.gj..V....s..&......N.o .....4.N......&:..@..o.EKq.+<..U.W....CE....Y.Y.63..4....}...!3yc. `:..=.d.2Mg.8n.#"..GH...:;Hc......N..>.....3..^........it....\|.}...Lz..R....k'..<..V\.....F......9.q.>W(+ph7#

Chrome Cache Entry: 829

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	dropped
Size (bytes):	38024
Entropy (8bit):	7.984256611051493
Encrypted:	false
SSDEEP:	768:KrbxhkFX/BmSQyZMThKeVS5/pFYjKGdox18U4W4p70IEswblUX+FCLsAFhz4:ixjSQyZMTRS9YjK4ox154W070N1k5sKs
MD5:	669F8E6C638794B57D5455A35E40D8D8
SHA1:	61C7604A0E7F63017118B13BD9AAF51B21538795
SHA-256:	CB2580C4F2E80C3AA1C0773B489CD8D798C335A511FC91BE5EDD18A4FF27D5F7
SHA-512:	DEFC4A782A4F8BD89C518AC082DAAD30D14A34E4FA445847B3FE0369817DDD745B1111BD59E51D494E74478377FF304DBBF8575E887A56BB4D0D131844DB17EA
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8......................................................................>...E.9B..n..@.....MTI../d.&<..."d.pe.../........P..x....lC.R.....e...W......:'..v.fPR.u......)...Vt..C.zV.>#>.".."2[...".l.C.....e..o..j.0.pe.."V.J.q..:1~s..#......Tv.n.VF.........4\..4..a....N..R]".GR.Q.P.kW.J....3.:...lP..L.n}8#...^fh.q.YS.ym.+.y$$......n.`.z..c...1..7...h..-._.2.S.K..7.:...YSO.+...C..{.:'$J...\.#.....hS.Q..6L ../W..G..a...,..sH..".T;<.(.Mp;Q...8..TTm..A..a.A.....9.KY..'T3'v....B..Ub'*...p.bO.......+.BBm.b\|..r. ....G..9/.>."Ly]/....%b(.pE....?#>...l........h.:/x....I.H....i..o.?.........~'.....}...C.....n.WE.h.R..b..tx..w..$.9.+...vH..B.C.)7[..v....S.;.'O;L~"G...[).e...U..K.V,.]s..q.a...C..\.._..v8.f)B...aB%....;E.H.G...p....6zU..9$.../Z...DK.(.........Y...g.=...c...z.....#(..5~K

Chrome Cache Entry: 831

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	13186
Entropy (8bit):	7.872519878092322
Encrypted:	false
SSDEEP:	384:rP+/pl0NCktaazs6IV0ceIKxfXFD3irO1Tyr+:z+XktAVqvxPFAOUr+
MD5:	F5F04C053B96F870FFD298F71147AD8E
SHA1:	D2C7472528E5E472ED3F04276EDF4101435197F3
SHA-256:	0063C46D7ACA842C8EADB42E95ACF4F9FF0A00772ECF0C3BD7D070A0D7BA82ED
SHA-512:	A817EA21CAFDACE3308DACCC8E7E7AF854F8A8FEC78B95FE377ED9E1FACC3CC28D3CF414FEC0F5B5C7C6E42C4610B62A2AD43EBF9D79781BE420AD6286633FC3
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/N12y2V1VbyA/0.jpg
Preview:	......JFIF...............................%. .%%.%%.'10-'--5=PB58K9+-EaEKSV[\[2AemeXlPY[W......./../W?5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................D.........................!1AQ..Raq......"2B...3br#CS.....$s..%d.........................................................!1Q.AR"2aq....B............?.........................................................................................................................../....s~..58..=....].5=(....jq.7.=.S.9.A..~d...........MN0...K....S.:+CU{.....%^.9.A.j.Z...?.....5U....t..C.............a...t...o.t..85=(....ju....t...o.t...S./....s~..58......N.OJ...a...t...o.t..85=(....jq.7.ehz.hs~..........G..:...B/DT.C......V~>.}(....jq.7.=.S.9.A..~e85=(....ju.....u.....[.'....t}.S.O..0.D..O......W......_t...1...7.^.[.,q_..{.\|c...wO.y.A.k~e8..L.=.>1......<..5.2q...{.\|c...wO.y.A.k~d.0\.t.......~......oJ`....7.=.>1...I......s....o.{.\|c....[.'..)...<..t....&..N;zS.

Chrome Cache Entry: 832

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1161
Entropy (8bit):	6.483902966293242
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVNxhpyJ3Vlt8vmG8ll6f7iX:HZNn2lPzoJ3PtQmBY0
MD5:	E406E5A22E4F3CFA580D3BB57420150E
SHA1:	5B381E535BB0CE6003A461F3124FA1238DFBCEDB
SHA-256:	760589F903C5E9BD169B38F941F9A3DC88A23897E9CC5B622D3D91F5C204B9E4
SHA-512:	E33CB7BD10104A1E8C2D3F2B3885D65EF3769F7250445C8341D6D2AD2367749CCDC48DAABE4EA39CB80EE0362AF9D01E48370DB858BA01F956A1A6B8C04217C1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:399EA8C592D411EE91E8F6773DB0009B" xmpMM:DocumentID="xmp.did:399EA8C692D411EE91E8F6773DB0009B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:399EA8C392D411EE91E8F6773DB0009B" stRef:documentID="xmp.did:399EA8C492D411EE91E8F6773DB0009B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.d......IDATx.b..U.d``.......@...4.....0......PWU.p..Q....1\=...2I.\Fg.&3de.....BX..4 ...L...!#....... )!..7m..

Chrome Cache Entry: 833

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1161
Entropy (8bit):	6.483902966293242
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVNxhpyJ3Vlt8vmG8ll6f7iX:HZNn2lPzoJ3PtQmBY0
MD5:	E406E5A22E4F3CFA580D3BB57420150E
SHA1:	5B381E535BB0CE6003A461F3124FA1238DFBCEDB
SHA-256:	760589F903C5E9BD169B38F941F9A3DC88A23897E9CC5B622D3D91F5C204B9E4
SHA-512:	E33CB7BD10104A1E8C2D3F2B3885D65EF3769F7250445C8341D6D2AD2367749CCDC48DAABE4EA39CB80EE0362AF9D01E48370DB858BA01F956A1A6B8C04217C1
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:399EA8C592D411EE91E8F6773DB0009B" xmpMM:DocumentID="xmp.did:399EA8C692D411EE91E8F6773DB0009B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:399EA8C392D411EE91E8F6773DB0009B" stRef:documentID="xmp.did:399EA8C492D411EE91E8F6773DB0009B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.d......IDATx.b..U.d``.......@...4.....0......PWU.p..Q....1\=...2I.\Fg.&3de.....BX..4 ...L...!#....... )!..7m..

Chrome Cache Entry: 834

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9665
Entropy (8bit):	5.235256973925393
Encrypted:	false
SSDEEP:	192:O1B9GLCVhFCD7ripKAzbjL6JYmqTMOZ1H71Rd+Z1QC:O1EiSe4A/VTMOX7rd+kC
MD5:	2778125D9B3BFFD6166044BA6EFBA9B6
SHA1:	059582750885CDC9D979EEDE457F9F8BB09213B9
SHA-256:	4261D9E674A7568E7B6EAA6BFB20A3BB41C5583E9BF50942244FB1A01C0364C6
SHA-512:	4053400C1FE0940521A8370B4773E216E1B9585472CC59D3A434D89B6753F2F21E1D6911787F432685710EDBDE98142DE7EA00C1EF20583BCDDE1B1597FCB543
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/broadcast_carousel.js?v=J3gSXZs7_9YW&l=english
Preview:	....GSteamBroadcasts = {....Init: function( fnFilterFunction, tagid, genreid, categoryid, maxBroadcasts, bAutoPlayingFeaturedBroadcast )...{....if ( tagid === undefined ) {.....tagid = 0;....}......if ( genreid === undefined ) {.....genreid = 0;....}......if( categoryid === undefined ) {.....categoryid = 0;....}......if ( maxBroadcasts === undefined ) {.....maxBroadcasts = 6;....}......if( bAutoPlayingFeaturedBroadcast === undefined ) {.....bAutoPlayingFeaturedBroadcast = false;....}......GSteamBroadcasts.m_fnFilterItemToDisplayFunction = fnFilterFunction;....GSteamBroadcasts.m_tagid = tagid;....GSteamBroadcasts.m_genreid = genreid;....GSteamBroadcasts.m_categoryid = categoryid;....GSteamBroadcasts.m_nMaxBroadcasts = maxBroadcasts;....GSteamBroadcasts.m_bAutoPlayingFeaturedBroadcast = bAutoPlayingFeaturedBroadcast;......// If we have zero maxBroadcast, it means we should be disable....if( GSteamBroadcasts.m_nMaxBroadcasts > 0 )....{.....GSteamBroadcasts.Render();....}...},.......Create

Chrome Cache Entry: 835

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x512, components 3
Category:	downloaded
Size (bytes):	38573
Entropy (8bit):	7.988340994359931
Encrypted:	false
SSDEEP:	768:MsIrzPcqpp4iWdOyV8A1RBnvitUtlpIBUfnE98jmqt:IzEqgdSqRdIUtNfIuX
MD5:	4DAAA0F7FCFED6B1E10676D1F3A363B8
SHA1:	7C0687F0609D406D082EB84A3FE00C8B6453F411
SHA-256:	6B7017BA8A8FFBCF3F14D7834AB1D6667646E1C691F6B4C4FC239C4F0954CF66
SHA-512:	39EBE60A58D68D7D395C339EB0D587FB5B84C995C6DDB485F499379FDE6CA8968924EA62BBB92DC45CFE20EAE6B193593CBDCF23FB51AD84395199A5FDF6CB47
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2447221343464641707/DEA652FC69A34B7EFE249C8E02A4229CB46B7092/?imw=512&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8..........................................................................i.XY..p.........,...Q.@BQ,d.K..{..^.y,x....!.0.<~d.?$.S.'....a$.b.pb..........$.PN..X..&/.aGC.#.(..{......lD.,dW..e...).. ..U,.r....._G..;_.......s../.U..\0.q.....a..5[.f..cg...WZ.[T/r_..~...._.q..D..#...U.(S..1S.$.:`...).I...1!b.,3..'..........x..2.K.q.`..y'C..i...?>..z/Jo..c......-...Z..?a:..Z..6..F....X.<.H.........:....,..q..g.......t..}1...~z.7....`G..."..\|...I....4.P.H.M.0P..RU.xr&....Y..'Y..g>.Y<..?a...&...{9.s.]u.... .,.t\...z.......q.\...sk.i....2g....\Fr,{..nx.........s...;];5.[4.pJRg'm.=..8..9,{.kIO]....rWW..../.......q...z.s...J.9...&h....O.n.g4`N.bl.,.l..!...d..o.r...\|......z...r_ZN......\|..Q.....M..P.Xs4.C..E$,$.m...O`.n.j...].)......1.....*...dpa..{y.....j...b?.WO....../.=.I..........

Chrome Cache Entry: 836

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67861
Entropy (8bit):	5.295795698468241
Encrypted:	false
SSDEEP:	1536:8mtmm0LldQLa8ylkIKp9YFB0JUbvwv6901Z0nX:8ud+NX
MD5:	A9785A2CFF92A05D204722D1C5E1F0D1
SHA1:	39E9282B92A827353E9F7988270BA6546A84E07F
SHA-256:	5C00F7044811BA4C0201CB2E318D9ECF86B47C2585D81579CAE95461DE824920
SHA-512:	86F4EC35B04BE0E8A0E88A0A7C12FB54DBF0DA4E9B873439EFD0B1F6056EE9741EC287681F09541E848148C4286D88E27AB3CB8F5B3BB310FC8D08E2A87DC0D6
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~2d6f640d9.js?contenthash=7a42268d32dd6200b218
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[7901],{68324:(e,t,i)=>{i.d(t,{Pw:()=>o,c8:()=>a,hB:()=>s,zB:()=>r});const n=new(i(68785).sO)("video"),s=(n.Info,n.Debug);n.Error,n.Warning;function r(e){let t=Math.floor(e/3600),i=Math.floor(e/60)%60,n=Math.floor(e)%60,s=n.toString();n<10&&(s="0"+s);let r=i.toString();return i<10&&t>0&&(r="0"+r),(t>0?t+":":"")+r+":"+s}function a(){let e=!1;try{e=MediaSource.isTypeSupported('video/mp4;codecs="avc1.4d4032,mp4a.40.2"')}catch(e){}return e}function o(){let e=document.createElement("video").canPlayType('application/vnd.apple.mpegurl;codecs="avc1.64001f,mp4a.40.02"');return"probably"===e\|\|"maybe"===e}},46157:(e,t,i)=>{i.d(t,{C2:()=>U,N1:()=>N,tA:()=>O,YW:()=>I});var n=i(85556),s=i(80751),r=i.n(s),a=i(54842),o=i(77936),m=(i(83999),i(62210)),d=i(45492),h

Chrome Cache Entry: 837

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (629), with CRLF line terminators
Category:	downloaded
Size (bytes):	12804
Entropy (8bit):	5.535121147858017
Encrypted:	false
SSDEEP:	384:CDWFvVcXIeIHug0g1RfzpJc8dIG4oLqE8js18mU2V5o4LYLysuSd:CDWFvVcXIeIHug0qRfPc8dIG4oLqRjsI
MD5:	BE1E0131E0DC3620948B14DA818B1A4D
SHA1:	810B4AFF56A0E76CF870CC67E3092447B46DCD92
SHA-256:	EBD518BEC6383218452CC4597AEFF5DEBC82B1F76CBEA1950C5ECBFD59C5E3E5
SHA-512:	8BC754838712E5209ECD45D3490A061CB50A463270FEFC2217AFC24A8983156EA944ED90D3BDD2EFF997AD12F399139F4303BB98BBC2DE330848068DA8929949
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=english&_cdn=cloudflare
Preview:	.....a:focus {...outline: 0 none;..}....#headerBar {...text-align:left;...margin:0;...padding:0;...background-color:#111111;...width:100%;...color:#545454;...font-size:10px;...margin-bottom:0;..}....a.headerLink,a.headerLink:active,a.headerLink:visited,a.headerLink:hover {...text-decoration:none;...color:#959595;..}....#headerRight {...float:right;...padding:0;...margin:0;...padding-right:27px;..}....#headerLinks>p {...margin-bottom:0;...padding-bottom:0;..}....#headerRight .personaName {...color:#cfcfcf;..}.....headerLinkActive {...color:#cfcfcf;...font-weight:bold;..}....#steamLogo {...float:left;...margin:0;...padding:0;...width:105px;...height:54px;..}....#steamText {...margin:0;...padding:0;...height:35px;..}....#headerLinks {...margin:0;...padding:0;...height:19px;..}....#headerLinks>p {...padding-left:6px;..}....#subHeader {...position:relative;...margin:0;...padding:0;...height:36px;...background-image:url('https://community.cloudflare.steamstatic.com/public/images/header/lower

Chrome Cache Entry: 838

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64904), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	171820
Entropy (8bit):	5.091592907461997
Encrypted:	false
SSDEEP:	1536:js4PKffp9FVf2HBeZTjxI1slCWW9sEbsgsfRc117tUCqU3A8yWiSgzgPMNSrf:js4PKfx/VhTjHlCNOEArfKrxRJS+D
MD5:	BD3FBFE0A71FC9C9925BD611F823A1E4
SHA1:	C5E1A3DDB20C8FB894E069310BDF05DC655F2FA6
SHA-256:	69ADB0AF90853345093AFAD207BA98622F7D2FCC9AE1365D1C89B267F7F10D4D
SHA-512:	6E279402479886777224CB092AEE8B76D917DA3D50C255E5689AE71BC338F97ED7E32A9A0F8A9F9B2DF04416A008E257BB7045C3428C10416B8B48834784504F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=2427041da1c36f76f959
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[7952],{12445:e=>{e.exports=JSON.parse('{"language":"english","Summer2022_hunt_Intro":"Greetings from the Future!","Summer2022_hunt_Intro_1":"I am Clorthax, a time-traveling trickster! I know what you.re thinking: \\"A professional trickster? This sounds like a trick!\\" That is a reasonable concern! But what I am about to tell you is not a trick, and to prove it, I will type it in all caps: THIS IS NOT A TRICK.","Summer2022_hunt_Intro_2":"Okay, it.s a trick. But only on the people of the future! You.re going to love this. Why? Because I have stolen the ten best games from the far future, then traveled across an ocean of time to sell them to you! Exclusively on Steam!","Summer2022_hunt_Intro_3":"Anyway, I can.t outright tell you the names of thes

Chrome Cache Entry: 839

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4009), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	39590
Entropy (8bit):	5.70889983152783
Encrypted:	false
SSDEEP:	768:imOhyrY6dKV7syaFVwo65cht45KqTUzvSQNxKJb4Ud4xh5VgITnw:jvkFSro4Ud4xa
MD5:	A7055C200B47357C2051179F9B979BBD
SHA1:	701F861353694CEB6A41A867AC2E118A76400CDC
SHA-256:	F553F59191AF4F2B222A73D129B731D4F461C84A67D55CF8E29BA319FE13B078
SHA-512:	D5DF2249AF0217302BC64ABA7F8461AD998D15B6ADFE83924AF0EE916B658DF90B9C17EE86B83C5E5F2AEDD5D37DA64F23D403E02E450F970A99D8992D17983A
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare
Preview:	..html {...height: 100%;..}....body {...background: #1b2838;.....text-align: left;.....color: #8F98A0;...font-size: 14px;.....margin:0;...padding:0;..}....body.flat_page {...position: relative;...min-height: 100%;..}....body.flat_page.black {...background: #000000;..}..body.flat_page.no_bg {...background: none;..}....body.flat_page.blue {...color: #636363;..}..../* this makes the footer appear at the bottom of the window on short pages */..body.flat_page .responsive_page_frame {...position: static;..}....body.standard_page {...min-width: 958px;..}....body, textarea {...font-family:Arial, Helvetica, Verdana, sans-serif;..}....h1, h2, h3, h4, h5, h6 {...margin: 0px;..}.....pagecontent {...padding-bottom: 128px;..}...pagecontent.in_client, .pagecontent.no_header {...background-position: center top;..}..body.flat_page.blue .pagecontent {...background: none;..}..@media screen and (max-width: 910px).{..html.responsive .pagecontent {... padding-bottom: 0;...}...}..html.responsive.touch .pa

Chrome Cache Entry: 840

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28194), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	121921
Entropy (8bit):	5.850733982659702
Encrypted:	false
SSDEEP:	1536:EEcpFUgj8v3Yt+HC0J/5uBYjs2nkjq1lze5oHsvLNb5O:EpbMuD2vFsv1I
MD5:	E4281C1C4B1618016D6425DF2300B063
SHA1:	8CFCE778176573CEC5C6D9A121E098B1A8136B4B
SHA-256:	16DCA3CB11336084C85464535ADA0B1BB3BF22053174BD163DC88786F23DC02D
SHA-512:	C4FB777D30CD430E944515F9866F0151748E8B286D80704BAB936955F4F718EB93A80FC2BA6D19AF7ADCD5E1712A29D3D7657281833CF334A1BB772FDA56E959
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/applications/community/main.css?v=5CgcHEsWGAFt&l=english&_cdn=cloudflare
Preview:	............pu9cOpUMN0Q4mmIX2WZPl{position:fixed;top:0;bottom:0;right:0;left:0;z-index:1599}._2qyBZV8YvxstXuSKiYDF19:focus{outline:none}.GreenEnvelopeMenu,.LQkrbbayZPY11qHm01t7F{position:absolute;opacity:1;background:radial-gradient(ellipse farthest-corner at 50% 0%, #3c4047 0%, #3c4047 50%, #33363d 100%);transition:opacity 200ms;box-shadow:0 10px 32px 0px #000000ab;z-index:1600;user-select:none;padding:4px}.web_chat_frame .LQkrbbayZPY11qHm01t7F{max-height:calc(100% - 128px);overflow-y:auto;overflow-x:hidden}.GreenEnvelopeMenu{box-shadow:inset rgba(61,68,80,.75) 1px 1px 1px 0px,inset rgba(61,68,80,.25) -1px -1px 1px 0px;border:1px solid #000;padding:1px}html._2GpKTB_eizdXpH2xVGbMKi .LQkrbbayZPY11qHm01t7F{position:static;box-shadow:none;display:inline-block;padding:0}html._2GpKTB_eizdXpH2xVGbMKi ._2y2tUbsMx8OIwkimGSyHmb{padding:4px}html._2GpKTB_eizdXpH2xVGbMKi .pFo3kQOzrl9qVLPXXGIMp{min-width:fit-content;white-space:nowrap}html._2GpKTB_eizdXpH2xVGbMKi body{background:#000;min-height:100

Chrome Cache Entry: 841

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65367), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	144536
Entropy (8bit):	5.548074570556641
Encrypted:	false
SSDEEP:	3072:DIRmbvZi5zZGZQaoZzSTeyPfTZ/rRNqdUNVx7Zkcs:DJbvHaarrRNqdUNVx7qcs
MD5:	8EFDA34916CAAE959747E8E784D3BDB8
SHA1:	DA71A58048733D6EF854DF2508FEDD48FAFAA398
SHA-256:	5C2615FB3CDACF56A4087BFE70214FB762B3C72C91AD5F0247BC64A53B78BA9D
SHA-512:	823D16DEDCE00550DF8D2F469BE06EB24671666D4ED55B4FA31970E4D23BBA9841B49B61E4DFE5B2AE45446D2C9854F21D432580FF54BBDA3651EA7C733FDA8E
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~642602239.js?contenthash=ce169d843b8388128d8f
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[9427],{99970:e=>{e.exports={"duration-app-launch":"800ms",Picker:"_3acyH_WQ_vSWurNYLR84lI",Tabs:"_3DjoXcx0aMRDIV1BxLzlzU",Tab:"_1F8BhKKWf_XhG9QsmY_4lp",Focus:"_3GiAck-LzSOtfHEzFFPIIf",TabContent:"_2MluNdiOiHT-XKPQfFiIax",Active:"_2bg1wWoNj7Bs0BSiao9e9x",Content:"_1c-qebyqfejBT8hBvbUY7p",ItemList:"_2tnPHy-nozONfkJPqkZciP",Item:"_3zgndNTKG2ncwQVa-HXHBQ",SectionedPageTitle:"_1rBPdXFPZ9z7qEz2BZBhYQ",SectionTitle:"_3ff2fpyHtj6qUHH3pPpjyw",FilterInputContainer:"vzSOldNc6qJmpXlLVoi8i",FilterInput:"_18mhxKaUFfaWL6pJANncsS",AddonPickerMessage:"LGYf8sHBX6opSMqckeeCz"}},14411:e=>{e.exports={DynamicLinkBox:"_5Ycv2OaAUmMPwHk7QzlSa",DynamicLink_Preview:"_1SXvQfZ4FnIfvHD9QNJEj_",DynamicLink_Author:"_3_zLBASSeSDYtGm8VbxfqV",DynamicLink_Description:"_2LLBoIbsppmXCLYT1V1xiz",

Chrome Cache Entry: 842

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 1438x810, components 3
Category:	downloaded
Size (bytes):	53312
Entropy (8bit):	7.665136731299754
Encrypted:	false
SSDEEP:	1536:rH0/cBYvhmIN/aCvVhewNvGugIg2T5YDl:rU/caJmINCCvV/1Gu/nlYx
MD5:	21033B55259B477772E53545A528333C
SHA1:	77DA30343DA982525DE8D056F99CB78F1F992FA6
SHA-256:	F31B0421CCD39BD52C37806521C30B8F30C5A72B7B8A7FE9D796E08E6D186BBB
SHA-512:	0DE213CFB2FA93C325748354241BEF7545CA3E539394257169A9BBF7F2CC0588608499A25BEC02E226EEE8B097AE51BF9806380B9812C72964C5E32D9C129762
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/570/page_bg_generated_v6b.jpg?t=1714502360
Preview:	......JFIF.....H.H.....C....................................................................C...................................................................................................................=.......................!1.AQaq."..2.B..#R..b.$3Sr..4C..c...................................................1!A.Qaq.............?...;nR..@SI@.T......DR.T...Z4. ..%e..U+{........6..[].V.e......E4Ee.@Z..J..../@^{....@.........8...`....P...@(.@J....k..........@.....4.(.{.P.%...{.....`N..(.....'j.~. .].bP... 8... .....o@P'.).......?...H...W%....S........W..{...r......`.L...P"........x.F..".....DEO.........eF.Y.......V@.m..2#"..XT%..@F..E...@.P.P..,.j.T.@(.F ..P .....4..4.....x5.J.i...kF.......H%t.+-....B6.Fk.TTm-.U..$V[."4.E.VV....@U..`[..L.^H...../ (.@@....@.....>(....Z.%S.@..8@=..Q)...P...`8...B.M0.%T.v...7.,....%............P.H.W.%.+b... ...=.8a@.......+......(.@.....S.....@(.`..... .&.? @......=.8%T%.....1(........2R'<.Q..VY.dTdVXT..vJ.W.T...1&..@Q.2...*V...".B(...5.

Chrome Cache Entry: 843

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65370), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	422401
Entropy (8bit):	5.424518071225169
Encrypted:	false
SSDEEP:	12288:8FwpzQTUIZ6Mni3n3dwczX8qSHzpYgPvKYdeGpGoUx:uwpzQTUIZ6Mni3n3dN5gPvndeGpGoUx
MD5:	A1E1BA63CE08A9984C56BBCCD49597E0
SHA1:	812A8A0D7874DABC6FD42C8115DA142AAE3EC207
SHA-256:	E62C3C960C2135478A974CC2974DC7ED84F3C2BF5E8C497261CCCB9D025FE51A
SHA-512:	3F0C5B0F5672399B42CFE3291766A39A7942522B9B62DE846C53BDC3FC0A7DC1E1545A8475613F4B60F3465203AF5B2C3E1C5BB3530E76EBF75EA7E703188432
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~b1f9f17fd.js?contenthash=926d8ae84076f2223cec
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[400],{9573:e=>{e.exports={BreadContainer:"_1QPim7Fhu5DRQ0XwSEa3Z7"}},94877:e=>{e.exports={fullscreen_bg:"_1kVV4fxESgUTmDLWA1AF7f",fullscreen_bg__video:"_2_n4M4Y1GOSxPbOgDQ9FsQ",fullscreen_bg__video_mobile:"MqfY-A6G0N6EjTLJfOXCe",store_bg_overlay:"_13eiu4qo0ttoVY58BglIsw",gradient_width:"_2wPYM-BnFNtN8gv0XORx4A"}},39451:e=>{e.exports={"duration-app-launch":"800ms",MainCarousel:"rKC9i1QFlmHVnfQGYNdK9",FeatureCtn:"_1ZPgL3xqRjoZ8HtqEo-kYT",StoreSection:"_1g3iQ97kwa-WXWin7gGPa1",SectionTitle:"_26E34RQ1h7NQYO_MZA4sc8",SectionDescription:"_18HRZ_D3sGMzN2VY4tuS9V",SectionTitleCtn:"_1VuW8IsQok7lzajOHCUM4n",SpotlightsColumn:"_1g97edPcPpAx5VAfphsiJq",SpecialsItem:"_3GfHVhntV-yFw1UXfa196H",SpotlightCtn:"_3pJ3tT4Yk6jKbHYJmCj2CU",SpotlightImageCtn:"_1o33E1n3dVLuLi3lK1CAk9

Chrome Cache Entry: 844

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 81 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3475
Entropy (8bit):	7.77266892162709
Encrypted:	false
SSDEEP:	96:82CqFl6AthP9bTuywmhewX45av6vyZ1gPWDFH:OqFljP566wwCqgs
MD5:	99B0B7CE794818EB24DD6D5287588936
SHA1:	AE4AD007AD10371BF4A35F1D4AE2B871D2B809E7
SHA-256:	E957985B47C64E1D65EC3C377170D5C0BBEA810EAB863824F305838493BE7427
SHA-512:	8DE899F5824D6E79D1C4BAFEDB59ADAF8134C9C9AEFAE5A7C0CDEBA45258A7A632D105136BCA33461CD97F7ABAADB98ECF3F70EA8DCFF49807E5D1FCDE69A25A
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/4-star.png
Preview:	.PNG........IHDR...Q.........WW......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:C3233700A10911E19F2BAEBFABB72EAC" xmpMM:DocumentID="xmp.did:C3233701A10911E19F2BAEBFABB72EAC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C32336FEA10911E19F2BAEBFABB72EAC" stRef:documentID="xmp.did:C32336FFA10911E19F2BAEBFABB72EAC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>;1P'....IDATx.W.tT....73.I2I...I...h.H ...!..4X.............b.G.z4...Q...RA.X.Ai+X.....!...@.2.....f&L....s...w..../W

Chrome Cache Entry: 845

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1054
Entropy (8bit):	5.164921603021118
Encrypted:	false
SSDEEP:	24:oWtuUOmEVzOFGYtnhzjPk3bDyriTCe80FjSnLTI:l3OrJOFftnhXGburiTCe80ALc
MD5:	032B79E6DAC0DB5C670CEC91575DA16C
SHA1:	5A66F6544959C33E8E131562DCBC669E97897F12
SHA-256:	D271537000E337C26001956AACAD3B2DF3C0CF8CD31354856C32A15234FED213
SHA-512:	F51E2D06F150AFCC8D7E6034B99B4E36881D5C76E3A542C7EDB914A9E34B880F3B0873A6FB9FF045C8EEF7AA57A194CB2CE25E1A2AB578CE80C7EC61D2B45EB3
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/communityhome.js?v=8-RwlLlPLHOa&l=english&_cdn=cloudflare
Preview:	..var bSearching = false;..var gSearchField_Apps = null;..var gSearchField_Players = null;..var gGameSelector = null;..var timeout = null;....function InitGameHubSearch()..{...gGameSelector = new CGameSelector( $('appHubsSearchText'), $('game_select_suggestions_ctn'), $('game_select_suggestions'), OnSelectGame );..}....function OnSelectGame( GameSelector, rgAppData )..{...$( 'appHubsSearchText' ).value = rgAppData.name;...top.location.href = 'https://gtm.you1.cn/app/' + rgAppData.appid;..}....function OnCommunityHomeLoad()..{...CheckForMoreContent();...ScrollToLast();..}....function InitSearchFields()..{...gSearchField_Apps = new SearchFieldWithText( 'appHubsSearchText', "Search for products", ShowAppSuggestions, null );...gSearchField_Players = new SearchFieldWithText( 'SearchPlayers', "Search for friends", null, null );...InitGameHubSearch();..}....function DoneSearchingForApps()..{...bSearching = false;...document.body.style.cursor = 'default';..}....function ShowAppSuggestions()..{

Chrome Cache Entry: 846

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14566), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	14731
Entropy (8bit):	5.352615429007418
Encrypted:	false
SSDEEP:	384:+fhbJl1jcB3OWYScLbiYzi7Qv/K3AjbIbNiBagio:W71jckpSqbiYzi7kS360Hgio
MD5:	39A5FE24DF2A7796BBA5A494BD03B032
SHA1:	6C5A8BD0CB1376768864A1EA26272495D3757C3D
SHA-256:	C9E1211FBB2B6F5FF89036F1C872694A4FEB9AAC2ADD74936C2F34E9A6ADD4C1
SHA-512:	FCA3CF4568D501005F73715AE410DF0D10ED06A9C6D62D3E3F7C41B720900BCE4CCC25DDFD91FAEE8B60E8904597BE47637DE7D9B8D073EEE224518456A2ED67
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~af55cc5d1.js?contenthash=4f7934fa0c61bb251d52
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[1496],{93243:(t,a,e)=>{e.d(a,{KU:()=>_,sV:()=>d,yh:()=>h});var n=e(85556),o=e(80751),r=e.n(o),i=e(54842),s=e(47427),l=e(35427),m=e(62210),c=e(37563),u=e(58670);class p{constructor(){this.m_mapAppIDToClanInfo=new Map,this.m_mapVanityToClanInfo=new Map,this.m_mapClanAccountIDToClanInfo=new Map,this.m_mapPromisesLoading=new Map,this.m_rgQueuedEventsClanIDs=new Array,this.m_bLoadedFromConfig=!1,(0,i.rC)(this)}Init(){this.LazyInit()}LazyInit(){this.m_bLoadedFromConfig\|\|((0,i.z)((()=>{let t=(0,c.ip)("groupvanityinfo","application_config");this.ValidateClanConfig(t)&&t.forEach((t=>{this.InternalSetupValue(t)}))})),this.m_bLoadedFromConfig=!0)}ValidateClanConfig(t){const a=t;return!!(a&&Array.isArray(a)&&a.length>0&&"object"==typeof a[0])&&("number"==ty

Chrome Cache Entry: 847

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	87263
Entropy (8bit):	7.984546927405535
Encrypted:	false
SSDEEP:	1536:k+LNQ9CX/G7uB8/0luESwHvWNypFqKy6MWZbDGdfJ2Q+CGZAwnN9kjqu:kw/GDguEnHueFD/bDGdfJMHZ3Ejqu
MD5:	45CD19D66DEF0853E6E11B4E93D5DA00
SHA1:	1D5AA7733AFE132D57D4634C69D690CB30F21B3B
SHA-256:	BC128660EEB36ECCBA90EC854774321FDA094BC682410DA145DE3F1ADE6F08BB
SHA-512:	6270D49B4D18C200197E738DA3818C87A4D732EBED67B12D75B1D04005B0F6C05E200B53BF4808272D2DEC5D1872A94D1BD0218548867CCACBDD9A9A45057266
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................Q.........................!.1A."Qaq..2..#BR...br...$3....4C.DS.5cs....%..67ETt...................................<......................!..1AQ..aq"...2........#B.3R$%b..4Cr............?.....eZ...R.B_..b.8....;o.....`..Q\|...q.Y..-..Ad/....c?..QPH..{..Eh...."..\|....y..J-..IkX.?\.Q.....(......+4...>.!.w.#R....) r...l.YdR.s.....~{\|.G).....q..a...m..`..@.<...7E.4..,q...$m.0Pnm.Y..!"...W{.3..Zh...............L.mH.N... .D`..Uc..l.l.....CTK)...}@........U.,r0.B.?.......x.X.....l~x..a.....RtW..8(P(.g.S..O ...&B...{....`.R.".i.K.......K!o..D..W.rbl~..B.......Y$.YY.m...;..4..F..[j..0.&\|P.....,....:.h......Y....~?.i^Ux.t.I...{....H..3.t<>?.$t+.".E]O(2v.!H......;.,=..m.mn]7g..@.m:u.P..........M.......X.T.4q2....i...ck..-...[U..u.......s...c<...3.,7....m..H....

Chrome Cache Entry: 849

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 55, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2184
Entropy (8bit):	7.4962331219708025
Encrypted:	false
SSDEEP:	48:yitNn2VQWWJ3erslfUJimlLGNI1MOFz+4zjgN6:T2uWjrslfUJXt1Mt4zg6
MD5:	080C457AF88EF213CF315AF1221F74C2
SHA1:	44C7475D69E1F3D8780B6F638960B670C2C0FA58
SHA-256:	47CCA726B04188AB33A403AC206822B96D6789FE5FF568DDCBD9BA972688F6D4
SHA-512:	A0BC577168B5774085BAB0FD868D0B5D285691B5D7A52796EAB684D892FB47D44AD2495757983D5A13D7658CAE0AA80D8A46D73070301494F3750AADF05D23D0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...7........O....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:863F3845A5C311E1AB34C8DE0133D6B6" xmpMM:DocumentID="xmp.did:863F3846A5C311E1AB34C8DE0133D6B6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:863F3843A5C311E1AB34C8DE0133D6B6" stRef:documentID="xmp.did:863F3844A5C311E1AB34C8DE0133D6B6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.o......IDATx..]H[g..1..{.j.....'4l.Q;X:u.^..D..7^....+..0.p...(...'S.P.#.(l....e2.M.h.&&1..s..gq&59....'z....y./.

Chrome Cache Entry: 850

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15621), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	15787
Entropy (8bit):	5.831818895595956
Encrypted:	false
SSDEEP:	384:+uJyq4knUvzeu2FmVu2FmeW8t5VdWqEB5DpX5Q+PiETMXAd0C:t5uKTmVTmo5Vw15VX5Q+6ETMwd0C
MD5:	574A6BBFA410CA313F3CA8C5FED04820
SHA1:	1832115C035B5D3DD23F18335D1E0B6329D0A4CF
SHA-256:	9F07B7EEC1D90EABF59DA217DADBBA043BE52535E3A44F11DCA067779DF43D94
SHA-512:	2B232724761F8AEF15F907127D9150ECBDAFE989E6DCF70A6D5EC7DA84C5E6A58E9F3FFBC9EF8D6C43A8CE43ABB3F85A945A92245FB563E4061E278BE3D2DC8E
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~afc01df82.js?contenthash=07c9e1b6e7564fa7d26d
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[8610],{5167:e=>{e.exports={avatarHolder:"_1YGAHSfGavQI6MODJq-pJB",avatarStatus:"_1yIzy56YfJIliF6ykwhP2r",avatar:"_1p_QrI3ixF-RAwnxad9pEm",avatarFrame:"_3atbNcPD1_nRVTjOvryjWe",avatarFrameImg:"_338kJp62vHY5iDbsraaiKD"}},90366:e=>{e.exports={"duration-app-launch":"800ms",OtherEventsCtn:"_1qNsZzOZwNCYm1GS9pqnZE",OtherEvents_MainImageCtn:"_1_8oyHdewqai4JuEIh11wy",OtherEvents:"_2ioeML9G6BTyA11zRYPJiO",OtherEvents_EventCtn:"_17gGs3rUyGwRkz8uPik0rB",OtherEvents_MainImage:"_3xf4AU1wEY5nIzAOdOnSsj",OtherEvents_BGImage:"_3rp-lFmelffTONjJ-ldqgL",OtherEvents_ContentCtn:"_3QaFWiKl_XbnEBVEhdfeLt",OtherEvents_TextCtn:"_2AVL1OmApcsfoOPFx8QThT",OtherEvents_TextTitle:"_3ZuflpGGSeJvmjZJIQx5e0",UpcomingCtn:"_--lM7hJVkwcISdQAWy1fy",OtherEvents_SubTitle:"_2UUNjtLra_-qqwuU_ktz94",

Chrome Cache Entry: 852

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	6679
Entropy (8bit):	7.910442870450011
Encrypted:	false
SSDEEP:	96:0CudPITXfCldhm5yo2ovFpoIQVuUZCUVrtQ3vhovxp6IFwgG3/H7vZwYW/+iRIOa:0VoP0hgdvjQVuUVrGZovxphqR761Bzne
MD5:	50974B3FCD845D0FE040F4BB53CD686D
SHA1:	F93E0160D11F310C43EAEE0A439A43844C3A5193
SHA-256:	3FB5DC06D72401F74DE947E0400DD7FEF7F990011899F2C8C89D49092CA65F4F
SHA-512:	E3B86B57EC9C4DEC65080AC123F024EC5B3B8B9CCB818740D5B44F923E1DBA24F13813859AFDB83C254B87D3BB0BE1BADCF6981523B899624DC1F0578308B5F6
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2492256706509024689/8C0EB957FF43CDC245BDEA0E5CE8754ECE3EC0FB/?imw=128&imh=128&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........7.......................................................................m........'!s....d...I.MV.Q0j.qE...:..)[E.2.P.q!..z..\|.j.z.5..2....;^P...Z.^.e"..E:j....t..j...&..b.3...B..l.b9}.]wE..d~....9..i$.....+..!.)..-....x._c..m.\.4.\|..!....lT".x@.......Z..N..I..D]..Y....\|.R.9......\|F.cR@+X.,....Y/.u..Z.rR.b....1...(..^h....q.....E..%d\|.....H..+#....:...'.J..[t..M..{..hCF.o...}dZ#u.g....1..4...hG.@R\......:.H........$.......................... ....!.3.............=E..........3...?....5\|.L....,6..a..C..s...bc..a.....u#...KW. V.Z.1O.....7..U..D.M.......~..^...:y._T...NU..d..:..cK.q..m...[.t.gj..V....s..&......N.o .....4.N......&:..@..o.EKq.+<..U.W....CE....Y.Y.63..4....}...!3yc. `:..=.d.2Mg.8n.#"..GH...:;Hc......N..>.....3..^........it....\|.}...Lz..R....k'..<..V\.....F......9.q.>W(+ph7#

Chrome Cache Entry: 856

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	40161
Entropy (8bit):	7.963274846714269
Encrypted:	false
SSDEEP:	768:iLcfy+3Za5f3VdZIbWebsotLOFy9IwY53FHxuxhm5Do1dGfvYfyL8fIfb+3+yeiV:D3Za5PVAbWusoLOYUlrS4AfyYgTG+JiV
MD5:	9E695A36AAE25BD5073C6864C73A2CCB
SHA1:	F8C7159237CC944176697EB3C8AF1D44869359DC
SHA-256:	6EBA0288A97A465EA587DD14F58E781C450DC9FAB19D26BE00E72AAD0E9FA82A
SHA-512:	02863D963C1F701719074AD31E18BC6A1D6E2D7103AA9F85F55FDCDEED0272DE84578337977F7561EDD3574A02CB500908DC3C6D13C43361128DC8E122B3690E
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/subs/633707/header_ratio.jpg?t=1667324398
Preview:	......JFIF.............C....................................................................C......................................................................................................................F..........................!..1A."Qa.2q....#B....3Rb...$r..%C.4Dc....................................@.......................!1..AQaq.."2.......#BR..3.$4..Sr.5CDb..............?......E..uJ=R....S.u$.N...-.$-.S.....V.....J8.W.P\|:e..i._...u...V...R.6..(.7&...m.....#.?..k..x..0...t4,y.....z...$..=.....+..h...SvR?0z+iHH]...(...@'..+..PZ..p.%..J..9.......JfI....w.IIAH...Q....i.q..el..Y..57...h).k+S......k.m..=...K.Q..t....YT..zTw.Kl..)...k..=o..c\|Cz.Kj....L\|.N~...L-2...S`..RT....P.V.{\..W?Ar..~j......r...l(..(..!............jK.b.jt.\[.kO,..aa..n........"W:.BKn.%)....S...l>....^(.....T$.a<.....q...z.....~.H.7..<..Q.>;Np`.[.V.".!.J_...J....m...lKV.:9...T.i$....15....n.........J....;.......(.[l.Sn,.$.)e.....(..z;F..Q...0.U..d....",t! ........QP...L5.v

Chrome Cache Entry: 858

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 292x136, components 3
Category:	dropped
Size (bytes):	18156
Entropy (8bit):	7.959937239112083
Encrypted:	false
SSDEEP:	384:nXZQjYhTbs7XeXRhjrflFUrEY0q+O97AZ6dlMoCq+hlWQs8E8yuO+Dw:XZ8Y6bMRhjpFK0q+O97ASlMZqQlLs8fA
MD5:	BC0E2EE31105B4240719E4775ABF6E0B
SHA1:	B69B026D80F09E962472AFB6E6F761CDD3078E50
SHA-256:	97DECFF9E48FEDDEFC89419262E8BD8390D1E55D46247CF720D3642C009D3148
SHA-512:	3C18893693D72503E4539F4BC2DCBE6FF961807D75F865F27F86231AF371D175360B51AF32747D3D9093B323F6036E1F158EA420C680A239D0090A59653C64E0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................$............................................C..........................!..1A.Qa.."2q.BR..#b..$3r...CS.c.......................................9........................!1.A.Qa"2q........#B...3.$..%5R............?.....\}..J&/.%.IT.....D.>X...LC....U0.?l.Q(!./....`....G.7.h..i.....J.}.LKR..?...GM;.\|KQ.S...Q.So..\.0.z`jE........KC...JZ.vzbjB..m.~.:.....&.-........U6......g.....v.%.h..n..I..~.!.$......Q&.y...lR.....oL.Qp.a.\|.Qw...b.........i..#.%..TC.\|.Q&a.bZ..).x..%.O.p5(.M?\|.J.d....kQ.....J...E/F.u\|...U&uO.n`..oh..H6.._,-.....>&...?....fr.~..2MG...s..M...K_...:.o>.h7..Nj.:.@Sh.R..V.BfG[%`u#P...;$....u..3.../"V....Z.t..5q...;..N......FDe....X.:o.Q....E}.U..............R.QFv.../.....DqGX.....k.Q.2.u-6.q[%.I*'......(.;'s...Z..dCZ....'..U....K\.BE....J....!E...6( ....J(.)...$y.l.`.H.HR...$.._

Chrome Cache Entry: 859

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	40161
Entropy (8bit):	7.963274846714269
Encrypted:	false
SSDEEP:	768:iLcfy+3Za5f3VdZIbWebsotLOFy9IwY53FHxuxhm5Do1dGfvYfyL8fIfb+3+yeiV:D3Za5PVAbWusoLOYUlrS4AfyYgTG+JiV
MD5:	9E695A36AAE25BD5073C6864C73A2CCB
SHA1:	F8C7159237CC944176697EB3C8AF1D44869359DC
SHA-256:	6EBA0288A97A465EA587DD14F58E781C450DC9FAB19D26BE00E72AAD0E9FA82A
SHA-512:	02863D963C1F701719074AD31E18BC6A1D6E2D7103AA9F85F55FDCDEED0272DE84578337977F7561EDD3574A02CB500908DC3C6D13C43361128DC8E122B3690E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................F..........................!..1A."Qa.2q....#B....3Rb...$r..%C.4Dc....................................@.......................!1..AQaq.."2.......#BR..3.$4..Sr.5CDb..............?......E..uJ=R....S.u$.N...-.$-.S.....V.....J8.W.P\|:e..i._...u...V...R.6..(.7&...m.....#.?..k..x..0...t4,y.....z...$..=.....+..h...SvR?0z+iHH]...(...@'..+..PZ..p.%..J..9.......JfI....w.IIAH...Q....i.q..el..Y..57...h).k+S......k.m..=...K.Q..t....YT..zTw.Kl..)...k..=o..c\|Cz.Kj....L\|.N~...L-2...S`..RT....P.V.{\..W?Ar..~j......r...l(..(..!............jK.b.jt.\[.kO,..aa..n........"W:.BKn.%)....S...l>....^(.....T$.a<.....q...z.....~.H.7..<..Q.>;Np`.[.V.".!.J_...J....m...lKV.:9...T.i$....15....n.........J....;.......(.[l.Sn,.$.)e.....(..z;F..Q...0.U..d....",t! ........QP...L5.v

Chrome Cache Entry: 860

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 500x250, components 3
Category:	dropped
Size (bytes):	55032
Entropy (8bit):	7.967319755260824
Encrypted:	false
SSDEEP:	768:4Yyn4NpPmLHzCY9mTYfMzFKUCgegecg/0Iro8tuTwpvUBhCYPLp0Agn5VbeSmK4c:4ErmDhfUQDBtEmqXFE5VbedA
MD5:	355368C09AE89434B648D473EC54F5F4
SHA1:	36FFE749E3C296D6E57DA59F463CD2AA8F69B0D3
SHA-256:	AF611344E2754103ACEF3E836D8CDFD1970391514324A3495CC04128CAE9B672
SHA-512:	390540ADB50F913669816189B8B215F76D005489E87D073132D4F958FED52C5D0A49590499A14FEA6B2A1863EFE7DFD4046A087E61661B9EDF8805423021B22F
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 861

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/trans.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 862

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1850x450, components 3
Category:	downloaded
Size (bytes):	211959
Entropy (8bit):	7.9876745737858155
Encrypted:	false
SSDEEP:	6144:u64nNe7j28hRgWTIputn9bPMum27JX0+D+:SNe/28hEEn9bUst/+
MD5:	A6BC6D0A85ED368BA9E259F0B9069D05
SHA1:	24C8E744EB15EA5327FD2C9DED55C9F07A97476E
SHA-256:	A8024C525DB117F5BC01C4A557A5B1F327C7846AEBE22EB608461C438BCCAEEF
SHA-512:	435E4FCD04E6DE34496CBE2925CAB6704683DCDB26B266FF0DB6BE1CB7FD1114FD60472997230B76BAD6AEA8DF2044732FE59FEAA953A3A2BCF1378F73CF168F
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_english.jpg?t=1714777083
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 863

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	15501
Entropy (8bit):	5.225110777706095
Encrypted:	false
SSDEEP:	384:2snR/dS0MJCaUruT16VUP+AP03hIMg8IMepcRc8uWNzT7q:NR/dS0MJCaUruT2UP+AsRIMg8IMAUzuV
MD5:	CD4BDC56FA7DC599A60A48CA895272CA
SHA1:	6C2F5B4780EB921FB4A0254A0C46D560EB4FFDDE
SHA-256:	C5025BAB607BDD76AC7E074EBF08595FA8D7F0BEA2BCE94D4D211BAFCD8CF003
SHA-512:	84A03ACA8860B2C4981828D4AB516ACBA849FFB7AA0CE5C30E1C8EDA57C50C94913A32831134876294CC6CB7FE8537EB62FE072211DF769BE432B7A5F5DD3F74
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/cluster.js?v=zUvcVvp9xZmm&l=english
Preview:	..function Cluster( args )..{...this.nCurCap = 0;...this.bInScroll = false;...this.bSuppressScrolling = false;...this.bUseActiveClass = false;...this.rgCapsToLoad = [];...this.onChangeCB = null;.....this.cCapCount = args.cCapCount;...this.nCapWidth = args.nCapWidth;.....if ( args.bUseActiveClass ) {....this.bUseActiveClass = true;...}.....this.nCapsulesToPreload = args.nCapsulesToPreload \|\| 1;.....this.elClusterArea = $JFromIDOrElement( args.elClusterArea );...this.elScrollArea = args.elScrollArea ? $JFromIDOrElement( args.elScrollArea ) : this.elClusterArea.find('.cluster_scroll_area');...this.elScrollLeftBtn = args.elScrollLeftBtn ? $JFromIDOrElement( args.elScrollLeftBtn ) : this.elClusterArea.find('.cluster_control_left');...this.elScrollRightBtn = args.elScrollRightBtn ? $JFromIDOrElement( args.elScrollRightBtn ) : this.elClusterArea.find('.cluster_control_right');...this.onChangeCB = args.onChangeCB;.....this.elSlider = $JFromIDOrElement( args.elSlider );...this.elHandle = args.e

Chrome Cache Entry: 864

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	5587
Entropy (8bit):	7.91930589678469
Encrypted:	false
SSDEEP:	96:B5s3nxuQoC0355pYTVXmWka/kml4rYB3GAau1ma/YjkztIAanlPG6d4yMQlb:BNQo/3pYToWJGrYJUu11/8kNanYo4bQ5
MD5:	CECEDE0A8C154D0A476EB4AAD54AB65E
SHA1:	B4743F421C5D97EEEEE0C1F19E4EADC4B90693CC
SHA-256:	6B872A1F8C735897E38D6562147480D218E55F1C41F6E939E0EEF0E939170B8B
SHA-512:	914C3381F26780B04DA024411A2BCC6E07181B9CD04B8DBDA6D9F77544C7C6286363B1FDF2DA16070F2F303D9CB2F57A52EF4EFDF12CF500316B6A3112965D24
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/359550/capsule_184x69.jpg?t=1713914116
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................>.........................!...1A."Qaq...2...BR..#..3b.Scr...................................'......................!.1.AQ.2Ba"................?....\|5bD..i...\...3D\......rs...P,.J.0........Sv.....=:B..t\......+ #...lV..D..ia...b..iS.....)..T9>.#.-....E.$~.IC.`"@...>~GC..(Eu>@yd..F.7..../..C.&.......x... .....Q...?.u........4Q.".@....9..H.H.....TD.&..2. .....].\g^}.FJ....F.U...t.E..y..`.(?...B..0...L..H"9;NNG.X..\|..~Z&..z......L....+. ...:.....%eC....@.4.H......cB....A[..!.....!....h.........rOa..k??......E.}....B.Tv.~...#...MtB......*y.....ZT9.[..T.h.@.N...\Cf...c..tq5....>A]d..(..{....`...x...N^..#l.Z;...@3.:.5~1.. 2N.\|...E:.....of...,..M...Od...<}.$...9...."!a.`=..oc...o....Q.w...G:SKV)j.......)...r)......t..H..c].J.._q..U.......)....P.t..

Chrome Cache Entry: 865

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 866

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1011), with CRLF line terminators
Category:	downloaded
Size (bytes):	13922
Entropy (8bit):	5.222708373090252
Encrypted:	false
SSDEEP:	192:eAfl0qmulkdbqUQG/7J58+VKJ0whfrONBuA5HnsgxbJMJUJRpASU6wMUboomv9b:/lm9gyN57V3wdo5HIJUJsbCb
MD5:	59DD2408449E26AB969B384F6CC5CD98
SHA1:	09A2919CDEEF326B8D4C492E7F65895E2DFB9801
SHA-256:	78A72F3E67D9F2F0200E36ADC262F794312E5C69001F18BE84886601A8A59571
SHA-512:	8EEEDFC5F0AD28380A8621E8267A14506296A3B30F852687C1ED9BB7B2D1B7D2E6152AC79FBA84838A20DA89C6AC330B01C5C0E67B540DB3B5546FAAE33276BB
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/modalContent.js?v=Wd0kCESeJquW&l=english&_cdn=cloudflare
Preview:	../* handle modal content */..var modalContent = {};..var activeContent;..var bodyClassName = "";..var resizeActiveContentTimer = null;..var g_bModalModifyAnchorTargets = true;..var g_bModalCacheContent = true; // whether or not to reuse old iframes when opening a modal with a previously visited URL....function OnModalContentDismissal()..{...document.body.style.overflow = '';...$('modalContentScrollbarHack').hide();...if ( $('ModalContentContainer') )....$('ModalContentContainer').className = bodyClassName;...if ( activeContent.contentWindow.onModalHidden )...{....activeContent.contentWindow.onModalHidden();...}...// for now, if the window has embedded objects, like YouTube videos,...// remove the child to stop the video...if ( activeContent.contentWindow.document.getElementsByTagName( "object" ).length > 0 \|\| activeContent.contentWindow.document.getElementsByTagName( "iframe" ).length > 0 \|\| !g_bModalCacheContent )...{....$('modalContentFrameContainer').removeChild( activeContent );..

Chrome Cache Entry: 867

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	417
Entropy (8bit):	7.262641689932086
Encrypted:	false
SSDEEP:	6:6v/lhPVjnDs7fcQ5wiBGoV6M25AiJxyhXn1BgUELclMFkV1l4fyZJGqDmHbZTvwM:6v/727fcQlg/9E3cho7DXJGqWBGv6
MD5:	2E6556310CF788ABCC905DC522FE8375
SHA1:	F721B02ABEDCA660D17F7C7D2F38AAC2A89E4155
SHA-256:	32285E351F9647F9B357AA997D5E1F6C1C521DAC197BEE998B17041EE5297D7D
SHA-512:	BCA2C58FE50A210054774AAD059BBCF537F00E3B0EAD05B91F7AE6ED2A3BE93FE5B01BDFB155DA4BB14D8CFD3C7A72C5BC8BA4541D5C5097CD29AAABDBB3DA29
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/comment_quoteicon.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.S]N.@..m8@.....p..Ay.P...i\|3.hR...J..r.{..A.......?Z.`L..%..3..... ...1..@k..Gn\...`...Qs...jR\|.....ZXm16{~.....v.7iO...))7.O3.RPG.a.C.I..!:(..s......g-..M.b.r.%....B....W1G..._y}.o...w%..Je...5!...S.`..)..`..#y.....[.. ;.\R......;.;.f..9P1..?-.0...4z.y..<{..Q......e........n.$.X-..25!X.G[\"[..........z.........IEND.B`.

Chrome Cache Entry: 868

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36551), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	113129
Entropy (8bit):	5.96650983607432
Encrypted:	false
SSDEEP:	3072:AcmGZLEcgfCbIUIPioO4em3B3xEYmsJY1whi8z8X6Xpo5teXWUeVfN1xJV9RZNFO:ADGDIUUqMYcYPQ
MD5:	5944C64EA3F3E59D79C796480281A2F0
SHA1:	782A6590AEEF489E52AB627E097EC3DEC98D7541
SHA-256:	02146A025C9FD72F43DB3B9A0D338F8A76AFDCB1533BF7EDE630874B894842EB
SHA-512:	38FC4B0F3BA71E4D2A06236953C6D561E3D0F2B30067C38345350BFEEC0399FBF2DD1C4F37CFEE6B112F36508C80FB15E398A2CCF222236EDE445D4A961FEB64
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/css/applications/community/chunk~c18a43282.css?contenthash=2951747b428e607bd9cf
Preview:	............_22_fGxD1rxLRjTmEs4fpJN{font-family:"Motiva Sans",Arial,Helvetica,sans-serif;font-weight:300}._2BXhGeAkEZXReIBs1q6iG3{clear:left;display:block}._1u63OZOUO8ejFLl83_aFKQ{background-color:#161616;border-bottom:1px solid #4c4c4c;height:1px;margin-top:15px;margin-bottom:10px}._2pVkYef_JboBRTJDsI5XrR{border:1px solid #464b58;padding:16px;border-radius:4px;margin-top:8px}._2pVkYef_JboBRTJDsI5XrR._13cijqNyra467La1xbDgy0{border-left:1px solid #a3cf06}.ShLAXJyjCB5R_Y81P3-VX{margin-left:10px;display:flex;flex-direction:row;flex-wrap:wrap;gap:6px}._1dNhj3aKodzkwfU16oYND{align-self:center;padding:8px}.WmMRFd2F9FMje__jWs2c4{display:flex;flex-direction:column}.elLwmClZ5oSY2aer18vUt{display:flex;flex-direction:row}.elLwmClZ5oSY2aer18vUt._1HqKtO0h5lgj9h0J4mUz51{justify-content:center}._2MHtA5ZPqa6yMB-WNNys1_{justify-content:space-between;position:absolute}.elLwmClZ5oSY2aer18vUt>div:not(:first-child){margin-left:8px}.Dtr2QSwAjrR1TzFyE3-BV{display:flex;flex-direction:row;flex-wrap:wrap;justif

Chrome Cache Entry: 872

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	73693
Entropy (8bit):	7.9779042902190795
Encrypted:	false
SSDEEP:	1536:9Sd2qmiBNAmDrJeGByiAF1OHfMexnEe/9C9o70e5Yim5IcnQOmaH3DUQm:E2mvAmcr1wMiC9o70TVeaH3DUQm
MD5:	5E59E7CD6EF6BF6DE1B636348F535BEA
SHA1:	43ABB72CF331870D7EBC073A94B08E2C9BC0A99C
SHA-256:	4BBD3AFEB5203FF9929575A1A637895099E4C6FA652539FF5700EDEC2CA5D083
SHA-512:	95B3AE659800674F751E541E47EBED1AFCE6773C5D6E5D5DA8137CC7DBC04A67E6BE43883ED88287629BED284CFC855E6C628E03461919AD85E7F59E14294C3E
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1145350/ss_ef0f63061d0a0a9a7e46f3b84f125d25330e8f19.600x338.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................Q.X..!.........................................J.........................!..1A"Qaq..2.#....B..3Rr...$4b...C.5D...%s..Sc..................................;......................!..1AQa.."q.....2.....#B.3b$R4Cr...............?..].H...8.E."or;[.....(...rGL\#+..h....4..4.b..?"p=E/&}. ....a.G.M.6..)....`.J.C.X..$X......#.$R@.lt.C....E..6.g..Q..eP.....b..l.4....d..u.....P.....3..\.`$.b.lq&."..D.'. X..Q.S!FqPY..e...q]....?..&.......+.<.:............t...=6..&....Ar.O..7.A.j...@s.\|H..q..7Q..N.Ri."....7..o..r$9.u..OS.Q.6.f`z[...-..R.....u......e........I.9.ib!&.o.q...}....R.dn....3.h.c....a....s.V..5T.dJ`..A.....\....T.x3..R..g*d4.U..<...~...1\|.F..E......e#TVC...fzj...3....y.v......G.<6....(q..........E.......>!g...Dv..n]...m~.6.-h...[.".!..)X....:.....Qv....`n...B...$..!.....c........7........0X_D~Z

Chrome Cache Entry: 873

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 81 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3607
Entropy (8bit):	7.781463130328037
Encrypted:	false
SSDEEP:	48:DitNn2VCJ3NFPqvG+xqd1ZOf9slPQ06of/cPKdCU8g6a1sIKOw3P8Yr8oCq1p0KS:82oFQxqzZOYQU8rqs2ib6eNT0P
MD5:	956D1961CFD6B92681F8DC0DC564D926
SHA1:	C0CD9A97D29D1C01741B6041ABEAD05DD50BDFDD
SHA-256:	BBB200E8E328FC92A566BCA5227E0CDCF7121A15F4DC1BB88184D8EFE661B79E
SHA-512:	69F626DFE30A8D82DD2BB8890A9FFBA05832D9A8997514D49D4ED69D9D653BD5A3284D9B9471F185F4B5BEF7A98ADDBDE45272FD631B7DB5A5FDEF40FD759447
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/5-star.png
Preview:	.PNG........IHDR...Q.........WW......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:D14B5470A10911E1A047AB7661ADD874" xmpMM:DocumentID="xmp.did:D14B5471A10911E1A047AB7661ADD874"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D14B546EA10911E1A047AB7661ADD874" stRef:documentID="xmp.did:D14B546FA10911E1A047AB7661ADD874"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>EI .....IDATx.\|..t.....<v7.M6.$(Hx.. ..Z.$.+.....p...._.....Ez.jJ.W.....P..CTj..."..y'... .}ggv..;.....s.$;.}.........

Chrome Cache Entry: 874

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36120), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	36285
Entropy (8bit):	5.527921489538448
Encrypted:	false
SSDEEP:	768:gaFTTulwT4GiHn2LBeZMIoUGls0YHCpkMujjjvZ6z8inVydwEmM/0F3R:LVjBIEspHGkMujjjGscB
MD5:	48D771E9B4ED55A1CDE88DC0C279C307
SHA1:	99FD9E78975BA41AF92D3EF6006BEAE481AEB150
SHA-256:	8FAF54879FBC7682DEAD5FCBB10001F5D0F7E88917589AC791B8249B6AED2A98
SHA-512:	D7E2D37215B011447483CC373B785F46A823D2904DCA4B4469FA5260E6B1936E1E709E64D590AC10633F57233824F42652DAE1D627073B7EBD155661C47475B2
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~4b330692b.js?contenthash=555ff2496b7cbfc4085c
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2805],{65440:e=>{e.exports={"duration-app-launch":"800ms",GrantAwardModal:"_2vlF5KjDw2loCDFMY4RvKe",Header:"_2p7RUrL961pRVHeiTG_wiA",Title:"_2Rty4c0XdtmcGewRXipBgf",Description:"j46gbjgwR947a_ZyFUQav",ButtonContainer:"_1SCKZZ5fqovpMl_44ARbEB",Button:"zGUr97_6Q5b0k1Pp3e1jQ",Selected:"_29Zn-nx-7e1-ciy2sfBkIp",Disabled:"_18eTZ7rFRTUPxzZ7mFk4bH",LabelCtn:"in9vJBQdfhgAhZ4d2inCG",IconCtn:"_3N4SIAN7yrs3QndaJehQRu",Label:"V7W5cNHTPUuSS-4yBUDaN",Points:"Mh1VB1HCCrGW-2BfgYWXg",IconCheckMark:"_2cjo-dR1ohAJuZM1U2gRLE",Footer:"_3uhviLjoM6XjmJUZIwgo-c",Left:"po3ze72SNwOh1x9LAEYKN",BalanceIcon:"R3RrvBz4Rr7TC1huLCb6e",BalanceDetails:"_2R8EcI3ydGYPJkKASHBT0K",BalanceLabel:"_26lUCOjXyPSIUFyyIijjTT",BalanceAmount:"_1A7rmh4_mON2kpeGMsua5O",Right:"_9EVpkelJSeusMu6m0MqPM",Actions

Chrome Cache Entry: 875

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	42338
Entropy (8bit):	7.979013911578064
Encrypted:	false
SSDEEP:	768:oYxy4nEKjhpggQiOjtC6i+PQGvXljmdFtSjZvFHSjhqdxM7OOfiKPDqUcID+C1:oqlEKjMEOjtC6KaXEd+yjsHuPKK1cvC1
MD5:	9B07C2DE27D91268204E7A112C4E8BC2
SHA1:	BAEC7723F7E5CFD08D9A8BD66299165E4A2B8066
SHA-256:	01FCF6D505F65A26FD5795EE8142ABC458B138AE9B5966FB5122584630062FD8
SHA-512:	34FB227AFADC0CC3E63253513A8A0667A8A7AB2D3DD071CB013E2894A4CA9AE39C66CDD5C59A8E55ABB6245F5CF9B94BB17014A55C36E496342B9D584E000338
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1649240/header.jpg?t=1696502086
Preview:	......JFIF.............C....................................................................C......................................................................................................................E.........................!.1..AQ."aq.2..#B...Rb...$3r....%C...4DScs.................................A........................!1.AQ.."aq.2..........#B..$3Cr.RS.Db...............?....U!..hB....!..hB....$.P.Q.%J..9.-.....%.V&..jR.J...J.0.9....../-.+.mJBr.C.h.\|...`.$....&.E`..}~...e......?6.%..~..?.y..E#5% .... ..:`..)......\|...#.@.....F.......~.......B)..@n.>`..j.me-1.xLQ..>.c.....M..Y....ii.j.H.....!..Z.[3\r.J2[,......F.)Z[3@......[.D.......{. ....0..ub.j5..l..X..^.3..._.Ve.Z.......U.qF..J...c...[.mVw.....\..F.......Se\...N7.Q../...Ru..I....Jp.~...._..OT....f........j.@./.[./OR.~..J...gPGW<...0..c..^....-.o.m.....U.%S...9P{..A.....31.$.;....H...y......]U.n....x..4..7x.}6`.FF./..Z...c.......Qv.(j..F.. . a....tf...f.)l..p2.H......:.R....n

Chrome Cache Entry: 877

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	114090
Entropy (8bit):	7.976579332203342
Encrypted:	false
SSDEEP:	3072:8Qgc5Pc2R0Nz0f9rpxaE1HgoJeSLcnVHbm:8QgcS2Rcz0THgokXVbm
MD5:	AED49C09B134C5B273D0F02172D3AE0D
SHA1:	F130152AE127BE5F9DC8427F4C89A9E6A9E71BC5
SHA-256:	556B0B618E7CE655B299A7BF2EC8650870898328ACC0B2BCD9C8F383AD44EE28
SHA-512:	B29ACEBE264CF13F5FD3459F3AC4D097DFC803047785DC387080D99BA2D5D0FF3198AAFB3F4BE5F5C1BEA8ACE492CE51F1339FF3A461609CBF45E5A8FF4A88EC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................Q.........................!.1..AQ."aq.2..#B..R...$3br....45s....%6St..C...78DT...................................?.......................!.1.AQa."q.......2..#B...3Rbr...$4...5............?...N.$..4.+...iq.@>.h.1.TK..x..%}...f...".H.../...]..28:..C...l.......<...T.......$Zp...TUK;..$..$....G.c...2'. G...?.c.M.Z...I'r.....X...\....g.9E.#..?....<6.A.....!.q....-...7....&..(..%..h.U.......j..Z..}.....<[.I..`.....l......"Bp.Y......}~.].:UX._b[....\2.z.{.Pc...>....?vcv...u.' .c.....RM....@.....x.....T.g&...-..c.kjk..K..y,..._o...5...I.eX...7H.5R.!....a.?..Aj.._......$......FW<....-..N.{g:`...sK.RQ..S.u.e...%....O.x...$..(!.P.J).q.7/..R.`.....HO.V+.....A..B...Q@..&OJ..3c....cFV.DU...<.XN.aq....FP.....n9.4z.\|.J.1)w.!M...q..%.a..H.\.'....?(.".t..#...L,:

Chrome Cache Entry: 878

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	74763
Entropy (8bit):	7.980890820697891
Encrypted:	false
SSDEEP:	1536:j4OdyIdj49vX8h3SG0rD1Iob42Ao1NspmCgyEuDQn6rtYQR8+Dqu93:j4myIB4F8k1Io1NsECgydDQQRPWY3
MD5:	5653CB5F32556AC3E891D15E9F4B6CB4
SHA1:	116CBB7328FC1FD299C0893CE222FC80426460E6
SHA-256:	321F5A327721535E2A694D0F1482C873859C6CDF1220FCE7D3FF5BC1CD6AAACB
SHA-512:	046A626A1F513DCC7A3E27E93CB94BC0E020D1694A23FFFC65885577A960075C3F362BC331AB0417D565DE8966DDB2B73C57585F0FB2FAD1BF24601586E17224
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/553850/ss_50afbbc4d811c38fe9f64c1fc8d7eb9d9da6d24c.600x338.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Q.X............................................Q.........................!..1A"Qaq....2B...#..3Rr...$45bst....C....6.%DESc......................................:.......................!1.A."Q2aq........#3B...R4.Cb..r.............?.....c.G-..b.`...q.'.(.........P...d... q .Q..b7....R8...f2...\|.Gcv.]E.BN.S8N.6."aQ.6.b.bgh.;.QV..{..........8.....0h.>.2,.#...2..<.-.0..z.E..g).:%..l.L....CV...T......V...+..&?<@h.....K..}.-l.G.EN..I.w..t.].....S;..4y.c.=.\.. ...W...$pg..4.c....1.9..BQ.+..5.#."E[.. .4a...q.3.\ATpa.....V..4c.-.q..Fr.1.4".C\..Q..B..b..C\.B...........M.2..i..v<.(.U..7.....74..I5!.B..\|.:..m..i..+l0.3..J3..J3..J3..U...%....C9X.3..!(.V..9X..98..\.B.!.!...q...l#.8fJ.).}..-..U.c.mT%..j..K4q..E....vEz...g.2u.lH....V..P.....\|@......F...........`[...r8C.."%.\|..A.Q.(..n.*.Wc..I.N3.....b.p`.. .o

Chrome Cache Entry: 879

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	693842
Entropy (8bit):	5.436494315332704
Encrypted:	false
SSDEEP:	12288:yueFWH6sTgw4GAU4VlfJHjM6cE8UJ14H4N4GsNYQJ:yueFWH6igJGp4bfJHjM6cE8214H4N4Gs
MD5:	299981E89E46D921E23D6C08DF6707BB
SHA1:	6E83B85F72E7C2B92E7C2C91F05EB87155F1D02B
SHA-256:	91E1A244F2B1748573DE2D01C18D010D00CC2B83794609BB61E15057160A4DA4
SHA-512:	5030B585DC50D354ACAB9C94DACD4BC56DE954EFCD99B939E4CC31F392E445DEF4B5BACB0FD9240A38CFA9E9FADFBD7970679A191AE1EF32CEACDE19FAA4A36A
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~d2dd7ecf6.js?contenthash=019cafbb6645240613f8
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[508],{16091:e=>{e.exports={SnoozeContainer:"_3EzTyjJx_tZUEIHygPwAeC",SnoozeZ:"_1DArl3Gs9lXPcZdmCIlDJa",none:"_2k961y27AKXbskWyA2zQaU",Medium:"_3Gk3l3Mqo0jqDRvFGfTPAc",Large:"dTohLgV0utdpWZ84eh3FP",Dim:"_2TzRZ3Ygn6XEn8aKf7CqWB",Z1:"_1OyrTEYQD775VOOVC9yYrB",Z2:"_1mx4kcxNcUvaiFLQiW1XVR",Z3:"_1ltvK3RJFhtrbr2a5xlAR4",hoverParent:"_3ID9ReYE8luRukPMTP-Whi",animating:"_3CzX57jufuQpN4Qbp5pgJx",Snoring:"YuCwjyOZanmNiMAZTC3PY"}},32633:e=>{e.exports={"duration-app-launch":"800ms",statusAndName:"_3n8q82Bm3oNKRPFbrZOlo8",threeLines:"_3ms2PyGmolbJQnm8GTFdFu",blocked:"_3_oRkgqe1Y70ZF2-ZfcuwG",richPresenceLabel:"_1k82NiWym4STegDGxRBHz2",playerName:"r62qzcdJQ0qezZglOtiUX",playerNickname:"_3T-9PkwXmTHyFu3b1pAn2O",playerNicknameBracket:"_2aXevHqPLXEAmOJUXiYYUT",richPresenceCont

Chrome Cache Entry: 880

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (342), with CRLF line terminators
Category:	downloaded
Size (bytes):	17711
Entropy (8bit):	5.299488488856313
Encrypted:	false
SSDEEP:	384:0CIr5C64DGNqrq0HOIgHWYS7HoNN5s+z//m/wy1ndajn1q:LOIgHWPots+z/ZM
MD5:	012A6DDDD091A960D54655539FFF5EF8
SHA1:	F74BEED3A5EA99875128DAA628FD757B3145C1CA
SHA-256:	18A51578095C64743118A3F4374D502DB2059BD69C41A06BC8CA1620152726DA
SHA-512:	A313F98C2E6F202A5B40E2474E7C5288A17ED61F909F805BFEE969ED716F3C957467A245D15E3B6B264E22844301D9FBB55D3D2270F0790C26BED76D179991BE
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/shared/javascript/apphub.js?v=JSwdk0x7aW5O&l=english&_cdn=cloudflare
Preview:	..var SMALL = 1;..var MEDIUM = 2;..var LARGE = 4;..var WIDE = 8;..var TALL = 16;..var MEDIUM_RESIZABLE = 32;..var LARGE_RESIZABLE = 64;..var TALL_RESIZABLE = 128;....var gDebugging = 0;....function GetCardCategoryString( category )..{...var categoryString = '';...if ( category & SMALL )...{....categoryString += 'S';...}...if ( category & MEDIUM )...{....categoryString += 'M';...}...if ( category & LARGE )...{....categoryString += 'L';...}...if ( category & WIDE )...{....categoryString += 'W';...}...if ( category & TALL )...{....categoryString += 'T';...}...if ( category & MEDIUM_RESIZABLE )...{....categoryString += 'Mr';...}...if ( category & LARGE_RESIZABLE )...{....categoryString += 'Lr';...}...if ( category & TALL_RESIZABLE )...{....categoryString += 'Tr';...}...return categoryString;..}....var g_rgTemplateData = {};..function ConstructDefaultRowTemplates( pageWidth, cardMargins )..{...var fullWidth = pageWidth - cardMargins;...var halfWidth = ( pageWidth / 2 ) - cardMargins;...var

Chrome Cache Entry: 881

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	9704
Entropy (8bit):	7.852258265067526
Encrypted:	false
SSDEEP:	192:5uiHXz28iiteW4DitUZBEvvw0bhMYQEyY12vN1ps:1HXSavS1/EvYEhMTVY101ps
MD5:	1BF0D477DE39BB26A712AE840DB99655
SHA1:	77043F1AC7647030DE3C9EC090AC8090F00E184A
SHA-256:	F20D2A9EC99F970F6EB3BC24CAACF6C362901540993F389C241F4688DB980A59
SHA-512:	04C406408C351B6FAC7A0F5D13225521343963897FC3E3C83A63900440D339DE0446B9238DBDB9E694181A01C4B9015C9F1B4EE2A78A5A1369606E94D1434C42
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2506893405303432788/F228B12DD34E668E37B612CB03BB1BB131D50A9B/?imw=128&imh=128&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........8.....................................................................+...a2qn......Lo.@.......-...Q..(sz.{...s..[\|..X.Y.S...M.....I.aJQ...;P.OPgIk...F.}......{..o.-YwV.FJW.uv..o.].._.(..;..O..k.R'....n.b..!.8<......0...8...../.m..{..3........ .....A/.M..`.Eq..V.<{.`.

Chrome Cache Entry: 882

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 233, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	122989
Entropy (8bit):	7.9926752165280766
Encrypted:	true
SSDEEP:	3072:XS9qnyev6BLrDp1MkPh5jIg0WPzkxcfZ5N57I:XS9qDSrp1MkPIgTzNfZu
MD5:	113F4FA6F146E91D8D82CF2A94210AD2
SHA1:	1E6C0C7E1DD9788400119B28892C11801028E0DC
SHA-256:	46B19283CE070D34D3E6671AC5694164A9BC874D0D90C42D956E12F8744ADD22
SHA-512:	DA7A36B675736603D40032015F1718E6D6D05CA3F1A5DA890F3D3F02B1C2F720CDDD4386DB701F9A51248276256867BE859127EA60692C65777FD0D05D8E2E33
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/categories/homepageimage/category/strategy?cc=us&l=english
Preview:	.PNG........IHDR.....................gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............caNv...............<'A......IDATx..w..yv..~~.q...7.mUe.,..V.n.Z.R..B.V+iW. ..ebf.b.e.f.bwb'`Y.a..b$.iIm.j[.e.LfVUzs......3..........F..x..9.s..\|..#j.c.{.....z.P.!.A..&5.V..C.@.L.I'..}.T..&2..B .g-....Dq.D.e9.Y.l.R.hw0^. .C.3L'....-.R.0........i..R.....p.#.C.f..!.x...D ....x..B..x<^X..!4Q.)....H..<..<..s}{..1...y.C.H..r.O.8...c!..%.+-.;...V`~.[.....d.[..\|..+./..m........+=......%......;j.S.c.PROB:q...i..\|...dZX..M8.........6.Db...LK......C.$.9...d8.r.^.._.iA.x.8...,/.....u.$..f..F.@...0.[...+(....z..t@d....-$...:&.32..k...}..8......8..x.(dH...%6.!=.r.S9YY.!C../...q......l..l...2....B.P.L.R..x..V.o}..L6eNB..T-...$ZPL.t.-.n.z.....`...?......<e...U.\ .5!..Dh....+x....K..9N.G.\|..l.q......$.s..h...w.0@.....H%pe..s.)q.......N`..KI.G..Mt...5t.`QxS....ki.....z.X...5.I.Nq....8.B..$B..E..2j....XS.38kQJ`."..7..c,%...........cqx...).W.....{..*`..y....G9..

Chrome Cache Entry: 883

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x69, components 3
Category:	dropped
Size (bytes):	9379
Entropy (8bit):	7.947406934677942
Encrypted:	false
SSDEEP:	192:2baMksbymsyp52d1svdcuttPBpc6tzcxeSk5USITJmJzJU:hMkKs8tZpc6tzMXrsNJU
MD5:	8271D501559ACC08BB4719D18ACEAC62
SHA1:	15F98B9711FC1665D7E6E809F199F799B2A10B8B
SHA-256:	ABD815390A7D75FD81E228910E3D5CBCA637178ABFB3C016C396601BF2338F74
SHA-512:	2C37210AE86FD1BD0FA1629FABC5FCFD7E0AEEFCC4DDC54DCDF4A79D8079655B36A035BA3B46894E59859ABAA1719949714D59F0C9E7A0FDD984067A4148EB56
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................E..............................................<..........................!.1.."AQ..#2aq.r....$3Rb..B..%C..................................:.........................!1.AQaq...B......"2R...#$3.Sbr.............?.].........M....^.g.....t.....D..X.T..l7^J....7.V.....-.....H..Kl;.@s.+[!6.....t..ND;.&.a.....%KQ.R...8.........../....k.]>gh.A..o^k0..[N.Jq.b...c.!N(.y....5..v..i......Djk.l'F.....UIQB.R.$.}.H.m..#U.q.!...bz.Pc.!...)...`~...L..n.j...^.I1.._.=V.]..T`F........K,.{y.. ..' `....#..Xu.O.....W~..>../O*.......jJeS..y.!JJ.$.....}..Q...T8.W...-..T.B.......i...4.W%.d..ol..Q....r.....5/..t...K.rY...D..SFK...A.M.]..H.P..Y82C..uR)..Nxsj>....j1....I....<.%i<.......l..L........H.......].L.:.J....SKW..R8.w....$...s..s.c.......P..U..!......O.9.pp.c..y,....^.@.`....v.-Qa.:..U.....] zx..}s.%..nM...v

Chrome Cache Entry: 884

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 498 x 498
Category:	downloaded
Size (bytes):	43245
Entropy (8bit):	7.880207922595169
Encrypted:	false
SSDEEP:	768:LULIn4VhSeMpvey624Skr37fj/49bNIXp1nQxv1rkbUgCA05W01hm4:LULU4TPMUpekDv49JIXeNaUDWuhN
MD5:	303365411E0791A3AFBC714CC5041A09
SHA1:	BCC2EC10ED726AB3F3861DA8E91EBBA83C10346F
SHA-256:	696D7631AA2DC279B2F8920A258128940B48BC26D959B378E81FB1102591D607
SHA-512:	DC919DCE8BCB424BA369B6251376E37BBF9131CFCDEBD072B04DBCFACF80449AAD5244406F16AC31F95469F455AE91FCE92ADC822898FF6F92C1B328484AC1EC
Malicious:	false
Reputation:	low
URL:	https://steamuserimages-a.akamaihd.net/ugc/2485501307069578582/BCC2EC10ED726AB3F3861DA8E91EBBA83C10346F/?imw=128&imh=128&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=true
Preview:	GIF89a.....................;..........................'......................................6.."................:............................W. L.....2..?.....\|. c ..!..!"j!'I!'J"..#..#'A#K$(F$)H%I%+G'..'G'+H(..)..))K..++E-&f."5/../"./1L0+;1 )2..2,020E3..4/}60h73.86.9$.93.:!.=-4>*@65B:MD .E..E-.E4CF.F.G;.G>.L82MC.NCDNJNO).P..P/.R5.S7/S@;TA<U..U=eY7!Z-.ZP.ZQ.[W^\:/\LP]$.]E9`8.b!.cadf?/fHCiK5lWPn9.oD.pF.pM5qjktWDvo.wN/xw{\|H.~9..M..ZM.pk.Q/.X1.~..N..U..U!.bC.>....._/.X..kN._.....J...z.,..d)....f).pB....b..X........n/.e..i ....f........x3....o..r .\|..L...n..r.....Y..w......4..}.....)......#.5.............. ................I.....+...s.3.a.V.i.........................J..k..^......B............w.?...........<...........................!..NETSCAPE2.0.....!.......,...............H......\....#J.H....3j.....n}.I...(S.\...!_.I...8s.\.s..@...J.d.H.]...N.J.J.jR.V.j...F.^..K6+.h.]{.,.p....v..x....._.{...L.....+..x...A..L..e../k...`..

Chrome Cache Entry: 885

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 886

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 460x215, components 3
Category:	downloaded
Size (bytes):	37743
Entropy (8bit):	7.96864728287564
Encrypted:	false
SSDEEP:	768:ydcjDoCcWU8asGAS+sEFqarHQJ5XTeM5ue2NVV5akwa72Qbm7:yGWWmAS+mazqtTeM5uNv8kwnl7
MD5:	A6B21F0060089B3FDDD49A893046C9F8
SHA1:	B89D5E33930E8617288CF604012CBDE32AFF75EB
SHA-256:	2D3D364652CCB44B9EC92A6C4CACFBA2D964BAABE150C6F26B00DA085D8ECE26
SHA-512:	3B7154572800C94B7E0AF0E958F160F3E95293BA7C43D54C59BED368DD53F47DF4AF56991689376A6FE85F0D7389401B5FC7A77A16C3C24FF729DEAB6FCFBDA8
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1158310/header_alt_assets_4.jpg?t=1715685390
Preview:	......JFIF.............C....................................................................C......................................................................................................................_...........................!.1."AQ..a.2q.#B.....3R...%bw......$8HXr......45CScsu(DEUdf.......................................;........................!1A."Q.2aq.......#S..3BR....$Cb45............?...e.....>..fs..%[b.L1HP$D....8..@.."....%............V..E..,z..&.....a.... C!C..-....%..aK......h.r"Yj>...x065F/.@.eEI.E.6lv..a.H%<,z@.F..9cq.4SE..F..vbpqt.....%rL..bxI.TxB..I...B=.R..H...{....".F%.91...\|.'..mR...`..&}b...b...N....A.p.1..BC..D..............BQ..B...lB..D..Q.V...C IFE..E.Fc.(..N....-..q.U.....o...b..f..YT....+...Y@.X=.....>.C.I.)" ..Pq.........e.>.,.(.........BA.E..!......!..B.`..1\...`...b...>8.lJ&...E=."$........#$.:...........Dr....p...16-...1..)......;9...b*>...a.X..'..X.%."..N.a...HH'1b....D@].b....D...Z"..A.N....rT....#8H!`..........{zEX...

Chrome Cache Entry: 887

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x337, components 3
Category:	dropped
Size (bytes):	85452
Entropy (8bit):	7.970966501210857
Encrypted:	false
SSDEEP:	1536:RFfAOHIaJpIqk8qwMc5pFN8HHOHM2Gz6+PL5KcQOVNcQDlLeokcsgj3HL5MF:RFF9Yqk8cc7FuHuTGJPdKF0Leo75j3HA
MD5:	54C3E481EFA51B69E81087F04EEF0F1C
SHA1:	B5FFFF69652D889C534615FEF5683CF6DF89A992
SHA-256:	CECE8E787F74D961DF63AB689107374BBECDDA08CC406004408EC469E48F6E8C
SHA-512:	B3307DCC637E0B9BB73D88FB63FD27B6C9BAF900AE984C2C91C8898A6B0075D2F4C5F64ACAA321E4F8B18F2FFBD995ED30D68F2D7D9F7CE85E3726D61D32972A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................Q.X............................................K.........................!.1."AQ..aq2....#B..3R...br.$C...4%5Scs..&6DT..................................3......................!.1A."Q.2aq.B.....#.....R3.............?..\].J..;.B...V.....d.C!V.m..#..W..rm..........nQ".\.H.':....d..dw....tq..+F..x..(...A{..I....Om..:>ER...0.,..b.Nx.?....S.V.MM.,..d.".?.v....z...rZ.....:.j....K.....Z6(.0pq.c.}tnK.<..%.g...v..^.4.^zZ..)j)..N..+.n...V^...FT....L.=H...kz..URcj...fHS<...=......TG..f...!..3P.j.."........w<M.)%\|.p.s...mQ.gtW^..<w...X>fQ.q...T.+-+t?..Ql4..#o.s .Q.......=.1..E......k.nv+}.o.....rW.6....}....\|..=0F.M.i.&.O$..Q...$........U."...LfV0.NK.Ooli...#."`.....wr...1.g..dg.45J...E:.*cu2.6.52..7\|.p........d...G.uoHWx.l......}..}..}:2..FLk$i.}u.......U$.. ...).>V.......I.l......z.....(.I.D{.&..G!.[...H.}.TJ.

Chrome Cache Entry: 888

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 460x215, components 3
Category:	dropped
Size (bytes):	38790
Entropy (8bit):	7.974130803045187
Encrypted:	false
SSDEEP:	768:GWStLc4uQ//gExVVzrHmRwbNqg468YTjBHqWG3uXUdsFuF:GWSeLQXNzrHGUoo9TjBHqW3XU
MD5:	A01DF7F7769714E8D6FC41592FE1D85C
SHA1:	2F5FC39AC4C701D1EFD1B7566F63D50BE9414AC2
SHA-256:	9C7C9D4821A2F08CA8135F99644895C1F9B8239BC0170151BB8D8D32D750E655
SHA-512:	4F2FAD084DEC096A8A6B5B21FB9554834E14B8C3FB79003F36F4C356E39F44A0A67BAAEFD34CB5FDD26CFFAFF1415583F95F1CA1525A7C317A33105ED9153C31
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................................................................H...........................!1.."AQa.q...#2B.Rb.3r.....$C...4S.cs.D....................................7.......................!1.A..Q"2aq.........B#R..$3b..............?....J.sl].G...'...l..y.1..`T8o..G.@.u^d.......uyb..o.K..I..y.q..#f...U..o`...CHe.)......N...:.....[.'.E..T....\|0............d~&....\|.;.............QQ$......>d..o.......0.......\|..........N.8.tS....:.~........+w...t...HR.....A....8.Kj'......b.pn8..J.rI'.h8t.<..v...M...Tn.m....y..y.s....I8F.ej7%D...`m.......:....... .,.....W..Tw.G,%..R.V.)[..H...\|y-_..5..e.J....6.>5...]......3&..i.w(.Ufb.t}../Fe.9x..... ._.H.....N..o...x.g......Z.J]:sScH[2.Xu...T...#..I.g..........Nr=N.P./<\.^@j,v.\|..qeD.........F.J=..7/.l.W\qd...(.Z...=*.......qHf.S,..B.q...\|.....uO;...J..1[.....yrj.Ya(....A

Chrome Cache Entry: 889

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	34238
Entropy (8bit):	7.958365150954292
Encrypted:	false
SSDEEP:	768:CJbH68fffTtqx1rYHq0FTZ7fHgnLBEH+wxO3MWT4m6h0cvfCpyb2/G17fffffffO:A+8fffTa1rz0FN7fSLCH9xjWsm6Ocvf6
MD5:	82DCF8DB44D21319F3E29B02364AB500
SHA1:	3D34EA22A6D5401A9B111AD161B2A2CCF088B752
SHA-256:	A0D14D4B583F2006190DA6D8C79C44BC7779B24522C826C08EFC910815751A9A
SHA-512:	52ADFE214E90BDC1C7397597C43D8BEC367EA8FC5DC9BC678BD83C94E38B46F3B40682A8D47C73EAAD74D7A427AA9F9F675A3FF44D33CBB86C0A0A7F4E7B7967
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................h....".........................................Q.........................!.1."A..2Qa.#q..B....$3RT....4CUbr..%......5DEds.....................................=.......................!1..AQaq........".2..#Br..Rb...3...............?..)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)\...W$W......)@)JP.W%k..JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....fBb..rGo\.=>...IN.....0.\.....R..].M)./...ZS.......~.02.Cb.\T....2...w.&Q......;.>~...;..!.,...S=1.<..c....;.;.=......}...:....b..!..`v.J...HQ....,`.7^.J<o.U.E......b.C..E;}.,.k..A%~ 6.#...8=.GP.1w$.....x.....r..O ..5....R.<K4r...#0,....n.c\|..T.....2'%k..5j..

Chrome Cache Entry: 890

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x337, components 3
Category:	downloaded
Size (bytes):	54844
Entropy (8bit):	7.977657328681563
Encrypted:	false
SSDEEP:	1536:RGl5LxQN9jQCMtxrIr+ZyqXBcCr9ZT8lRrQkjT/j:a5LxQXlqIaXBcg9BsFF7
MD5:	5A159C15DD22F731E8514AC771949A85
SHA1:	7FC8C00FD52A1920BED4F9DB08AD95D8179F5EB3
SHA-256:	BDBFC8126DA44D2F8A85E593D768CA7CE858F0D79ACB1AE893D6F2D6FACE22CB
SHA-512:	25551884F76099638D00EEA973857B0013394712B539DCA0480D9F444F5C37254BF10342FB99EA85EA0F8EE219B251FB9E14E109A82CC844DE4B321E67AB7D60
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/553850/ss_8949ed7dd24a02d5ea13b08fc5c04fab400dc4bd.600x338.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................Q.X............................................P.........................!.1.AQa."q.2...#B...3Rr....456bs...$7t..Cu..DESv....................................3......................!.1A.Q."2aq........#3B...R.............?...1._=D..H..HL..j.(\...P.l4..h..}...(..:T..t.0.....f@.......c....c.J..JB.F:B.R..1.H2....:..R..h.A .w.L.GA${.8.Sl..{.P.]..%cwr..edQ....R...9OU..T."..r..#<....K.I.....&.'.<ky...>.\...s^o...b.t.F..g.z5..t.m..F$W..<..W..B1.[;...$.Z..>..P..q<D.....".D.?/...o...p.q.F4..'....B.V.Ps.i.d.NA...3)&.Y.N3.J.:.~.r;..q..wV+...T....^q...S&..t....dJ..G..T......<(.lV........c.........<>(..?j.a...0.@.1...c...@.+...0.(+C.]..3......2.H.>T..B.....A.'..y.FE...h.....[..... .M"....x.....j.y..}.C.pMQ..N0..Q..$.@.Fp.N......R.........LB....l.....J.M..G..(b...1...($a...3.*..:@0.E.aJT f:B.R..c.D.2..P.)H@.w..

Chrome Cache Entry: 891

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x69, components 3
Category:	downloaded
Size (bytes):	12663
Entropy (8bit):	7.946661743068701
Encrypted:	false
SSDEEP:	192:YIxW1+jgMCf8BRbXoHpfpXIfBRFL0SMpqW7HJOzB5O2mRU5Fm2KzET6:DK+cXUBJXoDqVgpz7HJsUUFm9Ee
MD5:	7D760AD2BF5CA126F6DAD66FB309261A
SHA1:	B4B8E661CB6F7119195B74375245CA93F3ED927F
SHA-256:	94C080DFE33878E9D4B17317629436996E2AD64A9D2AD027CD625468F9CFA9CC
SHA-512:	8116D69D1B169DDE5D2FD4DFFCF760FAB72D79A4B7C9DBC1DE2B2679C739911303E4EB2528BCB425000DD878D74F5B492BBE59081D99D3A6FE81CB52894C03EA
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/apps/1665460/capsule_184x69.jpg?t=1713163424
Preview:	......JFIF.............C....................................................................C.......................................................................E..............................................@............................!."1.AQa..#2Bq..3b$Rr....&C..45SUs.................................C.........................!1AQa.."q2.....#BRbr......3.Cc....S..%..............?....Ev.+.Q]....Q.....Y[h_I]..I..i........9.dW#.M.......FSG.J2.RP...........:.6....N..B..J.y...#.Ugr.:...Fr...ihT..Y,c.......a..H.......$}....r..k..?T..."....@...~%$}.G.....Sl.&\..._.m...q........-N..uA.Sojyi.xS.NX.!..(.D..p..=........).`.G.'..Dq.RD.w.W.m..e:.......m.U..B~;.....`.i...g..T.l..(...Z.-...4 ....2<.N....j....etT.7...n..n....@IW$d.t..R.Iq...\d.Jt....;.u.m\Vv\.tj'..X<Nn....^....#c.)=>..vL...^;Aa..YT:mY]J[.BH..q.`.!8Z.*.......`o.[...H&.H.p`.T.@0\|1;UV%...}......G.......W.. ..DiM..qHCO..D..E.~.:N.=.{....p'..9...A...P....?.\|..^.$.U.y..{......{Y6...w{...V.s)T.b...}...

Chrome Cache Entry: 892

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1057 x 453, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	134600
Entropy (8bit):	7.975500968858445
Encrypted:	false
SSDEEP:	3072:CUnFasOIVyHQCFbeIxsaFHePkAq+y0I7TMOE9A4B:DnFLOIpnYhAq+y0UMnA2
MD5:	ED96AF112AE58CC87D257E3A15A15058
SHA1:	2FB2963CA13D8E2DFF6BC71E9EAD9B0FDC686CD0
SHA-256:	FC76B07C4A37F312FF1883EFEFC994E48BFC407942ABBE823D665D46C2A883D2
SHA-512:	16ADB69862AF3C24CBF37BE97C366D441112222FB4F39938295E89CEE92344914C346F5672D146A1EDF0008EED491EB66CD91615318374A4A9E12598EE48224E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/home/cluster_bg.png?v=1
Preview:	.PNG........IHDR...!................pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 893

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11512
Entropy (8bit):	5.231599120536348
Encrypted:	false
SSDEEP:	192:MMDEwx6C3jtkhmcq8AdpqydsMQCHmehPP95tdYnwYvh9z1iIuJ3IuHDiCEymUMB/:MNAhtkhmf8iLXYvoIuZIuPbo60X
MD5:	2D724A92A0D2AD5F11AE11A1F48FE312
SHA1:	6946868412D6DE7695245AB42795693E94734E8F
SHA-256:	7ED7D426D69A723C49B7FE580978301D18E693EFAF3F8572927493F280E657D9
SHA-512:	DAEA7F6D0017888848E82915C57158381B1CF10960676E78F43A4F5A34A170B7CB85E82EA97069976A74AB4B21D83C696F297A2AC191B40C233EF192328A6004
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/apphub_home.js?v=8OrLYcA-XZ3m&l=english&_cdn=cloudflare
Preview:	..var currentPage = 1;..var doneScrolling = false;..var modalDialogVisible = false;..var waitingForContent = false;..var hasAdminPrivileges = false;..var g_AppID = 0;....window.onbeforeunload = function()..{...if ( window.history && window.history.replaceState )...{....var scrollOffset = document.viewport.getScrollOffsets();....var scrollTop = scrollOffset.top;....window.history.replaceState( {}, document.title, '#scrollTop=' + scrollTop );...}..}....function PerformSearch()..{...var searchText = v_trim( $( 'appHubsSearchText' ).value );...if ( searchText.length < 3 && searchText.length > 0 )...{....$( 'appHubsSearchText' ).focus();....alert( 'The search text must be at least 3 characters long.' );....$( 'appHubsSearchText' ).value = searchText;....return;...}...$('AppHubSearch').submit();..}....function PerformSearchOnKeypress( e )..{...var e = e \|\| event;...var keyCode = e.keyCode;...switch ( keyCode )...{....case Event.KEY_RETURN:....{.....PerformSearch();.....Event.stop( e );.....r

Chrome Cache Entry: 894

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3650), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	589742
Entropy (8bit):	5.4554967383449275
Encrypted:	false
SSDEEP:	12288:6lnjwuioSCpAJrCZy2L1+EIEbnk0ncQ2b0VZCSoHbCJgvjHpsqkBaqi269q0Mwu8:6cn
MD5:	F556122233EDB2FC6AAC313CA07C345B
SHA1:	B58546F3B177C6C7332BF1B4CF7A76511B131620
SHA-256:	0A86AB3B9D3982CB978DDE0FAD0D23C8E8F5EB1D49FA0F81A94DED9EAE1791C7
SHA-512:	FC39FD45851F5F66AB58694508A7B852BD7733384DB71F5F10F74EBF4D85ED4F96556E428E66D6A82EEE9F5C6632BCD50B6F865E37F55CB72595A79D86F7104B
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/storesteam/
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Welcome to Steam</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=lI4V3qLLPrMY&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public

Chrome Cache Entry: 895

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 81 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2441
Entropy (8bit):	7.562660515761875
Encrypted:	false
SSDEEP:	48:DitNn2VIhJ37VsKSFsf+KlvE5MMpL8NMENYUn4FoDqAmVc:82aDRSWf+KhEZL8SiYFlVc
MD5:	9467CD36FA8D637F6025E405A8A8EE81
SHA1:	8D028C12F3EF3EDBECFAFE5217C734003B739967
SHA-256:	1396FFD3FDDA47E9634BBAAFFA5C1B8FA3DAFBEEF347FA2504E2C636EF316636
SHA-512:	33A712B98462D7750A37999E948E3CD258EDA9E0F8B617768729E2A3FA809E712C6FD9920731C9D0FE160018F45C0EA0293FFC539B9B98F41244932CAF4BAB5E
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/apphubs/not-yet.png
Preview:	.PNG........IHDR...Q.........WW......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:FC2506A0A10911E18FC7B75195E1F38D" xmpMM:DocumentID="xmp.did:FC2506A1A10911E18FC7B75195E1F38D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FC25069EA10911E18FC7B75195E1F38D" stRef:documentID="xmp.did:FC25069FA10911E18FC7B75195E1F38D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>m.......IDATx..o.TU...{....]7T..V.....K.v[.....2..c.(..YF.....(..$.(H......@.eI.2.SkIP6IJ....7..o...Y.i....{..s...

Chrome Cache Entry: 896

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 306x260, components 3
Category:	downloaded
Size (bytes):	38467
Entropy (8bit):	7.980375413851907
Encrypted:	false
SSDEEP:	768:HQxWpagKqTExmwoGNVOwOzUW6vtHWS5kyf3rv6uIPgLA6DlO:HQxWpNKmE7ol8V2Svfz6ILA6DlO
MD5:	687535BF67264A4A79838F71153B8EC9
SHA1:	84EA1CB9979B285D4F18AF8C70A8B1D980865D2F
SHA-256:	1273D57E980AFE8C5F6CB1354C2AFE451ABCDB663E6DAAB3B8A32EAD350D85A7
SHA-512:	531AC6BEAE34268F81CB9D9CED598EE49B5BF01BBA6F7B983E88A7D16A982F5A7B0D81D6F409F1A095225E5A14B54132DB29E77EF359D21B38E2A5DB73A30BF1
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/spotlights/cdf177cb0f475f16d8a70293/spotlight_image_english.jpg?t=1715360642
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:EA415E2BAEA1DF11A752BC80D643D9CD" xmpMM:DocumentID="xmp.did:C03567ED0D7D11EFABB6DA227201C8AE" xmpMM:InstanceID="xmp.iid:C03567EC0D7D11EFABB6DA227201C8AE" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6f2038f6-7b6f-af48-ab15-bc24ffa4694d" stRef:documentID="adobe:docid:photoshop:21838ae6-7fbd-0a4d-82d2-a5869c55efac"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...&Adobe.d...............#?..8...^~...A...

Chrome Cache Entry: 897

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 1438x810, components 3
Category:	dropped
Size (bytes):	53312
Entropy (8bit):	7.665136731299754
Encrypted:	false
SSDEEP:	1536:rH0/cBYvhmIN/aCvVhewNvGugIg2T5YDl:rU/caJmINCCvV/1Gu/nlYx
MD5:	21033B55259B477772E53545A528333C
SHA1:	77DA30343DA982525DE8D056F99CB78F1F992FA6
SHA-256:	F31B0421CCD39BD52C37806521C30B8F30C5A72B7B8A7FE9D796E08E6D186BBB
SHA-512:	0DE213CFB2FA93C325748354241BEF7545CA3E539394257169A9BBF7F2CC0588608499A25BEC02E226EEE8B097AE51BF9806380B9812C72964C5E32D9C129762
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C...................................................................................................................=.......................!1.AQaq."..2.B..#R..b.$3Sr..4C..c...................................................1!A.Qaq.............?...;nR..@SI@.T......DR.T...Z4. ..%e..U+{........6..[].V.e......E4Ee.@Z..J..../@^{....@.........8...`....P...@(.@J....k..........@.....4.(.{.P.%...{.....`N..(.....'j.~. .].bP... 8... .....o@P'.).......?...H...W%....S........W..{...r......`.L...P"........x.F..".....DEO.........eF.Y.......V@.m..2#"..XT%..@F..E...@.P.P..,.j.T.@(.F ..P .....4..4.....x5.J.i...kF.......H%t.+-....B6.Fk.TTm-.U..$V[."4.E.VV....@U..`[..L.^H...../ (.@@....@.....>(....Z.%S.@..8@=..Q)...P...`8...B.M0.%T.v...7.,....%............P.H.W.%.+b... ...=.8a@.......+......(.@.....S.....@(.`..... .&.? @......=.8%T%.....1(........2R'<.Q..VY.dTdVXT..vJ.W.T...1&..@Q.2...*V...".B(...5.

Chrome Cache Entry: 898

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17427), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	17592
Entropy (8bit):	5.231945953005468
Encrypted:	false
SSDEEP:	192:+u3sjHS+Cu4AR/e8dGDA53c1Ip1Ap1Bp1qp1Tp10p1lp1+p1Xp14p1Gp1tp18p1A:+ucDSArJNZABqT0l+X4Gt87SJSUKyn
MD5:	2E541A200B2179599E8B83C20D443834
SHA1:	8D3A5DB36BE2BC204B7B933A64152D17B51273D9
SHA-256:	FB6CCAC6DC60720528567503059279D0807DAA613C8375C8A3C96523442757DC
SHA-512:	2AE19B77FBCA2C0754F5A1899C37E1F7D05B92B95C3FFEB96E0D3AE2172298C8F06BEDF9A459DB338B2EB849C8794FA1A8377CCF154B599E4724BDE3FCBF4E5B
Malicious:	false
Reputation:	low
URL:	https://gtm.you1.cn/public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. ..**/..(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2822],{6514:e=>{e.exports={LoadingWrapper:"_3Z36hMlC0g5rhADc86JeV8",Static:"kwzRJNhtPiQO0D4Wn0PLU",none:"_2iT5lTDKhbxllUncFnJhS0",bottomCircle:"_3-sjxBwrq1aRP-xn0Pwx37",noString:"M4pF_ij_g5aN0m2FqZc7u",Throbber:"_7MdwTzlZhzNS1NzYBn7Sk",throbber_small:"_29-XTCJVnFYwvPS6oJ6liL",throbber_medium:"_1yqSoIPxWwEa9VRtAQdhdy",throbber_large:"_1u2tLqxQCBluyLGN_QvmRf",throbber_center_wrapper:"Yi4EMhptGPt8XWnnnT_nC",ThrobberText:"_1ZlvfuG4Q4e9GfTYNuNI5b",blur:"_3ebLcY6yz7RZRSTq7EK5Lo",ThrobberRoundLoop:"_3SEk8c3qDYTigYcVaGHzE8",roundOuterOutline:"_3M8ArwlB5FKwDNDos_gbXp",roundOuter:"_3H7At8KqRfv4ttYb4hHZmf",roundFill:"_2FWWtb-RoV2eWwZb_2ZPr-",ThrobberFillLoop:"_1-rlbGjslOZcEUwLtOMFS5",topCircle:"_3znUFhu51nKns1e7TS-OBI",circlePulse:"_1oQUOQrI5F662TJKj8jekS",ThrobberTopC

Chrome Cache Entry: 899

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	6655
Entropy (8bit):	7.761968692201283
Encrypted:	false
SSDEEP:	192:4eaObTkwrb1i5YQNxVIJMyh1ngxWgpU8noKB:taOntrb1qY+mJMyrngx3U+1B
MD5:	3F40D6C570E35358D507F5DA783F20D4
SHA1:	F80AFDC4E1EF207B293BF52FCF341E266D0DFD9F
SHA-256:	77F220CBF69CED19160E50ABED1C6A28FC23AD13EB4DCAA1C93AE19C5E9594E9
SHA-512:	86E4882B6A6D32B0417D1BE4212DBA9CC8E01E348F3C1E5250552F6A279083EED6800E29F4A495375434BFB214BE6368ADC9D922A5A79378E656945B91DECF4E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%......ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........7....................................................................}.....;..1.O..k.....kR...xld..Vr#23.\.s..t@..."..d ../.w.T.d.u.7Ia...Ib......6.0Y5...D....$On...u..+.....0Zj.+m*. B..t...;j.20/e.+........5.K..........I.....J.K.r&R,..6.p.ug..l.P.V.K.'V....;...V.....Z..C.

Chrome Cache Entry: 900

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	489851
Entropy (8bit):	7.990768037477039
Encrypted:	true
SSDEEP:	12288:JSsluEyB0qJ1gVO/ihiuS2iJub7Na03Bbwz:r8EG0aCY/ihhpBbwz
MD5:	6738BAFE48640F890CDB47D1B0569B2E
SHA1:	ECA49CE790C82FA699EBE4233F093BA0125DB0B0
SHA-256:	C45762A678A80D38DBE8D55AE338FE64DDD9B995D6358028F91CA9A5159F5F9D
SHA-512:	6941A6B383B36251D0D73AE9397109079F3B4ED0288713AB2C132D3E58D23D43B9107FB34E69EE4B26EEE4BD88AC96376EB33D4747723AEFDF9A94F57AA0E7AD
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;......8...."..........8.......................................................................C.aIa5.!Xk..<...P.d..@[..<{..F..<.........w.K.......u/{.K....{....{.K....}....x]K..R...o<......$.7.Ll...J.!......'...9...)..WE...........Lt...q.-..}CQ.....G.M.....LB..$.m..%.L!t.E.i.!&..$.._.A.._@..4s.Yd.~.+.......}.z...,..Uic...2.\....^.N....,f..R... l.......>3....W...N.=dI.?g.kX...:6.i.L..9".n..,..r.M=....G./@..h.7..R.~=.V.j6j. 6(}fvt..I...!It..c!gc....J... ../q.2....\|L.......P..i.9.D.U.v.l....b..B..j.(Gk.vB$I...v....!..1V.....irk.x0.L.........y.H.......T.R.os.O.....8..,l..8(\.R.$......K........Y..NiL.....Q....'.u....$.sdN.K7.....~.~......S..(.._'..~.....z.4.$....w.;.%.w.s..A.z.%.I{..].:...%...{..^......xIp^.]R.K!.BtY.J.N..H.I..P.E...........7(&....}.\3.J@...IKS.D.s.!/..F9.8DsHE._."w..U.+.;..7.M...X.t.....

Static File Info

⊘No static file info

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 16, 2024 00:36:05.751530886 CEST	192.168.2.4	1.1.1.1	0xebf1	Standard query (0)	gtm.you1.cn	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:05.752022982 CEST	192.168.2.4	1.1.1.1	0x5874	Standard query (0)	gtm.you1.cn	65	IN (0x0001)	false
May 16, 2024 00:36:06.766446114 CEST	192.168.2.4	1.1.1.1	0x814b	Standard query (0)	gtm.you1.cn	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:06.766505003 CEST	192.168.2.4	1.1.1.1	0x7a40	Standard query (0)	gtm.you1.cn	65	IN (0x0001)	false
May 16, 2024 00:36:08.442450047 CEST	192.168.2.4	1.1.1.1	0x9d3c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:08.453370094 CEST	192.168.2.4	1.1.1.1	0xa981	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 16, 2024 00:36:15.577230930 CEST	192.168.2.4	1.1.1.1	0xca80	Standard query (0)	gtm.you1.cn	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:15.577374935 CEST	192.168.2.4	1.1.1.1	0x9aa9	Standard query (0)	gtm.you1.cn	65	IN (0x0001)	false
May 16, 2024 00:36:51.132632971 CEST	192.168.2.4	1.1.1.1	0xf73e	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:51.133081913 CEST	192.168.2.4	1.1.1.1	0x7ec7	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
May 16, 2024 00:36:53.337589025 CEST	192.168.2.4	1.1.1.1	0x9aaf	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:53.337778091 CEST	192.168.2.4	1.1.1.1	0xdab2	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
May 16, 2024 00:36:53.545696020 CEST	192.168.2.4	1.1.1.1	0xe1dd	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:53.545942068 CEST	192.168.2.4	1.1.1.1	0x6789	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
May 16, 2024 00:36:54.209697962 CEST	192.168.2.4	1.1.1.1	0xc5c0	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:54.209876060 CEST	192.168.2.4	1.1.1.1	0x126	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
May 16, 2024 00:36:55.050901890 CEST	192.168.2.4	1.1.1.1	0x855d	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:55.051067114 CEST	192.168.2.4	1.1.1.1	0xa625	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
May 16, 2024 00:36:58.414185047 CEST	192.168.2.4	1.1.1.1	0x7c04	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:58.414356947 CEST	192.168.2.4	1.1.1.1	0x4313	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
May 16, 2024 00:36:58.666024923 CEST	192.168.2.4	1.1.1.1	0x143c	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:58.666193962 CEST	192.168.2.4	1.1.1.1	0xd97b	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
May 16, 2024 00:37:07.865423918 CEST	192.168.2.4	1.1.1.1	0xeddc	Standard query (0)	gtm.you1.cn	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:07.865731001 CEST	192.168.2.4	1.1.1.1	0x80cb	Standard query (0)	gtm.you1.cn	65	IN (0x0001)	false
May 16, 2024 00:37:17.218070030 CEST	192.168.2.4	1.1.1.1	0xc69d	Standard query (0)	gtm.you1.cn	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:17.218566895 CEST	192.168.2.4	1.1.1.1	0xbf92	Standard query (0)	gtm.you1.cn	65	IN (0x0001)	false
May 16, 2024 00:37:17.545000076 CEST	192.168.2.4	1.1.1.1	0x427e	Standard query (0)	cdn.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:17.545543909 CEST	192.168.2.4	1.1.1.1	0xa9f5	Standard query (0)	cdn.cloudflare.steamstatic.com	65	IN (0x0001)	false
May 16, 2024 00:37:18.377655983 CEST	192.168.2.4	1.1.1.1	0x812f	Standard query (0)	community.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:18.377944946 CEST	192.168.2.4	1.1.1.1	0x300d	Standard query (0)	community.cloudflare.steamstatic.com	65	IN (0x0001)	false
May 16, 2024 00:37:18.994951010 CEST	192.168.2.4	1.1.1.1	0xf455	Standard query (0)	cdn.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:18.995464087 CEST	192.168.2.4	1.1.1.1	0x6f30	Standard query (0)	cdn.cloudflare.steamstatic.com	65	IN (0x0001)	false
May 16, 2024 00:37:19.643800974 CEST	192.168.2.4	1.1.1.1	0xdaa3	Standard query (0)	community.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:19.644975901 CEST	192.168.2.4	1.1.1.1	0x817e	Standard query (0)	community.cloudflare.steamstatic.com	65	IN (0x0001)	false
May 16, 2024 00:37:22.888678074 CEST	192.168.2.4	1.1.1.1	0x4533	Standard query (0)	steamuserimages-a.akamaihd.net	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:22.889302969 CEST	192.168.2.4	1.1.1.1	0xc47f	Standard query (0)	steamuserimages-a.akamaihd.net	65	IN (0x0001)	false
May 16, 2024 00:37:22.894939899 CEST	192.168.2.4	1.1.1.1	0xabbb	Standard query (0)	img.youtube.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:22.899472952 CEST	192.168.2.4	1.1.1.1	0x885f	Standard query (0)	img.youtube.com	65	IN (0x0001)	false
May 16, 2024 00:37:23.551621914 CEST	192.168.2.4	1.1.1.1	0x4104	Standard query (0)	steamuserimages-a.akamaihd.net	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.552238941 CEST	192.168.2.4	1.1.1.1	0x9815	Standard query (0)	steamuserimages-a.akamaihd.net	65	IN (0x0001)	false
May 16, 2024 00:37:23.564363003 CEST	192.168.2.4	1.1.1.1	0xd21	Standard query (0)	img.youtube.com	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.564814091 CEST	192.168.2.4	1.1.1.1	0x438d	Standard query (0)	img.youtube.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 16, 2024 00:36:06.765887022 CEST	1.1.1.1	192.168.2.4	0xebf1	No error (0)	gtm.you1.cn	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:36:06.765887022 CEST	1.1.1.1	192.168.2.4	0xebf1	No error (0)	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		47.57.186.72	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:06.765887022 CEST	1.1.1.1	192.168.2.4	0xebf1	No error (0)	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		47.57.233.162	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:06.826622963 CEST	1.1.1.1	192.168.2.4	0x5874	No error (0)	gtm.you1.cn	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:36:07.234494925 CEST	1.1.1.1	192.168.2.4	0x7a40	No error (0)	gtm.you1.cn	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:36:07.814941883 CEST	1.1.1.1	192.168.2.4	0x814b	No error (0)	gtm.you1.cn	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:36:07.814941883 CEST	1.1.1.1	192.168.2.4	0x814b	No error (0)	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		47.57.186.72	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:07.814941883 CEST	1.1.1.1	192.168.2.4	0x814b	No error (0)	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		47.57.233.162	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:08.552401066 CEST	1.1.1.1	192.168.2.4	0x9d3c	No error (0)	www.google.com		192.178.50.36	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:08.563397884 CEST	1.1.1.1	192.168.2.4	0xa981	No error (0)	www.google.com			65	IN (0x0001)	false
May 16, 2024 00:36:15.921901941 CEST	1.1.1.1	192.168.2.4	0xca80	No error (0)	gtm.you1.cn	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:36:15.921901941 CEST	1.1.1.1	192.168.2.4	0xca80	No error (0)	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		47.57.233.162	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:15.921901941 CEST	1.1.1.1	192.168.2.4	0xca80	No error (0)	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		47.57.186.72	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:16.386749983 CEST	1.1.1.1	192.168.2.4	0x9aa9	No error (0)	gtm.you1.cn	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:36:23.913024902 CEST	1.1.1.1	192.168.2.4	0xdc8d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:36:23.913024902 CEST	1.1.1.1	192.168.2.4	0xdc8d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:36.847613096 CEST	1.1.1.1	192.168.2.4	0x5611	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:36:36.847613096 CEST	1.1.1.1	192.168.2.4	0x5611	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:51.244750023 CEST	1.1.1.1	192.168.2.4	0xf73e	No error (0)	store.akamai.steamstatic.com		23.50.112.134	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:51.244750023 CEST	1.1.1.1	192.168.2.4	0xf73e	No error (0)	store.akamai.steamstatic.com		23.50.112.132	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:53.488723993 CEST	1.1.1.1	192.168.2.4	0x9aaf	No error (0)	cdn.akamai.steamstatic.com		23.222.77.65	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:53.488723993 CEST	1.1.1.1	192.168.2.4	0x9aaf	No error (0)	cdn.akamai.steamstatic.com		23.222.77.58	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:53.658207893 CEST	1.1.1.1	192.168.2.4	0xe1dd	No error (0)	store.akamai.steamstatic.com		23.219.3.153	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:53.658207893 CEST	1.1.1.1	192.168.2.4	0xe1dd	No error (0)	store.akamai.steamstatic.com		23.219.3.149	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:54.321682930 CEST	1.1.1.1	192.168.2.4	0xc5c0	No error (0)	cdn.akamai.steamstatic.com		23.222.77.58	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:54.321682930 CEST	1.1.1.1	192.168.2.4	0xc5c0	No error (0)	cdn.akamai.steamstatic.com		23.222.77.65	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:55.163970947 CEST	1.1.1.1	192.168.2.4	0x855d	No error (0)	store.steampowered.com		96.17.60.195	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:57.055227041 CEST	1.1.1.1	192.168.2.4	0x6b60	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:36:57.055227041 CEST	1.1.1.1	192.168.2.4	0x6b60	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:58.524403095 CEST	1.1.1.1	192.168.2.4	0x7c04	No error (0)	api.steampowered.com		23.194.234.100	A (IP address)	IN (0x0001)	false
May 16, 2024 00:36:58.776484013 CEST	1.1.1.1	192.168.2.4	0x143c	No error (0)	store.steampowered.com		96.17.60.195	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:08.446530104 CEST	1.1.1.1	192.168.2.4	0xeddc	No error (0)	gtm.you1.cn	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:08.446530104 CEST	1.1.1.1	192.168.2.4	0xeddc	No error (0)	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		47.57.186.72	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:08.446530104 CEST	1.1.1.1	192.168.2.4	0xeddc	No error (0)	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		47.57.233.162	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:08.789194107 CEST	1.1.1.1	192.168.2.4	0x80cb	No error (0)	gtm.you1.cn	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:17.319926023 CEST	1.1.1.1	192.168.2.4	0xc846	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:17.319926023 CEST	1.1.1.1	192.168.2.4	0xc846	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:17.656761885 CEST	1.1.1.1	192.168.2.4	0x427e	No error (0)	cdn.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:17.656761885 CEST	1.1.1.1	192.168.2.4	0x427e	No error (0)	cdn.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:17.659210920 CEST	1.1.1.1	192.168.2.4	0xa9f5	No error (0)	cdn.cloudflare.steamstatic.com			65	IN (0x0001)	false
May 16, 2024 00:37:17.675960064 CEST	1.1.1.1	192.168.2.4	0xbf92	No error (0)	gtm.you1.cn	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:17.783440113 CEST	1.1.1.1	192.168.2.4	0xc69d	No error (0)	gtm.you1.cn	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:17.783440113 CEST	1.1.1.1	192.168.2.4	0xc69d	No error (0)	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		47.57.186.72	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:17.783440113 CEST	1.1.1.1	192.168.2.4	0xc69d	No error (0)	alb-p3bgwpczva65mugtu3.cn-hongkong.alb.aliyuncs.com		47.57.233.162	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:18.489764929 CEST	1.1.1.1	192.168.2.4	0x812f	No error (0)	community.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:18.489764929 CEST	1.1.1.1	192.168.2.4	0x812f	No error (0)	community.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:18.491877079 CEST	1.1.1.1	192.168.2.4	0x300d	No error (0)	community.cloudflare.steamstatic.com			65	IN (0x0001)	false
May 16, 2024 00:37:19.106580973 CEST	1.1.1.1	192.168.2.4	0x6f30	No error (0)	cdn.cloudflare.steamstatic.com			65	IN (0x0001)	false
May 16, 2024 00:37:19.106937885 CEST	1.1.1.1	192.168.2.4	0xf455	No error (0)	cdn.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:19.106937885 CEST	1.1.1.1	192.168.2.4	0xf455	No error (0)	cdn.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:19.755765915 CEST	1.1.1.1	192.168.2.4	0xdaa3	No error (0)	community.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:19.755765915 CEST	1.1.1.1	192.168.2.4	0xdaa3	No error (0)	community.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:19.758449078 CEST	1.1.1.1	192.168.2.4	0x817e	No error (0)	community.cloudflare.steamstatic.com			65	IN (0x0001)	false
May 16, 2024 00:37:22.999495983 CEST	1.1.1.1	192.168.2.4	0xc47f	No error (0)	steamuserimages-a.akamaihd.net	steamuserimages-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:22.999623060 CEST	1.1.1.1	192.168.2.4	0x4533	No error (0)	steamuserimages-a.akamaihd.net	steamuserimages-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:23.004755974 CEST	1.1.1.1	192.168.2.4	0xabbb	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:23.004755974 CEST	1.1.1.1	192.168.2.4	0xabbb	No error (0)	ytimg.l.google.com		142.250.189.142	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.004755974 CEST	1.1.1.1	192.168.2.4	0xabbb	No error (0)	ytimg.l.google.com		192.178.50.78	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.004755974 CEST	1.1.1.1	192.168.2.4	0xabbb	No error (0)	ytimg.l.google.com		142.250.64.142	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.004755974 CEST	1.1.1.1	192.168.2.4	0xabbb	No error (0)	ytimg.l.google.com		142.250.64.238	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.004755974 CEST	1.1.1.1	192.168.2.4	0xabbb	No error (0)	ytimg.l.google.com		172.217.165.206	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.004755974 CEST	1.1.1.1	192.168.2.4	0xabbb	No error (0)	ytimg.l.google.com		142.250.217.238	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.004755974 CEST	1.1.1.1	192.168.2.4	0xabbb	No error (0)	ytimg.l.google.com		192.178.50.46	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.004755974 CEST	1.1.1.1	192.168.2.4	0xabbb	No error (0)	ytimg.l.google.com		142.250.217.174	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.004755974 CEST	1.1.1.1	192.168.2.4	0xabbb	No error (0)	ytimg.l.google.com		172.217.15.206	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.004755974 CEST	1.1.1.1	192.168.2.4	0xabbb	No error (0)	ytimg.l.google.com		142.250.217.206	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.010742903 CEST	1.1.1.1	192.168.2.4	0x885f	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:23.662564993 CEST	1.1.1.1	192.168.2.4	0x4104	No error (0)	steamuserimages-a.akamaihd.net	steamuserimages-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:23.663465023 CEST	1.1.1.1	192.168.2.4	0x9815	No error (0)	steamuserimages-a.akamaihd.net	steamuserimages-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:23.675012112 CEST	1.1.1.1	192.168.2.4	0x438d	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		172.217.165.206	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		142.250.217.238	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		172.217.3.78	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		192.178.50.46	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		192.178.50.78	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		142.251.35.238	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		142.250.217.174	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		142.250.64.206	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		142.250.64.174	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		142.250.64.238	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		142.250.189.142	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		142.250.64.142	A (IP address)	IN (0x0001)	false
May 16, 2024 00:37:23.675182104 CEST	1.1.1.1	192.168.2.4	0xd21	No error (0)	ytimg.l.google.com		142.250.217.206	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:08 UTC	665	OUT	GET /app/2143540 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:08 UTC	1943	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Set-Cookie: sessionid=3508f816d0cd4e44f984cf27; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; Path=/; Secure; HttpOnly; SameSite=None
2024-05-15 22:36:08 UTC	14416	IN	Data Raw: 33 38 34 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 Data Ascii: 3848<!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"
2024-05-15 22:36:09 UTC	10332	IN	Data Raw: 32 38 35 34 0d 0a 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 63 7a 65 63 68 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e c4 8c 65 c5 a1 74 69 6e 61 20 28 43 7a 65 63 68 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 64 61 6e 69 73 68 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 64 61 6e 69 73 68 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 Data Ascii: 2854click="ChangeLanguage( 'czech' ); return false;">etina (Czech)</a><a class="popup_menu_item tight" href="?l=danish" onclick="ChangeLanguage( 'danish' ); return false;">Dansk (Danish)</a>
2024-05-15 22:36:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49737	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:09 UTC	686	OUT	GET /public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:09 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:09 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=10123206 Expires: Tue, 10 Sep 2024 02:36:15 GMT
2024-05-15 22:36:09 UTC	2500	IN	Data Raw: 39 62 64 0d 0a 2f 2a 0d 0a 20 46 6f 6e 74 3a 20 09 09 4d 6f 74 69 76 61 20 53 61 6e 73 0d 0a 20 55 52 4c 3a 20 09 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 2e 70 68 70 3f 73 6b 75 3d 54 32 39 38 32 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 4e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 64 65 73 69 67 6e 65 72 2f 32 39 33 2f 6e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 43 6f 70 79 72 69 67 68 74 3a 09 43 6f 70 79 72 69 67 68 74 20 20 32 30 31 31 20 62 79 20 52 6f 64 72 69 67 6f 20 53 61 69 61 6e 69 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 56 65 72 73 69 6f Data Ascii: 9bd/* Font: Motiva Sans URL: http://www.youworkforthem.com/product.php?sku=T2982 Foundry: Niramekko Foundry: http://www.youworkforthem.com/designer/293/niramekko Copyright:Copyright 2011 by Rodrigo Saiani. All rights reserved. Versio
2024-05-15 22:36:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-15 22:36:09 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=203313 Date: Wed, 15 May 2024 22:36:09 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:09 UTC	682	OUT	GET /public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:10 UTC	244	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:10 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=6954130 Expires: Sun, 04 Aug 2024 10:18:20 GMT
2024-05-15 22:36:10 UTC	16121	IN	Data Raw: 33 65 66 31 0d 0a 2e 62 74 6e 5f 67 72 65 65 6e 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 44 32 45 38 38 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 61 34 64 30 30 37 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 Data Ascii: 3ef1.btn_green_white_innerfade {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decoration: none !important;color: #D2E885 !important;background: #a4d007;background: -webkit-linea
2024-05-15 22:36:11 UTC	16384	IN	Data Raw: 34 34 39 35 0d 0a 65 6e 74 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 3b 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 09 7d 0d 0a 0d 0a 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 3a 6e 6f 74 28 2e 62 74 6e 5f 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 62 74 6e 5f 61 63 74 69 76 65 29 3a 6e 6f 74 28 2e 61 63 74 69 76 65 29 3a 68 6f 76 65 72 20 Data Ascii: 4495ent > span {border-radius: 2px;display: block;background: transparent;border: 1px solid rgba(255,255,255,0.4);border-radius: 2px;}.btnv6_white_transparent:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover
2024-05-15 22:36:11 UTC	1181	IN	Data Raw: 6f 20 75 73 65 20 74 68 65 6d 2c 20 70 6c 65 61 73 65 20 63 6f 6e 76 65 72 74 20 74 6f 20 74 68 65 20 6e 65 77 20 69 63 6f 6e 20 63 6f 64 65 20 2a 2f 0d 0a 0d 0a 2e 62 74 6e 5f 64 65 74 61 69 6c 73 5f 61 72 72 6f 77 0d 0a 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 77 69 64 74 68 3a 20 31 35 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 62 75 74 74 6f 6e 73 2f 69 63 6f 6e 5f 64 6f 75 62 6c 65 5f 61 72 72 6f 77 73 2e 70 6e 67 27 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 Data Ascii: o use them, please convert to the new icon code */.btn_details_arrow{display: inline-block;width: 15px;height: 16px;background-image:url('https://gtm.you1.cn/public/shared/images/buttons/icon_double_arrows.png');vertical-align: middle
2024-05-15 22:36:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:09 UTC	688	OUT	GET /public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:10 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:10 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=14656321 Expires: Fri, 01 Nov 2024 13:48:11 GMT
2024-05-15 22:36:10 UTC	16139	IN	Data Raw: 37 65 65 30 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 2f 2a 20 53 79 73 74 65 6d 20 67 72 65 79 73 20 2a 2f 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 73 74 47 72 65 79 3a 20 23 44 43 44 45 44 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 72 47 72 65 79 3a 20 23 42 38 42 43 42 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 47 72 65 79 3a 20 23 38 42 39 32 39 41 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 47 72 65 79 3a 20 23 36 37 37 30 37 42 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 47 72 65 79 3a 20 23 33 44 34 34 35 30 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 72 47 72 65 79 3a 20 23 32 33 32 36 32 45 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 73 74 47 72 65 79 3a 20 23 30 45 Data Ascii: 7ee0:root {/* System greys */--gpSystemLightestGrey: #DCDEDF;--gpSystemLighterGrey: #B8BCBF;--gpSystemLightGrey: #8B929A;--gpSystemGrey: #67707B;--gpSystemDarkGrey: #3D4450;--gpSystemDarkerGrey: #23262E;--gpSystemDarkestGrey: #0E
2024-05-15 22:36:10 UTC	16349	IN	Data Raw: 3b 0d 0a 09 68 65 69 67 68 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 23 61 64 6d 69 6e 5f 64 72 6f 70 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 37 63 31 66 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 20 31 30 33 2c 20 31 39 33 2c 20 32 34 35 Data Ascii: ;height: 4px;}#admin_drop { border-radius: 2px; border: none; padding: 1px; display: inline-block; cursor: pointer; text-decoration: none !important; color: #67c1f5 !important; background: rgba( 103, 193, 245
2024-05-15 22:36:11 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 41 59 5a 4b 44 6c 44 63 75 4d 46 4b 61 6e 51 45 43 44 41 41 71 77 30 4c 41 2b 47 52 69 71 41 41 41 41 41 42 4a 52 55 35 45 72 6b 4a 67 67 67 3d 3d 20 29 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 72 69 67 68 74 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 39 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 39 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 09 77 69 64 74 68 3a 20 31 36 70 78 3b 0d 0a 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 37 3b 0d 0a 7d 0d Data Ascii: 3ff0AYZKDlDcuMFKanQECDAAqw0LA+GRiqAAAAABJRU5ErkJggg== );background-repeat: no-repeat;background-position: center right;cursor: pointer;float: right;margin-top: 9px;margin-right: 9px;height: 16px;width: 16px;opacity: 0.7;}
2024-05-15 22:36:11 UTC	8	IN	Data Raw: 37 66 65 31 0d 0a 6a 4d Data Ascii: 7fe1jM
2024-05-15 22:36:11 UTC	16384	IN	Data Raw: 44 41 78 49 44 63 35 4c 6d 45 34 5a 44 51 33 4e 54 4d 30 4f 53 77 67 4d 6a 41 79 4d 79 38 77 4d 79 38 79 4d 79 30 78 4d 7a 6f 77 4e 54 6f 30 4e 53 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 69 42 79 5a 47 59 36 59 57 4a 76 64 58 51 39 49 69 49 67 65 47 31 73 62 6e 4d 36 65 47 31 77 50 53 4a 6f 64 48 52 77 4f 69 38 76 62 6e 4d 75 59 57 52 76 59 6d 55 75 59 32 39 74 4c 33 68 68 63 43 38 78 4c 6a 41 76 49 69 42 34 62 57 78 75 63 7a 70 34 Data Ascii: DAxIDc5LmE4ZDQ3NTM0OSwgMjAyMy8wMy8yMy0xMzowNTo0NSAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bWxuczp4
2024-05-15 22:36:11 UTC	16353	IN	Data Raw: 52 53 5a 57 59 36 61 57 35 7a 64 47 46 75 59 32 56 4a 52 44 30 69 65 47 31 77 4c 6d 6c 70 5a 44 6f 35 51 30 4d 33 4d 45 55 31 4d 7a 49 78 51 7a 51 78 4d 55 55 30 4f 54 56 45 52 55 55 34 4e 45 45 31 52 54 6c 47 4d 44 59 78 52 69 49 67 63 33 52 53 5a 57 59 36 5a 47 39 6a 64 57 31 6c 62 6e 52 4a 52 44 30 69 65 47 31 77 4c 6d 52 70 5a 44 6f 35 51 30 4d 33 4d 45 55 31 4e 44 49 78 51 7a 51 78 4d 55 55 30 4f 54 56 45 52 55 55 34 4e 45 45 31 52 54 6c 47 4d 44 59 78 52 69 49 76 50 69 41 38 4c 33 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 6a 34 67 50 43 39 79 5a 47 59 36 55 6b 52 47 50 69 41 38 4c 33 67 36 65 47 31 77 62 57 56 30 59 54 34 67 50 44 39 34 63 47 46 6a 61 32 56 30 49 47 56 75 5a 44 30 69 63 69 49 2f 50 76 33 76 55 4b 41 41 41 41 41 6c 53 Data Ascii: RSZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDo5Q0M3MEU1MzIxQzQxMUU0OTVERUU4NEE1RTlGMDYxRiIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDo5Q0M3MEU1NDIxQzQxMUU0OTVERUU4NEE1RTlGMDYxRiIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Pv3vUKAAAAAlS
2024-05-15 22:36:11 UTC	3744	IN	Data Raw: 65 39 39 0d 0a 31 70 78 20 73 6f 6c 69 64 20 23 36 34 36 66 38 32 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 31 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 64 74 20 2e 72 64 74 50 69 63 6b 65 72 20 74 68 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 64 74 20 2e 72 64 74 50 69 63 6b 65 72 20 74 64 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 64 61 79 73 20 74 68 61 74 20 73 68 6f 77 20 66 72 6f 6d 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 6f 72 20 73 75 62 73 65 71 75 65 6e 74 20 63 61 6c 65 6e 64 61 72 20 6d 6f 6e 74 68 20 28 65 67 20 77 68 Data Ascii: e991px solid #646f82; box-shadow: 0 1px 10px rgba(0, 0, 0, 0.8);}.rdt .rdtPicker th { border-bottom: transparent;}.rdt .rdtPicker td { color: white;}/* days that show from the previous or subsequent calendar month (eg wh
2024-05-15 22:36:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:09 UTC	676	OUT	GET /public/css/globalv2.css?v=PAcV2zMBzzSV&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:10 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:10 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15413260 Expires: Sun, 10 Nov 2024 08:03:50 GMT
2024-05-15 22:36:10 UTC	16120	IN	Data Raw: 33 65 66 30 0d 0a 0d 0a 68 74 6d 6c 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 20 23 31 62 32 38 33 38 3b 0d 0a 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 0d 0a 09 63 6f 6c 6f 72 3a 20 23 38 46 39 38 41 30 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 0d 0a 09 6d 61 72 67 69 6e 3a 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 66 6c 61 74 5f 70 61 67 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 66 6c 61 74 5f 70 61 67 65 2e 62 6c 61 63 6b 20 7b 0d 0a 09 62 61 63 Data Ascii: 3ef0html {height: 100%;}body {background: #1b2838;text-align: left;color: #8F98A0;font-size: 14px;margin:0;padding:0;}body.flat_page {position: relative;min-height: 100%;}body.flat_page.black {bac
2024-05-15 22:36:11 UTC	16384	IN	Data Raw: 35 62 30 37 0d 0a 61 67 65 6c 69 6e 6b 20 7b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6d 6d 65 6e 74 74 68 72 65 61 64 5f 70 61 67 65 6c 69 6e 6b 73 5f 63 74 6e 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6d 6d 65 6e 74 74 68 72 65 61 64 5f 70 61 67 65 6c 69 6e 6b 73 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6d 6d 65 6e 74 74 68 72 65 61 64 5f 70 61 67 65 64 72 6f 70 64 6f 77 6e 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 66 69 78 20 73 6f 6d Data Ascii: 5b07agelink {cursor: pointer;color: #ffffff;}.commentthread_pagelinks_ctn {height: fit-content;line-height: normal;}.commentthread_pagelinks {margin: 0 8px;}.commentthread_pagedropdown {display: none;}/* fix som
2024-05-15 22:36:11 UTC	6927	IN	Data Raw: 78 4e 7a 6f 7a 4d 6a 6f 77 4d 43 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 69 42 79 5a 47 59 36 59 57 4a 76 64 58 51 39 49 69 49 67 65 47 31 73 62 6e 4d 36 65 47 31 77 54 55 30 39 49 6d 68 30 64 48 41 36 4c 79 39 75 63 79 35 68 5a 47 39 69 5a 53 35 6a 62 32 30 76 65 47 46 77 4c 7a 45 75 4d 43 39 74 62 53 38 69 49 48 68 74 62 47 35 7a 4f 6e 4e 30 55 6d 56 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 62 6e 4d 75 59 57 52 76 59 6d 55 75 59 32 Data Ascii: xNzozMjowMCAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iIHhtbG5zOnN0UmVmPSJodHRwOi8vbnMuYWRvYmUuY2
2024-05-15 22:36:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:09 UTC	685	OUT	GET /public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:10 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:10 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15464067 Expires: Sun, 10 Nov 2024 22:10:37 GMT
2024-05-15 22:36:10 UTC	2436	IN	Data Raw: 39 37 64 0d 0a 2e 65 72 72 6f 72 5f 63 74 6e 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 36 30 70 78 20 61 75 74 6f 3b 0d 0a 09 6d 61 78 2d 77 69 64 74 68 3a 39 35 38 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 72 67 62 61 28 20 36 34 2c 20 31 32 38 2c 20 31 38 33 2c 20 30 2e 34 29 20 35 25 2c 20 72 67 62 61 28 20 36 34 2c 20 31 32 38 2c 20 31 38 33 2c 20 30 2e 32 29 20 39 35 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 20 36 34 2c 20 31 32 38 2c 20 31 38 33 2c 20 30 2e 34 29 20 35 25 2c 20 72 67 62 61 28 20 36 34 2c 20 31 32 38 2c 20 31 38 33 2c 20 30 2e 32 Data Ascii: 97d.error_ctn {margin: 60px auto;max-width:958px;background: -webkit-linear-gradient( top, rgba( 64, 128, 183, 0.4) 5%, rgba( 64, 128, 183, 0.2) 95%);background: linear-gradient( to bottom, rgba( 64, 128, 183, 0.4) 5%, rgba( 64, 128, 183, 0.2
2024-05-15 22:36:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-15 22:36:09 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=203224 Date: Wed, 15 May 2024 22:36:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-15 22:36:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49745	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:09 UTC	692	OUT	GET /public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:10 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:10 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=13654483 Expires: Sun, 20 Oct 2024 23:30:53 GMT
2024-05-15 22:36:10 UTC	16121	IN	Data Raw: 33 65 66 31 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6d 6f 76 65 73 63 72 6f 6c 6c 74 6f 63 6f 6e 74 65 6e 74 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 72 69 67 68 74 3a 20 30 3b 0d 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 2c 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 20 2e 72 65 73 70 6f 6e 73 69 76 65 Data Ascii: 3ef1.responsive_page_frame {position: relative;}body.movescrolltocontent .responsive_page_frame {position: fixed;top: 0;right: 0;bottom: 0;left: 0;overflow: auto;}body.overflow_hidden,body.overflow_hidden .responsive
2024-05-15 22:36:11 UTC	2969	IN	Data Raw: 62 39 32 0d 0a 65 72 20 73 63 72 65 65 6e 73 20 61 6e 64 20 65 61 73 69 65 72 20 74 6f 20 74 61 70 20 77 68 65 6e 20 7a 6f 6f 6d 65 64 20 6f 75 74 20 2a 2f 0d 0a 0d 0a 68 74 6d 6c 2e 66 6f 72 63 65 5f 64 65 73 6b 74 6f 70 20 62 6f 64 79 20 23 66 6f 6f 74 65 72 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 30 3b 0d 0a 7d 0d 0a 0d 0a 68 74 6d 6c 2e 66 6f 72 63 65 5f 64 65 73 6b 74 6f 70 20 62 6f 64 79 20 23 66 6f 6f 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 73 70 61 63 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 36 34 70 78 3b 0d 0a 7d 0d Data Ascii: b92er screens and easier to tap when zoomed out */html.force_desktop body #footer .responsive_optin_link {display: block;text-align: center;padding: 20px 0;}html.force_desktop body #footer_responsive_optin_spacer {height: 64px;}
2024-05-15 22:36:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49746	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:10 UTC	681	OUT	GET /public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:10 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:10 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=14908748 Expires: Mon, 04 Nov 2024 11:55:18 GMT
2024-05-15 22:36:10 UTC	12562	IN	Data Raw: 33 31 30 61 0d 0a 0d 0a 0d 0a 2e 61 3a 66 6f 63 75 73 20 7b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 68 65 61 64 65 72 42 61 72 20 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0d 0a 09 6d 61 72 67 69 6e 3a 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 31 31 31 31 3b 0d 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 35 34 35 34 35 34 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 68 65 61 64 65 72 4c 69 6e 6b 2c 61 2e 68 65 61 64 65 72 4c 69 6e 6b 3a 61 63 74 69 76 65 2c 61 2e 68 65 61 64 65 72 4c 69 6e 6b 3a 76 69 73 69 Data Ascii: 310a.a:focus {outline: 0 none;}#headerBar {text-align:left;margin:0;padding:0;background-color:#111111;width:100%;color:#545454;font-size:10px;margin-bottom:0;}a.headerLink,a.headerLink:active,a.headerLink:visi
2024-05-15 22:36:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:11 UTC	664	OUT	GET /public/javascript/prototype-1.7.js?v=.55t44gwuwgvw HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:12 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:11 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15085401 Expires: Wed, 06 Nov 2024 12:59:32 GMT
2024-05-15 22:36:12 UTC	16113	IN	Data Raw: 33 65 65 39 0d 0a 0d 0a 2f 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 4a 61 76 61 53 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 2c 20 76 65 72 73 69 6f 6e 20 31 2e 37 0d 0a 20 2a 20 20 28 63 29 20 32 30 30 35 2d 32 30 31 30 20 53 61 6d 20 53 74 65 70 68 65 6e 73 6f 6e 0d 0a 20 2a 0d 0a 20 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 69 73 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 20 46 6f 72 20 64 65 74 61 69 6c 73 2c 20 73 65 65 20 74 68 65 20 50 72 6f 74 6f 74 79 70 65 20 77 65 62 20 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 6f 74 6f 74 79 70 65 6a 73 2e 6f 72 67 2f 0d 0a 20 2a 0d 0a 20 2a Data Ascii: 3ee9/* Prototype JavaScript framework, version 1.7 * (c) 2005-2010 Sam Stephenson * * Prototype is freely distributable under the terms of an MIT-style license. * For details, see the Prototype web site: http://www.prototypejs.org/ * *
2024-05-15 22:36:12 UTC	16384	IN	Data Raw: 33 66 66 38 0d 0a 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 67 27 29 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 72 61 63 74 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 61 74 63 68 41 6c 6c 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 67 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 6d 61 74 63 68 4f 6e 65 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 27 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 28 74 68 69 73 2e 6d 61 74 63 68 28 6d 61 74 63 68 41 6c 6c 29 20 7c 7c 20 5b Data Ascii: 3ff8gExp(Prototype.ScriptFragment, 'img'), ''); } function extractScripts() { var matchAll = new RegExp(Prototype.ScriptFragment, 'img'), matchOne = new RegExp(Prototype.ScriptFragment, 'im'); return (this.match(matchAll) \|\| [
2024-05-15 22:36:12 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 6f 6e 20 24 48 28 6f 62 6a 65 63 74 29 20 7b 0d 0a 20 20 72 65 74 75 72 6e 20 6e 65 77 20 48 61 73 68 28 6f 62 6a 65 63 74 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 76 61 72 20 48 61 73 68 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 45 6e 75 6d 65 72 61 62 6c 65 2c 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 69 61 6c 69 7a 65 28 6f 62 6a 65 63 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 5f 6f 62 6a 65 63 74 20 3d 20 4f 62 6a 65 63 74 2e 69 73 48 61 73 68 28 6f 62 6a 65 63 74 29 20 3f 20 6f 62 6a 65 63 74 2e 74 6f 4f 62 6a 65 63 74 28 29 20 3a 20 4f 62 6a 65 63 74 2e 63 6c 6f 6e 65 28 6f 62 6a 65 63 74 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 5f 65 61 63 68 28 69 74 Data Ascii: 3ff0on $H(object) { return new Hash(object);};var Hash = Class.create(Enumerable, (function() { function initialize(object) { this._object = Object.isHash(object) ? object.toObject() : Object.clone(object); } function _each(it
2024-05-15 22:36:12 UTC	8	IN	Data Raw: 33 66 65 38 0d 0a 61 72 Data Ascii: 3fe8ar
2024-05-15 22:36:13 UTC	16384	IN	Data Raw: 20 69 20 3d 20 30 2c 20 65 6c 65 6d 65 6e 74 73 20 3d 20 5b 5d 2c 20 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0d 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 73 2e 70 75 73 68 28 24 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 73 3b 0d 0a 20 20 7d 0d 0a 20 20 69 66 20 28 4f 62 6a 65 63 74 2e 69 73 53 74 72 69 6e 67 28 65 6c 65 6d 65 6e 74 29 29 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 65 78 74 65 6e 64 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 7d 0d 0a 0d Data Ascii: i = 0, elements = [], length = arguments.length; i < length; i++) elements.push($(arguments[i])); return elements; } if (Object.isString(element)) element = document.getElementById(element); return Element.extend(element);}
2024-05-15 22:36:13 UTC	16344	IN	Data Raw: 63 65 73 74 6f 72 2e 63 6f 6e 74 61 69 6e 73 29 0d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 6e 63 65 73 74 6f 72 2e 63 6f 6e 74 61 69 6e 73 28 65 6c 65 6d 65 6e 74 29 20 26 26 20 61 6e 63 65 73 74 6f 72 20 21 3d 3d 20 65 6c 65 6d 65 6e 74 3b 0d 0a 0d 0a 20 20 20 20 77 68 69 6c 65 20 28 65 6c 65 6d 65 6e 74 20 3d 20 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 0d 0a 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 20 3d 3d 20 61 6e 63 65 73 74 6f 72 29 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 73 63 72 6f 6c 6c 54 6f 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d Data Ascii: cestor.contains) return ancestor.contains(element) && ancestor !== element; while (element = element.parentNode) if (element == ancestor) return true; return false; }, scrollTo: function(element) { element = $(elem
2024-05-15 22:36:13 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 76 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 7d 29 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 29 3b 0d 0a 0d 0a 45 6c 65 6d 65 6e 74 2e 65 78 74 65 6e 64 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 44 65 66 69 63 69 65 6e 63 79 28 74 61 67 4e 61 6d 65 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 45 6c 65 6d 65 6e 74 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 70 72 6f 74 6f 20 3d 20 77 69 6e 64 6f 77 2e 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 70 72 6f 74 6f 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 Data Ascii: 7fe0v = null;})(document.createElement('div'));Element.extend = (function() { function checkDeficiency(tagName) { if (typeof window.Element != 'undefined') { var proto = window.Element.prototype; if (proto) { var
2024-05-15 22:36:13 UTC	16360	IN	Data Raw: 43 6f 6d 70 75 74 69 6e 67 29 20 74 68 69 73 2e 5f 65 6e 64 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 54 6f 70 20 3d 20 74 68 69 73 2e 67 65 74 28 27 62 6f 72 64 65 72 2d 74 6f 70 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 62 42 6f 74 74 6f 6d 20 3d 20 74 68 69 73 2e 67 65 74 28 27 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 27 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 54 6f 70 20 3d 20 74 68 69 73 2e 67 65 74 28 27 70 61 64 64 69 6e 67 2d 74 6f 70 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 70 42 6f 74 74 6f 6d 20 3d 20 74 68 69 73 2e 67 65 74 28 27 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 27 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: Computing) this._end(); return 0; } var bTop = this.get('border-top'), bBottom = this.get('border-bottom'); var pTop = this.get('padding-top'), pBottom = this.get('padding-bottom');
2024-05-15 22:36:13 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 09 09 69 66 20 28 20 45 78 70 72 2e 72 65 6c 61 74 69 76 65 5b 20 73 65 6c 65 63 74 6f 72 20 5d 20 29 0d 0a 09 09 09 09 09 73 65 6c 65 63 74 6f 72 20 2b 3d 20 70 61 72 74 73 2e 73 68 69 66 74 28 29 3b 0d 0a 0d 0a 09 09 09 09 73 65 74 20 3d 20 70 6f 73 50 72 6f 63 65 73 73 28 20 73 65 6c 65 63 74 6f 72 2c 20 73 65 74 20 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 69 66 20 28 20 21 73 65 65 64 20 26 26 20 70 61 72 74 73 2e 6c 65 6e 67 74 68 20 3e 20 31 20 26 26 20 63 6f 6e 74 65 78 74 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 39 20 26 26 20 21 63 6f 6e 74 65 78 74 58 4d 4c 20 26 26 0d 0a 09 09 09 09 45 78 70 72 2e 6d 61 74 63 68 2e 49 44 2e 74 65 73 74 28 70 61 72 74 73 5b 30 5d 29 20 26 26 20 21 45 Data Ascii: 7fe0if ( Expr.relative[ selector ] )selector += parts.shift();set = posProcess( selector, set );}}} else {if ( !seed && parts.length > 1 && context.nodeType === 9 && !contextXML &&Expr.match.ID.test(parts[0]) && !E
2024-05-15 22:36:13 UTC	16360	IN	Data Raw: 6f 6e 20 7c 7c 20 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 20 29 20 7b 0d 0a 09 09 09 69 66 20 28 20 61 20 3d 3d 20 62 20 29 20 7b 0d 0a 09 09 09 09 68 61 73 44 75 70 6c 69 63 61 74 65 20 3d 20 74 72 75 65 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 72 65 74 75 72 6e 20 30 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 76 61 72 20 72 65 74 20 3d 20 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 20 26 20 34 20 3f 20 2d 31 20 3a 20 61 20 3d 3d 3d 20 62 20 3f 20 30 20 3a 20 31 3b 0d 0a 09 09 69 66 20 28 20 72 65 74 20 3d 3d 3d 20 30 20 29 20 7b 0d 0a 09 09 09 68 61 73 44 75 70 6c 69 63 61 74 65 20 3d 20 74 72 75 65 3b 0d 0a 09 09 7d 0d 0a 09 09 72 65 74 75 72 6e 20 72 65 74 3b 0d 0a 09 7d 3b 0d 0a 7d 20 Data Ascii: on \|\| !b.compareDocumentPosition ) {if ( a == b ) {hasDuplicate = true;}return 0;}var ret = a.compareDocumentPosition(b) & 4 ? -1 : a === b ? 0 : 1;if ( ret === 0 ) {hasDuplicate = true;}return ret;};}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:11 UTC	721	OUT	GET /public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&load=effects,controls,slider,dragdrop HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:12 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:12 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15014927 Expires: Tue, 05 Nov 2024 17:24:59 GMT
2024-05-15 22:36:12 UTC	16113	IN	Data Raw: 33 65 65 39 0d 0a 2f 2f 20 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 20 73 63 72 69 70 74 61 63 75 6c 6f 75 73 2e 6a 73 20 76 31 2e 38 2e 31 2c 20 54 68 75 20 4a 61 6e 20 30 33 20 32 32 3a 30 37 3a 31 32 20 2d 30 35 30 30 20 32 30 30 38 0d 0a 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 2d 32 30 30 37 20 54 68 6f 6d 61 73 20 46 75 63 68 73 20 28 68 74 74 70 3a 2f 2f 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 2c 20 68 74 74 70 3a 2f 2f 6d 69 72 2e 61 63 75 6c 6f 2e 75 73 29 0d 0a 2f 2f 20 0d 0a 2f 2f 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 0d 0a 2f 2f 20 61 20 Data Ascii: 3ee9// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)// // Permission is hereby granted, free of charge, to any person obtaining// a
2024-05-15 22:36:12 UTC	16384	IN	Data Raw: 33 66 66 38 0d 0a 65 6d 65 6e 74 2c 20 0d 0a 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 78 3a 20 74 6f 4c 65 66 74 2c 20 79 3a 20 74 6f 54 6f 70 20 7d 2c 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 7c 7c 20 7b 20 7d 29 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 45 66 66 65 63 74 2e 53 63 61 6c 65 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 45 66 66 65 63 74 2e 42 61 73 65 2c 20 7b 0d 0a 20 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 70 65 72 63 65 6e 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 20 74 68 72 6f 77 28 45 66 66 65 63 74 2e 5f 65 6c 65 6d 65 6e 74 44 6f 65 Data Ascii: 3ff8ement, Object.extend({ x: toLeft, y: toTop }, arguments[3] \|\| { }));};Effect.Scale = Class.create(Effect.Base, { initialize: function(element, percent) { this.element = $(element); if (!this.element) throw(Effect._elementDoe
2024-05-15 22:36:13 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 79 6c 65 2e 68 65 69 67 68 74 2c 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 77 69 64 74 68 2c 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 65 6c 65 6d 65 6e 74 2e 67 65 74 49 6e 6c 69 6e 65 4f 70 61 63 69 74 79 28 29 20 7d 3b 0d 0a 0d 0a 20 20 76 61 72 20 64 69 6d 73 20 3d 20 65 6c 65 6d 65 6e 74 2e 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 29 3b 0d 0a 20 20 76 61 72 20 6d 6f 76 65 58 2c 20 6d 6f 76 65 59 3b 0d 0a 20 20 0d 0a 20 20 73 77 69 74 63 68 20 28 6f 70 74 69 6f 6e 73 2e 64 69 72 65 63 74 69 6f 6e 29 20 7b 0d 0a 20 20 20 20 63 61 73 65 20 27 74 6f 70 2d 6c 65 66 74 27 3a 0d 0a 20 20 20 20 20 20 6d 6f 76 65 58 20 3d 20 6d 6f 76 65 59 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 62 72 65 61 6b 3b 0d Data Ascii: 3ff0yle.height, width: element.style.width, opacity: element.getInlineOpacity() }; var dims = element.getDimensions(); var moveX, moveY; switch (options.direction) { case 'top-left': moveX = moveY = 0; break;
2024-05-15 22:36:13 UTC	8	IN	Data Raw: 33 66 65 39 0d 0a 74 75 Data Ascii: 3fe9tu
2024-05-15 22:36:13 UTC	16384	IN	Data Raw: 72 6e 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 65 6c 73 65 20 0d 0a 20 20 20 20 20 20 20 69 66 28 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 3d 3d 45 76 65 6e 74 2e 4b 45 59 5f 54 41 42 20 7c 7c 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 3d 3d 45 76 65 6e 74 2e 4b 45 59 5f 52 45 54 55 52 4e 20 7c 7c 20 0d 0a 20 20 20 20 20 20 20 20 20 28 50 72 6f 74 6f 74 79 70 65 2e 42 72 6f 77 73 65 72 2e 57 65 62 4b 69 74 20 3e 20 30 20 26 26 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3d 3d 20 30 29 29 20 72 65 74 75 72 6e 3b 0d 0a 0d 0a 20 20 20 20 74 68 69 73 2e 63 68 61 6e 67 65 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 68 61 73 46 6f 63 75 73 20 3d 20 74 72 75 65 3b 0d 0a 0d 0a 20 20 20 20 69 66 28 74 68 69 73 2e 6f 62 73 65 72 76 65 72 29 Data Ascii: rn; } else if(event.keyCode==Event.KEY_TAB \|\| event.keyCode==Event.KEY_RETURN \|\| (Prototype.Browser.WebKit > 0 && event.keyCode == 0)) return; this.changed = true; this.hasFocus = true; if(this.observer)
2024-05-15 22:36:13 UTC	16353	IN	Data Raw: 6e 73 2e 6c 6f 61 64 54 65 78 74 55 52 4c 29 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 70 6f 73 74 50 72 6f 63 65 73 73 45 64 69 74 46 69 65 6c 64 28 29 3b 0d 0a 20 20 20 20 69 66 20 28 65 29 20 45 76 65 6e 74 2e 73 74 6f 70 28 65 29 3b 0d 0a 20 20 7d 2c 0d 0a 20 20 65 6e 74 65 72 48 6f 76 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 6f 76 65 72 43 6c 61 73 73 4e 61 6d 65 29 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 4e 61 6d 65 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 6f 76 65 72 43 6c 61 73 73 4e 61 6d 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 73 61 76 69 6e 67 29 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 74 68 69 73 Data Ascii: ns.loadTextURL) this.postProcessEditField(); if (e) Event.stop(e); }, enterHover: function(e) { if (this.options.hoverClassName) this.element.addClassName(this.options.hoverClassName); if (this._saving) return; this
2024-05-15 22:36:13 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 68 69 73 2e 75 70 64 61 74 65 2e 62 69 6e 64 41 73 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 68 69 73 29 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 49 6e 69 74 69 61 6c 69 7a 65 20 68 61 6e 64 6c 65 73 20 69 6e 20 72 65 76 65 72 73 65 20 28 6d 61 6b 65 20 73 75 72 65 20 66 69 72 73 74 20 68 61 6e 64 6c 65 20 69 73 20 61 63 74 69 76 65 29 0d 0a 20 20 20 20 74 68 69 73 2e 68 61 6e 64 6c 65 73 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 20 7b 0d 0a 20 20 20 20 20 20 69 20 3d 20 73 6c 69 64 65 72 2e 68 61 6e 64 6c 65 73 2e 6c 65 6e 67 74 68 2d 31 2d 69 3b 0d 0a 20 20 20 20 20 20 73 6c 69 64 65 72 2e 73 65 74 56 61 6c 75 65 28 70 61 72 73 65 46 6c 6f 61 74 28 0d 0a 20 20 20 20 20 20 20 20 28 4f 62 6a 65 63 74 2e 69 73 41 72 72 61 Data Ascii: 7fd8his.update.bindAsEventListener(this); // Initialize handles in reverse (make sure first handle is active) this.handles.each( function(h,i) { i = slider.handles.length-1-i; slider.setValue(parseFloat( (Object.isArra
2024-05-15 22:36:13 UTC	16352	IN	Data Raw: 3a 20 30 0d 0a 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 69 66 28 21 61 72 67 75 6d 65 6e 74 73 5b 31 5d 20 7c 7c 20 4f 62 6a 65 63 74 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2e 65 6e 64 65 66 66 65 63 74 29 29 0d 0a 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 64 65 66 61 75 6c 74 73 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 72 74 65 66 66 65 63 74 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 5f 6f 70 61 63 69 74 79 20 3d 20 45 6c 65 6d 65 6e 74 2e 67 65 74 4f 70 61 63 69 74 79 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 44 72 61 67 67 61 62 6c 65 2e 5f 64 72 61 67 67 69 6e 67 5b 65 6c 65 6d 65 6e 74 Data Ascii: : 0 }; if(!arguments[1] \|\| Object.isUndefined(arguments[1].endeffect)) Object.extend(defaults, { starteffect: function(element) { element._opacity = Element.getOpacity(element); Draggable._dragging[element
2024-05-15 22:36:13 UTC	7873	IN	Data Raw: 31 65 62 39 0d 0a 20 20 20 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 2e 6f 6e 6c 79 2c 20 6f 70 74 69 6f 6e 73 2e 74 72 65 65 20 3f 20 74 72 75 65 20 3a 20 66 61 6c 73 65 2c 20 6f 70 74 69 6f 6e 73 2e 74 61 67 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 66 69 6e 64 54 72 65 65 45 6c 65 6d 65 6e 74 73 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 66 69 6e 64 43 68 69 6c 64 72 65 6e 28 0d 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 2e 6f 6e 6c 79 2c 20 6f 70 74 69 6f 6e 73 2e 74 72 65 65 20 3f 20 74 72 75 65 20 3a 20 66 61 6c 73 65 2c 20 6f 70 74 69 6f 6e 73 2e 74 72 65 65 54 61 67 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 Data Ascii: 1eb9 element, options.only, options.tree ? true : false, options.tag); }, findTreeElements: function(element, options) { return Element.findChildren( element, options.only, options.tree ? true : false, options.treeTag); },
2024-05-15 22:36:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:11 UTC	666	OUT	GET /public/javascript/global.js?v=B7Vsdo1okyaC&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:12 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:12 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=13535466 Expires: Sat, 19 Oct 2024 14:27:18 GMT
2024-05-15 22:36:12 UTC	16132	IN	Data Raw: 37 65 64 39 0d 0a 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 67 69 73 74 65 72 53 74 65 61 6d 4f 6e 57 65 62 50 61 6e 65 6c 53 68 6f 77 6e 48 61 6e 64 6c 65 72 28 20 66 20 29 0d 0a 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 69 66 20 28 20 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 20 3d 3d 3d 20 22 76 69 73 69 62 6c 65 22 20 29 0d 0a 09 09 09 66 28 29 3b 0d 0a 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 67 69 73 74 65 72 53 74 65 61 6d 4f 6e 57 65 62 50 61 6e 65 6c 48 69 64 64 65 6e 48 61 6e 64 6c 65 72 28 20 66 20 29 0d 0a 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 Data Ascii: 7ed9function RegisterSteamOnWebPanelShownHandler( f ){$J(document).on( 'visibilitychange', function() {if ( document.visibilityState === "visible" )f();});}function RegisterSteamOnWebPanelHiddenHandler( f ){$J(document)
2024-05-15 22:36:13 UTC	16349	IN	Data Raw: 75 65 2c 22 73 74 72 44 65 63 69 6d 61 6c 53 79 6d 62 6f 6c 22 3a 22 2c 22 2c 22 73 74 72 54 68 6f 75 73 61 6e 64 73 53 65 70 61 72 61 74 6f 72 22 3a 22 2e 22 2c 22 73 74 72 53 79 6d 62 6f 6c 41 6e 64 4e 75 6d 62 65 72 53 65 70 61 72 61 74 6f 72 22 3a 22 22 7d 2c 22 55 59 55 22 3a 7b 22 73 74 72 43 6f 64 65 22 3a 22 55 59 55 22 2c 22 65 43 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 34 31 2c 22 73 74 72 53 79 6d 62 6f 6c 22 3a 22 24 55 22 2c 22 62 53 79 6d 62 6f 6c 49 73 50 72 65 66 69 78 22 3a 74 72 75 65 2c 22 62 57 68 6f 6c 65 55 6e 69 74 73 4f 6e 6c 79 22 3a 74 72 75 65 2c 22 73 74 72 44 65 63 69 6d 61 6c 53 79 6d 62 6f 6c 22 3a 22 2c 22 2c 22 73 74 72 54 68 6f 75 73 61 6e 64 73 53 65 70 61 72 61 74 6f 72 22 3a 22 2e 22 2c 22 73 74 72 53 79 6d 62 6f 6c 41 Data Ascii: ue,"strDecimalSymbol":",","strThousandsSeparator":".","strSymbolAndNumberSeparator":""},"UYU":{"strCode":"UYU","eCurrencyCode":41,"strSymbol":"$U","bSymbolIsPrefix":true,"bWholeUnitsOnly":true,"strDecimalSymbol":",","strThousandsSeparator":".","strSymbolA
2024-05-15 22:36:13 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 0a 09 09 77 69 6e 4f 66 66 65 72 2e 66 6f 63 75 73 28 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 4c 6f 67 6f 75 74 28 29 0d 0a 7b 0d 0a 09 50 6f 73 74 54 6f 55 52 4c 57 69 74 68 53 65 73 73 69 6f 6e 28 20 27 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 6c 6f 67 69 6e 2f 6c 6f 67 6f 75 74 2f 27 20 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 73 74 72 54 61 72 67 65 74 4c 61 6e 67 75 61 67 65 2c 20 62 53 74 61 79 4f 6e 50 61 67 65 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 4d 6f 64 61 6c 20 3d 20 53 68 6f 77 42 6c 6f 63 6b 69 6e 67 57 61 69 74 44 69 61 6c 6f 67 28 20 27 43 68 61 6e 67 65 20 6c 61 6e 67 75 61 67 65 27 2c 20 27 27 20 29 3b 0d 0a 09 24 4a Data Ascii: 3ff0winOffer.focus();}}function Logout(){PostToURLWithSession( 'https://gtm.you1.cn/login/logout/' );}function ChangeLanguage( strTargetLanguage, bStayOnPage ){var Modal = ShowBlockingWaitDialog( 'Change language', '' );$J
2024-05-15 22:36:13 UTC	8	IN	Data Raw: 33 66 65 38 0d 0a 6d 65 Data Ascii: 3fe8me
2024-05-15 22:36:13 UTC	16384	IN	Data Raw: 6e 74 63 6f 75 6e 74 69 64 27 5d 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 6d 5f 62 53 75 62 73 63 72 69 62 65 64 20 3d 20 72 67 43 6f 6d 6d 65 6e 74 44 61 74 61 5b 27 73 75 62 73 63 72 69 62 65 64 27 5d 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 6d 5f 62 48 61 73 50 61 67 69 6e 67 20 3d 20 21 72 67 43 6f 6d 6d 65 6e 74 44 61 74 61 5b 27 6e 6f 5f 70 61 67 69 6e 67 27 5d 3b 0d 0a 09 09 74 68 69 73 2e 6d 5f 62 54 72 61 63 6b 4e 61 76 69 67 61 74 69 6f 6e 20 3d 20 21 21 72 67 43 6f 6d 6d 65 6e 74 44 61 74 61 5b 27 74 72 61 63 6b 5f 6e 61 76 69 67 61 74 69 6f 6e 27 5d 3b 0d 0a 0d 0a 0d 0a 09 09 76 61 72 20 73 74 72 50 72 65 66 69 78 20 3d 20 27 63 6f 6d 6d 65 6e 74 74 68 72 65 61 64 5f 27 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 4e 61 6d 65 3b 0d 0a 09 09 74 68 69 73 2e 6d Data Ascii: ntcountid'];this.m_bSubscribed = rgCommentData['subscribed'];this.m_bHasPaging = !rgCommentData['no_paging'];this.m_bTrackNavigation = !!rgCommentData['track_navigation'];var strPrefix = 'commentthread_' + this.m_strName;this.m
2024-05-15 22:36:13 UTC	16352	IN	Data Raw: 69 73 2e 4f 6e 41 4a 41 58 43 6f 6d 70 6c 65 74 65 2e 62 69 6e 64 28 20 74 68 69 73 20 29 0d 0a 09 09 7d 29 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 47 6f 54 6f 50 61 67 65 57 69 74 68 43 6f 6d 6d 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 67 69 64 43 6f 6d 6d 65 6e 74 2c 20 65 52 65 6e 64 65 72 52 65 61 73 6f 6e 20 29 0d 0a 09 7b 0d 0a 09 09 2f 2f 20 73 65 65 20 69 66 20 69 74 27 73 20 6f 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 70 61 67 65 0d 0a 09 09 69 66 20 28 20 74 68 69 73 2e 6d 5f 62 4c 6f 61 64 69 6e 67 20 7c 7c 20 24 28 27 63 6f 6d 6d 65 6e 74 5f 27 20 2b 20 67 69 64 43 6f 6d 6d 65 6e 74 20 29 20 29 0d 0a 09 09 09 72 65 74 75 72 6e 3b 0d 0a 0d 0a 09 09 2f 2f 20 6e 6f 70 65 2c 20 6c 6f 61 64 0d 0a 09 09 76 61 72 20 70 61 72 61 6d 73 20 3d 20 74 68 69 Data Ascii: is.OnAJAXComplete.bind( this )});},GoToPageWithComment: function( gidComment, eRenderReason ){// see if it's on the current pageif ( this.m_bLoading \|\| $('comment_' + gidComment ) )return;// nope, loadvar params = thi
2024-05-15 22:36:13 UTC	16384	IN	Data Raw: 35 35 35 30 0d 0a 65 6e 74 54 68 72 65 61 64 2e 55 6e 44 65 6c 65 74 65 43 6f 6d 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 2c 20 67 69 64 63 6f 6d 6d 65 6e 74 20 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 67 5f 72 67 43 6f 6d 6d 65 6e 74 54 68 72 65 61 64 73 5b 69 64 5d 20 29 0d 0a 09 09 67 5f 72 67 43 6f 6d 6d 65 6e 74 54 68 72 65 61 64 73 5b 69 64 5d 2e 44 65 6c 65 74 65 43 6f 6d 6d 65 6e 74 28 20 67 69 64 63 6f 6d 6d 65 6e 74 2c 20 74 72 75 65 20 29 3b 0d 0a 7d 3b 0d 0a 43 43 6f 6d 6d 65 6e 74 54 68 72 65 61 64 2e 4d 61 72 6b 53 70 61 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 2c 20 67 69 64 63 6f 6d 6d 65 6e 74 2c 20 61 75 74 68 6f 72 41 63 63 6f 75 6e 74 49 44 20 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 67 5f 72 67 43 6f 6d 6d 65 6e 74 54 68 Data Ascii: 5550entThread.UnDeleteComment = function( id, gidcomment ){if ( g_rgCommentThreads[id] )g_rgCommentThreads[id].DeleteComment( gidcomment, true );};CCommentThread.MarkSpam = function( id, gidcomment, authorAccountID ){if ( g_rgCommentTh
2024-05-15 22:36:13 UTC	5464	IN	Data Raw: 6f 75 73 65 20 78 2f 79 20 77 69 74 68 69 6e 20 76 69 65 77 70 6f 72 74 0d 0a 09 76 61 72 20 76 6d 58 20 3d 20 65 2e 63 6c 69 65 6e 74 58 3b 0d 0a 09 76 61 72 20 76 6d 59 20 3d 20 65 2e 63 6c 69 65 6e 74 59 3b 0d 0a 09 2f 2f 20 6d 6f 75 73 65 20 78 2f 79 20 77 69 74 68 69 6e 20 64 6f 63 75 6d 65 6e 74 0d 0a 09 76 61 72 20 73 6d 58 20 3d 20 76 6d 58 20 2b 20 73 6c 3b 0d 0a 09 76 61 72 20 73 6d 59 20 3d 20 76 6d 59 20 2b 20 73 74 3b 0d 0a 09 76 61 72 20 6c 20 3d 20 28 70 77 20 3e 20 76 6d 58 29 20 3f 20 28 73 6d 58 20 2b 20 6f 66 66 73 65 74 29 20 3a 20 28 73 6d 58 20 2d 20 70 77 20 2d 20 6f 66 66 73 65 74 29 3b 0d 0a 09 76 61 72 20 74 20 3d 20 28 70 68 20 3e 20 76 6d 59 29 20 3f 20 28 73 6d 59 20 2b 20 6f 66 66 73 65 74 29 20 3a 20 28 73 6d 59 20 2d 20 70 Data Ascii: ouse x/y within viewportvar vmX = e.clientX;var vmY = e.clientY;// mouse x/y within documentvar smX = vmX + sl;var smY = vmY + st;var l = (pw > vmX) ? (smX + offset) : (smX - pw - offset);var t = (ph > vmY) ? (smY + offset) : (smY - p
2024-05-15 22:36:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:11 UTC	668	OUT	GET /public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:12 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:12 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15528039 Expires: Mon, 11 Nov 2024 15:56:51 GMT
2024-05-15 22:36:12 UTC	16132	IN	Data Raw: 37 65 65 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 Data Ascii: 7ee1/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery require
2024-05-15 22:36:12 UTC	16357	IN	Data Raw: 21 28 62 5b 68 5d 3d 66 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 62 5b 30 5d 3d 61 2c 64 28 62 2c 6e 75 6c 6c 2c 66 2c 63 29 2c 21 63 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 66 62 28 61 2c 62 29 2e 6c 65 6e 67 74 68 3e 30 7d 7d 29 2c 63 6f 6e 74 61 69 6e 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 62 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 65 28 62 29 29 2e 69 6e 64 65 78 4f 66 28 61 29 3e 2d 31 7d 7d 29 2c 6c 61 6e 67 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: !(b[h]=f))}):function(a,e,f){return b[0]=a,d(b,null,f,c),!c.pop()}}),has:hb(function(a){return function(b){return fb(a,b).length>0}}),contains:hb(function(a){return function(b){return(b.textContent\|\|b.innerText\|\|e(b)).indexOf(a)>-1}}),lang:hb(function(a){
2024-05-15 22:36:13 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 64 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 3f 28 66 3d 67 5b 62 5d 2c 6e 75 6c 6c 3d 3d 66 26 26 28 66 3d 67 5b 6d 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 5d 29 29 3a 66 3d 67 2c 66 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 2c 63 29 7b 69 66 28 6d 2e 61 63 63 65 70 74 44 61 74 61 28 61 29 29 7b 76 61 72 20 64 2c 65 2c 66 3d 61 2e 6e 6f 64 65 54 79 70 65 2c 67 3d 66 3f 6d 2e 63 61 63 68 65 3a 61 2c 68 3d 66 3f 61 5b 6d 2e 65 78 70 61 6e 64 6f 5d 3a 6d 2e 65 78 70 61 6e 64 6f 3b 69 66 28 67 5b 68 5d 29 7b 69 66 28 62 26 26 28 64 3d 63 3f 67 5b 68 5d 3a 67 5b 68 5d 2e 64 61 74 61 29 29 7b 6d 2e 69 73 41 72 72 61 79 28 62 29 3f 62 3d 62 2e 63 6f 6e 63 61 74 28 6d 2e 6d 61 70 28 62 2c 6d 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: 3ff0d),"string"==typeof b?(f=g[b],null==f&&(f=g[m.camelCase(b)])):f=g,f}}function R(a,b,c){if(m.acceptData(a)){var d,e,f=a.nodeType,g=f?m.cache:a,h=f?a[m.expando]:m.expando;if(g[h]){if(b&&(d=c?g[h]:g[h].data)){m.isArray(b)?b=b.concat(m.map(b,m.camelCase
2024-05-15 22:36:13 UTC	8	IN	Data Raw: 33 66 65 38 0d 0a 75 70 Data Ascii: 3fe8up
2024-05-15 22:36:13 UTC	16384	IN	Data Raw: 3d 72 62 2e 63 61 70 74 69 6f 6e 3d 72 62 2e 74 68 65 61 64 2c 72 62 2e 74 68 3d 72 62 2e 74 64 3b 66 75 6e 63 74 69 6f 6e 20 75 62 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 30 2c 66 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 3d 4b 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 7c 7c 22 2a 22 29 3a 74 79 70 65 6f 66 20 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 21 3d 3d 4b 3f 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 7c 7c 22 2a 22 29 3a 76 6f 69 64 20 30 3b 69 66 28 21 66 29 66 6f 72 28 66 3d 5b 5d 2c 63 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 61 3b 6e 75 6c 6c 21 3d 28 64 3d 63 5b 65 5d 29 3b 65 2b 2b 29 21 62 7c 7c 6d 2e 6e 6f 64 65 Data Ascii: =rb.caption=rb.thead,rb.th=rb.td;function ub(a,b){var c,d,e=0,f=typeof a.getElementsByTagName!==K?a.getElementsByTagName(b\|\|""):typeof a.querySelectorAll!==K?a.querySelectorAll(b\|\|""):void 0;if(!f)for(f=[],c=a.childNodes\|\|a;null!=(d=c[e]);e++)!b\|\|m.node
2024-05-15 22:36:13 UTC	16360	IN	Data Raw: 6c 69 6e 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2e 35 2d 4d 61 74 68 2e 63 6f 73 28 61 2a 4d 61 74 68 2e 50 49 29 2f 32 7d 7d 2c 6d 2e 66 78 3d 5a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2c 6d 2e 66 78 2e 73 74 65 70 3d 7b 7d 3b 76 61 72 20 24 62 2c 5f 62 2c 61 63 3d 2f 5e 28 3f 3a 74 6f 67 67 6c 65 7c 73 68 6f 77 7c 68 69 64 65 29 24 2f 2c 62 63 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 2b 2d 5d 29 3d 7c 29 28 22 2b 53 2b 22 29 28 5b 61 2d 7a 25 5d 2a 29 24 22 2c 22 69 22 29 2c 63 63 3d 2f 71 75 65 75 65 48 6f 6f 6b 73 24 2f 2c 64 63 3d 5b 69 63 5d 2c 65 63 3d 7b 22 2a 22 3a 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 Data Ascii: linear:function(a){return a},swing:function(a){return.5-Math.cos(aMath.PI)/2}},m.fx=Zb.prototype.init,m.fx.step={};var $b,_b,ac=/^(?:toggle\|show\|hide)$/,bc=new RegExp("^(?:([+-])=\|)("+S+")([a-z%])$","i"),cc=/queueHooks$/,dc=[ic],ec={"*":[function(a,b){v
2024-05-15 22:36:13 UTC	14213	IN	Data Raw: 33 37 37 64 0d 0a 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 61 2e 6d 69 6d 65 54 79 70 65 7c 7c 62 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 29 3b 69 66 28 65 29 66 6f 72 28 67 20 69 6e 20 68 29 69 66 28 68 5b 67 5d 26 26 68 5b 67 5d 2e 74 65 73 74 28 65 29 29 7b 69 2e 75 6e 73 68 69 66 74 28 67 29 3b 62 72 65 61 6b 7d 69 66 28 69 5b 30 5d 69 6e 20 63 29 66 3d 69 5b 30 5d 3b 65 6c 73 65 7b 66 6f 72 28 67 20 69 6e 20 63 29 7b 69 66 28 21 69 5b 30 5d 7c 7c 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 67 2b 22 20 22 2b 69 5b 30 5d 5d 29 7b 66 3d 67 3b 62 72 65 61 6b 7d 64 7c 7c 28 64 3d 67 29 7d 66 3d 66 7c 7c 64 7d 72 65 74 75 72 6e 20 66 3f 28 66 21 3d 3d 69 5b 30 5d 26 26 69 2e 75 6e 73 68 69 66 74 28 66 Data Ascii: 377did 0===e&&(e=a.mimeType\|\|b.getResponseHeader("Content-Type"));if(e)for(g in h)if(h[g]&&h[g].test(e)){i.unshift(g);break}if(i[0]in c)f=i[0];else{for(g in c){if(!i[0]\|\|a.converters[g+" "+i[0]]){f=g;break}d\|\|(d=g)}f=f\|\|d}return f?(f!==i[0]&&i.unshift(f
2024-05-15 22:36:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49752	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:11 UTC	665	OUT	GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:12 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:12 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=14888693 Expires: Mon, 04 Nov 2024 06:21:05 GMT
2024-05-15 22:36:12 UTC	16095	IN	Data Raw: 33 65 64 37 0d 0a 2f 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 54 68 69 73 20 70 6c 75 67 69 6e 20 77 69 6c 6c 20 63 72 65 61 74 65 20 64 69 76 2e 6a 73 54 6f 6f 6c 74 69 70 20 65 6c 65 6d 65 6e 74 73 20 28 6f 72 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6f 77 6e 21 29 20 69 6e 20 62 6f 64 79 20 66 6f 72 20 65 76 65 72 79 20 74 6f 6f 6c 74 69 70 20 6f 6e 20 74 68 65 20 70 61 67 65 2e 20 53 6f 6d 65 0d 0a 20 2a 20 62 61 73 69 63 20 43 53 53 20 69 73 20 61 70 70 6c 69 65 64 20 61 75 74 6f 6d 61 67 69 63 61 6c 6c 79 2c 20 62 75 74 20 79 6f 75 27 6c 6c 20 77 61 6e 74 20 74 6f 20 73 74 79 6c 65 20 69 74 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 66 72 6f 6d 20 74 68 65 72 65 2e 20 54 68 69 73 20 63 6f 64 65 20 77 69 6c 6c Data Ascii: 3ed7/* Requires jQuery * * This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will
2024-05-15 22:36:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:12 UTC	680	OUT	GET /public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:13 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:12 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=14255726 Expires: Sun, 27 Oct 2024 22:31:38 GMT
2024-05-15 22:36:13 UTC	16132	IN	Data Raw: 37 65 64 39 0d 0a 0d 0a 53 74 65 61 6d 20 3d 20 7b 0d 0a 09 73 6d 5f 62 49 6e 69 74 69 61 6c 69 7a 65 64 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 43 6c 69 65 6e 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 47 61 6d 65 4f 76 65 72 6c 61 79 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 54 65 6e 66 6f 6f 74 42 72 6f 77 73 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 43 68 61 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 41 70 70 3a 20 66 61 6c 73 65 2c 0d 0a 0d 0a 09 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 65 61 6d 2e Data Ascii: 7ed9Steam = {sm_bInitialized: false,sm_bUserInClient: false,sm_bUserInGameOverlay: false,sm_bUserInTenfootBrowser: false,sm_bUserInMobileChat: false,sm_bUserInMobileApp: false,BIsUserInSteamClient: function(){if ( !Steam.
2024-05-15 22:36:13 UTC	16349	IN	Data Raw: 6f 64 61 6c 5f 68 65 61 64 65 72 27 20 7d 29 20 29 3b 0d 0a 09 76 61 72 20 24 54 6f 70 42 61 72 20 3d 20 28 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6d 6f 64 61 6c 5f 74 6f 70 5f 62 61 72 27 20 7d 29 20 29 3b 0d 0a 09 69 66 20 28 20 73 74 72 54 69 74 6c 65 20 29 0d 0a 09 09 24 48 65 61 64 65 72 2e 61 70 70 65 6e 64 28 20 24 43 6c 6f 73 65 42 75 74 74 6f 6e 20 29 2e 61 70 70 65 6e 64 28 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 74 69 74 6c 65 5f 74 65 78 74 27 20 7d 20 29 2e 74 65 78 74 28 20 73 74 72 54 69 74 6c 65 20 29 20 29 3b 0d 0a 20 20 20 20 69 66 20 28 20 72 67 4d 6f 64 61 6c 50 61 72 61 6d 73 20 26 26 20 72 67 4d 6f 64 61 6c 50 61 72 61 6d 73 2e 73 74 72 53 75 62 54 69 74 6c 65 20 Data Ascii: odal_header' }) );var $TopBar = ( $J('<div/>', {'class': 'modal_top_bar' }) );if ( strTitle )$Header.append( $CloseButton ).append( $J('<div/>', {'class': 'title_text' } ).text( strTitle ) ); if ( rgModalParams && rgModalParams.strSubTitle
2024-05-15 22:36:13 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 78 20 31 30 70 78 20 23 30 30 30 30 30 30 3b 5c 72 5c 6e 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 30 30 43 43 46 46 3b 5c 72 5c 6e 7d 5c 72 5c 6e 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 20 7b 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f 70 6f 70 75 70 5f 63 6f 6e 74 65 6e 74 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e Data Ascii: 3ff0x 10px #000000;\r\n border-left: 2px solid #00CCFF;\r\n}\r\n@media all and (max-width: 910px) {\r\n body.responsive_page .cookiepreferences_popup_content {\r\n flex-direction: column;\r\n }\r\n body.responsive_page .cookiepreferen
2024-05-15 22:36:13 UTC	8	IN	Data Raw: 33 66 66 30 0d 0a 72 65 Data Ascii: 3ff0re
2024-05-15 22:36:13 UTC	16384	IN	Data Raw: 73 3d 27 20 2b 20 64 61 74 65 45 78 70 69 72 65 73 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 73 74 72 43 6f 6f 6b 69 65 4e 61 6d 65 20 2b 20 27 3d 27 20 2b 20 73 74 72 56 61 6c 75 65 20 2b 20 73 74 72 44 61 74 65 20 2b 20 27 3b 70 61 74 68 3d 27 20 2b 20 70 61 74 68 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 47 65 74 53 74 6f 72 61 67 65 46 72 6f 6d 43 6f 6f 6b 69 65 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 6f 53 74 6f 72 61 67 65 20 3d 20 7b 7d 3b 0d 0a 0d 0a 09 76 61 72 20 73 74 72 53 74 6f 72 61 67 65 4a 53 4f 4e 20 3d 20 56 5f 47 65 74 43 6f 6f 6b 69 65 28 20 27 73 74 6f 72 61 67 65 27 20 29 3b 0d 0a 09 69 66 20 28 20 73 74 72 53 74 6f 72 61 67 65 4a 53 4f 4e 20 Data Ascii: s=' + dateExpires.toGMTString();}document.cookie = strCookieName + '=' + strValue + strDate + ';path=' + path;}function _GetStorageFromCookie(){var oStorage = {};var strStorageJSON = V_GetCookie( 'storage' );if ( strStorageJSON
2024-05-15 22:36:13 UTC	16368	IN	Data Raw: 09 69 66 20 28 20 72 67 53 65 61 72 63 68 44 61 74 61 5b 27 70 72 65 66 69 78 27 5d 20 29 0d 0a 09 09 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 3d 20 72 67 53 65 61 72 63 68 44 61 74 61 5b 27 70 72 65 66 69 78 27 5d 3b 0d 0a 0d 0a 09 2f 2f 20 52 6f 77 73 20 65 6c 65 6d 65 6e 74 20 6e 61 6d 65 20 74 68 61 74 27 73 20 75 70 64 61 74 65 64 20 77 68 65 6e 20 77 65 20 73 63 72 6f 6c 6c 2e 0d 0a 09 74 68 69 73 2e 6d 5f 53 74 72 52 6f 77 73 49 64 20 3d 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 52 6f 77 73 27 3b 0d 0a 0d 0a 09 69 66 20 28 20 72 67 53 65 61 72 63 68 44 61 74 61 5b 27 63 6c 61 73 73 5f 70 72 65 66 69 78 27 5d 20 29 0d 0a 09 09 74 68 69 73 2e 6d 5f 73 74 72 43 6c 61 73 73 50 72 Data Ascii: if ( rgSearchData['prefix'] )this.m_strElementPrefix = rgSearchData['prefix'];// Rows element name that's updated when we scroll.this.m_StrRowsId = this.m_strElementPrefix + 'Rows';if ( rgSearchData['class_prefix'] )this.m_strClassPr
2024-05-15 22:36:13 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 0d 0a 09 09 74 68 69 73 2e 41 64 64 50 61 67 65 4c 69 6e 6b 28 20 65 6c 50 61 67 65 4c 69 6e 6b 73 2c 20 30 20 29 3b 0d 0a 09 09 69 66 20 28 20 66 69 72 73 74 50 61 67 65 4c 69 6e 6b 20 21 3d 20 31 20 29 0d 0a 09 09 09 65 6c 50 61 67 65 4c 69 6e 6b 73 2e 69 6e 73 65 72 74 28 20 27 20 2e 2e 2e 20 27 20 29 3b 0d 0a 0d 0a 09 09 66 6f 72 20 28 20 76 61 72 20 69 50 61 67 65 20 3d 20 66 69 72 73 74 50 61 67 65 4c 69 6e 6b 3b 20 69 50 61 67 65 20 3c 3d 20 6c 61 73 74 50 61 67 65 4c 69 6e 6b 3b 20 69 50 61 67 65 2b 2b 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 74 68 69 73 2e 41 64 64 50 61 67 65 4c 69 6e 6b 28 20 65 6c 50 61 67 65 4c 69 6e 6b 73 2c 20 69 50 61 67 65 20 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 20 6c 61 73 74 50 61 67 65 4c 69 Data Ascii: 7fd8this.AddPageLink( elPageLinks, 0 );if ( firstPageLink != 1 )elPageLinks.insert( ' ... ' );for ( var iPage = firstPageLink; iPage <= lastPageLink; iPage++ ){this.AddPageLink( elPageLinks, iPage );}if ( lastPageLi
2024-05-15 22:36:14 UTC	16352	IN	Data Raw: 20 28 68 61 76 65 6e 27 74 20 66 6f 75 6e 64 20 61 6e 20 65 78 61 6d 70 6c 65 20 79 65 74 20 77 65 27 72 65 20 67 6f 69 6e 67 20 74 6f 20 6b 65 65 70 29 20 74 68 65 6e 20 77 65 27 6c 6c 20 6e 65 65 64 20 74 6f 0d 0a 09 2f 2f 20 61 64 64 20 63 61 6c 6c 69 6e 67 3a 20 47 50 4f 6e 53 68 6f 77 69 6e 67 4d 6f 64 61 6c 57 69 6e 64 6f 77 28 20 24 50 6f 70 75 70 5b 30 5d 20 29 2e 20 20 53 65 65 20 73 68 61 72 65 64 5f 72 65 73 70 6f 6e 73 69 76 65 5f 61 64 61 70 74 65 72 2e 6a 73 20 66 6f 72 20 65 78 61 6d 70 6c 65 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 48 69 64 65 4d 65 6e 75 28 20 65 6c 65 6d 4c 69 6e 6b 2c 20 65 6c 65 6d 50 6f 70 75 70 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 4c 69 6e 6b 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 Data Ascii: (haven't found an example yet we're going to keep) then we'll need to// add calling: GPOnShowingModalWindow( $Popup[0] ). See shared_responsive_adapter.js for example}function HideMenu( elemLink, elemPopup ){var $Link = $JFromIDOrElement(e
2024-05-15 22:36:14 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 5f 45 53 63 72 6f 6c 6c 62 61 72 44 69 72 65 63 74 69 6f 6e 48 6f 72 69 7a 6f 6e 74 61 6c 20 29 0d 0a 09 7b 0d 0a 09 09 70 72 6f 70 4f 66 66 73 65 74 20 3d 20 27 6c 65 66 74 27 3b 0d 0a 09 09 70 72 6f 70 53 69 7a 65 20 3d 20 27 77 69 64 74 68 27 3b 0d 0a 09 09 70 72 6f 70 4f 75 74 65 72 53 69 7a 65 20 3d 20 27 6f 75 74 65 72 57 69 64 74 68 27 3b 0d 0a 09 09 70 72 6f 70 44 69 6d 65 6e 73 69 6f 6e 20 3d 20 27 78 27 3b 0d 0a 09 09 70 72 6f 70 50 61 67 65 20 3d 20 27 70 61 67 65 58 27 3b 0d 0a 09 09 70 72 6f 70 4f 66 66 73 65 74 45 76 65 6e 74 20 3d 20 27 6f 66 66 73 65 74 58 27 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 6d 5f 65 6c 65 54 61 72 67 65 74 2e 66 69 72 73 74 28 29 2e 63 73 73 28 7b 27 77 68 69 74 65 2d 73 70 61 63 65 27 3a 20 27 6e 6f Data Ascii: 7fe0_EScrollbarDirectionHorizontal ){propOffset = 'left';propSize = 'width';propOuterSize = 'outerWidth';propDimension = 'x';propPage = 'pageX';propOffsetEvent = 'offsetX';this.m_eleTarget.first().css({'white-space': 'no
2024-05-15 22:36:14 UTC	16360	IN	Data Raw: 6f 6e 28 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 74 68 69 73 2e 6d 5f 62 48 61 76 65 53 75 67 67 65 73 74 69 6f 6e 73 20 29 0d 0a 09 09 74 68 69 73 2e 6d 5f 24 53 75 67 67 65 73 74 69 6f 6e 73 43 74 6e 2e 66 61 64 65 4f 75 74 28 20 27 66 61 73 74 27 20 29 3b 0d 0a 09 65 6c 73 65 0d 0a 09 09 74 68 69 73 2e 6d 5f 24 53 75 67 67 65 73 74 69 6f 6e 73 43 74 6e 2e 68 69 64 65 28 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 43 54 65 78 74 49 6e 70 75 74 53 75 67 67 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 6e 53 75 67 67 65 73 74 69 6f 6e 53 65 6c 65 63 74 65 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 24 53 75 67 67 65 73 74 69 6f 6e 20 29 0d 0a 7b 0d 0a 09 74 68 69 73 2e 6d 5f 24 49 6e 70 75 74 2e 76 61 6c 28 20 24 53 75 67 67 65 73 74 69 6f 6e 2e 74 65 78 74 28 29 20 29 3b 0d Data Ascii: on(){if ( this.m_bHaveSuggestions )this.m_$SuggestionsCtn.fadeOut( 'fast' );elsethis.m_$SuggestionsCtn.hide();};CTextInputSuggest.prototype.OnSuggestionSelected = function( $Suggestion ){this.m_$Input.val( $Suggestion.text() );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49754	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:13 UTC	692	OUT	GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:14 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:14 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15216861 Expires: Fri, 08 Nov 2024 01:30:35 GMT
2024-05-15 22:36:14 UTC	16132	IN	Data Raw: 36 30 35 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2f 20 62 75 69 6c 64 20 6f 75 72 20 6d 65 6e 75 20 6f 6e 20 69 6e 69 74 0d 0a 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 09 76 61 72 20 6d 71 51 75 65 72 79 4d 65 6e 75 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 22 29 20 3a 20 7b 6d 61 74 63 68 65 73 3a 20 66 61 6c 73 65 7d 3b 0d 0a 09 76 61 72 20 6d 71 4d 6f 62 69 6c 65 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 22 Data Ascii: 6051"use strict";// build our menu on initjQuery( function($) {var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)"
2024-05-15 22:36:14 UTC	8533	IN	Data Raw: 63 7a 65 63 68 22 7d 20 29 2e 74 65 78 74 28 20 27 c4 8c 65 c5 a1 74 69 6e 61 20 28 43 7a 65 63 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 64 61 6e 69 73 68 22 7d 20 29 2e 74 65 78 74 28 20 27 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 67 65 72 6d 61 6e 22 7d 20 29 2e 74 65 78 74 28 20 27 44 65 75 74 73 63 68 20 28 47 65 72 6d 61 6e 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 Data Ascii: czech"} ).text( 'etina (Czech)' ));$SelectBox.append($J('<option/>', {value: "danish"} ).text( 'Dansk (Danish)' ));$SelectBox.append($J('<option/>', {value: "german"} ).text( 'Deutsch (German)' ));$Selec
2024-05-15 22:36:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:14 UTC	727	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:15 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:14 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:36:15 UTC	1853	IN	Data Raw: 37 33 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 Data Ascii: 736PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56
2024-05-15 22:36:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:14 UTC	731	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:15 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:14 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:36:15 UTC	3784	IN	Data Raw: 65 63 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 Data Ascii: ec1PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@
2024-05-15 22:36:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49757	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:16 UTC	814	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/public/shared/css/shared_global.css?v=SPpMitTYp6ku&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
2024-05-15 22:36:16 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:16 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:36:16 UTC	298	IN	Data Raw: 31 32 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 Data Ascii: 123PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %
2024-05-15 22:36:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49758	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:16 UTC	721	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:16 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:16 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:36:16 UTC	10871	IN	Data Raw: 32 61 36 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af Data Ascii: 2a6fPNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj
2024-05-15 22:36:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49759	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:16 UTC	695	OUT	GET /public/css/applications/community/main.css?v=5CgcHEsWGAFt&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:17 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:16 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15466778 Expires: Sun, 10 Nov 2024 22:55:54 GMT
2024-05-15 22:36:17 UTC	16120	IN	Data Raw: 33 65 66 30 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 70 75 39 63 4f 70 55 4d 4e 30 51 34 6d 6d 49 58 32 57 5a 50 6c 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 35 39 39 7d 2e 5f 32 71 79 42 5a 56 38 59 76 78 73 74 58 75 53 4b 69 59 44 46 31 39 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 47 72 65 65 6e 45 6e 76 65 6c 6f 70 65 4d 65 6e 75 2c 2e 4c 51 6b 72 62 62 61 79 5a 50 59 31 31 71 48 6d 30 31 74 37 46 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 65 6c 6c 69 70 73 65 20 66 61 72 74 68 65 73 74 Data Ascii: 3ef0.pu9cOpUMN0Q4mmIX2WZPl{position:fixed;top:0;bottom:0;right:0;left:0;z-index:1599}._2qyBZV8YvxstXuSKiYDF19:focus{outline:none}.GreenEnvelopeMenu,.LQkrbbayZPY11qHm01t7F{position:absolute;opacity:1;background:radial-gradient(ellipse farthest
2024-05-15 22:36:17 UTC	16384	IN	Data Raw: 33 66 66 38 0d 0a 73 75 65 72 4e 68 6d 35 7a 6e 71 4f 38 6f 45 55 3e 70 61 74 68 3a 6e 74 68 2d 63 68 69 6c 64 28 37 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 30 2e 34 37 35 73 7d 2e 5f 32 48 63 34 66 54 73 75 65 72 4e 68 6d 35 7a 6e 71 4f 38 6f 45 55 3e 70 61 74 68 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 30 2e 34 73 7d 2e 55 43 56 4b 74 74 7a 6f 70 5f 65 70 59 78 53 78 44 38 54 61 69 3e 70 61 74 68 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 7d 2e 55 43 56 4b 74 74 Data Ascii: 3ff8suerNhm5znqO8oEU>path:nth-child(7){animation-delay:-0.475s}._2Hc4fTsuerNhm5znqO8oEU>path:nth-child(8){animation-delay:-0.4s}.UCVKttzop_epYxSxD8Tai>path{animation-duration:1s;animation-timing-function:linear;animation-iteration-count:infinite}.UCVKtt
2024-05-15 22:36:17 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 48 57 5a 2d 67 65 4a 49 2e 77 45 34 56 36 45 69 32 53 79 32 71 57 44 6f 5f 58 4e 63 77 6e 2e 67 70 66 6f 63 75 73 2c 2e 53 2d 5f 4c 61 51 47 35 65 45 4f 4d 32 48 57 5a 2d 67 65 4a 49 2e 5f 31 6c 55 5a 78 67 4c 30 36 4d 36 34 50 64 30 64 54 4b 53 54 79 6b 2b 2e 53 2d 5f 4c 61 51 47 35 65 45 4f 4d 32 48 57 5a 2d 67 65 4a 49 2e 77 45 34 56 36 45 69 32 53 79 32 71 57 44 6f 5f 58 4e 63 77 6e 2e 67 70 66 6f 63 75 73 77 69 74 68 69 6e 2c 2e 5f 32 33 6b 4e 62 54 67 39 5f 54 59 38 54 56 5f 75 4c 4e 38 4d 4a 79 2b 2e 53 2d 5f 4c 61 51 47 35 65 45 4f 4d 32 48 57 5a 2d 67 65 4a 49 2e 77 45 34 56 36 45 69 32 53 79 32 71 57 44 6f 5f 58 4e 63 77 6e 2e 67 70 66 6f 63 75 73 77 69 74 68 69 6e 2c 2e 5f 33 6a 6f 4e 6b 59 36 6b 52 79 4c 2d 36 52 4b 31 72 4b Data Ascii: 3ff0HWZ-geJI.wE4V6Ei2Sy2qWDo_XNcwn.gpfocus,.S-_LaQG5eEOM2HWZ-geJI._1lUZxgL06M64Pd0dTKSTyk+.S-_LaQG5eEOM2HWZ-geJI.wE4V6Ei2Sy2qWDo_XNcwn.gpfocuswithin,._23kNbTg9_TY8TV_uLN8MJy+.S-_LaQG5eEOM2HWZ-geJI.wE4V6Ei2Sy2qWDo_XNcwn.gpfocuswithin,._3joNkY6kRyL-6RK1rK
2024-05-15 22:36:17 UTC	8	IN	Data Raw: 33 66 65 39 0d 0a 6b 67 Data Ascii: 3fe9kg
2024-05-15 22:36:17 UTC	16384	IN	Data Raw: 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 76 61 72 28 2d 2d 64 65 66 61 75 6c 74 2d 76 61 6c 75 65 2d 74 72 61 63 6b 2d 63 6f 6c 6f 72 29 20 30 25 20 76 61 72 28 2d 2d 67 72 61 64 69 65 6e 74 2d 73 70 6c 69 74 2d 70 63 74 29 2c 20 76 61 72 28 2d 2d 6c 65 66 74 2d 74 72 61 63 6b 2d 63 6f 6c 6f 72 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 67 72 61 64 69 65 6e 74 2d 73 70 6c 69 74 2d 70 63 74 29 29 29 7d 2e 5f 33 61 46 4b 59 61 6c 71 69 73 31 69 36 50 38 4f 4c 54 79 57 58 37 20 2e 4d 71 32 35 4e 61 70 32 32 34 68 56 64 54 64 74 58 53 73 6e 71 3a 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 76 61 72 28 2d 2d 6c 65 66 74 2d 74 72 61 63 6b Data Ascii: round:linear-gradient(90deg, var(--default-value-track-color) 0% var(--gradient-split-pct), var(--left-track-color) calc(var(--gradient-split-pct)))}._3aFKYalqis1i6P8OLTyWX7 .Mq25Nap224hVdTdtXSsnq::before{background:linear-gradient(90deg, var(--left-track
2024-05-15 22:36:17 UTC	16361	IN	Data Raw: 2d 68 65 69 67 68 74 3a 30 7d 0d 0a 2e 5f 31 37 36 4f 57 37 62 6d 32 44 6c 70 69 61 48 70 69 55 47 73 43 4b 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 5f 32 36 78 34 39 4d 34 68 73 33 71 39 4c 39 49 4a 6d 36 77 43 65 66 2c 2e 5f 33 43 58 30 70 6a 68 36 41 51 54 41 45 43 58 55 75 35 39 59 71 36 7b 77 69 64 74 68 3a 37 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 5f 33 56 62 72 32 64 58 68 2d 5a 52 65 44 4c 50 51 55 44 50 54 57 6a 7b 77 69 64 74 68 3a Data Ascii: -height:0}._176OW7bm2DlpiaHpiUGsCK{display:flex;flex-direction:column;align-items:center;padding-top:20px;padding-bottom:20px}._26x49M4hs3q9L9IJm6wCef,._3CX0pjh6AQTAECXUu59Yq6{width:70%;display:flex;justify-content:center}._3Vbr2dXh-ZReDLPQUDPTWj{width:
2024-05-15 22:36:17 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 23 38 61 63 33 32 39 20 30 25 2c 20 23 34 61 37 61 31 36 20 36 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 34 30 25 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 30 34 73 7d 62 75 74 74 6f 6e 2e 44 69 61 6c 6f 67 42 75 74 74 6f 6e 2e 53 65 63 6f 6e 64 61 72 79 2e 4f 66 66 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 31 70 78 20 31 70 78 20 34 70 78 20 23 30 30 30 33 7d 62 75 74 74 6f 6e 2e 44 69 61 6c 6f 67 42 75 74 74 6f 6e 3a 65 6e 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 2e 44 69 61 6c 6f 67 42 75 74 74 6f 6e 3a 65 6e 61 62 6c 65 64 3a 61 63 74 69 76 65 3a 68 6f 76 Data Ascii: 7fe0ground:linear-gradient(to right, #8ac329 0%, #4a7a16 60%);background-position:40%;transition-duration:.04s}button.DialogButton.Secondary.Off{box-shadow:inset 1px 1px 4px #0003}button.DialogButton:enabled:active,button.DialogButton:enabled:active:hov
2024-05-15 22:36:18 UTC	16360	IN	Data Raw: 6f 6e 2d 69 6e 6e 65 72 2c 2e 66 72 69 65 6e 64 73 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 69 74 6c 65 2d 61 72 65 61 2d 69 63 6f 6e 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 31 35 73 20 65 61 73 65 2d 6f 75 74 7d 2e 44 65 73 6b 74 6f 70 55 49 20 2e 74 69 74 6c 65 2d 62 61 72 2d 61 63 74 69 6f 6e 73 2c 2e 66 72 69 65 6e 64 73 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 69 74 6c 65 2d 62 61 72 2d 61 63 74 69 6f 6e 73 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 72 69 67 68 74 3a 30 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 44 65 73 6b 74 Data Ascii: on-inner,.friendsui-container .title-area-icon-inner{display:flex;align-items:center;justify-content:center;transition:stroke .15s ease-out}.DesktopUI .title-bar-actions,.friendsui-container .title-bar-actions{max-height:32px;right:0;cursor:default}.Deskt
2024-05-15 22:36:18 UTC	7600	IN	Data Raw: 31 64 61 38 0d 0a 31 57 53 30 39 54 51 52 51 2b 30 31 74 75 53 32 6d 68 68 52 71 4d 43 78 4e 38 4a 52 4b 4a 37 70 51 6f 4f 31 63 47 44 66 45 66 47 42 50 64 75 6c 4c 52 77 45 4a 55 6f 6b 74 78 5a 65 49 66 63 47 46 4d 4a 45 61 58 69 4b 37 56 61 4e 77 6f 49 55 47 6a 4b 52 5a 4b 48 2f 52 64 78 6e 4e 6d 35 74 37 4f 66 62 54 55 68 52 76 6c 68 48 4c 50 6e 54 6e 6e 2b 37 34 35 4d 33 64 6d 41 48 62 73 66 36 38 41 2b 36 4d 43 54 4d 57 50 41 6d 4e 6e 4d 4f 63 6b 41 4e 73 50 77 4a 4d 79 6e 36 58 52 58 30 4c 2f 4c 58 44 2b 41 6d 59 32 50 6e 53 4b 32 35 6d 41 47 34 6b 6a 30 41 58 58 67 4c 4f 4a 33 72 36 2b 61 44 67 55 68 6d 41 77 43 49 46 41 51 50 42 73 62 57 31 42 76 56 36 48 63 71 55 4d 75 57 79 32 41 49 77 2f 67 78 72 63 67 37 75 5a 54 39 73 4a 32 56 37 41 64 4e 39 Data Ascii: 1da81WS09TQRQ+01tuS2mhhRqMCxN8JRKJ7pQoO1cGDfEfGBPdulLRwEJUoktxZeIfcGFMJEaXiK7VaNwoIUGjKRZKH/RdxnNm5t7OfbTUhRvlhHLPnTnn+745M3dmAHbsf68A+6MCTMWPAmNnMOckANsPwJMyn6XRX0L/LXD+AmY2PnSK25mAG4kj0AXXgLOJ3r6+aDgUhmAwCIFAQPBsbW1BvV6HcqUMuWy2AIw/gxrcg7uZT9sJ2V7AdN9
2024-05-15 22:36:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49761	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:16 UTC	691	OUT	GET /public/javascript/applications/community/manifest.js?v=6MtRkzKwK42K&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:17 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:16 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15545055 Expires: Mon, 11 Nov 2024 20:40:31 GMT
2024-05-15 22:36:17 UTC	15805	IN	Data Raw: 33 64 62 35 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 76 61 72 20 43 4c 53 54 41 4d 50 3d 22 38 38 39 36 31 32 32 22 3b 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 65 2c 6e 2c 63 2c 69 2c 6f 3d 7b 7d 2c 64 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 76 61 72 20 65 Data Ascii: 3db5/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/var CLSTAMP="8896122";(()=>{"use strict";var a,e,n,c,i,o={},d={};function f(a){var e
2024-05-15 22:36:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49760	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:16 UTC	702	OUT	GET /public/javascript/applications/community/libraries~b28b7af69.js?v=hOyTweQkD3Cx&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:17 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:16 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15466735 Expires: Sun, 10 Nov 2024 22:55:11 GMT
2024-05-15 22:36:17 UTC	16132	IN	Data Raw: 37 65 65 31 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 32 35 30 5d 2c 7b 35 38 36 32 37 3a 65 3d 3e 7b Data Ascii: 7ee1/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[3250],{58627:e=>{
2024-05-15 22:36:17 UTC	16357	IN	Data Raw: 68 28 69 28 74 29 2b 22 3d 22 2b 69 28 65 29 29 7d 29 29 29 7d 29 29 2c 6f 3d 61 2e 6a 6f 69 6e 28 22 26 22 29 7d 69 66 28 6f 29 7b 76 61 72 20 73 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 73 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 30 2c 73 29 29 2c 65 2b 3d 28 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3f 22 3f 22 3a 22 26 22 29 2b 6f 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 31 38 30 38 38 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 65 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 2b 24 2f 2c 22 22 29 2b 22 2f 22 2b 74 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 2b 2f 2c 22 22 29 3a 65 7d 7d 2c 35 37 36 37 35 3a 28 65 2c 74 2c 72 29 Data Ascii: h(i(t)+"="+i(e))})))})),o=a.join("&")}if(o){var s=e.indexOf("#");-1!==s&&(e=e.slice(0,s)),e+=(-1===e.indexOf("?")?"?":"&")+o}return e}},18088:e=>{"use strict";e.exports=function(e,t){return t?e.replace(/\/+$/,"")+"/"+t.replace(/^\/+/,""):e}},57675:(e,t,r)
2024-05-15 22:36:17 UTC	16368	IN	Data Raw: 33 66 65 38 0d 0a 45 5f 4d 41 50 3d 21 31 2c 24 6a 73 63 6f 6d 70 2e 41 53 53 55 4d 45 5f 4e 4f 5f 4e 41 54 49 56 45 5f 53 45 54 3d 21 31 2c 24 6a 73 63 6f 6d 70 2e 53 49 4d 50 4c 45 5f 46 52 4f 55 4e 44 5f 50 4f 4c 59 46 49 4c 4c 3d 21 31 2c 24 6a 73 63 6f 6d 70 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3d 24 6a 73 63 6f 6d 70 2e 41 53 53 55 4d 45 5f 45 53 35 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 21 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 26 26 65 21 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 28 65 5b 74 5d 3d 72 2e 76 Data Ascii: 3fe8E_MAP=!1,$jscomp.ASSUME_NO_NATIVE_SET=!1,$jscomp.SIMPLE_FROUND_POLYFILL=!1,$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(e,t,r){e!=Array.prototype&&e!=Object.prototype&&(e[t]=r.v
2024-05-15 22:36:17 UTC	16	IN	Data Raw: 33 66 66 30 0d 0a 72 28 76 61 72 20 72 20 69 6e Data Ascii: 3ff0r(var r in
2024-05-15 22:36:17 UTC	16384	IN	Data Raw: 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 4f 42 4a 45 43 54 5f 50 52 4f 54 4f 54 59 50 45 5f 46 49 45 4c 44 53 5f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 72 3d 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 4f 42 4a 45 43 54 5f 50 52 4f 54 4f 54 59 50 45 5f 46 49 45 4c 44 53 5f 5b 6e 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 7d 2c 67 6f 6f 67 2e 74 61 67 55 6e 73 65 61 6c 61 62 6c 65 43 6c 61 73 73 3d 66 75 6e Data Ascii: t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);for(var n=0;n<goog.defineClass.OBJECT_PROTOTYPE_FIELDS_.length;n++)r=goog.defineClass.OBJECT_PROTOTYPE_FIELDS_[n],Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},goog.tagUnsealableClass=fun
2024-05-15 22:36:17 UTC	16360	IN	Data Raw: 67 6f 6f 67 2e 64 65 62 75 67 4c 6f 61 64 65 72 5f 2e 6c 6f 61 64 43 6c 6f 73 75 72 65 44 65 70 73 28 29 2c 67 6f 6f 67 2e 62 6f 6f 74 73 74 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 67 6f 6f 67 2e 64 65 62 75 67 4c 6f 61 64 65 72 5f 2e 62 6f 6f 74 73 74 72 61 70 28 65 2c 74 29 7d 29 2c 67 6f 6f 67 2e 54 52 55 53 54 45 44 5f 54 59 50 45 53 5f 50 4f 4c 49 43 59 5f 4e 41 4d 45 3d 22 22 2c 67 6f 6f 67 2e 69 64 65 6e 74 69 74 79 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 67 6f 6f 67 2e 63 72 65 61 74 65 54 72 75 73 74 65 64 54 79 70 65 73 50 6f 6c 69 63 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 2c 72 3d 67 6f 6f 67 2e 67 6c 6f 62 61 6c 2e 74 72 75 73 74 65 64 54 79 70 65 73 7c 7c 67 6f 6f Data Ascii: goog.debugLoader_.loadClosureDeps(),goog.bootstrap=function(e,t){goog.debugLoader_.bootstrap(e,t)}),goog.TRUSTED_TYPES_POLICY_NAME="",goog.identity_=function(e){return e},goog.createTrustedTypesPolicy=function(e){var t=null,r=goog.global.trustedTypes\|\|goo
2024-05-15 22:36:18 UTC	16384	IN	Data Raw: 37 66 66 30 0d 0a 67 2e 61 72 72 61 79 2e 69 73 45 6d 70 74 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 65 2e 6c 65 6e 67 74 68 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 66 6f 72 28 76 61 72 20 74 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 74 3b 74 2d 2d 29 64 65 6c 65 74 65 20 65 5b 74 5d 3b 65 2e 6c 65 6e 67 74 68 3d 30 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 69 6e 73 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 67 6f 6f 67 2e 61 72 72 61 79 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 74 29 7c 7c 65 2e 70 75 73 68 28 74 29 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 69 6e 73 65 72 74 41 74 3d 66 75 6e 63 74 69 6f 6e Data Ascii: 7ff0g.array.isEmpty=function(e){return 0==e.length},goog.array.clear=function(e){if(!Array.isArray(e))for(var t=e.length-1;0<=t;t--)delete e[t];e.length=0},goog.array.insert=function(e,t){goog.array.contains(e,t)\|\|e.push(t)},goog.array.insertAt=function
2024-05-15 22:36:18 UTC	16376	IN	Data Raw: 52 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 48 54 4d 4c 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 48 54 4d 4c 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 49 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 49 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 49 46 52 41 4d 45 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 49 46 52 41 4d 45 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 49 4d 47 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 49 4d 47 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 49 4e 50 55 54 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 49 4e 50 55 54 22 Data Ascii: R"),goog.dom.TagName.HTML=new goog.dom.TagName("HTML"),goog.dom.TagName.I=new goog.dom.TagName("I"),goog.dom.TagName.IFRAME=new goog.dom.TagName("IFRAME"),goog.dom.TagName.IMG=new goog.dom.TagName("IMG"),goog.dom.TagName.INPUT=new goog.dom.TagName("INPUT"
2024-05-15 22:36:18 UTC	16384	IN	Data Raw: 37 66 66 30 0d 0a 67 2e 69 31 38 6e 2e 62 69 64 69 2e 44 69 72 2e 4c 54 52 3a 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 44 69 72 2e 4e 45 55 54 52 41 4c 3a 72 2f 6e 3e 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 72 74 6c 44 65 74 65 63 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 5f 3f 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 44 69 72 2e 52 54 4c 3a 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 44 69 72 2e 4c 54 52 7d 2c 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 64 65 74 65 63 74 52 74 6c 44 69 72 65 63 74 69 6f 6e 61 6c 69 74 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 65 73 74 69 6d 61 74 65 44 69 72 65 63 74 69 6f 6e 28 65 2c 74 29 3d 3d 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 Data Ascii: 7ff0g.i18n.bidi.Dir.LTR:goog.i18n.bidi.Dir.NEUTRAL:r/n>goog.i18n.bidi.rtlDetectionThreshold_?goog.i18n.bidi.Dir.RTL:goog.i18n.bidi.Dir.LTR},goog.i18n.bidi.detectRtlDirectionality=function(e,t){return goog.i18n.bidi.estimateDirection(e,t)==goog.i18n.bidi
2024-05-15 22:36:18 UTC	16376	IN	Data Raw: 61 66 65 53 74 79 6c 65 22 29 7d 2c 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 53 74 79 6c 65 2e 63 72 65 61 74 65 53 61 66 65 53 74 79 6c 65 53 65 63 75 72 69 74 79 50 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 65 73 73 4f 72 45 6c 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 53 74 79 6c 65 29 2e 69 6e 69 74 53 65 63 75 72 69 74 79 50 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 65 73 73 4f 72 45 6c 73 65 5f 28 65 29 7d 2c 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 53 74 79 6c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 53 65 63 75 72 69 74 79 50 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 65 73 73 4f 72 45 6c 73 65 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: afeStyle")},goog.html.SafeStyle.createSafeStyleSecurityPrivateDoNotAccessOrElse=function(e){return(new goog.html.SafeStyle).initSecurityPrivateDoNotAccessOrElse_(e)},goog.html.SafeStyle.prototype.initSecurityPrivateDoNotAccessOrElse_=function(e){return th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49762	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:16 UTC	687	OUT	GET /public/javascript/applications/community/main.js?v=soQOTmUzl-9y&l=english HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:17 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:16 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15544959 Expires: Mon, 11 Nov 2024 20:38:55 GMT
2024-05-15 22:36:17 UTC	16113	IN	Data Raw: 33 65 65 39 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 37 36 34 33 30 3a 28 65 2c 74 2c Data Ascii: 3ee9/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[179],{76430:(e,t,
2024-05-15 22:36:17 UTC	16384	IN	Data Raw: 33 66 66 38 0d 0a 6c 69 64 65 72 54 72 61 63 6b 44 61 72 6b 3a 22 5f 33 55 49 55 44 68 32 71 31 6e 58 44 61 48 62 57 4f 4c 43 49 4c 48 22 2c 53 6c 69 64 65 72 48 61 6e 64 6c 65 43 6f 6e 74 61 69 6e 65 72 3a 22 5f 31 70 51 5a 69 6b 6c 44 6c 32 78 58 69 4e 73 5a 36 55 76 79 5f 61 22 2c 56 65 72 74 69 63 61 6c 4c 69 6e 65 53 6c 69 64 65 72 48 61 6e 64 6c 65 43 6f 6e 74 61 69 6e 65 72 3a 22 5f 31 6c 51 7a 32 6a 61 70 58 4c 52 48 6c 64 74 52 37 2d 5a 44 5a 6c 22 2c 50 61 72 65 6e 53 6c 69 64 65 72 48 61 6e 64 6c 65 43 6f 6e 74 61 69 6e 65 72 3a 22 5f 33 75 62 61 4d 75 49 4e 62 33 42 32 53 6f 6d 44 36 68 38 66 65 36 22 2c 53 6c 69 64 65 72 48 61 6e 64 6c 65 3a 22 5f 32 79 56 4b 6a 6c 41 56 57 33 74 78 6b 47 6d 56 70 58 39 47 38 69 22 2c 53 6c 69 64 65 72 48 61 Data Ascii: 3ff8liderTrackDark:"_3UIUDh2q1nXDaHbWOLCILH",SliderHandleContainer:"_1pQZiklDl2xXiNsZ6Uvy_a",VerticalLineSliderHandleContainer:"_1lQz2japXLRHldtR7-ZDZl",ParenSliderHandleContainer:"_3ubaMuINb3B2SomD6h8fe6",SliderHandle:"_2yVKjlAVW3txkGmVpX9G8i",SliderHa
2024-05-15 22:36:17 UTC	16369	IN	Data Raw: 33 66 65 39 0d 0a 6e 43 6c 6f 73 65 48 61 6e 64 6c 65 72 28 7b 63 6f 6e 6e 65 63 74 69 6f 6e 3a 74 68 69 73 2c 62 45 72 72 6f 72 3a 21 30 2c 62 49 73 45 78 70 65 63 74 65 64 54 6f 52 65 63 6f 6e 6e 65 63 74 3a 21 31 7d 29 3b 74 68 69 73 2e 4c 6f 67 2e 49 6e 66 6f 28 22 72 65 63 6f 6e 6e 65 63 74 20 73 75 63 63 65 73 73 66 75 6c 22 29 2c 74 68 69 73 2e 6d 5f 66 6e 4f 6e 52 65 63 6f 6e 6e 65 63 74 46 69 6e 69 73 68 48 61 6e 64 6c 65 72 28 7b 63 6f 6e 6e 65 63 74 69 6f 6e 3a 74 68 69 73 2c 65 52 65 73 75 6c 74 3a 31 7d 29 7d 29 29 7d 43 6f 6e 6e 65 63 74 54 6f 53 6f 63 6b 65 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 69 66 28 6e 75 6c 6c 21 Data Ascii: 3fe9nCloseHandler({connection:this,bError:!0,bIsExpectedToReconnect:!1});this.Log.Info("reconnect successful"),this.m_fnOnReconnectFinishHandler({connection:this,eResult:1})}))}ConnectToSocket(e,t){return(0,o.mG)(this,void 0,void 0,(function*(){if(null!
2024-05-15 22:36:17 UTC	15	IN	Data Raw: 33 66 66 30 0d 0a 7d 42 53 68 6f 75 6c 64 52 Data Ascii: 3ff0}BShouldR
2024-05-15 22:36:17 UTC	16384	IN	Data Raw: 65 6e 64 65 72 4d 6f 75 73 65 4f 76 65 72 6c 61 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 4d 65 6e 75 26 26 21 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 4d 65 6e 75 2e 6f 70 74 69 6f 6e 73 2e 62 44 69 73 61 62 6c 65 4d 6f 75 73 65 4f 76 65 72 6c 61 79 7d 53 68 6f 77 4d 65 6e 75 28 65 29 7b 69 66 28 65 2e 42 49 73 53 75 62 4d 65 6e 75 28 29 29 74 68 69 73 2e 6d 5f 72 67 41 63 74 69 76 65 53 75 62 6d 65 6e 75 73 2e 70 75 73 68 28 65 29 3b 65 6c 73 65 7b 69 66 28 65 3d 3d 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 4d 65 6e 75 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 4d 65 6e 75 26 26 28 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 4d 65 6e 75 2e 6f 70 74 69 6f 6e 73 2e 62 52 65 74 61 69 6e 4f 6e 48 69 64 65 26 26 74 68 Data Ascii: enderMouseOverlay(){return this.m_ActiveMenu&&!this.m_ActiveMenu.options.bDisableMouseOverlay}ShowMenu(e){if(e.BIsSubMenu())this.m_rgActiveSubmenus.push(e);else{if(e==this.m_ActiveMenu)return;this.m_ActiveMenu&&(this.m_ActiveMenu.options.bRetainOnHide&&th
2024-05-15 22:36:18 UTC	16361	IN	Data Raw: 6d 5f 6d 61 70 50 6f 70 75 70 73 2e 76 61 6c 75 65 73 28 29 7d 47 65 74 50 6f 70 75 70 46 6f 72 57 69 6e 64 6f 77 28 65 29 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 74 68 69 73 2e 6d 5f 6d 61 70 50 6f 70 75 70 73 2e 76 61 6c 75 65 73 28 29 29 69 66 28 74 2e 77 69 6e 64 6f 77 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 7d 43 6c 6f 73 65 50 6f 70 75 70 73 4f 77 6e 65 64 42 79 42 72 6f 77 73 65 72 28 65 29 7b 74 68 69 73 2e 6d 5f 6d 61 70 50 6f 70 75 70 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 2e 62 72 6f 77 73 65 72 5f 69 6e 66 6f 26 26 74 2e 62 72 6f 77 73 65 72 5f 69 6e 66 6f 2e 6d 5f 6e 42 72 6f 77 73 65 72 49 44 3d 3d 65 2e 6d 5f 6e 42 72 6f 77 73 65 72 49 44 26 26 74 2e 62 72 6f 77 73 65 72 5f 69 6e 66 6f 2e 6d 5f 75 6e 50 49 44 3d 3d 65 2e 6d Data Ascii: m_mapPopups.values()}GetPopupForWindow(e){for(const t of this.m_mapPopups.values())if(t.window===e)return t}ClosePopupsOwnedByBrowser(e){this.m_mapPopups.forEach((t=>{t.browser_info&&t.browser_info.m_nBrowserID==e.m_nBrowserID&&t.browser_info.m_unPID==e.m
2024-05-15 22:36:18 UTC	16384	IN	Data Raw: 37 66 65 38 0d 0a 29 3b 6c 65 74 20 53 3d 73 2c 4d 3d 70 7c 7c 7b 7d 3b 61 26 26 63 2e 63 75 72 72 65 6e 74 26 26 28 61 2e 42 57 61 6e 74 73 46 6f 63 75 73 52 69 6e 67 28 29 7c 7c 28 53 3d 21 31 29 29 2c 61 21 3d 64 26 26 28 6d 28 61 29 2c 77 2e 63 75 72 72 65 6e 74 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2c 45 28 29 2c 66 26 26 43 28 21 31 29 29 2c 6f 2e 75 73 65 45 66 66 65 63 74 28 28 28 29 3d 3e 7b 69 66 28 21 53 7c 7c 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 77 2e 63 75 72 72 65 6e 74 3e 35 30 30 29 72 65 74 75 72 6e 3b 6c 65 74 20 65 3b 63 6f 6e 73 74 20 74 3d 28 29 3d 3e 7b 65 3d 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 28 29 3d 3e 7b 45 28 29 3f 43 28 21 30 29 3a 70 65 72 66 6f 72 6d 61 6e 63 Data Ascii: 7fe8);let S=s,M=p\|\|{};a&&c.current&&(a.BWantsFocusRing()\|\|(S=!1)),a!=d&&(m(a),w.current=performance.now(),E(),f&&C(!1)),o.useEffect((()=>{if(!S\|\|performance.now()-w.current>500)return;let e;const t=()=>{e=requestAnimationFrame((()=>{E()?C(!0):performanc
2024-05-15 22:36:18 UTC	16368	IN	Data Raw: 75 72 6e 20 6e 7d 7d 44 65 73 74 72 6f 79 28 65 29 7b 65 3d 3d 74 68 69 73 2e 6d 5f 72 6f 6f 74 57 69 6e 64 6f 77 3f 28 70 28 60 24 7b 74 68 69 73 2e 4c 6f 67 4e 61 6d 65 28 65 29 7d 20 44 65 73 74 72 6f 79 69 6e 67 20 63 6f 6e 74 65 78 74 20 66 6f 72 20 77 69 6e 64 6f 77 60 29 2c 74 68 69 73 2e 6d 5f 62 4d 6f 75 6e 74 65 64 3d 21 31 2c 74 68 69 73 2e 6d 5f 73 63 68 44 65 66 65 72 72 65 64 41 63 74 69 76 61 74 65 2e 43 61 6e 63 65 6c 28 29 2c 74 68 69 73 2e 53 65 74 41 63 74 69 76 65 28 21 31 2c 65 29 29 3a 70 28 60 24 7b 74 68 69 73 2e 4c 6f 67 4e 61 6d 65 28 65 29 7d 20 43 68 69 6c 64 20 77 69 6e 64 6f 77 20 64 65 73 74 72 6f 79 65 64 60 29 7d 53 65 74 41 63 74 69 76 65 28 65 2c 74 2c 6e 3d 76 6f 69 64 20 30 29 7b 74 68 69 73 2e 6d 5f 63 6f 6e 74 72 6f Data Ascii: urn n}}Destroy(e){e==this.m_rootWindow?(p(`${this.LogName(e)} Destroying context for window`),this.m_bMounted=!1,this.m_schDeferredActivate.Cancel(),this.SetActive(!1,e)):p(`${this.LogName(e)} Child window destroyed`)}SetActive(e,t,n=void 0){this.m_contro
2024-05-15 22:36:18 UTC	16384	IN	Data Raw: 37 66 66 38 0d 0a 6c 69 64 20 61 78 69 73 20 24 7b 65 7d 60 29 2c 6f 3d 30 29 2c 6f 3c 30 3f 30 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 20 6f 3d 74 5b 65 5d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 78 22 3d 3d 65 3f 7b 6d 69 6e 3a 74 2e 78 2c 6d 61 78 3a 74 2e 78 2b 74 2e 77 69 64 74 68 7d 3a 7b 6d 69 6e 3a 74 2e 79 2c 6d 61 78 3a 74 2e 79 2b 74 2e 68 65 69 67 68 74 7d 7d 28 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6f 3c 69 2e 6d 69 6e 3f 69 2e 6d 69 6e 2d 6f 3a 6f 3e 69 2e 6d 61 78 3f 6f 2d 69 2e 6d 61 78 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 7b 78 3a 65 2e 78 2c 79 3a 65 2e 79 7d 7d 63 6f 6e 73 74 20 76 3d 7b 4f 6e 42 6c 75 72 3a 28 29 3d 3e 7b 7d 2c 4f 6e 46 Data Ascii: 7ff8lid axis ${e}`),o=0),o<0?0:o}function p(e,t,n){const o=t[e],i=function(e,t){return"x"==e?{min:t.x,max:t.x+t.width}:{min:t.y,max:t.y+t.height}}(e,n);return o<i.min?i.min-o:o>i.max?o-i.max:0}function g(e){return{x:e.x,y:e.y}}const v={OnBlur:()=>{},OnF
2024-05-15 22:36:18 UTC	16384	IN	Data Raw: 28 65 29 3b 28 30 2c 73 2e 58 29 28 2d 31 21 3d 3d 74 2c 22 43 68 69 6c 64 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 74 6f 20 72 65 6d 6f 76 65 22 29 2c 2d 31 21 3d 3d 74 26 26 28 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 43 68 69 6c 64 3d 3d 65 26 26 28 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 43 68 69 6c 64 3d 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 6d 5f 72 67 43 68 69 6c 64 72 65 6e 2e 73 70 6c 69 63 65 28 74 2c 31 29 29 7d 55 6e 72 65 67 69 73 74 65 72 44 4f 4d 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 6d 5f 72 67 4e 61 76 69 67 61 74 69 6f 6e 48 61 6e 64 6c 65 72 73 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 65 28 29 29 29 2c 74 68 69 73 2e 6d 5f 72 67 4e 61 76 69 67 61 74 69 6f 6e 48 61 6e 64 6c 65 72 73 3d 5b 5d 2c 74 68 69 73 2e 6d 5f 72 67 46 6f 63 75 Data Ascii: (e);(0,s.X)(-1!==t,"Child was not found to remove"),-1!==t&&(this.m_ActiveChild==e&&(this.m_ActiveChild=void 0),this.m_rgChildren.splice(t,1))}UnregisterDOMEvents(){this.m_rgNavigationHandlers.forEach((e=>e())),this.m_rgNavigationHandlers=[],this.m_rgFocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49764	47.57.233.162	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:16 UTC	511	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
2024-05-15 22:36:17 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:17 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:36:17 UTC	3784	IN	Data Raw: 65 63 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 Data Ascii: ec1PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@
2024-05-15 22:36:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49763	47.57.233.162	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:16 UTC	507	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
2024-05-15 22:36:17 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:17 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:36:17 UTC	1853	IN	Data Raw: 37 33 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 Data Ascii: 736PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56
2024-05-15 22:36:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49765	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:17 UTC	725	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b
2024-05-15 22:36:18 UTC	187	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:18 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-05-15 22:36:18 UTC	3691	IN	Data Raw: 65 36 34 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 Data Ascii: e64<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="
2024-05-15 22:36:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49766	47.57.233.162	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:17 UTC	522	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
2024-05-15 22:36:18 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:18 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:36:18 UTC	298	IN	Data Raw: 31 32 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 Data Ascii: 123PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %
2024-05-15 22:36:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49767	47.57.233.162	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:17 UTC	501	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
2024-05-15 22:36:18 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:18 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:36:18 UTC	10871	IN	Data Raw: 32 61 36 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af Data Ascii: 2a6fPNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj
2024-05-15 22:36:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49768	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:18 UTC	742	OUT	GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
2024-05-15 22:36:19 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:19 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:36:19 UTC	3744	IN	Data Raw: 65 39 39 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 1a 08 06 00 00 00 48 21 59 9f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 Data Ascii: e99PNGIHDR`H!YpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\
2024-05-15 22:36:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49769	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:19 UTC	757	OUT	GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gtm.you1.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://gtm.you1.cn/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
2024-05-15 22:36:20 UTC	220	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:19 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-05-15 22:36:20 UTC	16164	IN	Data Raw: 37 65 66 39 0d 0a 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 e4 88 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 89 ce b2 88 00 00 01 6c 00 00 75 9a 47 53 55 42 e1 64 c1 db 00 00 77 08 00 00 1b a4 4f 53 2f 32 75 9a 9f 11 00 00 92 ac 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 93 0c 00 00 05 8e 63 76 74 20 47 bc 0a 74 00 01 d4 d0 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d5 98 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 d4 c8 00 00 00 08 67 6c 79 66 35 8e 7d 32 00 00 98 9c 00 01 06 e4 68 65 61 64 17 e9 fb 57 00 01 9f 80 00 00 00 36 68 68 65 61 06 f4 06 76 00 01 9f b8 00 00 00 24 68 6d 74 78 a2 5f 58 e0 00 01 9f dc 00 00 0c e6 6c 6f 63 61 ba 3a 79 56 00 01 ac c4 00 00 06 a6 6d 61 78 70 04 a0 0f 0c 00 01 b3 6c 00 Data Ascii: 7ef9 DSIGGDEF4,@GPOSluGSUBdwOS/2u`cmapdcvt Gtfpgm6!gaspglyf5}2headW6hheav$hmtx_Xloca:yVmaxpl
2024-05-15 22:36:20 UTC	16349	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e5 ff fb 00 09 00 00 00 0e 00 00 00 13 00 05 00 00 00 00 00 00 00 00 ff b7 ff c8 00 00 00 00 00 00 00 00 00 00 ff ae 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e7 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 21 00 05 00 2b 00 17 00 2f 00 17 00 00 00 00 00 00 00 00 ff fb 00 00 00 00 00 00 00 00 00 Data Ascii: !+/
2024-05-15 22:36:20 UTC	16377	IN	Data Raw: 33 66 66 31 0d 0a 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 16 00 00 00 01 Data Ascii: 3ff1
2024-05-15 22:36:20 UTC	7	IN	Data Raw: 33 66 66 37 0d 0a 11 Data Ascii: 3ff7
2024-05-15 22:36:20 UTC	16384	IN	Data Raw: 14 06 23 01 4b 57 6e 2e a3 21 21 1a 1a 21 21 1a a7 21 21 1b 1a 1f 20 19 dc 9c 7e 4f 49 49 50 7d 9c 7a 03 7e 6e 6e 92 1e 1d 1e 1d 1d 1e 1d 1e 1e 1d 1e 1d 1d 1e 1d 1e fd 05 83 89 01 bf fe 42 49 4f 4f 49 01 be fe 41 89 83 00 04 00 51 ff f1 02 7d 03 cd 00 03 00 0f 00 1b 00 2d 00 49 40 46 00 00 00 01 02 00 01 67 04 01 02 0b 05 0a 03 03 06 02 03 69 08 01 06 06 48 4d 00 07 07 09 61 0c 01 09 09 51 09 4e 1c 1c 10 10 04 04 1c 2d 1c 2c 29 28 25 23 20 1f 10 1b 10 1a 16 14 04 0f 04 0e 25 11 10 0d 0a 19 2b 13 21 15 21 16 26 35 34 36 33 32 16 15 14 06 23 32 26 35 34 36 33 32 16 15 14 06 23 02 26 35 11 33 11 14 16 33 32 36 35 11 33 11 14 06 23 e7 01 01 fe ff 06 21 21 1a 1a 21 21 1a a7 21 21 1b 1a 1f 20 19 dc 9c 7e 4f 49 49 50 7d 9c 7a 03 cd 40 a1 1e 1d 1e 1d 1d 1e 1d 1e Data Ascii: #KWn.!!!!!! ~OIIP}z~nnBIOOIAQ}-I@FgiHMaQN-,)(%# %+!!&54632#2&54632#&5332653#!!!!!! ~OIIP}z@
2024-05-15 22:36:20 UTC	16360	IN	Data Raw: 04 0a 09 08 07 06 00 03 00 03 11 0c 08 17 2b 01 17 23 27 17 27 07 23 37 33 17 13 23 27 23 07 23 13 33 07 07 33 01 a7 2e 45 57 1d 34 33 65 76 47 70 7b 75 26 eb 26 74 d1 7d 3f 56 ad 03 5f 6e 6e e1 2f 2f 6e 6e fd 82 6e 6e 02 39 74 fd ff ff 00 12 00 00 02 32 03 6b 00 22 01 77 00 00 01 07 03 50 01 ce 00 2d 00 08 b1 02 02 b0 2d b0 35 2b 00 00 00 04 00 12 00 00 02 32 03 7a 00 16 00 1d 00 25 00 28 00 b1 40 16 0f 01 01 00 02 01 02 03 01 01 05 02 18 01 04 05 04 4c 0e 01 00 4a 4b b0 09 50 58 40 35 00 05 02 04 02 05 04 80 0d 06 02 04 0a 02 04 70 00 00 0c 01 03 02 00 03 69 00 01 00 02 05 01 02 69 00 0b 00 08 07 0b 08 68 00 0a 0a 2c 4d 09 01 07 07 2d 07 4e 1b 40 36 00 05 02 04 02 05 04 80 0d 06 02 04 0a 02 04 0a 7e 00 00 0c 01 03 02 00 03 69 00 01 00 02 05 01 02 69 00 Data Ascii: +#''#73#'##33.EW43evGp{u&&t}?V_nn//nnnn9t2k"wP--5+2z%(@LJKPX@5piih,M-N@6~ii
2024-05-15 22:36:20 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 14 06 06 23 22 26 35 34 36 36 33 02 06 07 16 16 33 32 36 35 34 26 23 01 b1 67 28 39 1f 52 2d 4d 65 03 27 59 39 3d 6a 41 42 76 4b 86 96 53 8a 55 43 4c 1c 04 4b 3e 3e 4d 4a 3b 02 c8 1e 1a 60 13 17 6f 7c 25 28 30 61 44 45 6f 3f b0 b2 7d a6 4f fe 8d 29 23 4f 59 47 39 37 3d 00 00 01 00 3e 00 00 02 48 02 bd 00 06 00 1f 40 1c 02 01 01 02 01 4c 00 02 02 00 5f 00 00 00 48 4d 00 01 01 49 01 4e 11 12 10 03 0a 19 2b 13 21 17 01 23 01 21 3e 02 08 02 fe dd 91 01 2b fe 7f 02 bd 77 fd ba 02 4a 00 00 00 03 00 39 ff f1 02 56 02 c8 00 1b 00 27 00 33 00 44 40 41 14 06 02 05 02 01 4c 00 02 08 01 05 04 02 05 69 07 01 03 03 01 61 06 01 01 01 50 4d 00 04 04 00 61 00 00 00 51 00 4e 28 28 1c 1c 00 00 28 33 28 32 2e 2c 1c 27 1c 26 22 20 00 1b 00 1a 2c 09 0a 17 2b Data Ascii: 7fe0#"&5466332654&#g(9R-Me'Y9=jABvKSUCLK>>MJ;`o\|%(0aDEo?}O)#OYG97=>H@L_HMIN+!#!>+wJ9V'3D@ALiaPMaQN(((3(2.,'&" ,+
2024-05-15 22:36:20 UTC	16360	IN	Data Raw: 04 00 02 69 00 04 00 05 06 04 05 69 00 06 0a 01 07 03 06 07 69 09 01 03 01 01 03 59 09 01 03 03 01 61 08 01 01 03 01 51 20 20 10 10 00 00 20 38 20 37 33 31 2d 2b 27 25 10 1f 10 1e 18 16 00 0f 00 0e 26 0b 0a 17 2b b1 06 00 44 04 26 26 35 34 36 36 33 32 16 16 15 14 06 06 23 3e 02 35 34 26 26 23 22 06 06 15 14 16 16 33 26 26 35 34 36 36 33 32 17 07 26 26 23 22 06 15 14 16 33 32 37 17 06 06 23 01 32 a6 63 63 a6 62 62 a6 63 63 a6 62 52 85 4d 4d 85 52 51 86 4d 4d 85 52 4e 68 32 53 32 48 38 1d 18 2c 1d 33 3e 42 34 35 29 21 19 3e 2d 0f 5a a6 6d 6d a6 59 59 a6 6d 6d a6 5a 45 49 86 59 59 86 48 49 87 57 59 86 49 6e 64 5a 3d 55 2a 29 39 10 0f 3e 38 39 42 21 3a 15 18 00 04 00 29 ff f1 02 ff 02 ca 00 0f 00 1f 00 2d 00 35 00 6c b1 06 64 44 40 61 26 01 06 08 01 4c 07 01 Data Ascii: iiiYaQ 8 731-+'%&+D&&546632#>54&&#"3&&546632&&#"327#2ccbbccbRMMRQMMRNh2S2H8,3>B45)!>-ZmmYYmmZEIYYHIWYIndZ=U*)9>89B!:)-5ldD@a&L
2024-05-15 22:36:20 UTC	9711	IN	Data Raw: 32 35 65 37 0d 0a 72 65 76 65 06 45 63 61 72 6f 6e 07 75 6e 69 31 45 42 45 07 75 6e 69 31 45 43 36 07 75 6e 69 31 45 43 30 07 75 6e 69 31 45 43 32 07 75 6e 69 31 45 43 34 0a 45 64 6f 74 61 63 63 65 6e 74 07 75 6e 69 31 45 42 38 07 75 6e 69 31 45 42 41 07 45 6d 61 63 72 6f 6e 07 45 6f 67 6f 6e 65 6b 07 75 6e 69 31 45 42 43 06 47 63 61 72 6f 6e 0b 47 63 69 72 63 75 6d 66 6c 65 78 07 75 6e 69 30 31 32 32 0a 47 64 6f 74 61 63 63 65 6e 74 04 48 62 61 72 0b 48 63 69 72 63 75 6d 66 6c 65 78 02 49 4a 06 49 62 72 65 76 65 07 75 6e 69 30 31 43 46 07 75 6e 69 31 45 43 41 07 75 6e 69 31 45 43 38 07 49 6d 61 63 72 6f 6e 07 49 6f 67 6f 6e 65 6b 06 49 74 69 6c 64 65 0b 75 6e 69 30 30 34 41 30 33 30 31 0b 4a 63 69 72 63 75 6d 66 6c 65 78 07 75 6e 69 30 31 33 36 06 4c 61 Data Ascii: 25e7reveEcaronuni1EBEuni1EC6uni1EC0uni1EC2uni1EC4Edotaccentuni1EB8uni1EBAEmacronEogonekuni1EBCGcaronGcircumflexuni0122GdotaccentHbarHcircumflexIJIbreveuni01CFuni1ECAuni1EC8ImacronIogonekItildeuni004A0301Jcircumflexuni0136La
2024-05-15 22:36:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49770	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:19 UTC	758	OUT	GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gtm.you1.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://gtm.you1.cn/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
2024-05-15 22:36:20 UTC	220	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:19 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-05-15 22:36:20 UTC	16137	IN	Data Raw: 33 66 30 31 0d 0a 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 df 34 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 3a 3e 7d 8f 00 00 01 6c 00 00 75 7a 47 53 55 42 e1 64 c1 db 00 00 76 e8 00 00 1b a4 4f 53 2f 32 75 36 9e 08 00 00 92 8c 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 92 ec 00 00 05 8e 63 76 74 20 46 bf 09 94 00 01 cf 7c 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d0 44 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 cf 74 00 00 00 08 67 6c 79 66 8a 5f 6d c2 00 00 98 7c 00 01 01 ee 68 65 61 64 17 b4 fb 48 00 01 9a 6c 00 00 00 36 68 68 65 61 06 bf 06 47 00 01 9a a4 00 00 00 24 68 6d 74 78 86 e3 6c 96 00 01 9a c8 00 00 0c e6 6c 6f 63 61 43 48 02 9a 00 01 a7 b0 00 00 06 a6 6d 61 78 70 04 a0 0f 13 00 01 ae 58 00 Data Ascii: 3f01 DSIG4GDEF4,@GPOS:>}luzGSUBdvOS/2u6`cmapdcvt F\|fpgm6!Dgasptglyf_m\|headHl6hheaG$hmtxllocaCHmaxpX
2024-05-15 22:36:20 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff df ff f8 00 05 00 00 00 07 00 00 00 09 00 02 00 00 00 00 00 00 00 00 ff b1 ff c1 00 00 00 00 00 00 00 00 00 00 ff a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ea ff fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 Data Ascii: 3ff0
2024-05-15 22:36:20 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 Data Ascii: 3ff0
2024-05-15 22:36:20 UTC	8	IN	Data Raw: 33 66 65 38 0d 0a bc 00 Data Ascii: 3fe8
2024-05-15 22:36:20 UTC	16384	IN	Data Raw: 22 00 8e 00 00 00 03 03 2e 01 f4 00 00 ff ff 00 5b ff f3 02 73 03 79 00 22 00 8e 00 00 01 07 03 22 01 d2 00 01 00 08 b1 01 01 b0 01 b0 35 2b 00 00 ff ff 00 5b ff f3 02 73 03 95 00 22 00 8e 00 00 00 03 03 2b 02 79 00 00 00 01 00 5b ff f3 02 e7 03 42 00 19 00 72 4b b0 09 50 58 40 1b 00 00 03 00 85 00 01 01 03 5f 05 01 03 03 48 4d 00 04 04 02 61 00 02 02 51 02 4e 1b 4b b0 0a 50 58 40 1c 00 00 03 03 00 70 00 01 01 03 5f 05 01 03 03 48 4d 00 04 04 02 61 00 02 02 51 02 4e 1b 40 1b 00 00 03 00 85 00 01 01 03 5f 05 01 03 03 48 4d 00 04 04 02 61 00 02 02 51 02 4e 59 59 40 09 23 23 13 23 13 10 06 0a 1c 2b 01 33 15 14 06 07 11 14 06 23 22 26 35 11 33 11 14 16 33 32 36 35 11 33 32 35 02 9b 4c 3c 38 97 75 75 97 5d 5b 54 54 5b 55 30 03 42 48 37 3d 02 fe 79 88 82 82 88 Data Ascii: ".[sy""5+[s"+y[BrKPX@_HMaQNKPX@p_HMaQN@_HMaQNYY@###+3#"&533265325L<8uu][TT[U0BH7=y
2024-05-15 22:36:20 UTC	16352	IN	Data Raw: 0f 19 13 02 20 0e 56 73 34 6d 51 38 36 01 39 5b 2b fb 2b 59 d0 63 32 64 c9 03 2e 13 14 11 28 26 0b 0a 10 17 14 16 26 28 0a 0b 01 10 ae 67 67 30 30 fd 80 7c 7c 02 39 53 fe df 00 00 00 ff ff 00 18 00 00 02 1d 02 f7 00 22 01 77 00 00 01 07 03 33 01 bb 00 2d 00 08 b1 02 02 b0 2d b0 35 2b 00 00 ff ff 00 18 ff 51 02 1d 02 39 00 22 01 77 00 00 00 03 03 41 01 a8 00 00 ff ff 00 18 00 00 02 1d 02 f5 00 22 01 77 00 00 01 07 03 35 01 84 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 ff ff 00 18 00 00 02 1d 03 13 00 22 01 77 00 00 01 07 03 3e 02 fb 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 ff ff 00 18 00 00 02 1d 02 d1 00 22 01 77 00 00 01 07 03 3d 01 bc 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 00 02 00 18 ff 2e 02 1d 02 39 00 16 00 19 00 32 40 2f 0c 01 03 02 03 01 00 03 Data Ascii: Vs4mQ869[++Yc2d.(&&(gg00\|\|9S"w3--5+Q9"wA"w5--5+"w>--5+"w=--5+.92@/
2024-05-15 22:36:20 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 29 40 26 09 08 07 03 00 03 01 4c 04 01 03 03 4b 4d 02 01 00 00 01 60 00 01 01 49 01 4e 00 00 00 0a 00 0a 11 11 11 05 0a 19 2b 01 11 33 15 21 35 33 11 07 27 37 01 85 8c fe 63 b5 96 21 d2 02 0c fe 40 4c 4c 01 5f 50 3b 76 00 00 00 01 00 60 00 00 02 27 02 19 00 18 00 33 40 30 0e 01 01 02 0d 01 03 01 03 01 00 03 03 4c 00 01 01 02 61 00 02 02 53 4d 04 01 03 03 00 5f 00 00 00 49 00 4e 00 00 00 18 00 18 25 27 11 05 0a 19 2b 25 15 21 35 3e 02 35 34 26 23 22 06 07 27 36 36 33 32 16 15 14 06 06 07 02 27 fe 39 91 8b 31 3f 37 2c 53 1f 23 29 6d 3f 59 67 38 7e 75 4d 4d 43 5c 67 42 23 31 30 1c 18 3c 1f 26 51 48 31 55 62 4b 00 00 00 01 00 31 ff 43 02 2b 02 19 00 28 00 6d 40 16 25 01 04 05 24 01 03 04 05 01 02 03 11 01 01 02 10 01 00 01 05 4c 4b b0 1d 50 Data Ascii: 7fe0)@&LKM`IN+3!53'7c!@LL_P;v`'3@0LaSM_IN%'+%!5>54&#"'6632'91?7,S#)m?Yg8~uMMC\gB#10<&QH1UbK1C+(m@%$LKP
2024-05-15 22:36:20 UTC	16360	IN	Data Raw: 00 00 01 00 23 00 00 01 6f 02 bd 00 13 00 37 40 34 05 01 01 04 01 02 03 01 02 67 00 08 08 48 4d 06 01 00 00 07 5f 0a 09 02 07 07 4b 4d 00 03 03 49 03 4e 00 00 00 13 00 13 11 11 11 11 11 11 11 11 11 0b 0a 1f 2b 01 15 23 15 33 15 23 11 23 11 23 35 33 35 23 35 33 35 33 15 01 6f 7c 7c 7c 55 7b 7b 7b 7b 55 02 16 4b 71 4c fe f2 01 0e 4c 71 4b a7 a7 00 00 00 02 00 28 00 00 03 30 02 c4 00 1a 00 2a 00 3f 40 3c 00 03 01 02 01 03 02 80 08 01 05 00 01 03 05 01 67 00 06 06 00 61 00 00 00 50 4d 00 02 02 04 61 07 01 04 04 49 04 4e 1c 1b 00 00 24 22 1b 2a 1c 29 00 1a 00 19 12 27 12 26 09 0a 1a 2b 20 26 26 35 34 36 36 33 32 16 17 21 22 06 15 15 14 16 16 33 32 36 37 33 06 06 23 13 32 36 35 35 34 26 26 23 22 06 06 15 15 14 33 01 3b b0 63 63 b1 70 ae ce 08 fd 97 08 07 41 6f Data Ascii: #o7@4gHM_KMIN+#3###535#5353o\|\|\|U{{{{UKqLLqK(0?@<gaPMaIN$")'&+ &&546632!"32673#26554&&#"3;ccpAo
2024-05-15 22:36:20 UTC	8363	IN	Data Raw: 32 30 61 33 0d 0a 72 6e 07 75 6e 69 31 45 44 42 07 75 6e 69 31 45 45 33 07 75 6e 69 31 45 44 44 07 75 6e 69 31 45 44 46 07 75 6e 69 31 45 45 31 0d 6f 68 75 6e 67 61 72 75 6d 6c 61 75 74 07 6f 6d 61 63 72 6f 6e 06 72 61 63 75 74 65 06 72 63 61 72 6f 6e 07 75 6e 69 30 31 35 37 06 73 61 63 75 74 65 0b 73 63 69 72 63 75 6d 66 6c 65 78 07 75 6e 69 30 32 31 39 04 74 62 61 72 06 74 63 61 72 6f 6e 07 75 6e 69 30 31 36 33 07 75 6e 69 30 32 31 42 06 75 62 72 65 76 65 07 75 6e 69 30 31 44 34 07 75 6e 69 30 31 44 38 07 75 6e 69 30 31 44 41 07 75 6e 69 30 31 44 43 07 75 6e 69 30 31 44 36 07 75 6e 69 31 45 45 35 07 75 6e 69 31 45 45 37 05 75 68 6f 72 6e 07 75 6e 69 31 45 45 39 07 75 6e 69 31 45 46 31 07 75 6e 69 31 45 45 42 07 75 6e 69 31 45 45 44 07 75 6e 69 31 45 45 Data Ascii: 20a3rnuni1EDBuni1EE3uni1EDDuni1EDFuni1EE1ohungarumlautomacronracutercaronuni0157sacutescircumflexuni0219tbartcaronuni0163uni021Bubreveuni01D4uni01D8uni01DAuni01DCuni01D6uni1EE5uni1EE7uhornuni1EE9uni1EF1uni1EEBuni1EEDuni1EE
2024-05-15 22:36:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49771	47.57.233.162	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:19 UTC	505	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0
2024-05-15 22:36:19 UTC	187	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:19 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-05-15 22:36:19 UTC	3691	IN	Data Raw: 65 36 34 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 Data Ascii: e64<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="
2024-05-15 22:36:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49772	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:20 UTC	783	OUT	GET /public/javascript/applications/community/localization/shared_english-json.js?contenthash=53a212bf3cf7a843dedd HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:21 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:20 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=174043 Expires: Fri, 17 May 2024 22:57:03 GMT
2024-05-15 22:36:21 UTC	16091	IN	Data Raw: 33 65 64 33 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 31 5d Data Ascii: 3ed3/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[131]
2024-05-15 22:36:21 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 74 54 79 70 65 47 72 6f 75 70 5f 73 61 6c 65 73 22 3a 22 53 61 6c 65 73 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 45 76 65 6e 74 54 79 70 65 47 72 6f 75 70 5f 74 74 69 70 5f 73 61 6c 65 73 22 3a 22 49 6e 63 6c 75 64 65 73 20 64 69 73 63 6f 75 6e 74 73 2c 20 70 72 6f 6d 6f 74 69 6f 6e 73 2c 20 61 6e 64 20 66 72 65 65 20 74 72 69 61 6c 73 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 47 61 6d 65 53 6f 75 72 63 65 5f 72 65 63 65 6e 74 22 3a 22 52 65 63 65 6e 74 6c 79 20 50 6c 61 79 65 64 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 47 61 6d 65 53 6f 75 72 63 65 5f 74 74 69 70 5f 72 65 63 65 6e 74 22 3a 22 49 6e 63 6c 75 64 65 20 70 6f 73 74 73 20 61 62 6f 75 74 20 67 61 6d 65 73 20 79 6f 75 20 68 61 76 65 20 70 6c 61 79 Data Ascii: 3ff0tTypeGroup_sales":"Sales","EventCalendar_EventTypeGroup_ttip_sales":"Includes discounts, promotions, and free trials","EventCalendar_GameSource_recent":"Recently Played","EventCalendar_GameSource_ttip_recent":"Include posts about games you have play
2024-05-15 22:36:21 UTC	16384	IN	Data Raw: 33 66 66 38 0d 0a 45 76 65 6e 74 52 65 70 6f 73 74 5f 44 69 61 6c 6f 67 5f 54 69 74 6c 65 22 3a 22 52 65 70 6f 73 74 20 45 76 65 6e 74 22 2c 22 45 76 65 6e 74 52 65 70 6f 73 74 5f 44 69 61 6c 6f 67 5f 4f 4b 22 3a 22 52 65 70 6f 73 74 22 2c 22 45 76 65 6e 74 52 65 70 6f 73 74 5f 44 69 61 6c 6f 67 5f 44 65 73 63 22 3a 22 52 65 70 6f 73 74 69 6e 67 20 69 73 20 72 65 66 65 72 65 6e 63 69 6e 67 20 74 68 65 20 65 76 65 6e 74 20 69 6e 20 74 68 65 20 6e 65 77 73 20 68 75 62 20 69 6e 20 74 68 65 20 74 69 6d 65 6c 69 6e 65 20 6f 66 20 74 68 65 20 63 68 6f 73 65 6e 20 67 72 6f 75 70 73 20 62 65 6c 6f 77 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 72 65 20 6f 74 68 65 72 20 63 6f 6d 6d 75 6e 69 74 79 20 67 72 6f 75 70 73 20 6f 72 20 61 70 70 73 20 77 68 69 63 Data Ascii: 3ff8EventRepost_Dialog_Title":"Repost Event","EventRepost_Dialog_OK":"Repost","EventRepost_Dialog_Desc":"Reposting is referencing the event in the news hub in the timeline of the chosen groups below. The following are other community groups or apps whic
2024-05-15 22:36:21 UTC	16384	IN	Data Raw: 33 66 66 30 0d 0a 73 69 6f 6e 49 6e 50 72 6f 67 72 65 73 73 22 3a 22 43 6f 6e 76 65 72 73 69 6f 6e 20 69 6e 20 70 72 6f 67 72 65 73 73 2e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 63 6c 6f 73 65 20 64 69 61 6c 6f 67 2e 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 49 6d 70 6f 72 74 46 72 6f 6d 48 54 4d 4c 5f 43 6f 6e 76 65 72 74 46 69 6e 69 73 68 65 64 22 3a 22 43 6f 6e 76 65 72 73 69 6f 6e 20 46 69 6e 69 73 68 65 64 2e 20 59 6f 75 20 63 61 6e 20 6e 6f 77 20 73 61 66 65 6c 79 20 63 6c 6f 73 65 20 74 68 69 73 20 64 69 61 6c 6f 67 2e 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 49 6e 73 65 72 74 59 6f 75 54 75 62 65 22 3a 22 49 6e 73 65 72 74 20 59 6f 75 54 75 62 65 e2 84 a2 20 56 69 64 65 6f 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 49 6e 73 65 72 74 Data Ascii: 3ff0sionInProgress":"Conversion in progress. Please do not close dialog.","EventEditor_ImportFromHTML_ConvertFinished":"Conversion Finished. You can now safely close this dialog.","EventEditor_InsertYouTube":"Insert YouTube Video","EventEditor_Insert
2024-05-15 22:36:21 UTC	16360	IN	Data Raw: 66 20 6e 65 77 20 66 72 69 65 6e 64 73 2e 22 2c 22 4d 6f 62 69 6c 65 4c 6f 67 69 6e 5f 4c 65 61 72 6e 4d 6f 72 65 41 62 6f 75 74 53 74 65 61 6d 22 3a 22 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 53 74 65 61 6d 22 2c 22 4d 6f 62 69 6c 65 4c 6f 67 69 6e 5f 45 72 72 6f 72 5f 52 61 74 65 4c 69 6d 69 74 45 78 63 65 65 64 65 64 22 3a 22 54 68 65 72 65 20 68 61 76 65 20 62 65 65 6e 20 74 6f 6f 20 6d 61 6e 79 20 6c 6f 67 69 6e 20 66 61 69 6c 75 72 65 73 20 66 72 6f 6d 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 20 69 6e 20 61 20 73 68 6f 72 74 20 74 69 6d 65 20 70 65 72 69 6f 64 2e 20 50 6c 65 61 73 65 20 77 61 69 74 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 2c 22 4c 6f 67 69 6e 5f 53 69 67 6e 49 6e 22 3a 22 53 69 67 6e 20 69 6e 22 2c Data Ascii: f new friends.","MobileLogin_LearnMoreAboutSteam":"Learn more about Steam","MobileLogin_Error_RateLimitExceeded":"There have been too many login failures from your network in a short time period. Please wait and try again later.","Login_SignIn":"Sign in",
2024-05-15 22:36:21 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 76 65 6e 74 20 53 63 68 65 64 75 6c 65 22 2c 22 53 61 6c 65 5f 53 61 6c 65 45 76 65 6e 74 5f 53 65 63 74 69 6f 6e 22 3a 22 53 70 65 63 69 61 6c 20 45 76 65 6e 74 73 22 2c 22 53 61 6c 65 5f 42 72 6f 61 64 63 61 73 74 53 63 68 65 64 75 6c 65 22 3a 22 42 72 6f 61 64 63 61 73 74 20 53 63 68 65 64 75 6c 65 22 2c 22 53 61 6c 65 5f 45 76 65 6e 74 53 63 68 65 64 75 6c 65 5f 4e 6f 55 70 63 6f 6d 69 6e 67 45 76 65 6e 74 73 22 3a 22 4e 6f 20 75 70 63 6f 6d 69 6e 67 20 65 76 65 6e 74 73 22 2c 22 53 61 6c 65 5f 45 76 65 6e 74 53 63 68 65 64 75 6c 65 5f 4e 6f 45 76 65 6e 74 73 53 63 68 65 64 75 6c 65 64 22 3a 22 4e 6f 20 65 76 65 6e 74 73 20 73 63 68 65 64 75 6c 65 64 20 79 65 74 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 22 2c 22 53 61 6c 65 5f Data Ascii: 7fe0vent Schedule","Sale_SaleEvent_Section":"Special Events","Sale_BroadcastSchedule":"Broadcast Schedule","Sale_EventSchedule_NoUpcomingEvents":"No upcoming events","Sale_EventSchedule_NoEventsScheduled":"No events scheduled yet in this section","Sale_
2024-05-15 22:36:22 UTC	16360	IN	Data Raw: 22 44 65 74 65 63 74 69 76 65 22 2c 22 53 61 6c 65 5f 64 65 66 61 75 6c 74 5f 6c 61 62 65 6c 5f 32 35 38 22 3a 22 53 6f 63 69 61 6c 20 44 65 64 75 63 74 69 6f 6e 22 2c 22 53 61 6c 65 5f 64 65 66 61 75 6c 74 5f 6c 61 62 65 6c 5f 32 35 39 22 3a 22 52 65 63 6f 6d 6d 65 6e 64 65 64 22 2c 22 53 61 6c 65 5f 64 65 66 61 75 6c 74 5f 6c 61 62 65 6c 5f 32 36 30 22 3a 22 52 65 63 6f 6d 6d 65 6e 64 65 64 20 46 6f 72 20 59 6f 75 22 2c 22 53 61 6c 65 5f 64 65 66 61 75 6c 74 5f 6c 61 62 65 6c 5f 32 36 31 22 3a 22 44 69 73 63 6f 75 6e 74 65 64 22 2c 22 53 61 6c 65 5f 64 65 66 61 75 6c 74 5f 6c 61 62 65 6c 5f 32 36 32 22 3a 22 53 74 65 61 6d 20 44 65 63 6b 22 2c 22 53 61 6c 65 5f 64 65 66 61 75 6c 74 5f 6c 61 62 65 6c 5f 32 36 33 22 3a 22 53 70 65 63 69 61 6c 20 45 76 65 Data Ascii: "Detective","Sale_default_label_258":"Social Deduction","Sale_default_label_259":"Recommended","Sale_default_label_260":"Recommended For You","Sale_default_label_261":"Discounted","Sale_default_label_262":"Steam Deck","Sale_default_label_263":"Special Eve
2024-05-15 22:36:22 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 20 74 68 65 20 59 65 61 72 22 2c 22 70 72 6f 6d 6f 5f 73 74 65 61 6d 61 77 61 72 64 73 32 30 32 30 5f 63 61 74 35 31 22 3a 22 56 52 20 47 61 6d 65 20 6f 66 20 74 68 65 20 59 65 61 72 22 2c 22 70 72 6f 6d 6f 5f 73 74 65 61 6d 61 77 61 72 64 73 32 30 32 30 5f 63 61 74 35 32 22 3a 22 4c 61 62 6f 72 20 6f 66 20 4c 6f 76 65 22 2c 22 70 72 6f 6d 6f 5f 73 74 65 61 6d 61 77 61 72 64 73 32 30 32 30 5f 63 61 74 35 33 22 3a 22 42 65 74 74 65 72 20 57 69 74 68 20 46 72 69 65 6e 64 73 22 2c 22 70 72 6f 6d 6f 5f 73 74 65 61 6d 61 77 61 72 64 73 32 30 32 30 5f 63 61 74 35 34 22 3a 22 4f 75 74 73 74 61 6e 64 69 6e 67 20 56 69 73 75 61 6c 20 53 74 79 6c 65 22 2c 22 70 72 6f 6d 6f 5f 73 74 65 61 6d 61 77 61 72 64 73 32 30 32 30 5f 63 61 74 35 35 22 3a 22 Data Ascii: 7fe0 the Year","promo_steamawards2020_cat51":"VR Game of the Year","promo_steamawards2020_cat52":"Labor of Love","promo_steamawards2020_cat53":"Better With Friends","promo_steamawards2020_cat54":"Outstanding Visual Style","promo_steamawards2020_cat55":"
2024-05-15 22:36:22 UTC	16360	IN	Data Raw: 6c 20 61 77 61 72 64 20 61 6e 64 20 67 72 61 6e 74 20 74 68 65 20 61 75 74 68 6f 72 20 62 6f 6e 75 73 20 70 6f 69 6e 74 73 21 22 2c 22 47 72 61 6e 74 41 77 61 72 64 44 65 73 63 72 69 70 74 69 6f 6e 5f 43 6f 6d 6d 65 6e 74 22 3a 22 55 73 65 20 79 6f 75 72 20 53 74 65 61 6d 20 50 6f 69 6e 74 73 20 74 6f 20 67 72 61 6e 74 20 74 68 69 73 20 63 6f 6d 6d 65 6e 74 20 61 20 73 70 65 63 69 61 6c 20 61 77 61 72 64 20 61 6e 64 20 67 72 61 6e 74 20 74 68 65 20 61 75 74 68 6f 72 20 62 6f 6e 75 73 20 70 6f 69 6e 74 73 21 22 2c 22 47 72 61 6e 74 41 77 61 72 64 4e 6f 77 42 75 74 74 6f 6e 22 3a 22 47 69 76 65 20 41 77 61 72 64 22 2c 22 47 72 61 6e 74 41 77 61 72 64 5f 50 6f 69 6e 74 73 4c 69 6e 6b 22 3a 22 57 68 61 74 20 61 72 65 20 53 74 65 61 6d 20 50 6f 69 6e 74 73 3f Data Ascii: l award and grant the author bonus points!","GrantAwardDescription_Comment":"Use your Steam Points to grant this comment a special award and grant the author bonus points!","GrantAwardNowButton":"Give Award","GrantAward_PointsLink":"What are Steam Points?
2024-05-15 22:36:22 UTC	16384	IN	Data Raw: 37 66 64 39 0d 0a 73 20 73 74 69 6c 6c 20 77 6f 72 6b 69 6e 67 20 6f 6e 20 61 64 64 69 6e 67 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 68 69 73 20 67 61 6d 65 20 6f 6e 20 53 74 65 61 6d 20 44 65 63 6b 22 2c 22 53 74 65 61 6d 44 65 63 6b 56 65 72 69 66 69 65 64 5f 54 65 73 74 52 65 73 75 6c 74 5f 53 74 65 61 6d 4f 53 44 6f 65 73 4e 6f 74 53 75 70 70 6f 72 74 5f 56 52 22 3a 22 53 74 65 61 6d 20 44 65 63 6b 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 56 52 20 67 61 6d 65 73 22 2c 22 53 74 65 61 6d 44 65 63 6b 56 65 72 69 66 69 65 64 5f 54 65 73 74 52 65 73 75 6c 74 5f 53 74 65 61 6d 4f 53 44 6f 65 73 4e 6f 74 53 75 70 70 6f 72 74 5f 53 6f 66 74 77 61 72 65 22 3a 22 54 68 69 73 20 69 73 20 61 20 53 6f 66 74 77 61 72 65 20 74 69 74 6c 65 20 61 6e 64 Data Ascii: 7fd9s still working on adding support for this game on Steam Deck","SteamDeckVerified_TestResult_SteamOSDoesNotSupport_VR":"Steam Deck does not support VR games","SteamDeckVerified_TestResult_SteamOSDoesNotSupport_Software":"This is a Software title and

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49773	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:20 UTC	782	OUT	GET /public/javascript/applications/community/localization/sales_english-json.js?contenthash=78c2664709aeddc975e5 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:21 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:20 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177124 Expires: Fri, 17 May 2024 23:48:24 GMT
2024-05-15 22:36:21 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 35 34 36 Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[1546
2024-05-15 22:36:21 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 74 69 6f 6e 73 20 69 6e 20 65 61 63 68 20 6f 66 20 74 68 65 20 66 6f 75 72 74 65 65 6e 20 46 6f 72 67 65 20 59 6f 75 72 20 46 61 74 65 20 73 74 6f 72 69 65 73 20 66 6f 75 6e 64 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 73 61 6c 65 20 61 6e 64 20 72 65 63 65 69 76 65 20 61 6e 20 61 6e 69 6d 61 74 65 64 20 73 74 69 63 6b 65 72 20 61 73 20 61 20 6d 65 6d 65 6e 74 6f 20 6f 66 20 79 6f 75 72 20 64 65 63 69 73 69 6f 6e 2e 20 5c 5c 6e 55 70 6f 6e 20 63 6f 6d 70 6c 65 74 69 6e 67 20 61 6c 6c 20 6f 66 20 74 68 65 20 73 74 6f 72 69 65 73 2c 20 79 6f 75 5c 27 6c 6c 20 67 65 74 20 6f 6e 65 20 6f 66 20 66 69 76 65 20 75 6e 69 71 75 65 20 62 61 64 67 65 73 20 72 65 66 6c 65 63 74 69 6e 67 20 79 6f 75 72 20 63 68 6f 69 63 65 73 2e 22 2c 22 53 75 Data Ascii: 3ff0tions in each of the fourteen Forge Your Fate stories found throughout the sale and receive an animated sticker as a memento of your decision. \\nUpon completing all of the stories, you\'ll get one of five unique badges reflecting your choices.","Su
2024-05-15 22:36:21 UTC	16379	IN	Data Raw: 33 66 66 33 0d 0a 53 70 6f 72 74 73 5f 50 67 22 3a 22 38 22 2c 22 53 75 6d 6d 65 72 32 31 5f 53 74 6f 72 79 5f 53 70 6f 72 74 73 5f 49 6e 74 72 6f 22 3a 22 41 6e 64 72 65 74 74 69 2e 20 45 61 72 6e 68 61 72 64 74 2e 20 52 61 63 65 72 20 58 2e 20 41 6c 6c 20 67 72 65 61 74 20 6e 61 6d 65 73 20 69 6e 20 72 61 63 69 6e 67 2c 20 62 75 74 20 65 76 65 6e 20 74 68 65 69 72 20 63 6f 6e 73 69 64 65 72 61 62 6c 65 20 64 72 69 76 69 6e 67 20 73 6b 69 6c 6c 73 20 70 61 6c 65 20 69 6e 20 63 6f 6d 70 61 72 69 73 6f 6e 20 74 6f 20 74 68 6f 73 65 20 6f 66 20 43 6f 72 67 69 20 73 65 6e 73 61 74 69 6f 6e 20 4d 72 2e 20 50 65 61 6e 75 74 20 4d 75 66 66 69 6e 2e 20 48 6f 77 65 76 65 72 2c 20 61 66 74 65 72 20 61 20 6c 6f 6e 67 20 34 39 2d 79 65 61 72 20 63 61 72 65 65 72 20 Data Ascii: 3ff3Sports_Pg":"8","Summer21_Story_Sports_Intro":"Andretti. Earnhardt. Racer X. All great names in racing, but even their considerable driving skills pale in comparison to those of Corgi sensation Mr. Peanut Muffin. However, after a long 49-year career
2024-05-15 22:36:21 UTC	5	IN	Data Raw: 33 66 66 35 0d Data Ascii: 3ff5
2024-05-15 22:36:21 UTC	16384	IN	Data Raw: 0a 65 20 6f 66 20 6f 6c 64 20 62 6f 6f 6b 73 20 74 68 61 74 20 65 72 75 70 74 20 69 6e 73 74 61 6e 74 6c 79 2c 20 74 68 65 69 72 20 61 6e 63 69 65 6e 74 2c 20 77 69 73 64 6f 6d 2d 66 69 6c 6c 65 64 20 70 61 67 65 73 20 61 63 74 69 6e 67 20 61 73 20 61 6e 20 61 63 63 65 6c 65 72 61 6e 74 2e 20 59 6f 75 72 20 6d 6f 75 73 65 20 63 6f 6d 70 61 6e 69 6f 6e 20 77 61 74 63 68 65 73 2c 20 64 65 76 61 73 74 61 74 65 64 2c 20 66 72 6f 6d 20 79 6f 75 72 20 73 68 6f 75 6c 64 65 72 2c 20 74 68 65 20 69 6e 66 65 72 6e 6f 20 6f 66 20 6c 6f 73 74 20 6b 6e 6f 77 6c 65 64 67 65 20 72 65 66 6c 65 63 74 65 64 20 69 6e 20 68 65 72 20 74 65 61 72 2d 73 74 61 69 6e 65 64 20 65 79 65 73 2e 20 5c 5c 22 41 6c 6c 20 74 68 6f 73 65 20 62 6f 6f 6b 73 e2 80 a6 20 77 68 79 3f 5c 5c 22 Data Ascii: e of old books that erupt instantly, their ancient, wisdom-filled pages acting as an accelerant. Your mouse companion watches, devastated, from your shoulder, the inferno of lost knowledge reflected in her tear-stained eyes. \\"All those books why?\\"
2024-05-15 22:36:22 UTC	16360	IN	Data Raw: 73 20 75 6e 6c 6f 63 6b 20 74 68 69 73 20 61 63 68 69 65 76 65 6d 65 6e 74 22 2c 22 59 49 52 5f 53 65 65 41 6c 6c 41 63 68 69 65 76 65 6d 65 6e 74 73 22 3a 22 56 69 65 77 20 41 6c 6c 20 41 63 68 69 65 76 65 6d 65 6e 74 73 22 2c 22 59 49 52 5f 46 69 72 73 74 54 69 6d 65 5f 54 69 74 6c 65 5f 73 65 63 6f 6e 64 22 3a 22 45 78 70 6c 6f 72 65 20 74 68 65 20 67 61 6d 65 73 20 79 6f 75 20 70 6c 61 79 65 64 20 74 68 69 73 20 79 65 61 72 22 2c 22 59 49 52 5f 46 69 72 73 74 54 69 6d 65 5f 54 69 74 6c 65 5f 74 68 69 72 64 22 3a 22 45 78 70 6c 6f 72 65 20 74 68 65 20 67 61 6d 65 73 20 25 31 24 73 20 70 6c 61 79 65 64 20 74 68 69 73 20 79 65 61 72 22 2c 22 59 49 52 5f 46 69 72 73 74 54 69 6d 65 5f 50 6c 61 79 65 64 22 3a 22 46 69 72 73 74 20 70 6c 61 79 65 64 20 69 6e Data Ascii: s unlock this achievement","YIR_SeeAllAchievements":"View All Achievements","YIR_FirstTime_Title_second":"Explore the games you played this year","YIR_FirstTime_Title_third":"Explore the games %1$s played this year","YIR_FirstTime_Played":"First played in
2024-05-15 22:36:22 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 6f 75 20 6b 6e 6f 77 20 73 75 72 76 69 76 69 6e 67 20 74 68 65 20 61 70 6f 63 61 6c 79 70 73 65 20 69 73 6e 5c 27 74 20 65 61 73 79 e2 80 a6 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 32 32 37 33 30 30 22 3a 22 59 6f 75 20 65 78 70 6c 6f 72 65 64 20 45 75 72 6f 70 65 20 61 6c 6c 20 66 72 6f 6d 20 74 68 65 20 63 6f 6d 66 6f 72 74 20 6f 66 20 79 6f 75 72 20 68 6f 6d 65 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 32 33 30 34 31 30 22 3a 22 49 6e 20 32 30 32 32 20 79 6f 75 20 77 65 72 65 20 6c 69 76 69 6e 67 20 74 68 61 74 20 63 79 62 65 72 2d 6e 69 6e 6a 61 20 6c 69 66 65 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 Data Ascii: 7fd8ou know surviving the apocalypse isn\'t easy","steamrewind2022_gametext_appid_227300":"You explored Europe all from the comfort of your home.","steamrewind2022_gametext_appid_230410":"In 2022 you were living that cyber-ninja life.","steamrewind20
2024-05-15 22:36:22 UTC	16352	IN	Data Raw: 20 64 72 61 6d 61 20 6f 66 20 74 6f 64 61 79 20 62 79 20 72 65 6c 69 76 69 6e 67 20 74 68 65 20 64 72 61 6d 61 20 6f 66 20 74 68 65 20 70 61 73 74 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 32 33 38 39 36 30 5f 73 65 63 6f 6e 64 22 3a 22 59 6f 75 72 20 64 65 64 69 63 61 74 69 6f 6e 20 74 6f 20 41 52 50 47 73 20 68 61 73 20 62 65 65 6e 20 6e 6f 74 65 64 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 32 34 32 37 36 30 5f 73 65 63 6f 6e 64 22 3a 22 46 69 72 73 74 20 79 6f 75 20 70 75 74 20 79 6f 75 72 20 63 68 61 69 72 20 69 6e 20 69 74 73 20 6c 6f 63 6b 65 64 20 61 6e 64 20 75 70 72 69 67 68 74 20 70 6f 73 69 74 69 6f 6e 2e 20 54 68 65 6e Data Ascii: drama of today by reliving the drama of the past.","steamrewind2022_gametext_appid_238960_second":"Your dedication to ARPGs has been noted.","steamrewind2022_gametext_appid_242760_second":"First you put your chair in its locked and upright position. Then
2024-05-15 22:36:22 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 6e 20 25 32 24 73 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 32 32 31 31 30 30 5f 74 68 69 72 64 22 3a 22 25 31 24 73 20 6b 6e 6f 77 73 20 73 75 72 76 69 76 69 6e 67 20 74 68 65 20 61 70 6f 63 61 6c 79 70 73 65 20 69 73 6e 5c 27 74 20 65 61 73 79 e2 80 a6 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 32 32 37 33 30 30 5f 74 68 69 72 64 22 3a 22 25 31 24 73 20 65 78 70 6c 6f 72 65 64 20 45 75 72 6f 70 65 20 61 6c 6c 20 66 72 6f 6d 20 74 68 65 20 63 6f 6d 66 6f 72 74 20 6f 66 20 74 68 65 69 72 20 68 6f 6d 65 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 32 33 30 34 Data Ascii: 7fe0n %2$s.","steamrewind2022_gametext_appid_221100_third":"%1$s knows surviving the apocalypse isn\'t easy","steamrewind2022_gametext_appid_227300_third":"%1$s explored Europe all from the comfort of their home.","steamrewind2022_gametext_appid_2304
2024-05-15 22:36:22 UTC	16360	IN	Data Raw: 59 6f 75 72 20 6a 75 74 73 75 20 77 61 73 20 73 74 72 6f 6e 67 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 33 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 33 35 39 35 35 30 22 3a 22 52 65 6d 65 6d 62 65 72 20 74 68 65 20 31 39 39 36 20 61 63 74 69 6f 6e 20 63 6c 61 73 73 69 63 20 45 72 61 73 65 72 3f 20 54 68 65 72 65 20 77 61 73 20 74 68 69 73 20 64 6f 70 65 20 73 63 65 6e 65 20 77 68 65 72 65 20 73 6f 6c 64 69 65 72 73 20 75 73 65 64 20 72 61 69 6c 20 67 75 6e 73 20 74 6f 20 73 68 6f 6f 74 20 70 65 6f 70 6c 65 20 74 68 72 6f 75 67 68 20 77 61 6c 6c 73 e2 80 a6 79 6f 75 20 62 61 73 69 63 61 6c 6c 79 20 67 6f 74 20 74 6f 20 72 65 6c 69 65 76 65 20 74 68 61 74 20 73 65 71 75 65 6e 63 65 20 74 68 72 6f 75 67 68 6f 75 74 20 32 30 32 33 2e 22 2c Data Ascii: Your jutsu was strong.","steamrewind2023_gametext_appid_359550":"Remember the 1996 action classic Eraser? There was this dope scene where soldiers used rail guns to shoot people through wallsyou basically got to relieve that sequence throughout 2023.",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49774	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:20 UTC	781	OUT	GET /public/javascript/applications/community/localization/main_english-json.js?contenthash=cfcee568a9b043acaadb HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:21 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:20 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=119231 Expires: Fri, 17 May 2024 07:43:31 GMT
2024-05-15 22:36:21 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 36 36 35 Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[9665
2024-05-15 22:36:21 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 62 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 53 61 6c 65 45 76 65 6e 74 53 63 68 65 64 75 6c 65 5f 4d 69 6e 56 69 65 77 22 3a 22 54 68 65 72 65 20 69 73 20 25 31 24 73 20 65 76 65 6e 74 20 74 79 70 65 20 65 6e 61 62 6c 65 64 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 53 61 6c 65 45 76 65 6e 74 53 63 68 65 64 75 6c 65 5f 4d 69 6e 56 69 65 77 5f 50 6c 75 72 61 6c 22 3a 22 54 68 65 72 65 20 61 72 65 20 25 31 24 73 20 65 76 65 6e 74 20 74 79 70 65 73 20 65 6e 61 62 6c 65 64 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 53 61 6c 65 45 76 65 6e 74 53 63 68 65 64 75 6c 65 5f 46 65 61 74 75 72 65 44 65 6d 6f 73 22 3a 22 46 65 61 74 75 72 65 20 44 65 6d 6f 73 20 6f 6e 20 77 69 64 67 65 74 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 53 61 6c Data Ascii: 3ff0b","EventEditor_SaleEventSchedule_MinView":"There is %1$s event type enabled","EventEditor_SaleEventSchedule_MinView_Plural":"There are %1$s event types enabled","EventEditor_SaleEventSchedule_FeatureDemos":"Feature Demos on widget","EventEditor_Sal
2024-05-15 22:36:21 UTC	16384	IN	Data Raw: 37 66 65 38 0d 0a 65 76 65 6e 74 2c 20 69 74 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 68 69 64 64 65 6e 20 75 6e 74 69 6c 20 74 68 69 73 20 73 70 65 63 69 66 69 65 64 20 74 69 6d 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 70 72 65 70 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 65 76 65 6e 74 73 20 69 6e 74 6f 20 74 68 65 20 66 75 74 75 72 65 20 61 6e 64 20 68 61 76 65 20 74 68 65 6d 20 61 70 70 65 61 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 74 69 6d 65 20 61 6e 64 20 70 72 6f 76 69 64 65 20 79 6f 75 72 20 63 75 73 74 6f 6d 65 72 73 20 77 69 74 68 20 61 20 63 6f 6e 73 74 61 6e 74 20 73 74 72 65 61 6d 20 6f 66 20 69 6e 74 65 72 65 73 74 69 6e 67 20 61 63 74 69 76 69 74 69 65 73 2e 22 Data Ascii: 7fe8event, it will remain hidden until this specified time. This allows you to prepare multiple events into the future and have them appear automatically at the specified time and provide your customers with a constant stream of interesting activities."
2024-05-15 22:36:21 UTC	16368	IN	Data Raw: 20 61 70 70 20 49 44 73 20 68 65 72 65 2e 20 59 6f 75 20 63 61 6e 20 73 65 61 72 63 68 20 62 79 20 6e 61 6d 65 20 6f 72 20 61 70 70 20 49 44 2e 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 52 65 66 65 72 65 6e 63 65 64 41 70 70 49 44 73 5f 53 65 61 72 63 68 4c 61 62 65 6c 22 3a 22 53 65 61 72 63 68 20 62 79 20 61 70 70 20 6e 61 6d 65 20 6f 72 20 49 44 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 4c 6f 63 5f 54 69 74 6c 65 22 3a 22 4d 61 6e 61 67 65 20 4c 6f 63 61 6c 69 7a 61 74 69 6f 6e 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 4c 6f 63 5f 4f 76 65 72 76 69 65 77 22 3a 22 45 78 70 6f 72 74 20 61 6e 64 20 69 6d 70 6f 72 74 20 6c 6f 63 61 6c 69 7a 61 74 69 6f 6e 20 66 69 6c 65 73 20 74 6f 20 6d 61 6e 61 67 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 66 Data Ascii: app IDs here. You can search by name or app ID.","EventEditor_ReferencedAppIDs_SearchLabel":"Search by app name or ID","EventEditor_Loc_Title":"Manage Localization","EventEditor_Loc_Overview":"Export and import localization files to manage translation of
2024-05-15 22:36:21 UTC	16	IN	Data Raw: 37 66 64 61 0d 0a 5f 63 72 65 61 74 6f 72 22 3a Data Ascii: 7fda_creator":
2024-05-15 22:36:22 UTC	16384	IN	Data Raw: 22 46 6f 6c 6c 6f 77 65 72 73 20 6f 66 20 79 6f 75 72 20 63 72 65 61 74 6f 72 20 68 6f 6d 65 20 25 31 24 73 22 2c 22 45 76 65 6e 74 45 6d 61 69 6c 5f 52 65 63 69 70 69 65 6e 74 73 5f 70 6c 61 79 65 72 5f 63 72 65 61 74 6f 72 22 3a 22 50 6c 61 79 65 72 73 20 6f 66 20 67 61 6d 65 73 20 6c 69 6e 6b 65 64 20 74 6f 20 79 6f 75 72 20 63 72 65 61 74 6f 72 20 68 6f 6d 65 20 25 31 24 73 22 2c 22 45 76 65 6e 74 45 6d 61 69 6c 5f 52 65 63 69 70 69 65 6e 74 73 5f 4e 6f 43 72 65 61 74 6f 72 48 6f 6d 65 22 3a 22 54 68 65 72 65 20 61 72 65 20 6e 6f 20 63 72 65 61 74 6f 72 20 68 6f 6d 65 20 6c 69 6e 6b 65 64 20 74 6f 20 74 68 69 73 20 67 61 6d 65 2c 20 6c 69 6d 69 74 69 6e 67 20 65 6d 61 69 6c 20 70 6f 74 65 6e 74 69 61 6c 2e 20 4c 65 61 72 6e 20 6d 6f 72 65 20 68 65 72 Data Ascii: "Followers of your creator home %1$s","EventEmail_Recipients_player_creator":"Players of games linked to your creator home %1$s","EventEmail_Recipients_NoCreatorHome":"There are no creator home linked to this game, limiting email potential. Learn more her
2024-05-15 22:36:22 UTC	16338	IN	Data Raw: 6c 65 61 62 6c 65 22 2c 22 42 72 6f 61 64 63 61 73 74 5f 43 68 61 74 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 5f 47 69 76 65 61 77 61 79 5f 74 69 74 6c 65 22 3a 22 44 69 73 70 6c 61 79 20 47 69 76 65 61 77 61 79 20 57 69 6e 6e 65 72 20 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 22 2c 22 42 72 6f 61 64 63 61 73 74 5f 43 68 61 74 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 5f 47 69 76 65 61 77 61 79 5f 67 69 64 22 3a 22 45 6e 74 65 72 20 47 69 76 65 61 77 61 79 20 49 44 22 2c 22 42 72 6f 61 64 63 61 73 74 5f 43 68 61 74 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 5f 47 69 76 65 61 77 61 79 5f 67 69 64 5f 74 74 69 70 22 3a 22 49 66 20 74 68 65 72 65 20 69 73 20 61 20 67 69 76 65 61 77 61 79 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 62 72 6f 61 64 63 61 73 74 20 Data Ascii: leable","Broadcast_ChatAnnouncement_Giveaway_title":"Display Giveaway Winner Announcements","Broadcast_ChatAnnouncement_Giveaway_gid":"Enter Giveaway ID","Broadcast_ChatAnnouncement_Giveaway_gid_ttip":"If there is a giveaway associated with the broadcast
2024-05-15 22:36:22 UTC	46	IN	Data Raw: 37 66 64 38 0d 0a 6e 67 20 70 61 74 74 65 72 6e 2e 22 2c 22 73 65 6c 65 63 74 69 6d 61 67 65 5f 74 69 70 5f 73 61 6c 65 5f 68 65 61 64 65 Data Ascii: 7fd8ng pattern.","selectimage_tip_sale_heade
2024-05-15 22:36:22 UTC	16384	IN	Data Raw: 72 5f 32 22 3a 22 43 72 69 74 69 63 61 6c 20 63 6f 6e 74 65 6e 74 20 73 68 6f 75 6c 64 20 62 65 20 70 6c 61 63 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 63 65 6e 74 65 72 20 39 34 30 70 78 20 6f 66 20 79 6f 75 72 20 69 6d 61 67 65 2e 20 54 68 65 20 61 72 74 77 6f 72 6b 20 63 61 6e 20 62 6c 65 65 64 20 6f 75 74 20 74 6f 20 74 68 65 20 73 69 64 65 73 20 61 6e 64 20 64 6f 77 6e 20 74 68 65 20 70 61 67 65 20 61 73 20 64 65 73 69 72 65 64 2e 20 59 6f 75 20 67 65 6e 65 72 61 6c 6c 79 20 77 61 6e 74 20 61 72 74 77 6f 72 6b 20 74 6f 20 66 61 64 65 20 74 6f 20 61 20 73 6f 6c 69 64 20 63 6f 6c 6f 72 20 6f 6e 20 73 69 64 65 73 20 61 6e 64 20 62 6f 74 74 6f 6d 20 61 6e 64 20 74 68 65 6e 20 73 65 74 20 74 68 65 20 70 61 67 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 63 6f Data Ascii: r_2":"Critical content should be placed within the center 940px of your image. The artwork can bleed out to the sides and down the page as desired. You generally want artwork to fade to a solid color on sides and bottom and then set the page background co
2024-05-15 22:36:22 UTC	16306	IN	Data Raw: 74 68 61 74 20 65 78 69 73 74 20 6f 6e 20 74 68 69 73 20 69 74 65 6d 20 69 6e 20 74 68 65 20 73 74 6f 72 65 20 62 75 74 20 61 72 65 20 6e 6f 74 20 63 75 72 72 65 6e 74 6c 79 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 69 73 20 69 74 65 6d 20 66 6f 72 20 74 68 65 20 73 61 6c 65 22 2c 22 53 61 6c 65 5f 45 64 69 74 54 61 67 73 5f 4f 74 68 65 72 22 3a 22 4f 74 68 65 72 20 4c 61 62 65 6c 73 22 2c 22 53 61 6c 65 5f 45 64 69 74 54 61 67 73 5f 4f 74 68 65 72 5f 74 74 69 70 22 3a 22 54 68 65 73 65 20 61 72 65 20 6c 61 62 65 6c 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 61 70 70 6c 69 65 64 20 74 6f 20 6f 74 68 65 72 20 69 74 65 6d 73 20 77 69 74 68 69 6e 20 74 68 65 20 73 61 6c 65 20 6f 72 20 61 72 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 73 74 6f Data Ascii: that exist on this item in the store but are not currently applied to this item for the sale","Sale_EditTags_Other":"Other Labels","Sale_EditTags_Other_ttip":"These are labels that have been applied to other items within the sale or are applied to the sto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49775	47.57.233.162	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:20 UTC	536	OUT	GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:21 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:21 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:36:21 UTC	3744	IN	Data Raw: 65 39 39 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 1a 08 06 00 00 00 48 21 59 9f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 Data Ascii: e99PNGIHDR`H!YpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\
2024-05-15 22:36:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49781	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:23 UTC	774	OUT	GET /public/css/applications/community/chunk~f036ce556.css?contenthash=65008c72e7e5586e0c2d HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:24 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:24 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177241 Expires: Fri, 17 May 2024 23:50:25 GMT
2024-05-15 22:36:24 UTC	16124	IN	Data Raw: 37 38 33 32 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 31 57 6c 31 33 64 6f 6d 5a 76 38 37 32 5a 63 62 43 5f 50 56 62 76 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 3a 31 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 30 70 78 29 7b 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 Data Ascii: 7832.ZOBYq36SukEm_Fi_77g2q{position:relative;display:flex;flex-direction:column}.ZOBYq36SukEm_Fi_77g2q ._1Wl13domZv872ZcbC_PVbv{display:flex;flex-direction:row;flex:1;padding-top:10px}@media screen and (max-width: 700px){.ZOBYq36SukEm_Fi_77g2
2024-05-15 22:36:25 UTC	14654	IN	Data Raw: 69 5f 37 37 67 32 71 20 2e 5f 32 56 62 72 66 78 45 6a 43 31 32 41 44 47 6d 64 51 4d 6a 73 53 46 20 2e 5f 31 48 52 4a 31 35 37 6f 74 54 4c 6b 5a 73 56 6b 4a 33 39 79 55 6a 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 32 56 62 72 66 78 45 6a 43 31 32 41 44 47 6d 64 51 4d 6a 73 53 46 20 2e 5f 31 48 52 4a 31 35 37 6f 74 54 4c 6b 5a 73 56 6b 4a 33 39 79 55 6a 20 2e 5f 31 39 79 47 62 61 74 71 32 30 41 6a 4f 79 75 48 46 4b 6b 31 6c 64 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 5a 4f 42 59 Data Ascii: i_77g2q ._2VbrfxEjC12ADGmdQMjsSF ._1HRJ157otTLkZsVkJ39yUj{flex-direction:column;align-items:center;text-align:center}.ZOBYq36SukEm_Fi_77g2q ._2VbrfxEjC12ADGmdQMjsSF ._1HRJ157otTLkZsVkJ39yUj ._19yGbatq20AjOyuHFKk1ld{display:flex;flex-direction:column}.ZOBY
2024-05-15 22:36:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49782	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:23 UTC	774	OUT	GET /public/css/applications/community/chunk~c18a43282.css?contenthash=2951747b428e607bd9cf HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:24 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:24 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=35957 Expires: Thu, 16 May 2024 08:35:41 GMT
2024-05-15 22:36:24 UTC	16106	IN	Data Raw: 33 65 65 32 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 5f 32 32 5f 66 47 78 44 31 72 78 4c 52 6a 54 6d 45 73 34 66 70 4a 4e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 5f 32 42 58 68 47 65 41 6b 45 5a 58 52 65 49 42 73 31 71 36 69 47 33 7b 63 6c 65 61 72 3a 6c 65 66 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 5f 31 75 36 33 4f 5a 4f 55 4f 38 65 6a 46 4c 6c 38 33 5f 61 46 4b 51 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 36 31 36 31 36 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 34 63 34 63 34 63 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d Data Ascii: 3ee2._22_fGxD1rxLRjTmEs4fpJN{font-family:"Motiva Sans",Arial,Helvetica,sans-serif;font-weight:300}._2BXhGeAkEZXReIBs1q6iG3{clear:left;display:block}._1u63OZOUO8ejFLl83_aFKQ{background-color:#161616;border-bottom:1px solid #4c4c4c;height:1px;m
2024-05-15 22:36:25 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 37 33 62 34 33 7d 2e 5f 33 75 5f 7a 57 63 65 4c 73 4c 5a 5f 53 77 34 68 4a 5f 50 53 72 4a 20 2e 62 72 78 51 62 41 78 39 76 79 6f 54 55 4e 67 49 39 53 53 75 56 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 5f 33 75 5f 7a 57 63 65 4c 73 4c 5a 5f 53 77 34 68 4a 5f 50 53 72 4a 20 2e 5f 33 67 30 69 42 6b 51 62 30 48 58 65 44 37 31 37 63 32 74 6d 61 57 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 5f 33 75 5f 7a 57 63 65 4c 73 4c 5a 5f 53 77 34 68 4a 5f 50 53 72 4a 20 2e 5f 33 33 69 5f 36 31 6c 53 6c 73 74 4a 58 68 6a 6a 47 35 73 61 53 53 7b 63 6f 6c 6f 72 3a 6f 72 61 6e Data Ascii: 3ff0background-color:#373b43}._3u_zWceLsLZ_Sw4hJ_PSrJ .brxQbAx9vyoTUNgI9SSuV{margin-top:8px}._3u_zWceLsLZ_Sw4hJ_PSrJ ._3g0iBkQb0HXeD717c2tmaW{display:flex;flex-direction:column;margin-left:8px}._3u_zWceLsLZ_Sw4hJ_PSrJ ._33i_61lSlstJXhjjG5saSS{color:oran
2024-05-15 22:36:25 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 66 66 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 70 78 7d 2e 5f 33 76 7a 57 62 65 4a 38 61 6c 56 37 44 4b 4f 30 72 77 52 75 4d 4b 20 69 6d 67 2e 53 56 47 49 63 6f 6e 5f 57 69 6e 64 6f 77 73 4c 6f 67 6f 2c 2e 5f 33 76 7a 57 62 65 4a 38 61 6c 56 37 44 4b 4f 30 72 77 52 75 4d 4b 20 73 76 67 2e 53 56 47 49 63 6f 6e 5f 57 69 6e 64 6f 77 73 4c 6f 67 6f 7b 77 69 64 74 68 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 31 35 70 78 7d 2e 5f 33 76 7a 57 62 65 4a 38 61 6c 56 37 44 4b 4f 30 72 77 52 75 4d 4b 20 69 6d 67 2e 53 56 47 49 63 6f 6e 5f 53 74 65 61 6d 4c 6f 67 6f 2c 2e 5f 33 76 7a 57 62 65 4a 38 61 6c 56 37 44 4b 4f 30 72 77 52 75 4d 4b 20 73 76 67 2e 53 56 47 49 63 6f 6e 5f 53 74 65 61 6d 4c 6f 67 6f 7b 77 69 64 Data Ascii: 3ff0ff;color:#fff;margin-right:4px}._3vzWbeJ8alV7DKO0rwRuMK img.SVGIcon_WindowsLogo,._3vzWbeJ8alV7DKO0rwRuMK svg.SVGIcon_WindowsLogo{width:15px;height:15px}._3vzWbeJ8alV7DKO0rwRuMK img.SVGIcon_SteamLogo,._3vzWbeJ8alV7DKO0rwRuMK svg.SVGIcon_SteamLogo{wid
2024-05-15 22:36:25 UTC	8	IN	Data Raw: 33 66 66 30 0d 0a 5f 33 Data Ascii: 3ff0_3
2024-05-15 22:36:25 UTC	16384	IN	Data Raw: 35 2d 55 62 43 49 6e 55 41 69 55 76 37 55 49 52 57 6e 56 35 61 7b 77 69 64 74 68 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 42 74 61 72 39 4b 49 6d 4b 73 72 6a 34 66 34 67 75 64 63 71 68 20 2e 5f 36 49 56 4c 6e 72 4f 33 4e 71 32 39 65 41 6f 30 43 6f 58 63 67 20 2e 5f 33 76 7a 57 62 65 4a 38 61 6c 56 37 44 4b 4f 30 72 77 52 75 4d 4b 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 42 61 73 69 63 55 49 20 2e 42 74 61 72 39 4b 49 6d 4b 73 72 6a 34 66 34 67 75 64 63 71 68 7b 6d 69 6e 2d 77 69 64 74 68 3a 32 36 30 70 78 3b 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 7d 2e 42 61 73 69 63 55 49 20 2e 42 74 61 72 39 4b 49 6d 4b 73 72 6a 34 66 34 67 75 64 63 71 68 20 64 69 76 20 61 7b 62 Data Ascii: 5-UbCInUAiUv7UIRWnV5a{width:100%;justify-content:flex-end}.Btar9KImKsrj4f4gudcqh ._6IVLnrO3Nq29eAo0CoXcg ._3vzWbeJ8alV7DKO0rwRuMK{display:none}}.BasicUI .Btar9KImKsrj4f4gudcqh{min-width:260px;scroll-snap-align:unset}.BasicUI .Btar9KImKsrj4f4gudcqh div a{b
2024-05-15 22:36:25 UTC	16360	IN	Data Raw: 30 70 78 29 7b 2e 79 39 4d 53 64 6c 64 34 7a 5a 43 75 6f 51 70 52 56 44 67 4d 6d 20 2e 5f 33 38 44 71 52 50 6d 31 69 64 4e 30 65 36 4a 35 49 52 59 6f 77 78 20 2e 55 6c 76 46 6b 50 38 4f 65 77 34 61 36 56 54 48 43 76 4c 4e 48 20 2e 5f 32 56 61 33 4f 35 30 5a 35 6b 73 4a 4a 63 70 76 6a 2d 4a 46 44 49 20 2e 5f 31 6f 71 35 55 6d 49 79 7a 75 42 47 47 46 62 50 5a 77 6a 68 79 2d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 42 61 73 69 63 55 49 20 2e 79 39 4d 53 64 6c 64 34 7a 5a 43 75 6f 51 70 52 56 44 67 4d 6d 20 2e 5f 33 38 44 71 52 50 6d 31 69 64 4e 30 65 36 4a 35 49 52 59 6f 77 78 20 2e 55 6c 76 46 6b 50 38 4f 65 77 34 61 36 56 54 48 43 76 4c 4e 48 20 2e 5f 32 56 61 33 4f 35 30 5a 35 6b 73 4a 4a 63 70 76 6a 2d 4a 46 44 49 20 2e 5f 31 6f 71 35 55 6d 49 79 Data Ascii: 0px){.y9MSdld4zZCuoQpRVDgMm ._38DqRPm1idN0e6J5IRYowx .UlvFkP8Oew4a6VTHCvLNH ._2Va3O50Z5ksJJcpvj-JFDI ._1oq5UmIyzuBGGFbPZwjhy-{display:none}}.BasicUI .y9MSdld4zZCuoQpRVDgMm ._38DqRPm1idN0e6J5IRYowx .UlvFkP8Oew4a6VTHCvLNH ._2Va3O50Z5ksJJcpvj-JFDI ._1oq5UmIy
2024-05-15 22:36:25 UTC	16384	IN	Data Raw: 37 62 34 37 0d 0a 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 35 37 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 70 61 64 64 69 6e 67 3a 36 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 3b 7a 2d 69 6e 64 65 78 3a 31 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 36 30 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 32 30 70 78 29 Data Ascii: 7b47sition:relative;height:57px;overflow:hidden;white-space:nowrap;display:flex;justify-content:space-between;flex-wrap:wrap;padding:6px;box-sizing:border-box;background:rgba(0,0,0,.5);z-index:1}@media screen and (min-width: 560px)and (max-width: 620px)
2024-05-15 22:36:25 UTC	15183	IN	Data Raw: 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 42 61 73 69 63 55 49 20 2e 6b 42 78 4b 4d 7a 5a 38 39 6b 2d 31 4c 47 6b 45 37 44 4d 67 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 5f 32 44 4b 4d 4c 4a 76 35 38 45 5f 4b 4c 52 43 53 64 64 75 38 5f 39 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 36 35 29 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 33 32 70 78 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 6d Data Ascii: elative;width:100%;margin:0 auto;max-width:940px}.BasicUI .kBxKMzZ89k-1LGkE7DMgw{display:none}._2DKMLJv58E_KLRCSddu8_9{border-radius:4px;background-color:rgba(0,0,0,.65);margin:auto;margin-bottom:12px;text-align:center;padding:4px 32px;width:fit-content;m
2024-05-15 22:36:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49783	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:23 UTC	774	OUT	GET /public/css/applications/community/chunk~69438e232.css?contenthash=4a16a80208a2f1b32986 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:25 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:24 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177149 Expires: Fri, 17 May 2024 23:48:53 GMT
2024-05-15 22:36:25 UTC	16124	IN	Data Raw: 37 65 64 31 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 5f 31 62 6b 55 52 76 6f 2d 6b 54 41 4d 39 51 56 54 62 68 75 38 4b 55 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 7d 2e 5f 31 62 6b 55 52 76 6f 2d 6b 54 41 4d 39 51 56 54 62 68 75 38 4b 55 2e 47 61 6d 65 70 61 64 4d 6f 64 65 2c 2e 47 61 6d 65 70 61 64 4d 6f 64 65 20 2e 5f 31 62 6b 55 52 76 6f 2d 6b 54 41 4d 39 51 56 54 62 68 75 38 4b 55 7b 62 6f 74 74 6f 6d 3a 34 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 7d 2e 5f 33 63 59 77 54 5a 6f 74 74 50 48 55 5a 6c 52 64 74 47 78 48 49 30 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 36 70 78 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 Data Ascii: 7ed1._1bkURvo-kTAM9QVTbhu8KU{position:absolute;left:0;right:0}._1bkURvo-kTAM9QVTbhu8KU.GamepadMode,.GamepadMode ._1bkURvo-kTAM9QVTbhu8KU{bottom:40px;z-index:10}._3cYwTZottPHUZlRdtGxHI0{position:absolute;bottom:6px;left:0;right:0;background:#2
2024-05-15 22:36:25 UTC	16349	IN	Data Raw: 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 30 70 78 29 7b 2e 5f 32 41 4d 76 44 75 35 6f 43 77 44 6f 49 75 59 6d 78 78 6b 76 73 2d 20 2e 5f 31 47 75 42 38 4f 63 59 43 37 79 73 33 51 75 37 42 32 39 41 55 30 20 2e 5f 33 48 52 42 68 5f 62 37 74 36 4e 33 4b 6e 6c 49 53 73 33 41 76 33 20 2e 5f 32 35 4d 4d 6e 53 4b 58 49 4c 68 4e 47 6b 68 42 78 6c 77 70 6a 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 5f 31 47 75 42 38 4f 63 59 43 37 79 73 33 51 75 37 42 32 39 41 55 30 20 2e 5f 33 63 54 74 50 4b 58 6c 64 41 57 4e 35 55 49 6f 51 67 68 34 61 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 68 65 69 67 68 74 3a 31 30 30 25 3b Data Ascii: (max-width: 700px){._2AMvDu5oCwDoIuYmxxkvs- ._1GuB8OcYC7ys3Qu7B29AU0 ._3HRBh_b7t6N3KnlISs3Av3 ._25MMnSKXILhNGkhBxlwpj{display:none}}._1GuB8OcYC7ys3Qu7B29AU0 ._3cTtPKXldAWN5UIoQgh4an{border-radius:3px;overflow:hidden;background:rgba(0,0,0,.2);height:100%;
2024-05-15 22:36:25 UTC	16384	IN	Data Raw: 35 61 36 39 0d 0a 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 31 2e 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 31 30 70 78 3b 63 6f 6c 6f 72 3a 23 33 35 35 61 35 66 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 32 30 70 78 29 7b 2e 6a 42 74 58 35 78 34 59 78 76 66 46 72 52 47 43 4e 51 39 67 2d 20 2e 5f 32 2d 74 33 76 78 48 4e 46 44 78 51 30 6f 41 62 52 45 73 52 66 53 20 2e 5f 32 67 76 76 36 38 33 6b 31 5f 70 64 6d 32 79 53 68 75 46 37 41 30 20 2e 5f 33 39 7a 69 46 6f 76 73 44 6e 45 31 4b 75 69 78 66 5a 59 44 65 6c 20 2e Data Ascii: 5a69f;border-radius:2px;text-transform:uppercase;letter-spacing:1.8px;font-weight:600;padding:5px 10px;color:#355a5f}@media screen and (max-width: 620px){.jBtX5x4YxvfFrRGCNQ9g- ._2-t3vxHNFDxQ0oAbREsRfS ._2gvv683k1_pdm2yShuF7A0 ._39ziFovsDnE1KuixfZYDel .
2024-05-15 22:36:25 UTC	6769	IN	Data Raw: 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 2e 5f 33 68 43 6a 70 55 46 63 74 64 4d 4c 78 4e 79 35 75 61 2d 78 2d 5f 20 2e 5f 31 6f 32 65 55 74 70 37 4e 4d 50 64 72 36 57 42 45 54 6a 30 37 68 20 2e 5f 32 74 7a 4d 4d 6d 35 44 55 36 74 30 4a 75 72 42 38 67 52 70 4e 36 20 2e 5f 31 4b 5a 4f 4d 36 49 42 4a 35 47 74 45 4b 56 72 47 47 30 65 58 2d 20 2e 5f 33 5f 37 69 73 46 7a 41 6a 48 65 4a 78 5a 67 72 75 75 51 54 66 69 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 62 33 32 31 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 70 78 20 34 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 29 7d 2e 5f 33 68 43 Data Ascii: t:no-repeat}._3hCjpUFctdMLxNy5ua-x-_ ._1o2eUtp7NMPdr6WBETj07h ._2tzMMm5DU6t0JurB8gRpN6 ._1KZOM6IBJ5GtEKVrGG0eX- ._3_7isFzAjHeJxZgruuQTfi{font-size:18px;color:#ffb321;width:100%;text-align:center;margin-top:20px;text-shadow:0px 4px 4px rgba(0,0,0,.3)}._3hC
2024-05-15 22:36:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49779	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:23 UTC	774	OUT	GET /public/css/applications/community/chunk~642602239.css?contenthash=59316afb14f0823f60a9 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:25 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:24 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=144560 Expires: Fri, 17 May 2024 14:45:44 GMT
2024-05-15 22:36:25 UTC	16105	IN	Data Raw: 33 65 65 31 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 5f 31 6d 69 4d 68 51 54 78 2d 36 42 76 42 5a 31 4c 73 4f 6a 64 67 63 2c 2e 5f 31 6a 47 5f 2d 74 54 55 35 33 58 38 35 52 47 78 5f 46 41 42 4c 32 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 5f 31 6d 69 4d 68 51 54 78 2d 36 42 76 42 5a 31 4c 73 4f 6a 64 67 63 20 73 70 61 6e 2e 5f 33 44 34 6a 49 54 6f 50 2d 67 31 6a 78 50 34 69 4c 54 37 34 64 68 2c 2e 5f 31 6a 47 5f 2d 74 54 55 35 33 58 38 35 52 47 78 5f 46 41 42 4c 32 20 73 70 61 6e 2e 5f 33 44 34 6a 49 54 6f 50 2d 67 31 6a 78 50 34 69 4c 54 37 34 64 68 7b 6d 61 72 67 69 6e 3a 30 70 78 20 34 70 78 3b 63 6f 6c 6f 72 3a 23 36 63 37 36 37 66 7d 2e 5f 31 6a 47 5f 2d 74 54 55 35 33 Data Ascii: 3ee1._1miMhQTx-6BvBZ1LsOjdgc,._1jG_-tTU53X85RGx_FABL2{display:inline-flex;white-space:nowrap}._1miMhQTx-6BvBZ1LsOjdgc span._3D4jIToP-g1jxP4iLT74dh,._1jG_-tTU53X85RGx_FABL2 span._3D4jIToP-g1jxP4iLT74dh{margin:0px 4px;color:#6c767f}._1jG_-tTU53
2024-05-15 22:36:25 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 54 4d 79 4d 43 49 67 63 33 52 53 5a 57 59 36 5a 47 39 6a 64 57 31 6c 62 6e 52 4a 52 44 30 69 65 47 31 77 4c 6d 52 70 5a 44 6f 32 4d 44 59 32 52 54 46 47 4e 54 4d 30 4e 30 51 78 4d 55 55 35 51 6a 6b 7a 4f 55 49 7a 51 6a 41 30 4f 54 55 35 4d 54 4d 79 4d 43 49 76 50 69 41 38 4c 33 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 6a 34 67 50 43 39 79 5a 47 59 36 55 6b 52 47 50 69 41 38 4c 33 67 36 65 47 31 77 62 57 56 30 59 54 34 67 50 44 39 34 63 47 46 6a 61 32 56 30 49 47 56 75 5a 44 30 69 63 69 49 2f 50 75 6a 34 57 30 73 41 41 41 44 53 53 55 52 42 56 48 6a 61 59 76 7a 2f 2f 7a 38 44 43 44 43 42 69 48 66 76 33 76 30 48 43 43 42 47 6d 41 6a 44 32 37 64 76 51 53 77 57 67 41 42 69 67 49 75 41 4f 45 44 41 69 43 51 41 42 67 41 42 68 43 Data Ascii: 3ff0TMyMCIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDo2MDY2RTFGNTM0N0QxMUU5QjkzOUIzQjA0OTU5MTMyMCIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Puj4W0sAAADSSURBVHjaYvz//z8DCDCBiHfv3v0HCCBGmAjD27dvQSwWgABigIuAOEDAiCQABgABhC
2024-05-15 22:36:25 UTC	16384	IN	Data Raw: 35 62 64 37 0d 0a 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 3b 62 6f 72 64 65 72 3a 34 70 78 20 73 6f 6c 69 64 20 23 61 39 61 39 61 39 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 5f 5f 5f 53 33 55 75 45 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 2e 63 6f 6e 74 61 69 6e 65 72 5f 5f 5f 32 4f 37 32 46 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 76 65 72 6c 61 79 5f 5f Data Ascii: 5bd7ion-count:infinite;border:4px solid #a9a9a9;border-top-color:#000;border-radius:30px}@keyframes spin___S3UuE{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}.container___2O72F{position:relative;overflow:hidden;height:100%;width:100%}.overlay__
2024-05-15 22:36:25 UTC	7135	IN	Data Raw: 73 20 65 61 73 65 7d 2e 5f 32 67 50 30 44 71 56 79 62 31 61 45 41 43 79 6d 41 65 36 69 66 33 20 2e 5f 31 49 45 69 4b 51 6e 6a 48 70 49 76 2d 6d 36 30 31 79 36 68 76 50 3a 6e 6f 74 28 2e 5f 32 47 4d 32 6b 6b 56 52 71 4c 2d 53 64 6b 47 34 6f 51 6a 55 7a 59 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 36 64 65 67 2c 20 23 30 30 35 36 64 36 20 31 25 2c 20 23 31 61 39 66 66 66 20 36 30 25 29 7d 2e 5f 32 67 50 30 44 71 56 79 62 31 61 45 41 43 79 6d 41 65 36 69 66 33 20 2e 5f 31 49 45 69 4b 51 6e 6a 48 70 49 76 2d 6d 36 30 31 79 36 68 76 50 2e 47 61 6d 65 70 61 64 4d 6f 64 65 2c 2e 47 61 6d 65 70 61 64 4d 6f 64 65 20 2e 5f 32 67 50 30 44 71 56 79 62 31 61 45 41 43 79 6d 41 65 36 69 66 33 20 2e 5f 31 49 45 69 4b 51 Data Ascii: s ease}._2gP0DqVyb1aEACymAe6if3 ._1IEiKQnjHpIv-m601y6hvP:not(._2GM2kkVRqL-SdkG4oQjUzY){background:linear-gradient(136deg, #0056d6 1%, #1a9fff 60%)}._2gP0DqVyb1aEACymAe6if3 ._1IEiKQnjHpIv-m601y6hvP.GamepadMode,.GamepadMode ._2gP0DqVyb1aEACymAe6if3 ._1IEiKQ
2024-05-15 22:36:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49780	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:23 UTC	774	OUT	GET /public/css/applications/community/chunk~d2dd7ecf6.css?contenthash=97854aa28eb090f068fb HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:25 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:24 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=129299 Expires: Fri, 17 May 2024 10:31:23 GMT
2024-05-15 22:36:25 UTC	16124	IN	Data Raw: 37 65 63 39 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 5f 33 5a 6c 52 56 4c 5a 42 42 4a 35 41 6c 71 63 54 58 67 48 33 39 49 7b 77 69 64 74 68 3a 31 30 30 76 77 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 6d 61 78 2d 68 65 69 67 68 74 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 63 6f 6e 74 61 69 6e 7d 2e 5f 33 5a 6c 52 56 4c 5a 42 42 4a 35 41 6c 71 63 54 58 67 48 33 39 49 3a 3a 62 61 63 6b 64 72 6f 70 7b 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 63 Data Ascii: 7ec9._3ZlRVLZBBJ5AlqcTXgH39I{width:100vw;height:100vh;max-width:none;max-height:none;background:#000;margin:0;padding:0;box-sizing:border-box;overflow:hidden;overscroll-behavior:contain}._3ZlRVLZBBJ5AlqcTXgH39I::backdrop{overscroll-behavior:c
2024-05-15 22:36:25 UTC	16341	IN	Data Raw: 52 49 69 20 2e 5f 33 73 44 73 2d 58 4d 56 4a 75 7a 70 78 34 72 61 47 51 42 46 38 71 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 5f 31 47 58 42 70 32 4c 33 59 50 69 35 39 70 31 55 78 67 47 52 49 69 20 2e 5f 33 73 44 73 2d 58 4d 56 4a 75 7a 70 78 34 72 61 47 51 42 46 38 71 20 2e 5f 31 43 6d 46 62 50 5a 35 68 5a 48 66 65 54 46 6d 4e 4e 4e 4d 44 31 7b 68 65 69 67 68 74 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 30 30 70 78 7d 2e 5f 31 47 58 42 70 32 4c 33 59 50 69 35 39 70 31 55 78 67 47 52 49 69 20 2e 47 6f 6f 39 52 31 6a 77 39 6b 48 7a 55 4e 6d 5f 43 5a 67 37 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 Data Ascii: RIi ._3sDs-XMVJuzpx4raGQBF8q{margin-bottom:10px}._1GXBp2L3YPi59p1UxgGRIi ._3sDs-XMVJuzpx4raGQBF8q ._1CmFbPZ5hZHfeTFmNNNMD1{height:fit-content;max-height:200px}._1GXBp2L3YPi59p1UxgGRIi .Goo9R1jw9kHzUNm_CZg7{min-height:100px;display:flex;flex-direction:colu
2024-05-15 22:36:25 UTC	16384	IN	Data Raw: 33 66 66 38 0d 0a 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 23 34 63 38 31 38 39 20 30 25 2c 20 72 67 62 61 28 35 37 2c 20 36 31 2c 20 37 31 2c 20 30 2e 35 29 20 32 30 25 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 5f 32 48 6d 32 32 61 54 55 6f 34 76 4c 39 34 74 33 57 4c 6d 76 6e 74 20 2e 5f 31 72 4a 32 4f 55 41 4d 6a 48 68 5f 64 38 57 70 70 39 46 5a 65 46 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 23 32 66 33 33 33 62 20 30 25 2c 20 23 32 66 33 33 33 62 20 39 30 25 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 5f 32 48 6d 32 32 61 54 55 6f 34 76 4c 39 34 74 Data Ascii: 3ff8ound-image:linear-gradient(to right, #4c8189 0%, rgba(57, 61, 71, 0.5) 20%);margin-bottom:20px}._2Hm22aTUo4vL94t3WLmvnt ._1rJ2OUAMjHh_d8Wpp9FZeF{background-image:linear-gradient(to right, #2f333b 0%, #2f333b 90%);margin-bottom:20px}._2Hm22aTUo4vL94t
2024-05-15 22:36:25 UTC	16384	IN	Data Raw: 33 66 66 30 0d 0a 6f 75 6e 64 3a 72 67 62 61 28 35 37 2c 36 31 2c 37 31 2c 2e 35 29 7d 2e 5f 31 6a 62 6e 52 56 6d 76 5a 52 65 62 63 73 33 31 38 34 79 5a 46 43 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 70 78 7d 2e 42 77 77 39 42 44 46 59 41 5a 39 6b 73 61 61 68 33 73 6e 64 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 33 70 78 3b 6c 65 66 74 3a 33 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 37 34 34 66 34 66 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 38 70 78 20 32 70 78 20 32 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 31 70 78 20 31 70 78 20 38 70 78 20 23 30 30 30 7d 2e 42 77 Data Ascii: 3ff0ound:rgba(57,61,71,.5)}._1jbnRVmvZRebcs3184yZFC{margin-top:12px}.Bww9BDFYAZ9ksaah3sndn{position:absolute;top:-13px;left:30px;background:#744f4f;padding:2px 8px 2px 2px;display:flex;flex-direction:row;border-radius:2px;box-shadow:1px 1px 8px #000}.Bw
2024-05-15 22:36:25 UTC	16360	IN	Data Raw: 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 7d 2e 5f 33 45 7a 54 79 6a 4a 78 5f 74 5a 55 45 49 48 79 67 50 77 41 65 43 20 2e 5f 31 44 41 72 6c 33 47 73 39 6c 58 50 63 5a 64 6d 43 49 6c 44 4a 61 2e 47 61 6d 65 70 61 64 4d 6f 64 65 2c 2e 47 61 6d 65 70 61 64 4d 6f 64 65 20 2e 5f 33 45 7a 54 79 6a 4a 78 5f 74 5a 55 45 49 48 79 67 50 77 41 65 43 20 2e 5f 31 44 41 72 6c 33 47 73 39 6c 58 50 63 5a 64 6d 43 49 6c 44 4a 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 5f 33 45 7a 54 79 6a 4a 78 5f 74 5a 55 45 49 48 79 67 50 77 41 65 43 2e 5f 33 47 6b 33 6c 33 4d 71 6f 30 6a 71 44 52 76 46 47 66 54 50 41 63 20 2e 5f 31 44 41 72 6c 33 47 73 39 6c 58 50 63 5a 64 6d 43 49 6c 44 4a 61 7b 66 6f 6e Data Ascii: ration-count:infinite}._3EzTyjJx_tZUEIHygPwAeC ._1DArl3Gs9lXPcZdmCIlDJa.GamepadMode,.GamepadMode ._3EzTyjJx_tZUEIHygPwAeC ._1DArl3Gs9lXPcZdmCIlDJa{font-size:8px;font-weight:bold}._3EzTyjJx_tZUEIHygPwAeC._3Gk3l3Mqo0jqDRvFGfTPAc ._1DArl3Gs9lXPcZdmCIlDJa{fon
2024-05-15 22:36:25 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 6d 65 70 61 64 4d 6f 64 65 20 2e 6f 6e 6c 69 6e 65 20 2e 5f 32 77 70 61 70 74 6a 5a 59 2d 33 47 6e 31 48 4f 50 6c 4c 38 35 4f 2e 5f 31 6b 38 32 4e 69 57 79 6d 34 53 54 65 67 44 47 78 52 42 48 7a 32 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 34 63 62 34 66 66 7d 2e 6f 6e 6c 69 6e 65 20 2e 53 56 47 49 63 6f 6e 5f 44 6f 4e 6f 74 44 69 73 74 75 72 62 20 63 69 72 63 6c 65 2c 2e 6f 6e 6c 69 6e 65 20 2e 53 56 47 49 63 6f 6e 5f 44 6f 4e 6f 74 44 69 73 74 75 72 62 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 61 30 35 34 35 61 7d 2e 6f 66 66 6c 69 6e 65 20 2e 72 36 32 71 7a 63 64 4a 51 30 71 65 7a 5a 67 6c 4f 74 69 55 58 7b 63 6f 6c 6f 72 3a 23 61 30 61 30 61 30 7d 2e 6f 66 66 6c 69 6e 65 20 2e 72 36 32 71 7a 63 64 4a 51 30 71 65 7a 5a 67 Data Ascii: 7fe0mepadMode .online ._2wpaptjZY-3Gn1HOPlL85O._1k82NiWym4STegDGxRBHz2 a:visited{color:#4cb4ff}.online .SVGIcon_DoNotDisturb circle,.online .SVGIcon_DoNotDisturb line{stroke:#a0545a}.offline .r62qzcdJQ0qezZglOtiUX{color:#a0a0a0}.offline .r62qzcdJQ0qezZg
2024-05-15 22:36:25 UTC	16360	IN	Data Raw: 62 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 41 43 42 32 43 39 34 37 7d 2e 5f 31 39 63 48 62 4d 71 39 50 64 46 43 57 5f 33 51 46 50 77 63 39 62 2e 67 70 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 70 78 7d 2e 5f 31 39 63 48 62 4d 71 39 50 64 46 43 57 5f 33 51 46 50 77 63 39 62 2e 67 70 66 6f 63 75 73 20 73 76 67 7b 66 69 6c 6c 3a 23 30 65 31 34 31 62 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 2e 5f 31 39 63 48 62 4d 71 39 50 64 46 43 57 5f 33 51 46 50 77 63 39 62 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 7d 7d 2e 5f 31 6b 67 64 Data Ascii: b){background-color:#ACB2C947}._19cHbMq9PdFCW_3QFPwc9b.gpfocus{background-color:#fff;border-radius:0px}._19cHbMq9PdFCW_3QFPwc9b.gpfocus svg{fill:#0e141b}@media screen and (max-width: 1200px){._19cHbMq9PdFCW_3QFPwc9b{font-size:13px;line-height:15px}}._1kgd
2024-05-15 22:36:25 UTC	16384	IN	Data Raw: 36 62 38 34 0d 0a 43 36 59 59 56 43 56 52 20 2e 64 58 56 38 7a 75 59 50 30 58 39 79 77 31 37 49 65 43 79 6a 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 7d 2e 5f 32 6d 55 4e 51 38 74 53 48 36 49 52 30 42 48 79 70 5f 47 76 48 47 20 2e 5f 33 44 49 55 62 41 54 4d 6c 66 7a 5a 37 72 43 36 59 59 56 43 56 52 20 2e 64 58 56 38 7a 75 59 50 30 58 39 79 77 31 37 49 65 43 79 6a 61 20 2e 5f 33 76 5a 4a 45 45 79 52 43 38 38 43 6e 2d 6a 67 45 6f 30 47 75 6f 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 5f 33 76 5a 4a 45 45 79 52 43 38 38 43 6e 2d 6a 67 45 6f 30 47 75 6f 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 31 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 Data Ascii: 6b84C6YYVCVR .dXV8zuYP0X9yw17IeCyja{padding-left:4px}._2mUNQ8tSH6IR0BHyp_GvHG ._3DIUbATMlfzZ7rC6YYVCVR .dXV8zuYP0X9yw17IeCyja ._3vZJEEyRC88Cn-jgEo0Guo{font-size:18px}._3vZJEEyRC88Cn-jgEo0Guo{font-size:30px;line-height:31px;font-weight:normal;margin-bott
2024-05-15 22:36:25 UTC	11148	IN	Data Raw: 61 6d 33 73 54 67 36 4a 33 6a 30 6d 6e 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 5f 33 30 77 32 76 36 63 61 47 65 62 7a 33 49 6a 50 30 35 79 58 67 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 31 70 78 20 32 70 78 20 31 32 70 78 20 31 70 78 20 23 30 30 30 30 30 30 35 35 7d 2e 5f 33 30 77 32 76 36 63 61 47 65 62 7a 33 49 6a 50 30 35 79 58 67 73 20 2e 5f 31 41 41 43 51 30 48 74 42 55 66 77 5f 45 50 6f 36 4c 49 79 73 75 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0d 0a 3a 72 6f 6f 74 7b 2d 2d 6d 61 69 6e 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 20 23 64 62 65 32 65 36 3b 2d 2d 6d 61 69 6e 2d 6c 69 67 68 74 2d 62 6c 75 65 2d 62 61 63 6b 67 72 6f 75 Data Ascii: am3sTg6J3j0mne{position:relative;display:flex;flex-direction:column}._30w2v6caGebz3IjP05yXgs{box-shadow:1px 2px 12px 1px #00000055}._30w2v6caGebz3IjP05yXgs ._1AACQ0HtBUfw_EPo6LIysu{display:none}:root{--main-text-color: #dbe2e6;--main-light-blue-backgrou
2024-05-15 22:36:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49778	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:23 UTC	774	OUT	GET /public/css/applications/community/chunk~b1f9f17fd.css?contenthash=89633ec89e0fda129395 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:25 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:24 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=126726 Expires: Fri, 17 May 2024 09:48:30 GMT
2024-05-15 22:36:25 UTC	16124	IN	Data Raw: 37 65 64 31 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 5f 33 51 78 4f 6b 39 76 52 43 4d 74 45 43 52 41 5f 55 51 30 44 76 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 65 31 37 32 34 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 5f 32 4c 66 4b 42 5f 56 7a 59 47 5a 6f 59 6f 41 53 6c 64 4f 77 48 50 20 2e 5f 31 77 73 78 6a 30 58 30 70 73 52 53 61 4d 75 53 6c 2d 48 6a 4a 46 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 65 31 37 32 34 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 5f 32 4c 66 4b 42 5f 56 7a 59 47 5a 6f 59 6f 41 53 6c 64 4f 77 48 50 20 2e 2d 57 7a 4e 33 64 30 46 55 4d 6f 49 4e 49 31 51 58 35 6e 43 34 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 Data Ascii: 7ed1._3QxOk9vRCMtECRA_UQ0Dv3{background-color:#1e1724;margin-bottom:20px}._2LfKB_VzYGZoYoASldOwHP ._1wsxj0X0psRSaMuSl-HjJF{background:#1e1724;color:#fff;display:flex}._2LfKB_VzYGZoYoASldOwHP .-WzN3d0FUMoINI1QX5nC4{display:flex;position:relati
2024-05-15 22:36:25 UTC	16349	IN	Data Raw: 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 33 78 45 59 2d 62 43 42 54 47 36 76 6e 70 75 6f 6c 7a 54 44 6f 42 20 33 2e 32 73 20 65 61 73 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 7d 2e 5f 33 67 64 7a 54 78 7a 4e 43 58 5f 47 63 2d 38 58 35 70 51 67 73 5f 20 2e 5f 31 73 61 68 76 31 36 56 35 74 48 54 38 50 52 54 71 56 77 7a 7a 36 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 33 67 64 7a 54 78 7a 4e 43 58 5f 47 63 2d 38 58 35 70 51 67 73 5f 20 2e 5f 31 73 61 68 76 31 36 56 35 Data Ascii: order-radius:5px;animation:_3xEY-bCBTG6vnpuolzTDoB 3.2s ease;animation-iteration-count:infinite}._3gdzTxzNCX_Gc-8X5pQgs_ ._1sahv16V5tHT8PRTqVwzz6{display:flex;flex-direction:row;justify-content:space-between;width:100%}._3gdzTxzNCX_Gc-8X5pQgs_ ._1sahv16V5
2024-05-15 22:36:25 UTC	16380	IN	Data Raw: 33 66 66 34 0d 0a 32 70 78 20 36 70 78 20 23 30 30 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 5f 32 6b 65 6b 74 61 31 6e 59 4d 4c 73 37 68 4e 75 4a 76 55 6e 4c 4f 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 70 61 64 64 69 6e 67 3a 38 70 78 7d 2e 5f 32 6b 65 6b 74 61 31 6e 59 4d 4c 73 37 68 4e 75 4a 76 55 6e 4c 4f 20 2e 71 6d 31 35 5a 38 63 41 77 44 5f 70 4a 46 67 66 69 62 58 77 71 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 5f 32 6b 65 6b 74 61 31 6e 59 4d 4c 73 37 68 4e 75 4a 76 55 6e 4c 4f 20 2e 54 46 62 44 32 30 42 53 70 4a 77 6b 33 4f 30 76 55 57 76 6a 4c 7b 77 69 64 74 68 3a 31 39 70 78 3b 68 65 69 67 68 74 3a 31 39 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a Data Ascii: 3ff42px 6px #000;text-align:center}._2kekta1nYMLs7hNuJvUnLO{margin:0 auto;width:fit-content;padding:8px}._2kekta1nYMLs7hNuJvUnLO .qm15Z8cAwD_pJFgfibXwq{line-height:22px}._2kekta1nYMLs7hNuJvUnLO .TFbD20BSpJwk3O0vUWvjL{width:19px;height:19px;margin-right:
2024-05-15 22:36:25 UTC	4	IN	Data Raw: 33 66 66 34 Data Ascii: 3ff4
2024-05-15 22:36:25 UTC	16384	IN	Data Raw: 0d 0a 68 65 69 67 68 74 3a 31 34 70 78 3b 77 69 64 74 68 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 6f 70 61 63 69 74 79 3a 35 30 25 7d 2e 5f 31 58 58 34 4c 7a 6e 75 51 4a 68 45 65 39 6d 46 75 77 65 55 33 2d 20 2e 5f 31 59 79 36 32 4e 32 42 68 4a 7a 4e 61 6b 39 53 4a 45 48 56 32 6c 7b 6f 70 61 63 69 74 79 3a 35 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 5f 31 58 58 34 4c 7a 6e 75 51 4a 68 45 65 39 6d 46 75 77 65 55 33 2d 3a 68 6f 76 65 72 20 73 76 67 7b 6f 70 61 63 69 74 79 3a 31 30 30 25 7d 2e 5f 31 58 58 34 4c 7a 6e 75 51 4a 68 45 65 39 6d 46 75 77 65 55 33 2d 3a 68 6f 76 65 72 20 2e 5f 31 59 79 36 32 4e 32 42 68 4a 7a 4e 61 6b 39 53 4a 45 48 56 32 6c Data Ascii: height:14px;width:14px;margin-left:10px;margin-right:10px;opacity:50%}._1XX4LznuQJhEe9mFuweU3- ._1Yy62N2BhJzNak9SJEHV2l{opacity:50%;text-align:center}._1XX4LznuQJhEe9mFuweU3-:hover svg{opacity:100%}._1XX4LznuQJhEe9mFuweU3-:hover ._1Yy62N2BhJzNak9SJEHV2l
2024-05-15 22:36:25 UTC	15532	IN	Data Raw: 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 4c 62 69 68 44 4d 51 76 72 4f 4f 75 47 4e 4a 5f 51 42 7a 59 56 2e 5f 32 6a 62 47 6e 4f 63 71 41 5f 6b 33 59 47 35 33 48 5a 78 75 36 57 7b 63 6f 6c 6f 72 3a 23 36 36 36 36 36 36 37 64 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 4c 62 69 68 44 4d 51 76 72 4f 4f 75 47 4e 4a 5f 51 42 7a 59 56 2e 5f 32 6a 62 47 6e 4f 63 71 41 5f 6b 33 59 47 35 33 48 5a 78 75 36 57 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 73 65 74 7d 2e 4c 62 69 68 44 4d 51 76 72 4f 4f 75 47 4e 4a 5f 51 42 7a 59 56 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 Data Ascii: adding-bottom:12px;padding-right:2px;cursor:pointer}.LbihDMQvrOOuGNJ_QBzYV._2jbGnOcqA_k3YG53HZxu6W{color:#6666667d;cursor:default}.LbihDMQvrOOuGNJ_QBzYV._2jbGnOcqA_k3YG53HZxu6W:hover{text-decoration:unset}.LbihDMQvrOOuGNJ_QBzYV:hover{text-decoration:under
2024-05-15 22:36:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49791	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:25 UTC	765	OUT	GET /public/css/applications/community/events.css?contenthash=5c2ed144a3bfd464f943 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:26 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:26 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177297 Expires: Fri, 17 May 2024 23:51:23 GMT
2024-05-15 22:36:26 UTC	1428	IN	Data Raw: 35 38 64 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 5f 33 44 5a 48 55 66 37 75 4c 78 46 68 71 70 57 51 30 33 6e 70 55 6a 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 70 78 7d 2e 5f 33 44 5a 48 55 66 37 75 4c 78 46 68 71 70 57 51 30 33 6e 70 55 6a 20 68 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 41 72 69 61 6c 2c 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 7d 40 6d 65 64 69 61 Data Ascii: 58d._3DZHUf7uLxFhqpWQ03npUj{padding-top:5px}._3DZHUf7uLxFhqpWQ03npUj h2{font-family:"Motiva Sans",Arial,Sans-serif;font-size:14px;text-transform:uppercase;color:#fff;margin:0 0 10px;letter-spacing:2px;font-weight:normal;padding-top:2px}@media
2024-05-15 22:36:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49793	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:26 UTC	770	OUT	GET /public/javascript/applications/community/libraries~25d238eb8.js?contenthash=ac954d69fdf4b21a0a54 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:27 UTC	266	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:26 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=35921 Expires: Thu, 16 May 2024 08:35:07 GMT
2024-05-15 22:36:27 UTC	16118	IN	Data Raw: 37 65 63 62 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 39 37 5d Data Ascii: 7ecb/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[397]
2024-05-15 22:36:27 UTC	16349	IN	Data Raw: 72 28 65 29 2c 74 3d 6e 65 77 20 5f 3b 72 65 74 75 72 6e 20 5f 2e 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 74 2c 72 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 2e 46 28 5f 2e 4d 42 46 28 29 2c 65 2c 72 29 7d 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 5f 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 2c 65 2e 67 65 74 52 65 73 75 6c 74 42 75 66 66 65 72 28 29 7d 73 74 61 74 69 63 20 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 65 Data Ascii: r(e),t=new _;return _.deserializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){return n.F(_.MBF(),e,r)}serializeBinary(){var e=new i.BinaryWriter;return _.serializeBinaryToWriter(this,e),e.getResultBuffer()}static serializeBinaryToWriter(e
2024-05-15 22:36:27 UTC	16384	IN	Data Raw: 35 35 63 30 0d 0a 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 74 2c 72 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 2e 46 28 58 2e 4d 42 46 28 29 2c 65 2c 72 29 7d 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 58 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 2c 65 2e 67 65 74 52 65 73 75 6c 74 42 75 66 66 65 72 28 29 7d 73 74 61 74 69 63 20 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 65 2c 72 29 7b 6e 2e 6c 32 28 58 2e 4d 28 29 2c 65 2c 72 Data Ascii: 55c0serializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){return n.F(X.MBF(),e,r)}serializeBinary(){var e=new i.BinaryWriter;return X.serializeBinaryToWriter(this,e),e.getResultBuffer()}static serializeBinaryToWriter(e,r){n.l2(X.M(),e,r
2024-05-15 22:36:27 UTC	5576	IN	Data Raw: 65 6e 74 73 5f 6f 6e 6c 79 3a 7b 6e 3a 32 2c 62 72 3a 6e 2e 46 45 2e 72 65 61 64 42 6f 6f 6c 2c 62 77 3a 6e 2e 58 63 2e 77 72 69 74 65 42 6f 6f 6c 7d 7d 7d 29 2c 5a 2e 73 6d 5f 6d 7d 73 74 61 74 69 63 20 4d 42 46 28 29 7b 72 65 74 75 72 6e 20 5a 2e 73 6d 5f 6d 62 66 7c 7c 28 5a 2e 73 6d 5f 6d 62 66 3d 6e 2e 42 68 28 5a 2e 4d 28 29 29 29 2c 5a 2e 73 6d 5f 6d 62 66 7d 74 6f 4f 62 6a 65 63 74 28 65 3d 21 31 29 7b 72 65 74 75 72 6e 20 5a 2e 74 6f 4f 62 6a 65 63 74 28 65 2c 74 68 69 73 29 7d 73 74 61 74 69 63 20 74 6f 4f 62 6a 65 63 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 2e 54 41 28 5a 2e 4d 28 29 2c 65 2c 72 29 7d 73 74 61 74 69 63 20 66 72 6f 6d 4f 62 6a 65 63 74 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 61 44 28 5a 2e 4d 28 29 2c 65 29 7d 73 74 61 74 69 Data Ascii: ents_only:{n:2,br:n.FE.readBool,bw:n.Xc.writeBool}}}),Z.sm_m}static MBF(){return Z.sm_mbf\|\|(Z.sm_mbf=n.Bh(Z.M())),Z.sm_mbf}toObject(e=!1){return Z.toObject(e,this)}static toObject(e,r){return n.TA(Z.M(),e,r)}static fromObject(e){return n.aD(Z.M(),e)}stati
2024-05-15 22:36:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49792	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:26 UTC	770	OUT	GET /public/javascript/applications/community/libraries~c1dfbefd5.js?contenthash=d3fb7b7d10d08f0d7ff8 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:27 UTC	266	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:26 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=35904 Expires: Thu, 16 May 2024 08:34:50 GMT
2024-05-15 22:36:27 UTC	16099	IN	Data Raw: 33 65 64 62 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 38 30 31 Data Ascii: 3edb/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[3801
2024-05-15 22:36:27 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 29 7d 73 74 61 74 69 63 20 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 65 2c 72 29 7b 61 2e 6c 32 28 6d 2e 4d 28 29 2c 65 2c 72 29 7d 73 65 72 69 61 6c 69 7a 65 42 61 73 65 36 34 53 74 72 69 6e 67 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 6d 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 2c 65 2e 67 65 74 52 65 73 75 6c 74 42 61 73 65 36 34 53 74 72 69 6e 67 28 29 7d 67 65 74 43 6c 61 73 73 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 22 53 74 6f 72 65 49 74 65 6d 5f 49 6e 63 6c 75 64 65 64 49 74 65 6d 73 22 7d 7d 63 6c 61 73 73 20 42 20 65 78 74 65 6e 64 73 20 6c 7b 73 74 61 74 69 63 20 49 6d 70 6c 65 6d Data Ascii: 3ff0)}static serializeBinaryToWriter(e,r){a.l2(m.M(),e,r)}serializeBase64String(){var e=new i.BinaryWriter;return m.serializeBinaryToWriter(this,e),e.getResultBase64String()}getClassName(){return"StoreItem_IncludedItems"}}class B extends l{static Implem
2024-05-15 22:36:27 UTC	16380	IN	Data Raw: 33 66 66 34 0d 0a 69 63 20 74 6f 4f 62 6a 65 63 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 61 2e 54 41 28 52 2e 4d 28 29 2c 65 2c 72 29 7d 73 74 61 74 69 63 20 66 72 6f 6d 4f 62 6a 65 63 74 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 44 28 52 2e 4d 28 29 2c 65 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 65 29 7b 6c 65 74 20 72 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 52 65 61 64 65 72 28 65 29 2c 74 3d 6e 65 77 20 52 3b 72 65 74 75 72 6e 20 52 2e 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 74 2c 72 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 61 2e 46 28 52 2e 4d 42 46 28 29 2c 65 2c Data Ascii: 3ff4ic toObject(e,r){return a.TA(R.M(),e,r)}static fromObject(e){return a.aD(R.M(),e)}static deserializeBinary(e){let r=new i.BinaryReader(e),t=new R;return R.deserializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){return a.F(R.MBF(),e,
2024-05-15 22:36:27 UTC	4	IN	Data Raw: 33 66 65 64 Data Ascii: 3fed
2024-05-15 22:36:27 UTC	16384	IN	Data Raw: 0d 0a 77 3a 61 2e 58 63 2e 77 72 69 74 65 55 69 6e 74 33 32 7d 2c 74 79 70 65 3a 7b 6e 3a 32 2c 62 72 3a 61 2e 46 45 2e 72 65 61 64 45 6e 75 6d 2c 62 77 3a 61 2e 58 63 2e 77 72 69 74 65 45 6e 75 6d 7d 2c 69 6e 74 65 72 6e 61 6c 5f 6e 61 6d 65 3a 7b 6e 3a 33 2c 62 72 3a 61 2e 46 45 2e 72 65 61 64 53 74 72 69 6e 67 2c 62 77 3a 61 2e 58 63 2e 77 72 69 74 65 53 74 72 69 6e 67 7d 2c 64 69 73 70 6c 61 79 5f 6e 61 6d 65 3a 7b 6e 3a 34 2c 62 72 3a 61 2e 46 45 2e 72 65 61 64 53 74 72 69 6e 67 2c 62 77 3a 61 2e 58 63 2e 77 72 69 74 65 53 74 72 69 6e 67 7d 2c 69 6d 61 67 65 5f 75 72 6c 3a 7b 6e 3a 35 2c 62 72 3a 61 2e 46 45 2e 72 65 61 64 53 74 72 69 6e 67 2c 62 77 3a 61 2e 58 63 2e 77 72 69 74 65 53 74 72 69 6e 67 7d 2c 73 68 6f 77 5f 69 6e 5f 73 65 61 72 63 68 3a Data Ascii: w:a.Xc.writeUint32},type:{n:2,br:a.FE.readEnum,bw:a.Xc.writeEnum},internal_name:{n:3,br:a.FE.readString,bw:a.Xc.writeString},display_name:{n:4,br:a.FE.readString,bw:a.Xc.writeString},image_url:{n:5,br:a.FE.readString,bw:a.Xc.writeString},show_in_search:
2024-05-15 22:36:27 UTC	16369	IN	Data Raw: 74 6f 4f 62 6a 65 63 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 61 2e 54 41 28 63 2e 4d 28 29 2c 65 2c 72 29 7d 73 74 61 74 69 63 20 66 72 6f 6d 4f 62 6a 65 63 74 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 44 28 63 2e 4d 28 29 2c 65 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 65 29 7b 6c 65 74 20 72 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 52 65 61 64 65 72 28 65 29 2c 74 3d 6e 65 77 20 63 3b 72 65 74 75 72 6e 20 63 2e 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 74 2c 72 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 61 2e 46 28 63 2e 4d 42 46 28 29 2c 65 2c 72 29 7d 73 65 72 69 61 6c Data Ascii: toObject(e,r){return a.TA(c.M(),e,r)}static fromObject(e){return a.aD(c.M(),e)}static deserializeBinary(e){let r=new i.BinaryReader(e),t=new c;return c.deserializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){return a.F(c.MBF(),e,r)}serial
2024-05-15 22:36:27 UTC	193	IN	Data Raw: 62 62 0d 0a 75 69 72 65 6d 65 6e 74 3a 31 7d 29 7d 2c 65 2e 47 65 74 49 74 65 6d 73 42 79 55 73 65 72 52 65 63 6f 6d 6d 65 6e 64 65 64 54 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 53 65 6e 64 4d 73 67 28 22 53 74 6f 72 65 51 75 65 72 79 2e 47 65 74 49 74 65 6d 73 42 79 55 73 65 72 52 65 63 6f 6d 6d 65 6e 64 65 64 54 61 67 73 23 31 22 2c 28 30 2c 6e 2e 4d 44 29 28 66 2c 72 29 2c 7a 2c 7b 62 43 6f 6e 73 74 4d 65 74 68 6f 64 3a 21 30 2c 65 50 72 69 76 69 6c 65 67 65 3a 31 7d 29 7d 7d 28 52 7c 7c 28 52 3d 7b 7d 29 29 7d 7d 5d 29 3b 0d 0a Data Ascii: bbuirement:1})},e.GetItemsByUserRecommendedTags=function(e,r){return e.SendMsg("StoreQuery.GetItemsByUserRecommendedTags#1",(0,n.MD)(f,r),z,{bConstMethod:!0,ePrivilege:1})}}(R\|\|(R={}))}}]);
2024-05-15 22:36:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49794	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:26 UTC	770	OUT	GET /public/javascript/applications/community/libraries~f036ce556.js?contenthash=4aeaa7f3e9a9fc232310 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:27 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:26 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177159 Expires: Fri, 17 May 2024 23:49:05 GMT
2024-05-15 22:36:27 UTC	16117	IN	Data Raw: 37 65 63 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 35 38 38 5d 2c 7b 35 39 32 32 33 3a 28 65 2c 72 Data Ascii: 7eca/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[6588],{59223:(e,r
2024-05-15 22:36:27 UTC	16349	IN	Data Raw: 34 53 74 72 69 6e 67 28 29 7d 67 65 74 43 6c 61 73 73 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 22 43 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 5f 47 65 74 50 61 73 73 77 6f 72 64 52 53 41 50 75 62 6c 69 63 4b 65 79 5f 52 65 73 70 6f 6e 73 65 22 7d 7d 63 6c 61 73 73 20 75 20 65 78 74 65 6e 64 73 20 6f 7b 73 74 61 74 69 63 20 49 6d 70 6c 65 6d 65 6e 74 73 53 74 61 74 69 63 49 6e 74 65 72 66 61 63 65 28 29 7b 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 6e 75 6c 6c 29 7b 73 75 70 65 72 28 29 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 76 69 63 65 5f 66 72 69 65 6e 64 6c 79 5f 6e 61 6d 65 7c 7c 6e 2e 61 52 28 75 2e 4d 28 29 29 2c 6f 2e 69 6e 69 74 69 61 6c 69 7a 65 28 74 68 69 73 2c 65 2c 30 2c 2d 31 2c 76 6f 69 64 20 30 2c 6e 75 6c 6c 29 7d 73 74 61 74 69 63 Data Ascii: 4String()}getClassName(){return"CAuthentication_GetPasswordRSAPublicKey_Response"}}class u extends o{static ImplementsStaticInterface(){}constructor(e=null){super(),u.prototype.device_friendly_name\|\|n.aR(u.M()),o.initialize(this,e,0,-1,void 0,null)}static
2024-05-15 22:36:27 UTC	16380	IN	Data Raw: 33 66 66 34 0d 0a 7b 72 65 74 75 72 6e 20 65 7d 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 4d 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 2c 65 2e 67 65 74 52 65 73 75 6c 74 42 75 66 66 65 72 28 29 7d 73 74 61 74 69 63 20 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 65 2c 72 29 7b 7d 73 65 72 69 61 6c 69 7a 65 42 61 73 65 36 34 53 74 72 69 6e 67 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 4d 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 2c 65 2e 67 65 74 52 65 73 Data Ascii: 3ff4{return e}serializeBinary(){var e=new i.BinaryWriter;return M.serializeBinaryToWriter(this,e),e.getResultBuffer()}static serializeBinaryToWriter(e,r){}serializeBase64String(){var e=new i.BinaryWriter;return M.serializeBinaryToWriter(this,e),e.getRes
2024-05-15 22:36:27 UTC	4	IN	Data Raw: 37 66 65 63 Data Ascii: 7fec
2024-05-15 22:36:27 UTC	16384	IN	Data Raw: 0d 0a 6e 67 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 55 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 2c 65 2e 67 65 74 52 65 73 75 6c 74 42 61 73 65 36 34 53 74 72 69 6e 67 28 29 7d 67 65 74 43 6c 61 73 73 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 22 43 53 75 70 70 6f 72 74 52 65 66 72 65 73 68 54 6f 6b 65 6e 44 65 73 63 72 69 70 74 69 6f 6e 22 7d 7d 63 6c 61 73 73 20 44 20 65 78 74 65 6e 64 73 20 6f 7b 73 74 61 74 69 63 20 49 6d 70 6c 65 6d 65 6e 74 73 53 74 61 74 69 63 49 6e 74 65 72 66 61 63 65 28 29 7b 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 6e 75 6c 6c 29 7b 73 75 70 65 72 28 29 2c 44 2e 70 72 6f 74 6f 74 79 70 65 2e 74 69 6d 65 7c 7c Data Ascii: ng(){var e=new i.BinaryWriter;return U.serializeBinaryToWriter(this,e),e.getResultBase64String()}getClassName(){return"CSupportRefreshTokenDescription"}}class D extends o{static ImplementsStaticInterface(){}constructor(e=null){super(),D.prototype.time\|\|
2024-05-15 22:36:28 UTC	16368	IN	Data Raw: 72 29 2c 54 2c 7b 65 50 72 69 76 69 6c 65 67 65 3a 30 2c 65 57 65 62 41 50 49 4b 65 79 52 65 71 75 69 72 65 6d 65 6e 74 3a 31 7d 29 7d 2c 65 2e 45 6e 75 6d 65 72 61 74 65 54 6f 6b 65 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 53 65 6e 64 4d 73 67 28 22 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 45 6e 75 6d 65 72 61 74 65 54 6f 6b 65 6e 73 23 31 22 2c 28 30 2c 61 2e 4d 44 29 28 76 2c 72 29 2c 57 2c 7b 65 50 72 69 76 69 6c 65 67 65 3a 31 7d 29 7d 2c 65 2e 47 65 74 41 75 74 68 53 65 73 73 69 6f 6e 73 46 6f 72 41 63 63 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 53 65 6e 64 4d 73 67 28 22 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 47 65 74 41 75 74 68 53 65 73 73 69 6f 6e 73 46 6f Data Ascii: r),T,{ePrivilege:0,eWebAPIKeyRequirement:1})},e.EnumerateTokens=function(e,r){return e.SendMsg("Authentication.EnumerateTokens#1",(0,a.MD)(v,r),W,{ePrivilege:1})},e.GetAuthSessionsForAccount=function(e,r){return e.SendMsg("Authentication.GetAuthSessionsFo
2024-05-15 22:36:28 UTC	8553	IN	Data Raw: 32 31 36 31 0d 0a 61 73 65 36 34 53 74 72 69 6e 67 28 29 7d 67 65 74 43 6c 61 73 73 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 22 43 54 77 6f 46 61 63 74 6f 72 5f 52 65 6d 6f 76 65 41 75 74 68 65 6e 74 69 63 61 74 6f 72 5f 52 65 73 70 6f 6e 73 65 22 7d 7d 63 6c 61 73 73 20 66 20 65 78 74 65 6e 64 73 20 73 7b 73 74 61 74 69 63 20 49 6d 70 6c 65 6d 65 6e 74 73 53 74 61 74 69 63 49 6e 74 65 72 66 61 63 65 28 29 7b 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 6e 75 6c 6c 29 7b 73 75 70 65 72 28 29 2c 73 2e 69 6e 69 74 69 61 6c 69 7a 65 28 74 68 69 73 2c 65 2c 30 2c 2d 31 2c 76 6f 69 64 20 30 2c 6e 75 6c 6c 29 7d 74 6f 4f 62 6a 65 63 74 28 65 3d 21 31 29 7b 72 65 74 75 72 6e 20 66 2e 74 6f 4f 62 6a 65 63 74 28 65 2c 74 68 69 73 29 7d 73 74 61 74 69 63 20 74 6f 4f Data Ascii: 2161ase64String()}getClassName(){return"CTwoFactor_RemoveAuthenticator_Response"}}class f extends s{static ImplementsStaticInterface(){}constructor(e=null){super(),s.initialize(this,e,0,-1,void 0,null)}toObject(e=!1){return f.toObject(e,this)}static toO
2024-05-15 22:36:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49795	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:26 UTC	770	OUT	GET /public/javascript/applications/community/libraries~9e353dc2d.js?contenthash=a354f433049b20f1e568 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:27 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:26 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=111627 Expires: Fri, 17 May 2024 05:36:53 GMT
2024-05-15 22:36:27 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 34 38 5d 2c 7b 37 35 34 33 36 3a 66 75 6e 63 Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[7948],{75436:func
2024-05-15 22:36:27 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 6d 6d 3a 72 28 22 6d 22 29 2c 68 3a 72 28 22 68 22 29 2c 68 68 3a 72 28 22 68 22 29 2c 64 3a 72 28 22 64 22 29 2c 64 64 3a 72 28 22 64 22 29 2c 4d 3a 72 28 22 4d 22 29 2c 4d 4d 3a 72 28 22 4d 22 29 2c 79 3a 72 28 22 79 22 29 2c 79 79 3a 72 28 22 79 22 29 7d 2c 70 72 65 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5b d9 a1 d9 a2 d9 a3 d9 a4 d9 a5 d9 a6 d9 a7 d9 a8 d9 a9 d9 a0 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 2e 72 65 70 6c 61 63 65 28 2f d8 8c 2f 67 2c 22 2c 22 29 7d 2c 70 6f 73 74 66 6f 72 6d 61 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5c 64 2f 67 2c 28 66 75 6e Data Ascii: 3ff0mm:r("m"),h:r("h"),hh:r("h"),d:r("d"),dd:r("d"),M:r("M"),MM:r("M"),y:r("y"),yy:r("y")},preparse:function(e){return e.replace(/[]/g,(function(e){return t[e]})).replace(//g,",")},postformat:function(e){return e.replace(/\d/g,(fun
2024-05-15 22:36:27 UTC	16379	IN	Data Raw: 33 66 66 33 0d 0a 2f 69 2c 2f 5e 6d 65 75 72 7a 68 2f 69 2c 2f 5e 6d 65 72 63 5b ca bc 5c 27 5d 68 65 72 2f 69 2c 2f 5e 79 61 6f 75 2f 69 2c 2f 5e 67 77 65 6e 65 72 2f 69 2c 2f 5e 73 61 64 6f 72 6e 2f 69 5d 2c 6d 3d 5b 2f 5e 53 75 6c 2f 69 2c 2f 5e 4c 75 6e 2f 69 2c 2f 5e 4d 65 75 2f 69 2c 2f 5e 4d 65 72 2f 69 2c 2f 5e 59 61 6f 2f 69 2c 2f 5e 47 77 65 2f 69 2c 2f 5e 53 61 64 2f 69 5d 2c 6c 3d 5b 2f 5e 53 75 2f 69 2c 2f 5e 4c 75 2f 69 2c 2f 5e 4d 65 28 5b 5e 72 5d 7c 24 29 2f 69 2c 2f 5e 4d 65 72 2f 69 2c 2f 5e 59 61 2f 69 2c 2f 5e 47 77 2f 69 2c 2f 5e 53 61 2f 69 5d 3b 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 62 72 22 2c 7b 6d 6f 6e 74 68 73 3a 22 47 65 6e 76 65 72 5f 43 ca bc 68 77 65 76 72 65 72 5f 4d 65 75 72 7a 68 5f 45 62 72 65 6c 5f 4d 61 65 Data Ascii: 3ff3/i,/^meurzh/i,/^merc[\']her/i,/^yaou/i,/^gwener/i,/^sadorn/i],m=[/^Sul/i,/^Lun/i,/^Meu/i,/^Mer/i,/^Yao/i,/^Gwe/i,/^Sad/i],l=[/^Su/i,/^Lu/i,/^Me([^r]\|$)/i,/^Mer/i,/^Ya/i,/^Gw/i,/^Sa/i];e.defineLocale("br",{months:"Genver_Chwevrer_Meurzh_Ebrel_Mae
2024-05-15 22:36:27 UTC	5	IN	Data Raw: 33 66 66 35 0d Data Ascii: 3ff5
2024-05-15 22:36:28 UTC	16384	IN	Data Raw: 0a de 87 de a6 de 83 de a9 22 2c 22 de 8a de ac de 84 de b0 de 83 de aa de 87 de a6 de 83 de a9 22 2c 22 de 89 de a7 de 83 de a8 de 97 de aa 22 2c 22 de 87 de ad de 95 de b0 de 83 de a9 de 8d de aa 22 2c 22 de 89 de ad 22 2c 22 de 96 de ab de 82 de b0 22 2c 22 de 96 de aa de 8d de a6 de 87 de a8 22 2c 22 de 87 de af de 8e de a6 de 90 de b0 de 93 de aa 22 2c 22 de 90 de ac de 95 de b0 de 93 de ac de 89 de b0 de 84 de a6 de 83 de aa 22 2c 22 de 87 de ae de 86 de b0 de 93 de af de 84 de a6 de 83 de aa 22 2c 22 de 82 de ae de 88 de ac de 89 de b0 de 84 de a6 de 83 de aa 22 2c 22 de 91 de a8 de 90 de ac de 89 de b0 de 84 de a6 de 83 de aa 22 5d 2c 74 3d 5b 22 de 87 de a7 de 8b de a8 de 87 de b0 de 8c de a6 22 2c 22 de 80 de af de 89 de a6 22 2c 22 de 87 de a6 Data Ascii: ","","","","","","","","","","",""],t=["","","
2024-05-15 22:36:28 UTC	16360	IN	Data Raw: 7d 7d 29 7d 28 74 28 33 37 34 38 35 29 29 7d 2c 33 31 39 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 2f 2f 21 20 6d 6f 6d 65 6e 74 2e 6a 73 20 6c 6f 63 61 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 0d 0a 76 61 72 20 61 3d 22 65 6e 65 2e 5f 66 65 62 2e 5f 6d 61 72 2e 5f 61 62 72 2e 5f 6d 61 79 2e 5f 6a 75 6e 2e 5f 6a 75 6c 2e 5f 61 67 6f 2e 5f 73 65 70 2e 5f 6f 63 74 2e 5f 6e 6f 76 2e 5f 64 69 63 2e 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 74 3d 22 65 6e 65 5f 66 65 62 5f 6d 61 72 5f 61 62 72 5f 6d 61 79 5f 6a 75 6e 5f 6a 75 6c 5f 61 67 6f 5f 73 65 70 5f 6f 63 74 5f 6e 6f 76 5f 64 69 63 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6e 3d 5b 2f 5e 65 6e 65 2f 69 2c Data Ascii: }})}(t(37485))},31910:function(e,a,t){!function(e){"use strict";//! moment.js locale configurationvar a="ene._feb._mar._abr._may._jun._jul._ago._sep._oct._nov._dic.".split("_"),t="ene_feb_mar_abr_may_jun_jul_ago_sep_oct_nov_dic".split("_"),n=[/^ene/i,
2024-05-15 22:36:28 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 65 22 29 3b 63 61 73 65 22 77 22 3a 63 61 73 65 22 57 22 3a 72 65 74 75 72 6e 20 65 2b 28 31 3d 3d 3d 65 3f 22 72 65 22 3a 22 65 22 29 7d 7d 7d 29 7d 28 74 28 33 37 34 38 35 29 29 7d 2c 39 38 32 37 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 2f 2f 21 20 6d 6f 6d 65 6e 74 2e 6a 73 20 6c 6f 63 61 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 0d 0a 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 66 72 2d 63 68 22 2c 7b 6d 6f 6e 74 68 73 3a 22 6a 61 6e 76 69 65 72 5f 66 c3 a9 76 72 69 65 72 5f 6d 61 72 73 5f 61 76 72 69 6c 5f 6d 61 69 5f 6a 75 69 6e 5f 6a 75 69 6c 6c 65 74 5f 61 6f c3 bb 74 5f 73 65 70 74 65 6d 62 72 65 5f 6f 63 74 6f 62 72 65 5f Data Ascii: 7fe0e");case"w":case"W":return e+(1===e?"re":"e")}}})}(t(37485))},98279:function(e,a,t){!function(e){"use strict";//! moment.js locale configuratione.defineLocale("fr-ch",{months:"janvier_fvrier_mars_avril_mai_juin_juillet_aot_septembre_octobre_
2024-05-15 22:36:28 UTC	16360	IN	Data Raw: d7 90 d7 a4 d7 a8 d7 99 d7 9c 5f d7 9e d7 90 d7 99 5f d7 99 d7 95 d7 a0 d7 99 5f d7 99 d7 95 d7 9c d7 99 5f d7 90 d7 95 d7 92 d7 95 d7 a1 d7 98 5f d7 a1 d7 a4 d7 98 d7 9e d7 91 d7 a8 5f d7 90 d7 95 d7 a7 d7 98 d7 95 d7 91 d7 a8 5f d7 a0 d7 95 d7 91 d7 9e d7 91 d7 a8 5f d7 93 d7 a6 d7 9e d7 91 d7 a8 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 d7 99 d7 a0 d7 95 d7 b3 5f d7 a4 d7 91 d7 a8 d7 b3 5f d7 9e d7 a8 d7 a5 5f d7 90 d7 a4 d7 a8 d7 b3 5f d7 9e d7 90 d7 99 5f d7 99 d7 95 d7 a0 d7 99 5f d7 99 d7 95 d7 9c d7 99 5f d7 90 d7 95 d7 92 d7 b3 5f d7 a1 d7 a4 d7 98 d7 b3 5f d7 90 d7 95 d7 a7 d7 b3 5f d7 a0 d7 95 d7 91 d7 b3 5f d7 93 d7 a6 d7 9e d7 b3 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 22 d7 a8 d7 Data Ascii: ________".split("_"),monthsShort:"___________".split("_"),weekdays:"
2024-05-15 22:36:28 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 69 67 75 72 61 74 69 6f 6e 0d 0a 65 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 69 74 22 2c 7b 6d 6f 6e 74 68 73 3a 22 67 65 6e 6e 61 69 6f 5f 66 65 62 62 72 61 69 6f 5f 6d 61 72 7a 6f 5f 61 70 72 69 6c 65 5f 6d 61 67 67 69 6f 5f 67 69 75 67 6e 6f 5f 6c 75 67 6c 69 6f 5f 61 67 6f 73 74 6f 5f 73 65 74 74 65 6d 62 72 65 5f 6f 74 74 6f 62 72 65 5f 6e 6f 76 65 6d 62 72 65 5f 64 69 63 65 6d 62 72 65 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 67 65 6e 5f 66 65 62 5f 6d 61 72 5f 61 70 72 5f 6d 61 67 5f 67 69 75 5f 6c 75 67 5f 61 67 6f 5f 73 65 74 5f 6f 74 74 5f 6e 6f 76 5f 64 69 63 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 22 64 6f 6d 65 6e 69 63 61 5f 6c 75 6e 65 64 c3 ac 5f 6d 61 72 Data Ascii: 7fe0iguratione.defineLocale("it",{months:"gennaio_febbraio_marzo_aprile_maggio_giugno_luglio_agosto_settembre_ottobre_novembre_dicembre".split("_"),monthsShort:"gen_feb_mar_apr_mag_giu_lug_ago_set_ott_nov_dic".split("_"),weekdays:"domenica_luned_mar
2024-05-15 22:36:28 UTC	16360	IN	Data Raw: 3f 22 70 6e 22 3a 22 50 4e 22 7d 2c 6d 65 72 69 64 69 65 6d 50 61 72 73 65 3a 2f 62 6e 7c 42 4e 7c 70 6e 7c 50 4e 2f 2c 6c 6f 6e 67 44 61 74 65 46 6f 72 6d 61 74 3a 7b 4c 54 3a 22 48 48 3a 6d 6d 22 2c 4c 54 53 3a 22 48 48 3a 6d 6d 3a 73 73 22 2c 4c 3a 22 44 44 2e 4d 4d 2e 59 59 59 59 22 2c 4c 4c 3a 22 44 6f 20 4d 4d 4d 4d 5b 61 5d 20 59 59 59 59 5b 61 6e 5d 22 2c 4c 4c 4c 3a 22 44 6f 20 4d 4d 4d 4d 5b 61 5d 20 59 59 59 59 5b 61 6e 5d 20 48 48 3a 6d 6d 22 2c 4c 4c 4c 4c 3a 22 64 64 64 64 2c 20 44 6f 20 4d 4d 4d 4d 5b 61 5d 20 59 59 59 59 5b 61 6e 5d 20 48 48 3a 6d 6d 22 2c 6c 6c 3a 22 44 6f 20 4d 4d 4d 5b 2e 5d 20 59 59 59 59 5b 61 6e 5d 22 2c 6c 6c 6c 3a 22 44 6f 20 4d 4d 4d 5b 2e 5d 20 59 59 59 59 5b 61 6e 5d 20 48 48 3a 6d 6d 22 2c 6c 6c 6c 6c 3a 22 64 Data Ascii: ?"pn":"PN"},meridiemParse:/bn\|BN\|pn\|PN/,longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"DD.MM.YYYY",LL:"Do MMMM[a] YYYY[an]",LLL:"Do MMMM[a] YYYY[an] HH:mm",LLLL:"dddd, Do MMMM[a] YYYY[an] HH:mm",ll:"Do MMM[.] YYYY[an]",lll:"Do MMM[.] YYYY[an] HH:mm",llll:"d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49796	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:26 UTC	770	OUT	GET /public/javascript/applications/community/libraries~7bb437d7f.js?contenthash=db9788aa72093ef41f9a HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:27 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:27 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177330 Expires: Fri, 17 May 2024 23:51:57 GMT
2024-05-15 22:36:27 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 36 34 5d 2c 7b 39 38 39 37 33 3a 28 4d 2c 7a Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[4264],{98973:(M,z
2024-05-15 22:36:27 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 30 30 20 65 30 30 20 32 38 4d 30 20 65 30 30 20 32 36 30 30 20 67 4d 30 20 32 36 30 30 20 65 30 30 20 32 38 4d 30 20 65 30 30 20 32 36 30 30 20 67 4d 30 7c 33 32 65 35 22 2c 22 41 66 72 69 63 61 2f 43 65 75 74 61 7c 4c 4d 54 20 57 45 54 20 57 45 53 54 20 43 45 54 20 43 45 53 54 7c 6c 2e 67 20 30 20 2d 31 30 20 2d 31 30 20 2d 32 30 7c 30 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 34 33 Data Ascii: 3ff000 e00 28M0 e00 2600 gM0 2600 e00 28M0 e00 2600 gM0\|32e5","Africa/Ceuta\|LMT WET WEST CET CEST\|l.g 0 -10 -10 -20\|01212121212121212121213434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343434343
2024-05-15 22:36:28 UTC	16379	IN	Data Raw: 33 66 66 33 0d 0a 31 63 4c 30 20 31 63 4e 30 20 31 63 4c 30 20 73 31 30 20 31 56 7a 30 20 4c 42 30 20 31 42 58 30 20 31 63 4e 30 20 31 66 7a 30 20 31 61 31 30 20 31 66 7a 30 20 31 63 4e 30 20 31 63 4c 30 20 31 63 4e 30 20 31 63 4c 30 20 31 63 4e 30 20 31 63 4c 30 20 31 63 4e 30 20 31 63 4c 30 20 31 63 4e 30 20 31 66 7a 30 20 31 61 31 30 20 31 66 7a 30 20 63 6d 30 20 31 30 71 30 20 31 63 4c 30 20 31 63 4e 30 20 31 63 4c 30 20 31 63 4e 30 20 31 63 4c 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 70 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 70 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 34 70 30 20 31 6c 62 30 20 31 34 Data Ascii: 3ff31cL0 1cN0 1cL0 s10 1Vz0 LB0 1BX0 1cN0 1fz0 1a10 1fz0 1cN0 1cL0 1cN0 1cL0 1cN0 1cL0 1cN0 1cL0 1cN0 1fz0 1a10 1fz0 cm0 10q0 1cL0 1cN0 1cL0 1cN0 1cL0 14p0 1lb0 14p0 1nX0 11B0 1nX0 11B0 1nX0 14p0 1lb0 14p0 1lb0 14p0 1nX0 11B0 1nX0 11B0 1nX0 14p0 1lb0 14
2024-05-15 22:36:28 UTC	5	IN	Data Raw: 33 66 65 64 0d Data Ascii: 3fed
2024-05-15 22:36:28 UTC	16384	IN	Data Raw: 0a 20 31 39 58 30 20 31 66 42 30 20 31 39 58 30 20 31 66 42 30 20 31 39 58 30 20 31 66 42 30 20 31 39 58 30 20 31 69 70 30 20 31 37 62 30 20 31 69 70 30 20 31 37 62 30 20 31 69 70 30 20 31 39 58 30 20 31 66 42 30 20 31 39 58 30 20 31 66 42 30 20 31 39 58 30 20 31 69 70 30 20 31 37 62 30 20 31 69 70 30 20 31 37 62 30 20 31 69 70 30 20 31 37 62 30 20 31 69 70 30 7c 32 38 65 35 22 2c 22 41 6d 65 72 69 63 61 2f 50 61 6e 61 6d 61 7c 4c 4d 54 20 43 4d 54 20 45 53 54 7c 35 69 2e 38 20 35 6a 2e 41 20 35 30 7c 30 31 32 7c 2d 33 65 4c 75 46 2e 51 20 49 79 30 31 2e 73 7c 31 35 65 35 22 2c 22 41 6d 65 72 69 63 61 2f 42 61 68 69 61 5f 42 61 6e 64 65 72 61 73 7c 4c 4d 54 20 4d 53 54 20 43 53 54 20 4d 44 54 20 50 53 54 20 43 44 54 7c 37 31 20 37 30 20 36 30 20 36 30 20 Data Ascii: 19X0 1fB0 19X0 1fB0 19X0 1fB0 19X0 1ip0 17b0 1ip0 17b0 1ip0 19X0 1fB0 19X0 1fB0 19X0 1ip0 17b0 1ip0 17b0 1ip0 17b0 1ip0\|28e5","America/Panama\|LMT CMT EST\|5i.8 5j.A 50\|012\|-3eLuF.Q Iy01.s\|15e5","America/Bahia_Banderas\|LMT MST CST MDT PST CDT\|71 70 60 60
2024-05-15 22:36:28 UTC	16352	IN	Data Raw: 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 7c 2d 33 74 46 47 30 20 31 6e 45 65 30 20 31 6e 58 30 20 31 31 42 30 20 31 6e 58 30 20 31 Data Ascii: 121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121212121\|-3tFG0 1nEe0 1nX0 11B0 1nX0 1
2024-05-15 22:36:28 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 Data Ascii: 7fd8zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op
2024-05-15 22:36:28 UTC	16352	IN	Data Raw: 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 Data Ascii: 232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232
2024-05-15 22:36:28 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 Data Ascii: 7fe0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1
2024-05-15 22:36:28 UTC	16360	IN	Data Raw: 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 52 64 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 30 20 4f 70 30 20 31 7a 62 Data Ascii: 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Rd0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb0 Op0 1zb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49797	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:27 UTC	770	OUT	GET /public/javascript/applications/community/libraries~c18a43282.js?contenthash=1797f4a7ab8c2f27a11c HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:28 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:27 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177262 Expires: Fri, 17 May 2024 23:50:49 GMT
2024-05-15 22:36:28 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 38 33 5d Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[483]
2024-05-15 22:36:28 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 63 74 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 61 44 28 42 2e 4d 28 29 2c 65 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 65 29 7b 6c 65 74 20 72 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 52 65 61 64 65 72 28 65 29 2c 74 3d 6e 65 77 20 42 3b 72 65 74 75 72 6e 20 42 2e 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 74 2c 72 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 2e 46 28 42 2e 4d 42 46 28 29 2c 65 2c 72 29 7d 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 42 2e Data Ascii: 3ff0ct(e){return n.aD(B.M(),e)}static deserializeBinary(e){let r=new i.BinaryReader(e),t=new B;return B.deserializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){return n.F(B.MBF(),e,r)}serializeBinary(){var e=new i.BinaryWriter;return B.
2024-05-15 22:36:28 UTC	16380	IN	Data Raw: 33 66 66 34 0d 0a 20 66 72 6f 6d 4f 62 6a 65 63 74 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 57 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 65 29 7b 6c 65 74 20 72 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 52 65 61 64 65 72 28 65 29 2c 74 3d 6e 65 77 20 57 3b 72 65 74 75 72 6e 20 57 2e 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 74 2c 72 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 7d 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 57 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 Data Ascii: 3ff4 fromObject(e){return new W}static deserializeBinary(e){let r=new i.BinaryReader(e),t=new W;return W.deserializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){return e}serializeBinary(){var e=new i.BinaryWriter;return W.serializeBinar
2024-05-15 22:36:28 UTC	4	IN	Data Raw: 37 30 66 30 Data Ascii: 70f0
2024-05-15 22:36:28 UTC	16384	IN	Data Raw: 0d 0a 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 65 29 7b 6c 65 74 20 72 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 52 65 61 64 65 72 28 65 29 2c 74 3d 6e 65 77 20 71 3b 72 65 74 75 72 6e 20 71 2e 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 74 2c 72 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 2e 46 28 71 2e 4d 42 46 28 29 2c 65 2c 72 29 7d 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 71 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 Data Ascii: static deserializeBinary(e){let r=new i.BinaryReader(e),t=new q;return q.deserializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){return n.F(q.MBF(),e,r)}serializeBinary(){var e=new i.BinaryWriter;return q.serializeBinaryToWriter(this,e)
2024-05-15 22:36:28 UTC	12532	IN	Data Raw: 31 22 2c 28 30 2c 61 2e 4d 44 29 28 5f 2c 72 29 2c 67 2c 7b 62 43 6f 6e 73 74 4d 65 74 68 6f 64 3a 21 30 2c 65 50 72 69 76 69 6c 65 67 65 3a 30 2c 65 57 65 62 41 50 49 4b 65 79 52 65 71 75 69 72 65 6d 65 6e 74 3a 31 7d 29 7d 2c 65 2e 47 65 74 44 69 73 63 6f 76 65 72 79 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 53 65 6e 64 4d 73 67 28 22 53 74 6f 72 65 2e 47 65 74 44 69 73 63 6f 76 65 72 79 51 75 65 75 65 23 31 22 2c 28 30 2c 61 2e 4d 44 29 28 46 2c 72 29 2c 52 2c 7b 62 43 6f 6e 73 74 4d 65 74 68 6f 64 3a 21 30 2c 65 50 72 69 76 69 6c 65 67 65 3a 31 7d 29 7d 2c 65 2e 47 65 74 44 69 73 63 6f 76 65 72 79 51 75 65 75 65 53 65 74 74 69 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e Data Ascii: 1",(0,a.MD)(_,r),g,{bConstMethod:!0,ePrivilege:0,eWebAPIKeyRequirement:1})},e.GetDiscoveryQueue=function(e,r){return e.SendMsg("Store.GetDiscoveryQueue#1",(0,a.MD)(F,r),R,{bConstMethod:!0,ePrivilege:1})},e.GetDiscoveryQueueSettings=function(e,r){return e.
2024-05-15 22:36:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49798	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:28 UTC	770	OUT	GET /public/javascript/applications/community/libraries~c7a3fa389.js?contenthash=28f31dbe47f6b6412c17 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:29 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:28 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177405 Expires: Fri, 17 May 2024 23:53:13 GMT
2024-05-15 22:36:29 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 32 37 35 Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[3275
2024-05-15 22:36:29 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 73 6d 5f 6d 62 66 3d 61 2e 42 68 28 70 2e 4d 28 29 29 29 2c 70 2e 73 6d 5f 6d 62 66 7d 74 6f 4f 62 6a 65 63 74 28 65 3d 21 31 29 7b 72 65 74 75 72 6e 20 70 2e 74 6f 4f 62 6a 65 63 74 28 65 2c 74 68 69 73 29 7d 73 74 61 74 69 63 20 74 6f 4f 62 6a 65 63 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 61 2e 54 41 28 70 2e 4d 28 29 2c 65 2c 72 29 7d 73 74 61 74 69 63 20 66 72 6f 6d 4f 62 6a 65 63 74 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 44 28 70 2e 4d 28 29 2c 65 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 65 29 7b 6c 65 74 20 72 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 52 65 61 64 65 72 28 65 29 2c 74 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 70 2e 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f Data Ascii: 3ff0sm_mbf=a.Bh(p.M())),p.sm_mbf}toObject(e=!1){return p.toObject(e,this)}static toObject(e,r){return a.TA(p.M(),e,r)}static fromObject(e){return a.aD(p.M(),e)}static deserializeBinary(e){let r=new i.BinaryReader(e),t=new p;return p.deserializeBinaryFro
2024-05-15 22:36:29 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 6a 65 63 74 28 65 2c 74 68 69 73 29 7d 73 74 61 74 69 63 20 74 6f 4f 62 6a 65 63 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 61 2e 54 41 28 50 2e 4d 28 29 2c 65 2c 72 29 7d 73 74 61 74 69 63 20 66 72 6f 6d 4f 62 6a 65 63 74 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 44 28 50 2e 4d 28 29 2c 65 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 65 29 7b 6c 65 74 20 72 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 52 65 61 64 65 72 28 65 29 2c 74 3d 6e 65 77 20 50 3b 72 65 74 75 72 6e 20 50 2e 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 74 2c 72 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 Data Ascii: 3ff0ject(e,this)}static toObject(e,r){return a.TA(P.M(),e,r)}static fromObject(e){return a.aD(P.M(),e)}static deserializeBinary(e){let r=new i.BinaryReader(e),t=new P;return P.deserializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){retu
2024-05-15 22:36:29 UTC	8	IN	Data Raw: 32 61 31 34 0d 0a 64 65 Data Ascii: 2a14de
2024-05-15 22:36:29 UTC	10772	IN	Data Raw: 72 28 65 29 2c 74 3d 6e 65 77 20 4a 3b 72 65 74 75 72 6e 20 4a 2e 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 74 2c 72 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 61 2e 46 28 4a 2e 4d 42 46 28 29 2c 65 2c 72 29 7d 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 4a 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 2c 65 2e 67 65 74 52 65 73 75 6c 74 42 75 66 66 65 72 28 29 7d 73 74 61 74 69 63 20 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 65 Data Ascii: r(e),t=new J;return J.deserializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){return a.F(J.MBF(),e,r)}serializeBinary(){var e=new i.BinaryWriter;return J.serializeBinaryToWriter(this,e),e.getResultBuffer()}static serializeBinaryToWriter(e
2024-05-15 22:36:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49799	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:28 UTC	770	OUT	GET /public/javascript/applications/community/libraries~642602239.js?contenthash=5dd5b4d316afbe01d44f HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:29 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:29 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177260 Expires: Fri, 17 May 2024 23:50:49 GMT
2024-05-15 22:36:29 UTC	16117	IN	Data Raw: 37 65 63 33 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 36 35 36 Data Ascii: 7ec3/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[6656
2024-05-15 22:36:29 UTC	16342	IN	Data Raw: 72 72 65 6e 74 53 6c 69 64 65 21 3d 3d 65 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 26 26 21 74 68 69 73 2e 70 72 6f 70 73 2e 64 69 73 61 62 6c 65 41 6e 69 6d 61 74 69 6f 6e 26 26 28 72 2e 64 69 73 61 62 6c 65 41 6e 69 6d 61 74 69 6f 6e 3d 21 30 2c 72 2e 70 72 69 76 61 74 65 55 6e 44 69 73 61 62 6c 65 41 6e 69 6d 61 74 69 6f 6e 3d 21 30 29 2c 74 68 69 73 2e 70 72 6f 70 73 2e 74 6f 74 61 6c 53 6c 69 64 65 73 3d 3d 3d 65 2e 74 6f 74 61 6c 53 6c 69 64 65 73 26 26 74 68 69 73 2e 70 72 6f 70 73 2e 76 69 73 69 62 6c 65 53 6c 69 64 65 73 3d 3d 3d 65 2e 76 69 73 69 62 6c 65 53 6c 69 64 65 73 7c 7c 28 72 2e 73 6c 69 64 65 53 69 7a 65 3d 42 28 74 68 69 73 2e 70 72 6f 70 73 2e 74 6f 74 61 6c 53 6c 69 64 65 73 2c 74 68 69 73 2e 70 72 6f 70 73 2e 76 69 73 69 62 6c 65 53 Data Ascii: rrentSlide!==e.currentSlide&&!this.props.disableAnimation&&(r.disableAnimation=!0,r.privateUnDisableAnimation=!0),this.props.totalSlides===e.totalSlides&&this.props.visibleSlides===e.visibleSlides\|\|(r.slideSize=B(this.props.totalSlides,this.props.visibleS
2024-05-15 22:36:30 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 6c 53 74 6f 72 65 2e 73 65 74 53 74 6f 72 65 53 74 61 74 65 28 7b 69 73 50 61 67 65 53 63 72 6f 6c 6c 4c 6f 63 6b 65 64 3a 21 31 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 49 6d 61 67 65 43 6f 6d 70 6c 65 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 69 73 49 6d 61 67 65 4c 6f 61 64 69 6e 67 3a 21 31 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 4f 6e 4d 6f 75 73 65 4f 76 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 74 61 74 65 2e 69 73 5a 6f 6f 6d 69 6e 67 7c 7c 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 69 73 48 6f 76 65 72 69 6e 67 3a 21 30 2c 73 63 61 6c 65 3a 32 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 4f 6e 4d Data Ascii: 3ff0lStore.setStoreState({isPageScrollLocked:!1})}},{key:"handleImageComplete",value:function(){this.setState({isImageLoading:!1})}},{key:"handleOnMouseOver",value:function(){this.state.isZooming\|\|this.setState({isHovering:!0,scale:2})}},{key:"handleOnM
2024-05-15 22:36:30 UTC	8	IN	Data Raw: 33 66 65 38 0d 0a 3d 65 Data Ascii: 3fe8=e
2024-05-15 22:36:30 UTC	16384	IN	Data Raw: 2e 63 61 72 6f 75 73 65 6c 53 74 6f 72 65 2c 72 3d 65 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 69 3d 65 2e 74 6f 74 61 6c 53 6c 69 64 65 73 2c 6e 3d 65 2e 76 69 73 69 62 6c 65 53 6c 69 64 65 73 3b 74 2e 73 65 74 53 74 6f 72 65 53 74 61 74 65 28 7b 63 75 72 72 65 6e 74 53 6c 69 64 65 3a 74 68 69 73 2e 62 61 63 6b 77 61 72 64 28 29 3d 3d 3d 72 3f 69 2d 6e 3a 74 68 69 73 2e 62 61 63 6b 77 61 72 64 28 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 70 6c 61 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 70 72 6f 70 73 2e 70 6c 61 79 44 69 72 65 63 74 69 6f 6e 3b 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 22 66 6f 72 77 61 72 64 22 3d 3d 3d 65 3f 74 68 69 73 2e 70 6c 61 79 46 6f 72 77 61 72 Data Ascii: .carouselStore,r=e.currentSlide,i=e.totalSlides,n=e.visibleSlides;t.setStoreState({currentSlide:this.backward()===r?i-n:this.backward()})}},{key:"play",value:function(){var e=this.props.playDirection;this.interval=setInterval("forward"===e?this.playForwar
2024-05-15 22:36:30 UTC	10570	IN	Data Raw: 29 7d 73 65 72 69 61 6c 69 7a 65 42 61 73 65 36 34 53 74 72 69 6e 67 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 6d 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 2c 65 2e 67 65 74 52 65 73 75 6c 74 42 61 73 65 36 34 53 74 72 69 6e 67 28 29 7d 67 65 74 43 6c 61 73 73 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 22 43 51 75 65 73 74 5f 47 65 74 43 6f 6d 6d 75 6e 69 74 79 49 74 65 6d 44 65 66 69 6e 69 74 69 6f 6e 73 5f 52 65 73 70 6f 6e 73 65 5f 49 74 65 6d 44 65 66 69 6e 69 74 69 6f 6e 22 7d 7d 63 6c 61 73 73 20 70 20 65 78 74 65 6e 64 73 20 73 7b 73 74 61 74 69 63 20 49 6d 70 6c 65 6d 65 6e 74 73 53 74 61 74 69 63 49 6e 74 65 72 66 61 63 65 28 29 7b 7d Data Ascii: )}serializeBase64String(){var e=new i.BinaryWriter;return m.serializeBinaryToWriter(this,e),e.getResultBase64String()}getClassName(){return"CQuest_GetCommunityItemDefinitions_Response_ItemDefinition"}}class p extends s{static ImplementsStaticInterface(){}
2024-05-15 22:36:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49800	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:28 UTC	770	OUT	GET /public/javascript/applications/community/libraries~69438e232.js?contenthash=fb8a441e33487b799219 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:30 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:29 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177412 Expires: Fri, 17 May 2024 23:53:21 GMT
2024-05-15 22:36:30 UTC	16117	IN	Data Raw: 37 65 63 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 37 38 Data Ascii: 7eca/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[7978
2024-05-15 22:36:30 UTC	16349	IN	Data Raw: 2e 61 44 28 67 2e 4d 28 29 2c 65 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 65 29 7b 6c 65 74 20 72 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 52 65 61 64 65 72 28 65 29 2c 74 3d 6e 65 77 20 67 3b 72 65 74 75 72 6e 20 67 2e 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 74 2c 72 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 2e 46 28 67 2e 4d 42 46 28 29 2c 65 2c 72 29 7d 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 67 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 Data Ascii: .aD(g.M(),e)}static deserializeBinary(e){let r=new i.BinaryReader(e),t=new g;return g.deserializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){return n.F(g.MBF(),e,r)}serializeBinary(){var e=new i.BinaryWriter;return g.serializeBinaryToWri
2024-05-15 22:36:30 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 2e 46 28 4d 2e 4d 42 46 28 29 2c 65 2c 72 29 7d 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 4d 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 2c 65 2e 67 65 74 52 65 73 75 6c 74 42 75 66 66 65 72 28 29 7d 73 74 61 74 69 63 20 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 65 2c 72 29 7b 6e 2e 6c 32 28 4d 2e 4d 28 29 2c 65 2c 72 29 7d 73 65 72 69 61 6c 69 7a 65 42 61 73 65 36 34 53 74 72 69 6e 67 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e Data Ascii: 3ff0deserializeBinaryFromReader(e,r){return n.F(M.MBF(),e,r)}serializeBinary(){var e=new i.BinaryWriter;return M.serializeBinaryToWriter(this,e),e.getResultBuffer()}static serializeBinaryToWriter(e,r){n.l2(M.M(),e,r)}serializeBase64String(){var e=new i.
2024-05-15 22:36:30 UTC	8	IN	Data Raw: 36 37 61 63 0d 0a 72 6e Data Ascii: 67acrn
2024-05-15 22:36:30 UTC	16384	IN	Data Raw: 20 75 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 2c 65 2e 67 65 74 52 65 73 75 6c 74 42 61 73 65 36 34 53 74 72 69 6e 67 28 29 7d 67 65 74 43 6c 61 73 73 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 22 43 55 73 65 72 41 63 63 6f 75 6e 74 5f 47 65 74 57 61 6c 6c 65 74 44 65 74 61 69 6c 73 5f 52 65 73 70 6f 6e 73 65 22 7d 7d 63 6c 61 73 73 20 6d 20 65 78 74 65 6e 64 73 20 73 7b 73 74 61 74 69 63 20 49 6d 70 6c 65 6d 65 6e 74 73 53 74 61 74 69 63 49 6e 74 65 72 66 61 63 65 28 29 7b 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 6e 75 6c 6c 29 7b 73 75 70 65 72 28 29 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 5f 62 61 6c 61 6e 63 65 5f 69 6e 5f 75 73 64 7c 7c 6e 2e 61 52 28 6d 2e 4d 28 29 29 2c 73 Data Ascii: u.serializeBinaryToWriter(this,e),e.getResultBase64String()}getClassName(){return"CUserAccount_GetWalletDetails_Response"}}class m extends s{static ImplementsStaticInterface(){}constructor(e=null){super(),m.prototype.include_balance_in_usd\|\|n.aR(m.M()),s
2024-05-15 22:36:30 UTC	10156	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 61 74 5f 74 6f 6f 6c 7c 7c 6e 2e 61 52 28 57 2e 4d 28 29 29 2c 73 2e 69 6e 69 74 69 61 6c 69 7a 65 28 74 68 69 73 2c 65 2c 30 2c 2d 31 2c 76 6f 69 64 20 30 2c 6e 75 6c 6c 29 7d 73 74 61 74 69 63 20 4d 28 29 7b 72 65 74 75 72 6e 20 57 2e 73 6d 5f 6d 7c 7c 28 57 2e 73 6d 5f 6d 3d 7b 70 72 6f 74 6f 3a 57 2c 66 69 65 6c 64 73 3a 7b 63 6f 6d 70 61 74 5f 74 6f 6f 6c 3a 7b 6e 3a 31 2c 62 72 3a 6e 2e 46 45 2e 72 65 61 64 55 69 6e 74 33 32 2c 62 77 3a 6e 2e 58 63 2e 77 72 69 74 65 55 69 6e 74 33 32 7d 7d 7d 29 2c 57 2e 73 6d 5f 6d 7d 73 74 61 74 69 63 20 4d 42 46 28 29 7b 72 65 74 75 72 6e 20 57 2e 73 6d 5f 6d 62 66 7c 7c 28 57 2e 73 6d 5f 6d 62 66 3d 6e 2e 42 68 28 57 2e 4d 28 29 29 29 2c 57 2e 73 6d 5f 6d 62 66 7d 74 6f Data Ascii: prototype.compat_tool\|\|n.aR(W.M()),s.initialize(this,e,0,-1,void 0,null)}static M(){return W.sm_m\|\|(W.sm_m={proto:W,fields:{compat_tool:{n:1,br:n.FE.readUint32,bw:n.Xc.writeUint32}}}),W.sm_m}static MBF(){return W.sm_mbf\|\|(W.sm_mbf=n.Bh(W.M())),W.sm_mbf}to
2024-05-15 22:36:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49801	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:29 UTC	770	OUT	GET /public/javascript/applications/community/libraries~5a92743e8.js?contenthash=dabd8f9cfdbfdd68c5e2 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:30 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:30 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=174013 Expires: Fri, 17 May 2024 22:56:43 GMT
2024-05-15 22:36:30 UTC	12994	IN	Data Raw: 33 32 62 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 32 39 Data Ascii: 32ba/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2829
2024-05-15 22:36:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49802	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:29 UTC	770	OUT	GET /public/javascript/applications/community/libraries~d2dd7ecf6.js?contenthash=7e6163823fa1c736f5c0 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:30 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:30 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177204 Expires: Fri, 17 May 2024 23:49:54 GMT
2024-05-15 22:36:30 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 34 36 38 5d 2c 7b 34 35 38 32 35 3a 28 65 2c 74 Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2468],{45825:(e,t
2024-05-15 22:36:30 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 3d 3d 3d 74 3f 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 3a 74 2c 72 3d 65 2e 77 69 64 74 68 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 32 34 3a 72 2c 6c 3d 65 2e 68 65 69 67 68 74 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 6c 3f 32 34 3a 6c 2c 63 3d 65 2e 73 74 79 6c 65 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 7b 7d 3a 63 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 74 2e 69 6e 64 65 78 4f 66 28 72 29 3e 3d 30 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 72 29 26 26 28 6e 5b 72 5d 3d 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 28 65 2c 5b 22 66 69 6c 6c 22 2c 22 77 69 64 74 68 22 2c 22 68 Data Ascii: 3ff0===t?"currentColor":t,r=e.width,i=void 0===r?24:r,l=e.height,s=void 0===l?24:l,c=e.style,u=void 0===c?{}:c,d=function(e,t){var n={};for(var r in e)t.indexOf(r)>=0\|\|Object.prototype.hasOwnProperty.call(e,r)&&(n[r]=e[r]);return n}(e,["fill","width","h
2024-05-15 22:36:31 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 29 21 3d 70 7c 7c 6c 26 26 78 28 6e 65 77 20 6c 29 21 3d 66 29 26 26 28 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 73 28 65 29 2c 6e 3d 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 74 3f 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3a 76 6f 69 64 20 30 2c 72 3d 6e 3f 63 28 6e 29 3a 22 22 3b 69 66 28 72 29 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 76 3a 72 65 74 75 72 6e 20 68 3b 63 61 73 65 20 67 3a 72 65 74 75 72 6e 20 75 3b 63 61 73 65 20 6d 3a 72 65 74 75 72 6e 20 64 3b 63 61 73 65 20 62 3a 72 65 74 75 72 6e 20 70 3b 63 61 73 65 20 79 3a 72 65 74 75 72 6e 20 66 7d 72 65 74 75 72 6e 20 74 7d 29 2c 65 2e 65 78 70 6f 72 74 73 3d 78 7d 2c 39 31 37 34 31 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 Data Ascii: 3ff0)!=p\|\|l&&x(new l)!=f)&&(x=function(e){var t=s(e),n="[object Object]"==t?e.constructor:void 0,r=n?c(n):"";if(r)switch(r){case v:return h;case g:return u;case m:return d;case b:return p;case y:return f}return t}),e.exports=x},91741:e=>{e.exports=funct
2024-05-15 22:36:31 UTC	8	IN	Data Raw: 33 66 65 38 0d 0a 6e 28 Data Ascii: 3fe8n(
2024-05-15 22:36:31 UTC	16384	IN	Data Raw: 65 29 7b 6e 2e 70 72 6f 70 73 2e 64 72 61 67 4c 61 62 65 6c 26 26 28 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6e 2e 68 61 6e 64 6c 65 44 72 61 67 28 65 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 6e 2e 68 61 6e 64 6c 65 44 72 61 67 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 75 70 22 2c 6e 2e 68 61 6e 64 6c 65 4d 6f 75 73 65 55 70 29 29 7d 2c 6e 2e 68 61 6e 64 6c 65 4d 6f 75 73 65 55 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 75 6e 62 69 6e 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 2c 6e 2e 75 6e 62 69 6e 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e Data Ascii: e){n.props.dragLabel&&(e.preventDefault(),n.handleDrag(e),window.addEventListener("mousemove",n.handleDrag),window.addEventListener("mouseup",n.handleMouseUp))},n.handleMouseUp=function(){n.unbindEventListeners()},n.unbindEventListeners=function(){window.
2024-05-15 22:36:31 UTC	16352	IN	Data Raw: 7c 6c 74 28 73 29 3f 28 75 3d 6c 2c 6c 74 28 6c 29 3f 75 3d 57 74 28 6c 29 3a 71 28 6c 29 26 26 21 4b 28 6c 29 7c 7c 28 75 3d 74 74 28 73 29 29 29 3a 64 3d 21 31 7d 64 26 26 28 61 2e 73 65 74 28 73 2c 75 29 2c 6f 28 75 2c 73 2c 72 2c 69 2c 61 29 2c 61 2e 64 65 6c 65 74 65 28 73 29 29 2c 4c 65 28 65 2c 6e 2c 75 29 7d 7d 3b 63 6f 6e 73 74 20 59 74 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 74 21 3d 3d 6e 26 26 46 65 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 6c 29 7b 69 66 28 69 7c 7c 28 69 3d 6e 65 77 20 6a 65 29 2c 71 28 61 29 29 55 74 28 74 2c 6e 2c 6c 2c 72 2c 65 2c 6f 2c 69 29 3b 65 6c 73 65 7b 76 61 72 20 73 3d 6f 3f 6f 28 4d 74 28 74 2c 6c 29 2c 61 2c 6c 2b 22 22 2c 74 2c 6e 2c 69 29 3a 76 6f 69 64 20 30 3b 76 6f 69 64 20 Data Ascii: \|lt(s)?(u=l,lt(l)?u=Wt(l):q(l)&&!K(l)\|\|(u=tt(s))):d=!1}d&&(a.set(s,u),o(u,s,r,i,a),a.delete(s)),Le(e,n,u)}};const Yt=function e(t,n,r,o,i){t!==n&&Fe(n,(function(a,l){if(i\|\|(i=new je),q(a))Ut(t,n,l,r,e,o,i);else{var s=o?o(Mt(t,l),a,l+"",t,n,i):void 0;void
2024-05-15 22:36:31 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 74 75 72 6e 7b 72 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 72 72 28 74 68 69 73 2e 5f 72 2c 32 35 35 29 29 2b 22 25 22 2c 67 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 72 72 28 74 68 69 73 2e 5f 67 2c 32 35 35 29 29 2b 22 25 22 2c 62 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 72 72 28 74 68 69 73 2e 5f 62 2c 32 35 35 29 29 2b 22 25 22 2c 61 3a 74 68 69 73 2e 5f 61 7d 7d 2c 74 6f 50 65 72 63 65 6e 74 61 67 65 52 67 62 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 3d 3d 74 68 69 73 2e 5f 61 3f 22 72 67 62 28 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 72 72 28 74 68 69 73 2e 5f 72 2c 32 35 35 29 29 2b 22 25 2c 20 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 72 72 28 74 68 69 73 Data Ascii: 7fe0turn{r:Math.round(100rr(this._r,255))+"%",g:Math.round(100rr(this._g,255))+"%",b:Math.round(100rr(this._b,255))+"%",a:this._a}},toPercentageRgbString:function(){return 1==this._a?"rgb("+Math.round(100rr(this._r,255))+"%, "+Math.round(100*rr(this
2024-05-15 22:36:31 UTC	16360	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 28 65 29 3b 72 65 74 75 72 6e 20 73 74 28 65 29 3f 72 3a 47 72 28 72 2c 6e 28 65 29 29 7d 3b 63 6f 6e 73 74 20 55 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2d 31 2c 72 3d 6e 75 6c 6c 3d 3d 65 3f 30 3a 65 2e 6c 65 6e 67 74 68 2c 6f 3d 30 2c 69 3d 5b 5d 3b 2b 2b 6e 3c 72 3b 29 7b 76 61 72 20 61 3d 65 5b 6e 5d 3b 74 28 61 2c 6e 2c 65 29 26 26 28 69 5b 6f 2b 2b 5d 3d 61 29 7d 72 65 74 75 72 6e 20 69 7d 3b 63 6f 6e 73 74 20 59 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 5d 7d 3b 76 61 72 20 24 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 58 72 3d 4f 62 6a 65 63 74 2e 67 Data Ascii: unction(e,t,n){var r=t(e);return st(e)?r:Gr(r,n(e))};const Ur=function(e,t){for(var n=-1,r=null==e?0:e.length,o=0,i=[];++n<r;){var a=e[n];t(a,n,e)&&(i[o++]=a)}return i};const Yr=function(){return[]};var $r=Object.prototype.propertyIsEnumerable,Xr=Object.g
2024-05-15 22:36:31 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 6c 61 62 65 6c 3a 22 72 22 2c 76 61 6c 75 65 3a 74 68 69 73 2e 70 72 6f 70 73 2e 72 67 62 2e 72 2c 6f 6e 43 68 61 6e 67 65 3a 74 68 69 73 2e 68 61 6e 64 6c 65 43 68 61 6e 67 65 7d 29 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 74 2e 66 69 65 6c 64 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6d 2c 7b 73 74 79 6c 65 3a 7b 69 6e 70 75 74 3a 74 2e 69 6e 70 75 74 2c 6c 61 62 65 6c 3a 74 2e 6c 61 62 65 6c 7d 2c 6c 61 62 65 6c 3a 22 67 22 2c 76 61 6c 75 65 3a 74 68 69 73 2e 70 72 6f 70 73 2e 72 67 62 2e 67 2c 6f 6e 43 68 61 6e 67 65 3a 74 68 69 73 2e 68 61 6e 64 6c 65 43 68 61 6e 67 65 7d 29 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 74 Data Ascii: 7fe0label:"r",value:this.props.rgb.r,onChange:this.handleChange})),r.createElement("div",{style:t.field},r.createElement(m,{style:{input:t.input,label:t.label},label:"g",value:this.props.rgb.g,onChange:this.handleChange})),r.createElement("div",{style:t
2024-05-15 22:36:31 UTC	16360	IN	Data Raw: 3a 7b 45 78 74 65 6e 64 3a 22 74 72 69 61 6e 67 6c 65 42 6f 72 64 65 72 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 32 30 70 78 2c 20 2d 31 34 70 78 29 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 22 7d 2c 72 69 67 68 74 49 6e 73 69 64 65 3a 7b 45 78 74 65 6e 64 3a 22 74 72 69 61 6e 67 6c 65 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 2d 38 70 78 2c 20 2d 35 70 78 29 22 7d 7d 7d 29 3b 72 65 74 75 72 6e 20 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 65 2e 70 6f 69 6e 74 65 72 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 65 2e 6c 65 66 74 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 73 74 Data Ascii: :{Extend:"triangleBorder",transform:"translate(20px, -14px) rotate(180deg)"},rightInside:{Extend:"triangle",transform:"translate(-8px, -5px)"}}});return r.createElement("div",{style:e.pointer},r.createElement("div",{style:e.left},r.createElement("div",{st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49803	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:30 UTC	770	OUT	GET /public/javascript/applications/community/libraries~b1f9f17fd.js?contenthash=2a42aa43b78d464bc342 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:31 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:30 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=129307 Expires: Fri, 17 May 2024 10:31:37 GMT
2024-05-15 22:36:31 UTC	16117	IN	Data Raw: 37 65 63 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 32 31 Data Ascii: 7eca/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[1421
2024-05-15 22:36:31 UTC	16349	IN	Data Raw: 6c 32 28 4d 2e 4d 28 29 2c 65 2c 72 29 7d 73 65 72 69 61 6c 69 7a 65 42 61 73 65 36 34 53 74 72 69 6e 67 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 57 72 69 74 65 72 3b 72 65 74 75 72 6e 20 4d 2e 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 54 6f 57 72 69 74 65 72 28 74 68 69 73 2c 65 29 2c 65 2e 67 65 74 52 65 73 75 6c 74 42 61 73 65 36 34 53 74 72 69 6e 67 28 29 7d 67 65 74 43 6c 61 73 73 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 22 43 50 72 6f 6d 6f 74 69 6f 6e 50 6c 61 6e 6e 69 6e 67 5f 47 65 74 41 6c 6c 50 6c 61 6e 73 46 6f 72 41 70 70 73 5f 52 65 71 75 65 73 74 22 7d 7d 63 6c 61 73 73 20 46 20 65 78 74 65 6e 64 73 20 73 7b 73 74 61 74 69 63 20 49 6d 70 6c 65 6d 65 6e 74 73 53 74 61 74 69 63 49 6e 74 65 72 66 61 63 65 28 29 7b 7d 63 Data Ascii: l2(M.M(),e,r)}serializeBase64String(){var e=new i.BinaryWriter;return M.serializeBinaryToWriter(this,e),e.getResultBase64String()}getClassName(){return"CPromotionPlanning_GetAllPlansForApps_Request"}}class F extends s{static ImplementsStaticInterface(){}c
2024-05-15 22:36:31 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 65 63 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 3f 7b 24 6a 73 70 62 4d 65 73 73 61 67 65 49 6e 73 74 61 6e 63 65 3a 72 7d 3a 7b 7d 7d 73 74 61 74 69 63 20 66 72 6f 6d 4f 62 6a 65 63 74 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 41 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 65 29 7b 6c 65 74 20 72 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 52 65 61 64 65 72 28 65 29 2c 74 3d 6e 65 77 20 41 3b 72 65 74 75 72 6e 20 41 2e 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 74 2c 72 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 46 72 6f 6d 52 65 61 64 65 72 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 7d 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 Data Ascii: 3ff0ect(e,r){return e?{$jspbMessageInstance:r}:{}}static fromObject(e){return new A}static deserializeBinary(e){let r=new i.BinaryReader(e),t=new A;return A.deserializeBinaryFromReader(t,r)}static deserializeBinaryFromReader(e,r){return e}serializeBinar
2024-05-15 22:36:31 UTC	8	IN	Data Raw: 32 37 37 34 0d 0a 7d 7d Data Ascii: 2774}}
2024-05-15 22:36:31 UTC	10100	IN	Data Raw: 29 2c 65 65 2e 73 6d 5f 6d 7d 73 74 61 74 69 63 20 4d 42 46 28 29 7b 72 65 74 75 72 6e 20 65 65 2e 73 6d 5f 6d 62 66 7c 7c 28 65 65 2e 73 6d 5f 6d 62 66 3d 6e 2e 42 68 28 65 65 2e 4d 28 29 29 29 2c 65 65 2e 73 6d 5f 6d 62 66 7d 74 6f 4f 62 6a 65 63 74 28 65 3d 21 31 29 7b 72 65 74 75 72 6e 20 65 65 2e 74 6f 4f 62 6a 65 63 74 28 65 2c 74 68 69 73 29 7d 73 74 61 74 69 63 20 74 6f 4f 62 6a 65 63 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 2e 54 41 28 65 65 2e 4d 28 29 2c 65 2c 72 29 7d 73 74 61 74 69 63 20 66 72 6f 6d 4f 62 6a 65 63 74 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 61 44 28 65 65 2e 4d 28 29 2c 65 29 7d 73 74 61 74 69 63 20 64 65 73 65 72 69 61 6c 69 7a 65 42 69 6e 61 72 79 28 65 29 7b 6c 65 74 20 72 3d 6e 65 77 20 69 2e 42 69 6e 61 72 79 52 65 61 Data Ascii: ),ee.sm_m}static MBF(){return ee.sm_mbf\|\|(ee.sm_mbf=n.Bh(ee.M())),ee.sm_mbf}toObject(e=!1){return ee.toObject(e,this)}static toObject(e,r){return n.TA(ee.M(),e,r)}static fromObject(e){return n.aD(ee.M(),e)}static deserializeBinary(e){let r=new i.BinaryRea
2024-05-15 22:36:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49804	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:31 UTC	766	OUT	GET /public/javascript/applications/community/chunk~906a41d8e.js?contenthash=bc65a674fca36dfbad5e HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:32 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:31 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177544 Expires: Fri, 17 May 2024 23:55:35 GMT
2024-05-15 22:36:32 UTC	16099	IN	Data Raw: 33 65 64 62 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 32 32 5d 2c 7b 36 35 31 34 3a 65 3d 3e 7b 65 Data Ascii: 3edb/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2822],{6514:e=>{e
2024-05-15 22:36:32 UTC	1508	IN	Data Raw: 35 64 64 0d 0a 32 39 2e 34 37 32 2d 32 39 2e 34 36 39 2c 32 39 2e 34 37 32 63 2d 31 34 2e 32 36 35 2c 30 2d 32 36 2e 31 39 2d 31 30 2e 31 38 35 2d 32 38 2e 38 39 32 2d 32 33 2e 36 36 36 4c 32 37 2e 36 36 2c 31 35 36 2e 33 37 20 63 31 32 2e 33 35 35 2c 34 33 2e 36 39 38 2c 35 32 2e 35 30 33 2c 37 35 2e 37 33 33 2c 31 30 30 2e 31 36 2c 37 35 2e 37 33 33 63 35 37 2e 34 39 35 2c 30 2c 31 30 34 2e 31 30 34 2d 34 36 2e 36 31 2c 31 30 34 2e 31 30 34 2d 31 30 34 2e 31 30 35 53 31 38 35 2e 33 31 34 2c 32 33 2e 38 39 35 2c 31 32 37 2e 38 32 2c 32 33 2e 38 39 35 7a 22 7d 29 2c 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 73 28 29 2e 72 6f 75 6e 64 54 68 72 6f 62 62 65 72 31 35 2c 73 74 72 6f 6b 65 4c 69 6e 65 Data Ascii: 5dd29.472-29.469,29.472c-14.265,0-26.19-10.185-28.892-23.666L27.66,156.37 c12.355,43.698,52.503,75.733,100.16,75.733c57.495,0,104.104-46.61,104.104-104.105S185.314,23.895,127.82,23.895z"}),c.createElement("path",{className:s().roundThrobber15,strokeLine
2024-05-15 22:36:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49805	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:31 UTC	766	OUT	GET /public/javascript/applications/community/chunk~c1dfbefd5.js?contenthash=d2079aedcfe78a98a843 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:32 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:31 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=173955 Expires: Fri, 17 May 2024 22:55:46 GMT
2024-05-15 22:36:32 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 34 30 Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[4040
2024-05-15 22:36:32 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 6e 20 74 68 69 73 2e 42 43 68 65 63 6b 44 61 74 61 52 65 71 75 65 73 74 49 6e 63 6c 75 64 65 64 28 7b 69 6e 63 6c 75 64 65 5f 62 61 73 69 63 5f 69 6e 66 6f 3a 21 30 7d 29 2c 74 68 69 73 2e 6d 5f 42 61 73 69 63 49 6e 66 6f 3f 76 28 5b 2e 2e 2e 74 68 69 73 2e 6d 5f 42 61 73 69 63 49 6e 66 6f 2e 64 65 76 65 6c 6f 70 65 72 73 2c 2e 2e 2e 74 68 69 73 2e 6d 5f 42 61 73 69 63 49 6e 66 6f 2e 70 75 62 6c 69 73 68 65 72 73 2c 2e 2e 2e 74 68 69 73 2e 6d 5f 42 61 73 69 63 49 6e 66 6f 2e 66 72 61 6e 63 68 69 73 65 73 5d 29 3a 5b 5d 7d 47 65 74 41 6c 6c 50 75 62 6c 69 73 68 65 72 43 72 65 61 74 6f 72 43 6c 61 6e 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 42 43 68 65 63 6b 44 61 74 61 52 65 71 75 65 73 74 49 6e 63 6c 75 64 65 64 28 7b 69 6e 63 6c Data Ascii: 3ff0n this.BCheckDataRequestIncluded({include_basic_info:!0}),this.m_BasicInfo?v([...this.m_BasicInfo.developers,...this.m_BasicInfo.publishers,...this.m_BasicInfo.franchises]):[]}GetAllPublisherCreatorClans(){return this.BCheckDataRequestIncluded({incl
2024-05-15 22:36:32 UTC	16380	IN	Data Raw: 33 66 66 34 0d 0a 65 74 75 72 6e 28 30 2c 72 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 69 66 28 21 65 7c 7c 30 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 31 3b 63 6f 6e 73 74 20 73 3d 28 79 69 65 6c 64 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 65 2e 6d 61 70 28 28 65 3d 3e 74 68 69 73 2e 51 75 65 75 65 53 74 6f 72 65 49 74 65 6d 52 65 71 75 65 73 74 28 65 2c 32 2c 74 29 29 29 29 29 2e 66 69 6c 74 65 72 28 28 65 3d 3e 31 21 3d 65 29 29 3b 72 65 74 75 72 6e 20 73 2e 6c 65 6e 67 74 68 3e 30 3f 73 5b 30 5d 3a 31 7d 29 29 7d 51 75 65 75 65 4d 75 6c 74 69 70 6c 65 54 61 67 52 65 71 75 65 73 74 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 Data Ascii: 3ff4eturn(0,r.mG)(this,void 0,void 0,(function*(){if(!e\|\|0==e.length)return 1;const s=(yield Promise.all(e.map((e=>this.QueueStoreItemRequest(e,2,t))))).filter((e=>1!=e));return s.length>0?s[0]:1}))}QueueMultipleTagRequests(e,t){return(0,r.mG)(this,void
2024-05-15 22:36:32 UTC	4	IN	Data Raw: 31 36 64 62 Data Ascii: 16db
2024-05-15 22:36:32 UTC	5855	IN	Data Raw: 0d 0a 67 6e 6f 72 65 64 47 61 6d 65 3d 35 5d 3d 22 6b 5f 52 65 6a 65 63 74 49 67 6e 6f 72 65 64 47 61 6d 65 22 2c 65 5b 65 2e 6b 5f 52 65 6a 65 63 74 53 75 70 70 6f 72 74 65 64 4c 61 6e 67 75 61 67 65 3d 36 5d 3d 22 6b 5f 52 65 6a 65 63 74 53 75 70 70 6f 72 74 65 64 4c 61 6e 67 75 61 67 65 22 2c 65 5b 65 2e 6b 5f 52 65 6a 65 63 74 4e 6f 74 4c 6f 61 64 65 64 3d 37 5d 3d 22 6b 5f 52 65 6a 65 63 74 4e 6f 74 4c 6f 61 64 65 64 22 2c 65 5b 65 2e 6b 5f 52 65 6a 65 63 74 49 67 6e 6f 72 65 47 61 6d 65 54 61 67 73 3d 38 5d 3d 22 6b 5f 52 65 6a 65 63 74 49 67 6e 6f 72 65 47 61 6d 65 54 61 67 73 22 2c 65 5b 65 2e 6b 5f 52 65 6a 65 63 74 49 67 6e 6f 72 65 43 6f 6e 74 65 6e 74 44 65 73 63 72 69 70 74 6f 72 73 3d 39 5d 3d 22 6b 5f 52 65 6a 65 63 74 49 67 6e 6f 72 65 43 Data Ascii: gnoredGame=5]="k_RejectIgnoredGame",e[e.k_RejectSupportedLanguage=6]="k_RejectSupportedLanguage",e[e.k_RejectNotLoaded=7]="k_RejectNotLoaded",e[e.k_RejectIgnoreGameTags=8]="k_RejectIgnoreGameTags",e[e.k_RejectIgnoreContentDescriptors=9]="k_RejectIgnoreC
2024-05-15 22:36:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49806	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:31 UTC	766	OUT	GET /public/javascript/applications/community/chunk~0c880f568.js?contenthash=93d22b575087d05a7708 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:32 UTC	266	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:31 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=35749 Expires: Thu, 16 May 2024 08:32:20 GMT
2024-05-15 22:36:32 UTC	7732	IN	Data Raw: 31 65 32 63 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 36 38 30 Data Ascii: 1e2c/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[6680
2024-05-15 22:36:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49807	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:32 UTC	766	OUT	GET /public/javascript/applications/community/chunk~f036ce556.js?contenthash=7596e2084d8e091adc87 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:33 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:32 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=129359 Expires: Fri, 17 May 2024 10:32:31 GMT
2024-05-15 22:36:33 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 33 30 5d 2c 7b 36 38 36 32 38 3a 65 3d 3e 7b Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2530],{68628:e=>{
2024-05-15 22:36:33 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 26 26 28 74 5b 6e 2b 2b 5d 3d 74 68 69 73 2e 44 56 2b 72 29 2c 74 2e 74 3d 6e 2c 74 2e 63 6c 61 6d 70 28 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 64 4d 75 6c 74 69 70 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 5b 74 68 69 73 2e 74 5d 3d 74 68 69 73 2e 61 6d 28 30 2c 65 2d 31 2c 74 68 69 73 2c 30 2c 30 2c 74 68 69 73 2e 74 29 2c 2b 2b 74 68 69 73 2e 74 2c 74 68 69 73 2e 63 6c 61 6d 70 28 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 64 41 64 64 4f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 3b 74 68 69 73 2e 74 3c 3d 74 3b 29 74 68 69 73 5b 74 68 69 73 2e 74 2b 2b 5d 3d 30 3b 66 6f 72 28 74 68 69 73 5b 74 5d 2b 3d 65 3b 74 68 69 73 5b 74 5d 3e 3d 74 68 69 73 2e 44 56 3b 29 74 68 69 73 5b 74 5d Data Ascii: 3ff0&&(t[n++]=this.DV+r),t.t=n,t.clamp()},o.prototype.dMultiply=function(e){this[this.t]=this.am(0,e-1,this,0,0,this.t),++this.t,this.clamp()},o.prototype.dAddOffset=function(e,t){for(;this.t<=t;)this[this.t++]=0;for(this[t]+=e;this[t]>=this.DV;)this[t]
2024-05-15 22:36:33 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 20 67 2e 24 68 2e 42 65 67 69 6e 41 75 74 68 53 65 73 73 69 6f 6e 56 69 61 43 72 65 64 65 6e 74 69 61 6c 73 28 74 68 69 73 2e 6d 5f 74 72 61 6e 73 70 6f 72 74 2c 66 29 3b 72 65 74 75 72 6e 20 5f 2e 44 45 42 55 47 5f 4c 6f 67 54 6f 43 6f 6e 73 6f 6c 65 28 29 2c 28 30 2c 73 2e 7a 29 28 28 28 29 3d 3e 28 30 2c 72 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 63 6f 6e 73 74 20 74 3d 5f 2e 47 65 74 45 52 65 73 75 6c 74 28 29 2c 6e 3d 5f 2e 48 64 72 28 29 2e 74 72 61 6e 73 70 6f 72 74 5f 65 72 72 6f 72 28 29 3b 69 66 28 31 21 3d 3d 74 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 5f 65 53 74 61 74 75 73 3d 32 2c 74 3b 63 61 73 65 20 Data Ascii: 3ff0 g.$h.BeginAuthSessionViaCredentials(this.m_transport,f);return _.DEBUG_LogToConsole(),(0,s.z)((()=>(0,r.mG)(this,void 0,void 0,(function*(){const t=_.GetEResult(),n=_.Hdr().transport_error();if(1!==t)switch(t){case 5:return this.m_eStatus=2,t;case
2024-05-15 22:36:33 UTC	8	IN	Data Raw: 33 66 66 30 0d 0a 74 61 Data Ascii: 3ff0ta
2024-05-15 22:36:33 UTC	16384	IN	Data Raw: 2c 7b 73 75 63 63 65 73 73 3a 61 2c 6c 6f 67 69 6e 5f 75 72 6c 3a 75 2c 65 72 72 6f 72 3a 6d 7d 3d 73 2c 68 3d 28 30 2c 72 2e 5f 54 29 28 73 2c 5b 22 73 75 63 63 65 73 73 22 2c 22 6c 6f 67 69 6e 5f 75 72 6c 22 2c 22 65 72 72 6f 72 22 5d 29 2c 64 3d 6e 65 77 20 46 6f 72 6d 44 61 74 61 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 68 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 64 2e 61 70 70 65 6e 64 28 65 2c 68 5b 65 5d 29 29 29 3b 63 6f 6e 73 74 20 66 3d 79 69 65 6c 64 20 6c 28 29 2e 70 6f 73 74 28 75 2c 64 29 2c 70 3d 32 30 30 3d 3d 3d 66 2e 73 74 61 74 75 73 26 26 31 3d 3d 3d 66 2e 64 61 74 61 2e 72 65 73 75 6c 74 3b 72 65 74 75 72 6e 20 70 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 61 73 73 69 67 6e 28 65 29 2c 70 7d 29 29 7d 28 74 2e 63 75 72 72 65 Data Ascii: ,{success:a,login_url:u,error:m}=s,h=(0,r._T)(s,["success","login_url","error"]),d=new FormData;Object.keys(h).forEach((e=>d.append(e,h[e])));const f=yield l().post(u,d),p=200===f.status&&1===f.data.result;return p&&window.location.assign(e),p}))}(t.curre
2024-05-15 22:36:34 UTC	16368	IN	Data Raw: 61 64 69 6e 67 53 70 69 6e 6e 65 72 2c 22 73 6d 61 6c 6c 22 3d 3d 74 26 26 6b 28 29 2e 53 6d 61 6c 6c 2c 28 22 6d 65 64 69 75 6d 22 3d 3d 74 7c 7c 21 74 29 26 26 6b 28 29 2e 4d 65 64 69 75 6d 2c 22 6c 61 72 67 65 22 3d 3d 74 26 26 6b 28 29 2e 4c 61 72 67 65 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6b 28 29 2e 4f 66 66 65 72 4f 66 66 6c 69 6e 65 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 75 74 74 6f 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6b 28 29 2e 4f 66 66 65 72 4f 66 66 6c 69 6e 65 42 75 74 74 6f 6e 2c 6f 6e 43 6c 69 63 6b 3a 65 2e 6f 6e 52 65 71 75 65 73 74 4f 66 66 6c 69 6e 65 7d 2c 28 30 2c 56 2e Data Ascii: adingSpinner,"small"==t&&k().Small,("medium"==t\|\|!t)&&k().Medium,"large"==t&&k().Large)})}function Pe(e){return o.createElement("div",{className:k().OfferOffline},o.createElement("button",{className:k().OfferOfflineButton,onClick:e.onRequestOffline},(0,V.
2024-05-15 22:36:34 UTC	7249	IN	Data Raw: 31 63 34 39 0d 0a 33 36 2e 38 34 20 32 36 2e 38 37 32 33 4c 31 34 32 2e 34 37 20 31 34 2e 33 34 35 37 48 31 34 35 2e 39 36 33 56 33 31 2e 36 35 34 32 48 31 34 32 2e 34 37 56 32 31 2e 30 35 30 38 5a 22 2c 66 69 6c 6c 3a 22 23 45 30 45 31 45 36 22 7d 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 35 33 20 31 36 2e 35 32 38 38 43 31 35 33 20 31 38 2e 30 33 36 31 20 31 35 31 2e 39 30 35 20 31 38 2e 39 31 39 37 20 31 35 30 2e 36 30 32 20 31 38 2e 39 31 39 37 43 31 34 39 2e 32 39 39 20 31 38 2e 39 31 39 37 20 31 34 38 2e 32 30 34 20 31 37 2e 39 38 34 31 20 31 34 38 2e 32 30 34 20 31 36 2e 35 32 38 38 43 31 34 38 2e 32 30 34 20 31 35 2e 30 32 31 34 20 31 34 39 2e 33 35 31 20 31 34 2e 31 33 37 38 20 31 35 30 2e 36 30 Data Ascii: 1c4936.84 26.8723L142.47 14.3457H145.963V31.6542H142.47V21.0508Z",fill:"#E0E1E6"}),o.createElement("path",{d:"M153 16.5288C153 18.0361 151.905 18.9197 150.602 18.9197C149.299 18.9197 148.204 17.9841 148.204 16.5288C148.204 15.0214 149.351 14.1378 150.60
2024-05-15 22:36:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49808	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:32 UTC	766	OUT	GET /public/javascript/applications/community/chunk~af55cc5d1.js?contenthash=4f7934fa0c61bb251d52 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:33 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:33 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177480 Expires: Fri, 17 May 2024 23:54:33 GMT
2024-05-15 22:36:33 UTC	14739	IN	Data Raw: 33 39 38 62 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 39 36 Data Ascii: 398b/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[1496
2024-05-15 22:36:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49809	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:32 UTC	766	OUT	GET /public/javascript/applications/community/chunk~2d6f640d9.js?contenthash=7a42268d32dd6200b218 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:33 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:33 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=173883 Expires: Fri, 17 May 2024 22:54:36 GMT
2024-05-15 22:36:33 UTC	16117	IN	Data Raw: 37 65 63 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 30 31 Data Ascii: 7eca/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[7901
2024-05-15 22:36:34 UTC	16349	IN	Data Raw: 28 74 68 69 73 2e 6d 5f 62 53 65 65 6b 49 6e 50 72 6f 67 72 65 73 73 29 72 65 74 75 72 6e 20 76 6f 69 64 28 30 2c 67 2e 68 42 29 28 60 24 7b 74 68 69 73 2e 47 65 74 44 65 62 75 67 4e 61 6d 65 28 29 7d 20 53 63 68 65 64 75 6c 65 4e 65 78 74 44 6f 77 6e 6c 6f 61 64 20 2d 20 73 65 65 6b 69 6e 67 60 29 3b 69 66 28 74 68 69 73 2e 6d 5f 6e 4e 65 78 74 53 65 67 6d 65 6e 74 3e 74 68 69 73 2e 47 65 74 4d 61 78 53 65 67 6d 65 6e 74 28 29 29 72 65 74 75 72 6e 20 76 6f 69 64 28 30 2c 67 2e 68 42 29 28 60 24 7b 74 68 69 73 2e 47 65 74 44 65 62 75 67 4e 61 6d 65 28 29 7d 20 53 63 68 65 64 75 6c 65 4e 65 78 74 44 6f 77 6e 6c 6f 61 64 20 2d 20 72 65 61 63 68 65 64 20 6d 61 78 20 73 65 67 6d 65 6e 74 60 29 3b 6c 65 74 20 65 3d 74 68 69 73 2e 6d 5f 63 61 6c 6c 62 61 63 6b Data Ascii: (this.m_bSeekInProgress)return void(0,g.hB)(`${this.GetDebugName()} ScheduleNextDownload - seeking`);if(this.m_nNextSegment>this.GetMaxSegment())return void(0,g.hB)(`${this.GetDebugName()} ScheduleNextDownload - reached max segment`);let e=this.m_callback
2024-05-15 22:36:34 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 65 6e 65 72 28 74 68 69 73 2e 6d 5f 65 6c 56 69 64 65 6f 2c 22 76 61 6c 76 65 2d 62 75 66 66 65 72 75 70 64 61 74 65 22 2c 74 68 69 73 2e 4f 6e 56 69 64 65 6f 54 69 6d 65 55 70 64 61 74 65 29 2c 74 68 69 73 2e 6d 5f 6c 69 73 74 65 6e 65 72 73 2e 41 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 68 69 73 2e 6d 5f 65 6c 56 69 64 65 6f 2c 22 74 69 6d 65 75 70 64 61 74 65 22 2c 74 68 69 73 2e 4f 6e 56 69 64 65 6f 54 69 6d 65 55 70 64 61 74 65 29 2c 74 68 69 73 2e 6d 5f 6c 69 73 74 65 6e 65 72 73 2e 41 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 68 69 73 2e 6d 5f 65 6c 56 69 64 65 6f 2c 22 70 6c 61 79 22 2c 74 68 69 73 2e 4f 6e 50 6c 61 79 41 63 74 69 6f 6e 29 7d 4f 6e 4d 65 64 69 61 53 6f 75 72 63 65 4f 70 65 6e 28 65 29 7b 28 30 Data Ascii: 3ff0ener(this.m_elVideo,"valve-bufferupdate",this.OnVideoTimeUpdate),this.m_listeners.AddEventListener(this.m_elVideo,"timeupdate",this.OnVideoTimeUpdate),this.m_listeners.AddEventListener(this.m_elVideo,"play",this.OnPlayAction)}OnMediaSourceOpen(e){(0
2024-05-15 22:36:34 UTC	8	IN	Data Raw: 34 61 35 62 0d 0a 2c 55 Data Ascii: 4a5b,U
2024-05-15 22:36:34 UTC	16384	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2c 22 47 65 74 43 75 72 72 65 6e 74 50 6c 61 79 54 69 6d 65 22 2c 6e 75 6c 6c 29 2c 28 30 2c 6e 2e 67 6e 29 28 5b 75 2e 61 5d 2c 55 2e 70 72 6f 74 6f 74 79 70 65 2c 22 4f 6e 56 69 64 65 6f 54 69 6d 65 55 70 64 61 74 65 22 2c 6e 75 6c 6c 29 2c 28 30 2c 6e 2e 67 6e 29 28 5b 75 2e 61 5d 2c 55 2e 70 72 6f 74 6f 74 79 70 65 2c 22 53 65 6e 64 55 70 64 61 74 65 54 6f 42 6f 6f 6b 6d 61 72 6b 53 65 72 76 69 63 65 49 66 4e 65 65 64 65 64 22 2c 6e 75 6c 6c 29 2c 28 30 2c 6e 2e 67 6e 29 28 5b 75 2e 61 5d 2c 55 2e 70 72 6f 74 6f 74 79 70 65 2c 22 4f 6e 50 6c 61 79 41 63 74 69 6f 6e 22 2c 6e 75 6c 6c 29 2c 28 30 2c 6e 2e 67 6e 29 28 5b 75 2e 61 5d 2c 55 2e 70 72 6f 74 6f 74 79 70 65 2c 22 47 65 74 50 6c 61 79 62 61 63 6b 52 61 74 65 22 2c Data Ascii: .prototype,"GetCurrentPlayTime",null),(0,n.gn)([u.a],U.prototype,"OnVideoTimeUpdate",null),(0,n.gn)([u.a],U.prototype,"SendUpdateToBookmarkServiceIfNeeded",null),(0,n.gn)([u.a],U.prototype,"OnPlayAction",null),(0,n.gn)([u.a],U.prototype,"GetPlaybackRate",
2024-05-15 22:36:34 UTC	2651	IN	Data Raw: 52 65 61 64 69 6e 67 41 72 6f 75 6e 64 52 65 73 69 7a 65 4d 53 3d 32 65 33 2c 74 68 69 73 2e 6d 5f 73 63 68 54 72 61 63 6b 65 72 3d 6e 65 77 20 68 2e 41 72 2c 74 68 69 73 2e 6d 5f 72 67 52 65 73 75 6c 74 73 57 69 6e 64 6f 77 3d 5b 5d 2c 74 68 69 73 2e 6d 5f 6e 4c 61 73 74 52 65 73 69 7a 65 4d 53 3d 30 2c 74 68 69 73 2e 6d 5f 62 44 72 6f 70 70 69 6e 67 46 72 61 6d 65 44 65 74 65 63 74 65 64 3d 21 31 2c 74 68 69 73 2e 6d 5f 6e 43 75 72 72 65 6e 74 46 50 53 3d 30 2c 28 30 2c 73 2e 72 43 29 28 74 68 69 73 29 7d 53 74 61 72 74 54 72 61 63 6b 69 6e 67 28 65 29 7b 74 68 69 73 2e 6d 5f 73 63 68 54 72 61 63 6b 65 72 2e 53 63 68 65 64 75 6c 65 28 74 68 69 73 2e 6b 5f 6e 54 65 73 74 46 72 65 71 75 65 6e 63 79 4d 53 2c 74 68 69 73 2e 54 61 6b 65 52 65 61 64 69 6e 67 Data Ascii: ReadingAroundResizeMS=2e3,this.m_schTracker=new h.Ar,this.m_rgResultsWindow=[],this.m_nLastResizeMS=0,this.m_bDroppingFrameDetected=!1,this.m_nCurrentFPS=0,(0,s.rC)(this)}StartTracking(e){this.m_schTracker.Schedule(this.k_nTestFrequencyMS,this.TakeReading
2024-05-15 22:36:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49810	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:32 UTC	766	OUT	GET /public/javascript/applications/community/chunk~1d39298d0.js?contenthash=fb50f99e2f712a7bd546 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:33 UTC	266	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:33 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=35798 Expires: Thu, 16 May 2024 08:33:11 GMT
2024-05-15 22:36:33 UTC	9862	IN	Data Raw: 32 36 37 65 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 32 34 Data Ascii: 267e/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[5824
2024-05-15 22:36:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49811	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:32 UTC	766	OUT	GET /public/javascript/applications/community/chunk~c18a43282.js?contenthash=fb0b0d449ada85165b39 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:33 UTC	266	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:33 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=35805 Expires: Thu, 16 May 2024 08:33:18 GMT
2024-05-15 22:36:33 UTC	16099	IN	Data Raw: 33 65 64 62 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 39 33 31 5d 2c 7b 31 33 34 35 30 3a 65 3d 3e 7b Data Ascii: 3edb/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[8931],{13450:e=>{
2024-05-15 22:36:34 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 22 5f 31 53 6b 51 73 4f 64 6e 6f 5a 73 31 58 43 57 72 37 58 38 4d 45 64 22 2c 50 72 65 76 69 65 77 43 74 6e 3a 22 5f 31 52 35 67 70 33 59 52 7a 4a 69 4d 78 79 6d 71 69 33 31 50 47 6d 22 2c 50 72 65 76 69 65 77 49 74 65 6d 3a 22 5f 32 2d 71 43 47 32 48 35 52 44 71 62 61 61 52 68 43 7a 47 64 64 6b 22 2c 44 65 63 6b 43 6f 6d 70 61 74 49 63 6f 6e 3a 22 68 75 70 2d 76 4d 51 74 44 63 69 6e 62 47 4a 58 38 41 64 46 37 22 2c 50 72 65 76 69 65 77 49 6d 67 3a 22 5f 33 73 50 6d 42 6a 68 6c 46 4c 77 44 50 4f 45 35 51 6f 69 56 6c 7a 22 2c 44 65 6d 6f 4c 61 79 6f 75 74 50 6f 70 75 70 3a 22 5f 32 31 62 6b 4d 65 6c 61 64 45 6d 63 78 37 69 50 46 2d 33 7a 6c 67 22 2c 46 72 65 65 57 65 65 6b 65 6e 64 42 61 72 3a 22 5f 33 6a 6b 33 51 31 6a 53 31 56 49 77 32 Data Ascii: 3ff0"_1SkQsOdnoZs1XCWr7X8MEd",PreviewCtn:"_1R5gp3YRzJiMxymqi31PGm",PreviewItem:"_2-qCG2H5RDqbaaRhCzGddk",DeckCompatIcon:"hup-vMQtDcinbGJX8AdF7",PreviewImg:"_3sPmBjhlFLwDPOE5QoiVlz",DemoLayoutPopup:"_21bkMeladEmcx7iPF-3zlg",FreeWeekendBar:"_3jk3Q1jS1VIw2
2024-05-15 22:36:34 UTC	16377	IN	Data Raw: 33 66 66 31 0d 0a 28 21 61 2e 62 44 69 73 61 62 6c 65 45 6e 66 6f 72 63 65 44 69 6d 65 6e 73 69 6f 6e 73 26 26 28 65 3d 3d 3d 61 2e 77 69 64 74 68 26 26 74 3d 3d 3d 61 2e 68 65 69 67 68 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 20 61 3d 73 5b 6e 5d 3b 72 65 74 75 72 6e 21 21 61 26 26 28 21 21 61 2e 62 44 69 73 61 62 6c 65 45 6e 66 6f 72 63 65 44 69 6d 65 6e 73 69 6f 6e 73 7c 7c 21 28 65 3c 61 2e 77 69 64 74 68 7c 7c 74 3c 61 2e 68 65 69 67 68 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 28 74 3d 3e 64 28 65 2c 74 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 73 5b 74 5d 2e 72 67 41 63 63 65 70 74 61 62 6c 65 54 79 70 65 Data Ascii: 3ff1(!a.bDisableEnforceDimensions&&(e===a.width&&t===a.height))}function l(e,t,n){const a=s[n];return!!a&&(!!a.bDisableEnforceDimensions\|\|!(e<a.width\|\|t<a.height))}function c(e,t){return t.filter((t=>d(e,t)))}function d(e,t){return s[t].rgAcceptableType
2024-05-15 22:36:34 UTC	7	IN	Data Raw: 33 66 65 39 0d 0a 22 Data Ascii: 3fe9"
2024-05-15 22:36:34 UTC	16384	IN	Data Raw: 65 6d 61 69 6c 5f 63 65 6e 74 65 72 65 64 22 3d 3d 3d 65 29 74 3d 74 68 69 73 2e 6a 73 6f 6e 64 61 74 61 2e 65 6d 61 69 6c 5f 73 65 74 74 69 6e 67 3f 74 68 69 73 2e 6a 73 6f 6e 64 61 74 61 2e 65 6d 61 69 6c 5f 73 65 74 74 69 6e 67 2e 73 65 63 74 69 6f 6e 73 5b 30 5d 2e 6c 6f 63 61 6c 69 7a 65 64 5f 69 6d 61 67 65 3a 5b 5d 3b 65 6c 73 65 20 69 66 28 22 62 72 6f 61 64 63 61 73 74 5f 6c 65 66 74 22 3d 3d 3d 65 29 74 3d 74 68 69 73 2e 6a 73 6f 6e 64 61 74 61 2e 6c 6f 63 61 6c 69 7a 65 64 5f 62 72 6f 61 64 63 61 73 74 5f 6c 65 66 74 5f 69 6d 61 67 65 3b 65 6c 73 65 20 69 66 28 22 62 72 6f 61 64 63 61 73 74 5f 72 69 67 68 74 22 3d 3d 3d 65 29 74 3d 74 68 69 73 2e 6a 73 6f 6e 64 61 74 61 2e 6c 6f 63 61 6c 69 7a 65 64 5f 62 72 6f 61 64 63 61 73 74 5f 72 69 67 68 Data Ascii: email_centered"===e)t=this.jsondata.email_setting?this.jsondata.email_setting.sections[0].localized_image:[];else if("broadcast_left"===e)t=this.jsondata.localized_broadcast_left_image;else if("broadcast_right"===e)t=this.jsondata.localized_broadcast_righ
2024-05-15 22:36:34 UTC	16346	IN	Data Raw: 65 2c 22 76 69 73 69 62 69 6c 69 74 79 53 74 61 72 74 54 69 6d 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 69 2e 4c 4f 5d 2c 70 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 69 73 69 62 69 6c 69 74 79 45 6e 64 54 69 6d 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 69 2e 4c 4f 5d 2c 70 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6d 5f 6e 42 75 69 6c 64 49 44 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 69 2e 4c 4f 5d 2c 70 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6d 5f 73 74 72 42 75 69 6c 64 42 72 61 6e 63 68 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 69 2e 4c 4f 5d 2c 70 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 70 6f 73 74 54 69 6d 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 69 2e Data Ascii: e,"visibilityStartTime",void 0),(0,a.gn)([i.LO],pe.prototype,"visibilityEndTime",void 0),(0,a.gn)([i.LO],pe.prototype,"m_nBuildID",void 0),(0,a.gn)([i.LO],pe.prototype,"m_strBuildBranch",void 0),(0,a.gn)([i.LO],pe.prototype,"postTime",void 0),(0,a.gn)([i.
2024-05-15 22:36:34 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 72 61 6c 2c 28 30 2c 69 2e 72 43 29 28 74 68 69 73 29 7d 7d 28 30 2c 61 2e 67 6e 29 28 5b 69 2e 4c 4f 5d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 69 74 6c 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 69 2e 4c 4f 5d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 69 65 77 65 72 5f 63 6f 75 6e 74 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 69 2e 4c 4f 5d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2c 22 67 61 6d 65 64 61 74 61 5f 73 75 62 74 69 74 6c 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 69 2e 4c 4f 5d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 75 72 72 65 6e 74 5f 73 65 6c 65 63 74 69 6f 6e 5f 70 72 69 6f 72 69 74 79 22 2c 76 6f 69 64 20 30 29 7d 2c 36 34 37 33 30 3a 28 65 2c 74 2c 6e Data Ascii: 7fd8ral,(0,i.rC)(this)}}(0,a.gn)([i.LO],m.prototype,"title",void 0),(0,a.gn)([i.LO],m.prototype,"viewer_count",void 0),(0,a.gn)([i.LO],m.prototype,"gamedata_subtitle",void 0),(0,a.gn)([i.LO],m.prototype,"current_selection_priority",void 0)},64730:(e,t,n
2024-05-15 22:36:34 UTC	16352	IN	Data Raw: 72 6d 44 61 74 61 3b 61 2e 61 70 70 65 6e 64 28 22 73 74 65 61 6d 69 64 22 2c 65 29 2c 61 2e 61 70 70 65 6e 64 28 22 62 72 6f 61 64 63 61 73 74 69 64 22 2c 74 29 2c 61 2e 61 70 70 65 6e 64 28 22 76 69 65 77 65 72 74 6f 6b 65 6e 22 2c 6e 29 3b 74 72 79 7b 79 69 65 6c 64 20 72 28 29 2e 70 6f 73 74 28 5f 2e 44 65 2e 43 48 41 54 5f 42 41 53 45 5f 55 52 4c 2b 22 62 72 6f 61 64 63 61 73 74 2f 73 74 6f 70 77 61 74 63 68 69 6e 67 22 2c 61 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 29 29 7d 28 74 2c 6e 2e 6d 5f 75 6c 42 72 6f 61 64 63 61 73 74 49 44 2c 74 68 69 73 2e 6d 5f 62 72 6f 61 64 63 61 73 74 53 65 74 74 69 6e 67 73 2e 75 6c 56 69 65 77 65 72 54 6f 6b 65 6e 29 2c 53 2e 51 66 28 6e 2e 6d 5f 72 67 56 69 64 65 6f 73 2c 28 74 3d 3e 74 3d 3d 65 29 29 2c 74 68 69 73 Data Ascii: rmData;a.append("steamid",e),a.append("broadcastid",t),a.append("viewertoken",n);try{yield r().post(_.De.CHAT_BASE_URL+"broadcast/stopwatching",a)}catch(e){}}))}(t,n.m_ulBroadcastID,this.m_broadcastSettings.ulViewerToken),S.Qf(n.m_rgVideos,(t=>t==e)),this
2024-05-15 22:36:34 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 7b 74 68 69 73 2e 6d 5f 62 55 73 65 72 49 6e 70 75 74 4e 65 65 64 65 64 3d 21 31 2c 74 68 69 73 2e 6d 5f 70 6c 61 79 65 72 3f 74 68 69 73 2e 4a 75 6d 70 54 6f 4c 69 76 65 45 64 67 65 28 29 3a 74 68 69 73 2e 50 6c 61 79 28 29 7d 53 74 6f 70 50 6c 61 79 62 61 63 6b 54 69 6c 6c 55 73 65 72 49 6e 70 75 74 28 29 7b 74 68 69 73 2e 53 74 6f 70 28 29 2c 74 68 69 73 2e 4f 6e 55 73 65 72 49 6e 70 75 74 4e 65 65 64 65 64 28 29 7d 47 65 74 54 69 6d 65 6c 69 6e 65 53 74 61 72 74 50 6f 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 5f 6e 56 69 64 65 6f 45 6e 64 50 6f 73 2d 74 68 69 73 2e 6d 5f 6e 54 69 6d 65 6c 69 6e 65 44 75 72 61 74 69 6f 6e 7d 47 65 74 54 69 6d 65 6c 69 6e 65 44 75 72 61 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: 7fe0{this.m_bUserInputNeeded=!1,this.m_player?this.JumpToLiveEdge():this.Play()}StopPlaybackTillUserInput(){this.Stop(),this.OnUserInputNeeded()}GetTimelineStartPos(){return this.m_nVideoEndPos-this.m_nTimelineDuration}GetTimelineDuration(){return this.
2024-05-15 22:36:34 UTC	16360	IN	Data Raw: 6e 41 63 63 6f 75 6e 74 49 44 28 61 29 2e 44 69 73 70 61 74 63 68 28 5b 2e 2e 2e 72 5d 29 29 2c 69 2e 64 61 74 61 7d 29 29 7d 44 65 6c 65 74 65 43 6c 61 6e 49 6d 61 67 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 61 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 65 6c 65 74 65 43 6c 61 6e 49 6d 61 67 65 42 79 49 44 28 65 2c 74 2e 69 6d 61 67 65 69 64 29 7d 29 29 7d 73 74 61 74 69 63 20 47 65 74 48 61 73 68 46 72 6f 6d 48 61 73 68 41 6e 64 45 78 74 28 65 29 7b 6c 65 74 20 74 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 29 3b 72 65 74 75 72 6e 20 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 65 2e 6c 65 6e 67 Data Ascii: nAccountID(a).Dispatch([...r])),i.data}))}DeleteClanImage(e,t){return(0,a.mG)(this,void 0,void 0,(function*(){return this.DeleteClanImageByID(e,t.imageid)}))}static GetHashFromHashAndExt(e){let t=e.substring(e.lastIndexOf("."));return e.substring(0,e.leng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49812	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:33 UTC	766	OUT	GET /public/javascript/applications/community/chunk~d6e1df551.js?contenthash=c94d5b03008b20974b16 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:34 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:33 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=173993 Expires: Fri, 17 May 2024 22:56:26 GMT
2024-05-15 22:36:34 UTC	11902	IN	Data Raw: 32 65 37 36 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 35 38 5d 2c 7b 37 32 38 36 39 3a 65 3d 3e 7b Data Ascii: 2e76/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2558],{72869:e=>{
2024-05-15 22:36:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49813	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:34 UTC	766	OUT	GET /public/javascript/applications/community/chunk~642602239.js?contenthash=ce169d843b8388128d8f HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:35 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:35 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=129559 Expires: Fri, 17 May 2024 10:35:54 GMT
2024-05-15 22:36:35 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 34 32 37 5d 2c 7b 39 39 39 37 30 3a 65 3d 3e 7b Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[9427],{99970:e=>{
2024-05-15 22:36:35 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 70 2d 74 65 78 74 22 3a 6d 7d 2c 65 2e 63 68 69 6c 64 72 65 6e 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 63 6f 6e 73 74 20 74 3d 52 28 65 2e 61 72 67 73 2c 22 61 75 74 68 6f 72 22 29 3b 72 65 74 75 72 6e 20 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6c 6f 63 6b 71 75 6f 74 65 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 66 2e 5a 29 28 62 28 29 2e 42 6c 6f 63 6b 51 75 6f 74 65 2c 65 2e 63 6c 61 73 73 4e 61 6d 65 29 7d 2c 21 21 74 26 26 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 62 28 29 2e 51 75 6f 74 65 41 75 74 68 6f 72 7d 2c 28 30 2c 76 2e 58 78 29 28 22 23 42 62 63 6f 64 65 5f 4f 72 69 67 69 6e 61 6c 6c 79 5f 50 6f 73 74 65 64 5f 42 79 22 29 2b 22 20 22 Data Ascii: 3ff0p-text":m},e.children))};function M(e){const t=R(e.args,"author");return i.createElement("blockquote",{className:(0,f.Z)(b().BlockQuote,e.className)},!!t&&i.createElement("div",{className:b().QuoteAuthor},(0,v.Xx)("#Bbcode_Originally_Posted_By")+" "
2024-05-15 22:36:35 UTC	16379	IN	Data Raw: 33 66 66 33 0d 0a 74 5b 74 2c 6e 5d 3d 28 30 2c 61 2e 75 73 65 53 74 61 74 65 29 28 64 2e 47 65 74 28 29 2e 47 65 74 52 65 67 69 73 74 72 61 74 69 6f 6e 28 65 29 29 3b 72 65 74 75 72 6e 28 30 2c 61 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 64 2e 47 65 74 28 29 2e 4c 6f 61 64 52 65 67 69 73 74 72 61 74 69 6f 6e 28 65 29 2e 74 68 65 6e 28 6e 29 7d 29 2c 5b 65 2c 74 5d 29 2c 28 30 2c 63 2e 51 67 29 28 64 2e 47 65 74 28 29 2e 47 65 74 52 65 67 69 73 74 72 61 74 69 6f 6e 43 68 61 6e 67 65 43 61 6c 6c 62 61 63 6b 28 65 29 2c 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 7b 66 6e 43 72 65 61 74 65 52 65 67 69 73 74 72 61 74 69 6f 6e 3a 64 2e 47 65 74 28 29 2e 43 72 65 61 74 65 52 65 67 69 Data Ascii: 3ff3t[t,n]=(0,a.useState)(d.Get().GetRegistration(e));return(0,a.useEffect)((()=>{void 0===t&&d.Get().LoadRegistration(e).then(n)}),[e,t]),(0,c.Qg)(d.Get().GetRegistrationChangeCallback(e),n),t}function p(){return{fnCreateRegistration:d.Get().CreateRegi
2024-05-15 22:36:35 UTC	5	IN	Data Raw: 33 66 66 35 0d Data Ascii: 3ff5
2024-05-15 22:36:36 UTC	16384	IN	Data Raw: 0a 65 6d 65 6e 74 28 72 2e 6a 70 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 73 2e 5a 29 28 63 2e 63 61 72 6f 75 73 65 6c 4e 61 76 42 75 74 74 6f 6e 2c 63 2e 73 63 72 6f 6c 6c 4e 61 76 42 75 74 74 6f 6e 29 7d 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 6e 75 6c 6c 29 29 29 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 63 2e 73 63 72 6f 6c 6c 4e 61 76 44 69 76 2c 73 74 79 6c 65 3a 7b 72 69 67 68 74 3a 22 30 25 22 2c 77 69 64 74 68 3a 75 2b 22 25 22 7d 7d 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 50 31 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 73 2e 5a 29 28 63 2e 63 61 72 6f 75 73 65 6c 4e 61 76 42 75 74 74 6f 6e 2c 63 2e 73 63 72 6f 6c 6c 4e 61 76 42 75 74 Data Ascii: ement(r.jp,{className:(0,s.Z)(c.carouselNavButton,c.scrollNavButton)},i.createElement("div",null))),i.createElement("div",{className:c.scrollNavDiv,style:{right:"0%",width:u+"%"}},i.createElement(r.P1,{className:(0,s.Z)(c.carouselNavButton,c.scrollNavBut
2024-05-15 22:36:36 UTC	16360	IN	Data Raw: 73 29 2c 74 68 69 73 2e 73 74 61 74 65 3d 7b 66 69 6c 74 65 72 3a 22 22 7d 7d 72 65 6e 64 65 72 28 29 7b 63 6f 6e 73 74 7b 73 74 6f 72 65 3a 65 2c 6f 6e 49 74 65 6d 53 65 6c 65 63 74 3a 74 7d 3d 74 68 69 73 2e 70 72 6f 70 73 2c 7b 66 69 6c 74 65 72 3a 6e 7d 3d 74 68 69 73 2e 73 74 61 74 65 2c 72 3d 63 2e 75 2e 46 69 6c 74 65 72 53 74 69 63 6b 65 72 73 28 65 2e 47 65 74 53 74 69 63 6b 65 72 4c 69 73 74 28 29 2c 6e 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 77 2c 7b 74 69 74 6c 65 3a 28 30 2c 68 2e 58 78 29 28 22 23 45 6d 6f 74 69 63 6f 6e 50 69 63 6b 65 72 5f 53 74 69 63 6b 65 72 48 65 61 64 69 6e 67 22 29 2c 69 74 65 6d 73 3a 72 2c 6f 6e 49 74 65 6d 53 65 6c 65 63 74 3a 74 2c 72 65 6e 64 65 72 49 74 65 6d 3a 65 3d 3e 61 2e Data Ascii: s),this.state={filter:""}}render(){const{store:e,onItemSelect:t}=this.props,{filter:n}=this.state,r=c.u.FilterStickers(e.GetStickerList(),n);return a.createElement(w,{title:(0,h.Xx)("#EmoticonPicker_StickerHeading"),items:r,onItemSelect:t,renderItem:e=>a.
2024-05-15 22:36:36 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 34 39 39 29 2c 44 3d 6e 28 38 30 37 35 31 29 2c 4e 3d 6e 2e 6e 28 44 29 2c 77 3d 6e 28 32 37 36 30 35 29 2c 6b 3d 6e 28 37 37 39 33 36 29 2c 52 3d 6e 28 36 38 39 38 35 29 2c 78 3d 6e 28 39 33 32 34 33 29 2c 41 3d 6e 28 38 32 30 37 31 29 2c 4c 3d 6e 28 33 34 33 31 30 29 2c 42 3d 6e 28 34 36 38 38 32 29 2c 54 3d 6e 28 32 38 39 31 38 29 2c 47 3d 6e 28 32 33 32 33 31 29 2c 4d 3d 6e 28 38 31 39 31 33 29 3b 6c 65 74 20 50 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 69 2e 43 6f 6d 70 6f 6e 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 73 74 61 74 65 3d 7b 62 4c 6f 61 64 69 6e 67 3a 74 68 69 73 2e 70 72 6f 70 73 2e 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 47 49 44 3f Data Ascii: 7fe0499),D=n(80751),N=n.n(D),w=n(27605),k=n(77936),R=n(68985),x=n(93243),A=n(82071),L=n(34310),B=n(46882),T=n(28918),G=n(23231),M=n(81913);let P=class extends i.Component{constructor(){super(...arguments),this.state={bLoading:this.props.announcementGID?
2024-05-15 22:36:36 UTC	16360	IN	Data Raw: 74 65 78 74 3b 6c 65 74 20 72 3d 65 26 26 65 2e 63 68 69 6c 64 72 65 6e 26 26 65 2e 63 68 69 6c 64 72 65 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 28 6e 75 6c 6c 3d 3d 72 7c 7c 6e 75 6c 6c 3d 3d 72 7c 7c 30 3d 3d 72 2e 6c 65 6e 67 74 68 29 26 26 28 72 3d 65 26 26 65 2e 61 72 67 73 26 26 65 2e 61 72 67 73 5b 22 22 5d 2c 6e 75 6c 6c 3d 3d 72 7c 7c 6e 75 6c 6c 3d 3d 72 7c 7c 30 3d 3d 72 2e 6c 65 6e 67 74 68 29 29 72 65 74 75 72 6e 20 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 29 3b 63 6f 6e 73 74 20 6f 3d 73 2e 76 5a 28 72 2c 65 2e 6c 61 6e 67 75 61 67 65 2c 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 72 74 69 6d 65 33 32 5f 6c 61 73 74 5f 6d 6f 64 69 66 69 65 64 29 3b 69 66 28 22 73 74 72 69 6e Data Ascii: text;let r=e&&e.children&&e.children.toString();if((null==r\|\|null==r\|\|0==r.length)&&(r=e&&e.args&&e.args[""],null==r\|\|null==r\|\|0==r.length))return i.createElement(i.Fragment,null);const o=s.vZ(r,e.language,null==n?void 0:n.rtime32_last_modified);if("strin
2024-05-15 22:36:36 UTC	16384	IN	Data Raw: 37 36 31 65 0d 0a 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 45 2e 6a 69 2c 7b 6c 61 62 65 6c 3a 28 30 2c 4e 2e 58 78 29 28 22 23 45 76 65 6e 74 44 69 73 70 6c 61 79 5f 52 65 6d 69 6e 64 65 72 5f 56 69 61 45 6d 61 69 6c 22 29 2c 64 69 73 61 62 6c 65 64 3a 21 73 2c 63 68 65 63 6b 65 64 3a 68 2e 63 62 2e 47 65 74 28 29 2e 42 46 6f 6c 6c 6f 77 73 45 76 65 6e 74 41 6e 64 4e 6f 74 69 66 69 65 64 42 79 28 65 2e 63 6c 61 6e 53 74 65 61 6d 49 44 2c 65 2e 47 49 44 2c 68 2e 72 45 2e 6b 5f 45 4e 6f 74 69 66 79 46 6c 61 67 42 79 45 6d 61 69 6c 29 2c 6f 6e 43 68 61 6e 67 65 3a 74 68 69 73 2e 4f 6e 43 68 61 6e 67 65 46 6f 6c 6c 6f 77 42 79 45 6d 61 69 6c 7d 29 29 2c 21 73 26 26 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 Data Ascii: 761ereateElement(E.ji,{label:(0,N.Xx)("#EventDisplay_Reminder_ViaEmail"),disabled:!s,checked:h.cb.Get().BFollowsEventAndNotifiedBy(e.clanSteamID,e.GID,h.rE.k_ENotifyFlagByEmail),onChange:this.OnChangeFollowByEmail})),!s&&a.createElement("div",{className
2024-05-15 22:36:36 UTC	13862	IN	Data Raw: 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6d 2e 41 74 7d 2c 22 40 22 29 29 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6d 2e 4c 6f 63 61 6c 69 7a 65 64 54 69 6d 65 7d 2c 42 6f 6f 6c 65 61 6e 28 74 26 26 6c 29 26 26 5f 28 74 2c 21 30 29 29 29 7d 29 29 2c 45 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 65 2e 73 74 79 6c 65 73 6d 6f 64 75 6c 65 2e 44 61 74 65 54 6f 6f 6c 54 69 70 7d 2c 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 67 2c 7b 64 61 74 65 41 6e 64 54 69 6d 65 3a 65 2e 72 74 46 75 6c 6c 44 61 74 65 2c 62 53 69 6e 67 6c 65 4c 69 6e 65 3a 21 30 2c 73 74 79 6c 65 73 6d 6f 64 75 6c Data Ascii: t("span",{className:m.At},"@")),i.createElement("div",{className:m.LocalizedTime},Boolean(t&&l)&&_(t,!0)))})),E=e=>{const t=i.createElement("div",{className:e.stylesmodule.DateToolTip},i.createElement(g,{dateAndTime:e.rtFullDate,bSingleLine:!0,stylesmodul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49814	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:34 UTC	766	OUT	GET /public/javascript/applications/community/chunk~4e3b43bb2.js?contenthash=840feb837a4ed2373734 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:35 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:35 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177387 Expires: Fri, 17 May 2024 23:53:02 GMT
2024-05-15 22:36:35 UTC	16117	IN	Data Raw: 34 35 66 65 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 39 37 33 5d 2c 7b 34 35 35 35 37 3a 74 3d 3e 7b Data Ascii: 45fe/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[3973],{45557:t=>{
2024-05-15 22:36:35 UTC	1809	IN	Data Raw: 43 5a 76 74 6a 2b 45 34 7a 4e 75 68 74 55 39 38 57 4a 78 44 67 66 5a 35 30 67 66 48 4f 55 53 5a 41 41 43 49 41 41 50 4c 5a 76 41 51 59 41 5a 33 32 59 6b 70 79 6d 6b 41 63 41 41 41 41 41 53 55 56 4f 52 4b 35 43 59 49 49 3d 22 7d 2c 39 31 31 32 30 3a 28 74 2c 65 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 73 7d 29 3b 63 6f 6e 73 74 20 73 3d 69 2e 70 2b 22 69 6d 61 67 65 73 2f 61 70 70 6c 69 63 61 74 69 6f 6e 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 72 65 64 64 69 74 5f 6c 61 72 67 65 2e 70 6e 67 3f 76 3d 33 38 38 33 33 38 39 34 34 32 33 61 39 30 63 39 37 31 31 39 64 37 62 30 30 33 66 34 63 66 34 65 22 7d 2c 38 30 32 38 39 3a 28 74 2c 65 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 65 2c Data Ascii: CZvtj+E4zNuhtU98WJxDgfZ50gfHOUSZAACIAAPLZvAQYAZ32YkpymkAcAAAAASUVORK5CYII="},91120:(t,e,i)=>{"use strict";i.d(e,{Z:()=>s});const s=i.p+"images/applications/community/reddit_large.png?v=38833894423a90c97119d7b003f4cf4e"},80289:(t,e,i)=>{"use strict";i.d(e,
2024-05-15 22:36:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49815	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:34 UTC	766	OUT	GET /public/javascript/applications/community/chunk~69438e232.js?contenthash=6293693cb55d5d304172 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:35 UTC	266	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:35 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=35877 Expires: Thu, 16 May 2024 08:34:32 GMT
2024-05-15 22:36:35 UTC	16118	IN	Data Raw: 37 65 63 62 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 33 34 38 5d 2c 7b 33 31 38 31 39 3a 65 3d 3e 7b Data Ascii: 7ecb/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[9348],{31819:e=>{
2024-05-15 22:36:36 UTC	16349	IN	Data Raw: 73 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 65 29 3a 76 6f 69 64 20 30 29 7d 53 65 74 53 65 6c 65 63 74 65 64 49 6e 64 65 78 44 65 6c 74 61 28 65 29 7b 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 73 74 61 74 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3f 74 68 69 73 2e 53 65 74 53 65 6c 65 63 74 65 64 49 6e 64 65 78 28 74 68 69 73 2e 73 74 61 74 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2b 65 29 3a 74 68 69 73 2e 53 65 74 53 65 6c 65 63 74 65 64 49 6e 64 65 78 28 31 3d 3d 3d 65 3f 30 3a 65 29 7d 53 65 74 53 65 6c 65 63 74 65 64 49 6e 64 65 78 28 65 29 7b 69 66 28 21 74 68 69 73 2e 6d 5f 72 67 43 75 72 72 65 6e 74 4d 61 74 63 68 65 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 6c 65 74 20 74 3d 74 68 69 73 2e 6d 5f 72 67 43 75 72 72 65 6e 74 4d 61 74 Data Ascii: s.getSelection(e):void 0)}SetSelectedIndexDelta(e){void 0!==this.state.selectedIndex?this.SetSelectedIndex(this.state.selectedIndex+e):this.SetSelectedIndex(1===e?0:e)}SetSelectedIndex(e){if(!this.m_rgCurrentMatches.length)return;let t=this.m_rgCurrentMat
2024-05-15 22:36:36 UTC	16379	IN	Data Raw: 33 66 66 33 0d 0a 72 72 65 6e 74 29 7d 6f 6e 49 74 61 6c 69 63 73 28 29 7b 70 65 2e 77 72 61 70 42 42 43 6f 64 65 28 22 5b 69 5d 22 2c 22 5b 2f 69 5d 22 2c 74 68 69 73 2e 70 72 6f 70 73 2e 66 6e 54 65 78 74 61 72 65 61 52 65 66 28 29 2e 63 75 72 72 65 6e 74 29 7d 6f 6e 55 6e 64 65 72 6c 69 6e 65 28 29 7b 70 65 2e 77 72 61 70 42 42 43 6f 64 65 28 22 5b 75 5d 22 2c 22 5b 2f 75 5d 22 2c 74 68 69 73 2e 70 72 6f 70 73 2e 66 6e 54 65 78 74 61 72 65 61 52 65 66 28 29 2e 63 75 72 72 65 6e 74 29 7d 6f 6e 53 74 72 69 6b 65 54 68 72 6f 75 67 68 28 29 7b 70 65 2e 77 72 61 70 42 42 43 6f 64 65 28 22 5b 73 74 72 69 6b 65 5d 22 2c 22 5b 2f 73 74 72 69 6b 65 5d 22 2c 74 68 69 73 2e 70 72 6f 70 73 2e 66 6e 54 65 78 74 61 72 65 61 52 65 66 28 29 2e 63 75 72 72 65 6e 74 29 Data Ascii: 3ff3rrent)}onItalics(){pe.wrapBBCode("[i]","[/i]",this.props.fnTextareaRef().current)}onUnderline(){pe.wrapBBCode("[u]","[/u]",this.props.fnTextareaRef().current)}onStrikeThrough(){pe.wrapBBCode("[strike]","[/strike]",this.props.fnTextareaRef().current)
2024-05-15 22:36:36 UTC	5	IN	Data Raw: 33 66 66 35 0d Data Ascii: 3ff5
2024-05-15 22:36:36 UTC	16384	IN	Data Raw: 0a 74 22 2c 76 61 6c 75 65 3a 74 2c 6f 6e 43 68 61 6e 67 65 3a 74 68 69 73 2e 4f 6e 41 6e 63 68 6f 72 55 52 4c 43 68 61 6e 67 65 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 28 30 2c 4e 2e 58 78 29 28 22 23 45 76 65 6e 74 45 64 69 74 6f 72 5f 49 6e 73 65 72 74 49 6d 61 67 65 5f 50 6c 61 63 65 68 6f 6c 64 65 72 22 29 7d 29 29 29 29 29 29 7d 7d 3b 28 30 2c 61 2e 67 6e 29 28 5b 67 2e 61 6b 5d 2c 76 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 4f 6e 49 6d 61 67 65 49 6e 73 65 72 74 22 2c 6e 75 6c 6c 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 67 2e 61 6b 5d 2c 76 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 4f 6e 49 6d 61 67 65 55 52 4c 43 68 61 6e 67 65 22 2c 6e 75 6c 6c 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 67 2e 61 6b 5d 2c 76 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 4f 6e 41 6e 63 68 Data Ascii: t",value:t,onChange:this.OnAnchorURLChange,placeholder:(0,N.Xx)("#EventEditor_InsertImage_Placeholder")}))))))}};(0,a.gn)([g.ak],ve.prototype,"OnImageInsert",null),(0,a.gn)([g.ak],ve.prototype,"OnImageURLChange",null),(0,a.gn)([g.ak],ve.prototype,"OnAnch
2024-05-15 22:36:36 UTC	16361	IN	Data Raw: 3d 74 68 69 73 2e 6d 5f 72 65 66 50 61 67 65 2e 63 75 72 72 65 6e 74 3b 65 26 26 28 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 74 68 69 73 2e 4f 6e 54 6f 75 63 68 53 74 61 72 74 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 74 68 69 73 2e 4f 6e 54 6f 75 63 68 4d 6f 76 65 29 2c 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 68 65 65 6c 22 2c 74 68 69 73 2e 4f 6e 57 68 65 65 6c 29 29 2c 74 68 69 73 2e 70 72 6f 70 73 2e 73 68 6f 77 41 70 70 48 65 61 64 65 72 26 26 74 68 69 73 2e 53 65 74 47 6c 6f 62 61 6c 48 65 61 64 65 72 48 69 64 64 65 6e 28 21 31 29 2c 74 68 69 73 2e 53 65 74 46 6f 6f 74 65 72 50 69 6e 6e 65 Data Ascii: =this.m_refPage.current;e&&(e.removeEventListener("touchstart",this.OnTouchStart),e.removeEventListener("touchmove",this.OnTouchMove),e.removeEventListener("wheel",this.OnWheel)),this.props.showAppHeader&&this.SetGlobalHeaderHidden(!1),this.SetFooterPinne
2024-05-15 22:36:36 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 29 3b 63 6f 6e 73 74 20 62 3d 28 30 2c 72 2e 50 69 29 28 28 65 3d 3e 7b 63 6f 6e 73 74 7b 65 76 65 6e 74 4d 6f 64 65 6c 3a 74 7d 3d 65 2c 5b 6e 2c 72 5d 3d 28 30 2c 6f 2e 75 73 65 53 74 61 74 65 29 28 21 30 29 2c 5b 73 2c 6c 5d 3d 28 30 2c 6f 2e 75 73 65 53 74 61 74 65 29 28 6e 65 77 20 53 65 74 29 2c 5b 63 2c 64 5d 3d 28 30 2c 6f 2e 75 73 65 53 74 61 74 65 29 28 6e 65 77 20 53 65 74 29 2c 5b 6d 2c 70 5d 3d 28 30 2c 6f 2e 75 73 65 53 74 61 74 65 29 28 6e 65 77 20 53 65 74 29 2c 5b 75 2c 68 5d 3d 28 30 2c 6f 2e 75 73 65 53 74 61 74 65 29 28 6e 75 6c 6c 29 2c 5b 67 2c 76 5d 3d 28 30 2c 6f 2e 75 73 65 53 74 61 74 65 29 28 6e 75 6c 6c 29 2c 53 3d 28 30 2c 6f 2e 75 73 65 52 65 66 29 28 6e 75 6c 6c 29 3b 28 30 2c 6f 2e 75 73 65 45 66 66 65 63 Data Ascii: 7fe0);const b=(0,r.Pi)((e=>{const{eventModel:t}=e,[n,r]=(0,o.useState)(!0),[s,l]=(0,o.useState)(new Set),[c,d]=(0,o.useState)(new Set),[m,p]=(0,o.useState)(new Set),[u,h]=(0,o.useState)(null),[g,v]=(0,o.useState)(null),S=(0,o.useRef)(null);(0,o.useEffec
2024-05-15 22:36:36 UTC	16360	IN	Data Raw: 75 6c 6c 3d 3d 3d 28 6e 3d 70 2e 72 67 41 77 61 72 64 43 61 74 65 67 6f 72 79 44 65 74 61 69 6c 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 6c 65 6e 67 74 68 29 2c 41 3d 61 2e 42 49 73 45 76 65 6e 74 41 63 74 69 6f 6e 45 6e 61 62 6c 65 64 28 29 7c 7c 53 3c 61 2e 47 65 74 53 74 61 72 74 54 69 6d 65 41 6e 64 44 61 74 65 55 6e 69 78 53 65 63 6f 6e 64 73 28 29 2c 4c 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 3b 72 65 74 75 72 6e 20 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 44 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 5f 2e 5a 29 28 4d 28 29 2e 53 74 65 61 6d 41 77 61 72 64 43 6f 6e 74 61 69 6e 65 72 2c 45 28 29 2e 50 61 72 74 6e 65 72 45 76 65 6e 74 46 6f Data Ascii: ull===(n=p.rgAwardCategoryDetails)\|\|void 0===n?void 0:n.length),A=a.BIsEventActionEnabled()\|\|S<a.GetStartTimeAndDateUnixSeconds(),L=(new Date).getFullYear();return c.createElement("div",{style:D,className:(0,_.Z)(M().SteamAwardContainer,E().PartnerEventFo
2024-05-15 22:36:36 UTC	12403	IN	Data Raw: 33 30 36 62 0d 0a 79 7b 69 66 28 75 2e 44 65 2e 49 4e 5f 53 54 45 41 4d 55 49 29 7b 6c 65 74 20 65 3d 78 2e 67 41 2e 49 6e 69 74 28 6b 2e 53 76 29 3b 65 2e 42 6f 64 79 28 29 2e 73 65 74 5f 61 70 70 69 64 28 74 29 2c 65 2e 42 6f 64 79 28 29 2e 73 65 74 5f 73 74 61 74 75 73 5f 74 65 78 74 28 73 29 3b 6c 65 74 20 6e 3d 79 69 65 6c 64 20 6b 2e 6c 6b 2e 50 6f 73 74 53 74 61 74 75 73 54 6f 46 72 69 65 6e 64 73 28 4d 2e 51 38 2e 43 4d 49 6e 74 65 72 66 61 63 65 2e 47 65 74 53 65 72 76 69 63 65 54 72 61 6e 73 70 6f 72 74 28 29 2c 65 29 3b 69 66 28 31 21 3d 6e 2e 47 65 74 45 52 65 73 75 6c 74 28 29 29 7b 63 6f 6e 73 74 20 65 3d 28 30 2c 6d 2e 58 78 29 28 22 23 45 76 65 6e 74 44 69 73 70 6c 61 79 5f 53 68 61 72 65 5f 46 61 69 6c 75 72 65 22 29 2b 22 5c 6e 5c 6e 22 Data Ascii: 306by{if(u.De.IN_STEAMUI){let e=x.gA.Init(k.Sv);e.Body().set_appid(t),e.Body().set_status_text(s);let n=yield k.lk.PostStatusToFriends(M.Q8.CMInterface.GetServiceTransport(),e);if(1!=n.GetEResult()){const e=(0,m.Xx)("#EventDisplay_Share_Failure")+"\n\n"
2024-05-15 22:36:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49816	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:34 UTC	766	OUT	GET /public/javascript/applications/community/chunk~afc01df82.js?contenthash=07c9e1b6e7564fa7d26d HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:36 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:35 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=178028 Expires: Sat, 18 May 2024 00:03:43 GMT
2024-05-15 22:36:36 UTC	15795	IN	Data Raw: 33 64 61 62 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 36 31 30 5d 2c 7b 35 31 36 37 3a 65 3d 3e 7b 65 Data Ascii: 3dab/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[8610],{5167:e=>{e
2024-05-15 22:36:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49817	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:35 UTC	766	OUT	GET /public/javascript/applications/community/chunk~d2dd7ecf6.js?contenthash=019cafbb6645240613f8 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:36 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:35 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=174012 Expires: Fri, 17 May 2024 22:56:47 GMT
2024-05-15 22:36:36 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 30 38 5d 2c 7b 31 36 30 39 31 3a 65 3d 3e 7b 65 Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[508],{16091:e=>{e
2024-05-15 22:36:36 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 72 61 67 4f 6e 54 6f 70 4f 66 4d 65 3a 22 5f 32 66 6a 77 32 48 4a 39 69 34 6d 58 70 4f 67 74 64 7a 45 37 52 41 22 2c 45 76 65 6e 74 45 64 69 74 6f 72 41 72 74 77 6f 72 6b 54 65 78 74 43 74 6e 3a 22 5f 33 30 43 2d 7a 43 30 4e 76 44 32 7a 4b 62 58 37 39 70 2d 77 74 54 22 2c 45 76 65 6e 74 45 64 69 74 6f 72 44 72 61 67 54 61 72 67 65 74 41 72 65 61 3a 22 5f 31 33 52 43 41 42 51 58 5a 62 66 63 39 5f 52 34 56 41 4b 51 32 66 22 2c 45 76 65 6e 74 45 64 69 74 6f 72 41 72 74 77 6f 72 6b 54 69 74 6c 65 3a 22 5f 32 4c 4e 32 6f 64 5a 4a 63 4b 67 47 58 36 70 57 49 72 79 76 65 77 22 2c 45 76 65 6e 74 45 64 69 74 6f 72 41 72 74 77 6f 72 6b 53 75 62 54 69 74 6c 65 3a 22 5f 32 57 55 32 74 70 43 4f 31 4e 49 30 31 35 49 39 5f 54 39 78 32 44 22 2c 45 76 65 Data Ascii: 3ff0ragOnTopOfMe:"_2fjw2HJ9i4mXpOgtdzE7RA",EventEditorArtworkTextCtn:"_30C-zC0NvD2zKbX79p-wtT",EventEditorDragTargetArea:"_13RCABQXZbfc9_R4VAKQ2f",EventEditorArtworkTitle:"_2LN2odZJcKgGX6pWIryvew",EventEditorArtworkSubTitle:"_2WU2tpCO1NI015I9_T9x2D",Eve
2024-05-15 22:36:36 UTC	16377	IN	Data Raw: 33 66 66 31 0d 0a 6e 74 45 6d 61 69 6c 5f 53 75 62 6a 65 63 74 5f 54 6f 75 72 6e 61 6d 65 6e 74 5f 4e 6f 77 22 2c 22 45 76 65 6e 74 45 6d 61 69 6c 5f 53 75 62 6a 65 63 74 5f 4c 69 76 65 53 74 72 65 61 6d 5f 4e 6f 77 22 2c 22 45 6d 61 69 6c 5f 57 69 73 68 6c 69 73 74 5f 4e 65 77 52 65 6c 65 61 73 65 45 41 5f 53 75 62 6a 65 63 74 22 2c 22 45 76 65 6e 74 45 6d 61 69 6c 5f 53 75 62 6a 65 63 74 5f 4e 65 77 44 4c 43 22 2c 22 45 76 65 6e 74 45 6d 61 69 6c 5f 53 75 62 6a 65 63 74 5f 4e 65 77 45 78 70 61 6e 73 69 6f 6e 22 2c 22 45 76 65 6e 74 45 6d 61 69 6c 5f 53 75 62 6a 65 63 74 5f 4e 65 77 43 68 61 70 74 65 72 22 2c 22 45 76 65 6e 74 45 6d 61 69 6c 5f 53 75 62 6a 65 63 74 5f 4e 65 77 42 61 74 74 6c 65 50 61 73 73 22 2c 22 45 76 65 6e 74 45 6d 61 69 6c 5f 53 75 Data Ascii: 3ff1ntEmail_Subject_Tournament_Now","EventEmail_Subject_LiveStream_Now","Email_Wishlist_NewReleaseEA_Subject","EventEmail_Subject_NewDLC","EventEmail_Subject_NewExpansion","EventEmail_Subject_NewChapter","EventEmail_Subject_NewBattlePass","EventEmail_Su
2024-05-15 22:36:36 UTC	7	IN	Data Raw: 33 66 65 39 0d 0a 69 Data Ascii: 3fe9i
2024-05-15 22:36:36 UTC	16384	IN	Data Raw: 73 2e 6d 5f 6d 61 70 53 65 63 74 69 6f 6e 73 2e 67 65 74 28 68 29 2e 6d 61 70 41 70 70 4c 69 73 74 73 2e 6b 65 79 73 28 29 29 29 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 74 68 69 73 2e 6d 5f 6d 61 70 53 65 63 74 69 6f 6e 73 2e 67 65 74 28 68 29 2e 6d 61 70 41 70 70 4c 69 73 74 73 2e 67 65 74 28 65 29 2e 61 70 70 73 29 53 2e 70 75 73 68 28 62 2e 53 61 6c 65 43 61 70 73 75 6c 65 46 72 6f 6d 43 6f 6e 74 65 6e 74 48 75 62 43 61 70 73 75 6c 65 28 74 29 29 3b 79 69 65 6c 64 28 30 2c 5f 2e 71 72 29 28 53 2c 63 2e 62 6b 29 2c 74 68 69 73 2e 52 65 70 6c 61 63 65 53 69 6e 67 6c 65 41 70 70 50 61 63 6b 61 67 65 73 57 69 74 68 41 70 70 73 28 6c 2c 68 29 2c 79 69 65 6c 64 20 74 68 69 73 2e 41 70 70 6c 79 55 73 65 72 41 6e 64 48 6f 6d 65 56 69 65 77 46 69 6c 74 65 Data Ascii: s.m_mapSections.get(h).mapAppLists.keys()))for(const t of this.m_mapSections.get(h).mapAppLists.get(e).apps)S.push(b.SaleCapsuleFromContentHubCapsule(t));yield(0,_.qr)(S,c.bk),this.ReplaceSingleAppPackagesWithApps(l,h),yield this.ApplyUserAndHomeViewFilte
2024-05-15 22:36:36 UTC	16354	IN	Data Raw: 20 73 2e 71 38 3b 74 2e 73 65 74 5f 6e 61 6d 65 28 72 29 2c 74 2e 73 65 74 5f 6f 70 74 69 6e 5f 74 61 67 69 64 28 63 29 2c 74 2e 73 65 74 5f 70 72 75 6e 65 5f 74 61 67 69 64 28 64 29 2c 74 2e 73 65 74 5f 6f 70 74 69 6e 5f 6f 6e 6c 79 28 75 29 2c 65 2e 73 65 74 5f 6f 70 74 69 6e 28 74 29 7d 6d 2e 73 65 74 5f 63 6f 6e 74 65 6e 74 5f 68 75 62 5f 66 69 6c 74 65 72 28 65 29 7d 72 65 74 75 72 6e 20 6d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 75 2e 47 4d 29 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 7d 63 6c 61 73 73 20 68 7b 47 65 74 54 6f 74 61 6c 53 6b 69 70 70 65 64 41 70 70 73 46 6f 72 44 69 73 63 6f 76 65 72 79 51 75 65 75 65 28 65 2c 74 29 7b 63 6f 6e 73 74 20 61 3d 5f 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 74 Data Ascii: s.q8;t.set_name(r),t.set_optin_tagid(c),t.set_prune_tagid(d),t.set_optin_only(u),e.set_optin(t)}m.set_content_hub_filter(e)}return m}function g(e){return(0,u.GM)(JSON.stringify(e))}class h{GetTotalSkippedAppsForDiscoveryQueue(e,t){const a=_(e,t);return t
2024-05-15 22:36:37 UTC	16384	IN	Data Raw: 37 66 64 39 0d 0a 72 2e 58 29 28 6e 75 6c 6c 21 3d 74 26 26 6e 75 6c 6c 21 3d 74 26 26 22 22 21 3d 74 2c 22 43 50 61 72 74 6e 65 72 45 76 65 6e 74 50 72 69 76 61 74 65 44 61 74 61 53 74 6f 72 65 3a 20 47 49 44 20 6e 6f 74 20 73 75 70 70 6c 69 65 64 2e 22 29 2c 21 74 68 69 73 2e 6d 5f 6d 61 70 50 72 69 76 61 74 65 44 61 74 61 2e 68 61 73 28 74 29 29 72 65 74 75 72 6e 20 34 32 3b 69 66 28 74 68 69 73 2e 42 49 73 45 71 75 61 6c 28 61 2c 74 68 69 73 2e 6d 5f 6d 61 70 4f 72 69 67 69 6e 61 6c 4a 53 4f 4e 2e 67 65 74 28 74 29 29 29 72 65 74 75 72 6e 20 31 3b 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 46 6f 72 6d 44 61 74 61 3b 6e 2e 61 70 70 65 6e 64 28 22 73 65 73 73 69 6f 6e 69 64 22 2c 5f 2e 44 65 2e 53 45 53 53 49 4f 4e 49 44 29 2c 6e 2e 61 70 70 65 6e Data Ascii: 7fd9r.X)(null!=t&&null!=t&&""!=t,"CPartnerEventPrivateDataStore: GID not supplied."),!this.m_mapPrivateData.has(t))return 42;if(this.BIsEqual(a,this.m_mapOriginalJSON.get(t)))return 1;try{const n=new FormData;n.append("sessionid",_.De.SESSIONID),n.appen
2024-05-15 22:36:37 UTC	16353	IN	Data Raw: 73 74 20 65 3d 7b 6e 61 6d 65 3a 6e 2e 67 65 74 28 61 29 2c 73 75 62 74 69 74 6c 65 3a 6e 65 77 20 41 72 72 61 79 2c 72 67 53 74 6f 72 65 54 61 67 46 69 6c 74 65 72 3a 7b 74 79 70 65 3a 73 2e 50 4a 2e 6b 5f 45 53 74 6f 72 65 46 69 6c 74 65 72 43 6c 61 75 73 65 54 79 70 65 41 6e 64 2c 72 67 53 75 62 65 78 70 72 65 73 73 69 6f 6e 73 3a 5b 7b 74 79 70 65 3a 73 2e 50 4a 2e 6b 5f 45 53 74 6f 72 65 46 69 6c 74 65 72 43 6c 61 75 73 65 54 79 70 65 4f 72 2c 72 67 53 75 62 65 78 70 72 65 73 73 69 6f 6e 73 3a 74 2e 68 61 73 28 61 29 3f 74 2e 67 65 74 28 61 29 2e 6d 61 70 28 28 65 3d 3e 28 7b 74 79 70 65 3a 73 2e 50 4a 2e 6b 5f 45 53 74 6f 72 65 46 69 6c 74 65 72 43 6c 61 75 73 65 54 79 70 65 53 74 6f 72 65 54 61 67 2c 76 61 6c 75 65 3a 65 7d 29 29 29 3a 5b 7b 74 79 Data Ascii: st e={name:n.get(a),subtitle:new Array,rgStoreTagFilter:{type:s.PJ.k_EStoreFilterClauseTypeAnd,rgSubexpressions:[{type:s.PJ.k_EStoreFilterClauseTypeOr,rgSubexpressions:t.has(a)?t.get(a).map((e=>({type:s.PJ.k_EStoreFilterClauseTypeStoreTag,value:e}))):[{ty
2024-05-15 22:36:37 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 3d 6e 65 77 20 53 65 74 2c 74 68 69 73 2e 6d 5f 66 61 63 65 74 73 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 66 61 63 65 74 56 61 6c 75 65 73 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 66 61 63 65 74 56 61 6c 75 65 2e 74 79 70 65 3d 3d 3d 6d 2e 48 4c 2e 6b 5f 45 55 73 65 72 50 72 65 66 65 72 65 6e 63 65 26 26 65 2e 62 45 6e 61 62 6c 65 64 26 26 74 68 69 73 2e 6d 5f 75 73 65 72 50 72 65 66 65 72 65 6e 63 65 73 2e 61 64 64 28 65 2e 66 61 63 65 74 56 61 6c 75 65 2e 75 73 65 72 50 72 65 66 65 72 65 6e 63 65 29 7d 29 29 7d 29 29 7d 50 72 75 6e 65 46 61 63 65 74 73 28 29 7b 74 68 69 73 2e 6d 5f 70 72 75 6e 65 64 46 61 63 65 74 73 3d 5b 5d 2c 74 68 69 73 2e 6d 5f 62 53 65 72 76 65 72 53 69 64 65 46 69 6c 74 65 72 69 6e 67 7c 7c 21 74 Data Ascii: 7fd8=new Set,this.m_facets.forEach((e=>{e.facetValues.forEach((e=>{e.facetValue.type===m.HL.k_EUserPreference&&e.bEnabled&&this.m_userPreferences.add(e.facetValue.userPreference)}))}))}PruneFacets(){this.m_prunedFacets=[],this.m_bServerSideFiltering\|\|!t
2024-05-15 22:36:37 UTC	16352	IN	Data Raw: 6e 67 28 37 29 29 29 3b 63 6f 6e 73 74 20 6f 3d 6e 75 6c 6c 3d 3d 3d 28 6e 3d 28 30 2c 68 2e 77 6a 29 28 6c 2c 28 30 2c 64 2e 6a 5f 29 28 74 29 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6c 3f 6f 3a 28 30 2c 62 2e 58 78 29 28 62 2e 4c 5a 2e 47 65 74 57 69 74 68 46 61 6c 6c 62 61 63 6b 28 69 2c 74 29 2e 74 72 69 6d 28 29 29 7d 63 6f 6e 73 74 20 4f 3d 28 30 2c 73 2e 50 69 29 28 28 65 3d 3e 7b 63 6f 6e 73 74 7b 6c 61 6e 67 75 61 67 65 3a 74 2c 68 69 67 68 6c 69 67 68 74 65 64 46 61 63 65 74 43 6f 6c 6f 72 3a 61 2c 6c 69 6e 6b 43 6f 6c 6f 72 3a 6e 2c 66 61 63 65 74 56 61 6c 75 65 3a 69 2c 66 61 63 65 74 46 69 6c 74 65 72 53 74 61 74 65 3a 6c 2c 73 74 79 6c 65 4f 76 65 72 72 69 64 65 73 3a 73 2c Data Ascii: ng(7)));const o=null===(n=(0,h.wj)(l,(0,d.j_)(t)))\|\|void 0===n?void 0:n.name;return l?o:(0,b.Xx)(b.LZ.GetWithFallback(i,t).trim())}const O=(0,s.Pi)((e=>{const{language:t,highlightedFacetColor:a,linkColor:n,facetValue:i,facetFilterState:l,styleOverrides:s,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49818	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:36 UTC	766	OUT	GET /public/javascript/applications/community/chunk~b1f9f17fd.js?contenthash=926d8ae84076f2223cec HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:37 UTC	266	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:36 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=35952 Expires: Thu, 16 May 2024 08:35:48 GMT
2024-05-15 22:36:37 UTC	16099	IN	Data Raw: 33 65 64 62 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 30 5d 2c 7b 39 35 37 33 3a 65 3d 3e 7b 65 2e Data Ascii: 3edb/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[400],{9573:e=>{e.
2024-05-15 22:36:37 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 29 7d 2c 35 39 37 37 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 55 3a 28 29 3d 3e 6d 2c 56 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 61 3d 6e 28 38 35 35 35 36 29 2c 72 3d 6e 28 38 30 37 35 31 29 2c 69 3d 6e 2e 6e 28 72 29 2c 6f 3d 6e 28 34 37 34 32 37 29 2c 73 3d 6e 28 31 36 36 34 39 29 2c 6c 3d 6e 28 34 35 34 39 32 29 2c 63 3d 6e 28 32 30 34 31 37 29 2c 64 3d 6e 28 33 37 35 36 33 29 3b 63 6c 61 73 73 20 6d 7b 47 65 74 55 73 65 72 4c 69 62 72 61 72 79 43 6f 6d 70 61 74 4c 69 73 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 5f 6c 69 62 72 61 72 79 7c 7c 74 68 69 73 2e 6d 5f 65 6d 70 74 79 4c 69 73 74 7d 42 48 61 73 55 73 65 72 4c 69 62 72 61 72 79 43 6f 6d 70 61 74 4c 69 73 74 28 29 Data Ascii: 3ff0)},59777:(e,t,n)=>{"use strict";n.d(t,{U:()=>m,V:()=>u});var a=n(85556),r=n(80751),i=n.n(r),o=n(47427),s=n(16649),l=n(45492),c=n(20417),d=n(37563);class m{GetUserLibraryCompatList(){return this.m_library\|\|this.m_emptyList}BHasUserLibraryCompatList()
2024-05-15 22:36:37 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 69 6e 64 6f 77 2e 67 5f 45 76 65 6e 74 44 6f 6f 72 53 74 6f 72 65 3d 76 2e 73 5f 53 69 6e 67 6c 65 74 6f 6e 29 29 2c 76 2e 73 5f 53 69 6e 67 6c 65 74 6f 6e 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 6d 5f 62 4c 6f 61 64 65 64 44 75 72 69 6e 67 49 6e 69 74 3d 21 31 2c 74 68 69 73 2e 6d 5f 73 74 72 4c 61 73 74 44 6f 6f 72 4f 70 65 6e 4b 65 79 3d 22 76 69 64 65 6f 5f 6e 6f 6e 65 73 65 74 22 2c 74 68 69 73 2e 6d 5f 62 49 73 41 6e 79 44 6f 6f 72 4f 70 65 6e 65 64 3d 21 31 2c 74 68 69 73 2e 6d 5f 6e 48 69 67 68 65 73 74 44 6f 6f 72 4f 70 65 6e 65 64 3d 67 2c 74 68 69 73 2e 6d 5f 6d 61 70 44 6f 6f 72 4f 70 65 6e 50 72 6f 6d 69 73 65 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 6d 5f 6d 61 70 43 68 61 6e 67 65 43 61 6c 6c 62 61 63 Data Ascii: 3ff0indow.g_EventDoorStore=v.s_Singleton)),v.s_Singleton}constructor(){this.m_bLoadedDuringInit=!1,this.m_strLastDoorOpenKey="video_noneset",this.m_bIsAnyDoorOpened=!1,this.m_nHighestDoorOpened=g,this.m_mapDoorOpenPromise=new Map,this.m_mapChangeCallbac
2024-05-15 22:36:37 UTC	8	IN	Data Raw: 33 66 66 30 0d 0a 44 65 Data Ascii: 3ff0De
2024-05-15 22:36:37 UTC	16384	IN	Data Raw: 6c 65 74 65 4f 6c 64 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 28 6e 2c 72 29 2e 74 68 65 6e 28 74 68 69 73 2e 4f 6e 44 65 6c 65 74 65 45 76 65 6e 74 53 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 29 2e 63 61 74 63 68 28 74 68 69 73 2e 4f 6e 44 65 6c 65 74 65 45 76 65 6e 74 46 61 69 6c 75 72 65 43 61 6c 6c 62 61 63 6b 29 29 3a 28 74 2e 52 65 73 65 74 4d 6f 64 65 6c 28 29 2c 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 64 69 61 6c 6f 67 53 74 61 74 65 3a 22 73 75 63 63 65 73 73 22 7d 29 29 7d 4f 6e 43 68 61 6e 67 65 44 65 6c 65 74 65 46 6f 72 75 6d 28 29 7b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 62 44 65 6c 65 74 65 43 6f 6d 6d 65 6e 74 54 68 72 65 61 64 3a 21 74 68 69 73 2e 73 74 61 74 65 2e 62 44 65 6c 65 74 65 43 6f 6d 6d 65 6e 74 54 68 72 65 61 64 7d 29 Data Ascii: leteOldAnnouncement(n,r).then(this.OnDeleteEventSuccessCallback).catch(this.OnDeleteEventFailureCallback)):(t.ResetModel(),this.setState({dialogState:"success"}))}OnChangeDeleteForum(){this.setState({bDeleteCommentThread:!this.state.bDeleteCommentThread})
2024-05-15 22:36:37 UTC	16352	IN	Data Raw: 72 72 69 64 65 3a 6e 7d 29 2c 42 6f 6f 6c 65 61 6e 28 74 2e 6a 73 6f 6e 64 61 74 61 2e 62 53 61 6c 65 45 6e 61 62 6c 65 64 26 26 74 2e 6a 73 6f 6e 64 61 74 61 2e 73 61 6c 65 5f 76 61 6e 69 74 79 5f 69 64 29 26 26 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 45 2e 5a 29 28 42 28 29 2e 52 65 61 64 4d 6f 72 65 43 6e 74 29 7d 2c 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 46 2e 69 2c 7b 67 69 64 45 76 65 6e 74 3a 74 2e 47 49 44 7d 29 2c 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 45 2e 5a 29 28 4f 28 29 2e 42 75 74 74 6f 6e 2c 22 4c 69 6e 6b 42 75 74 74 6f 6e 22 29 2c 68 72 65 66 3a 28 30 2c 59 2e 4f 4c 29 28 74 2e 47 65 74 53 61 6c 65 Data Ascii: rride:n}),Boolean(t.jsondata.bSaleEnabled&&t.jsondata.sale_vanity_id)&&l.createElement("div",{className:(0,E.Z)(B().ReadMoreCnt)},l.createElement(F.i,{gidEvent:t.GID}),l.createElement("a",{className:(0,E.Z)(O().Button,"LinkButton"),href:(0,Y.OL)(t.GetSale
2024-05-15 22:36:37 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 3d 22 22 3b 69 66 28 30 3d 3d 69 26 26 61 29 7b 63 6f 6e 73 74 20 65 3d 61 2e 47 65 74 42 65 73 74 50 75 72 63 68 61 73 65 4f 70 74 69 6f 6e 28 29 3b 69 66 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 61 63 74 69 76 65 5f 64 69 73 63 6f 75 6e 74 73 3b 69 66 28 74 29 66 6f 72 28 63 6f 6e 73 74 20 65 20 6f 66 20 74 29 28 30 3d 3d 69 7c 7c 65 2e 64 69 73 63 6f 75 6e 74 5f 65 6e 64 5f 64 61 74 65 3c 69 29 26 26 28 69 3d 65 2e 64 69 73 63 6f 75 6e 74 5f 65 6e 64 5f 64 61 74 65 2c 6f 3d 65 2e 64 69 73 63 6f 75 6e 74 5f 64 65 73 63 72 69 70 74 69 6f 6e 29 7d 7d 63 6f 6e 73 74 20 73 3d 28 30 2c 78 2e 6a 72 29 28 69 2c 7b 62 47 72 61 6e 75 6c 61 72 46 75 74 75 72 65 54 69 6d 65 3a 21 30 2c 62 41 62 62 72 65 76 69 61 74 65 44 61 79 4f 66 57 65 65 6b Data Ascii: 7fd8="";if(0==i&&a){const e=a.GetBestPurchaseOption();if(e){const t=e.active_discounts;if(t)for(const e of t)(0==i\|\|e.discount_end_date<i)&&(i=e.discount_end_date,o=e.discount_description)}}const s=(0,x.jr)(i,{bGranularFutureTime:!0,bAbbreviateDayOfWeek
2024-05-15 22:36:37 UTC	16352	IN	Data Raw: 72 65 3d 6e 65 77 20 56 2c 22 64 65 76 22 3d 3d 77 2e 44 65 2e 57 45 42 5f 55 4e 49 56 45 52 53 45 26 26 28 77 69 6e 64 6f 77 2e 67 5f 44 69 73 63 6f 75 6e 74 53 74 6f 72 65 3d 56 2e 73 5f 67 6c 6f 62 61 6c 53 69 6e 67 6c 65 74 6f 6e 53 74 6f 72 65 29 29 2c 56 2e 73 5f 67 6c 6f 62 61 6c 53 69 6e 67 6c 65 74 6f 6e 53 74 6f 72 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 41 72 72 61 79 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 69 66 28 21 74 7c 7c 6e 2e 6c 65 6e 67 74 68 3c 74 29 69 66 28 22 61 70 70 22 3d 3d 3d 65 2e 69 74 65 6d 5f 74 79 70 65 29 7b 63 6f 6e 73 74 20 74 3d 41 2e 5a 2e 47 65 74 28 29 2e 47 65 74 41 70 70 28 65 2e 69 64 29 3b 74 26 26 6e 2e 70 75 73 68 28 7b 69 64 3a Data Ascii: re=new V,"dev"==w.De.WEB_UNIVERSE&&(window.g_DiscountStore=V.s_globalSingletonStore)),V.s_globalSingletonStore}}function j(e,t){const n=new Array;return e.forEach((e=>{if(!t\|\|n.length<t)if("app"===e.item_type){const t=A.Z.Get().GetApp(e.id);t&&n.push({id:
2024-05-15 22:36:38 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 29 2c 5b 69 2c 6e 2c 72 2c 65 2c 74 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 6f 65 2e 45 74 29 28 65 2c 6a 28 5b 74 5d 29 5b 30 5d 29 7d 76 61 72 20 70 65 3d 6e 28 36 35 32 35 35 29 3b 76 61 72 20 67 65 3d 6e 28 37 37 36 39 29 2c 76 65 3d 6e 2e 6e 28 67 65 29 2c 68 65 3d 6e 28 35 38 31 32 39 29 2c 45 65 3d 6e 28 39 35 30 38 32 29 2c 53 65 3d 6e 28 31 34 36 30 39 29 3b 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 76 61 72 20 74 3b 63 6f 6e 73 74 7b 73 70 6f 74 6c 69 67 68 74 3a 6e 7d 3d 65 2c 72 3d 28 30 2c 43 2e 59 52 29 28 6e 2e 75 72 6c 2c 22 73 70 6f 74 6c 69 67 68 74 22 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 45 65 2e 5a 50 2c 7b 61 70 70 49 44 3a 22 61 Data Ascii: 7fd8),[i,n,r,e,t])}function _e(e,t){return(0,oe.Et)(e,j([t])[0])}var pe=n(65255);var ge=n(7769),ve=n.n(ge),he=n(58129),Ee=n(95082),Se=n(14609);function ye(e){var t;const{spotlight:n}=e,r=(0,C.YR)(n.url,"spotlight");return a.createElement(Ee.ZP,{appID:"a
2024-05-15 22:36:38 UTC	16352	IN	Data Raw: 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 47 2e 5a 29 28 79 74 2e 65 78 70 65 63 74 65 64 64 61 74 65 2c 22 52 65 73 65 72 76 61 74 69 6f 6e 45 78 70 65 63 74 65 64 44 61 74 65 43 74 6e 22 29 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 47 2e 5a 29 28 79 74 2e 65 78 70 65 63 74 65 64 64 61 74 65 5f 73 74 72 2c 22 52 65 73 65 72 76 61 74 69 6f 6e 45 78 70 65 63 74 65 64 44 61 74 65 22 29 7d 2c 28 30 2c 78 2e 58 78 29 28 22 23 53 61 6c 65 5f 52 65 73 65 72 76 61 74 69 6f 6e 5f 41 76 61 69 6c 61 62 6c 65 5f 44 61 74 65 22 2c 28 30 2c 78 2e 24 31 29 28 6e 2c 69 29 29 29 29 29 7d 76 61 72 20 43 74 3d 6e 28 38 32 30 39 33 29 3b 63 6f 6e 73 74 20 44 74 3d 61 2e 46 72 61 Data Ascii: t("div",{className:(0,G.Z)(yt.expecteddate,"ReservationExpectedDateCtn")},a.createElement("div",{className:(0,G.Z)(yt.expecteddate_str,"ReservationExpectedDate")},(0,x.Xx)("#Sale_Reservation_Available_Date",(0,x.$1)(n,i)))))}var Ct=n(82093);const Dt=a.Fra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49819	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:36 UTC	757	OUT	GET /public/javascript/applications/community/events.js?contenthash=bba0659f6398b0718f9a HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:37 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:37 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177430 Expires: Fri, 17 May 2024 23:53:47 GMT
2024-05-15 22:36:37 UTC	13689	IN	Data Raw: 33 35 37 31 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 33 36 5d 2c 7b 39 32 32 34 32 3a 65 3d 3e 7b Data Ascii: 3571/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2136],{92242:e=>{
2024-05-15 22:36:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49820	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:36 UTC	760	OUT	GET /public/javascript/applications/community/navevents.js?contenthash=3afb60572704da653a1f HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:37 UTC	266	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:37 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=35879 Expires: Thu, 16 May 2024 08:34:36 GMT
2024-05-15 22:36:37 UTC	14608	IN	Data Raw: 33 39 30 38 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 31 30 33 Data Ascii: 3908/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[4103
2024-05-15 22:36:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49821	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:37 UTC	793	OUT	GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gtm.you1.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://gtm.you1.cn/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:38 UTC	220	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:37 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-05-15 22:36:38 UTC	16145	IN	Data Raw: 33 66 30 39 0d 0a 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 df 1c 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 b7 ad 6e 29 00 00 01 6c 00 00 75 6a 47 53 55 42 e1 64 c1 db 00 00 76 d8 00 00 1b a4 4f 53 2f 32 74 d2 9d 02 00 00 92 7c 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 92 dc 00 00 05 8e 63 76 74 20 46 29 09 0f 00 01 cf 64 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d0 2c 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 cf 5c 00 00 00 08 67 6c 79 66 e0 8a ae 64 00 00 98 6c 00 01 01 b6 68 65 61 64 17 93 fb 41 00 01 9a 24 00 00 00 36 68 68 65 61 06 9e 06 2b 00 01 9a 5c 00 00 00 24 68 6d 74 78 76 c1 78 00 00 01 9a 80 00 00 0c e6 6c 6f 63 61 a7 f7 67 d6 00 01 a7 68 00 00 06 a6 6d 61 78 70 04 a0 0f 16 00 01 ae 10 00 Data Ascii: 3f09 DSIGGDEF4,@GPOSn)lujGSUBdvOS/2t\|`cmapdcvt F)dfpgm6!,gasp\glyfdlheadA$6hhea+\$hmtxvxlocaghmaxp
2024-05-15 22:36:38 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff db ff f7 00 02 00 00 00 03 00 00 00 04 00 01 00 00 00 00 00 00 00 00 ff ad ff bd 00 00 00 00 00 00 00 00 00 00 ff 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff eb ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 0f 00 01 Data Ascii: 3ff0
2024-05-15 22:36:38 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 Data Ascii: 3ff0
2024-05-15 22:36:38 UTC	8	IN	Data Raw: 33 66 66 30 0d 0a 04 1c Data Ascii: 3ff0
2024-05-15 22:36:38 UTC	16384	IN	Data Raw: 2f 1c 2e 2a 29 26 24 21 20 10 1b 10 1a 16 14 04 0f 04 0e 25 11 10 0d 0a 19 2b 13 33 15 23 16 26 35 34 36 33 32 16 15 14 06 23 32 26 35 34 36 33 32 16 15 14 06 23 02 26 26 35 11 33 11 14 16 33 32 36 35 11 33 11 14 06 06 23 f4 e6 e6 05 19 19 14 16 1a 1a 16 9e 19 19 16 15 19 19 15 a3 77 47 4a 63 5a 5a 62 4a 47 76 49 03 a6 30 8d 18 17 17 18 18 17 17 18 18 17 17 18 18 17 17 18 fd 0a 37 77 5b 01 c0 fe 3b 59 63 63 59 01 c5 fe 40 5b 77 37 ff ff 00 60 ff 54 02 6d 02 bc 00 22 00 8e 00 00 00 03 03 2e 01 e7 00 00 ff ff 00 60 ff f3 02 6d 03 71 00 22 00 8e 00 00 01 07 03 22 01 cd 00 01 00 08 b1 01 01 b0 01 b0 35 2b 00 00 ff ff 00 60 ff f3 02 6d 03 8a 00 22 00 8e 00 00 00 03 03 2b 02 72 00 00 00 01 00 60 ff f3 02 df 03 3e 00 1c 00 4e 4b b0 0a 50 58 40 1c 00 00 03 03 00 Data Ascii: /.*)&$! %+3#&54632#2&54632#&&5332653#wGJcZZbJGvI07w[;YccY@[w7`Tm".`mq""5+`m"+r`>NKPX@
2024-05-15 22:36:38 UTC	16352	IN	Data Raw: 2e 48 cf 54 d1 23 33 a6 6c d9 a0 02 2b 07 28 21 21 4b 21 7f 85 02 39 fd c7 41 35 02 6e fe cb 00 00 ff ff 00 1c 00 00 02 10 03 22 00 22 01 77 00 00 01 07 03 3b 01 b0 00 2d 00 08 b1 02 02 b0 2d b0 35 2b 00 00 ff ff 00 1c 00 00 02 10 02 f2 00 22 01 77 00 00 01 07 03 3c 01 af 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 00 02 00 1c 00 00 02 87 02 39 00 0f 00 12 00 42 40 3f 10 01 01 00 01 4c 00 01 00 02 08 01 02 67 00 08 00 05 03 08 05 67 00 00 00 07 5f 09 01 07 07 2c 4d 00 03 03 04 5f 06 01 04 04 2d 04 4e 00 00 12 11 00 0f 00 0f 11 11 11 11 11 11 11 0a 08 1d 2b 01 15 23 15 33 15 23 15 33 15 21 35 23 07 23 01 17 03 33 02 87 f7 d7 d7 f7 fe c2 a7 3c 4a 01 0a 23 8b 8b 02 39 3f b6 40 c4 40 85 85 02 39 44 fe ce 00 00 03 00 58 00 00 01 e5 02 39 00 0d 00 16 00 1e 00 3c Data Ascii: .HT#3l+(!!K!9A5n""w;--5+"w<--5+9B@?Lgg_,M_-N+#3#3!5##3<J#9?@@9DX9<
2024-05-15 22:36:39 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 05 05 53 4d 00 01 01 00 61 00 00 00 4d 00 4e 1b 40 1b 00 03 00 02 01 03 02 69 00 01 00 00 01 00 65 00 04 04 05 61 06 01 05 05 53 04 4e 59 40 0e 00 00 00 28 00 27 24 21 24 24 2c 07 0a 1b 2b 00 16 15 14 06 07 15 16 16 15 14 06 06 23 22 26 27 37 16 33 32 36 35 34 26 23 23 35 33 32 36 35 34 26 23 22 07 27 36 36 33 01 97 70 4b 38 47 5c 41 77 4e 44 7c 2c 26 5b 69 5a 62 66 60 3b 36 4d 5f 4b 43 57 54 1f 29 6f 3d 02 19 5c 4c 3e 5a 0d 03 09 5e 4b 3e 60 36 2a 25 33 41 54 42 43 45 41 43 3e 37 3d 32 33 1d 23 00 02 00 2f ff 50 02 50 02 0c 00 0a 00 0d 00 4f 40 0a 0b 01 00 04 08 01 01 00 02 4c 4b b0 1b 50 58 40 17 00 02 01 02 86 00 04 04 4b 4d 05 01 00 00 01 5f 03 01 01 01 49 01 4e 1b 40 15 00 02 01 02 86 05 01 00 03 01 01 02 00 01 67 00 04 04 4b 04 4e Data Ascii: 7fd8SMaMN@ieaSNY@('$!$$,+#"&'732654&##532654&#"'663pK8G\AwND\|,&[iZbf`;6M_KCWT)o=\L>Z^K>`6*%3ATBCEAC>7=23#/PPO@LKPX@KM_IN@gKN
2024-05-15 22:36:39 UTC	16352	IN	Data Raw: 07 09 aa 1b 3e 2a 2e 3c 11 b9 09 00 00 ff ff 00 31 ff dc 03 35 02 e2 01 06 02 ee 00 64 00 08 b1 00 02 b0 64 b0 35 2b 00 00 00 03 00 51 ff f3 02 0c 02 44 00 1e 00 2a 00 34 00 39 40 36 2e 2d 21 1e 1c 1b 18 17 0b 02 0a 03 02 01 01 00 03 02 4c 00 02 02 01 61 00 01 01 30 4d 04 01 03 03 00 61 00 00 00 31 00 4e 2b 2b 2b 34 2b 33 28 26 2a 24 05 08 18 2b 25 07 27 06 06 23 22 26 35 34 36 37 26 26 35 34 36 33 32 16 15 14 06 07 17 36 37 37 17 06 07 00 16 17 36 36 35 34 26 23 22 06 15 12 36 37 27 06 06 15 14 16 33 02 0c 2d 4d 24 4b 32 4c 54 39 34 2c 23 51 45 40 4d 3f 3c 72 0c 25 0c 39 2e 1c fe fc 20 1f 2f 2f 28 23 27 2b 66 37 1b 81 27 29 2e 2c 2b 2c 4e 31 29 4a 3f 36 4e 27 2f 41 24 3e 4b 42 35 32 4b 2f 73 15 51 1a 15 65 31 01 22 38 23 22 37 23 20 24 2c 20 fe 6e 24 27 Data Ascii: >.<15dd5+QD49@6.-!La0Ma1N+++4+3(&*$+%'#"&5467&&546326776654&#"67'3-M$K2LT94,#QE@M?<r%9. //(#'+f7').,+,N1)J?6N'/A$>KB52K/sQe1"8#"7# $, n$'
2024-05-15 22:36:39 UTC	8339	IN	Data Raw: 32 30 38 62 0d 0a 44 44 07 75 6e 69 31 45 44 46 07 75 6e 69 31 45 45 31 0d 6f 68 75 6e 67 61 72 75 6d 6c 61 75 74 07 6f 6d 61 63 72 6f 6e 06 72 61 63 75 74 65 06 72 63 61 72 6f 6e 07 75 6e 69 30 31 35 37 06 73 61 63 75 74 65 0b 73 63 69 72 63 75 6d 66 6c 65 78 07 75 6e 69 30 32 31 39 04 74 62 61 72 06 74 63 61 72 6f 6e 07 75 6e 69 30 31 36 33 07 75 6e 69 30 32 31 42 06 75 62 72 65 76 65 07 75 6e 69 30 31 44 34 07 75 6e 69 30 31 44 38 07 75 6e 69 30 31 44 41 07 75 6e 69 30 31 44 43 07 75 6e 69 30 31 44 36 07 75 6e 69 31 45 45 35 07 75 6e 69 31 45 45 37 05 75 68 6f 72 6e 07 75 6e 69 31 45 45 39 07 75 6e 69 31 45 46 31 07 75 6e 69 31 45 45 42 07 75 6e 69 31 45 45 44 07 75 6e 69 31 45 45 46 0d 75 68 75 6e 67 61 72 75 6d 6c 61 75 74 07 75 6d 61 63 72 6f 6e 07 Data Ascii: 208bDDuni1EDFuni1EE1ohungarumlautomacronracutercaronuni0157sacutescircumflexuni0219tbartcaronuni0163uni021Bubreveuni01D4uni01D8uni01DAuni01DCuni01D6uni1EE5uni1EE7uhornuni1EE9uni1EF1uni1EEBuni1EEDuni1EEFuhungarumlautumacron
2024-05-15 22:36:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49822	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:39 UTC	745	OUT	GET /favicon.ico HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/app/2143540 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:41 UTC	231	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:40 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public,max-age=86400 Expires: Wed, 11 Oct 2023 17:17:47 GMT
2024-05-15 22:36:41 UTC	16153	IN	Data Raw: 37 65 65 65 0d 0a 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 Data Ascii: 7eee hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjef
2024-05-15 22:36:41 UTC	16349	IN	Data Raw: 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c fc 33 1b 0c be 33 1b 0b 3b 35 18 0b 01 34 1a 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 44444444^55453;33333333333333333333333333333;54
2024-05-15 22:36:41 UTC	6068	IN	Data Raw: 31 37 61 63 0d 0a 18 57 5e 70 0e c3 fb f7 24 2a c2 72 30 6a 8e d8 e8 48 ec 76 1b 7e 5d a7 91 59 00 6e 8f af de 57 a0 71 ea bc 7e 7e ff ce 22 5e fb 64 25 d5 b5 75 27 04 ec b0 fc bd 3b 19 0a 64 4e 82 aa 29 2c 97 e6 9d c3 9a 55 00 c5 8b 9f 23 75 e6 cf 01 3e 47 f8 21 d0 3b 38 b9 8e 6f 25 fa 02 3a 7b 8e 14 b2 37 ab 90 77 e7 6f 64 ea b9 fd b9 f2 fc 73 38 ef dc fe 74 4b 8a b5 b6 12 1b c1 61 b7 1d 5f 99 3f f5 f1 28 f0 f8 03 e8 ba de e4 df d7 ba 3d 2c 5a bf d7 d8 db b7 59 db 7b 9d 98 5c 90 cf 2a 25 96 b2 45 cf 36 fb c1 16 7a 8d a8 bd a0 2d 40 f8 5e a8 24 34 96 09 04 14 14 97 d7 f0 f1 92 ad cc 5f b3 9b a1 7d 7b 70 c9 e4 e1 5c 3a 75 18 83 7b f7 b0 1c 8c 4e c0 48 38 da 70 26 e0 94 5f 4a bd 82 68 46 71 36 1c ec 3a b6 8b 60 d1 39 51 cc 03 76 b7 44 b1 9f 51 01 94 2c 7a Data Ascii: 17acW^p$r0jHv~]YnWq~~"^d%u';dN),U#u>G!;8o%:{7wods8tKa_?(=,ZY{\%E6z-@^$4_}{p\:u{NH8p&_JhFq6:`9QvDQ,z
2024-05-15 22:36:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49823	47.57.233.162	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:42 UTC	502	OUT	GET /favicon.ico HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:43 UTC	231	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:43 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public,max-age=86400 Expires: Mon, 13 Nov 2023 05:39:25 GMT
2024-05-15 22:36:43 UTC	16128	IN	Data Raw: 33 65 66 38 0d 0a 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 Data Ascii: 3ef8 hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjef
2024-05-15 22:36:43 UTC	16382	IN	Data Raw: 33 66 66 36 0d 0a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c fc 33 1b 0c be 33 1b 0b Data Ascii: 3ff6444444444444444^55453;33333333333333333333333333333
2024-05-15 22:36:43 UTC	6068	IN	Data Raw: 31 37 61 63 0d 0a 18 57 5e 70 0e c3 fb f7 24 2a c2 72 30 6a 8e d8 e8 48 ec 76 1b 7e 5d a7 91 59 00 6e 8f af de 57 a0 71 ea bc 7e 7e ff ce 22 5e fb 64 25 d5 b5 75 27 04 ec b0 fc bd 3b 19 0a 64 4e 82 aa 29 2c 97 e6 9d c3 9a 55 00 c5 8b 9f 23 75 e6 cf 01 3e 47 f8 21 d0 3b 38 b9 8e 6f 25 fa 02 3a 7b 8e 14 b2 37 ab 90 77 e7 6f 64 ea b9 fd b9 f2 fc 73 38 ef dc fe 74 4b 8a b5 b6 12 1b c1 61 b7 1d 5f 99 3f f5 f1 28 f0 f8 03 e8 ba de e4 df d7 ba 3d 2c 5a bf d7 d8 db b7 59 db 7b 9d 98 5c 90 cf 2a 25 96 b2 45 cf 36 fb c1 16 7a 8d a8 bd a0 2d 40 f8 5e a8 24 34 96 09 04 14 14 97 d7 f0 f1 92 ad cc 5f b3 9b a1 7d 7b 70 c9 e4 e1 5c 3a 75 18 83 7b f7 b0 1c 8c 4e c0 48 38 da 70 26 e0 94 5f 4a bd 82 68 46 71 36 1c ec 3a b6 8b 60 d1 39 51 cc 03 76 b7 44 b1 9f 51 01 94 2c 7a Data Ascii: 17acW^p$r0jHv~]YnWq~~"^d%u';dN),U#u>G!;8o%:{7wods8tKa_?(=,ZY{\%E6z-@^$4_}{p\:u{NH8p&_JhFq6:`9QvDQ,z
2024-05-15 22:36:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49825	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:49 UTC	801	OUT	GET /storesteam/ HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; steamCountry=HK%7Cb09085d928b203f4f5f73bce04469d6b; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_
2024-05-15 22:36:51 UTC	1693	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:36:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.akamai.steamstatic.com/ https://store.akamai.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.akamai.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.akamai.steamstatic.com/ https://checkout.steampowered.com/; frame-src 'self' steam: http://www.youtube.com https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://steamcommunity.com/ http [TRUNCATED] X-Frame-Options: DENY Strict-Transport-Security: max-age=10368000 Set-Cookie: steamCountry=HK%7C3f8832cf437838e2588db6607c6feae9; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: browserid=3526959438637945341; Expires=Thu, 15 May 2025 22:36:49 GMT; Path=/; Secure; SameSite=None
2024-05-15 22:36:51 UTC	14672	IN	Data Raw: 33 39 34 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 Data Ascii: 3948<!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"
2024-05-15 22:36:51 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 Data Ascii: 3ff0u_item tight" href="?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); re
2024-05-15 22:36:51 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 64 61 63 74 69 76 69 74 79 2f 3f 73 6e 72 3d 31 5f 34 5f 34 5f 5f 31 32 35 22 3e 42 79 20 46 72 69 65 6e 64 73 3c 2f 61 3e 0d 0a 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 67 75 74 74 65 72 5f 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 63 75 72 61 74 6f 72 73 2f 3f 73 6e 72 3d 31 5f 34 5f 34 5f 5f 31 32 35 22 3e 42 79 20 43 75 72 61 74 6f 72 73 3c 2f 61 3e 0d 0a 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 67 75 74 74 65 72 5f 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 74 61 67 2f 62 72 6f 77 73 65 2f 3f 73 6e 72 3d 31 5f 34 5f 34 5f 5f 31 32 35 23 79 6f 75 72 73 22 Data Ascii: 3ff0dactivity/?snr=1_4_4__125">By Friends</a><a class="gutter_item" href="https://store.steampowered.com/curators/?snr=1_4_4__125">By Curators</a><a class="gutter_item" href="https://store.steampowered.com/tag/browse/?snr=1_4_4__125#yours"
2024-05-15 22:36:51 UTC	8	IN	Data Raw: 33 66 66 30 0d 0a 72 20 Data Ascii: 3ff0r
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 72 65 73 70 6f 6e 73 69 76 65 5f 68 69 64 64 65 6e 22 3e 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2f 3f 73 6e 72 3d 31 5f 34 5f 34 5f 5f 31 32 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 73 70 61 6e 3e 43 6f 6e 74 72 6f 6c 6c 65 72 2d 46 72 69 65 6e 64 6c 79 3c 2f 73 70 61 6e 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 Data Ascii: responsive_hidden"></div><a class="popup_menu_item" href="https://store.steampowered.com/controller/?snr=1_4_4__12"><span>Controller-Friendly</span></a><a class="popup_menu_item" href="https://s
2024-05-15 22:36:51 UTC	16360	IN	Data Raw: 20 20 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 74 61 62 20 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 6e 65 77 73 2f 3f 73 6e 72 3d 31 5f 34 5f 34 5f 5f 31 32 22 3e 0d 0a 09 09 09 09 09 09 09 09 3c 73 70 61 6e 3e 4e 65 77 73 3c 2f 73 70 61 6e 3e 0d 0a 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a> <a class="tab " href="https://store.steampowered.com/news/?snr=1_4_4__12"><span>News</span></a>
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 73 63 6f 75 6e 74 3d 22 36 35 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 36 35 25 20 6f 66 66 2e 20 48 4b 24 20 38 39 2e 30 30 20 6e 6f 72 6d 61 6c 6c 79 2c 20 64 69 73 63 6f 75 6e 74 65 64 20 74 6f 20 48 4b 24 20 33 31 2e 31 35 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 73 63 6f 75 6e 74 5f 70 63 74 22 3e 2d 36 35 25 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 73 63 6f 75 6e 74 5f 70 72 69 63 65 73 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 73 63 6f 75 6e 74 5f 6f 72 69 67 69 6e 61 6c 5f 70 72 69 63 65 22 3e 48 4b 24 20 38 39 2e 30 30 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 73 63 6f 75 6e 74 5f 66 69 6e 61 6c 5f 70 72 69 63 65 22 3e 48 4b 24 20 33 31 2e 31 35 3c 2f 64 69 76 3e 3c 2f 64 69 76 Data Ascii: 7fd8scount="65" aria-label="65% off. HK$ 89.00 normally, discounted to HK$ 31.15"><div class="discount_pct">-65%</div><div class="discount_prices"><div class="discount_original_price">HK$ 89.00</div><div class="discount_final_price">HK$ 31.15</div></div
2024-05-15 22:36:51 UTC	16352	IN	Data Raw: 69 67 5f 62 75 74 74 6f 6e 73 20 68 6f 6d 65 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 22 3e 0d 0a 09 09 09 3c 68 32 20 63 6c 61 73 73 3d 22 68 6f 6d 65 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 22 3e 42 72 6f 77 73 65 20 53 74 65 61 6d 3c 2f 68 32 3e 0d 0a 09 09 09 3c 64 69 76 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6c 6f 77 2d 63 68 69 6c 64 72 65 6e 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 72 6f 77 26 71 75 6f 74 3b 7d 22 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 5b 5d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 65 Data Ascii: ig_buttons home_page_content"><h2 class="home_page_content_title">Browse Steam</h2><div data-panel="{"flow-children":"row"}" class="button_container"> <a data-panel="[]" href="https://store.steampowered.com/e
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 70 72 69 63 65 22 3e 48 4b 24 20 34 34 39 2e 30 30 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 5f 69 74 65 6d 5f 63 6f 6e 74 65 6e 74 22 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 5f 69 74 65 6d 5f 6e 61 6d 65 22 3e 48 6f 6d 65 77 6f 72 6c 64 20 33 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 5f 69 74 65 6d 5f 64 65 74 61 69 6c 73 22 3e 0d 0a 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 6c 61 74 66 6f 72 6d 5f 69 6d 67 20 77 69 6e 22 3e 3c 2f 73 70 61 6e 3e 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 5f 69 74 65 6d 5f 74 6f 70 5f 74 61 67 73 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 6f 70 5f 74 61 Data Ascii: 7fe0price">HK$ 449.00</div></div></div><div class="tab_item_content"><div class="tab_item_name">Homeworld 3</div><div class="tab_item_details"><span class="platform_img win"></span><div class="tab_item_top_tags"><span class="top_ta
2024-05-15 22:36:51 UTC	16360	IN	Data Raw: 2c 20 41 74 6d 6f 73 70 68 65 72 69 63 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6c 65 61 72 3a 20 62 6f 74 68 3b 22 3e 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 61 3e 0d 0a 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 70 70 2f 32 37 38 33 37 38 30 2f 43 61 6c 6c 5f 6f 66 5f 44 75 74 79 5f 4d 6f 64 65 72 6e 5f 57 61 72 66 61 72 65 5f 49 49 49 5f 5f 54 72 61 63 65 72 5f 50 61 63 6b 5f 54 72 61 73 68 5f 54 61 6c 6b 5f 32 30 5f 55 6c 74 72 61 5f 53 6b 69 6e 5f 50 72 6f 5f 50 61 63 6b 2f 3f 73 6e 72 3d 31 5f 34 5f 34 5f 5f 31 34 35 22 20 63 6c 61 73 73 3d 22 74 61 62 5f 69 74 Data Ascii: , Atmospheric</span></div></div></div><div style="clear: both;"></div></a><a href="https://store.steampowered.com/app/2783780/Call_of_Duty_Modern_Warfare_III__Tracer_Pack_Trash_Talk_20_Ultra_Skin_Pro_Pack/?snr=1_4_4__145" class="tab_it

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49831	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:51 UTC	595	OUT	GET /public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:51 UTC	339	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "Rc2hpzg2Ex3T" Server: nginx Content-Type: text/css;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=15163529 Expires: Thu, 07 Nov 2024 10:42:20 GMT Date: Wed, 15 May 2024 22:36:51 GMT Content-Length: 2646 Connection: close
2024-05-15 22:36:51 UTC	2646	IN	Data Raw: 2f 2a 0d 0a 20 46 6f 6e 74 3a 20 09 09 4d 6f 74 69 76 61 20 53 61 6e 73 0d 0a 20 55 52 4c 3a 20 09 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 2e 70 68 70 3f 73 6b 75 3d 54 32 39 38 32 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 4e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 64 65 73 69 67 6e 65 72 2f 32 39 33 2f 6e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 43 6f 70 79 72 69 67 68 74 3a 09 43 6f 70 79 72 69 67 68 74 20 20 32 30 31 31 20 62 79 20 52 6f 64 72 69 67 6f 20 53 61 69 61 6e 69 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 56 65 72 73 69 6f 6e 3a 20 09 31 Data Ascii: /* Font: Motiva Sans URL: http://www.youworkforthem.com/product.php?sku=T2982 Foundry: Niramekko Foundry: http://www.youworkforthem.com/designer/293/niramekko Copyright:Copyright 2011 by Rodrigo Saiani. All rights reserved. Version: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49827	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:51 UTC	597	OUT	GET /public/shared/css/shared_global.css?v=lI4V3qLLPrMY&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:51 UTC	382	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "lI4V3qLLPrMY" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=12441678 Expires: Sun, 06 Oct 2024 22:38:09 GMT Date: Wed, 15 May 2024 22:36:51 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:36:51 UTC	16002	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 2f 2a 20 53 79 73 74 65 6d 20 67 72 65 79 73 20 2a 2f 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 73 74 47 72 65 79 3a 20 23 44 43 44 45 44 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 72 47 72 65 79 3a 20 23 42 38 42 43 42 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 47 72 65 79 3a 20 23 38 42 39 32 39 41 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 47 72 65 79 3a 20 23 36 37 37 30 37 42 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 47 72 65 79 3a 20 23 33 44 34 34 35 30 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 72 47 72 65 79 3a 20 23 32 33 32 36 32 45 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 73 74 47 72 65 79 3a Data Ascii: 0000C000:root {/* System greys */--gpSystemLightestGrey: #DCDEDF;--gpSystemLighterGrey: #B8BCBF;--gpSystemLightGrey: #8B929A;--gpSystemGrey: #67707B;--gpSystemDarkGrey: #3D4450;--gpSystemDarkerGrey: #23262E;--gpSystemDarkestGrey:
2024-05-15 22:36:51 UTC	15823	IN	Data Raw: 77 6e 5f 69 6e 64 69 63 61 74 6f 72 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 70 6f 70 75 70 73 2f 62 74 6e 5f 61 72 72 6f 77 5f 64 6f 77 6e 2e 70 6e 67 27 20 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 09 77 69 64 74 68 3a 20 39 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 23 61 64 6d 69 6e 5f 64 72 6f 70 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 20 20 Data Ascii: wn_indicator {display: inline-block;background-image: url( 'https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down.png' );vertical-align: middle;width: 9px;height: 4px;}#admin_drop { border-radius: 2px;
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 41 41 41 41 41 51 43 41 59 41 41 41 41 66 38 2f 39 68 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 79 42 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 7a 6c 6b 49 6a 38 2b 49 44 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d Data Ascii: image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyBpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYm
2024-05-15 22:36:51 UTC	955	IN	Data Raw: 69 66 69 63 61 74 69 6f 6e 5f 69 63 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 33 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 67 69 66 74 73 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 69 63 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 34 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 6f 66 66 6c 69 6e 65 6d 65 73 73 61 67 65 73 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 69 63 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 36 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 74 68 65 73 65 20 61 72 65 20 73 68 6f 77 6e Data Ascii: ification_icon {background-position: 0 -32px;}.header_notification_gifts .notification_icon {background-position: 0 -48px;}.header_notification_offlinemessages .notification_icon {background-position: 0 -64px;}/* these are shown
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 68 65 6c 70 72 65 71 75 65 73 74 72 65 70 6c 79 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 69 63 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 68 65 61 64 65 72 2f 69 6e 62 6f 78 5f 6d 6f 64 65 72 61 74 6f 72 5f 6d 65 73 73 61 67 65 2e 70 6e 67 27 20 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 5f 70 61 72 65 6e 74 61 6c 5f 62 74 6e 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 31 32 70 78 3b 0d 0a 09 77 69 64 74 68 3a 20 32 33 70 78 3b 0d 0a 09 62 61 63 Data Ascii: 00004000er_notification_helprequestreply .notification_icon {background-image: url( 'https://store.akamai.steamstatic.com/public/shared/images/header/inbox_moderator_message.png' );}.header_parental_btn {padding: 0 12px;width: 23px;bac
2024-05-15 22:36:51 UTC	12	IN	Data Raw: 41 41 41 47 58 52 46 57 48 52 0d 0a Data Ascii: AAAGXRFWHR
2024-05-15 22:36:51 UTC	11250	IN	Data Raw: 30 30 30 30 32 42 45 36 0d 0a 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 79 4a 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 7a 6c 6b 49 6a 38 2b 49 44 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 77 64 47 73 39 49 6b 46 6b 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4d 79 31 6a 4d 44 45 78 49 44 59 32 Data Ascii: 00002BE6Tb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyJpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2
2024-05-15 22:36:51 UTC	10026	IN	Data Raw: 30 30 30 30 32 37 31 45 0d 0a 30 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 34 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 65 6e 74 5f 64 65 73 63 72 69 70 74 6f 72 73 5f 65 78 61 6d 70 6c 65 5f 61 70 70 20 2e 61 70 70 5f 6e 61 6d 65 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 68 61 72 65 64 5f 67 61 6d 65 5f 72 61 74 69 6e 67 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 63 36 64 34 64 66 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 7d 0d 0a 2e 73 68 61 72 65 64 5f 67 61 6d 65 5f 72 61 74 69 6e 67 20 2e 67 61 6d 65 5f 72 61 74 69 6e 67 5f 61 67 65 6e 63 79 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 68 61 72 65 64 5f 67 61 6d 65 5f 72 61 74 Data Ascii: 0000271E0px;height: 45px;}.content_descriptors_example_app .app_name {margin-left: 20px;}.shared_game_rating {color: #c6d4df;font-size: 12px;}.shared_game_rating .game_rating_agency {margin-top: 8px;}.shared_game_rat
2024-05-15 22:36:51 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49828	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:51 UTC	591	OUT	GET /public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:51 UTC	345	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "CrrkDubPqLcq" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14257245 Expires: Sun, 27 Oct 2024 22:57:36 GMT Date: Wed, 15 May 2024 22:36:51 GMT Content-Length: 33738 Connection: close
2024-05-15 22:36:51 UTC	16039	IN	Data Raw: 2e 62 74 6e 5f 67 72 65 65 6e 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 44 32 45 38 38 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 61 34 64 30 30 37 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 Data Ascii: .btn_green_white_innerfade {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decoration: none !important;color: #D2E885 !important;background: #a4d007;background: -webkit-linear-grad
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 3b 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 09 7d 0d 0a 0d 0a 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 3a 6e 6f Data Ascii: #fff !important;background: transparent;}.btnv6_white_transparent > span {border-radius: 2px;display: block;background: transparent;border: 1px solid rgba(255,255,255,0.4);border-radius: 2px;}.btnv6_white_transparent:no
2024-05-15 22:36:51 UTC	1315	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 20 2d 33 30 34 70 78 20 2d 31 36 70 78 3b 09 09 7d 0d 0a 09 09 0d 0a 2f 2a 20 41 72 72 6f 77 73 20 61 72 65 20 74 68 65 20 6f 6e 6c 79 20 69 63 6f 6e 73 20 49 27 76 65 20 6e 6f 74 20 66 75 6c 6c 79 20 72 65 70 6c 61 63 65 64 20 79 65 74 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 73 65 20 74 68 65 6d 2c 20 70 6c 65 61 73 65 20 63 6f 6e 76 65 72 74 20 74 6f 20 74 68 65 20 6e 65 77 20 69 63 6f 6e 20 63 6f 64 65 20 2a 2f 0d 0a 0d 0a 2e 62 74 6e 5f 64 65 74 61 69 6c 73 5f 61 72 72 6f 77 0d 0a 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 77 69 64 74 68 3a 20 31 35 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 Data Ascii: osition: -304px -16px;}/* Arrows are the only icons I've not fully replaced yet. If you need to use them, please convert to the new icon code */.btn_details_arrow{display: inline-block;width: 15px;height: 16px;background-image:ur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49829	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:51 UTC	585	OUT	GET /public/css/v6/store.css?v=5iodj17TwVxP&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:51 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "7b2ei1laGOqu" Last-Modified: Mon, 13 Apr 1970 23:10:43 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Wed, 15 May 2024 22:36:51 GMT Date: Wed, 15 May 2024 22:36:51 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:36:51 UTC	15992	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 2a 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 69 6d 67 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 61 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2e 61 3a 66 6f 63 75 73 20 7b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 70 78 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 61 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 63 30 66 34 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 6e 6f 68 6f 76 65 72 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 Data Ascii: 0000C000* {padding: 0;margin: 0;}img {border: none;}a {text-decoration: none;color: #ffffff;}.a:focus {outline: 0px none;}a:hover {text-decoration: none; color: #66c0f4;}a.nohover:hover {t
2024-05-15 22:36:51 UTC	15849	IN	Data Raw: 2d 72 6f 77 73 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 67 20 69 6d 67 20 6e 61 6d 65 20 6e 61 6d 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 67 20 69 6d 67 20 70 72 69 63 65 20 70 72 69 63 65 22 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 7d 0d 0a 2e 70 6f 70 75 70 5f 62 6f 64 79 2e 73 65 61 72 63 68 5f 76 32 20 2e 6d 61 74 63 68 2e 6d 61 74 63 68 5f 76 32 20 2e 6d 61 74 63 68 5f 6e 61 6d 65 20 7b 0d 0a 20 20 20 20 67 72 69 64 2d 61 72 65 61 3a 20 6e 61 6d 65 3b 0d 0a 20 20 Data Ascii: -rows: auto; grid-template-areas: "img img name name" "img img price price"; height: unset; transition: background 0.2s ease-in-out;}.popup_body.search_v2 .match.match_v2 .match_name { grid-area: name;
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 73 74 6f 72 65 5f 63 61 70 73 75 6c 65 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 68 6f 6d 65 5f 6d 61 72 6b 65 74 69 6e 67 5f 6d 65 73 73 61 67 65 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 73 74 6f 72 65 5f 63 61 70 73 75 6c 65 2e 62 72 6f 61 64 63 61 73 74 5f 63 61 70 73 75 6c 65 3a 68 6f 76 65 72 20 63 20 7b 0d 0a 09 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 61 6e 69 6d 61 74 65 50 72 69 63 65 31 31 64 65 67 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6d 61 6c 6c 5f 63 61 70 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f Data Ascii: over .additional_cart_discount,.store_capsule:hover .additional_cart_discount,.home_marketing_message:hover .additional_cart_discount,.store_capsule.broadcast_capsule:hover c {animation-name: animatePrice11deg;}.small_cap:hover .additional_
2024-05-15 22:36:51 UTC	939	IN	Data Raw: 0a 09 7b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 30 64 65 67 29 20 73 63 61 6c 65 28 2e 33 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 32 30 25 0d 0a 09 7b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 33 36 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 34 30 25 0d 0a 09 7b 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 30 64 65 67 29 20 73 63 61 6c 65 28 2e 33 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 31 30 30 25 0d 0a 09 7b 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 Data Ascii: {opacity: 0;transform: rotateZ(0deg) scale(.3);}20%{opacity: 1;transform: rotateZ(360deg) scale(1);}40%{ opacity: 0;transform: rotateZ(720deg) scale(.3);}100%{ opacity: 0;transform: rotateZ(72
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 59 65 6c 6c 6f 77 74 61 69 6c 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 38 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 46 42 46 36 46 30 3b 0d 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 32 70 78 20 33 70 78 20 30 70 78 20 23 44 33 35 31 31 30 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 75 6d 6d 65 72 73 61 6c 65 32 30 32 30 5f 73 75 70 65 72 73 61 76 69 6e 67 73 5f 6c 61 62 65 6c 0d 0a 7b 0d 0a 09 77 69 64 74 68 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 Data Ascii: 00004000font-family: "Yellowtail", sans-serif;font-style: normal;font-weight: normal;font-size: 38px;color: #FBF6F0;text-shadow: 2px 3px 0px #D35110;text-align: center;}.summersale2020_supersavings_label{width: fit-content
2024-05-15 22:36:51 UTC	12	IN	Data Raw: 64 28 31 29 20 7b 20 61 6e 69 0d 0a Data Ascii: d(1) { ani
2024-05-15 22:36:51 UTC	7553	IN	Data Raw: 30 30 30 30 31 44 37 35 0d 0a 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 73 20 7d 0d 0a 2e 68 6f 76 65 72 5f 73 63 72 65 65 6e 73 68 6f 74 73 20 2e 73 63 72 65 65 6e 73 68 6f 74 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 7b 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 73 20 7d 0d 0a 2e 68 6f 76 65 72 5f 73 63 72 65 65 6e 73 68 6f 74 73 20 2e 73 63 72 65 65 6e 73 68 6f 74 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 20 7b 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 32 73 20 7d 0d 0a 2e 68 6f 76 65 72 5f 73 63 72 65 65 6e 73 68 6f 74 73 20 2e 73 63 72 65 65 6e 73 68 6f 74 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 20 7b 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 33 73 20 7d 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 72 65 65 Data Ascii: 00001D75mation-delay: 0s }.hover_screenshots .screenshot:nth-child(2) { animation-delay: 1s }.hover_screenshots .screenshot:nth-child(3) { animation-delay: 2s }.hover_screenshots .screenshot:nth-child(4) { animation-delay: 3s }@keyframes scree
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 20 20 2f 2a 20 43 68 72 6f 6d 65 20 61 6c 6c 20 2f 20 53 61 66 61 72 69 20 61 6c 6c 20 2a 2f 0d 0a 09 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 20 20 20 20 20 2f 2a 20 46 69 72 65 66 6f 78 20 61 6c 6c 20 2a 2f 0d 0a 09 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 20 20 20 20 20 20 2f 2a 20 49 45 20 31 30 2b 20 2a 2f 0d 0a 09 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 71 5f 69 74 65 6d 20 2e 64 71 5f 69 74 65 6d 5f 63 61 70 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f Data Ascii: 00004000-webkit-user-select: none; /* Chrome all / Safari all /-moz-user-select: none; / Firefox all /-ms-user-select: none; / IE 10+ */user-select: none;}.dq_item .dq_item_cap {width: 100%;height: auto;display: blo
2024-05-15 22:36:51 UTC	12	IN	Data Raw: 6f 78 2d 73 68 61 64 6f 77 3a 0d 0a Data Ascii: ox-shadow:
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 30 20 30 20 36 70 78 20 30 20 23 30 30 30 30 30 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 69 6e 5f 63 6c 75 73 74 65 72 5f 63 6f 6e 74 65 6e 74 20 2e 63 6c 75 73 74 65 72 5f 6d 61 69 6e 63 61 70 5f 66 69 6c 6c 20 7b 0d 0a 09 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 69 6e 5f 63 6c 75 73 74 65 72 5f 63 6f 6e 74 65 6e 74 20 69 6d 67 2e 63 6c 75 73 74 65 72 5f 6d 61 69 6e 63 61 70 5f 66 69 6c 6c 5f 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f Data Ascii: 00004000 0 0 6px 0 #000000;}.main_cluster_content .cluster_maincap_fill {width: auto;display: block;position: relative;overflow: hidden;}.main_cluster_content img.cluster_maincap_fill_placeholder {width: 100%;height: auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49826	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:51 UTC	584	OUT	GET /public/css/v6/home.css?v=94M63Gcmmzh0&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:51 UTC	382	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "94M63Gcmmzh0" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14255736 Expires: Sun, 27 Oct 2024 22:32:27 GMT Date: Wed, 15 May 2024 22:36:51 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:36:51 UTC	16002	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 0d 0a 2e 68 6f 6d 65 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 77 69 64 74 68 3a 20 39 34 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 6f 6d 65 5f 70 61 67 65 5f 62 6f 64 79 5f 63 74 6e 20 7b 0d 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 39 37 32 70 78 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 2e 70 61 67 65 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 68 6f 6c 64 65 72 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 72 69 67 68 Data Ascii: 0000C000.home_page_content {position: relative;width: 940px;margin: 0 auto;}.home_page_body_ctn {min-width: 972px;position: relative;overflow: hidden;}.page_background_holder {position: absolute;top: 0;righ
2024-05-15 22:36:51 UTC	15840	IN	Data Raw: 3a 20 34 70 78 3b 0d 0a 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 6f 6d 65 5f 62 74 6e 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 36 37 63 31 66 35 3b 20 2f 2a 20 4f 6c 64 20 62 72 6f 77 73 65 72 73 20 2a 2f 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 2d 36 30 64 65 67 2c 20 20 23 36 37 63 31 66 35 20 30 25 2c 20 23 34 31 37 61 39 62 20 31 30 30 25 29 3b 20 2f 2a 20 46 46 33 2e 36 2b 20 2a 2f 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 Data Ascii: : 4px;cursor: pointer;}.home_btn:hover { color: #ffffff; background: #67c1f5; /* Old browsers / background: -moz-linear-gradient(-60deg, #67c1f5 0%, #417a9b 100%); / FF3.6+ */ background: -webkit-gradient(linear, left top
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 68 6f 6d 65 5f 63 6f 6e 74 65 6e 74 20 2e 64 73 5f 66 6c 61 67 67 65 64 3a 6e 6f 74 28 2e 64 73 5f 77 69 73 68 6c 69 73 74 29 20 69 6d 67 20 7b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 33 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 54 77 6f 20 77 69 64 65 20 6d 61 69 6e 20 63 61 70 20 2a 2f 0d 0a 2e 68 6f 6d 65 5f 63 6f 6e 74 65 6e 74 2e 74 77 6f 77 69 64 65 20 61 2e 68 6f 6d 65 5f 63 6f 6e 74 65 6e 74 5f 69 74 65 6d 20 7b 0d 0a 09 77 69 64 74 68 3a 20 34 36 30 70 78 3b 0d 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 30 70 78 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 6f 6d 65 5f 63 6f 6e 74 65 6e 74 5f 69 74 65 6d 73 20 61 2e 68 6f 6d 65 5f 63 6f 6e 74 65 6e 74 Data Ascii: home_content .ds_flagged:not(.ds_wishlist) img {opacity: 0.3;}/* Two wide main cap */.home_content.twowide a.home_content_item {width: 460px;float: left;margin-right: 20px;position: relative;}.home_content_items a.home_content
2024-05-15 22:36:51 UTC	938	IN	Data Raw: 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 3b 0d 0a 09 7d 0d 0a 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 2e 74 61 62 6c 65 74 20 2e 75 6e 64 65 72 74 65 6e 20 2e 68 6f 6d 65 5f 73 70 65 63 69 61 6c 73 5f 67 72 69 64 20 2e 73 70 65 63 69 61 6c 20 7b 0d 0a 09 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 70 78 3b 0d 0a 09 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2f 2a 20 6e 6f 74 20 6c 6f 67 67 65 64 20 69 6e 20 2a 2f 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 2e 74 61 62 6c 65 74 20 2e 68 6f 6d 65 5f 72 65 63 6f 6d 6d 65 6e 64 65 64 5f 73 70 6f 74 6c 69 67 68 74 20 7b 0d 0a 09 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 7d 0d 0a 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f Data Ascii: margin-bottom: 16px;}html.responsive.tablet .underten .home_specials_grid .special {margin-right: 2px;margin-bottom: 0;}/* not logged in */html.responsive.tablet .home_recommended_spotlight {height: auto;}html.respo
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 68 6f 6d 65 5f 63 6f 6e 74 65 6e 74 5f 69 74 65 6d 3a 6e 74 68 2d 63 68 69 6c 64 28 20 32 6e 20 29 2c 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 2e 74 61 62 6c 65 74 20 2e 68 6f 6d 65 5f 63 6f 6e 74 65 6e 74 2e 74 77 6f 77 69 64 65 20 61 2e 68 6f 6d 65 5f 63 6f 6e 74 65 6e 74 5f 69 74 65 6d 3a 6e 74 68 2d 63 68 69 6c 64 28 20 32 6e 20 29 20 7b 0d 0a 09 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0d 0a 09 7d 0d 0a 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 2e 74 61 62 6c 65 74 20 2e 68 6f 6d 65 5f 63 6f 6e 74 65 6e 74 2e 73 69 6e 67 6c 65 20 7b 0d 0a 09 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 30 70 78 3b 0d 0a 09 7d 0d 0a 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 2e 74 61 62 6c 65 74 Data Ascii: 00004000home_content_item:nth-child( 2n ),html.responsive.tablet .home_content.twowide a.home_content_item:nth-child( 2n ) {margin-right: 0;}html.responsive.tablet .home_content.single {margin-top: 50px;}html.responsive.tablet
2024-05-15 22:36:51 UTC	12	IN	Data Raw: 0a 09 09 66 6f 6e 74 2d 66 61 0d 0a Data Ascii: font-fa
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 2f 2a 20 6e 6f 72 6d 61 6c 20 2a 2f 0d 0a 0d 0a 09 09 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 2e 73 74 65 61 6d 5f 63 75 72 61 74 6f 72 5f 64 65 73 63 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 2f 2a 20 6e 6f 72 6d 61 6c 20 2a 2f 0d 0a 0d 0a 09 09 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0d 0a 09 Data Ascii: 00004000mily: "Motiva Sans", Sans-serif;font-weight: normal; /* normal /color: #ffffff;}.steam_curator_desc {font-size: 13px;font-family: "Motiva Sans", Sans-serif;font-weight: normal; / normal */font-style: italic;
2024-05-15 22:36:51 UTC	12	IN	Data Raw: 0a 2e 64 69 73 63 6f 76 65 72 0d 0a Data Ascii: .discover
2024-05-15 22:36:51 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 79 5f 71 75 65 75 65 5f 63 74 6e 20 2e 62 65 67 69 6e 5f 65 78 70 6c 6f 72 69 6e 67 20 7b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 23 65 38 66 35 66 63 20 35 25 2c 20 23 63 63 65 39 66 39 20 39 35 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 65 38 66 35 66 63 20 35 25 2c 20 23 63 63 65 39 66 39 20 39 35 25 29 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 35 30 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 31 35 70 78 3b 0d 0a 09 77 69 64 74 68 3a 20 38 30 25 3b 0d 0a 09 63 6f 6c 6f Data Ascii: 00004000y_queue_ctn .begin_exploring {background: -webkit-linear-gradient( top, #e8f5fc 5%, #cce9f9 95%);background: linear-gradient( to bottom, #e8f5fc 5%, #cce9f9 95%);line-height: 50px;font-size: 18px;padding: 0 15px;width: 80%;colo
2024-05-15 22:36:51 UTC	12	IN	Data Raw: 7d 0d 0a 0d 0a 2e 74 61 62 5f 0d 0a Data Ascii: }.tab_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49830	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:51 UTC	591	OUT	GET /public/css/v6/creator_hub.css?v=e6oxFOI4knLo&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:51 UTC	339	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "e6oxFOI4knLo" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=13578432 Expires: Sun, 20 Oct 2024 02:24:03 GMT Date: Wed, 15 May 2024 22:36:51 GMT Content-Length: 2375 Connection: close
2024-05-15 22:36:51 UTC	2375	IN	Data Raw: 0d 0a 2f 2a 20 52 65 63 6f 6d 6d 65 6e 64 65 64 20 63 72 65 61 74 6f 72 73 20 77 69 64 67 65 74 20 2a 2f 0d 0a 20 2e 72 65 63 6f 6d 6d 65 6e 64 65 64 5f 63 72 65 61 74 6f 72 73 5f 63 74 6e 20 2e 68 6f 6d 65 5f 73 6d 61 6c 6c 63 61 70 73 20 61 2e 68 6f 6d 65 5f 73 6d 61 6c 6c 63 61 70 20 2e 72 65 63 6f 6d 6d 65 6e 64 65 64 5f 63 72 65 61 74 6f 72 73 5f 63 6f 6e 74 61 69 6e 65 72 20 69 6d 67 20 7b 0d 0a 09 20 77 69 64 74 68 3a 20 33 32 70 78 3b 0d 0a 09 20 68 65 69 67 68 74 3a 20 33 32 70 78 3b 0d 0a 20 7d 0d 0a 0d 0a 2e 72 65 63 6f 6d 6d 65 6e 64 65 64 5f 63 72 65 61 74 6f 72 73 5f 63 74 6e 20 2e 68 6f 6d 65 5f 73 6d 61 6c 6c 63 61 70 73 20 61 2e 68 6f 6d 65 5f 73 6d 61 6c 6c 63 61 70 20 7b 0d 0a 09 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0d 0a 09 64 69 73 70 Data Ascii: /* Recommended creators widget */ .recommended_creators_ctn .home_smallcaps a.home_smallcap .recommended_creators_container img { width: 32px; height: 32px; }.recommended_creators_ctn .home_smallcaps a.home_smallcap {float: none;disp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49832	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:51 UTC	601	OUT	GET /public/shared/css/shared_responsive.css?v=e-GD37z7aOe7&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:52 UTC	345	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "e-GD37z7aOe7" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=13654530 Expires: Sun, 20 Oct 2024 23:32:22 GMT Date: Wed, 15 May 2024 22:36:52 GMT Content-Length: 19092 Connection: close
2024-05-15 22:36:52 UTC	16039	IN	Data Raw: 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6d 6f 76 65 73 63 72 6f 6c 6c 74 6f 63 6f 6e 74 65 6e 74 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 72 69 67 68 74 3a 20 30 3b 0d 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 2c 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f Data Ascii: .responsive_page_frame {position: relative;}body.movescrolltocontent .responsive_page_frame {position: fixed;top: 0;right: 0;bottom: 0;left: 0;overflow: auto;}body.overflow_hidden,body.overflow_hidden .responsive_page_
2024-05-15 22:36:52 UTC	3053	IN	Data Raw: 74 6f 20 74 68 65 20 6d 6f 62 69 6c 65 20 73 69 74 65 2e 20 20 54 68 69 73 20 69 73 20 62 75 74 74 6f 6e 20 72 65 70 73 6f 6e 64 73 20 74 6f 20 64 65 76 69 63 65 20 77 69 64 74 68 0d 0a 09 73 6f 20 74 68 61 74 20 69 74 27 73 20 62 69 67 67 65 72 20 6f 6e 20 73 6d 61 6c 6c 65 72 20 73 63 72 65 65 6e 73 20 61 6e 64 20 65 61 73 69 65 72 20 74 6f 20 74 61 70 20 77 68 65 6e 20 7a 6f 6f 6d 65 64 20 6f 75 74 20 2a 2f 0d 0a 0d 0a 68 74 6d 6c 2e 66 6f 72 63 65 5f 64 65 73 6b 74 6f 70 20 62 6f 64 79 20 23 66 6f 6f 74 65 72 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 Data Ascii: to the mobile site. This is button repsonds to device widthso that it's bigger on smaller screens and easier to tap when zoomed out */html.force_desktop body #footer .responsive_optin_link {display: block;text-align: center;padding: 20px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49833	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:51 UTC	583	OUT	GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:52 UTC	390	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".TZ2NKhB-nliU" Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=13288946 Expires: Wed, 16 Oct 2024 17:59:18 GMT Date: Wed, 15 May 2024 22:36:52 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:36:52 UTC	15994	IN	Data Raw: 30 30 30 30 42 31 43 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 Data Ascii: 0000B1C1/! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.ge
2024-05-15 22:36:52 UTC	15824	IN	Data Raw: 61 3d 75 3d 3d 3d 74 26 26 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 69 29 2c 66 26 26 28 61 3f 28 61 3d 6e 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 76 28 65 29 2c 6e 29 7d 29 3a 28 6e 2e 63 61 6c 6c 28 65 2c 69 29 2c 6e 3d 6e 75 6c 6c 29 29 3b 69 66 28 6e 29 66 6f 72 28 3b 6c 3c 63 3b 6c 2b 2b 29 6e 28 65 5b 6c 5d 2c 72 2c 61 3f 69 2e 63 61 6c 6c 28 65 5b 6c 5d 2c 6c 2c 6e 28 65 5b 6c 5d 2c 72 29 29 3a 69 2c 75 29 3b 73 3d 31 7d 72 65 74 75 72 6e 20 73 3f 65 3a 66 3f 6e 2e 63 61 6c 6c 28 65 29 3a 63 3f 6e 28 65 5b 30 5d 2c 72 29 3a 6f 7d 2c 6e 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 29 2c 76 2e 72 65 61 64 79 2e 70 Data Ascii: a=u===t&&v.isFunction(i),f&&(a?(a=n,n=function(e,t,n){return a.call(v(e),n)}):(n.call(e,i),n=null));if(n)for(;l<c;l++)n(e[l],r,a?i.call(e[l],l,n(e[l],r)):i,u);s=1}return s?e:f?n.call(e):c?n(e[0],r):o},now:function(){return(new Date).getTime()}}),v.ready.p
2024-05-15 22:36:52 UTC	13699	IN	Data Raw: 65 56 61 6c 75 65 21 3d 3d 21 31 3f 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 21 31 3f 76 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 6e 29 3a 28 72 3d 76 2e 70 72 6f 70 46 69 78 5b 6e 5d 7c 7c 6e 2c 72 20 69 6e 20 65 26 26 28 65 5b 72 5d 3d 21 30 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 2c 6e 7d 7d 2c 56 7c 7c 28 49 3d 7b 6e 61 6d 65 3a 21 30 2c 69 64 3a 21 30 2c 63 6f 6f 72 64 73 3a 21 30 7d 2c 6a 3d 76 2e 76 61 6c 48 6f 6f 6b 73 2e 62 75 74 74 6f 6e 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 72 3d 65 2e 67 65 Data Ascii: eValue!==!1?n.toLowerCase():t},set:function(e,t,n){var r;return t===!1?v.removeAttr(e,n):(r=v.propFix[n]\|\|n,r in e&&(e[r]=!0),e.setAttribute(n,n.toLowerCase())),n}},V\|\|(I={name:!0,id:!0,coords:!0},j=v.valHooks.button={get:function(e,n){var r;return r=e.ge
2024-05-15 22:36:52 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 26 26 21 72 29 69 66 28 69 3d 52 2e 65 78 65 63 28 65 29 29 69 66 28 66 3d 69 5b 31 5d 29 7b 69 66 28 6c 3d 3d 3d 39 29 7b 73 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 3b 69 66 28 21 73 7c 7c 21 73 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 20 69 66 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 28 73 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 75 28 74 2c 73 29 26 26 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 69 5b 32 5d 29 72 65 74 75 72 6e 20 53 Data Ascii: 00004000&&!r)if(i=R.exec(e))if(f=i[1]){if(l===9){s=t.getElementById(f);if(!s\|\|!s.parentNode)return n;if(s.id===f)return n.push(s),n}else if(t.ownerDocument&&(s=t.ownerDocument.getElementById(f))&&u(t,s)&&s.id===f)return n.push(s),n}else{if(i[2])return S
2024-05-15 22:36:52 UTC	12	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 0d 0a Data Ascii: n(e){var t
2024-05-15 22:36:52 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 6e 3d 76 28 65 2c 74 68 69 73 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 76 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 30 7d 29 7d 2c 6e 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 31 29 2c 22 6e 6f 74 22 2c 65 29 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 30 29 2c 22 66 69 6c 74 65 72 22 2c 65 29 7d 2c 69 73 3a 66 75 6e 63 74 Data Ascii: 00004000,n=v(e,this),r=n.length;return this.filter(function(){for(t=0;t<r;t++)if(v.contains(this,n[t]))return!0})},not:function(e){return this.pushStack(ft(this,e,!1),"not",e)},filter:function(e){return this.pushStack(ft(this,e,!0),"filter",e)},is:funct
2024-05-15 22:36:52 UTC	12	IN	Data Raw: 2c 76 61 6c 75 65 3a 6e 2e 72 0d 0a Data Ascii: ,value:n.r
2024-05-15 22:36:52 UTC	13508	IN	Data Raw: 30 30 30 30 33 34 42 38 0d 0a 65 70 6c 61 63 65 28 6f 6e 2c 22 5c 72 5c 6e 22 29 7d 7d 29 2e 67 65 74 28 29 7d 7d 29 2c 76 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 5b 5d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 3f 74 28 29 3a 74 3d 3d 6e 75 6c 6c 3f 22 22 3a 74 2c 69 5b 69 2e 6c 65 6e 67 74 68 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 3b 6e 3d 3d 3d 74 26 26 28 6e 3d 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 26 26 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 29 3b 69 66 28 76 2e 69 73 41 72 72 61 79 28 65 29 7c Data Ascii: 000034B8eplace(on,"\r\n")}}).get()}}),v.param=function(e,n){var r,i=[],s=function(e,t){t=v.isFunction(t)?t():t==null?"":t,i[i.length]=encodeURIComponent(e)+"="+encodeURIComponent(t)};n===t&&(n=v.ajaxSettings&&v.ajaxSettings.traditional);if(v.isArray(e)\|
2024-05-15 22:36:52 UTC	1880	IN	Data Raw: 30 30 30 30 30 37 34 43 0d 0a 63 73 73 28 65 2c 22 74 6f 70 22 29 2c 75 3d 76 2e 63 73 73 28 65 2c 22 6c 65 66 74 22 29 2c 61 3d 28 72 3d 3d 3d 22 61 62 73 6f 6c 75 74 65 22 7c 7c 72 3d 3d 3d 22 66 69 78 65 64 22 29 26 26 76 2e 69 6e 41 72 72 61 79 28 22 61 75 74 6f 22 2c 5b 6f 2c 75 5d 29 3e 2d 31 2c 66 3d 7b 7d 2c 6c 3d 7b 7d 2c 63 2c 68 3b 61 3f 28 6c 3d 69 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 63 3d 6c 2e 74 6f 70 2c 68 3d 6c 2e 6c 65 66 74 29 3a 28 63 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 29 7c 7c 30 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 75 29 7c 7c 30 29 2c 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 26 26 28 74 3d 74 2e 63 61 6c 6c 28 65 2c 6e 2c 73 29 29 2c 74 2e 74 6f 70 21 3d 6e 75 6c 6c 26 26 28 66 2e 74 6f 70 3d 74 2e 74 6f 70 2d 73 2e 74 Data Ascii: 0000074Ccss(e,"top"),u=v.css(e,"left"),a=(r==="absolute"\|\|r==="fixed")&&v.inArray("auto",[o,u])>-1,f={},l={},c,h;a?(l=i.position(),c=l.top,h=l.left):(c=parseFloat(o)\|\|0,h=parseFloat(u)\|\|0),v.isFunction(t)&&(t=t.call(e,n,s)),t.top!=null&&(f.top=t.top-s.t
2024-05-15 22:36:52 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49836	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:52 UTC	574	OUT	GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:52 UTC	353	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".zYHOpI1L3Rt0" Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14048027 Expires: Fri, 25 Oct 2024 12:50:39 GMT Date: Wed, 15 May 2024 22:36:52 GMT Content-Length: 16087 Connection: close
2024-05-15 22:36:52 UTC	16031	IN	Data Raw: 2f 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 54 68 69 73 20 70 6c 75 67 69 6e 20 77 69 6c 6c 20 63 72 65 61 74 65 20 64 69 76 2e 6a 73 54 6f 6f 6c 74 69 70 20 65 6c 65 6d 65 6e 74 73 20 28 6f 72 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6f 77 6e 21 29 20 69 6e 20 62 6f 64 79 20 66 6f 72 20 65 76 65 72 79 20 74 6f 6f 6c 74 69 70 20 6f 6e 20 74 68 65 20 70 61 67 65 2e 20 53 6f 6d 65 0d 0a 20 2a 20 62 61 73 69 63 20 43 53 53 20 69 73 20 61 70 70 6c 69 65 64 20 61 75 74 6f 6d 61 67 69 63 61 6c 6c 79 2c 20 62 75 74 20 79 6f 75 27 6c 6c 20 77 61 6e 74 20 74 6f 20 73 74 79 6c 65 20 69 74 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 66 72 6f 6d 20 74 68 65 72 65 2e 20 54 68 69 73 20 63 6f 64 65 20 77 69 6c 6c 20 62 65 20 61 70 Data Ascii: /* Requires jQuery * * This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be ap
2024-05-15 22:36:52 UTC	56	IN	Data Raw: 20 6a 51 75 65 72 79 2e 74 6f 6f 6c 74 69 70 27 20 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 7d 3b 0d 0a 0d 0a 0d 0a 7d 29 28 20 6a 51 75 65 72 79 20 29 3b 0d 0a 0d 0a 0d 0a Data Ascii: jQuery.tooltip' );}};})( jQuery );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49834	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:52 UTC	589	OUT	GET /public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:52 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "REEGJU1hwkYl" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14255764 Expires: Sun, 27 Oct 2024 22:32:56 GMT Date: Wed, 15 May 2024 22:36:52 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:36:52 UTC	15995	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 53 74 65 61 6d 20 3d 20 7b 0d 0a 09 73 6d 5f 62 49 6e 69 74 69 61 6c 69 7a 65 64 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 43 6c 69 65 6e 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 47 61 6d 65 4f 76 65 72 6c 61 79 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 54 65 6e 66 6f 6f 74 42 72 6f 77 73 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 43 68 61 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 41 70 70 3a 20 66 61 6c 73 65 2c 0d 0a 0d 0a 09 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 Data Ascii: 0000C000Steam = {sm_bInitialized: false,sm_bUserInClient: false,sm_bUserInGameOverlay: false,sm_bUserInTenfootBrowser: false,sm_bUserInMobileChat: false,sm_bUserInMobileApp: false,BIsUserInSteamClient: function(){if ( !St
2024-05-15 22:36:52 UTC	15821	IN	Data Raw: 6f 6e 20 3d 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6e 65 77 6d 6f 64 61 6c 5f 63 6c 6f 73 65 27 2c 20 27 64 61 74 61 2d 70 61 6e 65 6c 27 3a 20 27 7b 22 66 6f 63 75 73 61 62 6c 65 22 3a 74 72 75 65 2c 22 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 22 3a 74 72 75 65 7d 27 20 7d 20 29 3b 0d 0a 09 76 61 72 20 24 48 65 61 64 65 72 20 3d 20 28 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6e 65 77 6d 6f 64 61 6c 5f 68 65 61 64 65 72 27 20 7d 29 20 29 3b 0d 0a 09 76 61 72 20 24 54 6f 70 42 61 72 20 3d 20 28 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6d 6f 64 61 6c 5f 74 6f 70 5f 62 61 72 27 20 7d 29 20 29 3b 0d 0a 09 69 66 20 28 20 73 74 72 54 69 74 6c 65 20 29 0d Data Ascii: on = $J('<div/>', {'class': 'newmodal_close', 'data-panel': '{"focusable":true,"clickOnActivate":true}' } );var $Header = ( $J('<div/>', {'class': 'newmodal_header' }) );var $TopBar = ( $J('<div/>', {'class': 'modal_top_bar' }) );if ( strTitle )
2024-05-15 22:36:52 UTC	16384	IN	Data Raw: 7b 5c 72 5c 6e 5c 74 66 6c 65 78 3a 20 38 35 25 3b 5c 72 5c 6e 5c 74 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 5c 72 5c 6e 7d 5c 72 5c 6e 2e 70 6f 70 75 70 54 65 78 74 54 69 74 6c 65 20 7b 5c 72 5c 6e 5c 74 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 5c 72 5c 6e 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 5c 72 5c 6e 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 5c 72 5c 6e 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 36 64 34 64 66 3b 5c 72 5c 6e 7d 5c 72 5c 6e 2e 70 6f 70 75 70 54 65 78 74 54 69 74 6c 65 20 61 20 7b 5c 72 5c 6e 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 5c 72 5c 6e 7d 5c 72 5c 6e 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f 70 6f Data Ascii: {\r\n\tflex: 85%;\r\n\tmargin: auto;\r\n}\r\n.popupTextTitle {\r\n\tpadding-bottom: 10px;\r\n font-size: 13px;\r\n line-height: 17px;\r\n color: #c6d4df;\r\n}\r\n.popupTextTitle a {\r\n text-decoration: underline;\r\n}\r\n.cookiepreferences_po
2024-05-15 22:36:52 UTC	964	IN	Data Raw: 66 61 6c 73 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 56 5f 47 65 74 43 6f 6f 6b 69 65 28 20 73 74 72 43 6f 6f 6b 69 65 4e 61 6d 65 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 72 67 4d 61 74 63 68 65 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 20 27 28 5e 7c 3b 20 29 27 20 2b 20 73 74 72 43 6f 6f 6b 69 65 4e 61 6d 65 20 2b 20 27 3d 28 5b 5e 3b 5d 2a 29 27 20 29 3b 0d 0a 09 69 66 20 28 20 72 67 4d 61 74 63 68 65 73 20 26 26 20 72 67 4d 61 74 63 68 65 73 5b 32 5d 20 29 0d 0a 09 09 72 65 74 75 72 6e 20 72 67 4d 61 74 63 68 65 73 5b 32 5d 3b 0d 0a 09 65 6c 73 65 0d 0a 09 09 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 56 5f 47 65 74 44 65 63 6f 64 65 64 43 6f 6f 6b 69 65 Data Ascii: false;}function V_GetCookie( strCookieName ){var rgMatches = document.cookie.match( '(^\|; )' + strCookieName + '=([^;]*)' );if ( rgMatches && rgMatches[2] )return rgMatches[2];elsereturn null;}function V_GetDecodedCookie
2024-05-15 22:36:52 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0d 0a 09 09 74 72 79 20 7b 0d 0a 09 09 09 6f 53 74 6f 72 61 67 65 20 3d 20 56 5f 50 61 72 73 65 4a 53 4f 4e 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 74 72 53 74 6f 72 61 67 65 4a 53 4f 4e 29 29 3b 0d 0a 09 09 7d 0d 0a 09 09 63 61 74 63 68 20 28 65 29 20 7b 0d 0a 09 09 09 6f 53 74 6f 72 61 67 65 20 3d 20 7b 7d 3b 0d 0a 09 09 7d 0d 0a 09 7d 0d 0a 0d 0a 09 72 65 74 75 72 6e 20 6f 53 74 6f 72 61 67 65 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 42 49 6e 73 69 64 65 49 46 72 61 6d 65 28 29 0d 0a 7b 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 73 65 6c 66 20 21 3d 3d 20 77 69 6e 64 6f 77 2e 74 6f 70 3b 0d 0a 09 7d 0d 0a 09 63 61 74 63 68 28 20 65 20 29 0d 0a 09 7b Data Ascii: 00004000try {oStorage = V_ParseJSON(decodeURIComponent(strStorageJSON));}catch (e) {oStorage = {};}}return oStorage;}function BInsideIFrame(){try{return window.self !== window.top;}catch( e ){
2024-05-15 22:36:52 UTC	12	IN	Data Raw: 78 20 3d 20 72 67 53 65 61 72 0d 0a Data Ascii: x = rgSear
2024-05-15 22:36:52 UTC	585	IN	Data Raw: 30 30 30 30 30 32 33 44 0d 0a 63 68 44 61 74 61 5b 27 63 6c 61 73 73 5f 70 72 65 66 69 78 27 5d 3b 0d 0a 0d 0a 09 2f 2f 20 57 65 20 77 61 6e 74 20 6f 75 72 20 68 61 6e 64 6c 65 72 73 20 74 6f 20 67 65 74 20 61 20 63 6f 70 79 20 6f 66 20 6f 75 72 20 69 6e 66 69 6e 69 74 65 53 63 72 6f 6c 6c 20 6f 62 6a 65 63 74 20 77 68 65 6e 20 74 68 65 79 27 72 65 20 63 61 6c 6c 65 64 2c 20 73 6f 20 77 65 20 73 61 76 65 20 69 74 0d 0a 09 2f 2f 20 69 6e 74 6f 20 61 20 76 61 72 20 61 6e 64 20 62 75 69 6c 64 20 61 20 63 6c 6f 73 75 72 65 20 61 72 6f 75 6e 64 20 69 74 2e 0d 0a 09 76 61 72 20 74 68 69 73 43 6f 6e 74 72 6f 6c 20 3d 20 74 68 69 73 3b 0d 0a 0d 0a 09 2f 2f 20 42 79 20 73 61 76 69 6e 67 20 74 68 65 20 62 6f 75 6e 64 20 73 63 72 6f 6c 6c 2d 68 61 6e 64 6c 65 72 20 Data Ascii: 0000023DchData['class_prefix'];// We want our handlers to get a copy of our infiniteScroll object when they're called, so we save it// into a var and build a closure around it.var thisControl = this;// By saving the bound scroll-handler
2024-05-15 22:36:52 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 27 29 2e 6c 65 6e 67 74 68 20 29 0d 0a 09 09 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 62 65 66 6f 72 65 75 6e 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 74 68 69 73 43 6f 6e 74 72 6f 6c 2e 4f 6e 55 6e 6c 6f 61 64 28 29 20 7d 20 29 3b 0d 0a 0d 0a 09 2f 2f 20 4f 70 74 69 6f 6e 61 6c 3a 20 44 79 6e 61 6d 69 63 20 64 61 74 61 20 72 65 74 75 72 6e 65 64 20 66 72 6f 6d 20 74 68 65 20 6c 61 73 74 20 72 65 71 75 65 73 74 2c 20 74 6f 20 70 72 6f 76 69 64 65 64 20 74 6f 20 74 68 65 20 6e 65 78 74 20 72 65 71 75 65 73 74 2e 20 4c 65 74 73 20 74 68 65 6d 0d 0a 09 2f 2f 20 62 65 69 6e 67 20 73 74 72 69 6e 67 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 73 6f 6d 65 20 6d 65 6d 6f 72 Data Ascii: 00004000').length )window.addEventListener('beforeunload', function() { thisControl.OnUnload() } );// Optional: Dynamic data returned from the last request, to provided to the next request. Lets them// being stringed together with some memor
2024-05-15 22:36:52 UTC	12	IN	Data Raw: 6e 67 65 64 48 61 6e 64 6c 65 0d 0a Data Ascii: ngedHandle
2024-05-15 22:36:52 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 72 28 20 74 68 69 73 2e 6d 5f 69 43 75 72 72 65 6e 74 50 61 67 65 20 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 43 41 6a 61 78 50 61 67 69 6e 67 43 6f 6e 74 72 6f 6c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 41 64 64 50 61 67 65 4c 69 6e 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 50 61 67 65 4c 69 6e 6b 73 2c 20 69 50 61 67 65 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 65 6c 20 3d 20 6e 65 77 20 45 6c 65 6d 65 6e 74 28 20 27 73 70 61 6e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 28 20 74 68 69 73 2e 6d 5f 73 74 72 43 6c 61 73 73 50 72 65 66 69 78 20 21 3d 20 22 22 20 3f 20 74 68 69 73 2e 6d 5f 73 74 72 43 6c 61 73 73 50 72 65 66 69 78 20 3a 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 29 20 2b 20 27 5f 70 61 67 69 6e 67 Data Ascii: 00004000r( this.m_iCurrentPage );};CAjaxPagingControls.prototype.AddPageLink = function( elPageLinks, iPage ){var el = new Element( 'span', {'class': ( this.m_strClassPrefix != "" ? this.m_strClassPrefix : this.m_strElementPrefix ) + '_paging

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49835	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:52 UTC	573	OUT	GET /public/javascript/main.js?v=hD1etfEdoGz1&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:52 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "hD1etfEdoGz1" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14255702 Expires: Sun, 27 Oct 2024 22:31:54 GMT Date: Wed, 15 May 2024 22:36:52 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:36:52 UTC	15995	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 6f 74 46 6c 61 73 68 50 6f 70 75 70 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 77 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 67 6f 74 66 6c 61 73 68 27 2c 27 67 6f 74 66 6c 61 73 68 27 2c 27 77 69 64 74 68 3d 35 33 36 2c 68 65 69 67 68 74 3d 35 34 36 2c 72 65 73 69 7a 65 3d 79 65 73 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 27 29 3b 0d 0a 09 77 69 6e 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 0d 0a 2f 2f 20 50 61 67 65 2d 61 62 6c 65 20 74 61 62 73 0d 0a 2f 2f 0d 0a 76 61 72 20 74 61 62 53 74 61 72 74 20 3d 20 7b 20 7d 3b 0d 0a 76 61 72 20 74 61 62 4d 61 78 20 3d 20 7b 20 7d 3b Data Ascii: 0000C000function GotFlashPopup(){var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');win.focus();}//// Page-able tabs//var tabStart = { };var tabMax = { };
2024-05-15 22:36:52 UTC	15837	IN	Data Raw: 74 65 57 69 73 68 6c 69 73 74 43 6f 75 6e 74 28 20 64 61 74 61 2e 77 69 73 68 6c 69 73 74 43 6f 75 6e 74 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 49 6e 76 61 6c 69 64 61 74 65 43 61 63 68 65 28 29 3b 0d 0a 09 09 7d 29 2e 66 61 69 6c 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 64 69 76 54 6f 53 68 6f 77 45 72 72 6f 72 29 2e 73 68 6f 77 28 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 6d 6f 76 65 46 72 6f 6d 57 69 73 68 6c 69 73 74 28 20 61 70 70 69 64 2c 20 64 69 76 54 6f 48 69 64 65 Data Ascii: teWishlistCount( data.wishlistCount );if ( typeof GDynamicStore != 'undefined' )GDynamicStore.InvalidateCache();}).fail( function() {$JFromIDOrElement(divToShowError).show();});}function RemoveFromWishlist( appid, divToHide
2024-05-15 22:36:52 UTC	16384	IN	Data Raw: 54 65 72 6d 54 69 6d 65 72 20 3d 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 67 5f 6e 4d 6f 62 69 6c 65 53 65 61 72 63 68 54 65 72 6d 54 69 6d 65 72 20 3d 20 30 3b 0d 0a 09 09 09 73 4c 61 73 74 56 61 6c 20 3d 20 24 54 65 72 6d 3b 0d 0a 09 09 09 53 65 61 72 63 68 54 69 6d 65 6f 75 74 28 20 24 54 65 72 6d 2c 20 76 5f 74 72 69 6d 28 20 73 4c 61 73 74 56 61 6c 20 29 2c 20 24 53 75 67 67 65 73 74 69 6f 6e 73 43 74 6e 2c 20 24 53 75 67 67 65 73 74 69 6f 6e 73 2c 20 74 72 75 65 20 2f 2a 20 62 55 73 65 52 65 73 70 6f 6e 73 69 76 65 50 6f 70 75 70 4f 76 65 72 6c 61 79 20 2a 2f 20 29 3b 0d 0a 09 09 7d 2c 20 6d 73 44 65 6c 61 79 42 65 66 6f 72 65 54 69 6d 65 6f 75 74 20 29 3b 0d 0a 7d 0d 0a 0d 0a 66 Data Ascii: TermTimer = window.setTimeout( function() {g_nMobileSearchTermTimer = 0;sLastVal = $Term;SearchTimeout( $Term, v_trim( sLastVal ), $SuggestionsCtn, $Suggestions, true /* bUseResponsivePopupOverlay */ );}, msDelayBeforeTimeout );}f
2024-05-15 22:36:52 UTC	948	IN	Data Raw: 09 7d 0d 0a 09 09 09 09 09 09 62 75 74 74 6f 6e 20 3d 20 61 6c 6c 42 75 74 74 6f 6e 73 2e 65 71 28 62 75 74 74 6f 6e 49 6e 64 65 78 29 3b 0d 0a 0d 0a 09 09 09 2f 2f 0d 0a 09 09 09 2f 2f 20 20 49 66 20 77 65 20 61 72 65 20 63 65 72 74 61 69 6e 20 77 65 20 6b 6e 6f 77 20 77 68 61 74 20 62 75 74 74 6f 6e 20 77 61 73 20 63 6c 69 63 6b 65 64 2c 20 74 68 65 6e 20 77 65 27 6c 6c 20 70 72 6f 76 69 64 65 20 69 6e 66 6f 20 6f 6e 20 74 68 65 20 66 6f 72 6d 21 0d 0a 09 09 09 2f 2f 0d 0a 09 09 09 69 66 20 28 20 62 75 74 74 6f 6e 20 21 3d 20 6e 75 6c 6c 20 26 26 20 20 62 75 74 74 6f 6e 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 31 20 26 26 20 74 79 70 65 6f 66 20 62 75 74 74 6f 6e 2e 6f 66 66 73 65 74 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 0d 0a 09 09 09 7b 0d 0a 09 Data Ascii: }button = allButtons.eq(buttonIndex);//// If we are certain we know what button was clicked, then we'll provide info on the form!//if ( button != null && button.length === 1 && typeof button.offset == 'function' ){
2024-05-15 22:36:52 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 74 72 28 20 7b 20 6e 61 6d 65 3a 20 27 78 5f 73 65 6c 65 63 74 69 6f 6e 27 2c 20 27 76 61 6c 75 65 27 20 3a 20 62 75 74 74 6f 6e 49 6e 64 65 78 20 7d 20 29 2e 61 70 70 65 6e 64 54 6f 28 20 24 46 6f 72 6d 20 20 29 3b 0d 0a 09 09 09 09 09 6a 51 75 65 72 79 28 20 27 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 3e 27 20 29 2e 61 74 74 72 28 20 7b 20 6e 61 6d 65 3a 20 27 78 5f 63 68 6f 69 63 65 73 27 2c 20 27 76 61 6c 75 65 27 20 3a 20 61 6c 6c 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 20 7d 20 29 2e 61 70 70 65 6e 64 54 6f 28 20 24 46 6f 72 6d 20 29 3b 0d 0a 09 09 09 09 09 6a 51 75 65 72 79 28 20 27 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 3e 27 20 29 2e 61 74 74 72 28 20 7b 20 6e 61 6d 65 3a Data Ascii: 00004000ttr( { name: 'x_selection', 'value' : buttonIndex } ).appendTo( $Form );jQuery( '<input type="hidden">' ).attr( { name: 'x_choices', 'value' : allButtons.length } ).appendTo( $Form );jQuery( '<input type="hidden">' ).attr( { name:
2024-05-15 22:36:52 UTC	12	IN	Data Raw: 6f 6e 20 53 68 6f 77 47 61 6d 0d 0a Data Ascii: on ShowGam
2024-05-15 22:36:52 UTC	8160	IN	Data Raw: 30 30 30 30 31 46 44 34 0d 0a 65 50 75 72 63 68 61 73 65 44 72 6f 70 64 6f 77 6e 28 20 65 6c 65 6d 4c 69 6e 6b 2c 20 65 6c 65 6d 50 6f 70 75 70 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 4c 69 6e 6b 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 4c 69 6e 6b 29 3b 0d 0a 09 76 61 72 20 24 50 6f 70 75 70 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 50 6f 70 75 70 29 3b 0d 0a 0d 0a 09 76 61 72 20 6e 57 69 64 74 68 20 3d 20 24 4c 69 6e 6b 2e 6f 75 74 65 72 57 69 64 74 68 28 29 3b 0d 0a 09 24 50 6f 70 75 70 2e 63 73 73 28 20 27 6d 69 6e 2d 77 69 64 74 68 27 2c 20 6e 57 69 64 74 68 20 29 3b 0d 0a 0d 0a 09 69 66 20 28 20 77 69 6e 64 6f 77 2e 55 73 65 54 61 62 6c 65 74 53 63 72 65 65 6e 4d 6f 64 65 20 26 26 20 Data Ascii: 00001FD4ePurchaseDropdown( elemLink, elemPopup ){var $Link = $JFromIDOrElement(elemLink);var $Popup = $JFromIDOrElement(elemPopup);var nWidth = $Link.outerWidth();$Popup.css( 'min-width', nWidth );if ( window.UseTabletScreenMode &&
2024-05-15 22:36:52 UTC	15593	IN	Data Raw: 30 30 30 30 33 43 44 44 0d 0a 27 66 6f 63 75 73 27 29 20 29 0d 0a 09 09 09 09 09 09 69 6e 73 74 61 6e 63 65 2e 41 64 76 61 6e 63 65 28 20 69 6e 64 65 78 20 29 3b 0d 0a 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 2f 2f 20 73 74 6f 70 20 69 74 65 72 61 74 69 6e 67 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 29 3b 0d 0a 09 09 7d 0d 0a 09 09 69 6e 73 74 61 6e 63 65 2e 66 6e 4d 6f 75 73 65 4f 76 65 72 28 29 3b 0d 0a 09 7d 29 2e 6f 6e 28 27 66 6f 63 75 73 6f 75 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 69 6e 73 74 61 6e 63 65 2e 66 6e 4d 6f 75 73 65 4f 75 74 28 29 3b 0d 0a 09 7d 29 3b 0d 0a 0d 0a 09 69 66 28 20 74 68 69 73 2e 24 65 6c 54 68 75 6d 62 73 2e 6c 65 6e 67 74 68 20 3c 20 32 20 29 0d 0a 09 7b 0d 0a 09 09 74 68 69 73 2e 24 65 Data Ascii: 00003CDD'focus') )instance.Advance( index );return false; // stop iterating}});}instance.fnMouseOver();}).on('focusout', function() {instance.fnMouseOut();});if( this.$elThumbs.length < 2 ){this.$e
2024-05-15 22:36:52 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49837	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:52 UTC	581	OUT	GET /public/javascript/dynamicstore.js?v=suHYMumkDXRp&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:52 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "suHYMumkDXRp" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=12623363 Expires: Wed, 09 Oct 2024 01:06:15 GMT Date: Wed, 15 May 2024 22:36:52 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:36:52 UTC	15995	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 74 45 6c 65 6d 53 4e 52 28 20 24 45 6c 65 6d 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 73 6e 72 20 3d 20 24 45 6c 65 6d 2e 64 61 74 61 28 20 27 73 6e 72 27 20 29 3b 0d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 73 6e 72 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 73 6e 72 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2f 2f 20 6c 6f 6f 6b 20 66 6f 72 20 6c 69 6e 6b 73 20 77 69 74 68 20 73 6e 72 20 70 61 72 61 6d 65 74 65 72 0d 0a 09 76 61 72 20 6c 69 6e 6b 73 20 3d 20 24 45 6c 65 6d 2e 69 73 28 20 27 61 27 20 29 20 3f 20 24 45 6c 65 6d 20 3a 20 24 45 6c 65 6d 2e 66 69 6e 64 28 20 27 61 27 20 29 3b 0d 0a 09 73 6e 72 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 66 6f 72 20 Data Ascii: 0000C000function GetElemSNR( $Elem ){var snr = $Elem.data( 'snr' );if ( typeof snr != 'undefined' ){return snr;}// look for links with snr parametervar links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );snr = null;for
2024-05-15 22:36:52 UTC	15825	IN	Data Raw: 63 72 6f 6c 6c 41 72 65 61 20 29 3b 0d 0a 09 09 76 61 72 20 63 61 70 73 75 6c 65 73 20 3d 20 24 53 63 72 6f 6c 6c 69 6e 67 43 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 20 27 2e 63 6c 75 73 74 65 72 5f 63 61 70 73 75 6c 65 27 20 29 3b 0d 0a 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 49 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 2e 54 72 61 63 6b 41 70 70 65 61 72 61 6e 63 65 49 66 56 69 73 69 62 6c 65 28 20 63 61 70 73 75 6c 65 73 5b 63 6c 75 73 74 65 72 2e 6e 43 75 72 43 61 70 5d 20 29 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 48 61 6e 64 6c 65 43 61 72 6f 75 73 65 6c 43 68 61 6e 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 74 61 72 67 65 74 69 64 2c 20 63 75 72 50 6f 73 2c 20 70 61 67 65 53 69 7a 65 20 29 20 7b 0d 0a 09 09 76 61 72 20 24 53 63 72 6f Data Ascii: crollArea );var capsules = $ScrollingContainer.find( '.cluster_capsule' );GDynamicStore.s_ImpressionTracker.TrackAppearanceIfVisible( capsules[cluster.nCurCap] );},HandleCarouselChange: function( targetid, curPos, pageSize ) {var $Scro
2024-05-15 22:36:52 UTC	16384	IN	Data Raw: 20 7c 3d 20 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 62 50 61 63 6b 61 67 65 44 69 73 63 6f 75 6e 74 65 64 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 63 55 73 65 72 49 74 65 6d 73 49 6e 42 75 6e 64 6c 65 2b 2b 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e 50 61 63 6b 61 67 65 42 61 73 65 50 72 69 63 65 49 6e 43 65 6e 74 73 20 2b 3d 20 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 6e 42 61 73 65 50 72 69 63 65 49 6e 43 65 6e 74 73 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e 46 69 6e 61 6c 50 72 69 63 65 49 6e 43 65 6e 74 73 20 2b 3d 20 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 6e 46 69 6e 61 6c 50 72 69 63 65 49 6e 43 65 6e 74 73 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 Data Ascii: \|= BundleItem.m_bPackageDiscounted;BundleForUser.m_cUserItemsInBundle++;BundleForUser.m_nPackageBasePriceInCents += BundleItem.m_nBasePriceInCents;BundleForUser.m_nFinalPriceInCents += BundleItem.m_nFinalPriceInCents;BundleForUser
2024-05-15 22:36:52 UTC	960	IN	Data Raw: 72 67 65 53 74 6f 72 65 49 74 65 6d 44 61 74 61 28 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 41 70 70 44 61 74 61 5b 61 70 70 69 64 5d 2c 20 72 67 41 70 70 73 5b 61 70 70 69 64 5d 20 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 20 72 67 50 61 63 6b 61 67 65 73 20 26 26 20 74 79 70 65 6f 66 20 72 67 50 61 63 6b 61 67 65 73 2e 6c 65 6e 67 74 68 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 66 6f 72 28 20 76 61 72 20 70 61 63 6b 61 67 65 69 64 20 69 6e 20 72 67 50 61 63 6b 61 67 65 73 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 69 66 20 28 20 21 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 50 61 63 6b 61 67 65 44 61 74 61 5b 70 61 63 6b 61 67 65 69 64 5d 20 29 0d 0a 09 09 09 09 09 47 Data Ascii: rgeStoreItemData( GStoreItemData.rgAppData[appid], rgApps[appid] );}}if ( rgPackages && typeof rgPackages.length == 'undefined' ){for( var packageid in rgPackages ){if ( !GStoreItemData.rgPackageData[packageid] )G
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 49 44 20 3d 20 24 65 6c 2e 64 61 74 61 28 27 64 73 2d 62 75 6e 64 6c 65 69 64 27 20 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 75 6e 42 75 6e 64 6c 65 49 44 20 26 26 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 29 0d 0a 09 09 09 72 65 74 75 72 6e 20 7b 20 62 75 6e 64 6c 65 69 64 3a 20 75 6e 42 75 6e 64 6c 65 49 44 2c 20 69 74 65 6d 3a 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 7d 3b 0d 0a 0d 0a 09 09 69 66 28 20 75 6e 50 61 63 6b 61 67 65 49 44 20 26 26 20 75 6e 50 61 63 6b 61 67 65 49 44 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 2c 27 29 20 21 3d 3d Data Ascii: 00004000eID = $el.data('ds-bundleid' );if ( unBundleID && GStoreItemData.rgBundleData[unBundleID] )return { bundleid: unBundleID, item: GStoreItemData.rgBundleData[unBundleID] };if( unPackageID && unPackageID.toString().indexOf(',') !==
2024-05-15 22:36:53 UTC	12	IN	Data Raw: 63 6c 75 64 65 64 5f 74 61 67 0d 0a Data Ascii: cluded_tag
2024-05-15 22:36:53 UTC	9861	IN	Data Raw: 30 30 30 30 32 36 37 39 0d 0a 73 20 26 26 20 53 65 74 74 69 6e 67 73 2e 65 78 70 6c 69 63 69 74 6c 79 5f 65 78 63 6c 75 64 65 64 5f 74 61 67 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 26 26 20 72 67 41 70 70 44 61 74 61 2e 74 61 67 69 64 73 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 66 6f 72 20 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 41 70 70 44 61 74 61 2e 74 61 67 69 64 73 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 76 61 72 20 74 61 67 69 64 20 3d 20 72 67 41 70 70 44 61 74 61 2e 74 61 67 69 64 73 5b 69 5d 3b 0d 0a 09 09 09 09 69 66 20 28 20 53 65 74 74 69 6e 67 73 2e 65 78 70 6c 69 63 69 74 6c 79 5f 65 78 63 6c 75 64 65 64 5f 74 61 67 73 2e 69 6e 63 6c 75 64 65 73 28 20 74 61 67 69 64 20 29 20 29 0d 0a 09 09 09 Data Ascii: 00002679s && Settings.explicitly_excluded_tags.length > 0 && rgAppData.tagids ){for ( var i = 0; i < rgAppData.tagids.length; ++i ){var tagid = rgAppData.tagids[i];if ( Settings.explicitly_excluded_tags.includes( tagid ) )
2024-05-15 22:36:53 UTC	14398	IN	Data Raw: 30 30 30 30 33 38 33 32 0d 0a 74 65 6d 2e 61 70 70 69 64 3b 0d 0a 0d 0a 09 09 69 66 28 20 75 6e 41 70 70 49 64 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 76 61 72 20 72 67 41 70 70 49 64 73 20 3d 20 5b 20 75 6e 41 70 70 49 64 20 5d 3b 0d 0a 09 09 09 69 66 28 20 75 6e 41 70 70 49 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 2c 27 29 20 21 3d 3d 20 2d 31 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 72 67 41 70 70 49 64 73 20 3d 20 75 6e 41 70 70 49 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 20 27 2c 27 20 29 3b 0d 0a 09 09 09 09 75 6e 41 70 70 49 64 20 3d 20 72 67 41 70 70 49 64 73 5b 30 5d 3b 0d 0a 09 09 09 7d 0d 0a 0d 0a 09 09 09 66 6f 72 20 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 41 70 70 49 64 73 2e 6c 65 6e 67 Data Ascii: 00003832tem.appid;if( unAppId ){var rgAppIds = [ unAppId ];if( unAppId.toString().indexOf(',') !== -1 ){rgAppIds = unAppId.toString().split( ',' );unAppId = rgAppIds[0];}for ( var i = 0; i < rgAppIds.leng
2024-05-15 22:36:53 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49839	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:52 UTC	587	OUT	GET /public/javascript/broadcast_carousel.js?v=J3gSXZs7_9YW&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:52 UTC	351	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "J3gSXZs7_9YW" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14445313 Expires: Wed, 30 Oct 2024 03:12:05 GMT Date: Wed, 15 May 2024 22:36:52 GMT Content-Length: 9665 Connection: close
2024-05-15 22:36:52 UTC	9665	IN	Data Raw: 0d 0a 0d 0a 47 53 74 65 61 6d 42 72 6f 61 64 63 61 73 74 73 20 3d 20 7b 0d 0a 09 09 49 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 66 6e 46 69 6c 74 65 72 46 75 6e 63 74 69 6f 6e 2c 20 74 61 67 69 64 2c 20 67 65 6e 72 65 69 64 2c 20 63 61 74 65 67 6f 72 79 69 64 2c 20 6d 61 78 42 72 6f 61 64 63 61 73 74 73 2c 20 62 41 75 74 6f 50 6c 61 79 69 6e 67 46 65 61 74 75 72 65 64 42 72 6f 61 64 63 61 73 74 20 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 74 61 67 69 64 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0d 0a 09 09 09 74 61 67 69 64 20 3d 20 30 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 20 67 65 6e 72 65 69 64 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0d 0a 09 09 09 67 65 6e 72 65 69 64 20 3d 20 30 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 Data Ascii: GSteamBroadcasts = {Init: function( fnFilterFunction, tagid, genreid, categoryid, maxBroadcasts, bAutoPlayingFeaturedBroadcast ){if ( tagid === undefined ) {tagid = 0;}if ( genreid === undefined ) {genreid = 0;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49838	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:52 UTC	573	OUT	GET /public/javascript/home.js?v=35wvaSLdFM6n&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:52 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "35wvaSLdFM6n" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14418919 Expires: Tue, 29 Oct 2024 19:52:11 GMT Date: Wed, 15 May 2024 22:36:52 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:36:52 UTC	15995	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 4f 6e 48 6f 6d 65 70 61 67 65 45 78 63 65 70 74 69 6f 6e 28 65 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 20 29 0d 0a 09 7b 0d 0a 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 20 27 45 78 63 65 70 74 69 6f 6e 20 72 65 6e 64 65 72 69 6e 67 20 68 6f 6d 65 70 61 67 65 3a 27 2c 20 65 20 29 3b 0d 0a 09 09 69 66 20 28 20 65 2e 73 74 61 63 6b 20 29 0d 0a 09 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 20 65 2e 73 74 61 63 6b 20 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 49 6e 69 74 69 61 6c 69 7a 65 47 50 46 6f 63 75 73 52 65 73 74 6f 72 65 54 69 6d 65 6f 75 74 28 29 3b 0d 0a 0d 0a 47 48 Data Ascii: 0000C000function OnHomepageException(e){if ( typeof console != 'undefined' && console.log ){console.log( 'Exception rendering homepage:', e );if ( e.stack )console.log( e.stack );}}InitializeGPFocusRestoreTimeout();GH
2024-05-15 22:36:52 UTC	15837	IN	Data Raw: 79 20 7b 0d 0a 09 09 09 47 53 74 65 61 6d 43 75 72 61 74 6f 72 73 2e 52 65 6e 64 65 72 28 29 3b 0d 0a 09 09 7d 20 63 61 74 63 68 28 20 65 20 29 20 7b 20 4f 6e 48 6f 6d 65 70 61 67 65 45 78 63 65 70 74 69 6f 6e 28 65 29 3b 20 7d 0d 0a 0d 0a 09 09 2f 2f 20 4c 6f 67 67 65 64 20 69 6e 0d 0a 09 09 2f 2f 20 52 65 63 6f 6d 6d 65 6e 64 65 64 20 43 75 72 61 74 6f 72 73 0d 0a 09 09 74 72 79 20 7b 0d 0a 09 09 09 47 48 6f 6d 65 70 61 67 65 2e 52 65 6e 64 65 72 52 65 63 6f 6d 6d 65 6e 64 65 64 43 72 65 61 74 6f 72 41 70 70 73 28 29 3b 0d 0a 09 09 7d 20 63 61 74 63 68 28 20 65 20 29 20 7b 20 4f 6e 48 6f 6d 65 70 61 67 65 45 78 63 65 70 74 69 6f 6e 28 65 29 3b 20 7d 0d 0a 0d 0a 0d 0a 09 09 74 72 79 20 7b 0d 0a 09 09 09 47 48 6f 6d 65 70 61 67 65 2e 52 65 6e 64 65 72 54 Data Ascii: y {GSteamCurators.Render();} catch( e ) { OnHomepageException(e); }// Logged in// Recommended Curatorstry {GHomepage.RenderRecommendedCreatorApps();} catch( e ) { OnHomepageException(e); }try {GHomepage.RenderT
2024-05-15 22:36:52 UTC	16384	IN	Data Raw: 79 63 75 72 61 74 6f 72 73 27 2c 20 6e 44 65 70 74 68 2c 20 63 75 72 61 74 6f 72 2e 61 63 63 6f 75 6e 74 69 64 20 29 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 65 6c 73 65 20 69 66 20 28 20 75 6e 42 75 6e 64 6c 65 49 44 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 24 43 61 70 43 74 6e 2e 61 74 74 72 28 27 68 72 65 66 27 2c 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 47 65 74 42 75 6e 64 6c 65 55 52 4c 28 20 75 6e 42 75 6e 64 6c 65 49 44 2c 20 27 6d 61 69 6e 5f 63 6c 75 73 74 65 72 5f 72 65 63 6f 6d 6d 65 6e 64 65 64 5f 62 79 63 75 72 61 74 6f 72 73 27 2c 20 6e 44 65 70 74 68 2c 20 63 75 72 61 74 6f 72 2e 61 63 63 6f 75 6e 74 69 64 20 29 29 3b 0d 0a 09 09 09 7d 0d 0a 0d 0a 09 09 7d 0d 0a 09 09 65 6c 73 65 20 69 66 28 20 72 67 52 65 63 6f 6d 6d 65 6e 64 61 74 Data Ascii: ycurators', nDepth, curator.accountid ));}else if ( unBundleID ){$CapCtn.attr('href', GStoreItemData.GetBundleURL( unBundleID, 'main_cluster_recommended_bycurators', nDepth, curator.accountid ));}}else if( rgRecommendat
2024-05-15 22:36:52 UTC	948	IN	Data Raw: 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 63 61 6c 69 7a 65 64 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 74 5f 77 69 73 68 6c 69 73 74 65 64 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 70 6c 69 63 69 74 6c 79 5f 69 6e 63 6c 75 64 65 64 5f 74 61 67 73 3a 20 47 48 6f 6d 65 70 61 67 65 2e 72 67 49 52 49 6e 63 6c 75 64 65 64 54 61 67 73 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 70 6c 69 63 69 74 6c 79 5f 65 78 63 6c 75 64 65 64 5f 74 61 67 73 3a 20 47 48 6f 6d 65 70 61 67 65 2e 72 67 49 52 45 78 63 6c 75 64 65 64 54 61 67 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 29 3b 0d 0a 0d 0a 20 20 20 Data Ascii: false, localized: true, not_wishlisted: false, explicitly_included_tags: GHomepage.rgIRIncludedTags, explicitly_excluded_tags: GHomepage.rgIRExcludedTags } );
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6c 74 65 72 49 74 65 6d 73 46 6f 72 44 69 73 70 6c 61 79 28 0d 0a 09 09 09 47 48 6f 6d 65 70 61 67 65 2e 72 67 43 6f 6d 6d 75 6e 69 74 79 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 2c 20 27 68 6f 6d 65 27 2c 20 34 2c 20 31 32 2c 20 7b 20 67 61 6d 65 73 5f 61 6c 72 65 61 64 79 5f 69 6e 5f 6c 69 62 72 61 72 79 3a 20 66 61 6c 73 65 2c 20 64 6c 63 3a 20 66 61 6c 73 65 2c 20 6c 6f 63 61 6c 69 7a 65 64 3a 20 74 72 75 65 2c 20 6e 6f 74 5f 77 69 73 68 6c 69 73 74 65 64 3a 20 66 61 6c 73 65 20 7d 0d 0a 09 09 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 72 67 43 61 70 73 75 6c 65 73 2e 6c 65 6e 67 74 68 20 3c 20 34 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 72 65 74 75 72 6e 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 66 6f 72 20 28 20 76 61 72 20 69 20 Data Ascii: 00004000lterItemsForDisplay(GHomepage.rgCommunityRecommendations, 'home', 4, 12, { games_already_in_library: false, dlc: false, localized: true, not_wishlisted: false });if ( rgCapsules.length < 4 ){return;}for ( var i
2024-05-15 22:36:53 UTC	12	IN	Data Raw: 0d 0a 09 09 65 6c 73 65 0d 0a 0d 0a Data Ascii: else
2024-05-15 22:36:53 UTC	6473	IN	Data Raw: 30 30 30 30 31 39 33 44 0d 0a 09 09 7b 0d 0a 09 09 09 66 6f 72 20 28 20 76 61 72 20 69 4c 69 73 74 20 3d 20 30 3b 20 69 4c 69 73 74 20 3c 20 72 67 4c 69 73 74 73 2e 6c 65 6e 67 74 68 3b 20 69 4c 69 73 74 2b 2b 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 76 61 72 20 72 67 4c 69 73 74 20 3d 20 72 67 4c 69 73 74 73 5b 69 4c 69 73 74 5d 3b 0d 0a 09 09 09 09 66 6f 72 20 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 4c 69 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 09 09 09 09 66 6e 41 64 64 49 74 65 6d 28 20 72 67 4c 69 73 74 5b 69 5d 20 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 72 67 4f 75 74 70 75 74 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 42 75 69 6c 64 48 6f 6d 65 50 61 67 65 48 65 61 64 65 72 43 61 70 3a Data Ascii: 0000193D{for ( var iList = 0; iList < rgLists.length; iList++ ){var rgList = rgLists[iList];for ( var i = 0; i < rgList.length; i++ )fnAddItem( rgList[i] );}}return rgOutput;},BuildHomePageHeaderCap:
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6c 65 74 20 6e 75 6d 52 65 76 69 65 77 73 20 3d 20 72 67 52 65 76 69 65 77 73 2e 6c 65 6e 67 74 68 3b 0d 0a 09 09 69 66 20 28 20 6e 75 6d 52 65 76 69 65 77 73 20 3e 20 31 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 24 49 74 65 6d 2e 64 61 74 61 28 20 27 63 75 72 72 65 6e 74 72 65 76 69 65 77 69 64 78 27 2c 20 30 20 29 3b 0d 0a 0d 0a 09 09 09 6c 65 74 20 73 74 72 4e 75 6d 52 65 76 69 65 77 73 20 3d 20 27 25 31 24 73 20 6f 66 20 25 32 24 73 20 72 65 76 69 65 77 73 27 2e 72 65 70 6c 61 63 65 28 20 22 25 31 24 73 22 2c 20 31 20 29 2e 72 65 70 6c 61 63 65 28 20 22 25 32 24 73 22 2c 20 6e 75 6d 52 65 76 69 65 77 73 20 29 3b 0d 0a 0d 0a 09 09 09 6c 65 74 20 70 61 67 69 6e 67 54 68 75 6d 62 73 20 3d 20 24 4a 28 20 27 3c 64 69 76 3e 27 2c 20 Data Ascii: 00004000let numReviews = rgReviews.length;if ( numReviews > 1 ){$Item.data( 'currentreviewidx', 0 );let strNumReviews = '%1$s of %2$s reviews'.replace( "%1$s", 1 ).replace( "%2$s", numReviews );let pagingThumbs = $J( '<div>',
2024-05-15 22:36:53 UTC	12	IN	Data Raw: 73 69 7a 65 53 74 72 20 29 0d 0d 0a Data Ascii: sizeStr )
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0a 09 09 72 65 74 75 72 6e 20 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 65 61 6d 2f 27 20 2b 20 27 61 70 70 73 2f 27 20 2b 20 61 70 70 69 64 20 2b 20 27 2f 27 20 2b 20 66 69 6c 65 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 27 2e 6a 70 67 27 2c 20 73 69 7a 65 53 74 72 20 2b 20 27 2e 6a 70 67 27 29 3b 0d 0a 0d 0a 09 72 65 74 75 72 6e 20 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 65 61 6d 2f 27 20 2b 20 27 61 70 70 73 2f 27 20 2b 20 61 70 70 69 64 20 2b 20 27 2f 27 20 2b 20 66 69 6c 65 6e 61 6d 65 3b 0d 0a 7d 0d 0a 0d 0a 47 53 74 65 61 6d 43 75 72 61 74 6f 72 73 20 3d 20 7b 0d 0a 09 72 67 41 Data Ascii: 00004000return 'https://cdn.akamai.steamstatic.com/steam/' + 'apps/' + appid + '/' + filename.replace('.jpg', sizeStr + '.jpg');return 'https://cdn.akamai.steamstatic.com/steam/' + 'apps/' + appid + '/' + filename;}GSteamCurators = {rgA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49840	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:52 UTC	576	OUT	GET /public/javascript/cluster.js?v=zUvcVvp9xZmm&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:53 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "zUvcVvp9xZmm" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=13307038 Expires: Wed, 16 Oct 2024 23:00:51 GMT Date: Wed, 15 May 2024 22:36:53 GMT Content-Length: 15501 Connection: close
2024-05-15 22:36:53 UTC	15501	IN	Data Raw: 0d 0a 66 75 6e 63 74 69 6f 6e 20 43 6c 75 73 74 65 72 28 20 61 72 67 73 20 29 0d 0a 7b 0d 0a 09 74 68 69 73 2e 6e 43 75 72 43 61 70 20 3d 20 30 3b 0d 0a 09 74 68 69 73 2e 62 49 6e 53 63 72 6f 6c 6c 20 3d 20 66 61 6c 73 65 3b 0d 0a 09 74 68 69 73 2e 62 53 75 70 70 72 65 73 73 53 63 72 6f 6c 6c 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0d 0a 09 74 68 69 73 2e 62 55 73 65 41 63 74 69 76 65 43 6c 61 73 73 20 3d 20 66 61 6c 73 65 3b 0d 0a 09 74 68 69 73 2e 72 67 43 61 70 73 54 6f 4c 6f 61 64 20 3d 20 5b 5d 3b 0d 0a 09 74 68 69 73 2e 6f 6e 43 68 61 6e 67 65 43 42 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 09 74 68 69 73 2e 63 43 61 70 43 6f 75 6e 74 20 3d 20 61 72 67 73 2e 63 43 61 70 43 6f 75 6e 74 3b 0d 0a 09 74 68 69 73 2e 6e 43 61 70 57 69 64 74 68 20 3d 20 61 72 67 73 Data Ascii: function Cluster( args ){this.nCurCap = 0;this.bInScroll = false;this.bSuppressScrolling = false;this.bUseActiveClass = false;this.rgCapsToLoad = [];this.onChangeCB = null;this.cCapCount = args.cCapCount;this.nCapWidth = args

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49841	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:52 UTC	601	OUT	GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:53 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "pSvIAKtunfWg" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14017201 Expires: Fri, 25 Oct 2024 04:16:54 GMT Date: Wed, 15 May 2024 22:36:53 GMT Content-Length: 24657 Connection: close
2024-05-15 22:36:53 UTC	16037	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2f 20 62 75 69 6c 64 20 6f 75 72 20 6d 65 6e 75 20 6f 6e 20 69 6e 69 74 0d 0a 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 09 76 61 72 20 6d 71 51 75 65 72 79 4d 65 6e 75 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 22 29 20 3a 20 7b 6d 61 74 63 68 65 73 3a 20 66 61 6c 73 65 7d 3b 0d 0a 09 76 61 72 20 6d 71 4d 6f 62 69 6c 65 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 22 29 20 3a 20 7b 6d Data Ascii: "use strict";// build our menu on initjQuery( function($) {var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {m
2024-05-15 22:36:53 UTC	8620	IN	Data Raw: b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 20 28 42 75 6c 67 61 72 69 61 6e 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 63 7a 65 63 68 22 7d 20 29 2e 74 65 78 74 28 20 27 c4 8c 65 c5 a1 74 69 6e 61 20 28 43 7a 65 63 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 64 61 6e 69 73 68 22 7d 20 29 2e 74 65 78 74 28 20 27 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 Data Ascii: (Bulgarian)' ));$SelectBox.append($J('<option/>', {value: "czech"} ).text( 'etina (Czech)' ));$SelectBox.append($J('<option/>', {value: "danish"} ).text( 'Dansk (Danish)' ));$SelectBox.append

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49843	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	636	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:53 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1846 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-736" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:53 GMT Connection: close
2024-05-15 22:36:53 UTC	1846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49842	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	640	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:53 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3777 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-ec1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:53 GMT Connection: close
2024-05-15 22:36:53 UTC	3777	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 81 06 40 a0 01 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49844	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	600	OUT	GET /public/css/applications/store/main.css?v=_J3LXbtbVCSV&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:53 UTC	382	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "_J3LXbtbVCSV" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=15466750 Expires: Sun, 10 Nov 2024 22:56:03 GMT Date: Wed, 15 May 2024 22:36:53 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:36:53 UTC	16002	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 68 74 6d 6c 20 62 6f 64 79 2e 65 76 65 6e 74 73 5f 68 75 62 2e 76 36 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 37 31 61 32 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 30 30 70 78 29 7b 68 74 6d 6c 20 62 6f 64 79 2e 65 76 65 6e 74 73 5f 68 75 62 2e 76 36 7b 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 68 74 6d 6c 20 62 6f 64 79 2e 65 76 65 6e 74 73 5f 68 75 62 2e 76 36 3a 3a 2d Data Ascii: 0000C000html body.events_hub.v6{background-color:#171a21;font-family:"Motiva Sans",Arial,Helvetica,sans-serif}@media screen and (max-width: 400px){html body.events_hub.v6{scrollbar-width:none;-ms-overflow-style:none}html body.events_hub.v6::-
2024-05-15 22:36:53 UTC	15824	IN	Data Raw: 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 64 34 34 35 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 63 6f 6c 6f 72 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 2d 72 65 67 69 6f 6e 3a 6e 6f 2d 64 72 61 67 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 5f 33 69 34 45 70 69 53 44 70 78 51 48 56 46 45 78 78 55 61 31 5a 70 20 73 76 67 7b 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 6d 61 72 67 69 Data Ascii: und-color:#3d4450;border-radius:2px;transition-property:background-color,color;transition-duration:.2s;transition-timing-function:ease-out;-webkit-app-region:no-drag;font-weight:bold;cursor:pointer}._3i4EpiSDpxQHVFExxUa1Zp svg{width:16px;height:16px;margi
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 53 2d 5f 4c 61 51 47 35 65 45 4f 4d 32 48 57 5a 2d 67 65 4a 49 2e 5f 33 73 31 52 6b 6c 36 63 46 4f 7a 65 5f 53 64 56 32 67 2d 41 46 6f 3a 3a 61 66 74 65 72 2c 2e 53 2d 5f 4c 61 51 47 35 65 45 4f 4d 32 48 57 5a 2d 67 65 4a 49 2e 5f 32 38 68 6d 79 59 50 70 42 36 55 33 41 68 55 33 69 39 33 6d 34 71 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 76 61 72 28 2d 2d 66 69 65 6c 64 2d 6e 65 67 61 74 69 76 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6d 61 72 67 69 6e 29 3b 72 69 67 68 74 3a 76 61 72 28 2d 2d 66 69 65 6c 64 2d 6e 65 67 61 74 69 76 65 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6d 61 72 67 69 6e 29 7d 2e 53 2d 5f 4c 61 51 47 35 65 Data Ascii: ding-bottom:10px}.S-_LaQG5eEOM2HWZ-geJI._3s1Rkl6cFOze_SdV2g-AFo::after,.S-_LaQG5eEOM2HWZ-geJI._28hmyYPpB6U3AhU3i93m4q::after{content:"";position:absolute;left:var(--field-negative-horizontal-margin);right:var(--field-negative-horizontal-margin)}.S-_LaQG5e
2024-05-15 22:36:53 UTC	954	IN	Data Raw: 68 74 3a 32 34 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 35 30 6d 73 20 65 61 73 65 2d 69 6e 7d 2e 5f 33 6f 31 33 37 44 42 4e 46 30 33 79 74 62 4c 42 6c 32 6a 50 72 69 3a 6e 6f 74 28 2e 5f 31 6c 49 31 4e 39 67 66 4a 73 33 73 5f 47 66 6f 31 46 5f 34 2d 44 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 5f 33 6f 31 33 37 44 42 4e 46 30 33 79 74 62 4c 42 6c 32 6a 50 72 69 3a 68 6f 76 65 72 20 2e 4d 71 32 35 4e 61 70 32 32 34 68 56 64 54 64 74 58 53 73 6e 71 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 33 29 3b 2d 2d 6c 65 66 74 2d 74 72 61 63 6b 2d 63 6f 6c 6f 72 3a 20 23 30 30 42 42 46 46 7d 2e 4d 71 32 35 4e 61 70 32 32 34 68 56 64 54 64 Data Ascii: ht:24px;min-width:100px;transition:filter 50ms ease-in}._3o137DBNF03ytbLBl2jPri:not(._1lI1N9gfJs3s_Gfo1F_4-D){cursor:pointer}._3o137DBNF03ytbLBl2jPri:hover .Mq25Nap224hVdTdtXSsnq{background:rgba(255,255,255,.3);--left-track-color: #00BBFF}.Mq25Nap224hVdTd
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 72 6d 61 6c 69 7a 65 64 2d 66 69 6c 6c 2d 73 74 61 72 74 29 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 6c 65 66 74 2d 74 72 61 63 6b 2d 63 6f 6c 6f 72 29 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 6e 6f 72 6d 61 6c 69 7a 65 64 2d 77 69 64 74 68 2d 68 61 6e 64 6c 65 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 5f 32 78 4b 35 42 2d 77 44 58 6c 67 59 2d 38 71 48 59 79 55 49 33 69 20 2e 4d 71 32 35 4e 61 70 32 32 34 68 56 64 54 64 74 58 53 73 6e 71 3a 3a 62 65 66 6f 72 65 7b 2d 2d 73 69 67 6e 65 64 2d 6e 6f 72 6d 61 6c 69 7a 65 64 2d 73 6c 69 64 65 72 2d 64 65 66 61 75 6c 74 2d 76 61 6c 75 65 3a 20 63 61 6c 63 28 20 32 2e 30 20 2a 20 Data Ascii: 00004000ormalized-fill-start);right:0;top:0;bottom:0;background:var(--left-track-color);width:var(--normalized-width-handle);border-radius:3px}._2xK5B-wDXlgY-8qHYyUI3i .Mq25Nap224hVdTdtXSsnq::before{--signed-normalized-slider-default-value: calc( 2.0 *
2024-05-15 22:36:53 UTC	12	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 2d 0d 0a Data Ascii: ransition-
2024-05-15 22:36:53 UTC	9512	IN	Data Raw: 30 30 30 30 32 35 31 43 0d 0a 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 2c 6f 70 61 63 69 74 79 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 38 30 6d 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 2c 20 30 2c 20 31 2c 20 31 29 7d 0d 0a 62 6f 64 79 2e 5f 33 49 74 56 6c 35 79 48 79 6f 49 7a 62 54 2d 4f 45 61 76 4d 32 33 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 62 6f 64 79 2e 5f 33 6c 72 6c 41 5a 41 4a 50 68 5a 46 39 36 61 66 6e 46 50 36 30 64 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 5f 31 52 4d 34 70 6c 6a 36 4b 58 45 7a 37 35 4c Data Ascii: 0000251Cproperty:transform,opacity;transition-duration:80ms;transition-timing-function:cubic-bezier(0.6, 0, 1, 1)}body._3ItVl5yHyoIzbT-OEavM23{overflow-y:hidden;height:100vh}body._3lrlAZAJPhZF96afnFP60d{overflow-y:hidden;height:100vh}._1RM4plj6KXEz75L
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 42 68 4e 5a 6d 65 76 66 67 4f 4a 55 52 55 72 61 6a 55 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 32 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 32 70 78 20 32 70 78 20 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 5f 33 4d 4d 32 42 68 4e 5a 6d 65 76 66 67 4f 4a 55 52 55 72 61 6a 55 2e 5f 31 72 6a 33 4d 5f 63 47 4f 79 64 4d 45 33 65 50 6f 71 59 4e 58 41 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 2d 72 65 76 65 72 73 65 7d 2e 5f 33 69 73 76 4e 31 4b 30 4f 53 65 6c 71 46 6b 36 68 32 56 6d 51 71 7b 66 Data Ascii: 00004000BhNZmevfgOJURUrajU{display:flex;flex-direction:row;min-height:52px;box-shadow:2px 2px 8px rgba(0,0,0,.25);border-radius:2px;margin-bottom:12px}._3MM2BhNZmevfgOJURUrajU._1rj3M_cGOydME3ePoqYNXA{flex-direction:row-reverse}._3isvN1K0OSelqFk6h2VmQq{f
2024-05-15 22:36:53 UTC	12	IN	Data Raw: 6e 70 75 74 5f 43 6c 65 61 72 0d 0a Data Ascii: nput_Clear
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 41 63 74 69 6f 6e 20 2e 53 56 47 49 63 6f 6e 5f 58 5f 4c 69 6e 65 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 32 70 78 3b 73 74 72 6f 6b 65 3a 23 61 61 61 7d 2e 44 69 61 6c 6f 67 49 6e 70 75 74 5f 43 6c 65 61 72 41 63 74 69 6f 6e 3a 68 6f 76 65 72 20 2e 53 56 47 49 63 6f 6e 5f 58 5f 4c 69 6e 65 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 66 66 66 7d 62 75 74 74 6f 6e 2e 44 69 61 6c 6f 67 42 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a Data Ascii: 00004000Action .SVGIcon_X_Line line{stroke-width:22px;stroke:#aaa}.DialogInput_ClearAction:hover .SVGIcon_X_Line line{stroke:#fff}button.DialogButton::before{pointer-events:none;user-select:none;content:" ";position:absolute;top:0;right:0;bottom:0;left:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49845	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	634	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:53 UTC	241	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Tue, 17 Nov 2020 23:33:19 GMT ETag: "5fb45dbf-e64" Access-Control-Allow-Origin: * Date: Wed, 15 May 2024 22:36:53 GMT Content-Length: 3684 Connection: close
2024-05-15 22:36:53 UTC	3684	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49846	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	688	OUT	GET /public/images/v6/colored_body_top.png?v=2 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:53 UTC	271	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 161187 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-275a3" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:53 GMT Connection: close
2024-05-15 22:36:53 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 03 20 08 02 00 00 00 f4 87 6e 24 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR n$tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 7d fd a5 4b cb 14 66 0e 4b 70 3f 10 70 94 3a 33 dc 4e e3 22 bd 58 96 32 c0 d8 73 e5 3b 2c 8d ba e4 1c 55 3c 23 11 b4 8c 27 a4 a5 4b 79 f3 cd 0c 78 78 92 dd 3b 8a d3 55 8e 30 68 e0 6e 32 22 d5 c4 c6 b8 86 30 18 cb b7 70 9e 42 c3 59 53 05 52 63 ff ab 1d a7 3b 8e 8c 15 40 a6 60 c9 81 89 eb 10 97 53 52 cf a2 0a d9 3f e8 48 e7 2b 44 94 ce 7e 32 df d1 e9 dc ae a7 5e f2 c2 de 09 f7 df 31 68 6f d0 e7 67 a6 0c 6c e1 77 dd c0 39 62 1c 15 c3 c7 21 b5 c6 be 0c fa 4e 81 c3 8c bd 77 26 8b 59 46 83 55 2c 19 f3 6f 86 20 a2 5d eb 9f 91 5d 28 e2 1d 6c e6 2a 1e 4d 74 7e 61 62 00 a6 9c 0a 50 9a 75 72 8a 74 90 f6 a4 9b 8b 1f f2 54 08 9a 98 90 ab 6b a2 59 db 0e 34 9f 9f b5 d2 c2 88 55 6d 6e 30 81 34 ff c0 2f 48 56 f3 cf 4b b9 87 63 df 29 59 09 e0 aa 58 5d 3b b2 8c af 32 36 59 Data Ascii: }KfKp?p:3N"X2s;,U<#'Kyxx;U0hn2"0pBYSRc;@`SR?H+D~2^1hoglw9b!Nw&YFU,o ]](l*Mt~abPurtTkY4Umn04/HVKc)YX];26Y
2024-05-15 22:36:53 UTC	2458	IN	Data Raw: 1d 84 9c bd f8 2e 08 cf 50 9b 75 fa b0 56 62 6f 1c 9a ed bf 45 08 0d 6f da c6 ac 6b 5e 05 1b 6b ed 72 7d d5 1e 6c 88 cb 80 64 37 59 1c 39 e2 9f 34 70 cf 0f 0c ff 44 c3 37 67 63 e7 27 63 51 cf 63 75 05 f8 4e 4a 33 55 4b 42 81 a2 50 94 37 fb b0 ee 78 5e e4 f2 65 e0 af ad 4a 55 05 48 23 56 bd 2d 33 c8 a1 c5 3d cd 7e 1d 6c 0f 40 43 82 a0 7b b3 86 be 01 93 aa 62 13 dd 42 d1 da 55 5d ab ed 9f c2 e5 f7 14 55 84 9a 3f 1e df 62 0d c9 86 dc 28 65 0c 87 1a 98 98 7a 58 f6 eb 25 0e e4 cf 8d c8 db ac eb 51 52 61 9c ba 19 8c 94 25 e3 82 39 e7 7d 4c 3b 7c 7c d6 37 b0 8c 9a c3 e9 ef 7c 3a 02 bd 1a f7 a8 52 9d ec a4 40 ae 7c ce 5c 41 76 68 59 09 7d a5 89 3b d5 ec 7e f3 27 c7 f4 80 3e 74 0e 59 ec 9c b3 18 b2 50 07 c5 34 4d 21 80 3d 14 bc 81 43 cf 65 c0 10 f5 5b 74 12 6b e9 Data Ascii: .PuVboEok^kr}ld7Y94pD7gc'cQcuNJ3UKBP7x^eJUH#V-3=~l@C{bBU]U?b(ezX%QRa%9}L;\|\|7\|:R@\|\AvhY};~'>tYP4M!=Ce[tk
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 86 aa 66 1a 6a 85 48 d5 47 0f 01 8a f3 ac d4 98 7a 51 72 8c dc 03 8e 16 5f f6 c8 b5 af 45 12 c4 d5 84 7d bb f5 c8 6a 96 e4 2e cb 13 ab 49 3d 8e cc b2 bc ee 97 70 75 69 c1 a9 61 1b d1 dd ec 3d 49 0b 98 0f e1 22 c7 33 cb d8 ed 88 b6 0f 1b 10 1a 09 76 cf 50 ea 50 48 99 f9 31 83 91 83 9c f7 c2 cf 0a cf d3 d3 0c a3 47 38 c2 99 eb bd 2e bc c4 d4 c4 11 4b 6e 87 8e 0b d8 74 5b 0b d2 94 99 17 c1 53 f4 e1 0d 4f cf 30 76 ad b0 72 de a7 69 2c 7a ec dd 76 7b d9 77 bf 6b a9 f5 07 2e 14 b7 e4 14 a3 78 b0 7b df 13 a4 d4 56 6b 9a f5 87 a8 79 54 9d d8 a6 7d 04 a4 1e be 20 c7 20 ab 06 6c 0a 34 8e 85 35 ec ef b3 90 e4 65 5d 47 41 14 9d b4 e7 b5 ed 01 fb 0f 8d ab a9 dd d1 4b 1a 86 80 83 f0 82 49 a1 7f 8b 88 db 15 8d c6 86 bb 28 de 77 ed cc dd 0e e7 d3 68 b3 d6 e1 26 2f f5 cb Data Ascii: fjHGzQr_E}j.I=puia=I"3vPPH1G8.Knt[SO0vri,zv{wk.x{VkyT} l45e]GAKI(wh&/
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 38 93 da c3 b5 9d 2a 26 c6 e4 c5 b8 97 5c 1f 0d 9b 81 fe 68 7b 0e f0 ca 24 9e ee 3d 94 aa 90 46 eb a0 ac 42 0e 2b 93 81 d9 7d 3c 0f 80 d9 16 7b d5 70 f0 89 d6 c2 7e f9 29 16 5a 9f 63 88 b2 0c c1 f9 36 58 65 5a e0 86 5e 90 ca b0 ce 10 e2 92 39 21 73 aa 5f 48 1a 17 26 87 54 82 0d 1d e2 87 4a 86 e0 a1 1f 6b 31 90 92 3d aa 55 56 e5 01 3d 12 ca c6 15 af 82 7d 8d 73 21 05 1a 4f ea 00 1e 69 3c 8c 50 93 f6 f2 45 7e a2 68 34 a2 d6 7a 24 06 60 25 8f aa 97 e7 e7 76 e1 2f 1b 1d bf 16 1c 0f 92 e5 90 1b 12 62 71 c7 a5 3e 43 b3 04 50 5c 80 43 39 eb 80 6e 30 1d 86 1c 0a 8d 75 b5 5a 86 2d ed 7d 6a 06 67 f8 b9 24 c7 c9 97 fc 3b b9 e5 07 c5 94 e4 bb c1 b5 9c 72 a2 98 b0 6c 49 fc 31 94 41 07 1d da 54 e5 3c 50 29 19 8e 85 f9 43 03 6f c4 18 0a 5a 5c 3b 2c f9 14 81 0c ec a1 26 Data Ascii: 8*&\h{$=FB+}<{p~)Zc6XeZ^9!s_H&TJk1=UV=}s!Oi<PE~h4z$`%v/bq>CP\C9n0uZ-}jg$;rlI1AT<P)CoZ\;,&
2024-05-15 22:36:53 UTC	7952	IN	Data Raw: c2 c7 7b f1 d1 a2 21 41 d1 44 d9 f1 71 07 2a ce 17 d7 25 91 e5 8f 24 a6 8d e1 46 82 70 77 99 2d ae 6f e3 72 d8 90 62 d3 68 3b ae ea 19 6e fc 80 2c da 0a a3 d5 cc 24 95 69 4a bb b7 63 f0 8f 33 7f 3e 8a fa 41 60 d5 ae d9 c7 d8 78 2f 03 5c 7b ec 61 a4 75 4e 2b f7 d6 63 eb 0f 54 09 8c f7 ae a2 f1 d0 7e 1c 55 6a 11 b0 34 8d f9 41 f5 eb e2 39 b1 a5 07 b2 87 e8 eb f2 4f 3e 7a 49 22 97 12 ac 4f 7e 56 16 c6 a8 63 e6 40 bf 99 ca c6 cf 7a 22 f3 e6 c5 a0 3f 89 a7 5d db 5a b2 a5 07 53 7b 7b e7 e4 11 6f 56 ac a0 4d 21 48 83 c3 3c 2e e3 f0 77 56 0f 6b f6 90 bc 9c 25 78 53 03 93 34 cb f0 19 b9 c7 25 d6 5c 7f a6 aa 8f 4d 48 ce 37 68 e5 47 59 78 73 c3 12 e8 19 ee b8 a0 ff 20 6b cd 72 9f a9 69 2a 0f ab 95 53 33 06 dd 2d 24 06 f7 4b 60 5b 48 54 4c a1 14 1f 3e 1a 0d bc 75 e9 Data Ascii: {!ADq%$Fpw-orbh;n,$iJc3>A`x/\{auN+cT~Uj4A9O>zI"O~Vc@z"?]ZS{{oVM!H<.wVk%xS4%\MH7hGYxs kriS3-$K`[HTL>u
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 52 50 fe f0 cc 67 8f 46 48 0c a1 5b ab 83 f3 13 fb 4f 12 0d 70 ac ae 3e 2b 90 c1 9c 18 e5 94 c2 3c d6 ec 0b 4f 0a e7 f4 99 6b b3 4e e8 44 5f 36 c1 9a af 59 c5 ac 49 c5 d2 18 f9 ea 71 7c 6c b6 ac d1 3e bd b3 f3 50 f5 04 b8 b2 55 ef c2 c1 d0 ef fb 36 04 56 89 b3 92 7f fe 0e a6 19 ba 79 68 d8 7b c7 3d 0a 1e d3 6b 9c 04 9a 65 b9 56 14 68 1e 8f 61 2a ee a7 4f ec 23 ac ef ae 53 6a e9 e6 46 0d 57 a3 b3 ae 42 33 db 3a 2c d3 6e 71 f9 be f9 f8 bb 9f 77 f1 b6 c3 ce 64 31 20 5b ef eb 02 e7 c7 67 bd b6 e4 64 28 da 9d ba b3 e9 be 21 70 f8 c2 21 bf e7 a1 88 2e 1b 80 35 6c 53 d0 f4 5a c0 ec 69 82 d8 16 af 35 cc d0 14 5e 89 87 c9 21 eb 3b 6b af fd 45 dc a8 1f 3f e7 b3 46 68 ed 3d b6 c8 a8 1d f5 c7 0f 21 de ac 0f 77 4c b2 d7 13 cf 20 b5 18 ad 1e 84 b1 2e 46 c9 23 e4 99 df Data Ascii: RPgFH[Op>+<OkND_6YIq\|l>PU6Vyh{=keVha*O#SjFWB3:,nqwd1 [gd(!p!.5lSZi5^!;kE?Fh=!wL .F#
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 81 28 b6 0e a5 e7 e0 15 8e 14 b3 1d 30 34 a4 04 79 9d 2c 67 9f 03 8b ed 61 32 2b 3a 0c 62 8a a5 6c 4b 25 77 43 f5 72 bb 87 7f c3 b5 51 c2 c3 7f fe fb 7f ff 9b 38 6d 2c a2 4f e3 13 f5 0c 77 78 0f ca 23 8a 8a 6e ca c0 83 b0 b0 bc 86 71 21 75 81 32 a5 34 3d 88 c0 2f b5 46 48 c3 8c 5b 17 ae 36 7f 19 8e 1c 88 2e 2b 88 e9 e0 d3 bc e0 3b a7 76 e5 86 8d 12 0a ac c5 94 85 84 6e 61 e3 10 0b 6e 44 0a 77 da de 8f 45 04 f7 65 37 2b a2 f4 39 a4 c9 20 af 29 5a 5c 89 b6 7d 8a 37 c9 b7 d8 2a d4 0e a7 f5 99 6c 6c fd ae f5 6b dc c8 33 64 8d e8 af d1 69 9a be 42 72 ac 2b 82 79 2f 52 e9 28 61 42 a4 9b d0 70 52 23 6f 85 8c 31 8e 1b 19 1b 8b 64 0d c3 85 19 57 de 0e e1 f3 30 97 28 85 d5 ff 48 0c 1a 48 a9 fe 45 18 ac 43 42 f5 82 82 ea 35 6e 63 7c aa f4 bf 35 fe d2 be fe 88 b2 bc Data Ascii: (04y,ga2+:blK%wCrQ8m,Owx#nq!u24=/FH[6.+;vnanDwEe7+9 )Z\}7*llk3diBr+y/R(aBpR#o1dW0(HHECB5nc\|5
2024-05-15 22:36:53 UTC	7952	IN	Data Raw: 7f fc d1 38 66 a2 e3 e5 19 a4 14 66 08 b8 73 82 a7 37 68 b2 d2 c3 a0 a5 55 21 76 dd 0e 0e e3 35 ee d3 07 a6 92 02 5d ca 0c 8e dd 8a 88 d5 0d f7 ef 66 f5 10 91 23 58 a8 44 21 a9 07 34 22 25 55 ce 2e de 27 8e 26 7d 95 41 b7 cf df 88 fc f3 4a a9 78 76 fb fd 0d b3 29 65 85 c6 bc f1 ce eb 71 09 40 e1 24 9a ef 8c ee bc 6a 64 82 0c 0a f5 d0 ea 9b b0 47 d9 e5 5c 4f f4 b1 51 b5 dd b9 d4 e6 b4 81 4d d1 2a 7c 80 7e cc 49 bd ce de 89 72 5c 02 56 c7 3f 74 0f 50 34 98 36 c5 9c 82 c4 26 c9 6a 48 f1 6c 00 da 0c b8 49 af 6b b1 f7 e4 5a 73 07 1a 3f 85 f6 6c 17 c3 31 11 a3 da fd 4a d4 a5 7e b4 01 7f b3 51 c4 1a 3d d1 11 7e 13 59 0e ae 46 42 89 7d 8c 15 84 3e 0f 5a ca 99 c6 62 4c 6b f1 72 48 79 42 d6 6d 89 59 99 11 7d 07 58 25 08 52 95 80 d1 79 e6 53 c3 0c 25 65 30 84 0c 0c Data Ascii: 8ffs7hU!v5]f#XD!4"%U.'&}AJxv)eq@$jdG\OQM*\|~Ir\V?tP46&jHlIkZs?l1J~Q=~YFB}>ZbLkrHyBmY}X%RyS%e0
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 3c e1 9f b8 36 be fb 19 0e eb 3a c1 fb 00 80 d3 6a 4f 84 6f 7a 96 c9 62 7b 51 53 82 2f 60 05 40 2a 86 8c 94 ae d9 a4 34 bf b8 9f 8b 9c 2f 3b 58 37 2f 62 1c ac 22 38 5e ff 9b 99 ef 44 cb f8 6f fa c0 f6 e0 13 22 4b 6c 29 52 be 1c b3 12 e5 a6 14 86 77 73 f8 5e 56 4b a8 7b be 6c be a3 6d 16 9a 30 42 f9 77 4d a4 f4 72 f0 9b 88 c4 16 13 58 34 a6 dc 27 c4 e0 f6 ed 2d f6 a1 17 37 56 fb 45 01 f4 70 fd b8 a8 b7 ff 67 79 12 6a 4b 45 5d 08 74 60 aa 4f ff fb 9f e2 75 37 58 7f 34 02 30 d7 e3 92 d5 2c 5d ab de 43 bb c3 f1 90 83 04 f7 83 fb 9b 37 9c 40 a1 5c 5a 0c d6 35 dd f2 04 48 24 07 15 8a 12 a1 c1 92 86 14 c4 cf 6a 8a 4b 67 de 8a ce 06 8f fb 8f 59 49 f3 35 cf cf c5 b7 a9 74 1e 52 04 ea c1 8b 72 55 3c 04 77 e1 c1 1f 94 7a dc 2e 8a ee 28 24 71 24 3d 06 25 be 0f 1d 4f Data Ascii: <6:jOozb{QS/`@*4/;X7/b"8^Do"Kl)Rws^VK{lm0BwMrX4'-7VEpgyjKE]t`Ou7X40,]C7@\Z5H$jKgYI5tRrU<wz.($q$=%O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49847	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	728	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=lI4V3qLLPrMY&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:53 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 291 Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT ETag: "649bb1ef-123" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:53 GMT Connection: close
2024-05-15 22:36:53 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49848	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	630	OUT	GET /store/steamdeck/steamdeck_promo_08.png?v=2%20alt= HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:53 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 171987 Last-Modified: Tue, 13 Feb 2024 23:26:52 GMT ETag: "65cbfabc-29fd3" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:53 GMT Connection: close
2024-05-15 22:36:53 UTC	16153	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f5 00 00 00 c9 08 06 00 00 00 3a 87 ab 73 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0d c2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDR:spHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:R
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: c8 88 5a 96 a1 97 a5 f8 da fa d4 4d d2 de 08 15 2c ad 30 7c 7b a6 b2 6d c2 e9 97 6a af f5 4c bd 10 82 f5 b5 0d 6e df bd c3 9d db b7 e9 f4 ba 8c 47 63 5e 7b ed 35 8e 4f 4e 98 4e a7 58 63 9e b3 83 ad 63 94 14 81 55 9f 76 3a 0c 87 43 ae 5c b9 c2 de de 1e 9f fd ec 67 78 f1 c5 17 78 f7 dd 77 78 70 ff 01 f3 d9 ac da e8 c1 78 63 c5 fa b0 25 15 bb d4 b0 ae ad 34 3f 24 8d 5d ca 20 02 94 a4 a0 23 7c 59 e2 f3 2c 5c 68 da 47 6e 5f 43 3e f8 21 f6 e0 21 7a fb 1a d1 ee 75 92 bd 6b a8 4e 1f 5f c1 ec 28 d5 90 01 85 08 d5 bf b7 d5 28 48 61 c0 3a 10 a1 c7 6d e7 0b 7c 69 9b ac b5 b1 8b 6d e1 48 b5 f4 29 52 21 94 c6 37 95 7c 08 ce b5 f1 8e a4 ad 73 b0 e4 4f d4 46 16 15 1d af 81 db 6b 52 a4 a8 48 93 42 8a 50 81 75 83 be 72 9e 2d c2 fb d7 0e 80 ce 36 f0 6b ad 43 e0 c4 b2 6a 11 Data Ascii: ZM,0\|{mjLnGc^{5ONNXccUv:C\gxxwxpxc%4?$] #\|Y,\hGn_C>!!zukN_((Ha:m\|imH)R!7\|sOFkRHBPur-6kCj
2024-05-15 22:36:53 UTC	3050	IN	Data Raw: 52 a2 d2 a4 9f fc 03 64 df fa 75 a4 f3 74 85 60 61 0d e3 1f 7c 9b ee b5 7b c4 1b 3b c1 df 59 d6 12 63 55 bf ba 92 a4 94 c2 f3 e8 e1 63 8c 12 5c bd 73 9b bc b0 4c 9c 45 2e 46 08 9d e0 f2 8c e9 34 e7 64 16 98 be 43 0d 9d 18 ba 91 60 ad ab e8 a7 39 c5 fb 3f e0 44 c3 ab 7f ec cf 92 74 7b 3c 7d f3 bb 78 0c 5a 86 b9 e0 e9 68 c4 60 34 23 de ea 73 fb e5 8f f3 ed af 7f 95 c5 e9 88 d9 e1 88 de d6 3a 2e d2 64 85 21 cf 42 a5 60 4d d0 f1 97 91 c6 77 12 7c 11 7c b5 83 4d 6c 4b f0 d2 06 85 b0 3a 51 6d ec 5b a3 b8 3a fc 2c de 96 98 45 4e a4 e2 6a 5c 30 e8 87 0b 25 82 4a 9a b7 a8 b2 40 4a 8f f0 86 3c 0f 90 2b 5a 04 4d f1 6c 8a 2f 0b 8c 33 c8 ee 06 3a 8e 89 95 86 02 94 d0 88 4e 42 77 23 65 61 4a d4 17 be 4c fa f0 4d 8a 47 ef b1 88 7e 83 ad 8f de 62 96 dc 20 3f cf 89 9c 44 Data Ascii: Rdut`a\|{;YcUc\sLE.F4dC`9?Dt{<}xZh`4#s:.d!B`Mw\|\|MlK:Qm[:,ENj\0%J@J<+ZMl/3:NBw#eaJLMG~b ?D
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: aa f5 23 b1 47 91 24 29 42 d4 1d 48 2d fe f3 c5 62 d1 a9 46 3b 7f a7 77 b4 4d 1b 2f f9 34 ed 62 3d 45 17 cb b9 b6 4f 0f 3f 2b a1 50 ac 39 06 c2 4a 14 11 41 fb 1d 43 df b9 d5 e3 d3 4a 51 37 4d fc 9d 6d bb fa fd ce c5 bf 4e 93 a4 8b d7 8b bf ff e7 b8 d3 e3 e8 38 cb d0 4a ae f2 e3 83 0f 38 63 90 c6 46 e1 57 12 b1 bb 48 81 46 e1 bd c7 b6 8e e4 e5 2f e3 ae df c5 9d ed d3 cb 73 e6 75 4b d3 2c 58 7c fa 13 b2 f1 26 72 76 4c 66 27 98 f9 29 a1 3a 8a 4c f2 7c 9b ad 17 fa fc cb 7f f3 29 bf f5 07 ef e1 3d 24 52 20 9b 8a 6b e3 9c b1 72 f4 07 1a 9b 68 aa e3 19 bd 5c 13 f0 68 05 e3 44 53 6c 0c 69 e6 22 66 64 0b 8b b5 86 a7 3f fe 23 92 a2 cf cd 17 5f 67 7c ed 1a 9f 3e 78 80 29 5b 92 50 d3 4e 2f 90 83 84 de 60 c4 f1 a7 3f 41 a4 7d c4 8d 4d 06 f7 5e 60 b0 77 0d 1b 34 c6 1e Data Ascii: #G$)BH-bF;wM/4b=EO?+P9JACJQ7MmN8J8cFWHF/suK,X\|&rvLf'):L\|)=$R krh\hDSli"fd?#_g\|>x)[PN/`?A}M^`w4
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: a2 d5 4f 22 20 91 a4 22 b2 cb 4d 08 18 99 40 ae b8 99 5a 6c 63 79 74 6e 50 ca f1 b5 7b 3d dc 45 45 fb b8 e2 37 df 1c f2 07 95 e3 f9 51 c5 f6 40 71 dc 78 ae 27 90 06 49 ea 1d 56 c2 5c 28 b2 c1 88 e1 ed 97 70 68 9c 34 48 1d 6d 86 11 6f 1c 57 31 ab 31 a4 90 48 25 58 9c 5d 30 be 71 9d bb af be ca 77 fe ab ff 07 8b a7 cf b9 f8 f4 3d 06 77 df c4 e1 20 4d 50 5a 91 be f0 1a 88 04 77 7e 4a 92 8f 08 cd 04 95 75 98 eb 2c c5 ba 08 fe 55 bd 0d 44 be 41 75 74 84 ec 67 e8 d1 00 16 f5 0a 1d 8c 8f b1 bd 42 27 28 9f 44 78 56 1a 53 05 9d b1 b8 76 8e ad 16 78 d7 70 f7 9b bf c9 d7 ff ea ff 86 24 ef 71 f1 ec 33 0e 3e fc 1e 87 9f fd 84 c1 de 6d 6e fe f2 9f 65 3e 28 50 42 d1 5e 5c 20 65 80 a4 a0 9d 4f 70 f5 82 24 ed 21 69 70 8b 09 21 d5 a8 de 75 f0 02 33 9f e1 6c 4d 40 c6 10 18 Data Ascii: O" "M@ZlcytnP{=EE7Q@qx'IV\(ph4HmoW11H%X]0qw=w MPZw~Ju,UDAutgB'(DxVSvxp$q3>mne>(PB^\ eOp$!ip!u3lM@
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: d1 c8 6e 9b c3 6a 9d c1 c0 9d c7 17 2e 5e e4 d8 d1 23 2c cc cf 63 a4 ad ec 6c 15 d5 ad 3e 76 af ef d7 cb 22 84 ba 96 cb 15 1c 59 96 b1 b7 b7 c7 70 34 c4 f7 7c 3a 9d 0e be e7 e3 79 5e e5 f4 9a e9 e8 4b 41 a0 54 05 d3 de 4d 6e 1e 7b ec 6b 24 71 c2 fc fc 02 77 dc 71 c6 41 d2 e2 04 32 98 64 bb 7c 55 3c 65 bd cd cc 20 a4 cb f8 0e 1a 21 8d 66 8b 56 bb 8d f2 14 3b 3b 3b 58 63 dc 83 68 b7 49 92 98 54 29 f7 46 d5 5e d0 29 fa ae ac de 24 ad 56 9b 85 85 05 06 83 3e 3b 3b 3b a4 59 c6 fa fa 3a be ef cd 46 af de 02 8e 17 b5 9d 4a b5 9a 2f ed 73 c6 25 b4 ed 1f f4 b8 72 f5 2a 0b f3 0b 9c b9 fd 36 c0 30 1e 8d ab 0b 58 00 46 58 14 a5 5f d2 cc 5c be 53 0c ae 99 49 c2 a9 2a 43 1c 28 61 56 f9 68 ab 98 58 53 04 3e d4 77 3f a5 d2 bd b2 24 08 30 26 ad 15 2c 0e 34 23 90 08 57 78 Data Ascii: nj.^#,cl>v"Yp4\|:y^KATMn{k$qwqA2d\|U<e !fV;;;XchIT)F^)$V>;;;Y:FJ/s%r60XFX_\SIC(aVhXS>w?$0&,4#Wx
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 6b ab 71 53 cd 40 e1 0e dc 9a 3e a0 ac 36 65 c1 ab af c6 6b 85 e8 a3 f2 21 32 0d 97 11 62 5a fd cd be f9 aa 86 00 9c 0a 08 b9 25 db ce d6 d2 ef 84 fc c3 65 a9 03 78 d9 1e 62 eb 55 c4 c6 4b c8 fe 36 6a d4 43 e5 29 22 9b e0 03 9e 75 fb a9 c4 5a 32 e1 52 da 22 61 51 59 8e 5f 84 29 e4 46 23 d3 21 2b f7 bd 99 24 9a 63 fb dc a7 18 ec ee 30 b7 b6 4e d3 87 c9 b8 c7 fe d6 1e 4b cb 8b a4 93 21 e3 e1 10 3b ec 71 79 2b e2 ae b9 21 09 96 b0 dc a7 49 c5 44 82 d0 19 3b 49 ca d6 24 21 4f 73 67 c9 28 ac 19 52 28 7c a5 90 d2 43 29 89 57 14 59 a1 a7 dd d8 cd f3 aa 98 42 a4 c0 0b 04 8a 84 6e 70 c0 b8 b9 42 9c 86 2c 28 cd a9 36 c4 bd 90 bd fd 94 4c 2b 44 d0 c4 33 82 50 a5 74 3a 21 ad 86 8f 0a 97 09 64 93 4c 74 d0 7a 99 17 9e fa 08 36 8b 89 fd 36 37 47 0a ad 33 b4 b0 6c 0d 62 Data Ascii: kqS@>6ek!2bZ%exbUK6jC)"uZ2R"aQY_)F#!+$c0NK!;qy+!ID;I$!Osg(R(\|C)WYBnpB,(6L+D3Pt:!dLtz667G3lb
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 29 86 07 5b 44 2a a0 d1 98 21 ea cc 13 ef af 55 5c 0e a9 b0 af d1 a7 8e 2c 74 52 d2 23 d1 04 53 42 30 eb 5c 09 07 2b c6 da 45 d8 8b 9a 6a 7a 5c 39 d9 ad 02 4e 8a a3 d3 7a 25 ba ab 67 72 50 f9 d8 cb a0 b1 5b 35 7b b5 7c 77 31 ed 73 af 18 f1 53 54 92 3c ed 53 e6 7f 4f dd a2 07 14 b5 55 42 4d 2b 50 66 95 b8 72 55 20 73 96 81 3f df 6c f9 15 a6 b1 e7 39 cb be 58 e9 16 a8 75 67 6b fe 7c a6 9a ea fa ce df a3 c5 ab a4 4f 4b 05 5a ab 95 4d a3 45 a9 bb ae 96 0c 85 ad 4a 48 57 eb c2 f3 fd 71 61 81 b0 94 45 ab 9e 5d 2e a4 28 b5 17 a5 22 d2 d9 f2 26 25 a4 98 1a 2a 17 7f 5e 4d 12 ea 23 f8 4a 50 50 dd 7a 44 65 bc 67 1a 37 e8 6a 14 a3 72 ca 90 e3 0c 5d be b8 f6 4f 94 9c fa 5e af ca 5e cf 47 2a 75 6f a6 cb 31 83 d6 9a 3c 94 45 d4 bc 96 59 f9 38 cb e7 21 a7 3f 95 23 24 8f Data Ascii: )[D!U\,tR#SB0\+Ejz\9Nz%grP[5{\|w1sST<SOUBM+PfrU s?l9Xugk\|OKZMEJHWqaE].("&%^M#JPPzDeg7jr]O^^G*uo1<EY8!?#$
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: c5 aa 56 14 9c f8 5c 9d 6e 5c f6 5f 69 c8 aa cb 87 2d 56 1f b5 71 7b 3d e9 cd d3 dd 72 7b b2 35 79 fa 9a 2b b3 3c ea 99 eb 85 93 ca 89 ba 12 5e 94 31 e1 05 b0 46 d4 8a bc a8 09 c9 cb 70 17 44 12 e0 32 3d f6 a3 27 5b c6 b9 d5 94 76 36 bf f1 59 9b df 34 4a 39 7f fd 56 52 15 60 37 15 d0 22 6a 22 38 59 ea d8 b4 f6 8a ef 38 a7 5c 21 2b 02 5d e9 31 bc 25 71 a7 4c d5 29 0a 73 b9 f4 9f 16 30 b8 62 c4 61 7c 3e b1 4f 41 72 85 3b ae 14 f9 15 82 98 22 3a d1 d6 f0 b1 a5 50 21 df 71 14 7e c9 02 f7 58 17 09 ba 32 15 aa 48 70 b3 3e 0b 57 78 11 4f 71 b1 28 c2 00 ea fb 1c 64 3d b6 b0 c2 56 e2 64 95 df fa ed 84 b5 39 3f 69 30 52 92 ca 00 3b 9e b0 7a fe 05 ba b3 33 a4 68 0e 1f 3b c2 1b ef bf 97 17 1e ff 3a e9 da 65 98 99 61 b1 d5 60 e5 dc 3d 5c bb 70 81 4f de b8 49 bb 11 30 Data Ascii: V\n\_i-Vq{=r{5y+<^1FpD2='[v6Y4J9VR`7"j"8Y8\!+]1%qL)s0ba\|>OAr;":P!q~X2Hp>WxOq(d=Vd9?i0R;z3h;:ea`=\pOI0
2024-05-15 22:36:54 UTC	14045	IN	Data Raw: f4 16 e7 99 9b 9d 61 6f e4 a9 6f ef 78 eb 03 a0 42 d6 36 b7 18 5f 98 b0 d0 ee 32 d3 d0 08 2d d9 1f f7 99 24 29 fd f1 88 96 56 f4 c2 90 fe a0 ef 6d 54 2a 24 d0 8a 40 64 64 3b 3b 88 a6 80 d9 06 a9 ee 11 ea 84 cd 6b eb ec dc 5c f7 ba 0a ad 68 08 57 ee 09 8d 13 c4 d6 d2 d0 92 66 e0 38 3b a3 18 a6 82 7b 17 32 ee 39 dc 60 a8 02 12 ed 98 d3 16 a7 34 4f 4d 02 5c 7f 93 40 4a ce 6f f7 98 39 32 c3 8b 4f 7e 96 c7 cf 9c e2 9e 07 bf 83 c1 41 9f 46 e7 0c c7 4f 5e e7 af fd d0 eb f8 dc 4b f0 c2 2b d7 99 9b eb e1 74 8b cc 65 4c 26 19 77 dc ff 7a ae bf f4 1c 7b bb 43 b6 76 07 cc cd 2f 10 06 7e ad 74 30 88 79 e0 dc 21 3e f4 c6 1e ad 5e 80 9d 3b ca e7 fe e0 f7 f8 ec ef ff 36 9d c5 90 d5 cd 80 66 3b a0 65 25 fb 43 c3 1d c7 bb 1c 6a 8c 39 e8 8f 73 f6 b4 64 94 e4 b8 4d 64 be c7 Data Ascii: aooxB6_2-$)VmT*$@dd;;k\hWf8;{29`4OM\@Jo92O~AFO^K+teL&wz{Cv/~t0y!>^;6f;e%Cj9sdMd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49849	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	663	OUT	GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_english.jpg?t=1714777083 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:53 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 211959 Last-Modified: Fri, 03 May 2024 22:17:31 GMT ETag: "6635627b-33bf7" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:53 GMT Connection: close
2024-05-15 22:36:53 UTC	16152	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 8b c6 32 6c e1 f9 37 7b 4b af c5 e1 d3 ba 9b 97 6f a3 75 f2 cb 8c aa 6a df 1b d5 d8 f1 ad 7d 9f b6 5a bc 53 a4 07 70 c8 fe 66 c7 77 d2 e9 60 d4 4d 0a 65 59 e6 3c fd 1e d3 76 3e a5 2a 1d 0e 25 5e bf 08 66 eb 7b fb 4f 1f aa 59 9e 40 8f 29 af 57 cd 5c dd dd b2 ef ab d9 9f c4 1d 2f 35 38 68 82 28 08 af 78 c8 f2 6d b5 68 a7 77 a1 79 9e bc 94 ba 26 4a f9 fe bb 90 f5 10 02 d9 91 88 f4 47 33 a7 0f 74 3a 97 3e 12 f1 a6 46 ba 90 20 d5 ba d5 db 68 5a 65 1f 62 f3 9f 47 95 bc a3 64 8d 92 8a 71 0c 15 c0 31 68 d4 34 b3 f4 9d bc cd 48 bb 18 61 b6 65 34 8c 88 d5 55 b3 26 09 9c f9 b6 4b 59 30 6c ba b7 a3 59 f5 d5 66 cf 8e 3e 77 3e a1 ba 8c 26 8d 74 bd 5d 14 08 68 13 32 0f 46 16 1a 72 55 af dd 6d e2 7a db 25 52 2c 8d 61 d9 1c c3 44 9a 1e 74 f9 2b d3 79 0e 9b 83 a5 15 65 35 Data Ascii: 2l7{Kouj}ZSpfw`MeY<v>*%^f{OY@)W\/58h(xmhwy&JG3t:>F hZebGdq1h4Hae4U&KY0lYf>w>&t]h2FrUmz%R,aDt+ye5
2024-05-15 22:36:53 UTC	2303	IN	Data Raw: 0a 25 65 65 04 7a 03 da 53 9a 1c 8d 60 53 62 68 4e 8c 15 86 35 7b e0 27 c8 5d d2 59 94 11 fb 4d 71 f3 ff 00 f1 92 20 01 0b b5 76 f4 3d 2b bf 21 df b8 18 18 1c e0 d4 2c f9 09 0b 4c 56 dc 64 36 49 4e 94 95 21 c9 2b 19 58 c2 03 08 29 3d 75 b2 61 4b 08 7a 8e 12 c3 58 96 bb c1 3b 49 50 b0 84 53 0e 49 08 f9 78 07 e2 67 ab dd 84 5c a3 39 4d 3e 40 74 28 f9 a7 c7 94 c1 80 f7 08 4b 1e 1c a7 95 d1 97 4b 20 4c 95 b2 ae cc 2f 50 d8 00 58 5b 2f dd 3d 3b 7a e7 2b 08 05 85 8e 83 a3 7a e5 12 b2 81 ea fe be cb 54 2d 0d 0a a7 a4 6e ee 1d 3d d0 b1 da 7b 06 70 b6 36 9d 11 9e 42 4c 7d 07 88 9e 9e a3 d4 eb 46 1b 0d 61 19 70 ee 10 57 11 0d 93 41 0b b4 ad 11 ed 95 b3 0c 9b 01 a7 ea 82 fa a0 8d 94 d9 f2 64 97 b5 49 27 7a ab e8 f6 fe 67 29 ff 00 49 72 25 30 f9 f5 ca 69 ca d5 9f e9 Data Ascii: %eezS`SbhN5{']YMq v=+!,LVd6IN!+X)=uaKzX;IPSIxg\9M>@t(KK L/PX[/=;z+zT-n={p6BL}FapWAdI'zg)Ir%0i
2024-05-15 22:36:53 UTC	16384	IN	Data Raw: 80 32 1a 89 ca 03 f0 2b d5 7d 87 51 d2 49 13 a6 e3 be f8 d8 d1 fa 37 f8 75 a3 fa 92 48 5a bb 89 4c 04 22 e2 83 ca 99 c7 3d c5 77 15 dc 54 64 95 fe 85 cc 44 b1 35 8d 4c 2d 06 bd 71 22 03 1d 6e 39 57 67 6b 0c cf 73 a6 f2 40 ae d0 b0 17 68 5d a1 5d 18 5d e5 0f cc 83 16 3b 51 79 51 b9 47 6c 85 f5 45 c8 99 1c a0 80 b0 a7 37 2a 78 7b 0e 72 03 32 9e dc ac 20 dc a8 da 42 c8 5f eb 22 66 73 85 27 a7 4b 3e 71 61 61 61 61 61 60 ac 20 b0 b0 8f 5c 78 40 58 ea 02 21 60 ac 2c 2e d4 c1 e7 d3 08 75 3e 68 a6 f8 0f 97 50 7a 1e a0 e1 03 d5 c3 ab 50 4e f5 e8 d0 9b e6 83 72 1b ea f7 14 c3 e6 ff 00 56 fa 02 11 01 37 08 63 a0 40 ac a6 94 d4 3a 04 3f 04 a1 d3 d1 12 88 45 14 51 45 14 51 45 14 7a 94 51 f0 1f c1 3d 41 44 fe 00 43 a1 71 5f ea 9c 53 06 4e ac 7e 56 c5 da 49 c2 bd 2e 24 Data Ascii: 2+}QI7uHZL"=wTdD5L-q"n9Wgks@h]]];QyQGlE7*x{r2 B_"fs'K>qaaaaa` \x@X!`,.u>hPzPNrV7c@:?EQEQEzQ=ADCq_SN~VI.$
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 0e 53 87 5c 26 1e 99 54 5b de e7 57 c0 65 7e e1 f4 cb e9 57 d2 a7 57 c0 8a 3e f3 1c 7d 8a df ea 8f f4 b1 3f d3 28 a6 fa bb d7 a6 50 47 d6 3f 5a 89 be 19 d4 49 dd 19 e8 0a ca 8b d3 3e 52 7a 47 fa 4a 7f a0 59 52 fa 22 53 fd 49 40 a9 3c d6 51 4e 3e 68 a6 fa d7 fd 6f 60 28 44 17 62 31 e5 7b 21 08 80 28 d7 69 3e c3 42 03 1d 1a 8a 77 46 b3 28 0c 74 08 a2 c0 57 b4 10 60 0b b0 2e c0 9d 10 2b d8 4c 8b 02 51 f9 40 4e 70 0a 47 39 a1 d1 7e 63 55 c9 c0 84 f6 79 31 85 e6 b5 2f 6c 39 c5 e9 f2 b5 ae 2c 89 c9 b2 46 d1 35 91 83 e5 d4 0c a6 b3 05 57 f5 6b f0 a5 aa d9 54 55 0c 60 6b 9c e4 cd 78 69 b1 5c 4c 9f 41 e1 32 8b 8a aa 3d b8 64 79 71 00 95 10 f6 d0 78 72 90 2a fe 96 23 f7 1a ec 82 14 4f cb 7c 2d 19 45 9d a4 8c af f4 08 14 51 fc 41 d3 bb 08 bd 37 a1 4c 72 2e 4e 72 c2 Data Ascii: S\&T[We~WW>}?(PG?ZI>RzGJYR"SI@<QN>ho`(Db1{!(i>BwF(tW`.+LQ@NpG9~cUy1/l9,F5WkTU`kxi\LA2=dyqxr*#O\|-EQA7Lr.Nr
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: 25 76 39 46 c7 77 71 e1 9a 3d 8e 5d 8e 5d 8e 5b 46 3b eb 7b 1c bb 1c bb 1c bb 1c b5 2d 71 b7 d8 e5 d8 e5 d8 e5 be 69 15 1e c7 77 76 39 76 39 35 8e ce 85 ae 30 76 39 76 39 76 39 6e da 43 c4 6e 0b b1 cb 97 31 c3 4f ae 96 a4 16 7e 4b d5 71 be 49 a5 e2 da 16 f1 da 3c b6 41 a2 df ed e4 9a 79 be 32 13 d1 d3 79 13 de dc f2 4e 07 67 61 b6 d5 54 b5 56 ad 88 2c 39 9c 56 48 8b 22 98 3d 57 20 b7 d1 7a a9 66 6b 04 91 99 1b bd 7f b7 1b a0 86 66 f2 2d 7d 76 44 ad ea eb de 77 35 d3 43 46 dd ca 51 db 8f 6b 50 6b ac 71 ad 53 35 1a e5 5f f7 4f aa 82 0f 79 58 a9 24 12 be 09 22 1a ed a4 75 1b 47 6b f5 30 fa 2d ed 17 dc af c6 e7 6c 27 e4 78 7f 2f 1d 98 d8 d7 48 c2 c2 db 09 b2 35 c3 dc 69 52 4e 0b 7d 55 76 10 76 8e ad 1e e3 75 2b a2 a9 f2 75 c2 c8 74 45 bf 45 6a c8 aa c9 39 0d Data Ascii: %v9Fwq=]][F;{-qiwv9v950v9v9v9nCn1O~KqI<Ay2yNgaTV,9VH"=W zfkf-}vDw5CFQkPkqS5_OyX$"uGk0-l'x/H5iRN}Uvvu+utEEj9
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: a7 ab 98 e2 f9 f5 d0 91 ef ee 48 c4 83 cf 5f 8e cd a7 e8 be d3 24 34 da 5b 5a e0 ee 36 e5 89 ed 96 70 e1 e6 5a e6 b9 17 10 72 8f 8f b7 bd 4b 55 cd 6e b9 b9 93 b8 2a d2 07 6c 61 6a 8c e0 b1 c0 a6 a6 a6 a6 a6 26 a6 a6 7a b1 35 35 31 35 04 d4 10 43 c0 40 78 ca ca f5 57 9c d2 f8 e9 cb 20 1a e7 2f e3 5c 86 b9 7f 1e d0 a1 89 90 8f 0c a5 e1 b2 7b 9d dd 36 ba a8 b6 f0 f1 f8 dd 06 e4 af 93 35 a2 f6 f9 ad 6c 63 7a f6 b6 59 a6 65 76 4b b2 af 0d 8a 2c 37 61 d3 73 16 d3 b6 78 8d 37 ec e8 6a 6b 6a e0 d5 f1 6a ba a8 bd 89 1c bf 87 97 3a bd 4b f6 4c ab 56 2a 71 46 3c bc 7c a3 96 e9 f8 5d 2f 92 fe e2 78 f7 26 d7 e9 3e ec 6a f0 69 7e 23 f9 37 fc af a4 e8 f7 cf ee 74 df b4 3a 85 2d 7b 2d 11 5e 10 2f cf 14 a4 45 1a 6d 66 c8 b5 30 c4 29 7b 31 15 ec c4 bd 88 95 b8 a3 6b 58 c9 Data Ascii: H_$4[Z6pZrKUnlaj&z5515C@xW /\{65lczYevK,7asx7jkjj:KLVqF<\|]/x&>ji~#7t:-{-^/Emf0){1kX
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 0d a1 a9 cd ad d0 15 ec 54 dd 44 f8 a0 d6 47 b8 e5 37 b7 0f 7d 39 1c be 81 c8 56 96 03 07 22 b7 11 31 b6 66 36 9b 89 bf bc ab 4d 7f 71 5b 7a fe 76 e3 4b 77 35 a7 5d ac 98 59 98 d5 89 ce 73 c9 4e 4d f4 f4 f0 04 56 32 9a 13 51 6e 54 d5 df 2a 8a b7 63 43 7b 5e 64 6b 0c 0e 6b e3 62 62 69 c2 68 08 0c 17 d6 f7 9d fc 78 21 e1 a1 ac 86 46 57 de 68 2d de 8b 8f 68 e6 d5 57 a1 5e 48 0e e6 1f 7e 48 38 cd 83 b7 d3 82 21 db 31 ef 8f 7f a4 b3 b3 85 b5 3f 85 8c 6d ea 2b 57 21 bd 2f 05 6e 39 d7 c8 2d 6b f9 f7 dc 28 64 9c 9f ee 04 c7 20 f9 a5 ad 7e ae bb a0 a0 db 5b 9a 52 1f e6 e8 2f e7 28 66 e9 12 6b f5 7d ad f8 9b e2 7e c8 f8 b7 db e7 64 57 fe df 7b 3f b8 74 70 32 5d a6 b7 6d 4e b5 7a 5b 9a 50 d7 1b ca 00 5f da d5 b5 0e c2 30 dd df dc 43 59 2f 27 f9 c4 31 d4 f9 d1 67 f8 Data Ascii: TDG7}9V"1f6Mq[zvKw5]YsNMV2QnT*cC{^dkkbbihx!FWh-hW^H~H8!1?m+W!/n9-k(d ~[R/(fk}~dW{?tp2]mNz[P_0CY/'1g
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: 28 1b b8 b7 a4 3b 46 95 dd 13 c7 e9 13 6f 97 ae 8b 83 26 c3 68 1a 37 ce 37 73 f9 c2 ed 8c 4e ff 00 41 01 bf d0 af 69 5d d4 80 24 3b a2 3b 4c c1 15 42 e1 a2 17 0a 14 c8 0e 09 ce 88 dc 75 c6 f9 ae 9f 08 df 13 a7 83 e3 96 16 4e 14 d4 c6 06 f8 93 71 0a 70 74 d0 78 49 32 1e 34 46 4a 65 4b 03 9a 40 91 c7 20 11 c3 0b 88 9e 5f 58 31 0e 98 27 28 11 49 7c f0 1c 1d c0 4e 07 ce 48 3f 9f ce 16 b7 9f d1 37 9a 76 5d c7 48 5a 37 f5 90 81 40 f5 da 26 e2 9c f1 42 d4 e8 3c 08 18 58 16 3c 50 b6 ee 23 e7 1b b9 fc e1 76 c6 27 7f a0 80 df e8 54 d7 3f b4 06 f1 3f ac ee 3e bf 7e b1 ec 1b 9f 05 3c 73 80 83 8c 2c 71 cf c0 cb e0 b3 ca ee d0 27 80 18 99 0c 2e 14 b0 1b 85 01 6e 78 18 a9 a9 c6 48 8b aa 30 37 04 c3 00 06 0f 86 4a 69 91 16 e4 80 f3 18 1c e0 3c be b8 3b 68 81 7a 34 7d e9 Data Ascii: (;Fo&h77sNAi]$;;LBuNqptxI24FJeK@ _X1'(I\|NH?7v]HZ7@&B<X<P#v'T??>~<s,q'.nxH07Ji<;hz4}
2024-05-15 22:36:54 UTC	14793	IN	Data Raw: dc d0 9a 31 3b ab b7 c1 54 50 d9 5a 86 e8 6e a5 c2 32 83 15 cd 5d ba 28 ec 82 69 2b 9f cb c5 fe 60 1d c0 2b d9 6f ff 00 11 f6 4f 6d a0 4c 50 01 f2 53 54 52 53 0a 8a 41 52 14 4e 9c 68 ab 07 54 1d 02 a0 e8 16 9d 02 69 74 85 31 52 14 0a 83 a2 94 28 15 02 98 54 1d 15 07 45 41 d1 03 0f 68 e8 17 b4 74 09 88 0c bd a3 a0 5e d1 d0 2f 68 e8 13 8b 47 40 bf 20 0e e1 16 b4 74 0a 42 13 0a 81 4b 00 04 03 5d 17 b2 df fe 23 ec 98 63 64 07 96 58 bc 53 5c 83 85 8d 30 3c 24 98 e0 74 e9 f2 58 c1 95 c3 cf e1 12 f0 81 12 9d d5 51 99 47 c9 0c 05 00 e8 0e 28 4f 54 f0 18 6a 88 e0 88 7a 23 6b a1 e4 82 bb 94 5f 1b 9f 07 cc 41 b2 8b 09 ad 20 c5 32 a2 9c 0b 61 27 82 a2 a2 a4 18 42 68 91 a4 28 a9 19 c7 b6 cd 2a b4 5a 2d 10 ee ac 37 c9 1c f2 0a 37 5d a7 ce 32 f0 26 32 53 53 4c 62 d1 ee Data Ascii: 1;TPZn2](i+`+oOmLPSTRSARNhTit1R(TEAht^/hG@ tBK]#cdXS\0<$tXQG(OTjz#k_A 2a'Bh(*Z-77]2&2SSLb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49850	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	630	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:53 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 10863 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-2a6f" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:53 GMT Connection: close
2024-05-15 22:36:53 UTC	10863	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af 9b c3 15 8f 87 9e Data Ascii: PNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49851	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	596	OUT	GET /public/javascript/applications/store/manifest.js?v=fwdI41xjQFw_&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "fwdI41xjQFw_" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=15545800 Expires: Mon, 11 Nov 2024 20:53:33 GMT Date: Wed, 15 May 2024 22:36:53 GMT Content-Length: 20152 Connection: close
2024-05-15 22:36:54 UTC	16032	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 76 61 72 20 43 4c 53 54 41 4d 50 3d 22 38 38 39 36 31 31 37 22 3b 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 61 2c 6e 2c 73 2c 64 2c 63 3d 7b 7d 2c 66 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 61 3d 66 5b 65 5d 3b Data Ascii: /** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/var CLSTAMP="8896117";(()=>{"use strict";var e,a,n,s,d,c={},f={};function b(e){var a=f[e];
2024-05-15 22:36:54 UTC	4120	IN	Data Raw: 34 35 37 22 2c 39 33 38 3a 22 34 63 32 36 32 61 61 33 32 35 64 65 34 33 36 66 34 65 62 32 22 2c 39 38 38 3a 22 39 36 39 37 66 38 31 63 62 65 65 62 38 63 64 39 62 33 64 63 22 2c 31 38 32 35 3a 22 38 34 31 66 62 63 62 39 64 35 36 37 33 33 32 62 36 37 34 63 22 2c 31 39 31 38 3a 22 32 36 65 31 36 65 38 32 36 66 37 31 61 63 62 65 30 31 34 65 22 2c 32 31 33 36 3a 22 61 65 66 34 36 32 61 66 66 64 39 39 34 36 35 63 30 39 61 62 22 2c 32 33 30 31 3a 22 37 31 61 37 32 30 33 36 37 62 66 38 36 39 30 33 35 33 35 35 22 2c 32 38 31 34 3a 22 61 35 34 32 38 61 30 38 37 65 32 32 37 65 62 38 33 30 30 32 22 2c 33 30 36 38 3a 22 33 64 34 64 36 62 31 39 64 63 66 39 62 61 36 39 65 35 38 61 22 2c 33 32 30 37 3a 22 64 63 63 39 65 34 36 32 36 62 64 39 38 64 31 63 62 34 62 66 22 2c Data Ascii: 457",938:"4c262aa325de436f4eb2",988:"9697f81cbeeb8cd9b3dc",1825:"841fbcb9d567332b674c",1918:"26e16e826f71acbe014e",2136:"aef462affd99465c09ab",2301:"71a720367bf869035355",2814:"a5428a087e227eb83002",3068:"3d4d6b19dcf9ba69e58a",3207:"dcc9e4626bd98d1cb4bf",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49853	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	405	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1846 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-736" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:54 UTC	1846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49852	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:53 UTC	409	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3777 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-ec1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:54 UTC	3777	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 81 06 40 a0 01 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49854	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	607	OUT	GET /public/javascript/applications/store/libraries~b28b7af69.js?v=OT1LgaWu5boa&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "OT1LgaWu5boa" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=15466862 Expires: Sun, 10 Nov 2024 22:57:56 GMT Date: Wed, 15 May 2024 22:36:54 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:36:54 UTC	15995	IN	Data Raw: 30 30 30 30 42 41 30 35 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 32 35 30 5d 2c 7b 38 30 37 35 31 3a 28 65 2c 74 2c 72 29 3d Data Ascii: 0000BA05/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[3250],{80751:(e,t,r)=
2024-05-15 22:36:54 UTC	15802	IN	Data Raw: 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 72 28 39 39 35 30 34 29 2e 76 65 72 73 69 6f 6e 2c 6e 3d 72 28 37 36 65 33 29 2c 61 3d 7b 7d 3b 5b 22 6f 62 6a 65 63 74 22 2c 22 62 6f 6f 6c 65 61 6e 22 2c 22 6e 75 6d 62 65 72 22 2c 22 66 75 6e 63 74 69 6f 6e 22 2c 22 73 74 72 69 6e 67 22 2c 22 73 79 6d 62 6f 6c 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 3d 65 7c 7c 22 61 22 2b 28 74 3c 31 3f 22 6e 20 22 3a 22 20 22 29 2b 65 7d 7d 29 29 3b 76 61 72 20 73 3d 7b 7d 3b 61 2e 74 72 61 6e 73 69 74 69 6f 6e 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 72 Data Ascii: >{"use strict";var i=r(99504).version,n=r(76e3),a={};["object","boolean","number","function","string","symbol"].forEach((function(e,t){a[e]=function(r){return typeof r===e\|\|"a"+(t<1?"n ":" ")+e}}));var s={};a.transitional=function(e,t,r){function a(e,t){r
2024-05-15 22:36:54 UTC	15836	IN	Data Raw: 50 50 5f 53 41 46 45 5f 53 43 52 49 50 54 5f 4c 4f 41 44 49 4e 47 3d 21 31 2c 67 6f 6f 67 2e 70 72 6f 76 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 67 6f 6f 67 2e 69 73 49 6e 4d 6f 64 75 6c 65 4c 6f 61 64 65 72 5f 28 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 67 6f 6f 67 2e 70 72 6f 76 69 64 65 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 69 6e 20 61 20 6d 6f 64 75 6c 65 2e 22 29 3b 69 66 28 21 43 4f 4d 50 49 4c 45 44 26 26 67 6f 6f 67 2e 69 73 50 72 6f 76 69 64 65 64 5f 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 27 4e 61 6d 65 73 70 61 63 65 20 22 27 2b 65 2b 27 22 20 61 6c 72 65 61 64 79 20 64 65 63 6c 61 72 65 64 2e 27 29 3b 67 6f 6f 67 2e 63 6f 6e 73 74 72 75 63 74 4e 61 6d 65 73 70 61 63 65 5f 28 65 29 7d 2c 67 6f Data Ascii: PP_SAFE_SCRIPT_LOADING=!1,goog.provide=function(e){if(goog.isInModuleLoader_())throw Error("goog.provide cannot be used within a module.");if(!COMPILED&&goog.isProvided_(e))throw Error('Namespace "'+e+'" already declared.');goog.constructNamespace_(e)},go
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 54 52 41 4e 53 50 49 4c 45 29 72 65 74 75 72 6e 21 30 3b 69 66 28 22 6e 65 76 65 72 22 3d 3d 67 6f 6f 67 2e 54 52 41 4e 53 50 49 4c 45 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 74 68 69 73 2e 72 65 71 75 69 72 65 73 54 72 61 6e 73 70 69 6c 61 74 69 6f 6e 5f 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 63 72 65 61 74 65 52 65 71 75 69 72 65 73 54 72 61 6e 73 70 69 6c 61 74 69 6f 6e 5f 28 29 3b 74 68 69 73 2e 72 65 71 75 69 72 65 73 54 72 61 6e 73 70 69 6c 61 74 69 6f 6e 5f 3d 72 2e 6d 61 70 2c 74 68 69 73 2e 74 72 61 6e 73 70 69 6c 61 74 69 6f 6e 54 61 72 67 65 74 5f 3d 74 68 69 73 2e 74 72 61 6e 73 70 69 6c 61 74 69 6f 6e 54 61 72 67 65 74 5f 7c 7c 72 2e 74 61 72 67 65 74 7d 69 66 28 65 20 69 6e 20 74 68 69 73 2e 72 65 71 75 69 72 Data Ascii: 00004000TRANSPILE)return!0;if("never"==goog.TRANSPILE)return!1;if(!this.requiresTranspilation_){var r=this.createRequiresTranspilation_();this.requiresTranspilation_=r.map,this.transpilationTarget_=this.transpilationTarget_\|\|r.target}if(e in this.requir
2024-05-15 22:36:54 UTC	12	IN	Data Raw: 28 65 2c 74 2c 72 29 7b 69 66 0d 0a Data Ascii: (e,t,r){if
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 28 6e 75 6c 6c 21 3d 3d 65 26 26 74 20 69 6e 20 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 27 54 68 65 20 6f 62 6a 65 63 74 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 6b 65 79 20 22 27 2b 74 2b 27 22 27 29 3b 67 6f 6f 67 2e 6f 62 6a 65 63 74 2e 73 65 74 28 65 2c 74 2c 72 29 7d 2c 67 6f 6f 67 2e 6f 62 6a 65 63 74 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 74 20 69 6e 20 65 3f 65 5b 74 5d 3a 72 7d 2c 67 6f 6f 67 2e 6f 62 6a 65 63 74 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 5b 74 5d 3d 72 7d 2c 67 6f 6f 67 2e 6f 62 6a 65 63 74 2e 73 65 74 49 66 55 6e 64 65 66 69 6e 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c Data Ascii: 00004000(null!==e&&t in e)throw Error('The object already contains the key "'+t+'"');goog.object.set(e,t,r)},goog.object.get=function(e,t,r){return null!==e&&t in e?e[t]:r},goog.object.set=function(e,t,r){e[t]=r},goog.object.setIfUndefined=function(e,t,
2024-05-15 22:36:54 UTC	12	IN	Data Raw: 6f 6f 67 2e 61 72 72 61 79 2e 0d 0a Data Ascii: oog.array.
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 64 65 66 61 75 6c 74 43 6f 6d 70 61 72 65 2c 21 31 2c 74 29 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 62 69 6e 61 72 79 53 65 6c 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 67 6f 6f 67 2e 61 72 72 61 79 2e 62 69 6e 61 72 79 53 65 61 72 63 68 5f 28 65 2c 74 2c 21 30 2c 76 6f 69 64 20 30 2c 72 29 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 62 69 6e 61 72 79 53 65 61 72 63 68 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 69 2c 6e 29 7b 66 6f 72 28 76 61 72 20 61 2c 73 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 73 3c 6f 3b 29 7b 76 61 72 20 6c 3d 73 2b 28 6f 2d 73 3e 3e 3e 31 29 2c 75 3d 72 3f 74 2e 63 61 6c 6c 28 6e 2c 65 5b 6c 5d 2c 6c 2c 65 29 3a 74 28 69 2c 65 5b 6c 5d 29 3b 30 3c 75 3f 73 3d Data Ascii: 00004000defaultCompare,!1,t)},goog.array.binarySelect=function(e,t,r){return goog.array.binarySearch_(e,t,!0,void 0,r)},goog.array.binarySearch_=function(e,t,r,i,n){for(var a,s=0,o=e.length;s<o;){var l=s+(o-s>>>1),u=r?t.call(n,e[l],l,e):t(i,e[l]);0<u?s=
2024-05-15 22:36:54 UTC	12	IN	Data Raw: 54 22 29 2c 67 6f 6f 67 2e 64 0d 0a Data Ascii: T"),goog.d
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 6d 2e 54 61 67 4e 61 6d 65 2e 53 4d 41 4c 4c 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 53 4d 41 4c 4c 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 53 4f 55 52 43 45 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 53 4f 55 52 43 45 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 53 50 41 4e 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 53 50 41 4e 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 53 54 52 49 4b 45 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 53 54 52 49 4b 45 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 53 54 52 4f 4e 47 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e Data Ascii: 00004000om.TagName.SMALL=new goog.dom.TagName("SMALL"),goog.dom.TagName.SOURCE=new goog.dom.TagName("SOURCE"),goog.dom.TagName.SPAN=new goog.dom.TagName("SPAN"),goog.dom.TagName.STRIKE=new goog.dom.TagName("STRIKE"),goog.dom.TagName.STRONG=new goog.dom.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49855	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	403	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	241	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Tue, 17 Nov 2020 23:33:19 GMT ETag: "5fb45dbf-e64" Access-Control-Allow-Origin: * Date: Wed, 15 May 2024 22:36:54 GMT Content-Length: 3684 Connection: close
2024-05-15 22:36:54 UTC	3684	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49856	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	420	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 291 Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT ETag: "649bb1ef-123" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:54 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49857	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	399	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 10863 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-2a6f" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:54 UTC	10863	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af 9b c3 15 8f 87 9e Data Ascii: PNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49859	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	592	OUT	GET /public/javascript/applications/store/main.js?v=hnor4TDzUtcX&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "hnor4TDzUtcX" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=15545780 Expires: Mon, 11 Nov 2024 20:53:14 GMT Date: Wed, 15 May 2024 22:36:54 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:36:54 UTC	15995	IN	Data Raw: 30 30 30 30 39 42 30 36 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 35 31 31 39 34 3a 65 3d 3e 7b 65 2e 65 78 70 Data Ascii: 00009B06/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[179],{51194:e=>{e.exp
2024-05-15 22:36:54 UTC	15818	IN	Data Raw: 6f 72 74 73 3d 7b 54 72 61 6e 73 69 74 69 6f 6e 47 72 6f 75 70 3a 22 5f 31 31 54 77 75 30 6f 34 56 2d 58 73 52 7a 66 34 61 38 69 50 58 52 22 2c 43 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 3a 22 5f 31 6b 6e 41 73 73 6c 54 35 4c 2d 48 7a 70 34 70 4b 72 63 50 38 4e 22 7d 7d 2c 32 32 38 37 31 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 41 70 70 3a 22 5f 32 75 48 59 74 53 42 4c 53 53 31 4d 78 46 6f 6e 6b 4f 58 72 30 4f 22 7d 7d 2c 38 32 32 35 32 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 53 68 6f 70 70 69 6e 67 43 61 72 74 43 6f 75 6e 74 43 74 6e 3a 22 5f 31 4c 58 44 67 39 31 69 49 6d 57 6c 64 34 2d 35 67 57 64 47 78 34 22 2c 43 61 72 74 43 6f 75 6e 74 42 75 74 74 6f 6e 3a 22 5f 32 46 6d 2d 33 58 6d 62 46 52 58 52 36 79 4f 5a 69 52 42 30 2d 64 22 2c 53 Data Ascii: orts={TransitionGroup:"_11Twu0o4V-XsRzf4a8iPXR",ContentWrapper:"_1knAsslT5L-Hzp4pKrcP8N"}},22871:e=>{e.exports={App:"_2uHYtSBLSS1MxFonkOXr0O"}},82252:e=>{e.exports={ShoppingCartCountCtn:"_1LXDg91iImWld4-5gWdGx4",CartCountButton:"_2Fm-3XmbFRXR6yOZiRB0-d",S
2024-05-15 22:36:54 UTC	7885	IN	Data Raw: 65 42 75 66 66 65 72 28 29 7d 4f 6e 53 6f 75 72 63 65 42 75 66 66 65 72 45 72 72 6f 72 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4f 6e 53 6f 75 72 63 65 42 75 66 66 65 72 45 72 72 6f 72 22 2c 74 68 69 73 2e 47 65 74 44 65 62 75 67 4e 61 6d 65 28 29 2c 65 29 2c 74 68 69 73 2e 6d 5f 63 61 6c 6c 62 61 63 6b 73 26 26 74 68 69 73 2e 6d 5f 63 61 6c 6c 62 61 63 6b 73 2e 4f 6e 4d 65 64 69 61 53 6f 75 72 63 65 45 72 72 6f 72 28 74 68 69 73 29 7d 4f 6e 53 6f 75 72 63 65 42 75 66 66 65 72 41 62 6f 72 74 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4f 6e 53 6f 75 72 63 65 42 75 66 66 65 72 41 62 6f 72 74 22 2c 74 68 69 73 2e 47 65 74 44 65 62 75 67 4e 61 6d 65 28 29 2c 65 29 7d 53 63 68 65 64 75 6c 65 4e 65 78 74 44 6f 77 6e 6c 6f 61 64 28 29 7b 69 66 Data Ascii: eBuffer()}OnSourceBufferError(e){console.log("OnSourceBufferError",this.GetDebugName(),e),this.m_callbacks&&this.m_callbacks.OnMediaSourceError(this)}OnSourceBufferAbort(e){console.log("OnSourceBufferAbort",this.GetDebugName(),e)}ScheduleNextDownload(){if
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 29 2c 74 68 69 73 2e 6d 5f 73 74 61 74 73 2e 4c 6f 67 44 6f 77 6e 6c 6f 61 64 28 74 2c 6e 29 29 7d 47 65 74 44 6f 77 6e 6c 6f 61 64 48 69 73 74 6f 72 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 5f 72 67 44 6f 77 6e 6c 6f 61 64 4c 6f 67 7d 47 65 74 41 76 67 44 6f 77 6e 6c 6f 61 64 52 61 74 65 28 29 7b 6c 65 74 20 65 3d 30 2c 74 3d 30 3b 66 6f 72 28 6c 65 74 20 6e 20 6f 66 20 74 68 69 73 2e 6d 5f 72 67 44 6f 77 6e 6c 6f 61 64 4c 6f 67 29 65 2b 3d 6e 2e 6e 44 6f 77 6e 6c 6f 61 64 4d 53 2c 74 2b 3d 6e 2e 63 75 62 44 61 74 61 3b 72 65 74 75 72 6e 20 65 3c 3d 30 3f 74 68 69 73 2e 6d 5f 6e 43 75 72 44 6f 77 6e 6c 6f 61 64 42 69 74 72 61 74 65 26 26 74 68 69 73 2e 47 65 74 41 63 74 69 76 65 44 6f 77 6e 6c 6f 61 64 73 28 29 3e Data Ascii: 00004000),this.m_stats.LogDownload(t,n))}GetDownloadHistory(){return this.m_rgDownloadLog}GetAvgDownloadRate(){let e=0,t=0;for(let n of this.m_rgDownloadLog)e+=n.nDownloadMS,t+=n.cubData;return e<=0?this.m_nCurDownloadBitrate&&this.GetActiveDownloads()>
2024-05-15 22:36:54 UTC	12	IN	Data Raw: 75 6d 43 6f 6e 73 65 63 75 74 0d 0a Data Ascii: umConsecut
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 69 76 65 44 6f 77 6e 6c 6f 61 64 47 6f 6e 65 73 28 29 29 2c 74 68 69 73 2e 4f 6e 53 65 67 6d 65 6e 74 44 6f 77 6e 6c 6f 61 64 46 61 69 6c 65 64 28 65 2c 47 2e 53 74 72 65 61 6d 47 6f 6e 65 29 29 7d 4f 6e 4d 65 64 69 61 53 6f 75 72 63 65 45 72 72 6f 72 28 65 29 7b 74 68 69 73 2e 44 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 76 61 6c 76 65 2d 70 6c 61 79 62 61 63 6b 65 72 72 6f 72 22 29 7d 47 65 74 43 75 72 72 65 6e 74 41 75 64 69 6f 41 64 61 70 74 61 74 69 6f 6e 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 5f 6d 70 64 3f 74 68 69 73 2e 6d 5f 6d 70 64 2e 47 65 74 41 64 61 70 74 61 74 69 6f 6e 42 79 54 72 61 63 6b 49 44 28 74 68 69 73 2e 6d 5f 73 74 72 41 75 64 69 6f 41 64 61 70 74 61 74 69 6f 6e 49 44 Data Ascii: 00004000iveDownloadGones()),this.OnSegmentDownloadFailed(e,G.StreamGone))}OnMediaSourceError(e){this.DispatchEvent("valve-playbackerror")}GetCurrentAudioAdaptationfunction(){return this.m_mpd?this.m_mpd.GetAdaptationByTrackID(this.m_strAudioAdaptationID
2024-05-15 22:36:54 UTC	12	IN	Data Raw: 69 73 2e 6d 5f 61 6c 6c 54 69 0d 0a Data Ascii: is.m_allTi
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6d 65 53 6e 61 70 73 68 6f 74 2e 53 65 67 6d 65 6e 74 52 65 63 65 69 76 65 64 28 65 2c 74 29 2c 74 68 69 73 2e 6d 5f 72 67 53 6e 61 70 53 68 6f 74 73 5b 74 68 69 73 2e 6d 5f 72 67 53 6e 61 70 53 68 6f 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 2e 53 65 67 6d 65 6e 74 52 65 63 65 69 76 65 64 28 65 2c 74 29 7d 4c 6f 67 53 65 67 6d 65 6e 74 44 6f 77 6e 6c 6f 61 64 46 61 69 6c 75 72 65 28 65 2c 74 29 7b 74 68 69 73 2e 6d 5f 61 6c 6c 54 69 6d 65 53 6e 61 70 73 68 6f 74 2e 6d 5f 6e 46 61 69 6c 65 64 53 65 67 6d 65 6e 74 73 2b 3d 31 2c 74 68 69 73 2e 6d 5f 72 67 53 6e 61 70 53 68 6f 74 73 5b 74 68 69 73 2e 6d 5f 72 67 53 6e 61 70 53 68 6f 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6d 5f 6e 46 61 69 6c 65 64 53 65 67 6d 65 6e 74 73 2b 3d 31 2c Data Ascii: 00004000meSnapshot.SegmentReceived(e,t),this.m_rgSnapShots[this.m_rgSnapShots.length-1].SegmentReceived(e,t)}LogSegmentDownloadFailure(e,t){this.m_allTimeSnapshot.m_nFailedSegments+=1,this.m_rgSnapShots[this.m_rgSnapShots.length-1].m_nFailedSegments+=1,
2024-05-15 22:36:54 UTC	12	IN	Data Raw: 6f 6e 20 6b 28 29 7b 63 6f 6e 0d 0a Data Ascii: on k(){con
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 74 20 65 3d 28 30 2c 72 2e 75 73 65 51 75 65 72 79 43 6c 69 65 6e 74 29 28 29 3b 72 65 74 75 72 6e 28 30 2c 70 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 28 29 3d 3e 65 2e 69 6e 76 61 6c 69 64 61 74 65 51 75 65 72 69 65 73 28 7b 71 75 65 72 79 4b 65 79 3a 5b 22 70 61 72 65 6e 74 61 6c 5f 72 65 71 75 65 73 74 73 22 5d 7d 29 29 2c 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 20 73 3d 28 30 2c 61 2e 62 59 29 28 29 2c 63 3d 6b 28 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 75 73 65 4d 75 74 61 74 69 6f 6e 29 28 7b 6d 75 74 61 74 69 6f 6e 46 6e 3a 74 3d 3e 28 30 2c 69 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 63 6f 6e 73 74 Data Ascii: 00004000st e=(0,r.useQueryClient)();return(0,p.useCallback)((()=>e.invalidateQueries({queryKey:["parental_requests"]})),[e])}function O(e,t,n){const s=(0,a.bY)(),c=k();return(0,r.useMutation)({mutationFn:t=>(0,i.mG)(this,void 0,void 0,(function*(){const

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49858	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	630	OUT	GET /public/images//gift/steamcards_promo_03.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	261	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 25286 Last-Modified: Wed, 28 Jun 2023 04:07:19 GMT ETag: "649bb1f7-62c6" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:54 UTC	16123	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 23 00 00 00 6b 08 06 00 00 00 3c 5c e4 98 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 62 5b 49 44 41 54 78 01 ed bd 09 a0 5c 45 95 3e fe d5 ed ee b7 e4 6d d9 f7 15 b2 27 ac 01 81 24 10 10 41 1d 51 40 01 57 56 1d 9d 11 15 77 c5 d1 01 74 66 dc c6 bf e3 82 3a 3f 11 82 e8 28 82 82 1b 9b 2c 41 92 90 10 96 ec fb f2 92 bc f7 b2 bc 7d df ba 6f fd 6b 39 a7 aa 6e bf 07 82 44 0d d0 05 9d ee 77 fb de ba 75 ab 6f 7d f7 3b df 39 75 0a 28 94 42 29 94 42 39 0a 8a c0 6b b0 4c 9d bb f0 c4 58 ca 25 52 8a 13 f5 df 42 c8 b5 b9 ac 78 bc 76 c7 ca b5 28 94 42 29 94 7f 48 79 cd 81 d1 c4 b9 0b ff 07 12 d7 0d f6 9d Data Ascii: PNGIHDR#k<\pHYssRGBgAMAab[IDATx\E>m'$AQ@WVwtf:?(,A}ok9nDwuo};9u(B)B9kLX%RBxv(B)Hy
2024-05-15 22:36:54 UTC	9163	IN	Data Raw: a5 6d d5 2c 67 e5 ee 46 5c 76 f2 24 ac d8 dd 40 b3 2b 64 02 46 de 79 d2 04 e3 75 d3 fb e9 f3 4c aa 1a 98 8f 69 d2 b0 52 d8 99 ea 7e 5d 4c 09 19 98 8f 01 84 12 3a 4b 6a 37 7f 63 c6 f1 e1 3d 66 97 79 81 5e c4 60 f4 62 ca 87 cf 99 8d 3f ac df 8f e5 3b 0f d3 4f 44 cb 0a 49 1f 6d 6d af 31 a6 ab b4 a0 65 fb 50 d0 67 ce b7 6b e7 b5 d9 36 c7 41 c6 1a 69 fa 4f 78 13 d9 2d 69 6e cd 3b 75 64 67 0b 8a 36 3f 6a be 6f 3d bc ef 76 10 2b 82 77 e5 1b d1 1a 05 30 3a ea 8b bf f3 ec 0c 10 37 1d 4b b2 09 26 cd 8a c4 1c e6 0f a7 13 b9 75 1c 5d 2e 62 b8 b4 ac d2 e5 ad 71 63 ed 37 eb 0f 9a 97 66 49 3a fb df 3b 68 49 64 ad ef fc 7a dd 41 33 8f 4c bb b2 57 ef 6d 36 b7 aa 0d c6 f5 a9 b5 07 94 41 98 89 8e d5 99 3d aa 1c a7 2b 91 f7 1d c7 8f 31 13 6a 5f 6c 69 ed ce 9a 81 62 a2 9a e9 Data Ascii: m,gF\v$@+dFyuLiR~]L:Kj7c=fy^`b?;ODImm1ePgk6AiOx-in;udg6?jo=v+w0:7K&u].bqc7fI:;hIdzA3LWm6A=+1j_lib

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49860	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	670	OUT	GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_mobile_english.jpg?t=1714777083 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 168027 Last-Modified: Fri, 03 May 2024 22:20:51 GMT ETag: "66356343-2905b" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:54 UTC	16152	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: c6 49 3e 27 c7 99 75 45 02 33 9f c7 ca 26 93 71 3b 32 84 3a 85 55 8e 2c 25 55 d1 fd 4a 66 f4 86 70 04 29 8a 4c 77 e8 8c a4 8a 0d d0 66 67 2d 80 52 70 cc ea 3d 71 12 dd 9f cb 27 3a 75 0c eb d3 3b 8b 88 98 3b c0 c5 36 2b d7 a0 0f 50 e9 d7 08 43 11 4e 83 e1 d0 71 42 9b b0 a0 3d bd 04 32 48 de 5c 91 04 80 76 7d 09 20 67 4d 89 85 76 d4 e2 ab f6 28 0c c2 d1 ae e6 bd ee 17 2c 96 e2 47 a7 0f 78 7c e5 f8 4b 45 88 4b 2a cd 74 e2 d6 6e 46 be a1 bf 59 73 14 d8 cd 56 8d db 0a a9 80 7a 93 e1 55 20 94 c7 4c c5 41 74 4a 5f 5c c7 ce 17 ec 40 54 95 8d 48 26 a7 81 f1 60 de b4 4e 2b d7 b1 ed 86 72 dc f6 c0 74 d4 4e 65 91 28 7a d6 58 ab 84 0b 31 ee 71 b9 63 7e c9 68 be b9 5c 7e c9 18 b4 14 4d ca 7e b0 59 cc 37 13 1d 10 4c a9 9d 52 9b bf d5 35 ea d9 a2 0f e4 ec 4f 1d 4b 24 25 Data Ascii: I>'uE3&q;2:U,%UJfp)Lwfg-Rp=q':u;;6+PCNqB=2H\v} gMv(,Gx\|KEK*tnFYsVzU LAtJ_\@TH&`N+rtNe(zX1qc~h\~M~Y7LR5OK$%
2024-05-15 22:36:54 UTC	3163	IN	Data Raw: 5b 35 4d 63 c9 35 32 14 06 96 36 53 0c fc c3 67 e0 05 54 87 a5 8a 59 71 68 fd a3 a6 6e 05 e2 c0 ea 55 93 17 2d 60 c2 ba 26 95 91 af a4 ad ba a9 a6 ec 53 fc 12 de fc 47 e2 2c 69 be d5 b8 c6 26 0f b5 3e 32 08 73 87 93 1c 5b e5 bd 08 34 fe 83 04 c7 54 e8 86 eb 8e b4 d5 44 aa cd 52 f5 bc e2 53 3a eb 57 d8 67 75 47 1f 78 eb 74 d9 1a bf 46 ad 44 5b ee 23 62 e8 e9 de 34 7d 46 8b 42 f1 1f 72 d5 2b 33 ff 00 6c bb 06 b3 65 b6 d7 39 df f5 f0 ff 00 67 59 79 33 b3 78 cf a5 75 2f 22 6b 35 1e 66 f0 be 93 27 61 a2 fd 6e c8 ef 38 5b 26 c6 fb 68 74 ab 6b 5c 14 dc 8b e5 d1 7c 18 a4 a2 28 26 ca cc 88 3e e4 7b 88 f0 92 e3 3f d9 f3 4d 15 a7 e3 be cb b5 2c ac 8d eb ed 8b 4c 50 24 b9 7b cc 4a bf 2b 75 9b 0d 77 35 11 24 cd bb a7 81 5f b0 3c 86 6b 0d 64 61 34 f3 57 3a 33 7b 1b a3 Data Ascii: [5Mc526SgTYqhnU-`&SG,i&>2s[4TDRS:WguGxtFD[#b4}FBr+3le9gYy3xu/"k5f'an8[&htk\\|(&>{?M,LP${J+uw5$_<kda4W:3{
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 35 ce 27 2b 2e 7f b7 2c e6 07 0a 75 67 35 ab 21 f4 33 c4 10 0d 2b c4 0a 7f 14 3e de 73 ed e0 4e 5e 1b 36 b2 c4 bc 71 f5 58 76 ca 71 2b 3e ca ad 35 78 6e 68 c5 5d 35 54 8a 4f b6 35 0e b0 f7 eb e2 da e6 f3 c3 0c e5 de ca 91 71 cb 3d 69 b2 6b d3 f6 26 73 90 46 24 85 a2 2a 3d 95 6e c8 ea 62 c5 f0 5d 15 e8 9d aa 9f aa 51 44 c4 ae 4c 99 8b f5 6b 74 a5 eb ce 7a ff 00 9d 4e 1b f5 fb b2 e4 fe a4 b6 e9 5d 03 f6 31 c5 7d ab a5 ef bc 9d e0 6e ce a4 fd 57 0e 9a e2 1f d8 af f9 d7 e1 ae 7f 9d 7e 1a 60 73 63 86 83 9f 74 fc 8d e3 be d5 e1 9f 10 79 77 c4 ea c7 12 c3 9a dc 35 1c a6 c4 25 21 50 92 89 b0 bb 63 f5 1f b2 e9 5a db 9b f1 bc d1 e1 d4 ca 4e f9 8f c4 36 09 43 72 fb 89 96 32 72 02 c7 a5 37 0f 36 03 90 ba 08 d9 cb ae 6f a3 ac 23 b4 d7 d9 16 d8 9b db 67 e5 07 1a 12 53 Data Ascii: 5'+.,ug5!3+>sN^6qXvq+>5xnh]5TO5q=ik&sF$*=nb]QDLktzN]1}nW~`sctyw5%!PcZN6Cr2r76o#gS
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 2e 15 62 7b eb f3 fe 6a c8 b6 a1 aa 89 a1 c7 38 17 e2 bb 88 a8 e2 20 06 80 b6 05 4a 80 bb 4d 48 d8 83 4c 64 dc 39 76 6e b8 d9 df d9 43 ec 62 cb d4 e5 fd ea 67 30 71 68 20 b4 81 7c 5b b3 1d bb 6f 5a 4d 33 e3 62 48 4a a2 da c4 d9 49 dd ba b6 f7 fe 6a f7 7d 34 8d 6a 0a 73 0a a1 a0 2f df f9 aa 46 88 60 b3 88 f7 5f b0 91 f4 eb ee 20 fd 97 fd 7a d1 ea a5 8e 31 2c 0e 05 a0 07 21 42 0f 89 5c 76 8d 84 57 f9 7d 3f 73 fe bd 7d c4 0b fa af fa f5 34 0e d2 e9 73 31 c4 7b b2 7f 16 a5 d3 0d 26 98 e7 61 69 f0 bc 22 84 29 f6 87 7d 26 87 99 48 c8 be 81 47 33 b1 ae 0e 68 5d a8 01 34 9a 9d 1e 9a 51 c0 39 87 d0 e2 3f b3 45 39 3c 4b fa ee f6 56 a1 ce 11 c3 00 7e 5f b3 04 1c 14 02 e2 5c 7b 46 5e ca 12 c5 2b 9b 20 da 09 07 bc 5e b5 6d d6 eb d9 3e 96 c5 99 9b e3 6f 02 5a 1a a3 ad Data Ascii: .b{j8 JMHLd9vnCbg0qh \|[oZM3bHJIj}4js/F`_ z1,!B\vW}?s}4s1{&ai")}&HG3h]4Q9?E9<KV~_\{F^+ ^m>oZ
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: 81 65 c2 55 d8 b5 76 11 41 ae 6f 85 6b 46 f9 8a 58 e2 50 7b c6 9a 58 5b 88 c0 9c 36 ed af 3a 67 06 c6 00 2a 14 94 36 54 04 a2 ec 07 11 4e cb e6 3b 56 5b e1 6b ac 09 38 1f 09 c0 6d a9 35 1a 89 0b a5 71 52 4f e5 87 48 8e 26 f1 27 60 1b 49 e1 5c aa 37 bd ce 25 be 02 e1 6b 0b 90 97 1c 2a 37 3d a1 a4 8b 2b 8d c7 7f a3 65 73 2e 6b 3a 1d 3c 11 87 7b ce 41 bc 94 52 80 5c a5 f7 63 5a 6e 63 13 fc 13 40 24 6a 39 c9 e2 0a 13 69 1b b7 8a f3 5a ec c4 63 e2 28 0a 63 8e 3c 05 ea 49 0c 92 10 d9 32 12 17 2e 65 44 c5 71 40 b5 99 e1 6e 8a 49 45 c4 8c 71 eb c7 1a 77 89 06 5f a4 71 ef dd 5a 60 e8 ce 6f 29 97 fe a8 a0 21 46 95 c4 d0 76 a9 e1 f2 37 6e ce ea bd a9 e5 8f f1 e0 2b ce f3 15 ee b9 a0 43 95 29 f2 4b 18 87 9a 81 e1 99 a2 fc 03 c7 ce 6f 5d c6 c3 4e d1 73 4d 3e 52 6e d7 Data Ascii: eUvAokFXP{X[6:g6TN;V[k8m5qROH&'`I\7%k7=+es.k:<{AR\cZnc@$j9iZc(c<I2.eDq@nIEqw_qZ`o)!Fv7n+C)Ko]NsM>Rn
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 70 17 6e 27 65 48 74 dc 93 59 20 61 47 65 86 47 21 dc 51 a5 0f 03 5f 8b 22 1c 9f 58 dd 7c ee 64 6c 67 93 20 79 0f 69 6b dc 1b 95 51 ad 2e f1 25 8a 5c 1a f1 72 1d 68 ff 00 c8 97 ea d6 b0 f3 cd 26 a7 4f 0b 1a dc aa d3 19 73 89 2a 99 db 70 00 ba 6d 22 b5 fa 8e 58 35 2f e6 31 b7 33 1a a1 d9 90 82 46 50 d5 24 b5 40 00 e2 98 e1 56 fc 3d ae ff 00 91 2f d4 ad 6e 8b 57 cb f5 50 41 23 03 c1 7c 72 30 66 6d b1 2d 00 2b 49 c7 1c b6 bd 3a 78 f4 33 cb 1f 94 d1 99 b1 bd c2 ca a1 40 22 d5 9c 72 bd 49 6a 63 e5 3d 3f 76 98 ba 72 27 64 6e b1 56 91 9a 43 bf 05 1e 8a e6 1a d3 c9 35 99 1c f2 1b f6 32 7b 8d f0 b5 3c 3b 80 3e 9a 8a 37 68 e5 6b 5c e0 09 2c 70 01 4d c9 24 59 2b df 97 f6 87 d5 a9 e2 87 49 2b a1 0e 39 48 69 2a 36 5c 04 36 c7 8d 43 3b 74 33 2b 1c 0f b8 ed 87 aa a0 f8 Data Ascii: pn'eHtY aGeG!Q_"X\|dlg yikQ.%\rh&Ospm"X5/13FP$@V=/nWPA#\|r0fm-+I:x3@"rIjc=?vr'dnVC52{<;>7hk\,pM$Y+I+9Hi6\6C;t3+
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: db 19 19 1b 4f f6 20 2f 3f 4e 1e 3b 5d d8 e4 70 93 2c 32 84 ea 48 b5 31 97 88 28 ea 28 ce a7 5e a2 49 61 cb 89 68 8c 1d c1 34 b0 99 6b 66 eb 7f 49 c7 d4 8a 47 e9 81 e5 f7 94 96 9c f7 19 54 f5 c5 d5 d1 11 20 12 4f 13 d4 a9 83 ce db ad 96 67 af 67 29 6e 0a 98 c1 52 10 f1 c9 04 a2 7a d4 a0 a2 bd a9 63 d4 2f 4c 8c 47 e2 3a 11 a5 e9 f7 37 93 68 d0 ca 35 57 6c 55 2c 7e 21 ac 44 96 fa 09 89 72 76 1e c6 86 22 fa 75 76 46 a0 7a 70 d4 ff 00 32 7e 0b a9 bf f6 8e 46 c4 10 53 cd 77 ed c9 8f 44 86 56 63 90 c0 de ae e9 4a cc ed 1b 02 d5 6d aa 3b 05 20 01 eb c4 19 ff 00 0e 6d fd 88 d4 e3 54 f7 55 29 e0 71 75 33 38 99 9c 6b d8 ca 53 68 0d ba d3 02 08 0c 75 56 d0 f4 b1 e0 2c 35 6b c4 aa 34 55 8e 18 d0 28 1e 80 05 50 00 fd 27 ae bc 0f af af 54 51 b6 bf af 55 3a f1 b6 bf 37 Data Ascii: O /?N;]p,2H1((^Iah4kfIGT Ogg)nRzc/LG:7h5WlU,~!Drv"uvFzp2~FSwDVcJm; mTU)qu38kShuV,5k4U(P'TQU:7
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: f2 51 eb a7 12 d5 97 76 79 01 61 9b b2 59 a3 cc 11 20 ec d8 86 ca f4 93 36 83 59 21 00 ff 00 b1 27 85 92 1c de ff 00 b3 51 62 b5 35 d6 4c e4 31 c8 a5 63 12 c3 ed c4 d7 13 a8 2b 06 12 03 a7 2d 34 d7 8c 7e e9 da 33 ef 5c fd cc 9d bb d1 5d c2 6e 7c fe 2e de 22 bd 2c 86 09 6b 45 67 1b 42 5b 2f 1b 5d 59 6a 46 ee ee da a2 33 74 f3 e5 c6 67 17 5b 09 1a c3 94 c1 66 b1 f8 fa b6 73 94 c4 74 f2 d9 1c 6d ca 35 87 cb 62 4d 71 d3 49 65 1c ea cc 20 60 da 2e 8d a7 18 4d 99 91 b3 43 19 9a c0 e2 b1 7b 7f 33 8f a5 18 bb 0a e6 36 ed 1a f8 4b d2 47 91 25 21 92 29 2e 24 be d9 d8 eb 20 05 80 00 03 c6 2e 5a 55 71 6a d8 a4 82 2e aa 91 3f 6a 58 63 b1 17 5c 8b 12 c9 10 36 56 68 0f 44 84 1f 9d f9 92 39 19 f1 bb 66 d5 17 8e b4 e9 05 da 16 a3 8c cd 4e bb 2b a3 48 f6 93 59 2e c9 13 b7 Data Ascii: QvyaY 6Y!'Qb5L1c+-4~3\]n\|.",kEgB[/]YjF3tg[fstm5bMqIe `.MC{36KG%!).$ .ZUqj.?jXc\6VhD9fN+HY.
2024-05-15 22:36:54 UTC	13933	IN	Data Raw: c9 6d fd cf 8b b3 8b c8 57 9a 34 90 a2 ce 9f b0 b9 58 ba b7 66 fe 3e c8 49 eb ca ba 3c 33 c6 8e a4 32 83 c6 f2 a3 d7 1c d6 b1 90 fd 18 cf 11 55 82 cf b2 cc 5a 8c b1 e8 69 57 b3 24 88 4e aa 5b 91 1a 12 38 ab 14 d2 35 2b 48 f0 49 ed ae af 61 fa 0b 2a 89 44 da bd 57 89 db 90 6e bf 9b ec e2 66 05 65 b7 0e 43 34 de e1 14 46 85 b2 17 24 36 8a ae ac dd 33 2c 69 cb 5e 95 60 7a 40 07 4e 33 44 3c b5 99 f1 50 3c b2 d2 93 da cf 31 f7 c8 07 7a 58 d4 b4 a0 06 3a 6b cf 53 c4 c4 da ca 93 db 94 ea 72 53 1f 44 63 cf e4 d0 ff 00 0f 14 08 2d d2 68 d3 20 68 de 9e de 3d 39 69 f6 71 34 a4 48 c2 18 26 9c a2 eb d6 cb 0c 6d 23 2a f5 68 3a 98 2e 83 e1 a9 e1 64 10 48 15 d1 24 1a b1 e4 ae 81 c6 a7 a7 4d 40 6e 7f 0e 23 88 46 c0 c8 48 07 ac 31 1a 0d 75 e9 d3 5d 39 71 f8 5f f8 17 5f ed Data Ascii: mW4Xf>I<32UZiW$N[85+HIaDWnfeC4F$63,i^`z@N3D<P<1zX:kSrSDc-h h=9iq4H&m#h:.dH$M@n#FH1u]9q__

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49861	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	393	OUT	GET /public/images/v6/colored_body_top.png?v=2 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	271	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 161187 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-275a3" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:54 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 03 20 08 02 00 00 00 f4 87 6e 24 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR n$tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 7d fd a5 4b cb 14 66 0e 4b 70 3f 10 70 94 3a 33 dc 4e e3 22 bd 58 96 32 c0 d8 73 e5 3b 2c 8d ba e4 1c 55 3c 23 11 b4 8c 27 a4 a5 4b 79 f3 cd 0c 78 78 92 dd 3b 8a d3 55 8e 30 68 e0 6e 32 22 d5 c4 c6 b8 86 30 18 cb b7 70 9e 42 c3 59 53 05 52 63 ff ab 1d a7 3b 8e 8c 15 40 a6 60 c9 81 89 eb 10 97 53 52 cf a2 0a d9 3f e8 48 e7 2b 44 94 ce 7e 32 df d1 e9 dc ae a7 5e f2 c2 de 09 f7 df 31 68 6f d0 e7 67 a6 0c 6c e1 77 dd c0 39 62 1c 15 c3 c7 21 b5 c6 be 0c fa 4e 81 c3 8c bd 77 26 8b 59 46 83 55 2c 19 f3 6f 86 20 a2 5d eb 9f 91 5d 28 e2 1d 6c e6 2a 1e 4d 74 7e 61 62 00 a6 9c 0a 50 9a 75 72 8a 74 90 f6 a4 9b 8b 1f f2 54 08 9a 98 90 ab 6b a2 59 db 0e 34 9f 9f b5 d2 c2 88 55 6d 6e 30 81 34 ff c0 2f 48 56 f3 cf 4b b9 87 63 df 29 59 09 e0 aa 58 5d 3b b2 8c af 32 36 59 Data Ascii: }KfKp?p:3N"X2s;,U<#'Kyxx;U0hn2"0pBYSRc;@`SR?H+D~2^1hoglw9b!Nw&YFU,o ]](l*Mt~abPurtTkY4Umn04/HVKc)YX];26Y
2024-05-15 22:36:54 UTC	2458	IN	Data Raw: 1d 84 9c bd f8 2e 08 cf 50 9b 75 fa b0 56 62 6f 1c 9a ed bf 45 08 0d 6f da c6 ac 6b 5e 05 1b 6b ed 72 7d d5 1e 6c 88 cb 80 64 37 59 1c 39 e2 9f 34 70 cf 0f 0c ff 44 c3 37 67 63 e7 27 63 51 cf 63 75 05 f8 4e 4a 33 55 4b 42 81 a2 50 94 37 fb b0 ee 78 5e e4 f2 65 e0 af ad 4a 55 05 48 23 56 bd 2d 33 c8 a1 c5 3d cd 7e 1d 6c 0f 40 43 82 a0 7b b3 86 be 01 93 aa 62 13 dd 42 d1 da 55 5d ab ed 9f c2 e5 f7 14 55 84 9a 3f 1e df 62 0d c9 86 dc 28 65 0c 87 1a 98 98 7a 58 f6 eb 25 0e e4 cf 8d c8 db ac eb 51 52 61 9c ba 19 8c 94 25 e3 82 39 e7 7d 4c 3b 7c 7c d6 37 b0 8c 9a c3 e9 ef 7c 3a 02 bd 1a f7 a8 52 9d ec a4 40 ae 7c ce 5c 41 76 68 59 09 7d a5 89 3b d5 ec 7e f3 27 c7 f4 80 3e 74 0e 59 ec 9c b3 18 b2 50 07 c5 34 4d 21 80 3d 14 bc 81 43 cf 65 c0 10 f5 5b 74 12 6b e9 Data Ascii: .PuVboEok^kr}ld7Y94pD7gc'cQcuNJ3UKBP7x^eJUH#V-3=~l@C{bBU]U?b(ezX%QRa%9}L;\|\|7\|:R@\|\AvhY};~'>tYP4M!=Ce[tk
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 86 aa 66 1a 6a 85 48 d5 47 0f 01 8a f3 ac d4 98 7a 51 72 8c dc 03 8e 16 5f f6 c8 b5 af 45 12 c4 d5 84 7d bb f5 c8 6a 96 e4 2e cb 13 ab 49 3d 8e cc b2 bc ee 97 70 75 69 c1 a9 61 1b d1 dd ec 3d 49 0b 98 0f e1 22 c7 33 cb d8 ed 88 b6 0f 1b 10 1a 09 76 cf 50 ea 50 48 99 f9 31 83 91 83 9c f7 c2 cf 0a cf d3 d3 0c a3 47 38 c2 99 eb bd 2e bc c4 d4 c4 11 4b 6e 87 8e 0b d8 74 5b 0b d2 94 99 17 c1 53 f4 e1 0d 4f cf 30 76 ad b0 72 de a7 69 2c 7a ec dd 76 7b d9 77 bf 6b a9 f5 07 2e 14 b7 e4 14 a3 78 b0 7b df 13 a4 d4 56 6b 9a f5 87 a8 79 54 9d d8 a6 7d 04 a4 1e be 20 c7 20 ab 06 6c 0a 34 8e 85 35 ec ef b3 90 e4 65 5d 47 41 14 9d b4 e7 b5 ed 01 fb 0f 8d ab a9 dd d1 4b 1a 86 80 83 f0 82 49 a1 7f 8b 88 db 15 8d c6 86 bb 28 de 77 ed cc dd 0e e7 d3 68 b3 d6 e1 26 2f f5 cb Data Ascii: fjHGzQr_E}j.I=puia=I"3vPPH1G8.Knt[SO0vri,zv{wk.x{VkyT} l45e]GAKI(wh&/
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 38 93 da c3 b5 9d 2a 26 c6 e4 c5 b8 97 5c 1f 0d 9b 81 fe 68 7b 0e f0 ca 24 9e ee 3d 94 aa 90 46 eb a0 ac 42 0e 2b 93 81 d9 7d 3c 0f 80 d9 16 7b d5 70 f0 89 d6 c2 7e f9 29 16 5a 9f 63 88 b2 0c c1 f9 36 58 65 5a e0 86 5e 90 ca b0 ce 10 e2 92 39 21 73 aa 5f 48 1a 17 26 87 54 82 0d 1d e2 87 4a 86 e0 a1 1f 6b 31 90 92 3d aa 55 56 e5 01 3d 12 ca c6 15 af 82 7d 8d 73 21 05 1a 4f ea 00 1e 69 3c 8c 50 93 f6 f2 45 7e a2 68 34 a2 d6 7a 24 06 60 25 8f aa 97 e7 e7 76 e1 2f 1b 1d bf 16 1c 0f 92 e5 90 1b 12 62 71 c7 a5 3e 43 b3 04 50 5c 80 43 39 eb 80 6e 30 1d 86 1c 0a 8d 75 b5 5a 86 2d ed 7d 6a 06 67 f8 b9 24 c7 c9 97 fc 3b b9 e5 07 c5 94 e4 bb c1 b5 9c 72 a2 98 b0 6c 49 fc 31 94 41 07 1d da 54 e5 3c 50 29 19 8e 85 f9 43 03 6f c4 18 0a 5a 5c 3b 2c f9 14 81 0c ec a1 26 Data Ascii: 8*&\h{$=FB+}<{p~)Zc6XeZ^9!s_H&TJk1=UV=}s!Oi<PE~h4z$`%v/bq>CP\C9n0uZ-}jg$;rlI1AT<P)CoZ\;,&
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: c2 c7 7b f1 d1 a2 21 41 d1 44 d9 f1 71 07 2a ce 17 d7 25 91 e5 8f 24 a6 8d e1 46 82 70 77 99 2d ae 6f e3 72 d8 90 62 d3 68 3b ae ea 19 6e fc 80 2c da 0a a3 d5 cc 24 95 69 4a bb b7 63 f0 8f 33 7f 3e 8a fa 41 60 d5 ae d9 c7 d8 78 2f 03 5c 7b ec 61 a4 75 4e 2b f7 d6 63 eb 0f 54 09 8c f7 ae a2 f1 d0 7e 1c 55 6a 11 b0 34 8d f9 41 f5 eb e2 39 b1 a5 07 b2 87 e8 eb f2 4f 3e 7a 49 22 97 12 ac 4f 7e 56 16 c6 a8 63 e6 40 bf 99 ca c6 cf 7a 22 f3 e6 c5 a0 3f 89 a7 5d db 5a b2 a5 07 53 7b 7b e7 e4 11 6f 56 ac a0 4d 21 48 83 c3 3c 2e e3 f0 77 56 0f 6b f6 90 bc 9c 25 78 53 03 93 34 cb f0 19 b9 c7 25 d6 5c 7f a6 aa 8f 4d 48 ce 37 68 e5 47 59 78 73 c3 12 e8 19 ee b8 a0 ff 20 6b cd 72 9f a9 69 2a 0f ab 95 53 33 06 dd 2d 24 06 f7 4b 60 5b 48 54 4c a1 14 1f 3e 1a 0d bc 75 e9 Data Ascii: {!ADq%$Fpw-orbh;n,$iJc3>A`x/\{auN+cT~Uj4A9O>zI"O~Vc@z"?]ZS{{oVM!H<.wVk%xS4%\MH7hGYxs kriS3-$K`[HTL>u
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 52 50 fe f0 cc 67 8f 46 48 0c a1 5b ab 83 f3 13 fb 4f 12 0d 70 ac ae 3e 2b 90 c1 9c 18 e5 94 c2 3c d6 ec 0b 4f 0a e7 f4 99 6b b3 4e e8 44 5f 36 c1 9a af 59 c5 ac 49 c5 d2 18 f9 ea 71 7c 6c b6 ac d1 3e bd b3 f3 50 f5 04 b8 b2 55 ef c2 c1 d0 ef fb 36 04 56 89 b3 92 7f fe 0e a6 19 ba 79 68 d8 7b c7 3d 0a 1e d3 6b 9c 04 9a 65 b9 56 14 68 1e 8f 61 2a ee a7 4f ec 23 ac ef ae 53 6a e9 e6 46 0d 57 a3 b3 ae 42 33 db 3a 2c d3 6e 71 f9 be f9 f8 bb 9f 77 f1 b6 c3 ce 64 31 20 5b ef eb 02 e7 c7 67 bd b6 e4 64 28 da 9d ba b3 e9 be 21 70 f8 c2 21 bf e7 a1 88 2e 1b 80 35 6c 53 d0 f4 5a c0 ec 69 82 d8 16 af 35 cc d0 14 5e 89 87 c9 21 eb 3b 6b af fd 45 dc a8 1f 3f e7 b3 46 68 ed 3d b6 c8 a8 1d f5 c7 0f 21 de ac 0f 77 4c b2 d7 13 cf 20 b5 18 ad 1e 84 b1 2e 46 c9 23 e4 99 df Data Ascii: RPgFH[Op>+<OkND_6YIq\|l>PU6Vyh{=keVha*O#SjFWB3:,nqwd1 [gd(!p!.5lSZi5^!;kE?Fh=!wL .F#
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 81 28 b6 0e a5 e7 e0 15 8e 14 b3 1d 30 34 a4 04 79 9d 2c 67 9f 03 8b ed 61 32 2b 3a 0c 62 8a a5 6c 4b 25 77 43 f5 72 bb 87 7f c3 b5 51 c2 c3 7f fe fb 7f ff 9b 38 6d 2c a2 4f e3 13 f5 0c 77 78 0f ca 23 8a 8a 6e ca c0 83 b0 b0 bc 86 71 21 75 81 32 a5 34 3d 88 c0 2f b5 46 48 c3 8c 5b 17 ae 36 7f 19 8e 1c 88 2e 2b 88 e9 e0 d3 bc e0 3b a7 76 e5 86 8d 12 0a ac c5 94 85 84 6e 61 e3 10 0b 6e 44 0a 77 da de 8f 45 04 f7 65 37 2b a2 f4 39 a4 c9 20 af 29 5a 5c 89 b6 7d 8a 37 c9 b7 d8 2a d4 0e a7 f5 99 6c 6c fd ae f5 6b dc c8 33 64 8d e8 af d1 69 9a be 42 72 ac 2b 82 79 2f 52 e9 28 61 42 a4 9b d0 70 52 23 6f 85 8c 31 8e 1b 19 1b 8b 64 0d c3 85 19 57 de 0e e1 f3 30 97 28 85 d5 ff 48 0c 1a 48 a9 fe 45 18 ac 43 42 f5 82 82 ea 35 6e 63 7c aa f4 bf 35 fe d2 be fe 88 b2 bc Data Ascii: (04y,ga2+:blK%wCrQ8m,Owx#nq!u24=/FH[6.+;vnanDwEe7+9 )Z\}7*llk3diBr+y/R(aBpR#o1dW0(HHECB5nc\|5
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: 7f fc d1 38 66 a2 e3 e5 19 a4 14 66 08 b8 73 82 a7 37 68 b2 d2 c3 a0 a5 55 21 76 dd 0e 0e e3 35 ee d3 07 a6 92 02 5d ca 0c 8e dd 8a 88 d5 0d f7 ef 66 f5 10 91 23 58 a8 44 21 a9 07 34 22 25 55 ce 2e de 27 8e 26 7d 95 41 b7 cf df 88 fc f3 4a a9 78 76 fb fd 0d b3 29 65 85 c6 bc f1 ce eb 71 09 40 e1 24 9a ef 8c ee bc 6a 64 82 0c 0a f5 d0 ea 9b b0 47 d9 e5 5c 4f f4 b1 51 b5 dd b9 d4 e6 b4 81 4d d1 2a 7c 80 7e cc 49 bd ce de 89 72 5c 02 56 c7 3f 74 0f 50 34 98 36 c5 9c 82 c4 26 c9 6a 48 f1 6c 00 da 0c b8 49 af 6b b1 f7 e4 5a 73 07 1a 3f 85 f6 6c 17 c3 31 11 a3 da fd 4a d4 a5 7e b4 01 7f b3 51 c4 1a 3d d1 11 7e 13 59 0e ae 46 42 89 7d 8c 15 84 3e 0f 5a ca 99 c6 62 4c 6b f1 72 48 79 42 d6 6d 89 59 99 11 7d 07 58 25 08 52 95 80 d1 79 e6 53 c3 0c 25 65 30 84 0c 0c Data Ascii: 8ffs7hU!v5]f#XD!4"%U.'&}AJxv)eq@$jdG\OQM*\|~Ir\V?tP46&jHlIkZs?l1J~Q=~YFB}>ZbLkrHyBmY}X%RyS%e0
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 3c e1 9f b8 36 be fb 19 0e eb 3a c1 fb 00 80 d3 6a 4f 84 6f 7a 96 c9 62 7b 51 53 82 2f 60 05 40 2a 86 8c 94 ae d9 a4 34 bf b8 9f 8b 9c 2f 3b 58 37 2f 62 1c ac 22 38 5e ff 9b 99 ef 44 cb f8 6f fa c0 f6 e0 13 22 4b 6c 29 52 be 1c b3 12 e5 a6 14 86 77 73 f8 5e 56 4b a8 7b be 6c be a3 6d 16 9a 30 42 f9 77 4d a4 f4 72 f0 9b 88 c4 16 13 58 34 a6 dc 27 c4 e0 f6 ed 2d f6 a1 17 37 56 fb 45 01 f4 70 fd b8 a8 b7 ff 67 79 12 6a 4b 45 5d 08 74 60 aa 4f ff fb 9f e2 75 37 58 7f 34 02 30 d7 e3 92 d5 2c 5d ab de 43 bb c3 f1 90 83 04 f7 83 fb 9b 37 9c 40 a1 5c 5a 0c d6 35 dd f2 04 48 24 07 15 8a 12 a1 c1 92 86 14 c4 cf 6a 8a 4b 67 de 8a ce 06 8f fb 8f 59 49 f3 35 cf cf c5 b7 a9 74 1e 52 04 ea c1 8b 72 55 3c 04 77 e1 c1 1f 94 7a dc 2e 8a ee 28 24 71 24 3d 06 25 be 0f 1d 4f Data Ascii: <6:jOozb{QS/`@*4/;X7/b"8^Do"Kl)Rws^VK{lm0BwMrX4'-7VEpgyjKE]t`Ou7X40,]C7@\Z5H$jKgYI5tRrU<wz.($q$=%O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49862	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	606	OUT	GET /public/images/blank.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 807 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-327" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:54 UTC	807	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f7 00 00 ff 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49863	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	625	OUT	GET /public/images/mobile/ResponsiveChevron.svg HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	240	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Wed, 28 Jun 2023 04:07:19 GMT ETag: "649bb1f7-205" Access-Control-Allow-Origin: * Date: Wed, 15 May 2024 22:36:54 GMT Content-Length: 517 Connection: close
2024-05-15 22:36:54 UTC	517	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 22 20 68 65 69 67 68 74 3d 22 31 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 20 31 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 70 61 74 68 20 64 3d 22 4d 31 2e 35 38 31 32 31 20 31 32 2e 37 35 30 38 43 31 2e 34 30 39 20 31 32 2e 39 31 32 31 20 31 2e 31 38 39 38 32 20 31 33 20 30 2e 39 33 31 35 30 37 20 31 33 43 30 2e 34 31 34 38 37 33 20 31 33 20 30 20 31 32 2e 36 31 38 39 20 30 20 31 32 2e 31 33 35 33 43 30 20 31 31 2e 38 39 33 35 20 30 2e 31 30 39 35 39 20 31 31 2e 36 37 33 36 20 30 2e 32 38 39 36 32 39 20 31 31 2e 35 30 35 31 4c 35 2e 37 36 39 30 38 20 36 2e 34 39 32 36 37 4c 30 2e 32 38 39 36 Data Ascii: <svg width="8" height="13" viewBox="0 0 8 13" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1.58121 12.7508C1.409 12.9121 1.18982 13 0.931507 13C0.414873 13 0 12.6189 0 12.1353C0 11.8935 0.10959 11.6736 0.289629 11.5051L5.76908 6.49267L0.2896

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49864	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	399	OUT	GET /store/steamdeck/steamdeck_promo_08.png?v=2%20alt= HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 171987 Last-Modified: Tue, 13 Feb 2024 23:26:52 GMT ETag: "65cbfabc-29fd3" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:54 UTC	16153	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f5 00 00 00 c9 08 06 00 00 00 3a 87 ab 73 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0d c2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 30 3a 30 31 3a 35 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDR:spHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899, 2023/06/25-20:01:55 "> <rdf:R
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: c8 88 5a 96 a1 97 a5 f8 da fa d4 4d d2 de 08 15 2c ad 30 7c 7b a6 b2 6d c2 e9 97 6a af f5 4c bd 10 82 f5 b5 0d 6e df bd c3 9d db b7 e9 f4 ba 8c 47 63 5e 7b ed 35 8e 4f 4e 98 4e a7 58 63 9e b3 83 ad 63 94 14 81 55 9f 76 3a 0c 87 43 ae 5c b9 c2 de de 1e 9f fd ec 67 78 f1 c5 17 78 f7 dd 77 78 70 ff 01 f3 d9 ac da e8 c1 78 63 c5 fa b0 25 15 bb d4 b0 ae ad 34 3f 24 8d 5d ca 20 02 94 a4 a0 23 7c 59 e2 f3 2c 5c 68 da 47 6e 5f 43 3e f8 21 f6 e0 21 7a fb 1a d1 ee 75 92 bd 6b a8 4e 1f 5f c1 ec 28 d5 90 01 85 08 d5 bf b7 d5 28 48 61 c0 3a 10 a1 c7 6d e7 0b 7c 69 9b ac b5 b1 8b 6d e1 48 b5 f4 29 52 21 94 c6 37 95 7c 08 ce b5 f1 8e a4 ad 73 b0 e4 4f d4 46 16 15 1d af 81 db 6b 52 a4 a8 48 93 42 8a 50 81 75 83 be 72 9e 2d c2 fb d7 0e 80 ce 36 f0 6b ad 43 e0 c4 b2 6a 11 Data Ascii: ZM,0\|{mjLnGc^{5ONNXccUv:C\gxxwxpxc%4?$] #\|Y,\hGn_C>!!zukN_((Ha:m\|imH)R!7\|sOFkRHBPur-6kCj
2024-05-15 22:36:54 UTC	3050	IN	Data Raw: 52 a2 d2 a4 9f fc 03 64 df fa 75 a4 f3 74 85 60 61 0d e3 1f 7c 9b ee b5 7b c4 1b 3b c1 df 59 d6 12 63 55 bf ba 92 a4 94 c2 f3 e8 e1 63 8c 12 5c bd 73 9b bc b0 4c 9c 45 2e 46 08 9d e0 f2 8c e9 34 e7 64 16 98 be 43 0d 9d 18 ba 91 60 ad ab e8 a7 39 c5 fb 3f e0 44 c3 ab 7f ec cf 92 74 7b 3c 7d f3 bb 78 0c 5a 86 b9 e0 e9 68 c4 60 34 23 de ea 73 fb e5 8f f3 ed af 7f 95 c5 e9 88 d9 e1 88 de d6 3a 2e d2 64 85 21 cf 42 a5 60 4d d0 f1 97 91 c6 77 12 7c 11 7c b5 83 4d 6c 4b f0 d2 06 85 b0 3a 51 6d ec 5b a3 b8 3a fc 2c de 96 98 45 4e a4 e2 6a 5c 30 e8 87 0b 25 82 4a 9a b7 a8 b2 40 4a 8f f0 86 3c 0f 90 2b 5a 04 4d f1 6c 8a 2f 0b 8c 33 c8 ee 06 3a 8e 89 95 86 02 94 d0 88 4e 42 77 23 65 61 4a d4 17 be 4c fa f0 4d 8a 47 ef b1 88 7e 83 ad 8f de 62 96 dc 20 3f cf 89 9c 44 Data Ascii: Rdut`a\|{;YcUc\sLE.F4dC`9?Dt{<}xZh`4#s:.d!B`Mw\|\|MlK:Qm[:,ENj\0%J@J<+ZMl/3:NBw#eaJLMG~b ?D
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: aa f5 23 b1 47 91 24 29 42 d4 1d 48 2d fe f3 c5 62 d1 a9 46 3b 7f a7 77 b4 4d 1b 2f f9 34 ed 62 3d 45 17 cb b9 b6 4f 0f 3f 2b a1 50 ac 39 06 c2 4a 14 11 41 fb 1d 43 df b9 d5 e3 d3 4a 51 37 4d fc 9d 6d bb fa fd ce c5 bf 4e 93 a4 8b d7 8b bf ff e7 b8 d3 e3 e8 38 cb d0 4a ae f2 e3 83 0f 38 63 90 c6 46 e1 57 12 b1 bb 48 81 46 e1 bd c7 b6 8e e4 e5 2f e3 ae df c5 9d ed d3 cb 73 e6 75 4b d3 2c 58 7c fa 13 b2 f1 26 72 76 4c 66 27 98 f9 29 a1 3a 8a 4c f2 7c 9b ad 17 fa fc cb 7f f3 29 bf f5 07 ef e1 3d 24 52 20 9b 8a 6b e3 9c b1 72 f4 07 1a 9b 68 aa e3 19 bd 5c 13 f0 68 05 e3 44 53 6c 0c 69 e6 22 66 64 0b 8b b5 86 a7 3f fe 23 92 a2 cf cd 17 5f 67 7c ed 1a 9f 3e 78 80 29 5b 92 50 d3 4e 2f 90 83 84 de 60 c4 f1 a7 3f 41 a4 7d c4 8d 4d 06 f7 5e 60 b0 77 0d 1b 34 c6 1e Data Ascii: #G$)BH-bF;wM/4b=EO?+P9JACJQ7MmN8J8cFWHF/suK,X\|&rvLf'):L\|)=$R krh\hDSli"fd?#_g\|>x)[PN/`?A}M^`w4
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: a2 d5 4f 22 20 91 a4 22 b2 cb 4d 08 18 99 40 ae b8 99 5a 6c 63 79 74 6e 50 ca f1 b5 7b 3d dc 45 45 fb b8 e2 37 df 1c f2 07 95 e3 f9 51 c5 f6 40 71 dc 78 ae 27 90 06 49 ea 1d 56 c2 5c 28 b2 c1 88 e1 ed 97 70 68 9c 34 48 1d 6d 86 11 6f 1c 57 31 ab 31 a4 90 48 25 58 9c 5d 30 be 71 9d bb af be ca 77 fe ab ff 07 8b a7 cf b9 f8 f4 3d 06 77 df c4 e1 20 4d 50 5a 91 be f0 1a 88 04 77 7e 4a 92 8f 08 cd 04 95 75 98 eb 2c c5 ba 08 fe 55 bd 0d 44 be 41 75 74 84 ec 67 e8 d1 00 16 f5 0a 1d 8c 8f b1 bd 42 27 28 9f 44 78 56 1a 53 05 9d b1 b8 76 8e ad 16 78 d7 70 f7 9b bf c9 d7 ff ea ff 86 24 ef 71 f1 ec 33 0e 3e fc 1e 87 9f fd 84 c1 de 6d 6e fe f2 9f 65 3e 28 50 42 d1 5e 5c 20 65 80 a4 a0 9d 4f 70 f5 82 24 ed 21 69 70 8b 09 21 d5 a8 de 75 f0 02 33 9f e1 6c 4d 40 c6 10 18 Data Ascii: O" "M@ZlcytnP{=EE7Q@qx'IV\(ph4HmoW11H%X]0qw=w MPZw~Ju,UDAutgB'(DxVSvxp$q3>mne>(PB^\ eOp$!ip!u3lM@
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: d1 c8 6e 9b c3 6a 9d c1 c0 9d c7 17 2e 5e e4 d8 d1 23 2c cc cf 63 a4 ad ec 6c 15 d5 ad 3e 76 af ef d7 cb 22 84 ba 96 cb 15 1c 59 96 b1 b7 b7 c7 70 34 c4 f7 7c 3a 9d 0e be e7 e3 79 5e e5 f4 9a e9 e8 4b 41 a0 54 05 d3 de 4d 6e 1e 7b ec 6b 24 71 c2 fc fc 02 77 dc 71 c6 41 d2 e2 04 32 98 64 bb 7c 55 3c 65 bd cd cc 20 a4 cb f8 0e 1a 21 8d 66 8b 56 bb 8d f2 14 3b 3b 3b 58 63 dc 83 68 b7 49 92 98 54 29 f7 46 d5 5e d0 29 fa ae ac de 24 ad 56 9b 85 85 05 06 83 3e 3b 3b 3b a4 59 c6 fa fa 3a be ef cd 46 af de 02 8e 17 b5 9d 4a b5 9a 2f ed 73 c6 25 b4 ed 1f f4 b8 72 f5 2a 0b f3 0b 9c b9 fd 36 c0 30 1e 8d ab 0b 58 00 46 58 14 a5 5f d2 cc 5c be 53 0c ae 99 49 c2 a9 2a 43 1c 28 61 56 f9 68 ab 98 58 53 04 3e d4 77 3f a5 d2 bd b2 24 08 30 26 ad 15 2c 0e 34 23 90 08 57 78 Data Ascii: nj.^#,cl>v"Yp4\|:y^KATMn{k$qwqA2d\|U<e !fV;;;XchIT)F^)$V>;;;Y:FJ/s%r60XFX_\SIC(aVhXS>w?$0&,4#Wx
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 6b ab 71 53 cd 40 e1 0e dc 9a 3e a0 ac 36 65 c1 ab af c6 6b 85 e8 a3 f2 21 32 0d 97 11 62 5a fd cd be f9 aa 86 00 9c 0a 08 b9 25 db ce d6 d2 ef 84 fc c3 65 a9 03 78 d9 1e 62 eb 55 c4 c6 4b c8 fe 36 6a d4 43 e5 29 22 9b e0 03 9e 75 fb a9 c4 5a 32 e1 52 da 22 61 51 59 8e 5f 84 29 e4 46 23 d3 21 2b f7 bd 99 24 9a 63 fb dc a7 18 ec ee 30 b7 b6 4e d3 87 c9 b8 c7 fe d6 1e 4b cb 8b a4 93 21 e3 e1 10 3b ec 71 79 2b e2 ae b9 21 09 96 b0 dc a7 49 c5 44 82 d0 19 3b 49 ca d6 24 21 4f 73 67 c9 28 ac 19 52 28 7c a5 90 d2 43 29 89 57 14 59 a1 a7 dd d8 cd f3 aa 98 42 a4 c0 0b 04 8a 84 6e 70 c0 b8 b9 42 9c 86 2c 28 cd a9 36 c4 bd 90 bd fd 94 4c 2b 44 d0 c4 33 82 50 a5 74 3a 21 ad 86 8f 0a 97 09 64 93 4c 74 d0 7a 99 17 9e fa 08 36 8b 89 fd 36 37 47 0a ad 33 b4 b0 6c 0d 62 Data Ascii: kqS@>6ek!2bZ%exbUK6jC)"uZ2R"aQY_)F#!+$c0NK!;qy+!ID;I$!Osg(R(\|C)WYBnpB,(6L+D3Pt:!dLtz667G3lb
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 29 86 07 5b 44 2a a0 d1 98 21 ea cc 13 ef af 55 5c 0e a9 b0 af d1 a7 8e 2c 74 52 d2 23 d1 04 53 42 30 eb 5c 09 07 2b c6 da 45 d8 8b 9a 6a 7a 5c 39 d9 ad 02 4e 8a a3 d3 7a 25 ba ab 67 72 50 f9 d8 cb a0 b1 5b 35 7b b5 7c 77 31 ed 73 af 18 f1 53 54 92 3c ed 53 e6 7f 4f dd a2 07 14 b5 55 42 4d 2b 50 66 95 b8 72 55 20 73 96 81 3f df 6c f9 15 a6 b1 e7 39 cb be 58 e9 16 a8 75 67 6b fe 7c a6 9a ea fa ce df a3 c5 ab a4 4f 4b 05 5a ab 95 4d a3 45 a9 bb ae 96 0c 85 ad 4a 48 57 eb c2 f3 fd 71 61 81 b0 94 45 ab 9e 5d 2e a4 28 b5 17 a5 22 d2 d9 f2 26 25 a4 98 1a 2a 17 7f 5e 4d 12 ea 23 f8 4a 50 50 dd 7a 44 65 bc 67 1a 37 e8 6a 14 a3 72 ca 90 e3 0c 5d be b8 f6 4f 94 9c fa 5e af ca 5e cf 47 2a 75 6f a6 cb 31 83 d6 9a 3c 94 45 d4 bc 96 59 f9 38 cb e7 21 a7 3f 95 23 24 8f Data Ascii: )[D!U\,tR#SB0\+Ejz\9Nz%grP[5{\|w1sST<SOUBM+PfrU s?l9Xugk\|OKZMEJHWqaE].("&%^M#JPPzDeg7jr]O^^G*uo1<EY8!?#$
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: c5 aa 56 14 9c f8 5c 9d 6e 5c f6 5f 69 c8 aa cb 87 2d 56 1f b5 71 7b 3d e9 cd d3 dd 72 7b b2 35 79 fa 9a 2b b3 3c ea 99 eb 85 93 ca 89 ba 12 5e 94 31 e1 05 b0 46 d4 8a bc a8 09 c9 cb 70 17 44 12 e0 32 3d f6 a3 27 5b c6 b9 d5 94 76 36 bf f1 59 9b df 34 4a 39 7f fd 56 52 15 60 37 15 d0 22 6a 22 38 59 ea d8 b4 f6 8a ef 38 a7 5c 21 2b 02 5d e9 31 bc 25 71 a7 4c d5 29 0a 73 b9 f4 9f 16 30 b8 62 c4 61 7c 3e b1 4f 41 72 85 3b ae 14 f9 15 82 98 22 3a d1 d6 f0 b1 a5 50 21 df 71 14 7e c9 02 f7 58 17 09 ba 32 15 aa 48 70 b3 3e 0b 57 78 11 4f 71 b1 28 c2 00 ea fb 1c 64 3d b6 b0 c2 56 e2 64 95 df fa ed 84 b5 39 3f 69 30 52 92 ca 00 3b 9e b0 7a fe 05 ba b3 33 a4 68 0e 1f 3b c2 1b ef bf 97 17 1e ff 3a e9 da 65 98 99 61 b1 d5 60 e5 dc 3d 5c bb 70 81 4f de b8 49 bb 11 30 Data Ascii: V\n\_i-Vq{=r{5y+<^1FpD2='[v6Y4J9VR`7"j"8Y8\!+]1%qL)s0ba\|>OAr;":P!q~X2Hp>WxOq(d=Vd9?i0R;z3h;:ea`=\pOI0
2024-05-15 22:36:55 UTC	14045	IN	Data Raw: f4 16 e7 99 9b 9d 61 6f e4 a9 6f ef 78 eb 03 a0 42 d6 36 b7 18 5f 98 b0 d0 ee 32 d3 d0 08 2d d9 1f f7 99 24 29 fd f1 88 96 56 f4 c2 90 fe a0 ef 6d 54 2a 24 d0 8a 40 64 64 3b 3b 88 a6 80 d9 06 a9 ee 11 ea 84 cd 6b eb ec dc 5c f7 ba 0a ad 68 08 57 ee 09 8d 13 c4 d6 d2 d0 92 66 e0 38 3b a3 18 a6 82 7b 17 32 ee 39 dc 60 a8 02 12 ed 98 d3 16 a7 34 4f 4d 02 5c 7f 93 40 4a ce 6f f7 98 39 32 c3 8b 4f 7e 96 c7 cf 9c e2 9e 07 bf 83 c1 41 9f 46 e7 0c c7 4f 5e e7 af fd d0 eb f8 dc 4b f0 c2 2b d7 99 9b eb e1 74 8b cc 65 4c 26 19 77 dc ff 7a ae bf f4 1c 7b bb 43 b6 76 07 cc cd 2f 10 06 7e ad 74 30 88 79 e0 dc 21 3e f4 c6 1e ad 5e 80 9d 3b ca e7 fe e0 f7 f8 ec ef ff 36 9d c5 90 d5 cd 80 66 3b a0 65 25 fb 43 c3 1d c7 bb 1c 6a 8c 39 e8 8f 73 f6 b4 64 94 e4 b8 4d 64 be c7 Data Ascii: aooxB6_2-$)VmT*$@dd;;k\hWf8;{29`4OM\@Jo92O~AFO^K+teL&wz{Cv/~t0y!>^;6f;e%Cj9sdMd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49865	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	432	OUT	GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_english.jpg?t=1714777083 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:54 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 211959 Last-Modified: Fri, 03 May 2024 22:17:31 GMT ETag: "6635627b-33bf7" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:54 UTC	16152	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 8b c6 32 6c e1 f9 37 7b 4b af c5 e1 d3 ba 9b 97 6f a3 75 f2 cb 8c aa 6a df 1b d5 d8 f1 ad 7d 9f b6 5a bc 53 a4 07 70 c8 fe 66 c7 77 d2 e9 60 d4 4d 0a 65 59 e6 3c fd 1e d3 76 3e a5 2a 1d 0e 25 5e bf 08 66 eb 7b fb 4f 1f aa 59 9e 40 8f 29 af 57 cd 5c dd dd b2 ef ab d9 9f c4 1d 2f 35 38 68 82 28 08 af 78 c8 f2 6d b5 68 a7 77 a1 79 9e bc 94 ba 26 4a f9 fe bb 90 f5 10 02 d9 91 88 f4 47 33 a7 0f 74 3a 97 3e 12 f1 a6 46 ba 90 20 d5 ba d5 db 68 5a 65 1f 62 f3 9f 47 95 bc a3 64 8d 92 8a 71 0c 15 c0 31 68 d4 34 b3 f4 9d bc cd 48 bb 18 61 b6 65 34 8c 88 d5 55 b3 26 09 9c f9 b6 4b 59 30 6c ba b7 a3 59 f5 d5 66 cf 8e 3e 77 3e a1 ba 8c 26 8d 74 bd 5d 14 08 68 13 32 0f 46 16 1a 72 55 af dd 6d e2 7a db 25 52 2c 8d 61 d9 1c c3 44 9a 1e 74 f9 2b d3 79 0e 9b 83 a5 15 65 35 Data Ascii: 2l7{Kouj}ZSpfw`MeY<v>*%^f{OY@)W\/58h(xmhwy&JG3t:>F hZebGdq1h4Hae4U&KY0lYf>w>&t]h2FrUmz%R,aDt+ye5
2024-05-15 22:36:54 UTC	2303	IN	Data Raw: 0a 25 65 65 04 7a 03 da 53 9a 1c 8d 60 53 62 68 4e 8c 15 86 35 7b e0 27 c8 5d d2 59 94 11 fb 4d 71 f3 ff 00 f1 92 20 01 0b b5 76 f4 3d 2b bf 21 df b8 18 18 1c e0 d4 2c f9 09 0b 4c 56 dc 64 36 49 4e 94 95 21 c9 2b 19 58 c2 03 08 29 3d 75 b2 61 4b 08 7a 8e 12 c3 58 96 bb c1 3b 49 50 b0 84 53 0e 49 08 f9 78 07 e2 67 ab dd 84 5c a3 39 4d 3e 40 74 28 f9 a7 c7 94 c1 80 f7 08 4b 1e 1c a7 95 d1 97 4b 20 4c 95 b2 ae cc 2f 50 d8 00 58 5b 2f dd 3d 3b 7a e7 2b 08 05 85 8e 83 a3 7a e5 12 b2 81 ea fe be cb 54 2d 0d 0a a7 a4 6e ee 1d 3d d0 b1 da 7b 06 70 b6 36 9d 11 9e 42 4c 7d 07 88 9e 9e a3 d4 eb 46 1b 0d 61 19 70 ee 10 57 11 0d 93 41 0b b4 ad 11 ed 95 b3 0c 9b 01 a7 ea 82 fa a0 8d 94 d9 f2 64 97 b5 49 27 7a ab e8 f6 fe 67 29 ff 00 49 72 25 30 f9 f5 ca 69 ca d5 9f e9 Data Ascii: %eezS`SbhN5{']YMq v=+!,LVd6IN!+X)=uaKzX;IPSIxg\9M>@t(KK L/PX[/=;z+zT-n={p6BL}FapWAdI'zg)Ir%0i
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 80 32 1a 89 ca 03 f0 2b d5 7d 87 51 d2 49 13 a6 e3 be f8 d8 d1 fa 37 f8 75 a3 fa 92 48 5a bb 89 4c 04 22 e2 83 ca 99 c7 3d c5 77 15 dc 54 64 95 fe 85 cc 44 b1 35 8d 4c 2d 06 bd 71 22 03 1d 6e 39 57 67 6b 0c cf 73 a6 f2 40 ae d0 b0 17 68 5d a1 5d 18 5d e5 0f cc 83 16 3b 51 79 51 b9 47 6c 85 f5 45 c8 99 1c a0 80 b0 a7 37 2a 78 7b 0e 72 03 32 9e dc ac 20 dc a8 da 42 c8 5f eb 22 66 73 85 27 a7 4b 3e 71 61 61 61 61 61 60 ac 20 b0 b0 8f 5c 78 40 58 ea 02 21 60 ac 2c 2e d4 c1 e7 d3 08 75 3e 68 a6 f8 0f 97 50 7a 1e a0 e1 03 d5 c3 ab 50 4e f5 e8 d0 9b e6 83 72 1b ea f7 14 c3 e6 ff 00 56 fa 02 11 01 37 08 63 a0 40 ac a6 94 d4 3a 04 3f 04 a1 d3 d1 12 88 45 14 51 45 14 51 45 14 7a 94 51 f0 1f c1 3d 41 44 fe 00 43 a1 71 5f ea 9c 53 06 4e ac 7e 56 c5 da 49 c2 bd 2e 24 Data Ascii: 2+}QI7uHZL"=wTdD5L-q"n9Wgks@h]]];QyQGlE7*x{r2 B_"fs'K>qaaaaa` \x@X!`,.u>hPzPNrV7c@:?EQEQEzQ=ADCq_SN~VI.$
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 0e 53 87 5c 26 1e 99 54 5b de e7 57 c0 65 7e e1 f4 cb e9 57 d2 a7 57 c0 8a 3e f3 1c 7d 8a df ea 8f f4 b1 3f d3 28 a6 fa bb d7 a6 50 47 d6 3f 5a 89 be 19 d4 49 dd 19 e8 0a ca 8b d3 3e 52 7a 47 fa 4a 7f a0 59 52 fa 22 53 fd 49 40 a9 3c d6 51 4e 3e 68 a6 fa d7 fd 6f 60 28 44 17 62 31 e5 7b 21 08 80 28 d7 69 3e c3 42 03 1d 1a 8a 77 46 b3 28 0c 74 08 a2 c0 57 b4 10 60 0b b0 2e c0 9d 10 2b d8 4c 8b 02 51 f9 40 4e 70 0a 47 39 a1 d1 7e 63 55 c9 c0 84 f6 79 31 85 e6 b5 2f 6c 39 c5 e9 f2 b5 ae 2c 89 c9 b2 46 d1 35 91 83 e5 d4 0c a6 b3 05 57 f5 6b f0 a5 aa d9 54 55 0c 60 6b 9c e4 cd 78 69 b1 5c 4c 9f 41 e1 32 8b 8a aa 3d b8 64 79 71 00 95 10 f6 d0 78 72 90 2a fe 96 23 f7 1a ec 82 14 4f cb 7c 2d 19 45 9d a4 8c af f4 08 14 51 fc 41 d3 bb 08 bd 37 a1 4c 72 2e 4e 72 c2 Data Ascii: S\&T[We~WW>}?(PG?ZI>RzGJYR"SI@<QN>ho`(Db1{!(i>BwF(tW`.+LQ@NpG9~cUy1/l9,F5WkTU`kxi\LA2=dyqxr*#O\|-EQA7Lr.Nr
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: 25 76 39 46 c7 77 71 e1 9a 3d 8e 5d 8e 5d 8e 5b 46 3b eb 7b 1c bb 1c bb 1c bb 1c b5 2d 71 b7 d8 e5 d8 e5 d8 e5 be 69 15 1e c7 77 76 39 76 39 35 8e ce 85 ae 30 76 39 76 39 76 39 6e da 43 c4 6e 0b b1 cb 97 31 c3 4f ae 96 a4 16 7e 4b d5 71 be 49 a5 e2 da 16 f1 da 3c b6 41 a2 df ed e4 9a 79 be 32 13 d1 d3 79 13 de dc f2 4e 07 67 61 b6 d5 54 b5 56 ad 88 2c 39 9c 56 48 8b 22 98 3d 57 20 b7 d1 7a a9 66 6b 04 91 99 1b bd 7f b7 1b a0 86 66 f2 2d 7d 76 44 ad ea eb de 77 35 d3 43 46 dd ca 51 db 8f 6b 50 6b ac 71 ad 53 35 1a e5 5f f7 4f aa 82 0f 79 58 a9 24 12 be 09 22 1a ed a4 75 1b 47 6b f5 30 fa 2d ed 17 dc af c6 e7 6c 27 e4 78 7f 2f 1d 98 d8 d7 48 c2 c2 db 09 b2 35 c3 dc 69 52 4e 0b 7d 55 76 10 76 8e ad 1e e3 75 2b a2 a9 f2 75 c2 c8 74 45 bf 45 6a c8 aa c9 39 0d Data Ascii: %v9Fwq=]][F;{-qiwv9v950v9v9v9nCn1O~KqI<Ay2yNgaTV,9VH"=W zfkf-}vDw5CFQkPkqS5_OyX$"uGk0-l'x/H5iRN}Uvvu+utEEj9
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: a7 ab 98 e2 f9 f5 d0 91 ef ee 48 c4 83 cf 5f 8e cd a7 e8 be d3 24 34 da 5b 5a e0 ee 36 e5 89 ed 96 70 e1 e6 5a e6 b9 17 10 72 8f 8f b7 bd 4b 55 cd 6e b9 b9 93 b8 2a d2 07 6c 61 6a 8c e0 b1 c0 a6 a6 a6 a6 a6 26 a6 a6 7a b1 35 35 31 35 04 d4 10 43 c0 40 78 ca ca f5 57 9c d2 f8 e9 cb 20 1a e7 2f e3 5c 86 b9 7f 1e d0 a1 89 90 8f 0c a5 e1 b2 7b 9d dd 36 ba a8 b6 f0 f1 f8 dd 06 e4 af 93 35 a2 f6 f9 ad 6c 63 7a f6 b6 59 a6 65 76 4b b2 af 0d 8a 2c 37 61 d3 73 16 d3 b6 78 8d 37 ec e8 6a 6b 6a e0 d5 f1 6a ba a8 bd 89 1c bf 87 97 3a bd 4b f6 4c ab 56 2a 71 46 3c bc 7c a3 96 e9 f8 5d 2f 92 fe e2 78 f7 26 d7 e9 3e ec 6a f0 69 7e 23 f9 37 fc af a4 e8 f7 cf ee 74 df b4 3a 85 2d 7b 2d 11 5e 10 2f cf 14 a4 45 1a 6d 66 c8 b5 30 c4 29 7b 31 15 ec c4 bd 88 95 b8 a3 6b 58 c9 Data Ascii: H_$4[Z6pZrKUnlaj&z5515C@xW /\{65lczYevK,7asx7jkjj:KLVqF<\|]/x&>ji~#7t:-{-^/Emf0){1kX
2024-05-15 22:36:54 UTC	16384	IN	Data Raw: 0d a1 a9 cd ad d0 15 ec 54 dd 44 f8 a0 d6 47 b8 e5 37 b7 0f 7d 39 1c be 81 c8 56 96 03 07 22 b7 11 31 b6 66 36 9b 89 bf bc ab 4d 7f 71 5b 7a fe 76 e3 4b 77 35 a7 5d ac 98 59 98 d5 89 ce 73 c9 4e 4d f4 f4 f0 04 56 32 9a 13 51 6e 54 d5 df 2a 8a b7 63 43 7b 5e 64 6b 0c 0e 6b e3 62 62 69 c2 68 08 0c 17 d6 f7 9d fc 78 21 e1 a1 ac 86 46 57 de 68 2d de 8b 8f 68 e6 d5 57 a1 5e 48 0e e6 1f 7e 48 38 cd 83 b7 d3 82 21 db 31 ef 8f 7f a4 b3 b3 85 b5 3f 85 8c 6d ea 2b 57 21 bd 2f 05 6e 39 d7 c8 2d 6b f9 f7 dc 28 64 9c 9f ee 04 c7 20 f9 a5 ad 7e ae bb a0 a0 db 5b 9a 52 1f e6 e8 2f e7 28 66 e9 12 6b f5 7d ad f8 9b e2 7e c8 f8 b7 db e7 64 57 fe df 7b 3f b8 74 70 32 5d a6 b7 6d 4e b5 7a 5b 9a 50 d7 1b ca 00 5f da d5 b5 0e c2 30 dd df dc 43 59 2f 27 f9 c4 31 d4 f9 d1 67 f8 Data Ascii: TDG7}9V"1f6Mq[zvKw5]YsNMV2QnT*cC{^dkkbbihx!FWh-hW^H~H8!1?m+W!/n9-k(d ~[R/(fk}~dW{?tp2]mNz[P_0CY/'1g
2024-05-15 22:36:54 UTC	7952	IN	Data Raw: 28 1b b8 b7 a4 3b 46 95 dd 13 c7 e9 13 6f 97 ae 8b 83 26 c3 68 1a 37 ce 37 73 f9 c2 ed 8c 4e ff 00 41 01 bf d0 af 69 5d d4 80 24 3b a2 3b 4c c1 15 42 e1 a2 17 0a 14 c8 0e 09 ce 88 dc 75 c6 f9 ae 9f 08 df 13 a7 83 e3 96 16 4e 14 d4 c6 06 f8 93 71 0a 70 74 d0 78 49 32 1e 34 46 4a 65 4b 03 9a 40 91 c7 20 11 c3 0b 88 9e 5f 58 31 0e 98 27 28 11 49 7c f0 1c 1d c0 4e 07 ce 48 3f 9f ce 16 b7 9f d1 37 9a 76 5d c7 48 5a 37 f5 90 81 40 f5 da 26 e2 9c f1 42 d4 e8 3c 08 18 58 16 3c 50 b6 ee 23 e7 1b b9 fc e1 76 c6 27 7f a0 80 df e8 54 d7 3f b4 06 f1 3f ac ee 3e bf 7e b1 ec 1b 9f 05 3c 73 80 83 8c 2c 71 cf c0 cb e0 b3 ca ee d0 27 80 18 99 0c 2e 14 b0 1b 85 01 6e 78 18 a9 a9 c6 48 8b aa 30 37 04 c3 00 06 0f 86 4a 69 91 16 e4 80 f3 18 1c e0 3c be b8 3b 68 81 7a 34 7d e9 Data Ascii: (;Fo&h77sNAi]$;;LBuNqptxI24FJeK@ _X1'(I\|NH?7v]HZ7@&B<X<P#v'T??>~<s,q'.nxH07Ji<;hz4}
2024-05-15 22:36:55 UTC	14793	IN	Data Raw: dc d0 9a 31 3b ab b7 c1 54 50 d9 5a 86 e8 6e a5 c2 32 83 15 cd 5d ba 28 ec 82 69 2b 9f cb c5 fe 60 1d c0 2b d9 6f ff 00 11 f6 4f 6d a0 4c 50 01 f2 53 54 52 53 0a 8a 41 52 14 4e 9c 68 ab 07 54 1d 02 a0 e8 16 9d 02 69 74 85 31 52 14 0a 83 a2 94 28 15 02 98 54 1d 15 07 45 41 d1 03 0f 68 e8 17 b4 74 09 88 0c bd a3 a0 5e d1 d0 2f 68 e8 13 8b 47 40 bf 20 0e e1 16 b4 74 0a 42 13 0a 81 4b 00 04 03 5d 17 b2 df fe 23 ec 98 63 64 07 96 58 bc 53 5c 83 85 8d 30 3c 24 98 e0 74 e9 f2 58 c1 95 c3 cf e1 12 f0 81 12 9d d5 51 99 47 c9 0c 05 00 e8 0e 28 4f 54 f0 18 6a 88 e0 88 7a 23 6b a1 e4 82 bb 94 5f 1b 9f 07 cc 41 b2 8b 09 ad 20 c5 32 a2 9c 0b 61 27 82 a2 a2 a4 18 42 68 91 a4 28 a9 19 c7 b6 cd 2a b4 5a 2d 10 ee ac 37 c9 1c f2 0a 37 5d a7 ce 32 f0 26 32 53 53 4c 62 d1 ee Data Ascii: 1;TPZn2](i+`+oOmLPSTRSARNhTit1R(TEAht^/hG@ tBK]#cdXS\0<$tXQG(OTjz#k_A 2a'Bh(*Z-77]2&2SSLb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49866	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	663	OUT	GET /steam/spotlights/2a9368174c54dd6fe7fe643e/spotlight_image_english.jpg?t=1715121064 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 115834 Last-Modified: Tue, 07 May 2024 22:30:58 GMT ETag: "663aaba2-1c47a" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:55 UTC	16152	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: ea 35 a2 c9 bd 1c f9 34 8d 2a c5 61 71 5a 3b 76 a6 99 46 cd 16 78 b9 66 b3 28 44 b1 49 b2 47 59 45 96 d5 d8 b9 4a 7e 28 c6 f9 ce 96 02 30 05 44 38 82 a7 f2 65 56 01 6d 1d 47 36 67 ea e3 96 2b a0 a5 e5 b1 66 a9 c0 89 c9 c0 29 4a 92 68 80 70 51 12 a8 29 10 c4 28 95 32 e2 d0 69 af 73 b7 dd 1b dc db 0d ac 64 59 76 52 55 9c dd 47 aa 39 e2 96 0b cc 6e 87 16 b9 e0 35 e8 2c 6a 16 d9 b0 e6 7d 80 a4 30 66 a5 71 a5 66 dc d1 c1 68 39 a2 f2 b6 cd ae aa 31 56 98 d6 09 e7 79 f5 06 f2 e6 46 cd 2a f0 0e f2 ca c8 17 75 62 81 4d bc 4c 9d 73 df 7c c5 08 d6 2d 24 51 ae bc 83 08 16 4c 9e db 64 1c d4 a2 60 75 69 04 21 65 ad cc ad d3 2d 8f fe 6f db 91 da 26 8b 7c d4 cd 11 29 48 f5 e3 76 4d 11 7c 65 cb e4 fc 94 60 9a c9 c0 39 3b c8 87 90 c8 ac 91 58 ae 53 c6 c6 bf 91 73 f1 ce 03 Data Ascii: 54aqZ;vFxf(DIGYEJ~(0D8eVmG6g+f)JhpQ)(2isdYvRUG9n5,j}0fqfh91VyFubMLs\|-$QLd`ui!e-o&\|)HvM\|e`9;XSs
2024-05-15 22:36:55 UTC	1858	IN	Data Raw: bf 00 91 9e 01 38 08 35 ae 54 d7 16 72 ac 51 cb ee 89 e7 4b 7e 3a 12 37 ee ba 90 af e6 b2 0a d6 2b 44 3d d9 41 04 31 5d a7 5c 58 fb 7a 2b ce e5 e6 f3 2c b3 b0 ac d3 dc 39 df 24 ec c3 d5 ba 47 d3 3a 20 a2 8f 4a 8c 4f 2c b2 ab 12 f5 04 e4 73 cc 86 39 2d 77 1c 88 d7 20 73 c4 16 97 cd d9 85 c0 62 c3 d7 e8 20 90 c8 14 90 c5 a9 41 9e 4d f3 50 03 85 bc 95 76 5b b6 e2 8c 48 21 82 9a 11 51 91 61 90 65 d4 13 f0 38 32 c4 ad 18 62 4e 79 9c f5 1f 0f ef c5 a4 6f a9 1a f4 62 5b d2 73 d1 69 97 99 18 85 76 aa 95 25 77 03 91 eb 98 a6 5e 3b b5 a6 58 54 31 07 b8 6a 01 e9 a9 ad 69 91 cf 5d 41 d0 e0 77 a2 45 60 41 0c 48 a8 3d 29 4a 9a 83 a7 9e 24 58 39 49 05 c1 6d d5 ad 6a 7a d7 75 4e 7f 1f 8e 20 25 88 45 24 82 57 6b 54 00 0d 08 fb aa 3a 1f 2c 4a 84 32 cf da 08 87 42 58 ea c5 Data Ascii: 85TrQK~:7+D=A1]\Xz+,9$G: JO,s9-w sb AMPv[H!Qae82bNyob[siv%w^;XT1ji]AwE`AH=)J$X9ImjzuN %E$WkT:,J2BX
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: f9 11 26 ac 65 0b b5 9a 9b 11 2b bc e8 08 b0 b5 e3 0c 3e e3 b9 62 d0 db 15 34 85 5c 92 ae f5 01 b6 c6 b9 a7 a6 ac 16 b4 a6 2e 39 1b b9 22 1e fc e4 d3 7c d7 6c bb e4 48 e5 61 b2 14 76 04 22 4a 48 32 28 da f2 d7 d5 50 a1 40 8c ab 24 b1 6e 26 a4 12 d4 63 52 08 fd e1 9a d4 d6 9a 80 72 c4 b6 5e e1 e3 e4 b0 bb 0c 4a 34 84 18 e5 8c e6 af 0c c3 d2 ea 41 04 a3 15 92 26 aa 15 20 57 01 a0 2a c0 36 4c 9a 02 73 3a 7e 16 39 8a 7c 86 a3 43 8d d3 44 4e 79 d3 55 63 f3 1a 78 3e a4 0c 83 6e f1 c5 bc 76 e3 70 24 b6 ef 0e 9b 47 ed 3f 65 30 dc 91 ab d9 ac ca 95 50 5b 74 84 ff 00 0d 02 e7 2c 94 04 94 8f 73 05 0c cd 45 04 8b b6 e3 78 6b eb 69 9d 95 04 8c 91 aa 44 19 c0 0c d2 07 71 1e f0 41 4d fb 68 09 24 80 0e 2f ff 00 de e4 9e 2e 52 c4 fe 60 89 14 49 22 35 42 c8 55 bd 55 de 3b Data Ascii: &e+>b4\.9"\|lHav"JH2(P@$n&cRr^J4A& W*6Ls:~9\|CDNyUcx>nvp$G?e0P[t,sExkiDqAMh$/.R`I"5BUU;
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: ef 1b 79 2d bd ec 46 ab 24 6e c8 e8 74 aa ba 90 c0 e7 4a 82 32 38 8a db 91 f7 5f 25 71 02 b8 70 b2 dc ce ea 1d 33 57 01 9c 80 cb aa b6 a0 e8 46 03 7f bd bc 95 2b ff 00 8a 9f ff 00 7f 07 6f bb 39 30 07 5f aa 9f ff 00 7f 09 6f cb fb 86 ea ea 00 c1 84 72 cd 2c 80 30 04 06 0a ec 40 20 16 00 eb 42 40 d4 e1 e0 e2 79 fb bb 48 59 8b 15 8a 69 22 52 d4 03 71 08 c0 12 45 05 48 ad 05 34 18 bb e5 b9 4b a7 b9 bc 78 bb 46 59 a4 24 e6 54 6f 69 1c 92 42 a4 60 00 49 3b 68 a3 0f 6b c6 71 d3 5e 22 21 2c ca 36 8c 8d 2a 37 50 00 75 15 23 2c ce 21 79 e0 48 af 0e 62 22 77 1f 83 ed f4 fa 73 3b 6b 4a 81 5a e2 57 b9 b9 9e 47 90 82 68 8c c4 31 cf 31 90 cb 4a 69 e1 80 14 b8 62 f5 47 34 5a 10 6a a4 6a 41 14 a9 d0 2f 8e 38 7e 59 2c a0 6e 6a 5e e1 92 12 bb 04 8d 6e 3d 52 c2 b4 da ca 5f Data Ascii: y-F$ntJ28_%qp3WF+o90_or,0@ B@yHYi"RqEH4KxFY$ToiB`I;hkq^"!,6*7Pu#,!yHb"ws;kJZWGh11JibG4ZjjA/8~Y,nj^n=R_
2024-05-15 22:36:55 UTC	7952	IN	Data Raw: c1 58 b2 03 42 5f 69 01 cb 10 48 04 95 aa f8 29 a1 04 d7 08 c3 68 8c f8 f4 fb 3c 3c 2b 8f aa 92 d0 ad a1 7d a1 98 50 13 d5 41 39 35 0e b4 af c7 10 0b 91 1c 56 cd 4a 6d 28 64 62 da 6d 5d 16 be 2c 40 1a d0 e9 85 37 72 c9 15 ee f3 e9 b7 95 5f 6a 8f c2 ee ca db 98 f5 a0 da 3f 08 a6 1e 3e 2f 8a 31 b0 5a 34 8c 0b ca e4 7e f4 a4 56 be 40 28 f2 c1 92 38 1c 83 a5 47 ed f3 c5 a7 25 74 4c 71 20 35 24 80 b9 8a 66 4d 00 fb 4e 39 3f e4 1c 6c 77 1e d7 e3 ef a3 5e f4 87 6a dc 4e 5b b4 16 d9 0d 0c 90 c4 c6 b2 cc 28 af f2 c7 bc 54 e3 dc 9c 67 bc f9 cb 7b 9b 86 89 dc 40 b9 ce b7 4b fc 27 a8 14 8e 8d 91 24 8f 48 db 43 96 2d ef fd d7 1e de 22 e9 5e 0b 72 58 88 61 ab e4 1e 99 a8 73 a9 a8 a8 35 26 99 8f ae b4 e1 ec da fa 28 68 d2 6d 19 b0 c8 ec 0d b8 28 eb 5a 96 c8 0a 9c 3c b0 Data Ascii: XB_iH)h<<+}PA95VJm(dbm],@7r_j?>/1Z4~V@(8G%tLq 5$fMN9?lw^jN[(Tg{@K'$HC-"^rXas5&(hm(Z<
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 6d 6c 61 b0 6c d0 53 54 44 55 2c 8b 90 32 61 8b 57 47 01 96 41 25 ca 8e ee 43 7a ec 76 14 5a 8d 0a 2a 93 6e 58 5b 4f 46 57 44 11 d0 8d 55 7b 27 59 b7 d6 77 25 d3 b3 1a cb 31 cb 32 cb ac 06 a8 99 15 8a c5 86 4b 6d 3e c3 22 c9 e2 03 fe 59 2d b4 dc 89 ae c2 82 44 ad 9f 89 1d 3f 8c 1c 02 eb 85 3e 9b f1 e9 b0 4a 86 15 bb b1 79 66 e1 77 1a 37 96 64 f4 92 62 e2 f8 b4 79 1b 41 b1 f9 1c 69 c2 f4 d5 02 78 4e 64 e6 98 24 69 f8 4e a2 de 66 b8 94 db da ec bf 85 b2 7c 7f 93 a9 26 63 6f 1c 4b 46 e3 47 59 98 a6 4c e1 4c 61 42 5c 6a fa ec 53 2a 9b 3d f2 68 c0 91 21 a2 aa a8 a1 0a f2 16 4d 98 f2 1e 65 93 53 e0 1c 7a 8d b3 51 7f 90 db 5b c0 f9 ae 59 68 10 e3 4f 06 67 4b 7d a6 e5 c5 85 55 25 b0 24 1d db 1e 3e ff 00 7f d3 be 19 81 e7 57 98 a4 99 15 fc 83 92 64 91 71 cb 79 55 Data Ascii: mlalSTDU,2aWGA%CzvZnX[OFWDU{'Yw%12Km>"Y-D?>Jyfw7dbyAixNd$iNf\|&coKFGYLLaB\jS=h!MeSzQ[YhOgK}U%$>WdqyU
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: c5 59 fa 92 5e 57 69 97 de b1 8c c5 cd 31 2a 76 45 f6 72 f1 c2 a2 bf ef 06 3b 68 e2 a3 b2 23 48 50 36 75 54 c1 38 a7 ea 07 2b b8 e3 4b ce 55 a3 ce b3 ee 4b e6 0e 77 1c a3 22 93 8b 63 98 a5 4c fb a1 7b 24 62 b8 66 5a 47 ba ca ed 96 3c 36 63 23 d1 c6 1f bd 01 04 47 10 45 18 1a 68 d9 2c 5c 72 64 f9 c3 58 96 97 99 16 45 56 6e d4 3e e4 47 2e 30 d4 c9 94 6e a1 63 79 12 35 ee 63 a3 c1 1d 55 93 42 36 81 cd c9 d3 99 a5 7c 7f 69 5b 9b 3d 01 ab 78 c8 db 6c 85 46 50 3b da 7a d5 81 40 18 ad 40 b9 65 05 1d 01 1d c8 f6 86 9f 0e e5 4b 5c 3d c1 75 86 a0 5c 37 75 50 d3 89 22 63 ae d6 df fe 64 a6 83 db a6 a2 81 6a 07 aa 02 0a 20 9a 68 9e bd 70 21 47 ad 71 ba c8 36 b7 d6 99 64 f9 01 24 e3 55 63 b4 43 55 6f 06 1c 87 36 97 8a 6d ed 92 04 66 19 42 12 24 52 55 5d 00 b4 61 c9 b0 Data Ascii: Y^Wi1*vEr;h#HP6uT8+KUKw"cL{$bfZG<6c#GEh,\rdXEVn>G.0ncy5cUB6\|i[=xlFP;z@@eK\=u\7uP"cdj hp!Gq6d$UcCUo6mfB$RU]a
2024-05-15 22:36:55 UTC	7952	IN	Data Raw: bb 3c 77 07 64 21 1c 67 d2 1e 39 8b 35 26 65 9b f8 b4 e9 70 c2 42 7b 87 9a 6e 53 ba a8 8f 85 41 3a e6 6e 56 cf f2 4c 2e ef 9e 6e b0 fb 1c 2f 05 e3 fa 8c 0e d0 0f 92 b3 6c c2 8d fa a9 d9 9d 66 3f 54 52 a8 db b0 a5 c5 a2 4d f9 94 c9 8a d2 79 95 b9 11 db 17 c5 0b ac 7b 8b b8 01 f8 3c 71 8a b5 89 94 3c 96 36 34 cc 5c 6a da 06 4b 4b 01 18 b0 8c ed f4 b2 69 d6 a0 d8 c7 88 61 19 d6 d5 25 38 ea 23 64 4a 46 09 d3 f7 3c b7 91 58 53 a5 8c 57 6e e6 b3 09 a9 56 f9 45 e8 b4 e8 35 22 63 37 39 01 35 18 24 f9 c9 10 9d 79 1d 74 55 75 41 24 ea 13 d1 b1 8c 96 3b cc 59 d5 d4 b1 31 fc f2 ea 43 8f 42 b4 55 a9 97 7b 2a c5 06 19 0d ad 6c f9 91 e4 9b ac 7b 78 cc 88 a8 ab 64 da 6b d4 0c 62 e2 97 0c 7a 93 e4 75 4c 0c 5c 35 82 a2 a6 ab ba c5 29 a2 63 d6 37 54 f1 6a 64 b5 32 86 65 9c Data Ascii: <wd!g95&epB{nSA:nVL.n/lf?TRMy{<q<64\jKKia%8#dJF<XSWnVE5"c795$ytUuA$;Y1CBU{*l{xdkbzuL\5)c7Tjd2e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49867	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	399	OUT	GET /public/images//gift/steamcards_promo_03.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	261	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 25286 Last-Modified: Wed, 28 Jun 2023 04:07:19 GMT ETag: "649bb1f7-62c6" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:54 GMT Connection: close
2024-05-15 22:36:55 UTC	16123	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 23 00 00 00 6b 08 06 00 00 00 3c 5c e4 98 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 62 5b 49 44 41 54 78 01 ed bd 09 a0 5c 45 95 3e fe d5 ed ee b7 e4 6d d9 f7 15 b2 27 ac 01 81 24 10 10 41 1d 51 40 01 57 56 1d 9d 11 15 77 c5 d1 01 74 66 dc c6 bf e3 82 3a 3f 11 82 e8 28 82 82 1b 9b 2c 41 92 90 10 96 ec fb f2 92 bc f7 b2 bc 7d df ba 6f fd 6b 39 a7 aa 6e bf 07 82 44 0d d0 05 9d ee 77 fb de ba 75 ab 6f 7d f7 3b df 39 75 0a 28 94 42 29 94 42 39 0a 8a c0 6b b0 4c 9d bb f0 c4 58 ca 25 52 8a 13 f5 df 42 c8 b5 b9 ac 78 bc 76 c7 ca b5 28 94 42 29 94 7f 48 79 cd 81 d1 c4 b9 0b ff 07 12 d7 0d f6 9d Data Ascii: PNGIHDR#k<\pHYssRGBgAMAab[IDATx\E>m'$AQ@WVwtf:?(,A}ok9nDwuo};9u(B)B9kLX%RBxv(B)Hy
2024-05-15 22:36:55 UTC	9163	IN	Data Raw: a5 6d d5 2c 67 e5 ee 46 5c 76 f2 24 ac d8 dd 40 b3 2b 64 02 46 de 79 d2 04 e3 75 d3 fb e9 f3 4c aa 1a 98 8f 69 d2 b0 52 d8 99 ea 7e 5d 4c 09 19 98 8f 01 84 12 3a 4b 6a 37 7f 63 c6 f1 e1 3d 66 97 79 81 5e c4 60 f4 62 ca 87 cf 99 8d 3f ac df 8f e5 3b 0f d3 4f 44 cb 0a 49 1f 6d 6d af 31 a6 ab b4 a0 65 fb 50 d0 67 ce b7 6b e7 b5 d9 36 c7 41 c6 1a 69 fa 4f 78 13 d9 2d 69 6e cd 3b 75 64 67 0b 8a 36 3f 6a be 6f 3d bc ef 76 10 2b 82 77 e5 1b d1 1a 05 30 3a ea 8b bf f3 ec 0c 10 37 1d 4b b2 09 26 cd 8a c4 1c e6 0f a7 13 b9 75 1c 5d 2e 62 b8 b4 ac d2 e5 ad 71 63 ed 37 eb 0f 9a 97 66 49 3a fb df 3b 68 49 64 ad ef fc 7a dd 41 33 8f 4c bb b2 57 ef 6d 36 b7 aa 0d c6 f5 a9 b5 07 94 41 98 89 8e d5 99 3d aa 1c a7 2b 91 f7 1d c7 8f 31 13 6a 5f 6c 69 ed ce 9a 81 62 a2 9a e9 Data Ascii: m,gF\v$@+dFyuLiR~]L:Kj7c=fy^`b?;ODImm1ePgk6AiOx-in;udg6?jo=v+w0:7K&u].bqc7fI:;hIdzA3LWm6A=+1j_lib

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49868	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	663	OUT	GET /steam/spotlights/18ad2861aa907ac1a68cb231/spotlight_image_english.jpg?t=1715630351 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 86549 Last-Modified: Fri, 10 May 2024 18:57:01 GMT ETag: "663e6dfd-15215" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16153	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 33 14 5c f1 f9 d2 62 df 8f d7 25 40 9c 61 cd 2b 92 e1 87 b2 6d 06 39 55 4c aa 9b 06 87 70 16 c0 22 43 18 40 00 a5 00 f5 68 76 50 04 a4 28 ff 00 b6 4d 50 68 56 bc a5 6e bf f6 5e 8b a7 62 2e 43 60 99 ee 37 e5 8d 61 9e 3d be b5 63 27 82 41 73 c0 5e 1b d8 f9 b3 9e a8 bd 89 39 3f 66 4b 21 76 7c e3 8e 57 9a 89 ed 1b c1 c9 5a 5e 1e ec 4d 81 da ab 2b da c7 84 f8 ce bf 9f 7b 7e f2 3f 8f f1 0d 20 df 3c 6d 01 db fb 94 93 95 4c 77 42 69 03 16 bd 74 c7 7d 43 6c aa 95 4c ad 5e 34 ab ee d6 ad 20 66 30 cf 69 ae c5 7c 7a e4 0a 4f f8 a7 83 99 af 62 c0 18 29 f1 bb b3 f6 fb 82 c0 32 1c 4e c5 f8 a2 f9 ca 1c a7 d9 33 82 b0 70 fd d3 f1 e6 1c c4 bc 9b 8f 78 f6 21 6b 1e 4c bf 58 e1 bc 3d 7a 6e 5e 94 f6 d7 91 b5 89 f1 a4 9e 5a bd b9 ad 70 b2 39 62 46 70 a4 a1 86 b8 ff 00 c6 8e 42 Data Ascii: 3\b%@a+m9ULp"C@hvP(MPhVn^b.C`7a=c'As^9?fK!v\|WZ^M+{~? <mLwBit}ClL^4 f0i\|zOb)2N3px!kLX=zn^Zp9bFpB
2024-05-15 22:36:55 UTC	3124	IN	Data Raw: 6d a3 78 dc ad 5e 48 d8 3a b5 c5 b6 d5 b5 dd a1 3e 1d 35 84 df ba 69 05 c0 3a 89 60 59 91 55 46 b9 af e7 93 21 5a bb bb 1a 9c c9 cc 93 99 24 e3 63 92 ce 49 23 95 ae a2 42 41 19 ab ba ab 29 ed 04 12 08 39 1c 6d cd 23 96 61 7f 10 a9 24 9a 2c 13 2a 8c f9 2a 80 00 e0 00 00 64 31 77 24 76 ee d1 40 01 72 29 45 05 82 02 73 e6 cc 00 f4 e2 48 d0 1f fd 8a 43 ff 00 3a 3c 59 39 e0 36 e4 3f 24 b3 e2 de ea 48 1d 6d a4 66 55 63 4a 12 9a 75 01 9f 2d 4b 5f 4e 37 86 50 40 17 b4 cf fa a4 c2 13 c7 50 f9 f1 0f f5 c3 f9 af 8b f3 da 8b fc f5 c1 6f fc 93 7c e3 16 4e 78 0d b9 0f c9 2c f8 37 db 46 c5 71 71 68 1c ae a5 d3 4d 42 84 8c d8 66 2a 3e 5c 6e 90 ee fb 6c b6 d3 35 d6 a0 af 4a 95 d0 83 56 44 e5 5c bd 38 ea 57 60 48 3b 8d c0 ff 00 d6 be 04 73 41 24 77 0a 15 87 00 46 a5 0e 84 Data Ascii: mx^H:>5i:`YUF!Z$cI#BA)9m#a$,*d1w$v@r)EsHC:<Y96?$HmfUcJu-K_N7P@Po\|Nx,7FqqhMBf>\nl5JVD\8W`H;sA$wF
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 38 90 73 22 9c 71 67 3c 10 ac 92 f9 c8 51 0d 74 b5 18 15 53 a5 95 a8 c7 8e 92 ad 43 4a 82 2b 88 da f2 6d 8b 67 b7 65 6d 6b 6c 97 17 12 5c 28 1e 28 99 6f 64 b8 63 1b 54 06 48 ca 87 c8 10 4d 0e 1e 7d ab a6 3a 66 68 54 d0 96 6d e2 37 af e7 47 ed a0 21 3c 40 1e 1a 7a b9 62 ca de fa c3 6f b7 96 18 0b b0 b4 f6 8d 2d ac e4 5c 4f 2c 80 32 84 21 7c b0 9e 13 56 04 9a e2 f8 cd 63 63 72 b2 44 a4 ad ca dc 32 96 53 96 93 6b 24 53 a9 f1 92 68 da 48 1e 25 39 50 dc ed dd 29 d2 ef 18 34 3f 79 bd 29 53 40 68 ca d7 a0 83 42 0e 63 0d 66 f6 db 56 d9 b7 48 29 2f b0 fb 53 4b 2a f3 8c c9 77 2c cf 1a 36 5a 84 4c 81 87 ac 0e 23 30 ec fb 3d f4 68 8a 81 ae fd b5 25 55 55 0a ab ae d2 e2 11 28 00 00 1a 55 69 00 00 6b 20 0c 1a f4 87 4c e9 e4 ba f7 6a 57 b7 57 b6 eb 19 65 4d 45 79 e9 ae Data Ascii: 8s"qg<QtSCJ+mgemkl\((odcTHM}:fhTm7G!<@zbo-\O,2!\|VccrD2Sk$ShH%9P)4?y)S@hBcfVH)/SK*w,6ZL#0=h%UU(Uik LjWWeMEy
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: f6 9f 13 a9 d4 93 ed e7 f9 be 84 a7 9f d9 1d 46 9d 00 e4 7a e8 7e 9d 74 23 dc 46 87 f3 71 df af 40 01 1f 97 ae bf 97 84 85 1e 45 b5 fd 7c fb 4e 83 5f 1d 3e 84 a4 1f 1d 74 d4 81 f6 4f 3d 34 3a fd 29 3c b9 81 af d7 a7 3f cc 78 fa f8 0a e5 c9 2a 41 e4 0e a0 9e 60 9f 66 a3 8d 07 4f 0e 12 75 09 d3 5e e4 a7 ec 9e ba 1f 0e 7f 40 d1 44 6b f1 1e 7c b4 46 83 b4 0e 5f 6b bb 80 a0 08 0a e7 cc 68 7d 9c fd fc b8 d0 7b b5 20 e8 40 f6 83 a1 e3 55 1d 07 4f ac 9e 80 7b cf 05 29 48 d3 40 4b 80 8e 67 fa ba 0e 64 0e 3b ce 9a 11 f0 8f 7e bd 7d dd 38 e8 79 1e d2 34 f1 d7 4d 47 4d 53 ef f6 70 52 84 ea b5 0d 7a f6 8f 10 4e bd 75 00 70 4f c5 cf b4 12 79 f4 1c bd 9c c8 fc fc 05 3c 49 d7 9a 10 7a a4 ea 75 27 de 46 9f 57 d1 d7 82 53 c8 fb 74 d7 b7 9f 35 69 cb 5d 07 3e 02 16 49 1d 52 Data Ascii: Fz~t#Fq@E\|N_>tO=4:)<?x*A`fOu^@Dk\|F_kh}{ @UO{)H@Kgd;~}8y4MGMSpRzNupOy<Izu'FWSt5i]>IR
2024-05-15 22:36:55 UTC	7952	IN	Data Raw: da 89 be 5a 1b b5 a9 ac a8 75 c9 55 ea 3a f9 31 a3 44 65 a6 19 32 e4 32 90 a4 20 00 84 69 dc a2 b3 c4 ba 0c 19 ba 7c 42 e0 a4 be e9 cf 1d 90 bc 9e d1 dd 40 44 b9 ee 3a 94 a2 2c 7d 0e a9 4a 52 a4 a4 71 0a 9b 7e 2f 32 7b 87 6e 98 16 74 53 31 71 29 fd ba 95 56 f2 bb 49 ed 84 e3 32 52 f4 52 7b 5e 0e 7c 2a f0 04 71 95 e7 38 94 ca 15 c1 db dd 98 63 6f 29 eb df 9b 57 4d 0f 20 bd dd 8b da db 69 6c c1 72 64 2f 3c ce a9 8b 8b d7 3a a2 87 58 71 29 6d c6 d4 54 95 f6 9b 2c 7b 23 83 96 22 9f 21 cd 20 26 75 83 8e 4f 6f 16 6b 0a f3 5a 5b f6 48 b7 6d f5 57 45 45 6a 4a 9e 6d 68 fd b1 71 20 73 1c b8 67 13 b6 85 07 2e c4 2b ec 1f c6 a5 d9 65 15 ad da b2 68 a4 b6 99 10 2f da 40 5b 0a 44 f9 9d be 52 9f 69 48 52 47 c5 a7 16 14 78 0e de 41 8f 63 71 9e d8 d8 50 25 f0 7c ac 4e ba Data Ascii: ZuU:1De22 i\|B@D:,}JRq~/2{ntS1q)VI2RR{^\|*q8co)WM ilrd/<:Xq)mT,{#"! &uOokZ[HmWEEjJmhq sg.+eh/@[DRiHRGxAcqP%\|N
2024-05-15 22:36:55 UTC	10168	IN	Data Raw: b5 29 d2 ca d2 e5 57 a5 2d eb 94 e3 c5 49 28 75 36 9b 51 9e 06 d0 84 8f 89 25 af 90 3a eb d7 b8 71 ba 9f ca 9e 71 fc 5d d8 de 3f 0b 5f f6 db 72 ff 00 ee 5f bc 1c 51 58 34 ca d8 42 fd 56 ed c4 50 db 8a 4a 94 15 5d 4d bb 35 cb 5e a9 d0 68 ea e2 15 0f 60 3a 71 73 fc ee d8 ff 00 0f 7d 3f f1 eb 8a e1 d6 56 fb 75 db 1b e8 d2 52 d9 6d 49 4a dc 4b 72 fd 4e 12 84 a9 5a a5 24 fb f8 f4 cb fc ae 23 f8 b1 b8 5c 6e 3e a4 a0 9a 14 73 49 3d 51 5d 77 a0 f6 76 fb ba 11 c6 57 a7 53 b4 f7 a3 ae 80 7f d6 ec 18 82 7d bc c7 1e 93 8e 85 64 dd e4 81 43 bb 9a f5 d9 2c c0 94 f6 9f 85 27 5e 9f 5f 15 de d3 bc 94 fa ff 00 f9 e3 f4 71 73 fc ee d8 ff 00 0f 7d 3f f1 67 66 f5 6d 5d ab 94 5e 85 a9 b2 08 31 2e 60 35 65 5c 6c e8 dd dd eb 3a e7 24 c3 78 84 bc db 52 e3 24 91 aa 49 1a 8d 46 bc Data Ascii: )W-I(u6Q%:qq]?_r_QX4BVPJ]M5^h`:qs}?VuRmIJKrNZ$#\n>sI=Q]wvWS}dC,'^_qs}?gfm]^1.`5e\l:$xR$IF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49869	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	622	OUT	GET /steam/apps/945770/header.jpg?t=1715790219 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 55559 Last-Modified: Wed, 15 May 2024 06:59:15 GMT ETag: "66445d43-d907" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=582342 Expires: Wed, 22 May 2024 16:22:37 GMT Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 06 04 05 07 08 02 03 09 01 00 0a ff c4 00 62 10 00 01 03 02 05 01 06 02 08 00 07 08 0b 0a 0f 00 01 02 03 04 05 11 00 06 07 12 21 31 08 13 22 41 51 61 14 71 09 15 23 32 42 Data Ascii: JFIFCCb!1"AQaq#2B
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 8c 6e 20 8d 57 72 34 4b 57 a8 7a ed a6 14 0c f1 97 96 af ab aa ac 77 9d cb 84 77 91 dd 04 a5 c6 57 6f c4 85 85 24 f9 1b 5c 70 41 c3 54 e0 dd 51 4f a4 b3 45 91 95 f3 dd 23 54 69 d1 c2 22 56 c2 69 f5 42 81 c0 94 da 4f 74 e1 fe 7b 49 29 ff 00 91 f5 56 2d c0 eb 68 50 ba d8 8b 86 60 aa 24 6d 47 ad 65 8a bc 09 99 6e 64 b8 95 a6 dd 4f c2 39 05 4a 0f 77 84 d9 21 3b 79 24 de d6 f3 bd b1 71 ef 05 b6 28 44 30 b8 3e e3 75 d9 dc b3 9c 66 64 ed 32 a3 bf a8 b5 7a 7a b3 5b 34 e4 3b 54 4c 65 36 d8 5b e1 17 5a 50 9d c0 70 78 bf 09 27 9f 08 36 18 ea fc 6f 0c c3 9d 96 aa 76 b4 f4 bd dd e8 d1 77 1f 40 b7 14 d4 15 75 2d bc 71 97 78 db 4f 7e cb 95 d9 d7 58 2a 79 e7 53 ab 39 a3 33 66 2a 7b 53 a7 bc 56 d5 1e 95 23 e3 d5 11 a0 76 b6 c1 71 1f 64 0a 52 00 24 28 dc dc 91 72 71 35 26 Data Ascii: n Wr4KWzwwWo$\pATQOE#Ti"ViBOt{I)V-hP`$mGendO9Jw!;y$q(D0>ufd2zz[4;TLe6[ZPpx'6ovw@u-qxO~XyS93f{SV#vqdR$(rq5&
2024-05-15 22:36:55 UTC	2772	IN	Data Raw: b0 8a 1a 0c 46 37 67 6b 83 9b 6b eb a1 f1 f8 6c 8e e1 e9 bf 65 f8 52 cc 71 9e 1c 8d 21 2b ee d4 dc aa 89 69 48 55 ed 65 05 b6 36 fe 78 0b fe d1 71 fe 5c ed a4 04 6f 70 cb fb ac e3 7f 44 40 51 e0 80 db b5 b1 f1 36 fa 25 9a e7 d8 c6 12 32 44 aa de 45 a8 ca 94 f4 46 4c af 80 94 b4 ba 24 36 01 24 b4 b4 80 77 5b 90 0d c2 ba 71 7c 33 87 fe d3 2a 66 ad 6d 26 32 c0 03 8d b3 00 46 53 b7 78 12 74 be fb 5b 7d 55 8a cc 11 ac 80 c9 4a 6f 6d 6d bd c7 81 fc dd 46 fd 96 34 bb 4a 75 da 05 52 0d 46 9b 5a 83 98 29 31 90 e4 b9 11 67 6e 8f 21 04 91 bd 03 69 29 55 c7 29 e7 d8 f9 0d 07 19 e3 bc 41 c3 72 32 4a 79 58 e8 a4 24 00 5b de 69 e8 4d ec 47 8e 9e 3d 48 ac 26 92 87 11 0e 6b da 43 9b be ba 1f cf 44 62 bd 26 ec b3 4a 96 e3 0f e7 59 10 e5 32 a2 95 b3 22 7a 9b 71 04 79 14 a9 Data Ascii: F7gkkleRq!+iHUe6xq\opD@Q6%2DEFL$6$w[q\|3*fm&2FSxt[}UJommF4JuRFZ)1gn!i)U)Ar2JyX$[iMG=H&kCDb&JY2"zqy
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 82 97 d0 91 71 63 71 b8 0d a4 73 c7 4c 01 ac a4 73 1d da 33 62 b7 58 56 2f 15 4c 7d 8c a7 2c 8d dc 1f 98 28 36 91 9b bb a8 28 4c 5a 8c 72 c8 e8 16 e0 4a 87 b1 07 01 8b 05 f5 5a 7c dd 10 7c 59 45 3e 78 32 85 84 e6 d4 d3 b0 f3 7c 79 3c 14 c9 59 7b 7a 55 ce 23 29 57 50 75 d0 9f f6 20 e6 2b 7f f8 69 1f e4 d3 8f 89 38 77 fe 6d 87 fe a9 f9 95 d8 71 0f f8 53 ff 00 83 e8 b9 ed d8 eb 3a d4 32 4f 68 5c a0 b8 6f 2d 0c 55 25 a6 97 29 a0 4e d7 9a 78 ec b2 87 9d 95 b1 63 dd 03 1f 4d f1 ce 1f 15 7f 0f d4 89 06 ac 69 78 3d 0b 75 d3 cc 5c 79 12 b9 b6 09 3b e0 af 8f 29 d1 c6 c7 c8 fe 6e ae 4f d2 4b 95 e3 55 74 2e 1d 65 4d a7 e3 29 15 56 8b 6e db c4 1b 74 29 0b 40 f6 27 bb 3f d0 18 e0 ff 00 65 75 8f 87 1a 7d 38 3d d9 18 6e 3c 5a 41 07 d3 51 ea b7 3c 51 0b 5f 44 24 e6 d2 3e Data Ascii: qcqsLs3bXV/L},(6(LZrJZ\|\|YE>x2\|y<Y{zU#)WPu +i8wmqS:2Oh\o-U%)NxcMix=u\y;)nOKUt.eM)Vnt)@'?eu}8=n<ZAQ<Q_D$>
2024-05-15 22:36:55 UTC	3976	IN	Data Raw: 26 3b 58 53 f7 75 b6 e4 16 5b 6d e4 81 e3 1b 00 55 d5 f7 8f 8b ad f0 46 9a 08 a4 19 ce eb 31 8a 57 54 d3 3b b0 61 01 84 74 b9 f1 df 4f 82 94 d7 52 71 2a 3b 5c 52 47 5b 25 44 0f d3 05 b5 59 1e e9 e4 a8 ad 1e 31 4d 45 51 94 a0 09 b2 93 7e 86 dc 81 f9 8c 64 a3 69 71 f1 5d b6 9a 50 d0 eb ec 51 5b 95 56 23 d2 a4 30 94 05 3e bb 24 03 e9 e7 7c 13 96 a3 2c 46 26 f3 fc 9f e4 98 62 19 bb 43 a5 b9 a1 d8 b2 1f 80 da 11 15 61 bd 84 ac a8 75 5a 8f 17 f9 01 c0 fc cf 9e 06 c4 f2 d3 71 e4 a8 4d 1b 65 1d ef 34 9e a6 b9 89 92 2a 3d ea 8a d0 b0 12 b0 2d 6f 31 88 c0 11 9c cc d2 fa fa ab 2f 9a 4a 8d 26 37 b0 03 d3 a2 21 83 01 ec ce c3 f3 5a 5e d4 ad 6d a5 4d 36 bb 24 2f 9f bc 8f 3b db 8b 74 f3 c5 f6 32 4a 81 9c 75 d4 78 f9 20 f3 4b 4f 87 38 34 f4 36 3c c0 db 7f 05 34 c3 13 21 Data Ascii: &;XSu[mUF1WT;atORq;\RG[%DY1MEQ~diq]PQ[V#0>$\|,F&bCauZqMe4=-o1/J&7!Z^mM6$/;t2Jux KO846<4!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49870	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	375	OUT	GET /public/images/blank.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 807 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-327" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	807	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f7 00 00 ff 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49871	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:54 UTC	394	OUT	GET /public/images/mobile/ResponsiveChevron.svg HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	240	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Wed, 28 Jun 2023 04:07:19 GMT ETag: "649bb1f7-205" Access-Control-Allow-Origin: * Date: Wed, 15 May 2024 22:36:55 GMT Content-Length: 517 Connection: close
2024-05-15 22:36:55 UTC	517	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 22 20 68 65 69 67 68 74 3d 22 31 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 20 31 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 70 61 74 68 20 64 3d 22 4d 31 2e 35 38 31 32 31 20 31 32 2e 37 35 30 38 43 31 2e 34 30 39 20 31 32 2e 39 31 32 31 20 31 2e 31 38 39 38 32 20 31 33 20 30 2e 39 33 31 35 30 37 20 31 33 43 30 2e 34 31 34 38 37 33 20 31 33 20 30 20 31 32 2e 36 31 38 39 20 30 20 31 32 2e 31 33 35 33 43 30 20 31 31 2e 38 39 33 35 20 30 2e 31 30 39 35 39 20 31 31 2e 36 37 33 36 20 30 2e 32 38 39 36 32 39 20 31 31 2e 35 30 35 31 4c 35 2e 37 36 39 30 38 20 36 2e 34 39 32 36 37 4c 30 2e 32 38 39 36 Data Ascii: <svg width="8" height="13" viewBox="0 0 8 13" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1.58121 12.7508C1.409 12.9121 1.18982 13 0.931507 13C0.414873 13 0 12.6189 0 12.1353C0 11.8935 0.10959 11.6736 0.289629 11.5051L5.76908 6.49267L0.2896

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49872	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	623	OUT	GET /steam/apps/1710170/header.jpg?t=1683621796 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Last-Modified: Fri, 13 Aug 2021 11:00:16 GMT ETag: "611650c0-9143" Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 37187 Accept-Ranges: bytes Cache-Control: public, max-age=164205 Expires: Fri, 17 May 2024 20:13:40 GMT Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 01 02 08 09 0a ff c4 00 4e 10 00 02 01 03 02 04 04 03 06 04 04 02 06 07 08 03 01 02 03 04 05 11 00 06 07 12 21 31 08 13 41 51 14 22 61 09 32 42 71 81 91 Data Ascii: JFIFCCN!1AQ"a2Bq
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 8e 84 d8 17 7d b1 4f c2 19 76 fe e1 b1 ce f4 b4 93 95 37 9a 11 cf 24 5c df 32 4b 24 7f 7a 3c 9c fc e3 23 e5 20 f7 ce b3 22 ea ff 00 50 ab 50 9a ef 3f c5 ec d7 24 f6 7e 5b f1 46 fd 27 09 61 3f a7 c4 c6 f4 92 b6 65 bc 5f 06 d6 eb 8e ba ae 63 a6 c1 ff 00 88 f6 e6 e0 a1 dd 5b 6a a8 25 ea 89 7c ba 3d eb b7 50 4a d2 c1 d3 f9 17 1a 50 47 c4 42 70 33 9c b7 40 54 86 00 ea ed 3c 73 c2 d5 bc 1e 47 c6 9c f4 5f fe 32 d9 7d 8a f8 8e cb 86 3a 86 5a c9 54 e1 1a b0 d5 f4 53 8e ef ea cf 48 b8 0d e2 16 df c5 9b 45 34 17 34 a7 b3 ee c5 4e 5a 8a 28 a5 2f 4f 50 47 79 29 9d 80 2c 87 bf 2b 00 eb d9 87 4c 9e a7 0b da 78 6c 54 bb b8 bb 4f fc 5e fe 9c 1f a1 e7 bd a1 d8 78 de cf 87 7b 28 e6 a7 fe 4b 55 eb c5 7a 96 eb 4a 14 67 b8 ff 00 5d 6b 1c f1 0d e2 b7 0b 76 a7 1b 36 3d 7e d4 de Data Ascii: }Ov7$\2K$z<# "PP?$~[F'a?e_c[j%\|=PJPGBp3@T<sG_2}:ZTSHE44NZ(/OPGy),+LxlTO^x{(KUzJg]kv6=~
2024-05-15 22:36:55 UTC	2736	IN	Data Raw: 1a 10 cc 99 3d b5 32 64 0d 09 d9 70 74 e1 16 85 8b 66 e2 55 be d5 c1 ab b6 d2 34 92 49 5f 5f 56 d2 b4 c7 ee 22 11 16 18 75 ea c0 c6 7a 1e df ae b2 e7 85 9c b1 71 af 7d 12 fd fe ce b7 0b da 94 28 f6 5c f0 6d 3c f2 6f ca cd 2f d1 11 b1 dc a2 a7 dc 36 ea a7 4c 41 0d 44 4c 50 7f 4a b0 e9 fb 0e fa b5 5a 0e 54 e5 15 bb 4c cd c2 57 51 c4 d3 a9 2d 94 93 f9 32 eb 37 8a 38 9a 6a 0a a9 42 d5 01 c8 99 19 e6 6e dd 3e ba e6 55 39 35 9d 2d 0f 48 9d 58 29 ba 52 7a 8c 9b a7 78 54 da 2b 56 8a 07 2f 33 0e 56 eb d0 1c 7a fe 9d 4e ad 61 f0 ea 71 cc f6 28 63 b1 b2 a5 3e ee 3a b6 25 a4 dd b5 55 36 aa fb bc 8e 10 46 bf 05 4e ad f8 98 80 59 c7 d0 00 07 e6 75 24 b0 f1 8c d5 35 e6 ca b0 c6 4e 74 e7 5d e8 97 85 75 7c 5f be 24 63 70 ed a8 ef d4 f1 d5 d2 28 f8 c2 a7 cc 20 7c b2 91 ef Data Ascii: =2dptfU4I__V"uzq}(\m<o/6LADLPJZTLWQ-278jBn>U95-HX)RzxT+V/3VzNaq(c>:%U6FNYu$5Nt]u\|_$cp( \|
2024-05-15 22:36:55 UTC	2024	IN	Data Raw: 0d 9f e6 05 3d 07 55 c8 c7 ed ab 0a 30 8f 89 19 d2 ab 5a ac bb bb eb e8 bd 2e 1d 60 a4 a4 17 ea 4a 5b ec 77 18 28 0b 81 33 5b e3 53 52 17 fc 81 c8 53 fa 9d 2b 57 57 89 1c 22 d4 d5 3a 89 af 2d fe a4 ee f2 9c 32 a8 dd 77 1a 7b 4d 0e f1 97 6b 45 46 b1 ad c2 ba 78 05 5c 55 44 f5 9d e2 58 f9 7c bf c3 e5 83 9e 84 f3 67 a6 a3 b4 92 cc ac 5d 8a a7 36 e1 3c cd 2d df 27 ce de fc 88 bd 99 52 ed bb a0 a1 a4 5a 58 7e 61 49 00 09 e5 c7 38 e8 aa ce 7d 59 b2 32 4f 7f 51 a8 ab e9 46 ee ff 00 a2 5c 1b 53 c6 77 70 b2 e0 b9 3f 3e af 8b e2 4a 65 e2 35 3d 06 d5 ba ed 3b c5 a6 5b b5 0d b9 e5 82 db 46 f2 b4 34 d0 56 b9 22 7a d9 51 08 f3 26 c6 11 39 ba 22 80 00 e9 a7 46 32 b4 5c 5d af af e8 5a 95 69 29 54 85 58 66 ca dc 57 2b eb 76 fd 76 e4 b6 07 0e a3 69 76 ec 6f 23 16 93 ee 82 Data Ascii: =U0Z.`J[w(3[SRS+WW":-2w{MkEFx\UDX\|g]6<-'RZX~aI8}Y2OQF\Swp?>Je5=;[F4V"zQ&9"F2\]Zi)TXfW+vvivo#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49873	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	439	OUT	GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/page_bg_mobile_english.jpg?t=1714777083 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 168027 Last-Modified: Fri, 03 May 2024 22:20:51 GMT ETag: "66356343-2905b" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16152	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: c6 49 3e 27 c7 99 75 45 02 33 9f c7 ca 26 93 71 3b 32 84 3a 85 55 8e 2c 25 55 d1 fd 4a 66 f4 86 70 04 29 8a 4c 77 e8 8c a4 8a 0d d0 66 67 2d 80 52 70 cc ea 3d 71 12 dd 9f cb 27 3a 75 0c eb d3 3b 8b 88 98 3b c0 c5 36 2b d7 a0 0f 50 e9 d7 08 43 11 4e 83 e1 d0 71 42 9b b0 a0 3d bd 04 32 48 de 5c 91 04 80 76 7d 09 20 67 4d 89 85 76 d4 e2 ab f6 28 0c c2 d1 ae e6 bd ee 17 2c 96 e2 47 a7 0f 78 7c e5 f8 4b 45 88 4b 2a cd 74 e2 d6 6e 46 be a1 bf 59 73 14 d8 cd 56 8d db 0a a9 80 7a 93 e1 55 20 94 c7 4c c5 41 74 4a 5f 5c c7 ce 17 ec 40 54 95 8d 48 26 a7 81 f1 60 de b4 4e 2b d7 b1 ed 86 72 dc f6 c0 74 d4 4e 65 91 28 7a d6 58 ab 84 0b 31 ee 71 b9 63 7e c9 68 be b9 5c 7e c9 18 b4 14 4d ca 7e b0 59 cc 37 13 1d 10 4c a9 9d 52 9b bf d5 35 ea d9 a2 0f e4 ec 4f 1d 4b 24 25 Data Ascii: I>'uE3&q;2:U,%UJfp)Lwfg-Rp=q':u;;6+PCNqB=2H\v} gMv(,Gx\|KEK*tnFYsVzU LAtJ_\@TH&`N+rtNe(zX1qc~h\~M~Y7LR5OK$%
2024-05-15 22:36:55 UTC	3163	IN	Data Raw: 5b 35 4d 63 c9 35 32 14 06 96 36 53 0c fc c3 67 e0 05 54 87 a5 8a 59 71 68 fd a3 a6 6e 05 e2 c0 ea 55 93 17 2d 60 c2 ba 26 95 91 af a4 ad ba a9 a6 ec 53 fc 12 de fc 47 e2 2c 69 be d5 b8 c6 26 0f b5 3e 32 08 73 87 93 1c 5b e5 bd 08 34 fe 83 04 c7 54 e8 86 eb 8e b4 d5 44 aa cd 52 f5 bc e2 53 3a eb 57 d8 67 75 47 1f 78 eb 74 d9 1a bf 46 ad 44 5b ee 23 62 e8 e9 de 34 7d 46 8b 42 f1 1f 72 d5 2b 33 ff 00 6c bb 06 b3 65 b6 d7 39 df f5 f0 ff 00 67 59 79 33 b3 78 cf a5 75 2f 22 6b 35 1e 66 f0 be 93 27 61 a2 fd 6e c8 ef 38 5b 26 c6 fb 68 74 ab 6b 5c 14 dc 8b e5 d1 7c 18 a4 a2 28 26 ca cc 88 3e e4 7b 88 f0 92 e3 3f d9 f3 4d 15 a7 e3 be cb b5 2c ac 8d eb ed 8b 4c 50 24 b9 7b cc 4a bf 2b 75 9b 0d 77 35 11 24 cd bb a7 81 5f b0 3c 86 6b 0d 64 61 34 f3 57 3a 33 7b 1b a3 Data Ascii: [5Mc526SgTYqhnU-`&SG,i&>2s[4TDRS:WguGxtFD[#b4}FBr+3le9gYy3xu/"k5f'an8[&htk\\|(&>{?M,LP${J+uw5$_<kda4W:3{
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 35 ce 27 2b 2e 7f b7 2c e6 07 0a 75 67 35 ab 21 f4 33 c4 10 0d 2b c4 0a 7f 14 3e de 73 ed e0 4e 5e 1b 36 b2 c4 bc 71 f5 58 76 ca 71 2b 3e ca ad 35 78 6e 68 c5 5d 35 54 8a 4f b6 35 0e b0 f7 eb e2 da e6 f3 c3 0c e5 de ca 91 71 cb 3d 69 b2 6b d3 f6 26 73 90 46 24 85 a2 2a 3d 95 6e c8 ea 62 c5 f0 5d 15 e8 9d aa 9f aa 51 44 c4 ae 4c 99 8b f5 6b 74 a5 eb ce 7a ff 00 9d 4e 1b f5 fb b2 e4 fe a4 b6 e9 5d 03 f6 31 c5 7d ab a5 ef bc 9d e0 6e ce a4 fd 57 0e 9a e2 1f d8 af f9 d7 e1 ae 7f 9d 7e 1a 60 73 63 86 83 9f 74 fc 8d e3 be d5 e1 9f 10 79 77 c4 ea c7 12 c3 9a dc 35 1c a6 c4 25 21 50 92 89 b0 bb 63 f5 1f b2 e9 5a db 9b f1 bc d1 e1 d4 ca 4e f9 8f c4 36 09 43 72 fb 89 96 32 72 02 c7 a5 37 0f 36 03 90 ba 08 d9 cb ae 6f a3 ac 23 b4 d7 d9 16 d8 9b db 67 e5 07 1a 12 53 Data Ascii: 5'+.,ug5!3+>sN^6qXvq+>5xnh]5TO5q=ik&sF$*=nb]QDLktzN]1}nW~`sctyw5%!PcZN6Cr2r76o#gS
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 2e 15 62 7b eb f3 fe 6a c8 b6 a1 aa 89 a1 c7 38 17 e2 bb 88 a8 e2 20 06 80 b6 05 4a 80 bb 4d 48 d8 83 4c 64 dc 39 76 6e b8 d9 df d9 43 ec 62 cb d4 e5 fd ea 67 30 71 68 20 b4 81 7c 5b b3 1d bb 6f 5a 4d 33 e3 62 48 4a a2 da c4 d9 49 dd ba b6 f7 fe 6a f7 7d 34 8d 6a 0a 73 0a a1 a0 2f df f9 aa 46 88 60 b3 88 f7 5f b0 91 f4 eb ee 20 fd 97 fd 7a d1 ea a5 8e 31 2c 0e 05 a0 07 21 42 0f 89 5c 76 8d 84 57 f9 7d 3f 73 fe bd 7d c4 0b fa af fa f5 34 0e d2 e9 73 31 c4 7b b2 7f 16 a5 d3 0d 26 98 e7 61 69 f0 bc 22 84 29 f6 87 7d 26 87 99 48 c8 be 81 47 33 b1 ae 0e 68 5d a8 01 34 9a 9d 1e 9a 51 c0 39 87 d0 e2 3f b3 45 39 3c 4b fa ee f6 56 a1 ce 11 c3 00 7e 5f b3 04 1c 14 02 e2 5c 7b 46 5e ca 12 c5 2b 9b 20 da 09 07 bc 5e b5 6d d6 eb d9 3e 96 c5 99 9b e3 6f 02 5a 1a a3 ad Data Ascii: .b{j8 JMHLd9vnCbg0qh \|[oZM3bHJIj}4js/F`_ z1,!B\vW}?s}4s1{&ai")}&HG3h]4Q9?E9<KV~_\{F^+ ^m>oZ
2024-05-15 22:36:55 UTC	7952	IN	Data Raw: 81 65 c2 55 d8 b5 76 11 41 ae 6f 85 6b 46 f9 8a 58 e2 50 7b c6 9a 58 5b 88 c0 9c 36 ed af 3a 67 06 c6 00 2a 14 94 36 54 04 a2 ec 07 11 4e cb e6 3b 56 5b e1 6b ac 09 38 1f 09 c0 6d a9 35 1a 89 0b a5 71 52 4f e5 87 48 8e 26 f1 27 60 1b 49 e1 5c aa 37 bd ce 25 be 02 e1 6b 0b 90 97 1c 2a 37 3d a1 a4 8b 2b 8d c7 7f a3 65 73 2e 6b 3a 1d 3c 11 87 7b ce 41 bc 94 52 80 5c a5 f7 63 5a 6e 63 13 fc 13 40 24 6a 39 c9 e2 0a 13 69 1b b7 8a f3 5a ec c4 63 e2 28 0a 63 8e 3c 05 ea 49 0c 92 10 d9 32 12 17 2e 65 44 c5 71 40 b5 99 e1 6e 8a 49 45 c4 8c 71 eb c7 1a 77 89 06 5f a4 71 ef dd 5a 60 e8 ce 6f 29 97 fe a8 a0 21 46 95 c4 d0 76 a9 e1 f2 37 6e ce ea bd a9 e5 8f f1 e0 2b ce f3 15 ee b9 a0 43 95 29 f2 4b 18 87 9a 81 e1 99 a2 fc 03 c7 ce 6f 5d c6 c3 4e d1 73 4d 3e 52 6e d7 Data Ascii: eUvAokFXP{X[6:g6TN;V[k8m5qROH&'`I\7%k7=+es.k:<{AR\cZnc@$j9iZc(c<I2.eDq@nIEqw_qZ`o)!Fv7n+C)Ko]NsM>Rn
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 70 17 6e 27 65 48 74 dc 93 59 20 61 47 65 86 47 21 dc 51 a5 0f 03 5f 8b 22 1c 9f 58 dd 7c ee 64 6c 67 93 20 79 0f 69 6b dc 1b 95 51 ad 2e f1 25 8a 5c 1a f1 72 1d 68 ff 00 c8 97 ea d6 b0 f3 cd 26 a7 4f 0b 1a dc aa d3 19 73 89 2a 99 db 70 00 ba 6d 22 b5 fa 8e 58 35 2f e6 31 b7 33 1a a1 d9 90 82 46 50 d5 24 b5 40 00 e2 98 e1 56 fc 3d ae ff 00 91 2f d4 ad 6e 8b 57 cb f5 50 41 23 03 c1 7c 72 30 66 6d b1 2d 00 2b 49 c7 1c b6 bd 3a 78 f4 33 cb 1f 94 d1 99 b1 bd c2 ca a1 40 22 d5 9c 72 bd 49 6a 63 e5 3d 3f 76 98 ba 72 27 64 6e b1 56 91 9a 43 bf 05 1e 8a e6 1a d3 c9 35 99 1c f2 1b f6 32 7b 8d f0 b5 3c 3b 80 3e 9a 8a 37 68 e5 6b 5c e0 09 2c 70 01 4d c9 24 59 2b df 97 f6 87 d5 a9 e2 87 49 2b a1 0e 39 48 69 2a 36 5c 04 36 c7 8d 43 3b 74 33 2b 1c 0f b8 ed 87 aa a0 f8 Data Ascii: pn'eHtY aGeG!Q_"X\|dlg yikQ.%\rh&Ospm"X5/13FP$@V=/nWPA#\|r0fm-+I:x3@"rIjc=?vr'dnVC52{<;>7hk\,pM$Y+I+9Hi6\6C;t3+
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: db 19 19 1b 4f f6 20 2f 3f 4e 1e 3b 5d d8 e4 70 93 2c 32 84 ea 48 b5 31 97 88 28 ea 28 ce a7 5e a2 49 61 cb 89 68 8c 1d c1 34 b0 99 6b 66 eb 7f 49 c7 d4 8a 47 e9 81 e5 f7 94 96 9c f7 19 54 f5 c5 d5 d1 11 20 12 4f 13 d4 a9 83 ce db ad 96 67 af 67 29 6e 0a 98 c1 52 10 f1 c9 04 a2 7a d4 a0 a2 bd a9 63 d4 2f 4c 8c 47 e2 3a 11 a5 e9 f7 37 93 68 d0 ca 35 57 6c 55 2c 7e 21 ac 44 96 fa 09 89 72 76 1e c6 86 22 fa 75 76 46 a0 7a 70 d4 ff 00 32 7e 0b a9 bf f6 8e 46 c4 10 53 cd 77 ed c9 8f 44 86 56 63 90 c0 de ae e9 4a cc ed 1b 02 d5 6d aa 3b 05 20 01 eb c4 19 ff 00 0e 6d fd 88 d4 e3 54 f7 55 29 e0 71 75 33 38 99 9c 6b d8 ca 53 68 0d ba d3 02 08 0c 75 56 d0 f4 b1 e0 2c 35 6b c4 aa 34 55 8e 18 d0 28 1e 80 05 50 00 fd 27 ae bc 0f af af 54 51 b6 bf af 55 3a f1 b6 bf 37 Data Ascii: O /?N;]p,2H1((^Iah4kfIGT Ogg)nRzc/LG:7h5WlU,~!Drv"uvFzp2~FSwDVcJm; mTU)qu38kShuV,5k4U(P'TQU:7
2024-05-15 22:36:55 UTC	7952	IN	Data Raw: f2 51 eb a7 12 d5 97 76 79 01 61 9b b2 59 a3 cc 11 20 ec d8 86 ca f4 93 36 83 59 21 00 ff 00 b1 27 85 92 1c de ff 00 b3 51 62 b5 35 d6 4c e4 31 c8 a5 63 12 c3 ed c4 d7 13 a8 2b 06 12 03 a7 2d 34 d7 8c 7e e9 da 33 ef 5c fd cc 9d bb d1 5d c2 6e 7c fe 2e de 22 bd 2c 86 09 6b 45 67 1b 42 5b 2f 1b 5d 59 6a 46 ee ee da a2 33 74 f3 e5 c6 67 17 5b 09 1a c3 94 c1 66 b1 f8 fa b6 73 94 c4 74 f2 d9 1c 6d ca 35 87 cb 62 4d 71 d3 49 65 1c ea cc 20 60 da 2e 8d a7 18 4d 99 91 b3 43 19 9a c0 e2 b1 7b 7f 33 8f a5 18 bb 0a e6 36 ed 1a f8 4b d2 47 91 25 21 92 29 2e 24 be d9 d8 eb 20 05 80 00 03 c6 2e 5a 55 71 6a d8 a4 82 2e aa 91 3f 6a 58 63 b1 17 5c 8b 12 c9 10 36 56 68 0f 44 84 1f 9d f9 92 39 19 f1 bb 66 d5 17 8e b4 e9 05 da 16 a3 8c cd 4e bb 2b a3 48 f6 93 59 2e c9 13 b7 Data Ascii: QvyaY 6Y!'Qb5L1c+-4~3\]n\|.",kEgB[/]YjF3tg[fstm5bMqIe `.MC{36KG%!).$ .ZUqj.?jXc\6VhD9fN+HY.
2024-05-15 22:36:55 UTC	13933	IN	Data Raw: c9 6d fd cf 8b b3 8b c8 57 9a 34 90 a2 ce 9f b0 b9 58 ba b7 66 fe 3e c8 49 eb ca ba 3c 33 c6 8e a4 32 83 c6 f2 a3 d7 1c d6 b1 90 fd 18 cf 11 55 82 cf b2 cc 5a 8c b1 e8 69 57 b3 24 88 4e aa 5b 91 1a 12 38 ab 14 d2 35 2b 48 f0 49 ed ae af 61 fa 0b 2a 89 44 da bd 57 89 db 90 6e bf 9b ec e2 66 05 65 b7 0e 43 34 de e1 14 46 85 b2 17 24 36 8a ae ac dd 33 2c 69 cb 5e 95 60 7a 40 07 4e 33 44 3c b5 99 f1 50 3c b2 d2 93 da cf 31 f7 c8 07 7a 58 d4 b4 a0 06 3a 6b cf 53 c4 c4 da ca 93 db 94 ea 72 53 1f 44 63 cf e4 d0 ff 00 0f 14 08 2d d2 68 d3 20 68 de 9e de 3d 39 69 f6 71 34 a4 48 c2 18 26 9c a2 eb d6 cb 0c 6d 23 2a f5 68 3a 98 2e 83 e1 a9 e1 64 10 48 15 d1 24 1a b1 e4 ae 81 c6 a7 a7 4d 40 6e 7f 0e 23 88 46 c0 c8 48 07 ac 31 1a 0d 75 e9 d3 5d 39 71 f8 5f f8 17 5f ed Data Ascii: mW4Xf>I<32UZiW$N[85+HIaDWnfeC4F$63,i^`z@N3D<P<1zX:kSrSDc-h h=9iq4H&m#h:.dH$M@n#FH1u]9q__

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49876	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	613	OUT	GET /public/shared/images/trans.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 43 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-2b" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49875	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	663	OUT	GET /steam/spotlights/cdf177cb0f475f16d8a70293/spotlight_image_english.jpg?t=1715360642 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 38467 Last-Modified: Wed, 08 May 2024 22:11:52 GMT ETag: "663bf8a8-9643" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16154	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 8c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: de 8c 44 d6 c0 b2 ea 55 45 2a f0 3a 45 3d 7a d6 22 d7 83 83 48 c9 c1 49 30 79 35 7a 6b 38 3a 65 29 85 d9 c0 5c 04 d4 1a c4 5b a4 dc 47 44 30 8f 24 63 18 c7 c3 2d 75 73 d6 47 f1 01 0c 0c 3a 0e 41 ae 17 2b 56 c0 2b e6 fe 3a 4a 5a bd a4 a3 9a 86 db d5 41 4b 08 cd 0d d3 c8 cd c5 66 d7 2d 5f 18 89 0d 3c 3b c3 0c d0 42 21 a8 7d 4b 74 fc c7 b6 62 59 cd 3a 6d dd 07 04 cd b2 1d 00 1d aa 03 06 d5 1a 1d 5e c1 1c 2f 81 6c 52 2c c3 bb a6 d1 56 d1 74 45 aa d4 28 4e e9 76 4a c9 77 68 8e 1e 8c 74 c1 7d 86 88 db 42 dc 5f cb e9 01 8a 5a 5a 01 e0 54 4d 51 a9 5d 60 36 f3 bb 32 63 a9 18 c4 b4 8d 95 ed d4 ce 13 b3 a6 34 03 2e 94 5c d5 d2 e0 82 ac ba 8d 32 c6 82 d4 c5 85 9a 4b a2 c1 7a 7f 71 32 b8 3d a3 5b a2 55 ab e6 9a a4 a3 a9 61 d9 94 50 5d 02 38 98 03 92 8e d1 8c 63 1f 02 Data Ascii: DUE*:E=z"HI0y5zk8:e)\[GD0$c-usG:A+V+:JZAKf-_<;B!}KtbY:m^/lR,VtE(NvJwht}B_ZZTMQ]`62c4.\2Kzq2=[UaP]8c
2024-05-15 22:36:55 UTC	1857	IN	Data Raw: b6 94 50 b4 ef fa d3 06 59 79 31 ea 2f f2 d7 d2 ea 03 4f 81 d4 a1 93 f2 fb c1 08 20 ee 0e 9b fc 77 29 38 95 21 cd e6 f9 a0 1f 5b fe 0f 8d 12 b9 42 5c ff 00 54 fd 04 05 ed 74 7a 62 08 86 50 f6 8e cb d9 83 b2 76 8a 8b 94 ae 31 a8 ef 5e a5 5f 50 00 d8 fa 22 55 75 b5 c6 7f a9 94 a0 ef 32 0b 9a de 2f 30 6f 9f 62 19 86 be 73 3a 13 54 29 3c c0 50 ed 33 59 85 d9 a9 fb 5f c4 01 46 9b 76 db c1 95 51 f0 3c 76 5e ca fd 4a 4b 95 7d 77 50 46 9f 5b 4a d7 1d 7a e0 85 22 ba 6f 51 d3 43 52 5e 85 5b 56 87 15 6f 6e 23 81 62 97 c8 70 71 1f 06 3e 2b 67 74 7f 07 cc 13 0f ed 0f dc a1 b6 f3 10 6e b9 7a 3a 43 5e e5 79 f7 8c 3c 99 39 f4 79 e9 ed 2a 6c eb 89 e8 07 d4 ca e7 6c af b3 47 cb 02 9b a7 0f dc 1a 2b 88 75 88 d0 fa 8a 74 8a 03 18 74 97 54 5d 9e 7f 31 6c 14 a7 6e be b0 d1 4d Data Ascii: PYy1/O w)8![B\TtzbPv1^_P"Uu2/0obs:T)<P3Y_FvQ<v^JK}wPF[Jz"oQCR^[Von#bpq>+gtnz:C^y<9y*llG+uttT]1lnM
2024-05-15 22:36:55 UTC	4072	IN	Data Raw: 41 c0 7b 51 34 5f 30 18 4a 15 fb 37 38 65 74 e0 02 f3 d7 bc d7 96 6a 93 61 81 b8 c6 16 0e 5f 7f 07 6d 7c 87 94 f0 93 5c ab 8b 0f a0 fc ca dc f2 6a ea c7 fb 22 02 16 92 34 a5 63 39 c7 85 e0 a7 57 ec 67 fb c4 20 03 96 e6 6d 5c e3 ac ff 00 58 8f f5 88 ff 00 58 84 81 05 f4 73 96 db c7 33 fd 62 3f d2 23 fd a2 33 42 ba 97 a7 b7 f0 23 1e 7c 0a 5c 13 47 c3 08 13 4b 2f 43 f7 14 43 74 1a a9 7c 26 e4 b3 11 2b c2 81 9a ef 01 e8 b7 e5 97 2e 5c bf e7 7f c5 fe 2f 8a 86 61 ac 1a be 62 b8 59 81 8b 38 e3 dd 96 62 8d 3b 3b cd 21 f9 3e e0 14 c3 d9 fc 93 37 f6 3e a5 1c 42 2c 17 f3 fd ce 98 b9 3b cc ff 00 5b 2f 55 fd 54 b9 72 ff 00 98 17 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e6 ab df f5 15 36 6f 2e 61 c2 20 d6 1c 4a ba d3 f8 3e a5 9d 68 34 7a 41 83 c0 44 03 d9 f8 89 f8 8c fe a6 31 Data Ascii: A{Q4_0J78etja_m\|\j"4c9Wg m\XXs3b?#3B#\|\GK/CCt\|&+.\/abY8b;;!>7>B,;[/UTr.\r.\r6o.a J>h4zAD1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49874	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	663	OUT	GET /steam/spotlights/dde8d7c40e4c6dadb9d04c58/spotlight_image_english.jpg?t=1715642754 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 49403 Last-Modified: Mon, 13 May 2024 20:11:03 GMT ETag: "664273d7-c0fb" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16154	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 3c e3 94 7d f3 9b 4b 0e 31 97 67 9f 73 b5 f2 df c9 b2 81 a0 61 e6 db e9 5d 4d 33 81 e5 7d 59 ca 1e 4e bf d9 7b 25 94 3a 59 7b b8 d9 9c b4 07 dd f0 a6 5c ad 94 e1 0b 0d a0 ba cd 96 e4 cc 20 75 46 07 8e bf 4a 39 9a 49 ce b6 47 18 78 c6 59 4c d2 b2 fc 52 5b 0a 9e 28 f0 4c e7 15 0d 91 c9 59 00 f9 46 48 0c 72 a9 22 69 37 f8 33 f8 d6 d9 26 56 f9 57 ce 71 66 09 e3 38 59 5a 2e d7 1c 99 96 7b 3b 28 1e f5 a8 3a e1 b5 f7 cc ae 1f d3 ed 17 89 47 a6 44 d0 46 8a 26 28 ee ed 15 85 ef 1c 4e 4f 54 44 eb 37 e5 b1 41 13 00 57 22 d4 ce 25 8b 4a 2b 95 c5 63 f0 8e 9b bf 55 b2 cc f2 79 16 2a 27 95 c6 9a 33 7f 6f f7 78 a6 d6 9c dd d9 46 dc c4 4c 73 a8 62 fb 04 ab 57 af a7 d0 ce a3 22 e3 75 9f 70 36 dc 0b cc 67 b3 9a c2 72 07 f3 b6 39 94 a5 8f 67 5a 9a 00 8f f2 dc 02 6a 5f b2 02 Data Ascii: <}K1gsa]M3}YN{%:Y{\ uFJ9IGxYLR[(LYFHr"i73&VWqf8YZ.{;(:GDF&(NOTD7AW"%J+cUy*'3oxFLsbW"up6gr9gZj_
2024-05-15 22:36:55 UTC	2625	IN	Data Raw: ca 5a b2 b5 1d b3 22 ca c1 5a 1f e6 3a 52 42 0b a9 6d 44 a4 0a d4 61 cb 55 c2 49 80 9b cc b8 77 0d dd 32 da d2 5a 93 2d f8 8c e8 d0 cb 8a c9 b4 ba e1 5b 8e 28 a5 4a 24 e5 4e 38 b7 83 b3 cd e9 bb 5a 0a 60 46 bc 4a 76 64 76 d4 ac d4 e0 8e a2 96 8a cf 6a 8a 6b 83 61 81 12 2e ca 48 21 42 45 a2 db 01 3c cd 24 10 87 b5 b3 ac a0 d2 87 42 d2 69 db 8b 6e d9 db b1 04 0b 3d 85 af 27 12 10 5a 9c e5 04 1a 94 eb 59 2a 56 66 b5 26 a7 07 07 e9 2e c9 8f 12 12 50 35 6b 7d c6 d2 40 fa 94 70 b8 5b 1e de 89 12 5f 0b 48 bc a9 27 96 de 81 e2 e5 21 61 3a 94 2b 91 22 9e bc 5d 27 cf 92 a7 1e b7 40 7e f1 74 94 fa 89 2d a5 20 90 a7 54 78 ad 6a a2 52 38 d4 81 8b 64 a7 14 5c ba 01 25 84 c9 39 ab 9a c1 53 88 0a 3d ca 4f 87 ea c4 8d a5 21 4b 5d bb 70 24 c8 8a c9 74 b6 86 e6 47 4e a2 a3 Data Ascii: Z"Z:RBmDaUIw2Z-[(J$N8Z`FJvdvjka.H!BE<$Bin='ZY*Vf&.P5k}@p[_H'!a:+"]'@~t- TxjR8d\%9S=O!K]p$tGN
2024-05-15 22:36:55 UTC	14240	IN	Data Raw: 82 f9 ad 16 0b 2b 20 54 f8 54 0d 7e a5 61 d8 f6 e9 4a 55 bd dd 2b 81 71 2a 0b f1 37 42 97 35 27 23 c4 85 01 c3 86 2f f6 f8 b3 91 36 23 c1 a7 e2 48 6c 10 db af 37 4d 45 00 e6 2a 95 28 62 1b ac b8 a4 c9 db d3 54 cb ca 4a 88 50 42 ce 46 a3 3c ea 30 93 1e f5 70 61 43 87 2e 4b a9 fc ca c4 67 51 b9 af 51 51 25 be 74 45 3c fb 9a 5c 6f 52 90 16 8d 66 8a 4e a4 91 51 da 30 34 ee d9 4e 25 39 d1 d4 b6 e7 fb 49 38 4a 5e 95 0a 72 13 c4 3d 19 20 9f 6a 0a 70 9f 3f b6 20 c9 03 8a 99 79 c6 89 ff 00 4b 58 c2 45 c3 6b dc 22 9f b4 a6 1d 69 e1 fe b7 2c e1 21 e9 73 60 29 5d 8f c5 59 03 d6 51 a8 61 22 3e ec 82 14 ae 08 75 65 a3 fe b8 18 53 d1 ef 70 1e 69 09 2a 5b 88 90 d9 00 01 52 49 d5 90 03 08 87 6c 94 51 b6 20 c8 53 56 d6 53 ff 00 f3 9d 6f 27 65 2b f6 13 ee a3 bf 33 ea 8f 6d Data Ascii: + TT~aJU+q7B5'#/6#Hl7ME(bTJPBF<0paC.KgQQQ%tE<\oRfNQ04N%9I8J^r= jp? yKXEk"i,!s`)]YQa">ueSpi*[RIlQ SVSo'e+3m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49877	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	684	OUT	GET /public/images/v6/search_icon_btn.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1816 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-718" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	1816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRctEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49878	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	687	OUT	GET /public/images/v6/home/cluster_bg.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	271	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 134600 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-20dc8" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 21 00 00 01 c5 08 06 00 00 00 cc 9f e3 cd 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR!pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 99 54 cf 37 e0 3b ad a4 f6 f5 4e 7f 23 d5 c2 5a dd bb e3 c2 f7 ae ac cb 33 1a 0a 4e 7f e1 b3 fc e1 47 a8 71 ad 13 cb 15 ff f8 57 5c 4f 26 c4 73 7d 07 50 ad 4a 28 54 64 df 19 dc f6 43 c7 62 d5 08 25 5d 45 3e d3 00 f7 c5 fb a6 42 70 ab a2 88 2d f8 ce f4 20 55 e5 3d c3 80 3e 96 d6 ed b2 3a 86 78 57 07 fa ce 8e a9 02 82 2a d2 3d 04 f9 32 c2 7d ef 22 04 ac ac a3 12 cc 63 99 02 ae 23 83 03 00 23 04 04 69 26 12 fb 3d 57 df 0d 9c ef c6 81 02 48 0f 32 8f 95 78 a1 d2 6d a8 d6 47 07 17 d7 1c d3 bf 8f 02 ec 26 64 89 7a df f9 3e d5 98 57 a5 00 8c bc 63 a4 9a 23 bf 58 66 41 13 80 2e 21 b7 14 29 96 46 23 47 40 9c b9 73 98 45 a3 f7 05 1f 80 ed 73 b6 56 8e f7 df c0 33 83 98 46 c2 0e 9e 65 83 80 dc 71 67 76 95 99 32 c2 75 e3 ca 2f 92 b1 5c b1 17 6c 6d 55 b6 63 37 67 ee 99 Data Ascii: T7;N#Z3NGqW\O&s}PJ(TdCb%]E>Bp- U=>:xW*=2}"c##i&=WH2xmG&dz>Wc#XfA.!)F#G@sEsV3Feqgv2u/\lmUc7g
2024-05-15 22:36:55 UTC	2351	IN	Data Raw: 49 df 43 ed 85 c4 2f 1d 26 08 d3 cc 1e 73 99 11 ec 1c 50 91 65 d7 3e b2 ca 30 4a b2 4a 92 da fb aa 0c 1a c8 cb 44 18 d9 08 e8 2c 96 61 88 ca 04 e0 0e b2 1f 95 8f c7 88 71 60 ad 7c d1 e9 c4 9d 29 65 58 f9 bc 13 4c 76 98 ee 0a a9 73 57 c7 8f 33 38 f2 b7 e1 eb 0f 63 f7 64 42 68 d6 2c 11 26 54 1b 5c 45 6c 5c aa 7f ca 64 3a 86 d0 31 c2 57 0c a2 8b 16 9c 79 6e 20 cb d4 70 75 d7 6a 6e 87 38 40 11 1a e3 86 f5 b4 36 97 ad a1 9c a0 dd bc cf 1c c5 6f 0b f7 6f 05 b8 a9 c8 b3 2e 3e 5f 39 63 03 3a 0d b1 7a 97 b9 cd e1 26 d6 db 9c 19 70 8c d0 6f c5 78 b0 da 72 56 7a c0 40 80 52 9b 47 e0 c8 2a e2 88 d9 97 19 b8 0c 64 1a 0e ae 6d e1 10 7b 2e dd cb 2c 95 bc 72 c4 ab 32 87 3e 91 0f db bf ff be 4d 73 da c9 9a 67 e9 b5 6e 2f 3a 31 c3 86 8f d9 19 8c 9c 3d fe 4e 15 c5 ed 58 ab Data Ascii: IC/&sPe>0JJD,aq`\|)eXLvsW38cdBh,&T\El\d:1Wyn pujn8@6oo.>_9c:z&poxrVz@RG*dm{.,r2>Msgn/:1=NX
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 4f 6b 91 89 70 82 80 73 06 34 86 71 7c 54 e6 86 12 71 9b bb 8a 30 9b c1 34 20 e6 71 ee d0 6d 10 d5 7e 4e 40 e6 26 e6 c9 a9 f0 b3 3d 76 74 dc 58 db cb 26 d6 1a 84 93 55 ad b5 9d ec 29 06 66 5a 40 52 54 e2 90 ef 64 8d b6 00 ac 56 a0 02 82 88 af 6a ee 37 33 16 55 a9 46 17 c4 52 27 c0 b1 c1 8b 00 aa 35 55 9d 27 4c 78 4e 75 72 18 86 44 51 c2 8e 40 9e a1 56 95 8c 25 24 20 cb 36 83 38 8b 94 de 08 d3 d3 c0 02 a1 34 db eb 11 10 4e 2c cb a7 fa fe 9d ec b9 21 48 f8 ca 86 6e 21 b1 db 05 b1 ea ce bb 15 1f ca d5 d1 9f 6d a1 ad 08 b0 06 ad 4d e2 48 8c aa c3 53 33 04 b5 f2 2d 19 51 35 cf e3 2e c0 7b 33 e3 c4 ca 15 93 e0 41 45 6c 2b 3f 0e f8 67 57 9f f9 5e 3b d6 32 49 d8 b3 38 81 f5 61 ce b7 61 fc 56 46 72 28 9f 33 15 1b bd 02 b8 1b ce 95 72 af 92 07 77 64 2d 24 59 ca 67 Data Ascii: Okps4q\|Tq04 qm~N@&=vtX&U)fZ@RTdVj73UFR'5U'LxNurDQ@V%$ 684N,!Hn!mMHS3-Q5.{3AEl+?gW^;2I8aaVFr(3rwd-$Yg
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 96 bb 01 3b 23 dc 90 b3 f1 d9 51 47 34 99 d3 9a a6 d0 56 ef df cd 3b ce 46 ed 48 24 6c c6 d1 52 91 9b b9 43 48 87 17 c7 e9 e0 6d 1d 2b 70 f7 8e 8f 99 07 5b 71 10 61 62 fb d5 1c aa b6 83 2e 95 4c 91 26 1b 3e b6 99 64 e4 8f 12 56 04 ea 76 80 ce 39 9f 53 e0 95 9d 4a 7a d5 77 d4 19 37 33 21 d1 04 61 02 f0 f4 f7 81 75 01 2f e6 30 b2 34 5c 06 40 98 93 da a0 33 15 2a 00 a6 6a 9e 9b 88 5a ed c5 dc 77 01 aa 12 62 c3 09 1e 77 62 3b b7 c0 29 ad 3a 87 b0 0c 10 37 8f 09 c9 d1 42 5b 5d 9d 71 15 11 38 db 41 a6 33 03 33 ce 83 38 6f cc 1e cf fb 69 45 74 8c 11 be 8e 80 73 8e 68 2b 48 65 27 a4 b9 43 8b 98 0d f8 0e 07 cc 7f 62 3a 5b 69 34 ab 19 50 03 e4 69 bd aa 4b 98 2b c9 70 e3 07 70 4d a1 1e ac 8d 39 eb 40 e9 30 39 90 cc 08 a2 66 08 0b 17 b0 6b 04 b4 1d 9f 75 07 17 8f 4d Data Ascii: ;#QG4V;FH$lRCHm+p[qab.L&>dVv9SJzw73!au/04\@3*jZwbwb;):7B[]q8A338oiEtsh+He'Cb:[i4PiK+ppM9@09fkuM
2024-05-15 22:36:55 UTC	7952	IN	Data Raw: fa 8e 66 02 29 8a 58 65 62 d7 8e b0 4d fd d6 8d 90 05 c3 90 51 6e 0d 0c 03 b0 66 51 e3 01 9e 01 b5 43 67 8d b1 a0 cd 4e 08 cd 8a d4 db e0 3b d0 a8 92 23 a6 f1 d6 05 58 ae fc 02 b5 96 50 f8 0e b3 3f ab f6 50 35 17 1b b8 de 19 0c e1 51 f9 e9 55 80 a3 4f eb 0b 01 d6 00 74 c7 96 6a 7e 76 70 f1 f8 ea 6c da 45 20 ab 09 bf b6 19 4c 56 8d d5 8e 3a 13 6a 2e 61 4e 4a 21 10 62 be c4 8e 9d 21 3a ae e2 ff 84 38 fe 40 42 7c 05 e1 50 2d 86 11 1c 2e 57 06 03 c8 fa 03 37 e3 30 26 13 e9 04 6f 18 f8 66 aa ca 67 14 e0 01 5e 72 b0 87 0e 5f ea d4 27 24 4a f5 1c 0c 2c 55 75 5c 1d 1f d3 c3 d4 f3 a4 59 03 10 0e bc 2a c9 51 6c 31 0e 87 00 82 b9 54 80 2b 11 45 7c 2b 98 ea 44 c4 ae 72 a8 54 fd f8 71 ed ec e4 7e fb 44 d8 00 6b 51 68 16 ad a9 a2 12 1b 74 f7 11 55 6a c1 3e b3 09 a7 66 Data Ascii: f)XebMQnfQCgN;#XP?P5QUOtj~vplE LV:j.aNJ!b!:8@B\|P-.W70&ofg^r_'$J,Uu\Y*Ql1T+E\|+DrTq~DkQhtUj>f
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 0c d1 a0 f4 33 12 6b f1 44 fc 9a 91 0c 10 eb e8 84 2e 2b 9f 9b 04 40 0b fb d1 69 4e 3c f0 2c 8a ff 08 63 8c d4 f4 60 06 ef 1a 17 de 4b fa b9 1f da 47 b0 08 cd e0 41 92 cf ce 0b 0f 9a d4 91 b9 4e 74 1b 9a 3b 81 54 1d 38 42 a6 96 31 e0 95 a0 0b 13 ec 9a 06 54 b8 85 0b 45 90 96 32 6a 00 17 b4 19 a8 eb f6 55 1a 72 27 4c 71 a5 12 ab bc a2 5d 9a 2a e0 4f 7d 5d 1d ef 99 e1 6f f0 9e ef c0 b3 6e 41 83 b7 e4 5b 01 74 75 aa 70 fe 5c 55 1f c9 7e cf de c7 59 b1 f9 2c da a9 ec dc 56 02 a1 2a bd 51 c0 9d a5 94 2a 81 2e 96 49 70 90 f9 e3 ca 28 ba d9 7c 53 c0 ce 84 32 d3 f2 90 2e 08 8f 4f 27 93 1d 61 21 95 a1 92 04 ce ec 64 aa b2 2f eb d0 35 da ce f3 bb c3 8b 6a ae 3f eb 86 4c ac 00 7c 72 da 02 43 02 41 dc 57 02 14 01 5f 22 a6 52 88 7b 48 54 a4 40 0d c8 2c 3c 13 12 a1 85 Data Ascii: 3kD.+@iN<,c`KGANt;T8B1TE2jUr'Lq]O}]onA[tup\U~Y,VQ*.Ip(\|S2.O'a!d/5j?L\|rCAW_"R{HT@,<
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: a9 ca ec 48 52 cc 93 d2 15 c6 c0 ab 92 10 36 a7 fb 42 0c a4 da 2f 80 cf b2 00 74 9a 5e 9a 71 90 64 3c 29 60 31 c3 fb 9e 66 33 52 eb e2 ce a9 ad 0a 22 5a 40 6c bc 2a ac 94 82 84 a4 af 3b 32 91 62 05 3a fa 46 40 91 80 d2 e4 e7 a9 a5 dd 15 e0 7e 85 5c 79 b5 24 c2 81 e5 19 be ab 79 81 5c bc 4a 94 7c 87 9e c4 bb fa f3 0a 31 03 03 60 af 00 51 5c 08 6c 77 2c d4 53 81 d2 57 48 93 9d 8c 1b 47 36 a4 44 45 72 50 d5 c2 b8 d3 95 d3 aa 12 90 34 f3 46 89 69 ab 3d 73 6c ac 51 2a b6 4f b4 8a d8 9a ec b4 76 9c 7e 40 13 fb 31 3b 04 9b 04 a0 56 cf c0 62 b1 41 d6 cc 61 00 bc ea a3 8a d4 6a 4f c8 b2 7e 07 95 ab 06 90 b9 37 1c e0 36 f2 8d 8c 69 a5 c7 b5 6b f3 fb c0 73 86 b6 fb 6c 47 26 44 cb 48 94 75 dc 0e 71 60 b0 63 7b 3c 0d 01 98 5a 79 bb 35 ab bc af f9 4f b6 c3 7f f3 e4 e3 Data Ascii: HR6B/t^qd<)`1f3R"Z@l;2b:F@~\y$y\J\|1`Q\lw,SWHG6DErP4Fi=slQOv~@1;VbAajO~76ikslG&DHuq`c{<Zy5O
2024-05-15 22:36:55 UTC	7952	IN	Data Raw: 28 aa 06 66 fb f7 36 26 30 5b 0f 83 c8 77 30 c7 55 1a 9c b3 21 71 ec cb 0c 02 e3 4a 5d bd fa d9 10 ac 90 63 4e 3b bc 1d ce 84 57 ac 45 01 9c 59 dd 14 c8 f3 39 06 b6 91 81 dd c0 35 19 ba 58 38 7b f1 b9 89 67 4d 88 2a 05 8a 0d f2 03 da 8a 6f 16 fd ee 1c 1a d8 33 1d f0 82 8c 10 7d ce 18 f8 f3 f3 ae fd 77 14 fd ea 80 79 65 a9 e4 44 9c 14 20 3e 8f bf aa 6e ae 22 22 d9 18 6a 05 eb 5a b1 d3 00 b7 45 75 4c 6f f2 fb c4 1f d9 b5 f4 74 43 05 48 57 ea 7b df 71 62 dc c2 3e be d2 d2 8d c9 05 ab 5f 1d ac 37 e8 72 aa 57 ca 62 fe 54 00 b6 33 ff be 9a 44 bb db dd 7e 95 b9 f1 2b 6a 8f 7c c7 ba 7a b5 24 f1 1d d9 25 bb d7 d8 55 f4 df b9 4f a5 a1 95 5c bf da 7b 54 39 36 08 c8 4f 05 c1 dd 98 65 0e 77 9d c4 d2 10 04 81 c2 30 ab cd e7 40 ad e3 b0 c6 28 1d 75 49 38 eb 57 e0 39 13 Data Ascii: (f6&0[w0U!qJ]cN;WEY95X8{gM*o3}wyeD >n""jZEuLotCHW{qb>_7rWbT3D~+j\|z$%UO\{T96Oew0@(uI8W9
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 9b d9 0c 91 a1 6a fe 41 5e 80 02 7c 6b 9f 38 eb c7 4a 84 66 12 90 5d 3d c3 27 63 f9 41 58 c4 f5 3e 8f d3 e7 54 ff 7f 92 23 07 ea d3 75 97 3e 77 9e 54 55 c9 c6 f9 f7 9d 30 9c 8a e1 45 30 c6 dc e7 99 b7 ee 2a a4 d9 a1 33 22 76 36 73 27 8a 79 75 43 64 19 49 28 00 c4 0e 33 9f 10 82 80 4f 65 53 ee 32 af 04 4d ef 0c 14 dd 5a f1 ab 00 ac fb a4 f9 ef 01 05 c9 df 25 02 5a d5 1a c9 2c b0 77 ac 31 ef 76 b7 3f 65 be 29 bd a6 bf ad 1f be 92 e4 d8 d5 92 da 79 77 49 ec f2 ea 33 ee 64 90 3b bd ae 44 87 ae fa db 0a 78 ae 99 dc 4d 7c ae 93 18 be 1b ec c7 fa b5 13 d0 db c9 33 38 a7 0e 05 a8 15 16 5d 31 68 f5 d9 f4 c0 1b a4 1f aa 4c 02 47 c4 4f ec 59 bd b2 f1 91 62 90 11 60 9e 24 33 2c 15 f8 fc 8f 40 f9 28 38 88 0e ed 05 ea 98 2a c5 28 b2 4e 99 f0 a5 0c c9 42 b5 6a 25 30 cb Data Ascii: jA^\|k8Jf]='cAX>T#u>wTU0E03"v6s'yuCdI(3OeS2MZ%Z,w1v?e)ywI3d;DxM\|38]1hLGOYb`$3,@(8(NBj%0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49879	96.17.60.195	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	570	OUT	GET /dynamicstore/saledata/?cc=HK HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://gtm.you1.cn Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/json; charset=utf-8 X-Frame-Options: DENY Cache-Control: public,max-age=300 Expires: Wed, 15 May 2024 22:41:55 GMT Last-Modified: Wed, 15 May 2024 22:35:00 GMT Strict-Transport-Security: max-age=10368000 Vary: origin Date: Wed, 15 May 2024 22:36:55 GMT Content-Length: 29 Connection: close
2024-05-15 22:36:55 UTC	29	IN	Data Raw: 7b 22 62 41 6c 6c 6f 77 41 70 70 49 6d 70 72 65 73 73 69 6f 6e 73 22 3a 74 72 75 65 7d Data Ascii: {"bAllowAppImpressions":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49881	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	674	OUT	GET /public/images/v6/arrows.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1290 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-50a" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	1290	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 24 08 06 00 00 00 f6 22 08 51 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR.$"QtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49880	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	617	OUT	GET /public/images//v6/ico/ico_info.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1871 Last-Modified: Tue, 20 Feb 2018 01:57:39 GMT ETag: "5a8b8093-74f" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	1871	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 34 00 00 00 20 08 06 00 00 01 2a 38 6b f0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR4 *8ktEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49882	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	432	OUT	GET /steam/spotlights/2a9368174c54dd6fe7fe643e/spotlight_image_english.jpg?t=1715121064 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 115834 Last-Modified: Tue, 07 May 2024 22:30:58 GMT ETag: "663aaba2-1c47a" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16152	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: ea 35 a2 c9 bd 1c f9 34 8d 2a c5 61 71 5a 3b 76 a6 99 46 cd 16 78 b9 66 b3 28 44 b1 49 b2 47 59 45 96 d5 d8 b9 4a 7e 28 c6 f9 ce 96 02 30 05 44 38 82 a7 f2 65 56 01 6d 1d 47 36 67 ea e3 96 2b a0 a5 e5 b1 66 a9 c0 89 c9 c0 29 4a 92 68 80 70 51 12 a8 29 10 c4 28 95 32 e2 d0 69 af 73 b7 dd 1b dc db 0d ac 64 59 76 52 55 9c dd 47 aa 39 e2 96 0b cc 6e 87 16 b9 e0 35 e8 2c 6a 16 d9 b0 e6 7d 80 a4 30 66 a5 71 a5 66 dc d1 c1 68 39 a2 f2 b6 cd ae aa 31 56 98 d6 09 e7 79 f5 06 f2 e6 46 cd 2a f0 0e f2 ca c8 17 75 62 81 4d bc 4c 9d 73 df 7c c5 08 d6 2d 24 51 ae bc 83 08 16 4c 9e db 64 1c d4 a2 60 75 69 04 21 65 ad cc ad d3 2d 8f fe 6f db 91 da 26 8b 7c d4 cd 11 29 48 f5 e3 76 4d 11 7c 65 cb e4 fc 94 60 9a c9 c0 39 3b c8 87 90 c8 ac 91 58 ae 53 c6 c6 bf 91 73 f1 ce 03 Data Ascii: 54aqZ;vFxf(DIGYEJ~(0D8eVmG6g+f)JhpQ)(2isdYvRUG9n5,j}0fqfh91VyFubMLs\|-$QLd`ui!e-o&\|)HvM\|e`9;XSs
2024-05-15 22:36:55 UTC	1858	IN	Data Raw: bf 00 91 9e 01 38 08 35 ae 54 d7 16 72 ac 51 cb ee 89 e7 4b 7e 3a 12 37 ee ba 90 af e6 b2 0a d6 2b 44 3d d9 41 04 31 5d a7 5c 58 fb 7a 2b ce e5 e6 f3 2c b3 b0 ac d3 dc 39 df 24 ec c3 d5 ba 47 d3 3a 20 a2 8f 4a 8c 4f 2c b2 ab 12 f5 04 e4 73 cc 86 39 2d 77 1c 88 d7 20 73 c4 16 97 cd d9 85 c0 62 c3 d7 e8 20 90 c8 14 90 c5 a9 41 9e 4d f3 50 03 85 bc 95 76 5b b6 e2 8c 48 21 82 9a 11 51 91 61 90 65 d4 13 f0 38 32 c4 ad 18 62 4e 79 9c f5 1f 0f ef c5 a4 6f a9 1a f4 62 5b d2 73 d1 69 97 99 18 85 76 aa 95 25 77 03 91 eb 98 a6 5e 3b b5 a6 58 54 31 07 b8 6a 01 e9 a9 ad 69 91 cf 5d 41 d0 e0 77 a2 45 60 41 0c 48 a8 3d 29 4a 9a 83 a7 9e 24 58 39 49 05 c1 6d d5 ad 6a 7a d7 75 4e 7f 1f 8e 20 25 88 45 24 82 57 6b 54 00 0d 08 fb aa 3a 1f 2c 4a 84 32 cf da 08 87 42 58 ea c5 Data Ascii: 85TrQK~:7+D=A1]\Xz+,9$G: JO,s9-w sb AMPv[H!Qae82bNyob[siv%w^;XT1ji]AwE`AH=)J$X9ImjzuN %E$WkT:,J2BX
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: f9 11 26 ac 65 0b b5 9a 9b 11 2b bc e8 08 b0 b5 e3 0c 3e e3 b9 62 d0 db 15 34 85 5c 92 ae f5 01 b6 c6 b9 a7 a6 ac 16 b4 a6 2e 39 1b b9 22 1e fc e4 d3 7c d7 6c bb e4 48 e5 61 b2 14 76 04 22 4a 48 32 28 da f2 d7 d5 50 a1 40 8c ab 24 b1 6e 26 a4 12 d4 63 52 08 fd e1 9a d4 d6 9a 80 72 c4 b6 5e e1 e3 e4 b0 bb 0c 4a 34 84 18 e5 8c e6 af 0c c3 d2 ea 41 04 a3 15 92 26 aa 15 20 57 01 a0 2a c0 36 4c 9a 02 73 3a 7e 16 39 8a 7c 86 a3 43 8d d3 44 4e 79 d3 55 63 f3 1a 78 3e a4 0c 83 6e f1 c5 bc 76 e3 70 24 b6 ef 0e 9b 47 ed 3f 65 30 dc 91 ab d9 ac ca 95 50 5b 74 84 ff 00 0d 02 e7 2c 94 04 94 8f 73 05 0c cd 45 04 8b b6 e3 78 6b eb 69 9d 95 04 8c 91 aa 44 19 c0 0c d2 07 71 1e f0 41 4d fb 68 09 24 80 0e 2f ff 00 de e4 9e 2e 52 c4 fe 60 89 14 49 22 35 42 c8 55 bd 55 de 3b Data Ascii: &e+>b4\.9"\|lHav"JH2(P@$n&cRr^J4A& W*6Ls:~9\|CDNyUcx>nvp$G?e0P[t,sExkiDqAMh$/.R`I"5BUU;
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: ef 1b 79 2d bd ec 46 ab 24 6e c8 e8 74 aa ba 90 c0 e7 4a 82 32 38 8a db 91 f7 5f 25 71 02 b8 70 b2 dc ce ea 1d 33 57 01 9c 80 cb aa b6 a0 e8 46 03 7f bd bc 95 2b ff 00 8a 9f ff 00 7f 07 6f bb 39 30 07 5f aa 9f ff 00 7f 09 6f cb fb 86 ea ea 00 c1 84 72 cd 2c 80 30 04 06 0a ec 40 20 16 00 eb 42 40 d4 e1 e0 e2 79 fb bb 48 59 8b 15 8a 69 22 52 d4 03 71 08 c0 12 45 05 48 ad 05 34 18 bb e5 b9 4b a7 b9 bc 78 bb 46 59 a4 24 e6 54 6f 69 1c 92 42 a4 60 00 49 3b 68 a3 0f 6b c6 71 d3 5e 22 21 2c ca 36 8c 8d 2a 37 50 00 75 15 23 2c ce 21 79 e0 48 af 0e 62 22 77 1f 83 ed f4 fa 73 3b 6b 4a 81 5a e2 57 b9 b9 9e 47 90 82 68 8c c4 31 cf 31 90 cb 4a 69 e1 80 14 b8 62 f5 47 34 5a 10 6a a4 6a 41 14 a9 d0 2f 8e 38 7e 59 2c a0 6e 6a 5e e1 92 12 bb 04 8d 6e 3d 52 c2 b4 da ca 5f Data Ascii: y-F$ntJ28_%qp3WF+o90_or,0@ B@yHYi"RqEH4KxFY$ToiB`I;hkq^"!,6*7Pu#,!yHb"ws;kJZWGh11JibG4ZjjA/8~Y,nj^n=R_
2024-05-15 22:36:55 UTC	7952	IN	Data Raw: c1 58 b2 03 42 5f 69 01 cb 10 48 04 95 aa f8 29 a1 04 d7 08 c3 68 8c f8 f4 fb 3c 3c 2b 8f aa 92 d0 ad a1 7d a1 98 50 13 d5 41 39 35 0e b4 af c7 10 0b 91 1c 56 cd 4a 6d 28 64 62 da 6d 5d 16 be 2c 40 1a d0 e9 85 37 72 c9 15 ee f3 e9 b7 95 5f 6a 8f c2 ee ca db 98 f5 a0 da 3f 08 a6 1e 3e 2f 8a 31 b0 5a 34 8c 0b ca e4 7e f4 a4 56 be 40 28 f2 c1 92 38 1c 83 a5 47 ed f3 c5 a7 25 74 4c 71 20 35 24 80 b9 8a 66 4d 00 fb 4e 39 3f e4 1c 6c 77 1e d7 e3 ef a3 5e f4 87 6a dc 4e 5b b4 16 d9 0d 0c 90 c4 c6 b2 cc 28 af f2 c7 bc 54 e3 dc 9c 67 bc f9 cb 7b 9b 86 89 dc 40 b9 ce b7 4b fc 27 a8 14 8e 8d 91 24 8f 48 db 43 96 2d ef fd d7 1e de 22 e9 5e 0b 72 58 88 61 ab e4 1e 99 a8 73 a9 a8 a8 35 26 99 8f ae b4 e1 ec da fa 28 68 d2 6d 19 b0 c8 ec 0d b8 28 eb 5a 96 c8 0a 9c 3c b0 Data Ascii: XB_iH)h<<+}PA95VJm(dbm],@7r_j?>/1Z4~V@(8G%tLq 5$fMN9?lw^jN[(Tg{@K'$HC-"^rXas5&(hm(Z<
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 6d 6c 61 b0 6c d0 53 54 44 55 2c 8b 90 32 61 8b 57 47 01 96 41 25 ca 8e ee 43 7a ec 76 14 5a 8d 0a 2a 93 6e 58 5b 4f 46 57 44 11 d0 8d 55 7b 27 59 b7 d6 77 25 d3 b3 1a cb 31 cb 32 cb ac 06 a8 99 15 8a c5 86 4b 6d 3e c3 22 c9 e2 03 fe 59 2d b4 dc 89 ae c2 82 44 ad 9f 89 1d 3f 8c 1c 02 eb 85 3e 9b f1 e9 b0 4a 86 15 bb b1 79 66 e1 77 1a 37 96 64 f4 92 62 e2 f8 b4 79 1b 41 b1 f9 1c 69 c2 f4 d5 02 78 4e 64 e6 98 24 69 f8 4e a2 de 66 b8 94 db da ec bf 85 b2 7c 7f 93 a9 26 63 6f 1c 4b 46 e3 47 59 98 a6 4c e1 4c 61 42 5c 6a fa ec 53 2a 9b 3d f2 68 c0 91 21 a2 aa a8 a1 0a f2 16 4d 98 f2 1e 65 93 53 e0 1c 7a 8d b3 51 7f 90 db 5b c0 f9 ae 59 68 10 e3 4f 06 67 4b 7d a6 e5 c5 85 55 25 b0 24 1d db 1e 3e ff 00 7f d3 be 19 81 e7 57 98 a4 99 15 fc 83 92 64 91 71 cb 79 55 Data Ascii: mlalSTDU,2aWGA%CzvZnX[OFWDU{'Yw%12Km>"Y-D?>Jyfw7dbyAixNd$iNf\|&coKFGYLLaB\jS=h!MeSzQ[YhOgK}U%$>WdqyU
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: c5 59 fa 92 5e 57 69 97 de b1 8c c5 cd 31 2a 76 45 f6 72 f1 c2 a2 bf ef 06 3b 68 e2 a3 b2 23 48 50 36 75 54 c1 38 a7 ea 07 2b b8 e3 4b ce 55 a3 ce b3 ee 4b e6 0e 77 1c a3 22 93 8b 63 98 a5 4c fb a1 7b 24 62 b8 66 5a 47 ba ca ed 96 3c 36 63 23 d1 c6 1f bd 01 04 47 10 45 18 1a 68 d9 2c 5c 72 64 f9 c3 58 96 97 99 16 45 56 6e d4 3e e4 47 2e 30 d4 c9 94 6e a1 63 79 12 35 ee 63 a3 c1 1d 55 93 42 36 81 cd c9 d3 99 a5 7c 7f 69 5b 9b 3d 01 ab 78 c8 db 6c 85 46 50 3b da 7a d5 81 40 18 ad 40 b9 65 05 1d 01 1d c8 f6 86 9f 0e e5 4b 5c 3d c1 75 86 a0 5c 37 75 50 d3 89 22 63 ae d6 df fe 64 a6 83 db a6 a2 81 6a 07 aa 02 0a 20 9a 68 9e bd 70 21 47 ad 71 ba c8 36 b7 d6 99 64 f9 01 24 e3 55 63 b4 43 55 6f 06 1c 87 36 97 8a 6d ed 92 04 66 19 42 12 24 52 55 5d 00 b4 61 c9 b0 Data Ascii: Y^Wi1*vEr;h#HP6uT8+KUKw"cL{$bfZG<6c#GEh,\rdXEVn>G.0ncy5cUB6\|i[=xlFP;z@@eK\=u\7uP"cdj hp!Gq6d$UcCUo6mfB$RU]a
2024-05-15 22:36:55 UTC	7952	IN	Data Raw: bb 3c 77 07 64 21 1c 67 d2 1e 39 8b 35 26 65 9b f8 b4 e9 70 c2 42 7b 87 9a 6e 53 ba a8 8f 85 41 3a e6 6e 56 cf f2 4c 2e ef 9e 6e b0 fb 1c 2f 05 e3 fa 8c 0e d0 0f 92 b3 6c c2 8d fa a9 d9 9d 66 3f 54 52 a8 db b0 a5 c5 a2 4d f9 94 c9 8a d2 79 95 b9 11 db 17 c5 0b ac 7b 8b b8 01 f8 3c 71 8a b5 89 94 3c 96 36 34 cc 5c 6a da 06 4b 4b 01 18 b0 8c ed f4 b2 69 d6 a0 d8 c7 88 61 19 d6 d5 25 38 ea 23 64 4a 46 09 d3 f7 3c b7 91 58 53 a5 8c 57 6e e6 b3 09 a9 56 f9 45 e8 b4 e8 35 22 63 37 39 01 35 18 24 f9 c9 10 9d 79 1d 74 55 75 41 24 ea 13 d1 b1 8c 96 3b cc 59 d5 d4 b1 31 fc f2 ea 43 8f 42 b4 55 a9 97 7b 2a c5 06 19 0d ad 6c f9 91 e4 9b ac 7b 78 cc 88 a8 ab 64 da 6b d4 0c 62 e2 97 0c 7a 93 e4 75 4c 0c 5c 35 82 a2 a6 ab ba c5 29 a2 63 d6 37 54 f1 6a 64 b5 32 86 65 9c Data Ascii: <wd!g95&epB{nSA:nVL.n/lf?TRMy{<q<64\jKKia%8#dJF<XSWnVE5"c795$ytUuA$;Y1CBU{*l{xdkbzuL\5)c7Tjd2e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49883	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	391	OUT	GET /steam/apps/945770/header.jpg?t=1715790219 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 55559 Last-Modified: Wed, 15 May 2024 06:59:15 GMT ETag: "66445d43-d907" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=582374 Expires: Wed, 22 May 2024 16:23:09 GMT Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 06 04 05 07 08 02 03 09 01 00 0a ff c4 00 62 10 00 01 03 02 05 01 06 02 08 00 07 08 0b 0a 0f 00 01 02 03 04 05 11 00 06 07 12 21 31 08 13 22 41 51 61 14 71 09 15 23 32 42 Data Ascii: JFIFCCb!1"AQaq#2B
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 8c 6e 20 8d 57 72 34 4b 57 a8 7a ed a6 14 0c f1 97 96 af ab aa ac 77 9d cb 84 77 91 dd 04 a5 c6 57 6f c4 85 85 24 f9 1b 5c 70 41 c3 54 e0 dd 51 4f a4 b3 45 91 95 f3 dd 23 54 69 d1 c2 22 56 c2 69 f5 42 81 c0 94 da 4f 74 e1 fe 7b 49 29 ff 00 91 f5 56 2d c0 eb 68 50 ba d8 8b 86 60 aa 24 6d 47 ad 65 8a bc 09 99 6e 64 b8 95 a6 dd 4f c2 39 05 4a 0f 77 84 d9 21 3b 79 24 de d6 f3 bd b1 71 ef 05 b6 28 44 30 b8 3e e3 75 d9 dc b3 9c 66 64 ed 32 a3 bf a8 b5 7a 7a b3 5b 34 e4 3b 54 4c 65 36 d8 5b e1 17 5a 50 9d c0 70 78 bf 09 27 9f 08 36 18 ea fc 6f 0c c3 9d 96 aa 76 b4 f4 bd dd e8 d1 77 1f 40 b7 14 d4 15 75 2d bc 71 97 78 db 4f 7e cb 95 d9 d7 58 2a 79 e7 53 ab 39 a3 33 66 2a 7b 53 a7 bc 56 d5 1e 95 23 e3 d5 11 a0 76 b6 c1 71 1f 64 0a 52 00 24 28 dc dc 91 72 71 35 26 Data Ascii: n Wr4KWzwwWo$\pATQOE#Ti"ViBOt{I)V-hP`$mGendO9Jw!;y$q(D0>ufd2zz[4;TLe6[ZPpx'6ovw@u-qxO~XyS93f{SV#vqdR$(rq5&
2024-05-15 22:36:55 UTC	2772	IN	Data Raw: b0 8a 1a 0c 46 37 67 6b 83 9b 6b eb a1 f1 f8 6c 8e e1 e9 bf 65 f8 52 cc 71 9e 1c 8d 21 2b ee d4 dc aa 89 69 48 55 ed 65 05 b6 36 fe 78 0b fe d1 71 fe 5c ed a4 04 6f 70 cb fb ac e3 7f 44 40 51 e0 80 db b5 b1 f1 36 fa 25 9a e7 d8 c6 12 32 44 aa de 45 a8 ca 94 f4 46 4c af 80 94 b4 ba 24 36 01 24 b4 b4 80 77 5b 90 0d c2 ba 71 7c 33 87 fe d3 2a 66 ad 6d 26 32 c0 03 8d b3 00 46 53 b7 78 12 74 be fb 5b 7d 55 8a cc 11 ac 80 c9 4a 6f 6d 6d bd c7 81 fc dd 46 fd 96 34 bb 4a 75 da 05 52 0d 46 9b 5a 83 98 29 31 90 e4 b9 11 67 6e 8f 21 04 91 bd 03 69 29 55 c7 29 e7 d8 f9 0d 07 19 e3 bc 41 c3 72 32 4a 79 58 e8 a4 24 00 5b de 69 e8 4d ec 47 8e 9e 3d 48 ac 26 92 87 11 0e 6b da 43 9b be ba 1f cf 44 62 bd 26 ec b3 4a 96 e3 0f e7 59 10 e5 32 a2 95 b3 22 7a 9b 71 04 79 14 a9 Data Ascii: F7gkkleRq!+iHUe6xq\opD@Q6%2DEFL$6$w[q\|3*fm&2FSxt[}UJommF4JuRFZ)1gn!i)U)Ar2JyX$[iMG=H&kCDb&JY2"zqy
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 82 97 d0 91 71 63 71 b8 0d a4 73 c7 4c 01 ac a4 73 1d da 33 62 b7 58 56 2f 15 4c 7d 8c a7 2c 8d dc 1f 98 28 36 91 9b bb a8 28 4c 5a 8c 72 c8 e8 16 e0 4a 87 b1 07 01 8b 05 f5 5a 7c dd 10 7c 59 45 3e 78 32 85 84 e6 d4 d3 b0 f3 7c 79 3c 14 c9 59 7b 7a 55 ce 23 29 57 50 75 d0 9f f6 20 e6 2b 7f f8 69 1f e4 d3 8f 89 38 77 fe 6d 87 fe a9 f9 95 d8 71 0f f8 53 ff 00 83 e8 b9 ed d8 eb 3a d4 32 4f 68 5c a0 b8 6f 2d 0c 55 25 a6 97 29 a0 4e d7 9a 78 ec b2 87 9d 95 b1 63 dd 03 1f 4d f1 ce 1f 15 7f 0f d4 89 06 ac 69 78 3d 0b 75 d3 cc 5c 79 12 b9 b6 09 3b e0 af 8f 29 d1 c6 c7 c8 fe 6e ae 4f d2 4b 95 e3 55 74 2e 1d 65 4d a7 e3 29 15 56 8b 6e db c4 1b 74 29 0b 40 f6 27 bb 3f d0 18 e0 ff 00 65 75 8f 87 1a 7d 38 3d d9 18 6e 3c 5a 41 07 d3 51 ea b7 3c 51 0b 5f 44 24 e6 d2 3e Data Ascii: qcqsLs3bXV/L},(6(LZrJZ\|\|YE>x2\|y<Y{zU#)WPu +i8wmqS:2Oh\o-U%)NxcMix=u\y;)nOKUt.eM)Vnt)@'?eu}8=n<ZAQ<Q_D$>
2024-05-15 22:36:55 UTC	3976	IN	Data Raw: 26 3b 58 53 f7 75 b6 e4 16 5b 6d e4 81 e3 1b 00 55 d5 f7 8f 8b ad f0 46 9a 08 a4 19 ce eb 31 8a 57 54 d3 3b b0 61 01 84 74 b9 f1 df 4f 82 94 d7 52 71 2a 3b 5c 52 47 5b 25 44 0f d3 05 b5 59 1e e9 e4 a8 ad 1e 31 4d 45 51 94 a0 09 b2 93 7e 86 dc 81 f9 8c 64 a3 69 71 f1 5d b6 9a 50 d0 eb ec 51 5b 95 56 23 d2 a4 30 94 05 3e bb 24 03 e9 e7 7c 13 96 a3 2c 46 26 f3 fc 9f e4 98 62 19 bb 43 a5 b9 a1 d8 b2 1f 80 da 11 15 61 bd 84 ac a8 75 5a 8f 17 f9 01 c0 fc cf 9e 06 c4 f2 d3 71 e4 a8 4d 1b 65 1d ef 34 9e a6 b9 89 92 2a 3d ea 8a d0 b0 12 b0 2d 6f 31 88 c0 11 9c cc d2 fa fa ab 2f 9a 4a 8d 26 37 b0 03 d3 a2 21 83 01 ec ce c3 f3 5a 5e d4 ad 6d a5 4d 36 bb 24 2f 9f bc 8f 3b db 8b 74 f3 c5 f6 32 4a 81 9c 75 d4 78 f9 20 f3 4b 4f 87 38 34 f4 36 3c c0 db 7f 05 34 c3 13 21 Data Ascii: &;XSu[mUF1WT;atORq;\RG[%DY1MEQ~diq]PQ[V#0>$\|,F&bCauZqMe4=-o1/J&7!Z^mM6$/;t2Jux KO846<4!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49884	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	392	OUT	GET /steam/apps/1710170/header.jpg?t=1683621796 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Last-Modified: Fri, 13 Aug 2021 11:00:16 GMT ETag: "611650c0-9143" Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 37187 Accept-Ranges: bytes Cache-Control: public, max-age=164261 Expires: Fri, 17 May 2024 20:14:36 GMT Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 01 02 08 09 0a ff c4 00 4e 10 00 02 01 03 02 04 04 03 06 04 04 02 06 07 08 03 01 02 03 04 05 11 00 06 07 12 21 31 08 13 41 51 14 22 61 09 32 42 71 81 91 Data Ascii: JFIFCCN!1AQ"a2Bq
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 8e 84 d8 17 7d b1 4f c2 19 76 fe e1 b1 ce f4 b4 93 95 37 9a 11 cf 24 5c df 32 4b 24 7f 7a 3c 9c fc e3 23 e5 20 f7 ce b3 22 ea ff 00 50 ab 50 9a ef 3f c5 ec d7 24 f6 7e 5b f1 46 fd 27 09 61 3f a7 c4 c6 f4 92 b6 65 bc 5f 06 d6 eb 8e ba ae 63 a6 c1 ff 00 88 f6 e6 e0 a1 dd 5b 6a a8 25 ea 89 7c ba 3d eb b7 50 4a d2 c1 d3 f9 17 1a 50 47 c4 42 70 33 9c b7 40 54 86 00 ea ed 3c 73 c2 d5 bc 1e 47 c6 9c f4 5f fe 32 d9 7d 8a f8 8e cb 86 3a 86 5a c9 54 e1 1a b0 d5 f4 53 8e ef ea cf 48 b8 0d e2 16 df c5 9b 45 34 17 34 a7 b3 ee c5 4e 5a 8a 28 a5 2f 4f 50 47 79 29 9d 80 2c 87 bf 2b 00 eb d9 87 4c 9e a7 0b da 78 6c 54 bb b8 bb 4f fc 5e fe 9c 1f a1 e7 bd a1 d8 78 de cf 87 7b 28 e6 a7 fe 4b 55 eb c5 7a 96 eb 4a 14 67 b8 ff 00 5d 6b 1c f1 0d e2 b7 0b 76 a7 1b 36 3d 7e d4 de Data Ascii: }Ov7$\2K$z<# "PP?$~[F'a?e_c[j%\|=PJPGBp3@T<sG_2}:ZTSHE44NZ(/OPGy),+LxlTO^x{(KUzJg]kv6=~
2024-05-15 22:36:55 UTC	2736	IN	Data Raw: 1a 10 cc 99 3d b5 32 64 0d 09 d9 70 74 e1 16 85 8b 66 e2 55 be d5 c1 ab b6 d2 34 92 49 5f 5f 56 d2 b4 c7 ee 22 11 16 18 75 ea c0 c6 7a 1e df ae b2 e7 85 9c b1 71 af 7d 12 fd fe ce b7 0b da 94 28 f6 5c f0 6d 3c f2 6f ca cd 2f d1 11 b1 dc a2 a7 dc 36 ea a7 4c 41 0d 44 4c 50 7f 4a b0 e9 fb 0e fa b5 5a 0e 54 e5 15 bb 4c cd c2 57 51 c4 d3 a9 2d 94 93 f9 32 eb 37 8a 38 9a 6a 0a a9 42 d5 01 c8 99 19 e6 6e dd 3e ba e6 55 39 35 9d 2d 0f 48 9d 58 29 ba 52 7a 8c 9b a7 78 54 da 2b 56 8a 07 2f 33 0e 56 eb d0 1c 7a fe 9d 4e ad 61 f0 ea 71 cc f6 28 63 b1 b2 a5 3e ee 3a b6 25 a4 dd b5 55 36 aa fb bc 8e 10 46 bf 05 4e ad f8 98 80 59 c7 d0 00 07 e6 75 24 b0 f1 8c d5 35 e6 ca b0 c6 4e 74 e7 5d e8 97 85 75 7c 5f be 24 63 70 ed a8 ef d4 f1 d5 d2 28 f8 c2 a7 cc 20 7c b2 91 ef Data Ascii: =2dptfU4I__V"uzq}(\m<o/6LADLPJZTLWQ-278jBn>U95-HX)RzxT+V/3VzNaq(c>:%U6FNYu$5Nt]u\|_$cp( \|
2024-05-15 22:36:55 UTC	2024	IN	Data Raw: 0d 9f e6 05 3d 07 55 c8 c7 ed ab 0a 30 8f 89 19 d2 ab 5a ac bb bb eb e8 bd 2e 1d 60 a4 a4 17 ea 4a 5b ec 77 18 28 0b 81 33 5b e3 53 52 17 fc 81 c8 53 fa 9d 2b 57 57 89 1c 22 d4 d5 3a 89 af 2d fe a4 ee f2 9c 32 a8 dd 77 1a 7b 4d 0e f1 97 6b 45 46 b1 ad c2 ba 78 05 5c 55 44 f5 9d e2 58 f9 7c bf c3 e5 83 9e 84 f3 67 a6 a3 b4 92 cc ac 5d 8a a7 36 e1 3c cd 2d df 27 ce de fc 88 bd 99 52 ed bb a0 a1 a4 5a 58 7e 61 49 00 09 e5 c7 38 e8 aa ce 7d 59 b2 32 4f 7f 51 a8 ab e9 46 ee ff 00 a2 5c 1b 53 c6 77 70 b2 e0 b9 3f 3e af 8b e2 4a 65 e2 35 3d 06 d5 ba ed 3b c5 a6 5b b5 0d b9 e5 82 db 46 f2 b4 34 d0 56 b9 22 7a d9 51 08 f3 26 c6 11 39 ba 22 80 00 e9 a7 46 32 b4 5c 5d af af e8 5a 95 69 29 54 85 58 66 ca dc 57 2b eb 76 fd 76 e4 b6 07 0e a3 69 76 ec 6f 23 16 93 ee 82 Data Ascii: =U0Z.`J[w(3[SRS+WW":-2w{MkEFx\UDX\|g]6<-'RZX~aI8}Y2OQF\Swp?>Je5=;[F4V"zQ&9"F2\]Zi)TXfW+vvivo#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49885	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	382	OUT	GET /public/shared/images/trans.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 43 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-2b" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49887	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	432	OUT	GET /steam/spotlights/18ad2861aa907ac1a68cb231/spotlight_image_english.jpg?t=1715630351 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 86549 Last-Modified: Fri, 10 May 2024 18:57:01 GMT ETag: "663e6dfd-15215" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16153	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 33 14 5c f1 f9 d2 62 df 8f d7 25 40 9c 61 cd 2b 92 e1 87 b2 6d 06 39 55 4c aa 9b 06 87 70 16 c0 22 43 18 40 00 a5 00 f5 68 76 50 04 a4 28 ff 00 b6 4d 50 68 56 bc a5 6e bf f6 5e 8b a7 62 2e 43 60 99 ee 37 e5 8d 61 9e 3d be b5 63 27 82 41 73 c0 5e 1b d8 f9 b3 9e a8 bd 89 39 3f 66 4b 21 76 7c e3 8e 57 9a 89 ed 1b c1 c9 5a 5e 1e ec 4d 81 da ab 2b da c7 84 f8 ce bf 9f 7b 7e f2 3f 8f f1 0d 20 df 3c 6d 01 db fb 94 93 95 4c 77 42 69 03 16 bd 74 c7 7d 43 6c aa 95 4c ad 5e 34 ab ee d6 ad 20 66 30 cf 69 ae c5 7c 7a e4 0a 4f f8 a7 83 99 af 62 c0 18 29 f1 bb b3 f6 fb 82 c0 32 1c 4e c5 f8 a2 f9 ca 1c a7 d9 33 82 b0 70 fd d3 f1 e6 1c c4 bc 9b 8f 78 f6 21 6b 1e 4c bf 58 e1 bc 3d 7a 6e 5e 94 f6 d7 91 b5 89 f1 a4 9e 5a bd b9 ad 70 b2 39 62 46 70 a4 a1 86 b8 ff 00 c6 8e 42 Data Ascii: 3\b%@a+m9ULp"C@hvP(MPhVn^b.C`7a=c'As^9?fK!v\|WZ^M+{~? <mLwBit}ClL^4 f0i\|zOb)2N3px!kLX=zn^Zp9bFpB
2024-05-15 22:36:55 UTC	3124	IN	Data Raw: 6d a3 78 dc ad 5e 48 d8 3a b5 c5 b6 d5 b5 dd a1 3e 1d 35 84 df ba 69 05 c0 3a 89 60 59 91 55 46 b9 af e7 93 21 5a bb bb 1a 9c c9 cc 93 99 24 e3 63 92 ce 49 23 95 ae a2 42 41 19 ab ba ab 29 ed 04 12 08 39 1c 6d cd 23 96 61 7f 10 a9 24 9a 2c 13 2a 8c f9 2a 80 00 e0 00 00 64 31 77 24 76 ee d1 40 01 72 29 45 05 82 02 73 e6 cc 00 f4 e2 48 d0 1f fd 8a 43 ff 00 3a 3c 59 39 e0 36 e4 3f 24 b3 e2 de ea 48 1d 6d a4 66 55 63 4a 12 9a 75 01 9f 2d 4b 5f 4e 37 86 50 40 17 b4 cf fa a4 c2 13 c7 50 f9 f1 0f f5 c3 f9 af 8b f3 da 8b fc f5 c1 6f fc 93 7c e3 16 4e 78 0d b9 0f c9 2c f8 37 db 46 c5 71 71 68 1c ae a5 d3 4d 42 84 8c d8 66 2a 3e 5c 6e 90 ee fb 6c b6 d3 35 d6 a0 af 4a 95 d0 83 56 44 e5 5c bd 38 ea 57 60 48 3b 8d c0 ff 00 d6 be 04 73 41 24 77 0a 15 87 00 46 a5 0e 84 Data Ascii: mx^H:>5i:`YUF!Z$cI#BA)9m#a$,*d1w$v@r)EsHC:<Y96?$HmfUcJu-K_N7P@Po\|Nx,7FqqhMBf>\nl5JVD\8W`H;sA$wF
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 38 90 73 22 9c 71 67 3c 10 ac 92 f9 c8 51 0d 74 b5 18 15 53 a5 95 a8 c7 8e 92 ad 43 4a 82 2b 88 da f2 6d 8b 67 b7 65 6d 6b 6c 97 17 12 5c 28 1e 28 99 6f 64 b8 63 1b 54 06 48 ca 87 c8 10 4d 0e 1e 7d ab a6 3a 66 68 54 d0 96 6d e2 37 af e7 47 ed a0 21 3c 40 1e 1a 7a b9 62 ca de fa c3 6f b7 96 18 0b b0 b4 f6 8d 2d ac e4 5c 4f 2c 80 32 84 21 7c b0 9e 13 56 04 9a e2 f8 cd 63 63 72 b2 44 a4 ad ca dc 32 96 53 96 93 6b 24 53 a9 f1 92 68 da 48 1e 25 39 50 dc ed dd 29 d2 ef 18 34 3f 79 bd 29 53 40 68 ca d7 a0 83 42 0e 63 0d 66 f6 db 56 d9 b7 48 29 2f b0 fb 53 4b 2a f3 8c c9 77 2c cf 1a 36 5a 84 4c 81 87 ac 0e 23 30 ec fb 3d f4 68 8a 81 ae fd b5 25 55 55 0a ab ae d2 e2 11 28 00 00 1a 55 69 00 00 6b 20 0c 1a f4 87 4c e9 e4 ba f7 6a 57 b7 57 b6 eb 19 65 4d 45 79 e9 ae Data Ascii: 8s"qg<QtSCJ+mgemkl\((odcTHM}:fhTm7G!<@zbo-\O,2!\|VccrD2Sk$ShH%9P)4?y)S@hBcfVH)/SK*w,6ZL#0=h%UU(Uik LjWWeMEy
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: f6 9f 13 a9 d4 93 ed e7 f9 be 84 a7 9f d9 1d 46 9d 00 e4 7a e8 7e 9d 74 23 dc 46 87 f3 71 df af 40 01 1f 97 ae bf 97 84 85 1e 45 b5 fd 7c fb 4e 83 5f 1d 3e 84 a4 1f 1d 74 d4 81 f6 4f 3d 34 3a fd 29 3c b9 81 af d7 a7 3f cc 78 fa f8 0a e5 c9 2a 41 e4 0e a0 9e 60 9f 66 a3 8d 07 4f 0e 12 75 09 d3 5e e4 a7 ec 9e ba 1f 0e 7f 40 d1 44 6b f1 1e 7c b4 46 83 b4 0e 5f 6b bb 80 a0 08 0a e7 cc 68 7d 9c fd fc b8 d0 7b b5 20 e8 40 f6 83 a1 e3 55 1d 07 4f ac 9e 80 7b cf 05 29 48 d3 40 4b 80 8e 67 fa ba 0e 64 0e 3b ce 9a 11 f0 8f 7e bd 7d dd 38 e8 79 1e d2 34 f1 d7 4d 47 4d 53 ef f6 70 52 84 ea b5 0d 7a f6 8f 10 4e bd 75 00 70 4f c5 cf b4 12 79 f4 1c bd 9c c8 fc fc 05 3c 49 d7 9a 10 7a a4 ea 75 27 de 46 9f 57 d1 d7 82 53 c8 fb 74 d7 b7 9f 35 69 cb 5d 07 3e 02 16 49 1d 52 Data Ascii: Fz~t#Fq@E\|N_>tO=4:)<?x*A`fOu^@Dk\|F_kh}{ @UO{)H@Kgd;~}8y4MGMSpRzNupOy<Izu'FWSt5i]>IR
2024-05-15 22:36:55 UTC	7952	IN	Data Raw: da 89 be 5a 1b b5 a9 ac a8 75 c9 55 ea 3a f9 31 a3 44 65 a6 19 32 e4 32 90 a4 20 00 84 69 dc a2 b3 c4 ba 0c 19 ba 7c 42 e0 a4 be e9 cf 1d 90 bc 9e d1 dd 40 44 b9 ee 3a 94 a2 2c 7d 0e a9 4a 52 a4 a4 71 0a 9b 7e 2f 32 7b 87 6e 98 16 74 53 31 71 29 fd ba 95 56 f2 bb 49 ed 84 e3 32 52 f4 52 7b 5e 0e 7c 2a f0 04 71 95 e7 38 94 ca 15 c1 db dd 98 63 6f 29 eb df 9b 57 4d 0f 20 bd dd 8b da db 69 6c c1 72 64 2f 3c ce a9 8b 8b d7 3a a2 87 58 71 29 6d c6 d4 54 95 f6 9b 2c 7b 23 83 96 22 9f 21 cd 20 26 75 83 8e 4f 6f 16 6b 0a f3 5a 5b f6 48 b7 6d f5 57 45 45 6a 4a 9e 6d 68 fd b1 71 20 73 1c b8 67 13 b6 85 07 2e c4 2b ec 1f c6 a5 d9 65 15 ad da b2 68 a4 b6 99 10 2f da 40 5b 0a 44 f9 9d be 52 9f 69 48 52 47 c5 a7 16 14 78 0e de 41 8f 63 71 9e d8 d8 50 25 f0 7c ac 4e ba Data Ascii: ZuU:1De22 i\|B@D:,}JRq~/2{ntS1q)VI2RR{^\|*q8co)WM ilrd/<:Xq)mT,{#"! &uOokZ[HmWEEjJmhq sg.+eh/@[DRiHRGxAcqP%\|N
2024-05-15 22:36:55 UTC	10168	IN	Data Raw: b5 29 d2 ca d2 e5 57 a5 2d eb 94 e3 c5 49 28 75 36 9b 51 9e 06 d0 84 8f 89 25 af 90 3a eb d7 b8 71 ba 9f ca 9e 71 fc 5d d8 de 3f 0b 5f f6 db 72 ff 00 ee 5f bc 1c 51 58 34 ca d8 42 fd 56 ed c4 50 db 8a 4a 94 15 5d 4d bb 35 cb 5e a9 d0 68 ea e2 15 0f 60 3a 71 73 fc ee d8 ff 00 0f 7d 3f f1 eb 8a e1 d6 56 fb 75 db 1b e8 d2 52 d9 6d 49 4a dc 4b 72 fd 4e 12 84 a9 5a a5 24 fb f8 f4 cb fc ae 23 f8 b1 b8 5c 6e 3e a4 a0 9a 14 73 49 3d 51 5d 77 a0 f6 76 fb ba 11 c6 57 a7 53 b4 f7 a3 ae 80 7f d6 ec 18 82 7d bc c7 1e 93 8e 85 64 dd e4 81 43 bb 9a f5 d9 2c c0 94 f6 9f 85 27 5e 9f 5f 15 de d3 bc 94 fa ff 00 f9 e3 f4 71 73 fc ee d8 ff 00 0f 7d 3f f1 67 66 f5 6d 5d ab 94 5e 85 a9 b2 08 31 2e 60 35 65 5c 6c e8 dd dd eb 3a e7 24 c3 78 84 bc db 52 e3 24 91 aa 49 1a 8d 46 bc Data Ascii: )W-I(u6Q%:qq]?_r_QX4BVPJ]M5^h`:qs}?VuRmIJKrNZ$#\n>sI=Q]wvWS}dC,'^_qs}?gfm]^1.`5e\l:$xR$IF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49886	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	432	OUT	GET /steam/spotlights/cdf177cb0f475f16d8a70293/spotlight_image_english.jpg?t=1715360642 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 38467 Last-Modified: Wed, 08 May 2024 22:11:52 GMT ETag: "663bf8a8-9643" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16154	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 8c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: de 8c 44 d6 c0 b2 ea 55 45 2a f0 3a 45 3d 7a d6 22 d7 83 83 48 c9 c1 49 30 79 35 7a 6b 38 3a 65 29 85 d9 c0 5c 04 d4 1a c4 5b a4 dc 47 44 30 8f 24 63 18 c7 c3 2d 75 73 d6 47 f1 01 0c 0c 3a 0e 41 ae 17 2b 56 c0 2b e6 fe 3a 4a 5a bd a4 a3 9a 86 db d5 41 4b 08 cd 0d d3 c8 cd c5 66 d7 2d 5f 18 89 0d 3c 3b c3 0c d0 42 21 a8 7d 4b 74 fc c7 b6 62 59 cd 3a 6d dd 07 04 cd b2 1d 00 1d aa 03 06 d5 1a 1d 5e c1 1c 2f 81 6c 52 2c c3 bb a6 d1 56 d1 74 45 aa d4 28 4e e9 76 4a c9 77 68 8e 1e 8c 74 c1 7d 86 88 db 42 dc 5f cb e9 01 8a 5a 5a 01 e0 54 4d 51 a9 5d 60 36 f3 bb 32 63 a9 18 c4 b4 8d 95 ed d4 ce 13 b3 a6 34 03 2e 94 5c d5 d2 e0 82 ac ba 8d 32 c6 82 d4 c5 85 9a 4b a2 c1 7a 7f 71 32 b8 3d a3 5b a2 55 ab e6 9a a4 a3 a9 61 d9 94 50 5d 02 38 98 03 92 8e d1 8c 63 1f 02 Data Ascii: DUE*:E=z"HI0y5zk8:e)\[GD0$c-usG:A+V+:JZAKf-_<;B!}KtbY:m^/lR,VtE(NvJwht}B_ZZTMQ]`62c4.\2Kzq2=[UaP]8c
2024-05-15 22:36:55 UTC	1857	IN	Data Raw: b6 94 50 b4 ef fa d3 06 59 79 31 ea 2f f2 d7 d2 ea 03 4f 81 d4 a1 93 f2 fb c1 08 20 ee 0e 9b fc 77 29 38 95 21 cd e6 f9 a0 1f 5b fe 0f 8d 12 b9 42 5c ff 00 54 fd 04 05 ed 74 7a 62 08 86 50 f6 8e cb d9 83 b2 76 8a 8b 94 ae 31 a8 ef 5e a5 5f 50 00 d8 fa 22 55 75 b5 c6 7f a9 94 a0 ef 32 0b 9a de 2f 30 6f 9f 62 19 86 be 73 3a 13 54 29 3c c0 50 ed 33 59 85 d9 a9 fb 5f c4 01 46 9b 76 db c1 95 51 f0 3c 76 5e ca fd 4a 4b 95 7d 77 50 46 9f 5b 4a d7 1d 7a e0 85 22 ba 6f 51 d3 43 52 5e 85 5b 56 87 15 6f 6e 23 81 62 97 c8 70 71 1f 06 3e 2b 67 74 7f 07 cc 13 0f ed 0f dc a1 b6 f3 10 6e b9 7a 3a 43 5e e5 79 f7 8c 3c 99 39 f4 79 e9 ed 2a 6c eb 89 e8 07 d4 ca e7 6c af b3 47 cb 02 9b a7 0f dc 1a 2b 88 75 88 d0 fa 8a 74 8a 03 18 74 97 54 5d 9e 7f 31 6c 14 a7 6e be b0 d1 4d Data Ascii: PYy1/O w)8![B\TtzbPv1^_P"Uu2/0obs:T)<P3Y_FvQ<v^JK}wPF[Jz"oQCR^[Von#bpq>+gtnz:C^y<9y*llG+uttT]1lnM
2024-05-15 22:36:55 UTC	4072	IN	Data Raw: 41 c0 7b 51 34 5f 30 18 4a 15 fb 37 38 65 74 e0 02 f3 d7 bc d7 96 6a 93 61 81 b8 c6 16 0e 5f 7f 07 6d 7c 87 94 f0 93 5c ab 8b 0f a0 fc ca dc f2 6a ea c7 fb 22 02 16 92 34 a5 63 39 c7 85 e0 a7 57 ec 67 fb c4 20 03 96 e6 6d 5c e3 ac ff 00 58 8f f5 88 ff 00 58 84 81 05 f4 73 96 db c7 33 fd 62 3f d2 23 fd a2 33 42 ba 97 a7 b7 f0 23 1e 7c 0a 5c 13 47 c3 08 13 4b 2f 43 f7 14 43 74 1a a9 7c 26 e4 b3 11 2b c2 81 9a ef 01 e8 b7 e5 97 2e 5c bf e7 7f c5 fe 2f 8a 86 61 ac 1a be 62 b8 59 81 8b 38 e3 dd 96 62 8d 3b 3b cd 21 f9 3e e0 14 c3 d9 fc 93 37 f6 3e a5 1c 42 2c 17 f3 fd ce 98 b9 3b cc ff 00 5b 2f 55 fd 54 b9 72 ff 00 98 17 2e 5c b9 72 e5 cb 97 2e 5c b9 72 e6 ab df f5 15 36 6f 2e 61 c2 20 d6 1c 4a ba d3 f8 3e a5 9d 68 34 7a 41 83 c0 44 03 d9 f8 89 f8 8c fe a6 31 Data Ascii: A{Q4_0J78etja_m\|\j"4c9Wg m\XXs3b?#3B#\|\GK/CCt\|&+.\/abY8b;;!>7>B,;[/UTr.\r.\r6o.a J>h4zAD1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49888	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	388	OUT	GET /public/images/v6/search_icon_btn.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1816 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-718" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	1816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRctEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49889	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	432	OUT	GET /steam/spotlights/dde8d7c40e4c6dadb9d04c58/spotlight_image_english.jpg?t=1715642754 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:55 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 49403 Last-Modified: Mon, 13 May 2024 20:11:03 GMT ETag: "664273d7-c0fb" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:55 GMT Connection: close
2024-05-15 22:36:55 UTC	16154	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:55 UTC	16384	IN	Data Raw: 3c e3 94 7d f3 9b 4b 0e 31 97 67 9f 73 b5 f2 df c9 b2 81 a0 61 e6 db e9 5d 4d 33 81 e5 7d 59 ca 1e 4e bf d9 7b 25 94 3a 59 7b b8 d9 9c b4 07 dd f0 a6 5c ad 94 e1 0b 0d a0 ba cd 96 e4 cc 20 75 46 07 8e bf 4a 39 9a 49 ce b6 47 18 78 c6 59 4c d2 b2 fc 52 5b 0a 9e 28 f0 4c e7 15 0d 91 c9 59 00 f9 46 48 0c 72 a9 22 69 37 f8 33 f8 d6 d9 26 56 f9 57 ce 71 66 09 e3 38 59 5a 2e d7 1c 99 96 7b 3b 28 1e f5 a8 3a e1 b5 f7 cc ae 1f d3 ed 17 89 47 a6 44 d0 46 8a 26 28 ee ed 15 85 ef 1c 4e 4f 54 44 eb 37 e5 b1 41 13 00 57 22 d4 ce 25 8b 4a 2b 95 c5 63 f0 8e 9b bf 55 b2 cc f2 79 16 2a 27 95 c6 9a 33 7f 6f f7 78 a6 d6 9c dd d9 46 dc c4 4c 73 a8 62 fb 04 ab 57 af a7 d0 ce a3 22 e3 75 9f 70 36 dc 0b cc 67 b3 9a c2 72 07 f3 b6 39 94 a5 8f 67 5a 9a 00 8f f2 dc 02 6a 5f b2 02 Data Ascii: <}K1gsa]M3}YN{%:Y{\ uFJ9IGxYLR[(LYFHr"i73&VWqf8YZ.{;(:GDF&(NOTD7AW"%J+cUy*'3oxFLsbW"up6gr9gZj_
2024-05-15 22:36:55 UTC	2625	IN	Data Raw: ca 5a b2 b5 1d b3 22 ca c1 5a 1f e6 3a 52 42 0b a9 6d 44 a4 0a d4 61 cb 55 c2 49 80 9b cc b8 77 0d dd 32 da d2 5a 93 2d f8 8c e8 d0 cb 8a c9 b4 ba e1 5b 8e 28 a5 4a 24 e5 4e 38 b7 83 b3 cd e9 bb 5a 0a 60 46 bc 4a 76 64 76 d4 ac d4 e0 8e a2 96 8a cf 6a 8a 6b 83 61 81 12 2e ca 48 21 42 45 a2 db 01 3c cd 24 10 87 b5 b3 ac a0 d2 87 42 d2 69 db 8b 6e d9 db b1 04 0b 3d 85 af 27 12 10 5a 9c e5 04 1a 94 eb 59 2a 56 66 b5 26 a7 07 07 e9 2e c9 8f 12 12 50 35 6b 7d c6 d2 40 fa 94 70 b8 5b 1e de 89 12 5f 0b 48 bc a9 27 96 de 81 e2 e5 21 61 3a 94 2b 91 22 9e bc 5d 27 cf 92 a7 1e b7 40 7e f1 74 94 fa 89 2d a5 20 90 a7 54 78 ad 6a a2 52 38 d4 81 8b 64 a7 14 5c ba 01 25 84 c9 39 ab 9a c1 53 88 0a 3d ca 4f 87 ea c4 8d a5 21 4b 5d bb 70 24 c8 8a c9 74 b6 86 e6 47 4e a2 a3 Data Ascii: Z"Z:RBmDaUIw2Z-[(J$N8Z`FJvdvjka.H!BE<$Bin='ZY*Vf&.P5k}@p[_H'!a:+"]'@~t- TxjR8d\%9S=O!K]p$tGN
2024-05-15 22:36:55 UTC	14240	IN	Data Raw: 82 f9 ad 16 0b 2b 20 54 f8 54 0d 7e a5 61 d8 f6 e9 4a 55 bd dd 2b 81 71 2a 0b f1 37 42 97 35 27 23 c4 85 01 c3 86 2f f6 f8 b3 91 36 23 c1 a7 e2 48 6c 10 db af 37 4d 45 00 e6 2a 95 28 62 1b ac b8 a4 c9 db d3 54 cb ca 4a 88 50 42 ce 46 a3 3c ea 30 93 1e f5 70 61 43 87 2e 4b a9 fc ca c4 67 51 b9 af 51 51 25 be 74 45 3c fb 9a 5c 6f 52 90 16 8d 66 8a 4e a4 91 51 da 30 34 ee d9 4e 25 39 d1 d4 b6 e7 fb 49 38 4a 5e 95 0a 72 13 c4 3d 19 20 9f 6a 0a 70 9f 3f b6 20 c9 03 8a 99 79 c6 89 ff 00 4b 58 c2 45 c3 6b dc 22 9f b4 a6 1d 69 e1 fe b7 2c e1 21 e9 73 60 29 5d 8f c5 59 03 d6 51 a8 61 22 3e ec 82 14 ae 08 75 65 a3 fe b8 18 53 d1 ef 70 1e 69 09 2a 5b 88 90 d9 00 01 52 49 d5 90 03 08 87 6c 94 51 b6 20 c8 53 56 d6 53 ff 00 f3 9d 6f 27 65 2b f6 13 ee a3 bf 33 ea 8f 6d Data Ascii: + TT~aJU+q7B5'#/6#Hl7ME(bTJPBF<0paC.KgQQQ%tE<\oRfNQ04N%9I8J^r= jp? yKXEk"i,!s`)]YQa">ueSpi*[RIlQ SVSo'e+3m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49890	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	655	OUT	GET /steam/apps/1726570/ss_c734a0acdcada17a686b636430b0786c0cb08f83.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 21 Sep 2021 11:30:04 GMT ETag: "6149c23c-1138d" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 70541 Accept-Ranges: bytes Cache-Control: public, max-age=426780 Expires: Mon, 20 May 2024 21:09:56 GMT Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 01 02 08 09 ff c4 00 5d 10 00 01 03 03 03 02 02 04 07 0a 0a 08 02 07 07 05 01 02 03 04 00 05 11 06 12 21 07 31 13 41 14 22 51 61 08 16 32 71 91 93 d2 15 Data Ascii: JFIFCCQX]!1A"Qa2q
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 20 ed 48 da 09 24 81 e7 b2 69 77 c0 e8 f0 d4 90 c4 b2 5a 62 06 99 94 a5 44 b9 cf 70 c6 dd 15 2d 45 0d 6e 4a 03 88 68 84 92 bc 94 1c e1 20 72 4a d4 32 05 52 55 66 9e 68 ab a5 c3 5f 7d c8 1c af f0 ad 38 23 35 a5 c4 08 f0 fd 32 15 be 64 c8 ce 2d 5b a5 b2 a2 49 29 5a f2 e7 8a 71 b8 12 4e 1a 69 44 63 25 47 04 26 b3 56 73 74 9e 66 b5 d9 72 27 bb 8d 1c d6 df f2 ff 00 e0 bc d6 17 36 27 db 84 33 f7 3a 79 b8 a8 08 f1 ae 0f aa 3e d2 30 a3 b8 0e 56 91 dc 8e 0f 96 79 aa 74 94 a9 be f2 6a c5 5d 62 f5 31 fd 49 bc 2e c5 64 6d c8 92 a1 43 7d 31 c3 09 d8 ca 7c 34 ac e3 05 29 51 ce 38 50 1c 1f 2c fb a7 a0 a3 56 59 65 73 64 b3 4a cd 98 8e 94 74 f4 5e 74 34 f9 ce 42 93 74 97 70 71 51 d8 80 50 22 a1 d0 da 92 a5 3a 17 dd d2 a2 54 90 41 4a 46 dc 01 92 4d 7b 3c 36 05 cb 0d 52 bc Data Ascii: H$iwZbDp-EnJh rJ2RUfh_}8#52d-[I)ZqNiDc%G&Vstfr'6'3:y>0Vytj]b1I.dmC}1\|4)Q8P,VYesdJt^t4BtpqQP":TAJFM{<6R
2024-05-15 22:36:56 UTC	3515	IN	Data Raw: 94 65 1f ec 50 71 a7 52 71 6a 7a 46 f7 b6 b7 6f 99 2b 9b a9 6d 92 a1 2b c4 61 c9 3d b0 84 b7 b9 25 58 e7 6a ce 13 c7 23 76 71 5b d2 c2 e2 14 94 a9 a6 b9 3d 88 a7 2a 6a ea 6d 79 ff 00 d1 05 d4 9a 76 4e a2 d3 73 21 c5 71 10 25 ca 08 ca d4 72 db a9 4a b3 b1 cc 27 24 1c 0e 47 6f 66 3b 74 b1 78 39 d5 8a 69 2b f1 b0 c1 e3 21 4a a7 7d bb 2d af fa fe 7a 9e 7e 76 65 f2 2d f9 51 91 21 0f 38 c2 4b 7f 73 5b 61 6f 2d c7 37 14 e0 ac 24 9c e4 10 90 37 67 04 fb 2b cd f6 58 38 d9 c5 de fb ff 00 8f b9 eb 3a f6 9e 6b e9 6f cd 4c 2c bb 86 b4 b8 b3 3a 40 d3 ee 3f 6b 71 06 3a 5b 71 b5 25 0b 56 40 2a ee 14 a2 0f 18 4f 18 ce 4f 19 ab b4 b0 34 a2 93 cd ae f7 2b 4f 15 39 36 ad 75 c8 de 7a 4e c1 07 a7 3a 46 45 da 65 9e db 1a e6 88 d1 dd 44 57 70 80 16 76 a7 2a 6d 20 e7 1c 90 09 f2 Data Ascii: ePqRqjzFo+m+a=%Xj#vq[=jmyvNs!q%rJ'$Gof;tx9i+!J}-z~ve-Q!8Ks[ao-7$7g+X8:koL,:@?kq:[q%V@OO4+O96uzN:FEeDWpv*m
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: a7 e6 e7 6e bc e8 cd 4d c6 0a fc d3 b2 5a fd 74 d2 df 53 66 c3 b4 4f 1d 4a 9b 0c b3 77 55 90 47 05 32 94 c6 e6 54 ea 8a 8f 2e 29 5c ec 00 72 01 c8 58 1c 6d 35 d2 a1 2c 55 1a d2 a8 ea 5e 3b 28 db 45 b6 df ae fc ce 4d 58 d2 a9 49 2c a9 4b 9d f5 3a f5 1a 61 d1 31 e2 94 48 8e ea e4 28 24 25 d7 43 0b 48 24 24 10 48 56 4e e2 70 00 27 81 ef 35 e8 b0 f5 9e 26 ea d6 f4 39 ae 92 a7 de 6f dc 87 74 8f 57 7d d6 91 a8 60 ab 7b 89 66 49 90 87 96 b4 b8 a5 05 92 15 95 80 01 00 8f 54 79 27 8c 9a b5 1c 2c 70 f4 e2 a1 c7 ca da 91 56 a9 d6 cd b3 7b 23 e4 27 e6 15 54 90 c6 df 1a 92 50 db d1 d4 48 6f e5 36 01 39 f7 fe ca 92 9c dd 39 66 89 a4 e0 a6 ac cb 23 ac a6 b7 0d 68 43 6d be f9 c0 05 ec e0 7b 49 c7 ca e3 c8 f3 ef ae 9c 71 50 6b bd a3 39 f2 c3 c9 3e e9 97 b7 29 4e c0 61 6e Data Ascii: nMZtSfOJwUG2T.)\rXm5,U^;(EMXI,K:a1H($%CH$$HVNp'5&9otW}`{fITy',pV{#'TPHo699f#hCm{IqPk9>)Nan
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 42 4a 89 ef ce 30 70 78 35 db ad 84 54 e9 c6 a4 64 dd f7 d2 c9 7c cb 55 f0 2a 8d 28 55 8c 9b be fa 59 2f 2b 98 2f 8b f3 be e4 ae e8 88 32 15 6d 6d c0 d2 a6 06 c9 68 2f f2 4a bb 66 a0 ea 64 a1 d6 28 bc bc f8 15 7a 89 aa 6e aa 8b cb b5 f8 18 b5 9f 6d 40 d9 59 b3 96 d3 bc d6 d1 d4 cc 75 2b 84 f2 38 c5 4f 62 6b 1f 51 be 08 bf fa b9 e8 af f8 0f 7f 88 76 ae d0 fe 1a f9 fd cf 13 d2 1f ee a7 f2 fb 23 6f d4 e7 38 50 0a 01 41 63 90 33 58 6c dd 44 ec d8 6b 78 0e bc 96 86 38 dc 7b 9f 20 2a 1a 93 94 60 e5 15 76 b8 13 53 82 94 92 93 b2 e6 44 f5 7e 98 bc b9 6c 4c c6 ae cc 99 89 74 ec 8a 1b f4 75 96 d2 77 85 21 4a 58 56 ec 24 1f 55 24 2b bf 03 9a f9 47 49 ca bc a6 ea 63 a6 ee 95 ad 6b 2f 44 96 8f d7 c8 f6 58 4a 18 3c 3a eb 24 f3 47 f5 e0 d7 fd 34 6b 7e 9d 5c 75 2e 86 76 Data Ascii: BJ0px5Td\|U(UY/+/2mmh/Jfd(znm@Yu+8ObkQv#o8PAc3XlDkx8{ `vSD~lLtuw!JXV$U$+GIck/DXJ<:$G4k~\u.v
2024-05-15 22:36:56 UTC	1832	IN	Data Raw: b2 b6 ff 00 3e 1f 7e 24 3b e3 7e b0 5a 7c 64 33 28 20 60 29 a5 5b 5c 0a 48 24 fa df 24 e4 e0 0e 01 f3 f2 af 3b fb 43 a7 2f fe d9 7f fb 2f d0 f5 3f b3 3a 01 ab f6 97 ed ff 00 fa 26 3a 12 ff 00 79 bc 45 2d dd ad 52 61 ad 96 5b ff 00 4c 90 d1 67 d2 16 73 bb 08 3d bb 67 d5 25 3c e3 39 af 47 d1 d8 8c 65 78 be d7 47 25 b6 79 af 7f a2 b1 e5 ba 4f 0b 81 c3 ca 3d 8e bf 59 7d d5 ad 6f ab fd 4f 8e df 77 67 7e 70 7f aa 3f 75 72 2c 77 33 31 f7 7a 7f e7 07 fa a3 f7 52 c3 33 39 fb bf 3c 7f f7 83 fd 51 fb a9 61 99 9c fc 61 b8 7e 72 7f aa 3f 75 2c 33 31 f1 8a e3 f9 c9 fe aa 7f 75 2c 33 31 f1 8a e3 f9 c9 fe aa 7f 75 2c 33 33 9f 8c 77 1f ce 4f f5 53 fb a9 61 99 8f 8c 77 1f ce 4f f5 53 fb a9 61 99 8f 8c 77 1f ce 4f f5 53 fb a9 61 99 9c 7c 62 b8 fe 72 7f aa 9f dd 4b 0c cc 7c Data Ascii: >~$;~Z\|d3( `)[\H$$;C//?:&:yE-Ra[Lgs=g%<9GexG%yO=Y}oOwg~p?ur,w31zR39<Qaa~r?u,31u,31u,33wOSawOSawOSa\|brK\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49891	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	650	OUT	GET /steam/bundles/40751/resfcyr673l6y9dt/capsule_616x353.jpg?t=1715792253 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 142759 Last-Modified: Mon, 22 Apr 2024 17:40:16 GMT ETag: "6626a100-22da7" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16152	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 07 04 05 06 08 01 02 03 00 09 ff c4 00 5a 10 00 01 03 02 04 04 04 03 05 04 05 07 07 09 06 07 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 32 71 15 23 42 81 91 Data Ascii: JFIFvvCCahZ!1A"Qa2q#B
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: f3 a2 b7 1d 68 b9 3a 3f 0a e5 e5 6a d6 7f 4d 4b 38 d0 5e 32 20 bd 55 61 c6 e5 29 44 15 29 87 14 6f ab 50 36 1d 06 e0 9b da f8 a8 61 1e de ab d1 88 33 6e 12 cb 9a 10 92 32 f2 90 34 db 8f 1e 14 db 11 5d b8 b3 f6 55 93 99 1b 13 13 e5 ea 34 f8 1e 15 51 13 65 24 1d c5 c5 ec 76 38 ea 22 a9 75 9d 36 17 df 1b 0a d6 b2 da 75 a8 0e 9e f8 d8 6b 58 da a6 b9 5a 6b 31 61 f2 5c 04 b9 65 1d 20 75 bf 4d f0 f2 cd d4 36 8c aa df 5a 59 70 74 24 51 9b 29 b8 94 d3 a1 b6 77 71 2d 24 6a 3d f1 74 b0 f0 a1 29 9e 15 cf f1 04 19 26 89 39 5d 61 6e 34 a4 ae e0 58 6d d6 f8 b8 db 28 14 ef 5c ee f8 6f 14 63 cb c8 2a 4b 7b ef 89 97 c6 aa 2b dc d1 26 a2 b0 c6 4d 59 b9 2e ea 4e fe d7 c2 46 86 6b ae 94 69 d2 d8 f3 9a 17 3c 75 3e 77 b8 38 b1 9d 13 4a e2 95 30 f3 ae 29 2d 17 5c 53 48 16 d2 56 Data Ascii: h:?jMK8^2 Ua)D)oP6a3n24]U4Qe$v8"u6ukXZk1a\e uM6ZYpt$Q)wq-$j=t)&9]an4Xm(\oc*K{+&MY.NFki<u>w8J0)-\SHV
2024-05-15 22:36:56 UTC	2327	IN	Data Raw: b1 9a 74 d0 6a 78 9d b8 d7 5c 8d 9e 73 85 5d e7 93 44 55 22 97 cb 0b 08 66 a1 31 6d 33 25 49 b1 53 64 11 64 ab 71 62 b2 07 6b 8c 73 ab e7 ad d8 4c ad a2 ad a7 28 98 07 a7 2f 2d 6b b3 58 e2 b7 67 fd 34 a5 20 6c 09 20 12 37 15 2f 13 aa 30 a9 f1 eb 19 d9 12 32 72 6f ce 45 36 54 f4 ce 4c e4 8b 17 0c 76 6e 48 d8 8b 10 b4 8b 9b 5b 62 70 43 76 ed 14 84 e4 05 24 ec 47 e8 44 eb 53 2f b4 52 92 e1 41 0b e4 55 99 27 9f 51 e8 6a 43 5a f1 2d 29 8c 9c f6 56 c9 6f 54 1b 61 ed 08 4d 7a 4b eb 4c 94 36 a2 4a da 69 82 55 c9 50 d9 09 70 2d 47 48 36 b1 37 c0 16 f8 16 1e cd ea af 2d 98 09 59 9d a4 c7 c4 98 f3 aa fd e6 28 f5 d9 ca a3 a2 8e 80 7d 06 ea 3e a4 d4 6d 79 b3 88 ee 15 39 98 eb 15 6a 85 3a 7c 72 87 19 ad 2c a8 bc 84 f9 9b 52 54 a4 ea d4 95 58 82 37 b1 50 26 ca 38 da ea Data Ascii: tjx\s]DU"f1m3%ISddqbksL(/-kXg4 l 7/02roE6TLvnH[bpCv$GDS/RAU'QjCZ-)VoTaMzKL6JiUPp-GH67-Y(}>my9j:\|r,RTX7P&8
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: ac 9b 49 32 44 d1 8b 2b b2 99 ed a5 20 b7 01 ce 58 43 6e b4 de a4 20 f6 52 93 e9 f4 c7 3a bd 50 4a 89 22 7f 3e b5 d0 ac d0 56 98 49 ca 63 43 1a 0e b1 ca 9a ea 39 8b 36 53 26 39 06 5d 41 c8 f2 62 2b 74 47 6d 2d e9 49 e8 50 40 ba 81 1b a4 f7 c6 cd 5a d9 38 90 b4 22 41 e7 27 e3 fa d2 d7 af f1 36 96 5a 75 c2 92 9e 40 0f 50 79 1e 06 9a 83 2d 29 49 52 54 6c ab 9b 75 29 bf 5b 1f 5b dc 93 ef 83 24 f1 a5 b9 01 d4 71 a5 f0 2a 8e d2 e5 45 9b 1c 21 6e b1 d8 8d 95 ea 92 3a 10 7a 60 77 1a 4b c8 53 6b d8 fe 4d 18 c3 cb b7 71 2f 35 ba 7e 7c c1 e8 68 a1 0e 53 15 38 71 e6 45 24 c7 78 dd 09 be e8 3f 89 27 d0 83 b1 c5 41 c4 29 a5 96 d7 b8 fc 07 d6 ba 23 2e 22 e1 b4 bc d7 ba 7e 5c c1 ea 0d 76 fb 29 8a bc 47 e9 b2 5a 5b 91 26 20 32 ea 92 37 41 26 e9 58 f7 4a ac 47 ae 34 4b ea Data Ascii: I2D+ XCn R:PJ">VIcC96S&9]Ab+tGm-IP@Z8"A'6Zu@Py-)IRTlu)[[$q*E!n:z`wKSkMq/5~\|hS8qE$x?'A)#."~\v)GZ[& 27A&XJG4K
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 47 10 57 02 33 d1 5f a9 54 c2 5a 76 54 89 06 ff 00 07 15 36 2a 4a 5b 07 cc ad 5d 49 db 0b 4d b5 ca 1e 61 41 40 a5 d2 49 00 6c 3a 9e a4 d2 a7 70 f7 d8 36 cf 15 82 1e cc 60 0d 52 07 f7 1e 64 9f de ab a5 65 80 89 8f a7 52 56 02 ba a7 a6 2f 17 2d 84 b8 a4 8d 69 b5 eb 59 5c 23 7a 6e 4b 4e 47 2b 52 09 6d cd 0a d2 a2 37 1b 1b 11 7c 27 bb 6d 62 dd cc 9a 2a 34 a5 0a 42 91 31 a1 8a 67 71 c5 3f bb 8b 53 84 ef e7 51 38 e7 25 45 7a a8 cf 9d 28 27 37 bc 6b 52 94 b6 8b ec 91 8f 56 b1 c0 52 a8 54 e9 ae b0 ec 94 c2 93 f0 89 4d d7 23 92 ae 58 df 6b aa d6 eb b7 e7 87 98 48 5a 6e 20 83 04 11 fa 8a 9d a6 96 64 c6 94 be 8d 28 d3 2a 2c 48 b9 4a 52 a1 a8 a7 ad bb d8 74 c5 86 ea d1 4e 14 ba ca b2 b8 83 20 8f a7 e7 95 3a c3 ef 5d c3 5d 2e b6 27 a1 da 7f 37 a7 cc e9 95 63 40 0d 56 Data Ascii: GW3_TZvT6J[]IMaA@Il:p6`RdeRV/-iY\#znKNG+Rm7\|'mb4B1gq?SQ8%Ez('7kRVRTM#XkHZn d(*,HJRtN :]].'7c@V
2024-05-15 22:36:56 UTC	7952	IN	Data Raw: 34 81 f2 94 5e ea fa e1 10 04 75 a5 85 2a e2 4f c6 b0 95 25 f6 dd 8e 57 ae e9 50 4a ce e5 46 c7 19 95 0d 66 b5 95 8d 02 8c 72 93 15 0c 6a 22 9c 69 eb 0d db 6c b8 7e 80 8b e0 c4 a9 20 28 2b 8e de 73 45 2d 20 03 3c 69 31 46 34 14 39 4d 5c 7f 03 5c 4b 5e 56 a2 d5 61 cb a3 b6 aa 3c 49 22 4b 95 08 ee 14 49 7d e7 06 90 da af e5 50 42 10 48 1b 6d eb 7c 73 8e d2 d9 77 ae a5 c4 ae 0c 44 70 a9 d9 6d 4e 05 21 3b 9e 7d 3e f4 46 cf 99 06 83 c5 f6 ea b9 a7 34 41 98 e4 73 33 fc dd f6 1f 28 4a 6d 64 96 88 20 a4 82 90 94 91 6e b7 20 e2 aa cd d9 c3 1d 0d db a4 15 28 78 b7 fc eb 47 aa d9 2a 09 64 2a 08 1f 87 f7 a9 b5 2d 8a 26 75 80 a8 f2 59 79 a9 ff 00 3b 61 a5 14 72 5a d9 28 4a 4e e0 8d 86 c4 7a 62 b2 f5 d3 ac 38 a5 05 4e ba f5 3b d1 25 2a 66 32 fb a3 4a 62 e1 ae 6a 6a 1c Data Ascii: 4^uO%WPJFfrj"il~ (+sE- <i1F49M\\K^Va<I"KI}PBHm\|swDpmN!;}>F4As3(Jmd n (xGd-&uYy;arZ(JNzb8N;%f2Jbjj
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 30 52 72 ad 5b 71 e3 1f e6 87 b8 4d c3 2d 3b ec c8 ce b0 06 51 20 05 99 d8 1e 19 77 26 3c a6 ab 42 13 3a a5 f0 ce bf 12 55 2a 96 1b 5e 99 53 df 48 e7 95 39 e5 53 49 24 13 74 a9 16 1e b7 de f6 c1 62 02 25 42 22 6b 0d 77 ca 78 90 65 24 0d 20 82 08 1a fa 4c 99 d3 84 57 6a 73 eb a4 43 ab d4 9b a6 37 2a 1c 18 cc cd 86 e4 87 c3 62 63 6e ba 1a 16 4a 49 52 5c be a5 5b b8 45 ef be 24 b7 51 39 bc 3a 80 0e fc 09 fa d2 ac 5a e5 21 2d b4 d3 a4 29 6a 52 24 26 72 a9 09 cc a9 9d 20 68 27 51 27 8c 54 05 cc d9 31 39 85 85 45 a3 d3 35 5e e8 89 12 96 b7 d9 79 7e 64 97 5c 42 89 05 6a 24 92 a2 45 ed 70 05 b0 be 16 85 ca 40 9e 10 24 79 9e bd 69 e2 59 61 eb 45 36 e3 8b 29 57 88 92 b8 50 d8 e5 4a 84 10 91 1a 24 70 31 35 63 72 6f 1a 68 59 06 83 94 a8 cc 3e d3 15 0a 83 62 34 77 a6 Data Ascii: 0Rr[qM-;Q w&<B:U^SH9SI$tb%B"kwxe$ LWjsC7bcnJIR\[E$Q9:Z!-)jR$&r h'Q'T19E5^y~d\Bj$Ep@$yiYaE6)WPJ$p15crohY>b4w
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 95 62 a4 2c e9 57 28 7c aa ba f6 2a b1 09 f9 53 6a 69 20 93 d3 58 fc fd e8 96 65 2b 0e 9d 07 5e 3e 5d 47 3f 4a 95 65 1e 1c e5 da f7 16 a6 e7 b8 55 e8 59 a9 89 71 16 b6 29 2e 30 dc 88 8b 6b 96 96 ac 85 82 43 a1 08 49 3a 7a f9 89 ed 85 0c db be d7 f3 d0 9f 77 48 3f 3d 29 a3 98 83 6b 64 59 93 12 67 30 3e bb f0 9a 8e d7 f8 13 12 a3 c6 9a 2d 62 9a ed 0e 1d 16 03 0d cd 5d 16 2a 74 49 4c 74 2f 52 94 00 07 5b 65 ce 5d 94 4e c0 9e d6 c0 ee e6 79 25 d4 a2 00 de 36 fd a8 e6 2f 43 4d a9 85 a8 95 ab 40 49 fc d6 95 67 c9 3c a8 79 e6 a3 29 36 f8 98 ec d0 22 24 9f 3a d2 ed d7 21 69 1d 48 f3 5a ff 00 d9 c0 a5 c0 c5 99 28 3e 25 1f a6 df ad 68 84 07 1f 4a 48 d0 0f cf d2 a8 74 e8 0d e5 05 4e 8f 35 f4 b4 19 75 4d e8 48 2b 52 82 49 01 69 09 ec 45 b7 24 6f 8b 53 2b 37 49 4a 9b Data Ascii: b,W(\|Sji Xe+^>]G?JeUYq).0kCI:zwH?=)kdYg0>-b]tILt/R[e]Ny%6/CM@Ig<y)6"$:!iHZ(>%hJHtN5uMH+RIiE$oS+7IJ
2024-05-15 22:36:56 UTC	7952	IN	Data Raw: e2 12 e4 55 2a 25 ea 85 45 f7 9e 08 0d 25 d7 d6 56 b0 81 b2 52 09 fc 20 6c 3d 31 66 05 0c b6 43 69 81 bc 0f 9f c6 8c b3 51 70 f8 89 27 9e fe 55 0e 9d 46 76 9a da 1f 09 f8 86 de f3 c7 4a ae 95 3a 80 4a 4a c1 e9 d5 27 f4 f6 c5 5a e5 e4 a9 44 93 14 ef 22 33 14 85 44 74 ae 5c da 81 88 35 ad 2d 34 b5 84 69 fc 49 fe f1 ee 30 13 6f 34 17 a6 a6 b0 96 5a cd a0 93 45 de 1f e5 f5 c3 a6 48 e4 c8 fb 41 2e 72 96 5d 6d 25 28 4a 88 3b 24 9f 9b af ee 18 ca ef 11 23 32 b2 ef a1 de 2a 17 5b 4c 19 5e 5f cf 5a 94 bf 25 88 4f 9a 54 86 a2 09 d1 98 32 1d 65 c1 a5 c4 36 a5 00 16 ab 1b 91 72 00 3d 37 c1 0c bb 9c e6 4a cc 13 a6 9a 1f 2f c9 a5 17 16 8e 10 25 44 75 80 27 f3 ad 0e 78 6b 5b 54 2a 2e 6a a8 69 46 a5 d4 06 95 b6 92 97 6c 2d a8 25 7d 81 06 de f8 b0 3e 43 8b 42 39 0f 4e 9a Data Ascii: U%E%VR l=1fCiQp'UFvJ:JJ'ZD"3Dt\5-4iI0o4ZEHA.r]m%(J;$#2[L^_Z%OT2e6r=7J/%Du'xk[T*.jiFl-%}>CB9N
2024-05-15 22:36:56 UTC	14769	IN	Data Raw: 54 07 99 14 a3 28 54 68 59 b9 f9 d1 d9 cc 94 98 d2 a3 c4 5c 96 5a 72 53 6a 32 54 9d f9 28 01 57 2b 22 e4 5a fd 30 b2 f1 c7 2d 32 2b bb 2a 0a 50 06 38 4f 13 d2 8c 6a ea dd 64 24 2c 12 74 02 47 de a1 f9 d3 31 22 89 1d b4 b0 a1 f1 0e 00 bd 2e a0 94 84 9b f7 18 77 6a c1 74 92 ad 85 0f 7f 72 9b 60 12 93 a9 e9 50 68 39 e2 43 d3 f4 4e 4b 48 8c 6e 35 b4 08 20 f6 3d 70 cc db 80 3c 3b d5 71 bc 45 65 c8 76 32 f4 a9 23 ee 48 6d 01 60 2d 29 1d 0b 89 b8 38 8d 19 66 29 ba 96 b4 89 15 c1 b9 ee 20 7d e2 0f b9 46 08 03 91 ad 13 72 a1 ef 52 b6 dd 8a bb 2d 05 49 7f a2 5c 00 a1 49 f7 0a 1f c3 1b a1 d7 1b 32 0c 54 bd ea 14 24 6f f9 c6 96 05 3c fb 48 4b d2 1f 96 94 0f 20 75 c2 a0 9f 5d 24 ee 30 41 bb 79 d8 0b 59 d3 6a d5 4b 31 a9 27 cf f4 e3 49 83 4b 0b 09 49 d3 a3 e5 d2 7a 6f Data Ascii: T(ThY\ZrSj2T(W+"Z0-2+*P8Ojd$,tG1".wjtr`Ph9CNKHn5 =p<;qEev2#Hm`-)8f) }FrR-I\I2T$o<HK u]$0AyYjK1'IKIzo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49892	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	386	OUT	GET /public/images//v6/ico/ico_info.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1871 Last-Modified: Tue, 20 Feb 2018 01:57:39 GMT ETag: "5a8b8093-74f" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	1871	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 34 00 00 00 20 08 06 00 00 01 2a 38 6b f0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR4 *8ktEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49893	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:55 UTC	379	OUT	GET /public/images/v6/arrows.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1290 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-50a" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	1290	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 24 08 06 00 00 00 f6 22 08 51 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR.$"QtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49894	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	655	OUT	GET /steam/apps/1672980/ss_faecee368ca05e4d08ddf7db64f154df152a3722.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 24 Aug 2021 08:42:06 GMT ETag: "6124b0de-18683" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 99971 Accept-Ranges: bytes Cache-Control: public, max-age=257034 Expires: Sat, 18 May 2024 22:00:50 GMT Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 08 00 09 ff c4 00 50 10 00 02 01 02 04 04 03 05 05 05 05 07 03 01 05 09 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 07 14 32 71 81 23 42 91 a1 b1 Data Ascii: JFIFCCQXP!1A"Qa2q#B
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 0e ae 4d bc a2 32 8c bf 2c 8c b5 4e 69 a6 b6 66 17 3a d8 d8 1d 37 00 8e ff 00 33 d3 19 ba 89 66 71 d9 1f 95 67 49 38 36 1d 76 9c 53 54 d2 37 28 2d 0a b1 11 91 71 7d 4a 41 be fe b6 ee 30 9f 9d 96 77 7f 4a b0 ea 04 79 03 3f a2 47 9c d1 ca d2 f8 23 92 41 70 35 df c4 09 ed 8d ad 34 ec 70 a3 ca 68 cc 25 ca 96 83 26 ab a2 98 4b 59 28 a7 5d ef 1b 9d db d0 9e 9f 96 18 74 8d 7f 95 b9 2a e0 11 ca 65 1e 6b 0c 69 08 a5 92 f5 46 61 cc 57 81 64 55 03 a0 5b 8b 7c b1 47 b7 66 5d 5f 7f d5 43 9c d7 37 6f 74 d3 39 aa a2 4a 8a 79 5d 66 aa 79 e2 6d 68 6c 2c e0 d8 5f 72 35 9e a4 74 ea 36 c5 63 d3 00 ca bc 2c 49 64 99 f2 ef 6f 3c 0e d7 d7 07 ed fa a4 1a a8 92 9c d4 54 33 bd 4a c8 82 1f 78 4d 25 90 92 1e e0 0b 1b 78 40 b7 91 c3 91 34 0c 37 84 39 99 3b 9d b9 f8 f6 fe 11 b3 57 45 Data Ascii: M2,Nif:73fqgI86vST7(-q}JA0wJy?G#Ap54ph%&KY(]t*ekiFaWdU[\|Gf]_C7ot9Jy]fymhl,_r5t6c,Ido<T3JxM%x@479;WE
2024-05-15 22:36:56 UTC	2393	IN	Data Raw: 88 8e de e2 5c 00 ef 9c d2 a9 c7 ca 8a cc 5e 4c e5 21 99 e9 e3 a7 78 85 9d e3 be b2 7c ac 7a 01 f2 f9 60 8e 0f 8d bb 59 9b 52 7c d9 5a 1a e8 a9 e8 05 3a 45 05 64 c5 0d 8c a8 55 ca 91 b9 be c0 90 7c b1 48 8d 65 c7 68 0a 0b 80 15 ca 42 94 75 bc 43 48 94 7c 97 59 e9 d9 bc 26 40 d1 90 7a dc 76 27 ce fb e2 5e eb 25 e3 8f 74 81 0f 9d bb 6b 23 d5 63 2f 4a d8 60 92 96 53 02 9a 69 09 07 94 15 d0 93 ba df a8 f9 1c 58 39 a0 13 5f 4f 45 78 5a e6 82 d3 58 43 55 e5 f9 7c ee ef 55 50 b4 13 89 37 29 11 65 23 e4 0e dd ae 77 c4 92 d7 80 5b d4 21 cb 14 64 d9 34 54 13 e4 f9 3e 61 49 57 51 06 61 1d 14 74 e6 c1 f4 10 5c f6 05 6f 73 7e db 5c e0 d8 15 62 ed 55 d1 42 e6 97 34 d5 2a 8c d4 ad 00 24 5f 94 4f f8 fc b3 63 63 d7 f3 c4 97 02 ea 06 d6 71 14 56 65 89 66 75 25 58 c5 dc a4 Data Ascii: \^L!x\|z`YR\|Z:EdU\|HehBuCH\|Y&@zv'^%tk#c/J`SiX9_OExZXCU\|UP7)e#w[!d4T>aIWQat\os~\bUB4*$_OccqVefu%X
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: b2 b2 f5 23 6b b6 a8 f8 62 9b de 33 88 d5 79 8c f1 a3 3c 62 20 4b 19 34 d9 14 01 ea 46 25 e7 68 43 85 a0 bd 74 ea 5e 0d 9f 2e cd a1 fd bc ca d5 12 22 94 0e 81 e3 85 ba 00 f6 db 57 d6 c0 8d f0 8b 65 6d e0 67 f7 5a 42 33 7e 74 e2 b5 a9 28 24 5a 58 b3 0f 79 a7 65 d2 c6 de 21 a4 f7 3d 08 f2 fe 38 00 88 bc ef 38 cf d1 14 90 3c b6 98 e5 32 54 6d 35 24 6f 2d 21 1e 26 28 1a fb ed 6b e2 d2 8d ae 00 ab b4 f6 e1 0d 1d 5b 55 66 cb 52 33 08 69 4c 02 ff 00 69 06 84 7b f5 06 fd ed eb f8 e2 44 65 bb b7 36 ef d5 56 ec dd a1 73 2c c4 54 66 19 85 96 3a 89 e2 8f 54 6b 4d 20 01 bd 4d cd cd bb 91 7c 73 d8 18 1a 72 86 e7 e4 81 92 a9 d4 32 c3 99 57 96 ab ad e4 cc ab ae 19 1a 37 60 2d d1 48 16 b7 cc 63 a8 bc d2 ca 63 bc 59 3c ee ca 6d 25 5d 44 73 b5 4e 5a ca 6a 26 04 ca 80 15 72 Data Ascii: #kb3y<b K4F%hCt^."WemgZB3~t($ZXye!=88<2Tm5$o-!&(k[UfR3iLi{De6Vs,Tf:TkM M\|sr2W7`-HccY<m%]DsNZj&r
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: e5 46 96 2a 6a 78 a3 65 d2 f2 28 25 98 f7 bf 6c 55 ce 07 dd 40 8b 3e 89 be 45 1d 59 99 66 a7 44 31 c1 d5 dd 6e 16 e3 d7 ae dd 86 17 03 bf 54 cb c8 c0 05 6e f5 3a 19 23 8d be d1 98 a9 3a 41 bd bb 9f 21 f4 c2 d2 30 b4 e5 3b 0b c3 c6 16 d4 55 6d 05 2b 44 9a 9a 46 7d 00 46 e5 3e 7d 3b 79 8c 0b 73 81 f2 9e 53 61 8d 20 5f 44 c0 56 81 1a 2c 73 a4 c8 00 1b 26 e2 dd 4e e7 a7 5b 6f 84 40 76 e2 d9 05 7f 4a 22 d4 3e 5d c2 33 64 1f d1 17 46 65 ad 8e 55 20 3c 4c a0 b7 30 eb 90 9b da c3 63 73 bf 9f e9 8a bf c2 dc 5e f7 d1 1e f9 47 7c bb 1c 05 1c f4 e8 3f 4a 56 6c 83 85 cd 43 7b c5 52 c7 4d 1b 80 b1 89 77 92 41 e4 aa 7a 7a 93 f9 e3 36 59 6b 0d 5e a2 38 83 c0 2e 1f 75 65 93 24 2e 6a 22 a5 8a 28 99 08 26 0a 89 83 09 8f 6d ed f1 75 da f6 b0 c2 45 fc 12 b4 8c 2c 7b 68 8b 50 Data Ascii: F*jxe(%lU@>EYfD1nTn:#:A!0;Um+DF}F>};ysSa _DV,s&N[o@vJ">]3dFeU <L0cs^G\|?JVlC{RMwAzz6Yk^8.ue$.j"(&muE,{hP
2024-05-15 22:36:56 UTC	7952	IN	Data Raw: a6 1a cc c4 bc 54 c1 8b 88 e3 5e c7 7b 2a fd d1 8b 39 ed 8c 6d 62 04 71 cb a8 78 92 63 41 31 e2 0a aa bc a2 08 e4 a1 a4 91 b9 c7 42 ce d1 dc 2b 75 d2 17 f7 be 7b 79 60 11 b1 ae 34 f2 b4 b5 1a 89 21 00 44 db 27 af e7 55 50 a4 e0 c9 06 75 ef d9 b0 4a fa 97 bc 8d 03 b9 3b 9e 85 8f de 37 ed d3 06 93 53 e4 d9 1e 02 16 9b e1 db df e3 6a 8e e2 7a 7f 7f d7 0b a5 d1 1a 84 8f c0 63 8c 29 1b 2d 98 01 b7 6f f4 c6 29 01 7a 3b a1 41 1f 9b 70 ff 00 bf a9 97 98 16 b1 b7 57 b5 83 0b 74 23 f8 e0 b0 ce 63 c1 e1 64 eb 34 6d d4 79 db 87 7e fe ea a9 9c 46 e9 2a c5 32 98 e4 88 d9 95 b6 3b 8f f4 c6 dc 4f 0e 16 17 8d 9a 37 46 ed ae 14 42 4b 55 50 10 32 8b 10 09 3d 7b 60 82 f0 4a 5a 96 94 d9 15 4e 68 44 84 18 a9 db ef 1e ad f2 fe 78 5e 49 c3 30 39 5a 7a 6d 0b a6 a7 3b 0d 5f 55 e4 Data Ascii: T^{9mbqxcA1B+u{y`4!D'UPuJ;7Sjzc)-o)z;ApWt#cd4my~F2;O7FBKUP2={`JZNhDx^I09Zzm;_U
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 73 56 69 23 a3 96 ae 2f 77 e5 de e2 40 65 88 6d 6b b7 d7 6c 57 75 79 8b 49 37 f7 fa 26 c4 ae aa 77 08 ac eb 35 87 dd 12 77 a8 4c c5 24 87 96 1a 3d 9d 4f 62 40 fa f9 61 8d 96 0b 9a 28 a2 3d f4 dd d7 6a b5 21 68 26 95 d6 39 64 85 60 01 a5 09 cb 0a 36 1d 3b ed 6f 9e 00 08 78 00 90 0d f1 ca 4b 2e 2b 6a c4 e4 81 22 55 42 58 d9 d9 e1 16 16 d8 5b 6d ef 6e c3 cb 16 6e 29 ae 67 df 2b 9c 43 40 05 0d 97 cb ef 35 d1 c9 1c 5a 64 7d f4 25 88 00 5f 72 4f 4e 98 3f 86 48 da 72 17 35 a5 c7 21 5b 06 59 34 f4 de f4 96 58 f5 99 39 48 e7 c2 7e 5d 36 c5 1e e1 90 e3 84 f6 d3 56 10 a2 a6 9d a8 e5 a4 9e 22 ec 80 bc 32 44 a0 1b f9 1f ae 08 c2 5d 96 9c 7a aa e2 b6 94 0f ec 69 67 82 34 2a d3 47 11 2c d1 c4 02 b3 75 b8 b9 27 7d fb 79 61 60 77 3c 96 60 9f d1 07 c2 23 21 56 2b d1 45 43 Data Ascii: sVi#/w@emklWuyI7&w5wL$=Ob@a(=j!h&9d`6;oxK.+j"UBX[mnn)g+C@5Zd}%_rON?Hr5![Y4X9H~]6V"2D]zig4*G,u'}ya`w<`#!V+EC
2024-05-15 22:36:56 UTC	8048	IN	Data Raw: 1c c1 24 31 92 4a 95 2c 37 ed d6 fd b1 c5 9b 9a 2b 1f a2 14 ae b3 ca 59 11 55 78 d5 9d a4 57 2c da 14 08 ca 8b 75 04 fd 7f 0c 52 ae cd 55 57 aa 08 a5 14 b3 aa 4e 44 4b a8 4a a0 69 b8 60 14 9e a0 5f 73 6f d3 13 b4 bb 2e e8 ba c9 3c 25 b9 9b a6 98 e2 1c d0 a8 37 49 08 eb df a7 4d ee 70 c3 2e af 19 52 f3 80 10 70 e8 58 6e c0 36 a3 72 2c 76 1d b7 c1 4d a5 c9 ae 53 68 2b 58 72 88 5b 98 87 85 8f 5f 91 f4 c0 49 c2 2f 89 40 27 05 6a ab 22 8a 69 62 48 e3 1b 92 a4 12 07 99 f4 f3 c5 5a f1 78 4c 02 e7 0b e8 a5 61 13 38 f7 78 04 7a 40 27 4b 80 0f 95 bf 3c 59 c0 8c 93 76 89 8e 81 6b 53 53 17 ba 88 64 41 28 04 3c 6c 45 d9 4f ae 39 a0 11 6d 2a 49 15 45 47 54 7d fe 9a cb 46 49 03 e2 88 e9 27 d0 db 10 c2 01 ab 5c 72 38 52 29 82 9e 36 95 a2 13 d2 e9 05 c1 b0 60 dd 85 fb 6f Data Ascii: $1J,7+YUxW,uRUWNDKJi`_so.<%7IMp.RpXn6r,vMSh+Xr[_I/@'j"ibHZxLa8xz@'K<YvkSSdA(<lEO9m*IEGT}FI'\r8R)6`o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49895	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	655	OUT	GET /steam/apps/1672970/ss_46ee31494b5d144d5ef6670cb5a1564abbc26fab.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Mon, 23 Aug 2021 13:35:31 GMT ETag: "6123a423-14600" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 83456 Accept-Ranges: bytes Cache-Control: public, max-age=153794 Expires: Fri, 17 May 2024 17:20:10 GMT Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 08 00 09 ff c4 00 4f 10 00 02 01 02 05 02 04 04 02 07 06 02 08 05 01 09 01 02 03 04 11 00 05 12 21 31 06 41 13 22 51 61 07 14 32 71 81 91 08 23 42 52 Data Ascii: JFIFCCQXO!1A"Qa2q#BR
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 33 30 ce e9 28 f3 ae 9d cd 62 ac 58 23 ca 66 ae 19 8d 35 42 b3 5b 50 61 67 45 d2 35 01 72 dd 88 1c e2 b6 d5 d0 64 71 c9 c7 af 94 79 bf a4 ea 9f 2c 8a a6 ae 89 a5 9b 49 f0 5e 99 92 da b7 bf 92 fb fe 7d bf 3c 45 ef b1 38 b7 17 68 f4 37 c0 3e 9f e9 3f 89 59 66 78 2b a9 01 ae 8e 39 2b 06 71 98 47 20 a6 ca e0 11 10 d3 ca ea c1 57 4c b6 b2 90 4b 11 a5 45 ce 22 a3 d8 86 4c 94 ac e8 bd 3b 99 52 e4 5d 39 98 e6 5d 21 91 d4 cf d3 33 66 19 65 00 93 31 d5 e2 e6 c9 17 cc 89 ea a5 45 bd 9b 5b c4 55 54 79 42 a2 8b 90 71 9f ab c3 8b 26 4c 59 1f 30 ea fc 6b 7f 9f 3f 4b 08 d3 4a 70 ea 73 ee bf 7d 8e 0d fa 4a f5 3d 46 7d f1 4b a8 33 09 68 ea a8 27 96 61 1a 52 d5 c7 e1 ba 15 50 84 e9 d2 a4 2f 96 e0 11 7b 5a e4 9b e3 bc f0 5c 58 f1 69 62 d4 a3 29 3e f1 ad fd 2e b9 75 cb 30 35 Data Ascii: 30(bX#f5B[PagE5rdqy,I^}<E8h7>?Yfx+9+qG WLKE"L;R]9]!3fe1E[UTyBq&LY0k?KJps}J=F}K3h'aRP/{Z\Xib)>.u05
2024-05-15 22:36:56 UTC	2166	IN	Data Raw: c5 1d 04 f3 4b 30 86 73 0b 05 68 84 bc 86 1d e3 22 e0 7b df 6c 39 12 0a b8 ca 4a 89 14 f1 2d 43 22 96 47 0c 18 ad 88 d2 75 dc 1b 76 f6 e3 08 7a 05 9e 5a 3a 08 35 17 f1 65 68 c6 84 02 f6 bf d4 0d c7 3f 7f c0 8c 55 93 22 87 21 fa 5d 1c f5 2f cb b2 f5 2b 75 e6 5a 86 63 33 b3 ed a5 3c 56 3e 50 4e d6 ed b6 33 a5 95 cd ee 75 b8 74 70 d3 c7 a6 2b ef 20 8e 23 1d 95 55 49 22 f7 5e 31 5b 95 87 43 15 05 53 40 ec 2f e6 51 6b 5e dc fe 03 14 4a 69 1a 18 b0 b6 32 8b 2d 0f 05 ac 01 3d f0 2c b2 6e 6c e2 d3 5a aa 18 0a 68 a2 8e 34 bb 2b 01 c1 5d 46 f6 ec 46 e3 03 75 bb 0e 96 14 95 10 54 e5 52 39 56 11 5c ba dd 9a f7 d7 ef 6c 5d 1c 88 0b 26 9d fa 1b c9 14 71 d3 d8 c7 a4 17 0a 45 f5 6c 37 e7 d7 f8 e1 d4 9d d8 3c f1 25 1a a0 ce 8d a2 5a 9e a1 a4 a7 9a ab 4f 8b 28 8c 17 52 e8 Data Ascii: K0sh"{l9J-C"GuvzZ:5eh?U"!]/+uZc3<V>PN3utp+ #UI"^1[CS@/Qk^Ji2-=,nlZh4+]FFuTR9V\l]&qEl7<%ZO(R
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: aa f0 53 ab 92 b0 53 a3 48 91 48 79 ba 1d ef ea 48 dc 6f ed 89 d1 5f 22 f7 4f 9c a6 31 c6 d2 48 b1 85 f1 6c 53 ca 49 23 6d 44 10 a7 b8 d8 6f 84 20 3a 74 a9 91 65 60 86 90 c6 82 39 6f 71 a4 13 6b 9b f1 c7 1c 70 76 c2 10 1e 6f 54 69 a2 6a 48 5d 25 8d 06 92 1f cc 56 dc 15 ec 2f e9 7b 60 2c ba 94 bc b1 e4 e8 b4 7e 15 3c 89 64 cd b2 f4 ef fe 04 92 d3 19 2a 19 a4 59 64 45 d9 89 3c 1e e3 6e 77 b6 33 9e 46 f7 bd ce b2 3a 78 c3 ca 96 c8 d8 aa 33 0d b5 21 00 05 6e db 70 00 fe 78 aa e8 31 63 4f e4 17 15 09 7d 3a 14 99 19 76 50 2c 7b 7a 62 97 92 b9 34 31 e9 ef 84 36 4c 81 a9 e1 56 7b c7 a8 7d 1b 9f cf 01 4b 3d ba 46 ce 3d 1f 4a 4d a0 da 1c ac 94 fa 4e c2 f6 b5 ac 30 2c f2 ee 6b e1 d3 6c 13 05 23 82 16 1f 10 3d c9 2a 16 e1 87 7c 57 f1 3d 4b 25 85 f6 20 aa a0 a8 fa 55 Data Ascii: SSHHyHo_"O1HlSI#mDo :te`9oqkpvoTijH]%V/{`,~<dYdE<nw3F:x3!npx1cO}:vP,{zb416LV{}K=F=JMN0,kl#=\|W=K% U
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 73 8b 0a 6c c7 ce ac 51 69 06 29 db 60 17 49 db 6e 70 f6 31 08 33 d2 d3 dc df ea d9 5a c4 6f ed db 0c 37 63 30 d5 a0 71 64 08 e3 94 6f a4 8f e9 89 58 e8 cb c2 21 9d 97 49 31 9d c1 bd c8 c4 da a2 84 49 04 ad a9 d8 30 0d 6b 15 6f da 1f e7 84 84 15 4f a7 41 4b 5c b9 04 12 fb 0f be 24 86 18 c7 a2 54 0a e0 34 a9 e5 05 7f 68 7b e2 69 58 d6 41 53 4f f2 13 29 e6 26 5b a2 db bf 7c 3b 54 32 25 a7 9c d8 73 62 6e d6 d8 61 d3 18 6d 4f 20 60 a0 8d 23 d0 7f bf e7 8b 04 c3 e0 98 c8 6c 76 17 e4 e2 48 81 6a e9 ca b6 92 a2 35 57 63 bd b0 44 1d ba 2a 92 d8 fd 11 23 ab 7e 12 f4 26 43 f0 c7 a2 a8 57 37 a9 ea 9c a5 73 9a 5c fb 29 aa 95 25 79 77 33 30 0c 6c a0 47 a1 2c 2c 2d 72 79 b0 83 71 9b f8 92 ec e8 86 34 af a5 be 51 c6 bf 4d bc da 97 a8 ba 87 a5 33 09 72 ca bc 93 a9 6a 32 Data Ascii: slQi)`Inp13Zo7c0qdoX!I1I0koOAK\$T4h{iXASO)&[\|;T2%sbnamO `#lvHj5WcD*#~&CW7s\)%yw30lG,,-ryq4QM3rj2
2024-05-15 22:36:56 UTC	7952	IN	Data Raw: b1 fa 63 05 d2 95 b3 d4 1f a2 c7 e9 57 ff 00 f8 b6 03 d1 9d 66 9f db ff 00 0f 33 30 d1 d4 d0 cb 1f 8a d4 21 fe a9 11 7f 6a 33 cb 47 ff 00 a9 6c dc 91 8f 2f 56 cc 17 2e 1a 4a 49 ee 5c 7e 3d 7e 8a c3 a5 32 9a 8c ef a2 5a 0e a4 f8 7f 9d ff 00 d3 e8 f3 15 93 c5 92 85 8a 13 e1 99 07 d5 1b 80 34 b9 fd a4 0a d6 6f aa 39 21 d2 fa bb 15 e3 cb d4 a9 f2 78 a3 31 a3 78 6a 25 a5 9b cb 34 4e 48 d3 df d0 8c 51 25 d2 f6 0b 4f ab 60 16 1a e4 f0 a7 8c 6a 22 e1 95 ad ab ed ef 8a f8 dd 13 f6 64 6e c4 a0 8a 5b ba df 67 d3 72 df e1 3e f8 8d 6f 68 7b da 98 f7 22 8b fb 05 e9 de ba 95 cc 06 4d 51 33 b5 c4 0c 7f 79 78 04 fe f7 6f 6c 15 a7 9e 35 3d f9 05 cb 19 74 ed c1 d2 17 e6 12 9e 32 29 9a 45 78 99 e9 9a 29 0b 34 44 f2 85 ad ba ef b8 3e bb 63 64 cf 13 4a e1 f2 f6 a7 96 43 22 a4 Data Ascii: cWf30!j3Gl/V.JI\~=~2Z4o9!x1xj%4NHQ%O`j"dn[gr>oh{"MQ3yxol5=t2)Ex)4D>cdJC"
2024-05-15 22:36:56 UTC	8144	IN	Data Raw: 21 e9 7a f9 b3 2a 89 72 bc c2 48 e9 e5 d0 cf a9 54 05 96 db 87 07 f6 40 de f6 e3 ed 82 74 f9 d6 65 45 59 b1 bc 6e c3 b3 3a a9 27 86 2a 89 a7 a7 aa 44 4d 32 22 c8 b7 90 12 6c 5b d7 61 fc 46 09 6c a1 7a 11 09 e4 8e 71 2d 11 9e 28 ff 00 f0 0b 15 b8 26 c2 ce 4e da 79 df db 0b e4 48 d2 f3 e4 d2 2e 88 e4 92 a7 57 87 51 1d 83 2c 80 9f 4b f9 86 e3 7e 71 1d d0 f6 99 05 7d 31 79 cc 14 88 5a 76 23 c4 89 c6 96 57 1d ac 79 f6 b6 22 d7 a0 e9 fa 93 50 c1 57 20 a5 9d 18 7c e4 b2 7c b1 a7 64 0a 24 1d 96 df b5 fc f0 d4 f9 26 98 cf 3c a7 7e 84 c8 7c 69 40 92 b9 bc af 1b ec 5e 56 26 d1 81 fb aa 39 fc 7d 71 64 97 c2 85 8f 0b 94 8a df 54 24 3d 45 49 94 f8 34 8f f3 54 e6 49 6a 51 db 50 5f a0 8b 1b 8d 4b b1 db 9e d8 0f 2c 14 e2 92 41 98 f3 3c 72 eb bd d3 4d 7d 00 e9 f2 40 1e 29 Data Ascii: !zrHT@teEYn:'DM2"l[aFlzq-(&NyH.WQ,K~q}1yZv#Wy"PW \|\|d$&<~\|i@^V&9}qdT$=EI4TIjQP_K,A<rM}@)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49896	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	655	OUT	GET /steam/apps/1672981/ss_02b994c796adfc5fc5984ec658caee4ce34fe69f.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Mon, 23 Aug 2021 13:45:15 GMT ETag: "6123a66b-13d5d" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 81245 Accept-Ranges: bytes Cache-Control: public, max-age=573637 Expires: Wed, 22 May 2024 13:57:33 GMT Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 01 00 09 ff c4 00 52 10 00 02 01 02 04 03 06 03 05 06 04 02 07 05 06 07 01 02 03 04 11 00 05 12 21 06 31 41 07 13 22 51 61 71 14 32 81 08 42 91 a1 b1 Data Ascii: JFIFCCQXR!1A"Qaq2B
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: c5 29 62 64 42 dc 55 e8 73 e4 c8 76 96 33 ef 5c d3 db 2d 52 4d 9b cd c4 19 2c 32 51 c1 53 75 aa 85 48 64 47 27 72 a7 c9 b9 91 d0 df cf 19 a5 82 f5 34 51 5d a6 1e 7b a4 60 82 63 75 c2 a7 65 30 d5 47 4f 13 52 66 a9 ae 61 71 0a 5c f3 f3 f2 c4 8c 7a 05 b5 dc a3 3b 29 8e 77 c6 de 15 9f 80 a2 cc 73 0e 26 f8 28 94 d5 66 12 4c aa 3b b5 2e 59 ef c8 01 cc 9e 56 c6 16 69 74 77 7c ae d3 a7 b6 37 c6 1e 4e 96 01 df c2 fd 27 fb 3c f6 59 98 f0 06 55 51 59 9c 01 15 75 64 6a a2 9e f7 68 d6 fa 8e ae 80 93 6d b7 b5 b1 97 87 8c f8 de e9 a5 e5 dd 97 9e 7d 2a eb 50 75 27 b2 0c 5d d8 cb df c9 e3 6f 6f 7e eb 55 ac cc e9 28 61 96 59 ea 21 89 23 04 b9 67 03 4d bd 31 71 f2 34 77 5c 44 70 c9 23 83 58 d2 49 e1 54 f3 8e d5 f8 6b 28 89 5d ab c5 49 26 c5 29 d7 51 51 6e 66 f6 c5 47 3c 9f Data Ascii: )bdBUsv3\-RM,2QSuHdG'r4Q]{`cue0GORfaq\z;)ws&(fL;.YVitw\|7N'<YUQYudjhm}*Pu']oo~U(aY!#gM1q4w\Dp#XITk(]I&)QQnfG<
2024-05-15 22:36:56 UTC	2003	IN	Data Raw: 50 a5 8a 89 d9 5a 78 1b ed 07 c5 bd 9c 47 fb 2e 59 62 cf b2 20 bd db e5 79 a0 32 44 63 fe 15 26 e5 47 a6 eb fe 5c 68 45 92 f8 fe 1e 42 e1 fa 9f d1 cc 5c d3 ea b3 fa 72 7f d9 bb 6f ee 3f f0 7d d5 c2 2e 16 ec df b5 ea c8 2b 38 3f 36 93 b3 6e 35 6f de 47 95 d4 3d a0 67 ff 00 e5 38 23 49 3f e4 20 ff 00 93 17 c3 62 97 76 1d 2e 5c 84 d9 1d 4f a5 34 c7 d4 23 13 c3 dd c3 9f bf fc fe 28 9c f7 8d 78 b3 83 a8 c7 0d 76 d1 c2 29 c5 99 05 f4 45 9a 69 53 28 ff 00 32 4c 2c ac de fa 1f cc e0 ba 9e d1 a6 61 61 50 8b 07 1b 25 df 59 e8 53 fa 6f ee de df 78 e4 7e 61 64 dd ad f0 af 03 e5 19 3d 26 7b c0 fc 5a 99 85 3d 4c dd cb 64 b5 a8 c2 b2 9f 6b 92 4d 87 84 6c 3c 40 73 16 2d 81 bc 30 0b 63 be e5 d1 f4 bc ce a1 2c ae c7 cf 83 49 02 f5 0f b2 7f 9e df 80 59 10 ad 98 d4 8b b2 a0 Data Ascii: PZxG.Yb y2Dc&G\hEB\ro?}.+8?6n5oG=g8#I? bv.\O4#(xv)EiS(2L,aaP%YSox~ad=&{Z=LdkMl<@s-0c,IY
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: a6 66 ef 84 a6 a1 e2 bc a8 74 95 d0 1b f8 77 b9 16 e6 01 e9 6c 67 88 b4 bb 50 3f b2 eb 58 f0 f0 a1 e9 eb a4 82 9e a2 38 64 0a b3 a1 8e 40 40 3a d7 50 6e 64 5c 6e ab be c7 6f 7c 48 b0 3a 8f 85 30 6b 95 1d 22 eb 65 0b 11 47 bd 89 b7 e9 89 fb 27 4f 68 0a 15 35 6a 60 45 d8 1b 81 fd ce 20 e3 d9 15 9e 54 e6 5f 96 17 2b fb ce 7e 98 03 c6 ca e4 4e 17 c2 d9 bb 1e e1 a6 cd 73 78 29 1c ab 28 61 b9 1d 31 c7 f5 5c b7 e3 c6 69 75 58 d1 b0 30 c8 57 76 af 62 f9 06 5b d9 e4 b2 56 53 a8 ad 78 43 2c ac 0d a3 27 70 36 bf 3e 44 9f cb 19 33 60 32 0e 94 73 f2 de 43 c8 04 1d e8 5f 03 6b e7 df bf 85 c4 0e bf 95 2f 51 11 c3 f6 01 aa f2 16 3d d9 6f 66 bc 35 9c f1 95 55 36 68 03 d2 8d 43 42 90 a4 13 b0 27 d0 73 3f 4e 98 c7 c3 ce 87 22 68 63 99 c4 35 db 5f 14 7b 5f b2 eb fa be 74 f8 Data Ascii: ftwlgP?X8d@@:Pnd\no\|H:0k"eG'Oh5j`E T_+~Nsx)(a1\iuX0Wvb[VSxC,'p6>D3`2sC_k/Q=of5U6hCB's?N"hc5_{_t
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 9c 36 26 c9 aa 05 4c a4 b0 6d ca 92 37 07 cf 7c 67 cf 8a 1e d3 a9 6d 62 e7 16 38 06 ad 4b 2e ad 8e b2 24 9a 24 2d 11 eb e5 8e 52 56 16 9d 24 6c ba c8 de 1e 2d a5 6b 3d 9f f6 99 98 f0 bd 32 d3 d3 34 31 a1 24 b2 b4 60 eb bf 2d 4d cc db a0 be d8 a3 a6 58 d9 a6 33 42 ee bf 73 df fb 2c 6e a1 d2 b1 fa 83 b5 4d 77 f3 e3 e4 38 df ba e8 be 0a e2 b8 f8 a7 26 8a a0 07 ef 90 68 94 ba 85 05 87 32 2d b5 b1 a7 8d 10 9a 30 5c 48 3b f6 1b d7 8a fc f8 d9 79 5f 52 c0 76 04 e6 33 c7 23 e4 ac 9c f1 5d 63 af 08 de f7 fa 61 a9 25 f6 22 9d 44 67 bc 35 47 c4 22 35 ac 33 69 40 40 58 e4 2a 0d fc fc f1 52 6c 66 4e 41 7d ec b4 31 73 65 c3 24 c5 5b f9 16 a1 a1 ec bf 23 a6 9d 26 89 6a 56 44 60 ca dd ff 00 22 37 07 96 2b 7d 46 2e 45 fe 2b 49 fd 73 31 ed 2c 75 51 f6 46 f1 27 04 65 5c 57 Data Ascii: 6&Lm7\|gmb8K.$$-RV$l-k=241$`-MX3Bs,nMw8&h2-0\H;y_Rv3#]ca%"Dg5G"53i@@X*RlfNA}1se$[#&jVD`"7+}F.E+Is1,uQF'e\W
2024-05-15 22:36:56 UTC	7952	IN	Data Raw: ca 22 91 bb b6 a9 00 ee 03 72 04 0d cf 52 3d b1 4d cd 24 90 ae b4 84 e6 63 49 45 49 97 66 34 59 1c 94 95 34 eb 12 cb 57 5f 57 a3 5c 6d 7f 92 06 36 2d b0 27 61 bd cf 3b 03 81 38 50 a2 8e 28 70 ab 99 b6 67 40 0f ff 00 ca e3 a8 a7 a5 64 44 76 ac 90 3c d2 b0 fb e4 81 e1 be fb 0d bf 52 ac 0d d4 ef 6a 51 b4 b5 16 9a 42 0e ea 37 07 7f a6 18 9b 2a 2a 43 bc d1 4c 58 25 91 96 fa 4e cc a7 cb fd 30 c9 92 29 a5 b4 69 65 62 3f 97 0c 99 10 b5 8b 1c f0 99 15 82 87 de e0 81 87 b4 94 ef ed ea 62 4f ef 05 ad b0 20 9c 4e c2 8d 28 aa ea e8 ea ab b5 44 0b 00 b6 d8 1e 78 6b dd 48 24 19 58 03 74 73 ec b8 49 22 32 cc ca 18 60 75 66 28 fa 8f 9f e9 84 08 1c a7 21 3d 57 9a d3 b5 33 80 d7 f0 d8 58 6f 7c 39 22 92 00 a0 21 94 88 d7 c0 c0 5b f8 71 1b 52 5f 35 48 8e 78 99 d5 82 86 de e0 Data Ascii: "rR=M$cIEIf4Y4W_W\m6-'a;8P(pg@dDv<RjQB7**CLX%N0)ieb?bO N(DxkH$XtsI"2`uf(!=W3Xo\|9"![qR_5Hx
2024-05-15 22:36:56 UTC	6096	IN	Data Raw: 00 75 b7 a6 fc b1 30 db d9 46 e9 45 48 8f 43 30 36 16 d5 a8 82 2f fe c7 ae 21 c2 9f 21 2a 49 4d 63 f7 71 78 63 17 0a 0e e7 f1 eb fa 61 f9 e1 2e 37 29 2f a5 61 54 04 69 50 41 73 b8 1e de 67 d7 0c 92 4c 54 e8 3c 2c fe cc a6 e0 e1 a9 22 bd a9 81 23 8f 52 b3 5e e2 db e1 14 c0 a7 63 9e 5d ad 33 0b 72 b6 1e d2 4b 50 6a 6a 62 57 91 cd ef b1 36 c2 1b 9d d2 e1 49 7e cd 8e db bb 2f 3d af 82 69 0a 3a 90 32 c5 f0 b5 80 45 23 8f 0e fb df ae 20 76 3b 29 8d d3 9d f4 df fc 67 37 e6 2f 86 b2 9e 82 4d 1d 30 9d a5 66 76 24 1f 3c 20 12 26 93 b3 51 44 a0 fe f1 8d bf cd 84 40 4e 0a 06 9a 59 10 15 49 58 0b 91 88 6e a6 8d d7 34 d1 9d 53 b7 76 3e 66 27 f2 c3 ef dd 2d 91 54 30 c0 45 a4 98 e8 3f 2c a8 de 13 e4 0f 96 10 01 31 27 b2 46 65 c3 90 c3 03 4c 93 39 6b de d7 e5 88 96 8a 53 Data Ascii: u0FEHC06/!!*IMcqxca.7)/aTiPAsgLT<,"#R^c]3rKPjjbW6I~/=i:2E# v;)g7/M0fv$< &QD@NYIXn4Sv>f'-T0E?,1'FeL9kS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49897	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	392	OUT	GET /public/images/v6/home/cluster_bg.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	271	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 134600 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-20dc8" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 21 00 00 01 c5 08 06 00 00 00 cc 9f e3 cd 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR!pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 99 54 cf 37 e0 3b ad a4 f6 f5 4e 7f 23 d5 c2 5a dd bb e3 c2 f7 ae ac cb 33 1a 0a 4e 7f e1 b3 fc e1 47 a8 71 ad 13 cb 15 ff f8 57 5c 4f 26 c4 73 7d 07 50 ad 4a 28 54 64 df 19 dc f6 43 c7 62 d5 08 25 5d 45 3e d3 00 f7 c5 fb a6 42 70 ab a2 88 2d f8 ce f4 20 55 e5 3d c3 80 3e 96 d6 ed b2 3a 86 78 57 07 fa ce 8e a9 02 82 2a d2 3d 04 f9 32 c2 7d ef 22 04 ac ac a3 12 cc 63 99 02 ae 23 83 03 00 23 04 04 69 26 12 fb 3d 57 df 0d 9c ef c6 81 02 48 0f 32 8f 95 78 a1 d2 6d a8 d6 47 07 17 d7 1c d3 bf 8f 02 ec 26 64 89 7a df f9 3e d5 98 57 a5 00 8c bc 63 a4 9a 23 bf 58 66 41 13 80 2e 21 b7 14 29 96 46 23 47 40 9c b9 73 98 45 a3 f7 05 1f 80 ed 73 b6 56 8e f7 df c0 33 83 98 46 c2 0e 9e 65 83 80 dc 71 67 76 95 99 32 c2 75 e3 ca 2f 92 b1 5c b1 17 6c 6d 55 b6 63 37 67 ee 99 Data Ascii: T7;N#Z3NGqW\O&s}PJ(TdCb%]E>Bp- U=>:xW*=2}"c##i&=WH2xmG&dz>Wc#XfA.!)F#G@sEsV3Feqgv2u/\lmUc7g
2024-05-15 22:36:56 UTC	2351	IN	Data Raw: 49 df 43 ed 85 c4 2f 1d 26 08 d3 cc 1e 73 99 11 ec 1c 50 91 65 d7 3e b2 ca 30 4a b2 4a 92 da fb aa 0c 1a c8 cb 44 18 d9 08 e8 2c 96 61 88 ca 04 e0 0e b2 1f 95 8f c7 88 71 60 ad 7c d1 e9 c4 9d 29 65 58 f9 bc 13 4c 76 98 ee 0a a9 73 57 c7 8f 33 38 f2 b7 e1 eb 0f 63 f7 64 42 68 d6 2c 11 26 54 1b 5c 45 6c 5c aa 7f ca 64 3a 86 d0 31 c2 57 0c a2 8b 16 9c 79 6e 20 cb d4 70 75 d7 6a 6e 87 38 40 11 1a e3 86 f5 b4 36 97 ad a1 9c a0 dd bc cf 1c c5 6f 0b f7 6f 05 b8 a9 c8 b3 2e 3e 5f 39 63 03 3a 0d b1 7a 97 b9 cd e1 26 d6 db 9c 19 70 8c d0 6f c5 78 b0 da 72 56 7a c0 40 80 52 9b 47 e0 c8 2a e2 88 d9 97 19 b8 0c 64 1a 0e ae 6d e1 10 7b 2e dd cb 2c 95 bc 72 c4 ab 32 87 3e 91 0f db bf ff be 4d 73 da c9 9a 67 e9 b5 6e 2f 3a 31 c3 86 8f d9 19 8c 9c 3d fe 4e 15 c5 ed 58 ab Data Ascii: IC/&sPe>0JJD,aq`\|)eXLvsW38cdBh,&T\El\d:1Wyn pujn8@6oo.>_9c:z&poxrVz@RG*dm{.,r2>Msgn/:1=NX
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 4f 6b 91 89 70 82 80 73 06 34 86 71 7c 54 e6 86 12 71 9b bb 8a 30 9b c1 34 20 e6 71 ee d0 6d 10 d5 7e 4e 40 e6 26 e6 c9 a9 f0 b3 3d 76 74 dc 58 db cb 26 d6 1a 84 93 55 ad b5 9d ec 29 06 66 5a 40 52 54 e2 90 ef 64 8d b6 00 ac 56 a0 02 82 88 af 6a ee 37 33 16 55 a9 46 17 c4 52 27 c0 b1 c1 8b 00 aa 35 55 9d 27 4c 78 4e 75 72 18 86 44 51 c2 8e 40 9e a1 56 95 8c 25 24 20 cb 36 83 38 8b 94 de 08 d3 d3 c0 02 a1 34 db eb 11 10 4e 2c cb a7 fa fe 9d ec b9 21 48 f8 ca 86 6e 21 b1 db 05 b1 ea ce bb 15 1f ca d5 d1 9f 6d a1 ad 08 b0 06 ad 4d e2 48 8c aa c3 53 33 04 b5 f2 2d 19 51 35 cf e3 2e c0 7b 33 e3 c4 ca 15 93 e0 41 45 6c 2b 3f 0e f8 67 57 9f f9 5e 3b d6 32 49 d8 b3 38 81 f5 61 ce b7 61 fc 56 46 72 28 9f 33 15 1b bd 02 b8 1b ce 95 72 af 92 07 77 64 2d 24 59 ca 67 Data Ascii: Okps4q\|Tq04 qm~N@&=vtX&U)fZ@RTdVj73UFR'5U'LxNurDQ@V%$ 684N,!Hn!mMHS3-Q5.{3AEl+?gW^;2I8aaVFr(3rwd-$Yg
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 96 bb 01 3b 23 dc 90 b3 f1 d9 51 47 34 99 d3 9a a6 d0 56 ef df cd 3b ce 46 ed 48 24 6c c6 d1 52 91 9b b9 43 48 87 17 c7 e9 e0 6d 1d 2b 70 f7 8e 8f 99 07 5b 71 10 61 62 fb d5 1c aa b6 83 2e 95 4c 91 26 1b 3e b6 99 64 e4 8f 12 56 04 ea 76 80 ce 39 9f 53 e0 95 9d 4a 7a d5 77 d4 19 37 33 21 d1 04 61 02 f0 f4 f7 81 75 01 2f e6 30 b2 34 5c 06 40 98 93 da a0 33 15 2a 00 a6 6a 9e 9b 88 5a ed c5 dc 77 01 aa 12 62 c3 09 1e 77 62 3b b7 c0 29 ad 3a 87 b0 0c 10 37 8f 09 c9 d1 42 5b 5d 9d 71 15 11 38 db 41 a6 33 03 33 ce 83 38 6f cc 1e cf fb 69 45 74 8c 11 be 8e 80 73 8e 68 2b 48 65 27 a4 b9 43 8b 98 0d f8 0e 07 cc 7f 62 3a 5b 69 34 ab 19 50 03 e4 69 bd aa 4b 98 2b c9 70 e3 07 70 4d a1 1e ac 8d 39 eb 40 e9 30 39 90 cc 08 a2 66 08 0b 17 b0 6b 04 b4 1d 9f 75 07 17 8f 4d Data Ascii: ;#QG4V;FH$lRCHm+p[qab.L&>dVv9SJzw73!au/04\@3*jZwbwb;):7B[]q8A338oiEtsh+He'Cb:[i4PiK+ppM9@09fkuM
2024-05-15 22:36:56 UTC	7952	IN	Data Raw: fa 8e 66 02 29 8a 58 65 62 d7 8e b0 4d fd d6 8d 90 05 c3 90 51 6e 0d 0c 03 b0 66 51 e3 01 9e 01 b5 43 67 8d b1 a0 cd 4e 08 cd 8a d4 db e0 3b d0 a8 92 23 a6 f1 d6 05 58 ae fc 02 b5 96 50 f8 0e b3 3f ab f6 50 35 17 1b b8 de 19 0c e1 51 f9 e9 55 80 a3 4f eb 0b 01 d6 00 74 c7 96 6a 7e 76 70 f1 f8 ea 6c da 45 20 ab 09 bf b6 19 4c 56 8d d5 8e 3a 13 6a 2e 61 4e 4a 21 10 62 be c4 8e 9d 21 3a ae e2 ff 84 38 fe 40 42 7c 05 e1 50 2d 86 11 1c 2e 57 06 03 c8 fa 03 37 e3 30 26 13 e9 04 6f 18 f8 66 aa ca 67 14 e0 01 5e 72 b0 87 0e 5f ea d4 27 24 4a f5 1c 0c 2c 55 75 5c 1d 1f d3 c3 d4 f3 a4 59 03 10 0e bc 2a c9 51 6c 31 0e 87 00 82 b9 54 80 2b 11 45 7c 2b 98 ea 44 c4 ae 72 a8 54 fd f8 71 ed ec e4 7e fb 44 d8 00 6b 51 68 16 ad a9 a2 12 1b 74 f7 11 55 6a c1 3e b3 09 a7 66 Data Ascii: f)XebMQnfQCgN;#XP?P5QUOtj~vplE LV:j.aNJ!b!:8@B\|P-.W70&ofg^r_'$J,Uu\Y*Ql1T+E\|+DrTq~DkQhtUj>f
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 0c d1 a0 f4 33 12 6b f1 44 fc 9a 91 0c 10 eb e8 84 2e 2b 9f 9b 04 40 0b fb d1 69 4e 3c f0 2c 8a ff 08 63 8c d4 f4 60 06 ef 1a 17 de 4b fa b9 1f da 47 b0 08 cd e0 41 92 cf ce 0b 0f 9a d4 91 b9 4e 74 1b 9a 3b 81 54 1d 38 42 a6 96 31 e0 95 a0 0b 13 ec 9a 06 54 b8 85 0b 45 90 96 32 6a 00 17 b4 19 a8 eb f6 55 1a 72 27 4c 71 a5 12 ab bc a2 5d 9a 2a e0 4f 7d 5d 1d ef 99 e1 6f f0 9e ef c0 b3 6e 41 83 b7 e4 5b 01 74 75 aa 70 fe 5c 55 1f c9 7e cf de c7 59 b1 f9 2c da a9 ec dc 56 02 a1 2a bd 51 c0 9d a5 94 2a 81 2e 96 49 70 90 f9 e3 ca 28 ba d9 7c 53 c0 ce 84 32 d3 f2 90 2e 08 8f 4f 27 93 1d 61 21 95 a1 92 04 ce ec 64 aa b2 2f eb d0 35 da ce f3 bb c3 8b 6a ae 3f eb 86 4c ac 00 7c 72 da 02 43 02 41 dc 57 02 14 01 5f 22 a6 52 88 7b 48 54 a4 40 0d c8 2c 3c 13 12 a1 85 Data Ascii: 3kD.+@iN<,c`KGANt;T8B1TE2jUr'Lq]O}]onA[tup\U~Y,VQ*.Ip(\|S2.O'a!d/5j?L\|rCAW_"R{HT@,<
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: a9 ca ec 48 52 cc 93 d2 15 c6 c0 ab 92 10 36 a7 fb 42 0c a4 da 2f 80 cf b2 00 74 9a 5e 9a 71 90 64 3c 29 60 31 c3 fb 9e 66 33 52 eb e2 ce a9 ad 0a 22 5a 40 6c bc 2a ac 94 82 84 a4 af 3b 32 91 62 05 3a fa 46 40 91 80 d2 e4 e7 a9 a5 dd 15 e0 7e 85 5c 79 b5 24 c2 81 e5 19 be ab 79 81 5c bc 4a 94 7c 87 9e c4 bb fa f3 0a 31 03 03 60 af 00 51 5c 08 6c 77 2c d4 53 81 d2 57 48 93 9d 8c 1b 47 36 a4 44 45 72 50 d5 c2 b8 d3 95 d3 aa 12 90 34 f3 46 89 69 ab 3d 73 6c ac 51 2a b6 4f b4 8a d8 9a ec b4 76 9c 7e 40 13 fb 31 3b 04 9b 04 a0 56 cf c0 62 b1 41 d6 cc 61 00 bc ea a3 8a d4 6a 4f c8 b2 7e 07 95 ab 06 90 b9 37 1c e0 36 f2 8d 8c 69 a5 c7 b5 6b f3 fb c0 73 86 b6 fb 6c 47 26 44 cb 48 94 75 dc 0e 71 60 b0 63 7b 3c 0d 01 98 5a 79 bb 35 ab bc af f9 4f b6 c3 7f f3 e4 e3 Data Ascii: HR6B/t^qd<)`1f3R"Z@l;2b:F@~\y$y\J\|1`Q\lw,SWHG6DErP4Fi=slQOv~@1;VbAajO~76ikslG&DHuq`c{<Zy5O
2024-05-15 22:36:56 UTC	7952	IN	Data Raw: 28 aa 06 66 fb f7 36 26 30 5b 0f 83 c8 77 30 c7 55 1a 9c b3 21 71 ec cb 0c 02 e3 4a 5d bd fa d9 10 ac 90 63 4e 3b bc 1d ce 84 57 ac 45 01 9c 59 dd 14 c8 f3 39 06 b6 91 81 dd c0 35 19 ba 58 38 7b f1 b9 89 67 4d 88 2a 05 8a 0d f2 03 da 8a 6f 16 fd ee 1c 1a d8 33 1d f0 82 8c 10 7d ce 18 f8 f3 f3 ae fd 77 14 fd ea 80 79 65 a9 e4 44 9c 14 20 3e 8f bf aa 6e ae 22 22 d9 18 6a 05 eb 5a b1 d3 00 b7 45 75 4c 6f f2 fb c4 1f d9 b5 f4 74 43 05 48 57 ea 7b df 71 62 dc c2 3e be d2 d2 8d c9 05 ab 5f 1d ac 37 e8 72 aa 57 ca 62 fe 54 00 b6 33 ff be 9a 44 bb db dd 7e 95 b9 f1 2b 6a 8f 7c c7 ba 7a b5 24 f1 1d d9 25 bb d7 d8 55 f4 df b9 4f a5 a1 95 5c bf da 7b 54 39 36 08 c8 4f 05 c1 dd 98 65 0e 77 9d c4 d2 10 04 81 c2 30 ab cd e7 40 ad e3 b0 c6 28 1d 75 49 38 eb 57 e0 39 13 Data Ascii: (f6&0[w0U!qJ]cN;WEY95X8{gM*o3}wyeD >n""jZEuLotCHW{qb>_7rWbT3D~+j\|z$%UO\{T96Oew0@(uI8W9
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 9b d9 0c 91 a1 6a fe 41 5e 80 02 7c 6b 9f 38 eb c7 4a 84 66 12 90 5d 3d c3 27 63 f9 41 58 c4 f5 3e 8f d3 e7 54 ff 7f 92 23 07 ea d3 75 97 3e 77 9e 54 55 c9 c6 f9 f7 9d 30 9c 8a e1 45 30 c6 dc e7 99 b7 ee 2a a4 d9 a1 33 22 76 36 73 27 8a 79 75 43 64 19 49 28 00 c4 0e 33 9f 10 82 80 4f 65 53 ee 32 af 04 4d ef 0c 14 dd 5a f1 ab 00 ac fb a4 f9 ef 01 05 c9 df 25 02 5a d5 1a c9 2c b0 77 ac 31 ef 76 b7 3f 65 be 29 bd a6 bf ad 1f be 92 e4 d8 d5 92 da 79 77 49 ec f2 ea 33 ee 64 90 3b bd ae 44 87 ae fa db 0a 78 ae 99 dc 4d 7c ae 93 18 be 1b ec c7 fa b5 13 d0 db c9 33 38 a7 0e 05 a8 15 16 5d 31 68 f5 d9 f4 c0 1b a4 1f aa 4c 02 47 c4 4f ec 59 bd b2 f1 91 62 90 11 60 9e 24 33 2c 15 f8 fc 8f 40 f9 28 38 88 0e ed 05 ea 98 2a c5 28 b2 4e 99 f0 a5 0c c9 42 b5 6a 25 30 cb Data Ascii: jA^\|k8Jf]='cAX>T#u>wTU0E03"v6s'yuCdI(3OeS2MZ%Z,w1v?e)ywI3d;DxM\|38]1hLGOYb`$3,@(8(NBj%0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49899	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	693	OUT	GET /public/images/v6/home/background_maincap_2.jpg HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	262	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 14577 Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: "649bb1f9-38f1" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	14577	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 5a 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyZ+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49900	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	621	OUT	GET /public/images/v6/logo_steam_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2843 Last-Modified: Thu, 18 Jun 2020 23:12:51 GMT ETag: "5eebf4f3-b1b" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	2843	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 cc 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR\:;)pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49898	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	663	OUT	GET /steam/spotlights/f34a3a6eedf174a39998d1f2/spotlight_image_english.jpg?t=1715274766 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 98215 Last-Modified: Tue, 07 May 2024 22:51:36 GMT ETag: "663ab078-17fa7" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16153	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: fe 2a e5 bd b8 a3 09 eb ce 4a b2 7b 1c bf e2 4d 44 dc 4c ff 00 ad ce f5 3f da 4c 2e 79 88 7f b1 2b 39 93 92 cf 0f e3 23 3d f2 62 7f e5 f9 81 ec 4a e0 bb 9f 92 04 5d a7 c3 25 c3 db 3e cf 5a ab 36 2d bf b6 5d 95 a5 bd aa dc 96 86 87 52 d5 51 dc fd 06 c5 58 f7 52 a0 2f 36 7c 7f 2a d2 a0 0f 0a 68 22 c4 21 63 60 cd 45 bc 4d 79 84 a1 a6 3e e5 82 1e db 1d 66 5c c9 5a 9c 8a c9 69 2a 0b 15 ec 6b 86 0b 2f e5 51 e6 a7 37 5a 3e 7f 4e a9 26 43 5f 32 64 f4 b5 eb 65 66 b4 8c b2 94 8b a5 8a e9 ab d9 53 11 67 7c 63 8b 21 75 5e bd 72 c2 99 ad e6 d9 db eb ec f3 05 6b 0e 56 72 4c d4 bf c6 97 c7 bb 13 17 45 a2 57 ed d6 eb 75 e3 0d 58 a2 19 4f 46 20 30 2f 6d 95 9a 9e 67 57 1f 2b 8c e0 0b 12 fb 21 d1 72 7e 2c f6 25 58 d9 ca 51 32 85 45 8d cf 61 bd 72 50 6f b0 bb c5 ad 18 2e e9 Data Ascii: J{MDL?L.y+9#=bJ]%>Z6-]RQXR/6\|h"!c`EMy>f\Zi*k/Q7Z>N&C_2defSg\|c!u^rkVrLEWuXOF 0/mgW+!r~,%XQ2EarPo.
2024-05-15 22:36:56 UTC	2574	IN	Data Raw: 52 d2 b4 ec e6 3b 3e aa fc 94 18 89 6b 90 35 3f 5f d8 01 ef ee c7 51 92 56 db 17 92 d5 3d 85 48 c0 79 3c 6d 0c a6 44 23 41 bc 96 15 19 e8 ac bc 8d 56 a7 8d 72 c5 d4 ee 29 af ec c5 64 7d c2 ba 1d 31 e0 c9 8f 03 a7 bf 87 b7 df 82 ac 08 38 3b c7 0f a7 05 8e 55 c4 93 34 f2 24 8a 94 50 19 b6 12 5d 6b 54 f8 6b b4 1f 15 01 a6 55 d0 60 46 23 08 29 43 4d c7 77 bf 4e d1 98 c8 60 7f 14 65 8a 09 2a 7b 2b 82 b5 f0 9c b1 d4 66 20 82 14 22 f2 df 21 d7 fb a8 18 8e da 60 e1 84 7a 0a 54 f7 fc f4 c4 91 25 69 95 0a eb e1 cf dd 5c ea 31 1b 6d 05 6b 40 2b c6 85 b3 a7 0c b3 e7 a5 45 6a 36 9a 9a 69 9f cf da 70 55 eb a6 58 23 ee 8e 23 02 87 2d 3d bf 3e 18 8e 44 62 1c 1d 46 a0 8d 08 3c 0e 84 76 e1 6d 65 ea b2 18 06 99 0d c2 9a 1d c4 13 51 cc 50 f6 e1 9d aa 64 3f 78 92 4f bc 92 7d Data Ascii: R;>k5?_QV=Hy<mD#AVr)d}18;U4$P]kTkU`F#)CMwN`e*{+f "!`zT%i\1mk@+Ej6ipUX##-=>DbF<vmeQPd?xO}
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 52 bb c4 33 f9 2e fe 54 94 07 23 e1 2c ac a1 8b 02 3e 5a 60 53 19 ff 00 b1 52 72 f9 35 c1 18 a8 43 ec c5 6b 83 97 c8 7a 7f 45 e9 f2 dc dd 88 de 42 b1 a9 62 23 8d 4b 3b 90 2a 76 aa 82 49 02 bc aa 48 18 37 37 e7 cb 81 58 00 bc 58 9a 8c a9 9f 03 4e 74 27 25 56 38 95 af 04 62 de 3a 55 bc cd 72 ad 10 2a 9a d0 72 04 64 68 69 af 9f 66 77 46 54 32 e6 08 20 e6 28 45 41 f7 fb b0 63 95 68 7b 71 07 a8 ba 35 ba a5 85 d3 95 92 35 1e 14 96 85 81 50 34 59 00 62 40 c8 30 34 c9 80 c1 22 2f 70 c5 4c 47 dd f3 18 03 4f 7e 2c 7a 4f 4f ab 5e dc ca b1 a0 cf 36 72 00 ad 01 c8 6a 4d 32 18 8b a5 58 46 ad 7c 40 6b 89 c8 fe 24 d2 91 99 63 9e c8 d6 bb 62 8c 64 88 2a d5 91 9d 89 da db b9 93 af f5 60 9c 3c 6e a1 91 90 82 08 04 10 75 04 1c 88 23 22 08 a1 15 04 53 03 d4 fe 9a 87 cb e9 52 Data Ascii: R3.T#,>Z`SRr5CkzEBb#K;vIH77XXNt'%V8b:UrrdhifwFT2 (EAch{q55P4Yb@04"/pLGO~,zOO^6rjM2XF\|@k$cbd*`<nu#"SR
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 5c b3 15 b7 92 6a db c3 d2 00 d6 35 e7 69 e4 4a 2a c0 8b 29 51 b2 e3 f2 1d cd 1e 59 53 07 00 ce 0b 94 dd 72 85 ff 00 00 5a cc e1 7e 6a cb 6f ec 0b 66 78 61 4c a9 e9 02 de 9a 1e 31 05 b2 ad 49 1b 1b c8 64 9d e7 69 be a0 c9 02 04 71 07 3e e5 f8 dc 9d 16 63 70 bb 49 76 99 4d 55 95 fd dd b1 a9 8f 5b e9 e2 4f c8 2c 79 12 4b d2 ce c4 d0 cf 28 d0 e4 85 81 7c e3 95 e5 3b 64 2b 75 33 ea d3 85 e0 05 d7 52 b3 e3 93 38 c2 69 a9 df 97 d1 e7 74 50 67 7d 43 32 a0 28 b2 88 39 14 ce f6 41 5d 00 cd 0c f2 a1 24 86 59 46 6e ea 39 a8 44 ca bd cb e3 5c 19 90 f0 b6 5b 83 f2 86 57 8b e6 ef ae a7 9f 6f c6 b2 ae 13 30 7c 6b 3c 42 56 69 16 ca 75 6e 3b 99 e3 8e b9 8e d8 f5 93 84 39 73 ab 54 52 58 f7 a3 98 f3 d6 e7 51 68 6d 6f a9 45 c5 bc 89 47 9f 55 e3 e0 47 d8 cc c6 66 32 86 40 9a Data Ascii: \j5iJ*)QYSrZ~jofxaL1Idiq>cpIvMU[O,yK(\|;d+u3R8itPg}C2(9A]$YFn9D\[Wo0\|k<BViun;9sTRXQhmoEGUGf2@
2024-05-15 22:36:56 UTC	7952	IN	Data Raw: 32 65 34 3b 8a f6 65 63 e3 5f 55 4f 8c 63 97 98 c6 45 4d 68 27 81 87 ad a9 90 7f a7 1e 6a ca 1b 86 95 37 cc 77 31 48 ac ca fb f8 0d 21 ea f2 e8 f9 06 29 94 59 e3 35 50 2b a3 54 a5 25 8e 71 44 05 31 5b 18 44 ee 30 5e 99 83 6f 71 a0 2b f7 b5 72 6a dc 86 e2 46 16 98 3e 41 8f 8b 2e 68 eb c9 36 e8 50 6d 32 fa bc 36 d1 c9 5c 24 11 34 c6 a6 4f df 25 e5 30 86 dd cc 16 aa f7 b5 3a cb 26 d7 51 e1 19 55 07 12 f1 af 23 d2 f2 49 6e 02 59 b9 6d 8d 83 b9 1a cf 1a a2 2e 3f 8c 63 71 ec 6c eb 09 0e 87 2b 89 94 59 c8 92 f2 55 bd c4 52 4d 9c d5 40 05 22 a0 c8 87 1b 9c d6 29 91 ed 22 11 8d 5d 1c f5 23 75 6b 9d a3 57 55 fb 7a e4 1e 42 ca f0 db fc d7 0e 6d 7c 9c 3b 16 c3 6a 32 dc a7 07 ff 00 11 2d e1 3e 3c fc a1 b3 27 e0 35 19 07 23 64 58 76 32 d7 44 1c ca fa 38 44 7c fb 22 08 Data Ascii: 2e4;ec_UOcEMh'j7w1H!)Y5P+T%qD1[D0^oq+rjF>A.h6Pm26\$4O%0:&QU#InYm.?cql+YURM@")"]#ukWUzBm\|;j2-><'5#dXv2D8D\|"
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 66 59 49 18 4a 58 d0 63 b5 d2 e4 a0 97 62 35 15 8e 76 31 c3 99 15 4c f9 5c 5d 76 46 3a f2 13 b2 15 85 91 4b b3 96 60 3e b2 d0 a0 ac 95 4b 59 59 06 aa 63 1b 2e 1d 79 4b 2c c4 22 ed 99 25 c0 21 e1 93 30 64 2a 29 33 78 c7 16 bd bd a4 c6 b2 9b bb 29 15 38 b6 55 55 4b 64 4a da fb f0 fd 6a a6 2d ce 51 51 92 38 e3 da 20 56 93 57 15 a2 3a 29 1a d0 36 f7 23 bb 65 6d be 79 8a e3 17 37 b8 b9 44 2b 69 38 c4 6c fe 0d 41 89 8a 0e 2d 59 e5 05 b6 10 62 ce 18 92 3b 9d 0d 80 85 08 cc 1b 62 2e e6 f6 c5 98 cf 7e 44 41 72 84 59 13 b2 eb a2 db 76 e9 2f 2d 31 c1 46 81 36 91 60 43 20 64 3a 5c b8 52 ab 1e 72 95 1a 2e d9 49 b7 73 9e fd 04 00 b3 b8 f2 a3 5a 8c 0b 5a 8c d1 ad 46 00 21 63 51 a8 88 d4 44 46 a3 7c 11 a9 a2 78 75 94 da 63 11 c6 96 f5 65 a3 83 5a f9 f0 c9 e9 ae f3 fb bc Data Ascii: fYIJXcb5v1L\]vF:K`>KYYc.yK,"%!0d*)3x)8UUKdJj-QQ8 VW:)6#emy7D+i8lA-Yb;b.~DArYv/-1F6`C d:\Rr.IsZZF!cQDF\|xuceZ
2024-05-15 22:36:56 UTC	6000	IN	Data Raw: 69 c3 70 df 73 bc 52 b1 68 ee f9 00 74 4d ca 79 73 3c e5 2f 6b b9 6e 33 97 ca b5 79 83 73 50 cc 2a 73 69 98 c1 b8 72 a7 3c 8e 10 fd d9 fe ed 4c a2 07 b9 ae 44 cf 32 c0 72 fe 25 c9 1e e4 ad 2d b8 cb 32 e3 ee 05 e3 3f 72 dc 3b 67 c7 5c 6f 2a c1 bc 99 cf 78 bf 2c e5 09 0a c7 08 ba ec d4 63 94 36 41 8e 5e d2 15 f1 84 77 9c 78 97 bb 7a 9f 78 99 0f 32 4d c5 71 2c ef 15 66 0d 63 c2 35 b8 3c 69 ac ce 31 f9 14 24 9a ec 82 37 28 e5 25 8e ea e6 9f ba 83 48 6f 42 aa 6d 57 37 cf ae 26 f7 0d 2f 8e 23 f1 59 9f ee db db 07 19 fe 13 8d 95 93 32 1a 33 89 39 33 0c c0 47 73 f5 a2 e3 b8 c3 95 f7 cc a3 49 4b 1f d2 e9 19 4b db 42 17 6e f7 7e ee 7d 34 fe e8 fb 9d f3 ff 00 ef 9e 0b eb 6f 87 fb 1f ff 00 af ba f5 c5 f6 6e a1 c5 f2 7a 3c 87 2e c6 b0 ac cb 1e ca 30 6e 2d ce c1 71 84 Data Ascii: ipsRhtMys</kn3ysPsir<LD2r%-2?r;g\ox,c6A^wxzx2Mq,fc5<i1$7(%HoBmW7&/#Y2393GsIKKBn~}4onz<.0n-q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49901	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	621	OUT	GET /public/images/footerLogo_valve_new.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2584 Last-Modified: Fri, 21 Feb 2020 17:48:31 GMT ETag: "5e5017ef-a18" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	2584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 32 08 06 00 00 00 fc cf 51 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2QtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49902	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	617	OUT	GET /public/images/ico/ico_facebook.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1161 Last-Modified: Wed, 06 Dec 2023 00:00:29 GMT ETag: "656fb99d-489" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close X-N: S
2024-05-15 22:36:56 UTC	1161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49903	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	616	OUT	GET /public/images/ico/ico_twitter.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1430 Last-Modified: Wed, 06 Dec 2023 00:00:29 GMT ETag: "656fb99d-596" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close X-N: S
2024-05-15 22:36:56 UTC	1430	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49905	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	713	OUT	GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=lI4V3qLLPrMY&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	265	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 161 Last-Modified: Fri, 05 Jan 2018 22:31:55 GMT ETag: "5a4ffcdb-a1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 0c 08 06 00 00 00 80 d0 86 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 43 49 44 41 54 78 da 62 fc ff ff 3f 03 b5 00 e3 08 36 ec d8 91 c3 fc 40 ea 00 10 1b e0 d0 b7 c0 ca c6 36 91 68 97 e1 31 10 ab 41 04 bd 89 c5 40 9c 06 11 15 66 48 06 5e c0 67 d0 48 4f 1a e4 02 80 00 03 00 23 ae 37 e9 64 d5 5d 17 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<CIDATxb?6@6h1A@fH^gHO#7d]IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49904	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	663	OUT	GET /steam/spotlights/6cc6099ab60aa21df29b4bb7/spotlight_image_english.jpg?t=1715207848 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 44480 Last-Modified: Wed, 08 May 2024 22:37:20 GMT ETag: "663bfea0-adc0" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16154	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 8c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 64 62 61 33 64 61 33 62 35 2c 20 32 30 32 33 2f 31 32 2f 31 35 2d 31 30 3a 34 32 3a 33 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.dba3da3b5, 2023/12/15-10:42:37 "> <rdf:RDF
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 7a 6b 1b 0e 19 4b c5 8b 0a 44 4e e5 62 a3 69 02 b5 a7 76 4b 5b 58 df 6f 3f 96 e7 e0 37 da d9 f0 1a b2 d3 22 02 d9 73 91 ee 79 03 d5 d9 f2 53 47 20 b3 2f 91 7c f4 7b 7c b9 89 04 92 cb cc 5a 35 7c c6 29 68 d5 35 6c 45 3e 7a b3 0b 8a d2 7d 06 8c 8c 36 2f 84 76 fc 25 53 b9 88 17 a4 d2 b7 30 a1 2a a3 b2 84 8f 88 1f 06 74 53 1c e9 de 29 7f ad 57 77 ef 9d a6 1f 59 6f f5 ba bc 85 2c 6f e6 d9 e4 75 db b3 61 e8 f8 a8 b2 c6 65 29 b7 86 bb cd 6b b1 42 c3 c0 7a 3e 06 b6 e9 f0 8f a7 e0 e9 8b 69 53 ba b4 38 b3 0e 8a d9 e4 b9 d8 2d b4 d4 51 38 28 d2 6a 2a 0e ce d1 52 47 bb 37 17 77 db 5a b6 e2 37 d0 a5 1e 55 c9 42 a2 7e 63 27 11 bb ea 0f 0d 3b b1 8b 13 e7 34 ca e3 4b a1 b3 8a 5f b2 7e 4a 0a 05 80 a8 2f 0e b8 e4 05 9d ef db 6d 95 af 1e 5d 5f 59 3d 61 e7 1e 50 a3 69 3b 00 Data Ascii: zkKDNbivK[Xo?7"sySG /\|{\|Z5\|)h5lE>z}6/v%S0tS)WwYo,ouae)kBz>iS8-Q8(jRG7wZ7UB~c';4K_~J/m]_Y=aPi;
2024-05-15 22:36:56 UTC	1774	IN	Data Raw: 78 41 42 b2 8b 63 66 f7 c2 0e e7 42 14 10 dc c8 11 df c3 32 f1 de f7 ca ca 8c 93 6b 8e ea da cc c5 7b 94 fc 65 a6 fe 60 24 5f 19 95 dd f6 8c fc 0e 3d 10 96 cc 27 06 58 10 26 03 85 f9 74 3e 56 66 94 95 e0 3d 88 29 aa ec 99 f0 cc d3 37 32 55 01 47 b8 70 d9 b3 89 a4 90 1b 91 bb 80 12 61 9f 75 26 00 0e 2f 62 20 3b ea 01 5c a1 a7 6a 19 da ea 92 e0 d5 dd 2a 4c 46 05 e2 52 a3 87 91 83 87 3c 32 95 19 bb 78 8d c3 81 bf 88 cc aa fc 58 95 ce 02 63 bf 32 9b 3d e9 df 6a 9f 10 68 0e 89 e2 5b f0 c1 e0 02 af 41 80 05 99 a2 dc 33 02 2c d5 fa 26 09 d9 3b 90 80 6c 8c 83 20 1a 72 49 4c 2d 8a 57 cf 88 c8 8f ec 58 02 f8 01 87 0c cd 2e b9 74 ee 4a 8b 89 f8 95 f6 62 18 63 cc f7 23 a1 cc c1 70 de da d4 c4 a8 b9 c6 f9 8a 84 f9 9f 91 61 7c c4 71 11 03 dc 3b e2 ab fa 11 70 a3 09 ea Data Ascii: xABcfB2k{e`$_='X&t>Vf=)72UGpau&/b ;\j*LFR<2xXc2=jh[A3,&;l rIL-WX.tJbc#pa\|q;p
2024-05-15 22:36:56 UTC	10168	IN	Data Raw: bb 80 d6 92 51 74 ad d2 81 3a 20 79 13 30 9e ca 42 c6 1b 8b ae 62 b5 ed 1e 3c 96 4e 33 77 02 c1 03 df 73 d3 37 16 ed 73 52 18 5d dd 9a a2 c5 6c 5a 53 f1 12 8a fc 77 40 3f ab 40 0a 80 b8 4d ee 1d a4 18 03 9c 2b 81 64 24 16 c8 6b b4 54 ec e5 cc 60 4d d2 d3 15 99 87 26 25 a7 62 14 8a a3 f8 a6 d3 95 47 0c 2b c8 8b c4 50 a0 6e 70 30 e0 99 b0 65 f2 a7 63 b3 dd b2 06 cd 47 e4 85 1a 7d a8 46 a2 5f 31 eb 5b 59 e0 65 8f ed 80 18 0c 4a 83 ad 32 81 74 df 10 91 ea 25 53 ce fe 25 ca fd a2 c6 85 cd f1 89 9a dc 29 b8 21 9c 80 96 7b cb 5b 45 b4 4a be a9 42 f3 3f 7b f1 1a 82 b0 01 dd 94 08 d5 c3 64 be ae ce 5a 5c 30 e9 25 bd b8 7e d0 d1 c6 60 7f a5 16 45 0c a6 2a 74 ab 49 8f 96 4b 38 57 ba 47 09 d6 86 3e 1a 10 f9 5c b4 df 43 2d 50 03 6d 1b 43 b1 43 f3 1f c3 4e 63 15 80 da Data Ascii: Qt: y0Bb<N3ws7sR]lZSw@?@M+d$kT`M&%bG+Pnp0ecG}F_1[YeJ2t%S%)!{[EJB?{dZ\0%~`E*tIK8WG>\C-PmCCNc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49906	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	424	OUT	GET /steam/apps/1726570/ss_c734a0acdcada17a686b636430b0786c0cb08f83.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 21 Sep 2021 11:30:04 GMT ETag: "6149c23c-1138d" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 70541 Accept-Ranges: bytes Cache-Control: public, max-age=426743 Expires: Mon, 20 May 2024 21:09:19 GMT Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 01 02 08 09 ff c4 00 5d 10 00 01 03 03 03 02 02 04 07 0a 0a 08 02 07 07 05 01 02 03 04 00 05 11 06 12 21 07 31 13 41 14 22 51 61 08 16 32 71 91 93 d2 15 Data Ascii: JFIFCCQX]!1A"Qa2q
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 20 ed 48 da 09 24 81 e7 b2 69 77 c0 e8 f0 d4 90 c4 b2 5a 62 06 99 94 a5 44 b9 cf 70 c6 dd 15 2d 45 0d 6e 4a 03 88 68 84 92 bc 94 1c e1 20 72 4a d4 32 05 52 55 66 9e 68 ab a5 c3 5f 7d c8 1c af f0 ad 38 23 35 a5 c4 08 f0 fd 32 15 be 64 c8 ce 2d 5b a5 b2 a2 49 29 5a f2 e7 8a 71 b8 12 4e 1a 69 44 63 25 47 04 26 b3 56 73 74 9e 66 b5 d9 72 27 bb 8d 1c d6 df f2 ff 00 e0 bc d6 17 36 27 db 84 33 f7 3a 79 b8 a8 08 f1 ae 0f aa 3e d2 30 a3 b8 0e 56 91 dc 8e 0f 96 79 aa 74 94 a9 be f2 6a c5 5d 62 f5 31 fd 49 bc 2e c5 64 6d c8 92 a1 43 7d 31 c3 09 d8 ca 7c 34 ac e3 05 29 51 ce 38 50 1c 1f 2c fb a7 a0 a3 56 59 65 73 64 b3 4a cd 98 8e 94 74 f4 5e 74 34 f9 ce 42 93 74 97 70 71 51 d8 80 50 22 a1 d0 da 92 a5 3a 17 dd d2 a2 54 90 41 4a 46 dc 01 92 4d 7b 3c 36 05 cb 0d 52 bc Data Ascii: H$iwZbDp-EnJh rJ2RUfh_}8#52d-[I)ZqNiDc%G&Vstfr'6'3:y>0Vytj]b1I.dmC}1\|4)Q8P,VYesdJt^t4BtpqQP":TAJFM{<6R
2024-05-15 22:36:56 UTC	3515	IN	Data Raw: 94 65 1f ec 50 71 a7 52 71 6a 7a 46 f7 b6 b7 6f 99 2b 9b a9 6d 92 a1 2b c4 61 c9 3d b0 84 b7 b9 25 58 e7 6a ce 13 c7 23 76 71 5b d2 c2 e2 14 94 a9 a6 b9 3d 88 a7 2a 6a ea 6d 79 ff 00 d1 05 d4 9a 76 4e a2 d3 73 21 c5 71 10 25 ca 08 ca d4 72 db a9 4a b3 b1 cc 27 24 1c 0e 47 6f 66 3b 74 b1 78 39 d5 8a 69 2b f1 b0 c1 e3 21 4a a7 7d bb 2d af fa fe 7a 9e 7e 76 65 f2 2d f9 51 91 21 0f 38 c2 4b 7f 73 5b 61 6f 2d c7 37 14 e0 ac 24 9c e4 10 90 37 67 04 fb 2b cd f6 58 38 d9 c5 de fb ff 00 8f b9 eb 3a f6 9e 6b e9 6f cd 4c 2c bb 86 b4 b8 b3 3a 40 d3 ee 3f 6b 71 06 3a 5b 71 b5 25 0b 56 40 2a ee 14 a2 0f 18 4f 18 ce 4f 19 ab b4 b0 34 a2 93 cd ae f7 2b 4f 15 39 36 ad 75 c8 de 7a 4e c1 07 a7 3a 46 45 da 65 9e db 1a e6 88 d1 dd 44 57 70 80 16 76 a7 2a 6d 20 e7 1c 90 09 f2 Data Ascii: ePqRqjzFo+m+a=%Xj#vq[=jmyvNs!q%rJ'$Gof;tx9i+!J}-z~ve-Q!8Ks[ao-7$7g+X8:koL,:@?kq:[q%V@OO4+O96uzN:FEeDWpv*m
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: a7 e6 e7 6e bc e8 cd 4d c6 0a fc d3 b2 5a fd 74 d2 df 53 66 c3 b4 4f 1d 4a 9b 0c b3 77 55 90 47 05 32 94 c6 e6 54 ea 8a 8f 2e 29 5c ec 00 72 01 c8 58 1c 6d 35 d2 a1 2c 55 1a d2 a8 ea 5e 3b 28 db 45 b6 df ae fc ce 4d 58 d2 a9 49 2c a9 4b 9d f5 3a f5 1a 61 d1 31 e2 94 48 8e ea e4 28 24 25 d7 43 0b 48 24 24 10 48 56 4e e2 70 00 27 81 ef 35 e8 b0 f5 9e 26 ea d6 f4 39 ae 92 a7 de 6f dc 87 74 8f 57 7d d6 91 a8 60 ab 7b 89 66 49 90 87 96 b4 b8 a5 05 92 15 95 80 01 00 8f 54 79 27 8c 9a b5 1c 2c 70 f4 e2 a1 c7 ca da 91 56 a9 d6 cd b3 7b 23 e4 27 e6 15 54 90 c6 df 1a 92 50 db d1 d4 48 6f e5 36 01 39 f7 fe ca 92 9c dd 39 66 89 a4 e0 a6 ac cb 23 ac a6 b7 0d 68 43 6d be f9 c0 05 ec e0 7b 49 c7 ca e3 c8 f3 ef ae 9c 71 50 6b bd a3 39 f2 c3 c9 3e e9 97 b7 29 4e c0 61 6e Data Ascii: nMZtSfOJwUG2T.)\rXm5,U^;(EMXI,K:a1H($%CH$$HVNp'5&9otW}`{fITy',pV{#'TPHo699f#hCm{IqPk9>)Nan
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 42 4a 89 ef ce 30 70 78 35 db ad 84 54 e9 c6 a4 64 dd f7 d2 c9 7c cb 55 f0 2a 8d 28 55 8c 9b be fa 59 2f 2b 98 2f 8b f3 be e4 ae e8 88 32 15 6d 6d c0 d2 a6 06 c9 68 2f f2 4a bb 66 a0 ea 64 a1 d6 28 bc bc f8 15 7a 89 aa 6e aa 8b cb b5 f8 18 b5 9f 6d 40 d9 59 b3 96 d3 bc d6 d1 d4 cc 75 2b 84 f2 38 c5 4f 62 6b 1f 51 be 08 bf fa b9 e8 af f8 0f 7f 88 76 ae d0 fe 1a f9 fd cf 13 d2 1f ee a7 f2 fb 23 6f d4 e7 38 50 0a 01 41 63 90 33 58 6c dd 44 ec d8 6b 78 0e bc 96 86 38 dc 7b 9f 20 2a 1a 93 94 60 e5 15 76 b8 13 53 82 94 92 93 b2 e6 44 f5 7e 98 bc b9 6c 4c c6 ae cc 99 89 74 ec 8a 1b f4 75 96 d2 77 85 21 4a 58 56 ec 24 1f 55 24 2b bf 03 9a f9 47 49 ca bc a6 ea 63 a6 ee 95 ad 6b 2f 44 96 8f d7 c8 f6 58 4a 18 3c 3a eb 24 f3 47 f5 e0 d7 fd 34 6b 7e 9d 5c 75 2e 86 76 Data Ascii: BJ0px5Td\|U(UY/+/2mmh/Jfd(znm@Yu+8ObkQv#o8PAc3XlDkx8{ `vSD~lLtuw!JXV$U$+GIck/DXJ<:$G4k~\u.v
2024-05-15 22:36:56 UTC	1832	IN	Data Raw: b2 b6 ff 00 3e 1f 7e 24 3b e3 7e b0 5a 7c 64 33 28 20 60 29 a5 5b 5c 0a 48 24 fa df 24 e4 e0 0e 01 f3 f2 af 3b fb 43 a7 2f fe d9 7f fb 2f d0 f5 3f b3 3a 01 ab f6 97 ed ff 00 fa 26 3a 12 ff 00 79 bc 45 2d dd ad 52 61 ad 96 5b ff 00 4c 90 d1 67 d2 16 73 bb 08 3d bb 67 d5 25 3c e3 39 af 47 d1 d8 8c 65 78 be d7 47 25 b6 79 af 7f a2 b1 e5 ba 4f 0b 81 c3 ca 3d 8e bf 59 7d d5 ad 6f ab fd 4f 8e df 77 67 7e 70 7f aa 3f 75 72 2c 77 33 31 f7 7a 7f e7 07 fa a3 f7 52 c3 33 39 fb bf 3c 7f f7 83 fd 51 fb a9 61 99 9c fc 61 b8 7e 72 7f aa 3f 75 2c 33 31 f1 8a e3 f9 c9 fe aa 7f 75 2c 33 31 f1 8a e3 f9 c9 fe aa 7f 75 2c 33 33 9f 8c 77 1f ce 4f f5 53 fb a9 61 99 8f 8c 77 1f ce 4f f5 53 fb a9 61 99 8f 8c 77 1f ce 4f f5 53 fb a9 61 99 9c 7c 62 b8 fe 72 7f aa 9f dd 4b 0c cc 7c Data Ascii: >~$;~Z\|d3( `)[\H$$;C//?:&:yE-Ra[Lgs=g%<9GexG%yO=Y}oOwg~p?ur,w31zR39<Qaa~r?u,31u,31u,33wOSawOSawOSa\|brK\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49907	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	390	OUT	GET /public/images/v6/logo_steam_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2843 Last-Modified: Thu, 18 Jun 2020 23:12:51 GMT ETag: "5eebf4f3-b1b" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	2843	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 cc 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR\:;)pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49914	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	623	OUT	GET /steam/apps/2194530/header.jpg?t=1712738249 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Fri, 15 Dec 2023 07:53:29 GMT ETag: "657c05f9-9786" Server: nginx Content-Type: image/jpeg Content-Length: 38790 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=390117 Expires: Mon, 20 May 2024 10:58:53 GMT Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 01 02 09 00 0a ff c4 00 48 10 00 01 03 02 05 01 06 03 06 03 05 07 03 03 05 00 01 02 03 04 05 11 00 06 07 12 21 31 08 13 22 41 51 61 14 71 81 09 15 23 32 Data Ascii: JFIF,,CCH!1"AQaq#2
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 09 c1 f5 c5 35 f0 77 7b df e6 4f 99 1b 22 d3 72 2d 3a a8 d4 24 ad 6e 48 79 c9 4f be e7 55 ba ea ac 07 fd 2d b6 94 8f 5d 97 ea 4e 3d 0a dc f0 2d 35 b0 cf cc 35 76 c4 89 ec 3e db 65 b4 ba a0 92 a0 0d 8a 94 02 4f 3f 27 3f 6c 31 14 d1 19 e7 05 50 6b 31 ea 54 36 1f 60 77 c1 49 92 15 25 0d a8 ad 60 80 12 a5 11 6d 80 93 c5 f9 23 d3 14 dd ec ca e9 6d 6e 42 51 34 23 3c 2d c5 c6 65 9a 6c a8 48 49 68 bc a9 a8 d8 f2 09 50 3e 1e 78 29 28 e3 a8 28 f3 1c e1 6d 36 04 63 4f 72 7e d2 6a 4d 03 24 51 1b cb d5 25 ae 3c e4 b6 84 bb 3e 34 ad 85 4e 6d 00 a8 24 12 a0 49 f3 3b 89 e2 f8 4e 47 35 ee 1d 1c 50 8b 8e fb 8e 1a 58 9f 43 af 7c 3b 19 8e 41 8e b5 1e e5 e2 0b a0 73 d1 e6 94 6e 3f bc 38 ff 00 23 84 fa 90 c9 42 35 ee fe 82 c6 67 ad d5 68 01 a9 55 26 db 93 11 47 ba 53 8c 10 4a Data Ascii: 5w{O"r-:$nHyOU-]N=-55v>eO?'?l1Pk1T6`wI%`m#mnBQ4#<-elHIhP>x)((m6cOr~jM$Q%<>4Nm$I;NG5PXC\|;Asn?8#B5ghU&GSJ
2024-05-15 22:36:56 UTC	2291	IN	Data Raw: 12 c7 01 c4 92 d4 60 7f bc 79 57 d0 7d 71 14 85 39 a4 56 8d 46 d5 1a fe a3 4c 4b d5 79 20 b2 d9 3f 0f 05 81 b5 96 af e8 3c cf f3 1b 9c 0d 99 e5 26 f9 13 72 e5 46 05 0d af 8a 93 dc ad d5 20 2e ee 32 97 49 24 9b 25 21 40 f4 00 1e 9e 7e d8 5d 75 72 14 1c 60 ac 72 d2 ea 59 77 50 9d 31 e5 c6 8d 15 e5 10 d7 de 2c c5 4b 12 23 12 6c 16 a0 80 03 88 07 a8 20 9b 74 20 e0 25 17 04 e5 0f b0 e8 4b 1e 67 d3 3d be 35 ba fd c6 95 23 2a d4 51 a8 2c d1 0a 63 b5 52 8f 31 4c ad a9 42 ed 29 6d 92 54 92 2c 77 03 b4 80 2d cd c6 33 ea b3 c2 1a 49 e5 95 f4 d7 6e 77 da ff 00 12 f4 9a 7c 92 d5 c7 0a ae a4 fb f1 b6 f5 f8 0f 59 32 fe 32 5b ce ef 52 c2 d4 48 52 fa 91 7e 2f f4 b7 1e 58 6e 1c 6b 0e 28 e3 4a a9 76 39 da 89 bc b9 65 96 4e db 67 93 62 93 83 32 81 2d 43 17 61 45 0c 4a 5a b7 Data Ascii: `yW}q9VFLKy ?<&rF .2I$%!@~]ur`rYwP1,K#l t %Kg=5#*Q,cR1LB)mT,w-3Inw\|Y22[RHR~/Xnk(Jv9eNgb2-CaEJZ
2024-05-15 22:36:56 UTC	4072	IN	Data Raw: ec 39 b1 ea 31 ac b8 a5 71 7c 33 cc 65 c1 3d 3c de 2c b1 a9 2e 50 96 b7 8a af 73 7c 3c 45 81 15 fa fe d8 b2 ac 4b a5 f8 1d 9c 8f 47 8e 22 04 3c 5c 3b 6d 88 10 12 9c b8 38 80 b7 62 b6 46 ca cf 67 9c e5 45 cb cc 38 19 72 a5 2d b8 dd e9 e8 da 54 7c 4a fa 0b 9f a6 03 24 d6 38 39 be c1 61 c4 f3 64 8e 35 dd 97 0f b5 d6 a9 e5 3d 2f d2 2a 7e 8a 64 c7 5b 72 48 65 b6 a6 a1 a5 05 7c 33 09 56 e5 77 8a f3 71 c5 72 47 5b 12 4f 51 8e 16 87 0e 4c d9 9e a7 2f f3 fe 8f 53 e2 9a 9c 5a 6d 3a d0 e0 fa fc 17 ee ca 32 b5 86 d2 54 4d 80 c7 a4 47 8c 11 e7 54 af 70 3a 62 8a 13 4c 95 9f d5 6c 5d 15 44 d1 a8 b9 06 52 28 cc 57 a0 29 35 3a 61 17 f8 a8 e2 fb 47 98 58 ea 92 30 11 95 9e cb c5 bc 2f 24 31 2d 4e 3f 6a 1e ab f5 f4 23 14 aa e3 d7 06 78 e3 3b b1 38 2d 70 65 7f d9 9c 52 2e c0 Data Ascii: 91q\|3e=<,.Ps\|<EKG"<\;m8bFgE8r-T\|J$89ad5=/*~d[rHe\|3VwqrG[OQL/SZm:2TMGTp:bLl]DR(W)5:aGX0/$1-N?j#x;8-peR.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49911	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	623	OUT	GET /steam/apps/2488510/header.jpg?t=1715042344 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 51575 Last-Modified: Fri, 30 Jun 2023 14:36:03 GMT ETag: "649ee853-c977" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=379157 Expires: Mon, 20 May 2024 07:56:13 GMT Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 02 09 01 0a ff c4 00 59 10 00 01 03 02 04 04 04 03 04 06 04 07 0b 0a 07 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 32 71 23 42 81 91 Data Ascii: JFIFCCY!1A"Qa2q#B
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: b5 34 ea 5b 3c b5 a5 28 50 3e 75 e8 b6 f6 ea 37 b5 b6 c2 ad 5a cb 4a 8e a8 fa a3 11 8e 38 e2 78 09 fd 12 6b bd d7 0c 0d 65 33 81 c3 86 5c 4c 7e aa ab a9 c7 7e 83 21 2d 4d 88 eb 6e a0 80 86 d5 b1 45 fb 7b 8f 42 2e 08 e9 8b c6 45 50 77 1c 20 eb c6 35 fc aa bd d2 c2 03 c4 7d bd 68 b8 9a 94 88 85 86 80 6c be a0 90 00 b7 53 b9 fc af 84 d3 9d fd e3 8c 7a 0b af 10 dd d1 aa f9 3d 01 aa 78 8e d1 e5 eb 29 69 27 d8 9f e5 7c 14 8c d4 2e 76 31 25 72 a3 61 9b 83 a2 31 c8 c0 46 6e 33 60 86 ae 12 a2 08 b8 4e ff 00 be df b7 09 6b bd e2 f3 9f dd 28 b3 dd 0c 19 22 9a 28 8d 2a 4a 92 83 75 94 a5 08 02 c4 e9 1d 7d 87 bf 4c 2c 82 f6 b4 4f 1f 99 fa a4 01 ba e3 eb 2f b2 98 65 6e 1e d5 ab ab 66 5a e2 2c b1 74 a8 6b 41 00 a0 df 74 dc a7 63 6b 5c 10 4f 62 36 c4 2a d7 54 a8 82 d2 71 Data Ascii: 4[<(P>u7ZJ8xke3\L~~!-MnE{B.EPw 5}hlSz=x)i'\|.v1%ra1Fn3`Nk("(Ju}L,O/enfZ,tkAtck\Ob6Tq
2024-05-15 22:36:56 UTC	2860	IN	Data Raw: b4 c8 e3 1f 95 77 64 6c af 97 47 09 69 4c 98 f1 3e 36 44 14 ca 9b 55 71 21 cf 83 6c 92 ad 57 3d 15 71 a4 20 6e 48 f4 07 19 6b bb 8a fe dc f3 27 74 18 03 29 39 47 4d 49 e1 e0 ae 6d e9 52 f6 66 8c 24 89 27 87 eb c0 2a d3 3e 67 89 19 d2 be f4 b7 5b 4b 6b 4a 43 2c 30 9f 95 28 17 df e8 4d d5 ec 4d bd 31 73 67 68 db 6a 41 80 e1 99 3c fd 60 a0 d7 ae 6b 3e 4e 7a 28 db 7f ef 72 34 2c 95 b5 7d 96 12 49 04 9e 84 0f 73 b7 e5 f5 9c 7f 68 64 66 a3 8f 73 3c 97 12 14 a8 a8 5c e7 08 49 09 00 b6 7a 69 bf 4f f3 ae 7e 97 db df 0a 68 0e fd 98 f5 fa 2e 3b dd f7 8a 8f 4c a6 c9 ad 39 26 74 85 72 d9 6d a5 14 20 75 04 6a f2 fd 41 1b 9f 5c 4f a7 51 b4 40 a6 dc c9 f4 7f 0a 1b 98 ea b2 f3 94 7a fd 54 59 20 15 00 4d 87 ee c5 82 86 a6 f5 1a 73 54 b8 5f 19 0d a4 15 a0 b6 a0 46 db 85 7e Data Ascii: wdlGiL>6DUq!lW=q nHk't)9GMImRf$'*>g[KkJC,0(MM1sghjA<`k>Nz(r4,}Ishdfs<\IziO~h.;L9&trm ujA\OQ@zTY MsT_F~
2024-05-15 22:36:56 UTC	16288	IN	Data Raw: c5 41 49 a2 c3 7d b8 a5 49 60 20 92 12 49 d0 be c0 1e c0 dc 9f c3 b5 f1 da 60 d6 70 2e cf ec b8 ef d9 82 1b 92 69 c8 79 de bd 91 6b 2e 4f cb d2 be 16 6b cc aa 3a 94 5b 4a c1 41 20 da ca 04 75 48 37 f6 c4 cb cb 4a 17 94 bb bb 81 2d 06 73 23 e8 a2 5b 57 ab 41 fb d4 8c 12 21 49 62 d3 34 25 d7 9e 90 e4 89 6f 28 38 b9 04 dc ea df a7 a0 dc ed dc 62 b1 d5 66 00 10 d1 84 2b 06 32 31 26 49 d5 21 ac 3a b9 94 59 0e 15 84 a5 27 46 94 1d 8d 95 6b fd 3b 81 e9 eb b5 a4 50 68 6d 50 3d 65 ea 53 15 89 75 22 7d 66 a1 89 68 3c 37 2a 1b da c0 62 e9 55 ae 7e 1d 48 b9 6d 67 e8 76 c0 85 24 e1 e6 50 9b 9f 73 75 36 81 19 41 a5 cb 7b 4b af 2f 64 b0 d0 ba 9d 79 5e 89 42 12 a5 1f 64 9c 40 be bb 65 8d bb ee 1d 8e e8 c0 6a 4e 40 0e 64 c0 1d 53 f6 d4 1d 73 55 b4 9b a9 cf 80 d4 f8 0c 54 Data Ascii: AI}I` I`p.iyk.Ok:[JA uH7J-s#[WA!Ib4%o(8bf+21&I!:Y'Fk;PhmP=eSu"}fh<7*bU~Hmgv$Psu6A{K/dy^Bd@ejN@dSsUT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49908	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	398	OUT	GET /public/images/v6/home/background_maincap_2.jpg HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	262	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 14577 Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: "649bb1f9-38f1" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	14577	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 5a 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyZ+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49913	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	390	OUT	GET /public/images/footerLogo_valve_new.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2584 Last-Modified: Fri, 21 Feb 2020 17:48:31 GMT ETag: "5e5017ef-a18" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	2584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 32 08 06 00 00 00 fc cf 51 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2QtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49910	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	696	OUT	GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_english.jpg?t=1713912919 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 71723 Last-Modified: Tue, 23 Apr 2024 13:35:01 GMT ETag: "6627b905-1182b" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16153	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: f6 f8 5b 0a 56 82 3e d3 72 d7 16 1a b3 09 19 9e f8 ef 01 0c 7c 33 79 36 ec ef c5 3a 4e 7b af c8 42 8e ab 9e 6e ca 20 6b de 64 2e 01 56 ed 24 36 0f db 93 69 20 6b e4 25 3e 44 e2 4f 4a 70 17 13 0f 62 cc 22 d0 88 c2 28 84 11 08 2c af 25 e4 42 85 a5 e6 3a 48 51 62 fd a3 11 ae c0 9d 5d 85 3e a3 4a 8a 2f b4 a2 97 20 39 64 ac 65 5a a6 24 16 eb 3e 37 78 a0 98 82 28 84 e1 d5 c3 28 82 87 f0 71 f5 61 33 a9 eb 80 11 00 a7 33 29 8c 21 05 84 42 25 35 c8 82 8c 45 c2 46 16 a3 d0 22 13 86 3a b7 ab 7e 5a 13 02 68 c2 90 12 83 08 36 1b e5 1c d1 f8 4a 0a 71 ec c7 21 f0 41 2a c4 79 12 b7 b1 1d c0 0e 1a d9 7c 7a 07 27 37 22 95 9c 09 a3 61 06 cf 8b 60 61 7b 9e 03 5b 66 b3 66 36 a1 11 b9 91 19 16 04 4e 8e 43 82 e4 f3 94 7e 4a 86 23 21 8a 20 c6 95 20 ec 41 4e 69 58 44 2c 2f e4 8a Data Ascii: [V>r\|3y6:N{Bn kd.V$6i k%>DOJpb"(,%B:HQb]>J/ 9deZ$>7x((qa33)!B%5EF":~Zh6Jq!A*y\|z'7"a`a{[ff6NC~J#! ANiXD,/
2024-05-15 22:36:56 UTC	2538	IN	Data Raw: 7c 64 23 f0 7a dd a3 58 0d 8e 91 f2 3d ba 5d 8c 6e d1 71 bd dd c2 ee 3f 3d 68 69 71 a9 e7 95 bf b6 d2 57 db 72 88 ec 4b ad b0 d8 f5 db 58 ed dd bd c9 b8 f4 f2 d7 b1 13 a3 73 c1 0b 01 01 84 e0 08 95 aa 41 82 ec 13 af 79 6b a5 fd 41 bd 9d 53 fd 5a 5d cf 16 d3 49 7a 4b 8e 34 22 e0 f5 e2 6c ef dc 7e f2 96 d3 57 1d 57 d2 97 c2 87 3b 24 c5 14 8f 73 aa b6 7a 37 b9 34 93 4f 4a 46 cb 66 6f 5d ca 28 ef a8 ed 6e 51 bb eb 7e 42 c8 4f 0e b9 3e ea 8f bd 78 f9 7d 06 3c bc ed b5 2c dc d2 f6 77 18 6c f0 fe 2e 7b 66 7a f3 f0 2f 63 6d b4 43 fe 2f 6f 6b b2 dd d0 b3 c6 78 f7 19 66 de e3 b9 4f b9 a9 fa 37 5b f8 f1 f9 11 5b dd 9a 9b d7 29 6b 29 f3 df 74 71 c3 ac f7 0f ba 2e 7b 8b 7f b4 de d5 a7 55 cd f1 52 b5 c4 c3 d9 da 5d 7c bb 5d 8f 1d e2 d5 78 ee 98 6f 68 72 8a da 9b 5b fe Data Ascii: \|d#zX=]nq?=hiqWrKXsAykASZ]IzK4"l~WW;$sz74OJFfo](nQ~BO>x}<,wl.{fz/cmC/okxfO7[[)k)tq.{UR]\|]xohr[
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 95 6a d6 a3 5b 90 70 3e 17 ca a6 d3 68 74 9c 76 a6 e7 43 a4 e4 55 34 1c 0b 85 71 59 b7 3c 47 89 f2 29 b7 3c 77 8f f2 38 68 6b e8 6a a9 ec 75 ba ed bd 3d 57 ad 7d 7d a3 b9 77 87 71 1d 96 ce fe be 86 d2 9c 7c 1b 85 43 ac a9 aa d5 eb e8 ee 78 9f 15 e4 6f db f0 fe 25 c8 24 af eb 7f 5d d4 b1 bb e1 5c 3f 92 c9 a6 e3 fa 2e 39 57 84 fa fd fc 7f 91 ed b4 ba 6d fd 4f f1 7f ad 15 4a 75 35 f5 6a 70 ee 23 43 6b b3 d4 ea f7 74 bf c5 fe b4 56 b8 6f 10 bb ad b1 c7 78 fd bd 46 9f 45 a3 e3 d5 a8 f1 1e 29 ac d9 aa 7c 57 8c 6b f6 97 b8 af 17 d9 ec f6 7a 9d 5e ee 96 ab 4f a9 d1 53 a3 c4 78 a6 b3 67 37 ad 7d 75 66 6d 57 0f e2 5a 15 a5 e2 bc 63 8d ba af 0c e1 f4 36 9f e2 ff 00 5a 2d 2f 17 e3 3c 6f e8 bf c6 2b 45 b2 91 95 aa 8e 43 c8 a4 6d 6d 86 cb f6 ad 1b c9 5d 67 43 6c 5a 8e Data Ascii: j[p>htvCU4qY<G)<w8hkju=W}}wq\|Cxo%$]\?.9WmOJu5jp#CktVoxFE)\|Wkz^OSxg7}ufmWZc6Z-/<o+ECmm]gClZ
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 1e 07 b2 5e e4 b1 d7 c6 c6 bd 47 9c 7c 6c 7a 42 9e 16 e4 6a 33 14 fa 83 f1 00 7f 6d 46 72 02 b3 01 6b 9a 5e 92 07 ba 8b 92 1a d6 e9 34 ea c2 ee a2 e6 33 ad c7 0b 8a 06 20 bd 6c a1 ee 34 0a 39 f3 d6 8f 49 12 c4 ba 9d 2d 7a ea 29 22 db e6 20 5c 7d b5 d1 d6 1c 11 a5 bf 65 63 e5 21 b2 b7 c3 2a ff 00 8a 4d 47 9f 8d ac 13 8f e2 28 d4 5c f0 34 bb 66 4c bf c2 7b 1c 7b f9 f2 a6 91 18 1e ad 6d e5 5b c4 64 5c 80 64 84 fe da 91 47 00 68 d1 07 95 72 ae 55 c4 57 2f 6f 9f b2 df 75 71 06 fa 5b d8 34 f6 83 ca b9 d1 d7 fc 35 cf f4 3c a8 56 9e cb de 8f 42 12 1b 4b 1a 32 c7 87 23 46 05 fa c0 36 34 56 40 51 97 42 0e 95 62 78 7b 07 b3 85 0a 34 df 67 b3 8d 0d 68 7b 35 ad 3c 69 47 02 35 a5 37 b5 27 c4 78 50 3d 7c 69 19 98 5e c3 f6 53 58 dc 13 44 5a d7 e1 5d 64 d8 9f d9 51 44 fa Data Ascii: ^G\|lzBj3mFrk^43 l49I-z)" \}ec!*MG(\4fL{{m[d\dGhrUW/ouq[45<VBK2#F64V@QBbx{4gh{5<iG57'xP=\|i^SXDZ]dQD
2024-05-15 22:36:56 UTC	3880	IN	Data Raw: 2d a8 ac 79 25 72 63 ea 00 8f 7d 47 93 12 82 65 8e fd 54 22 8b d4 78 af 60 b6 25 45 cd 28 dd 67 8b 1e 52 2e e1 cf 49 1f 79 a2 df d4 b1 ee fa 74 f5 0d 6d f6 d6 47 72 6c 73 46 fb 67 75 2a e7 7f 0a dd 29 92 a0 24 eb a7 8d 83 7f 9d 50 23 1e b4 96 dd 42 f5 14 b1 1f c9 e7 f4 fc 72 c7 60 ae 3f f1 00 d4 d1 84 60 9c a4 65 ba 4d 8e a5 92 de 66 c2 df 6d 0f ea 58 4d 8d 9d 8a 08 c3 dc 10 2f a8 85 87 02 09 f8 94 f3 07 f5 1a 57 fe ab 8f 87 1d ec f2 a4 6e f7 03 9d ae 3e eb d3 26 28 fc d6 71 5b 4b 9d 20 1d 6c 48 e0 3f 74 79 56 3b 5e f2 2a 91 29 1e 37 a8 ca 13 d7 72 8c 3d f6 a5 93 ab 46 22 d5 02 ab 91 d2 46 b5 1a b7 e0 1a 0e 57 02 b3 fb 67 f3 b2 ed 7b ac aa 64 d9 37 a8 02 19 b1 a6 e2 3a 3a c3 0b 37 03 71 fa eb 7d d9 b7 7e de c7 df 31 61 78 f1 e0 ed d4 3e 94 f3 e4 c4 40 69 Data Ascii: -y%rc}GeT"x`%E(gR.IytmGrlsFgu)$P#Br`?`eMfmXM/Wn>&(q[K lH?tyV;^)7r=F"FWg{d7::7q}~1ax>@i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49909	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	693	OUT	GET /public/images/v6/home/background_spotlight.jpg HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	270	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 11100 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-2b5c" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	11100	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 5a 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyZ+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49912	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	703	OUT	GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_mobile_english.jpg?t=1713912919 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 55032 Last-Modified: Tue, 23 Apr 2024 13:37:43 GMT ETag: "6627b9a7-d6f8" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16154	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 66 1f 69 16 b7 5d a3 21 67 35 a6 e0 f3 74 6d 2e c9 c9 59 c7 e2 71 11 6d 19 3a bb ec f9 ac 3d 3d 8b 6d 31 eb 50 e4 b2 d0 ea 78 51 b3 e5 6b 6e d9 0c ae 1b 0b 6e ce d7 8f c7 e5 73 79 6c 9e bf 91 ec b9 e7 c3 6c f1 e6 71 5a fd fd ce 66 ea 58 3d ca 77 ea d4 f2 f9 66 ea bd 79 95 96 ee 23 50 d8 2f db d9 6b e5 b3 f9 3c a6 ad 4b 35 51 9a dd bd 9f 3e 7a eb 70 c8 db bd af e5 76 2c d4 9a 4d 0c bd 61 eb 52 47 42 60 c8 17 8f bd ca fb 88 cd c9 12 f0 04 aa 39 b9 4d 3c 0b d5 7e ea 38 d3 cb 69 0e 19 45 80 b4 06 8f 5e e6 a1 10 11 e0 44 da 7f 5b 6e 34 70 b0 dc bb fb a3 69 da ac b7 17 b9 76 4e c1 4f 3d 6b b8 5a 5b 6b 3b 89 bb 4f 27 4e bc 55 e0 d9 64 7e 07 6c dc bf 47 9a 6d e3 30 63 d7 f3 33 cf 25 2d a3 32 32 fa 7b e1 b3 ae c3 9f c2 1c 75 2e df ff 00 53 ab d7 d5 b1 f9 2d d0 ea Data Ascii: fi]!g5tm.Yqm:==m1PxQknnsyllqZfX=wfy#P/k<K5Q>zpv,MaRGB`9M<~8iE^D[n4pivNO=kZ[k;O'NUd~lGm0c3%-22{u.S-
2024-05-15 22:36:56 UTC	2134	IN	Data Raw: 75 d6 88 bf da 2b db 42 85 b8 d0 d3 5e 66 b8 e9 40 68 48 ae b1 0b 08 ed ab da 8c 52 ea 92 e8 41 f1 a6 e8 1d 20 b7 5c 75 26 d9 3d 8e 64 68 54 29 d4 9b 70 fc d5 3c 7e 99 03 a8 91 cb 9d 2b fe 89 ac 39 7a ec a1 80 90 7b ea 29 e2 60 56 64 0d a7 b6 a5 20 70 3f df a0 7d 83 95 69 ad 69 a5 1e aa b5 29 26 c7 c2 95 e3 3e 7e 04 f8 d4 dd bb bc 4e 11 23 5f 53 06 57 36 1d 3c d6 e7 c2 a4 da bb 67 21 03 62 b1 f9 8c 83 67 5b 11 c0 6b c6 a4 95 b3 e1 cc 82 73 73 1c 89 a2 fb 41 5b 54 cf b9 3a 64 c3 94 96 11 0f 85 74 3c 2a 0d af 79 df b2 21 c4 c0 b3 6d fd 24 2b 06 51 61 ad b9 5e a3 c9 da 37 e9 37 cc 5b 08 73 70 a6 b1 26 3f 18 ed a8 36 1c 0d 29 da 5f 21 d7 30 7f e3 b8 44 90 cb 23 82 cd 75 e5 62 6b 75 ec ed df 1f 36 6d 81 50 4b b3 65 3a b3 f4 13 af 45 ed c4 71 15 8f 90 cc d9 52 Data Ascii: u+B^f@hHRA \u&=dhT)p<~+9z{)`Vd p?}ii)&>~N#_SW6<g!bg[kssA[T:dt<*y!m$+Qa^77[sp&?6)_!0D#ubku6mPKe:EqR
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 87 fc 47 f7 ae 17 cc f6 5f fc 3c 6d 91 ef 18 d8 ec b7 5c de e4 dc 24 f9 4d 93 0d 7f 94 67 63 25 c7 c2 51 4d 77 cc 92 a8 59 24 da 3b 7d a4 51 a8 0c 76 ac 62 40 f6 5e be a7 1b 58 1e c9 3f ff 00 25 89 58 bd a7 de dd d2 bd f3 d8 3b cf 78 b6 c1 b8 ec 79 d8 78 a9 24 18 99 39 a7 11 1f 1a 68 22 89 c3 44 18 30 0c 58 35 ac 46 b7 1f 46 b2 3b 43 02 0d a3 64 fa 87 89 97 dc 6d b3 e3 28 8e 1c 6c c9 30 b7 1c 7c a1 12 2d 82 ac 8f 0f a9 61 a0 2c 40 b0 b0 ae f7 dd be 8d 7d 4f c7 d8 fe 99 66 e5 c4 dd a5 b5 3e e7 8b 03 43 00 c6 89 5c 18 e4 c5 76 5b ca 1c ea c6 be b6 fd 64 fa d7 92 3b bf be fe 94 40 16 6d c7 2c 47 37 fe 33 24 92 e2 3e 62 f4 a8 52 f0 c3 86 e9 19 00 5b a8 30 d4 03 5b c7 74 f6 bf d4 7c be ca ed b8 b7 09 4f 6d f6 8e 04 18 c7 0e 0c 38 e4 3e 8c 73 a4 b1 39 99 ca 5b Data Ascii: G_<m\$Mgc%QMwY$;}Qvb@^X?%X;xyx$9h"D0X5FF;Cdm(l0\|-a,@}Of>C\v[d;@m,G73$>bR[0[t\|Om8>s9[
2024-05-15 22:36:56 UTC	3976	IN	Data Raw: e3 e8 6f 93 c0 28 f3 64 c8 3f 08 d1 88 ea d6 dd 23 8e 95 0f 73 6f 51 c9 0e d3 1e 6e cf b8 19 95 4b 13 8a 98 b0 41 24 8a a3 53 d2 d1 be 83 8d ab b5 23 ec 9c b9 77 b5 c2 c5 93 1d e5 5c 79 a1 eb 9f 22 55 e8 8d 12 64 47 63 a7 e8 db 51 6b d7 64 c6 e3 a5 e3 d8 ba 5d 78 d8 89 98 1e 15 b0 76 ef d6 4e e9 dc 37 1d ba 53 0b b7 70 47 93 3e e0 a9 87 3b 05 95 f1 db 2c 2b 0e 92 b6 71 d3 71 6b f4 b6 97 da f6 cd a1 12 3d ab 6f c4 87 1f 6d 44 6e a5 10 44 81 63 b3 5c df ca 06 bc eb fd ae dc f0 65 c9 db 64 dc a1 dd f1 9b 8f af 8b 32 04 9b d2 26 c0 b4 64 ba 80 4f 10 39 54 fd cb d8 dd d5 99 bf 6e 3d cd b9 e6 ee 3b de df 93 89 26 3a 62 7c cc 86 60 a8 d2 45 1f 57 99 c8 d0 b7 0a fa 39 d8 d8 92 9f 98 de bb 7f 69 dc 77 38 d4 8b fc b6 3e 1c 4b 0a 30 e3 67 94 96 1e d8 eb b2 b6 e9 3b Data Ascii: o(d?#soQnKA$S#w\y"UdGcQkd]xvN7SpG>;,+qqk=omDnDc\ed2&dO9Tn=;&:b\|`EW9iw8>K0g;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49915	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	424	OUT	GET /steam/apps/1672970/ss_46ee31494b5d144d5ef6670cb5a1564abbc26fab.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Mon, 23 Aug 2021 13:35:31 GMT ETag: "6123a423-14600" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 83456 Accept-Ranges: bytes Cache-Control: public, max-age=153750 Expires: Fri, 17 May 2024 17:19:26 GMT Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 08 00 09 ff c4 00 4f 10 00 02 01 02 05 02 04 04 02 07 06 02 08 05 01 09 01 02 03 04 11 00 05 12 21 31 06 41 13 22 51 61 07 14 32 71 81 91 08 23 42 52 Data Ascii: JFIFCCQXO!1A"Qa2q#BR
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 33 30 ce e9 28 f3 ae 9d cd 62 ac 58 23 ca 66 ae 19 8d 35 42 b3 5b 50 61 67 45 d2 35 01 72 dd 88 1c e2 b6 d5 d0 64 71 c9 c7 af 94 79 bf a4 ea 9f 2c 8a a6 ae 89 a5 9b 49 f0 5e 99 92 da b7 bf 92 fb fe 7d bf 3c 45 ef b1 38 b7 17 68 f4 37 c0 3e 9f e9 3f 89 59 66 78 2b a9 01 ae 8e 39 2b 06 71 98 47 20 a6 ca e0 11 10 d3 ca ea c1 57 4c b6 b2 90 4b 11 a5 45 ce 22 a3 d8 86 4c 94 ac e8 bd 3b 99 52 e4 5d 39 98 e6 5d 21 91 d4 cf d3 33 66 19 65 00 93 31 d5 e2 e6 c9 17 cc 89 ea a5 45 bd 9b 5b c4 55 54 79 42 a2 8b 90 71 9f ab c3 8b 26 4c 59 1f 30 ea fc 6b 7f 9f 3f 4b 08 d3 4a 70 ea 73 ee bf 7d 8e 0d fa 4a f5 3d 46 7d f1 4b a8 33 09 68 ea a8 27 96 61 1a 52 d5 c7 e1 ba 15 50 84 e9 d2 a4 2f 96 e0 11 7b 5a e4 9b e3 bc f0 5c 58 f1 69 62 d4 a3 29 3e f1 ad fd 2e b9 75 cb 30 35 Data Ascii: 30(bX#f5B[PagE5rdqy,I^}<E8h7>?Yfx+9+qG WLKE"L;R]9]!3fe1E[UTyBq&LY0k?KJps}J=F}K3h'aRP/{Z\Xib)>.u05
2024-05-15 22:36:56 UTC	2166	IN	Data Raw: c5 1d 04 f3 4b 30 86 73 0b 05 68 84 bc 86 1d e3 22 e0 7b df 6c 39 12 0a b8 ca 4a 89 14 f1 2d 43 22 96 47 0c 18 ad 88 d2 75 dc 1b 76 f6 e3 08 7a 05 9e 5a 3a 08 35 17 f1 65 68 c6 84 02 f6 bf d4 0d c7 3f 7f c0 8c 55 93 22 87 21 fa 5d 1c f5 2f cb b2 f5 2b 75 e6 5a 86 63 33 b3 ed a5 3c 56 3e 50 4e d6 ed b6 33 a5 95 cd ee 75 b8 74 70 d3 c7 a6 2b ef 20 8e 23 1d 95 55 49 22 f7 5e 31 5b 95 87 43 15 05 53 40 ec 2f e6 51 6b 5e dc fe 03 14 4a 69 1a 18 b0 b6 32 8b 2d 0f 05 ac 01 3d f0 2c b2 6e 6c e2 d3 5a aa 18 0a 68 a2 8e 34 bb 2b 01 c1 5d 46 f6 ec 46 e3 03 75 bb 0e 96 14 95 10 54 e5 52 39 56 11 5c ba dd 9a f7 d7 ef 6c 5d 1c 88 0b 26 9d fa 1b c9 14 71 d3 d8 c7 a4 17 0a 45 f5 6c 37 e7 d7 f8 e1 d4 9d d8 3c f1 25 1a a0 ce 8d a2 5a 9e a1 a4 a7 9a ab 4f 8b 28 8c 17 52 e8 Data Ascii: K0sh"{l9J-C"GuvzZ:5eh?U"!]/+uZc3<V>PN3utp+ #UI"^1[CS@/Qk^Ji2-=,nlZh4+]FFuTR9V\l]&qEl7<%ZO(R
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: aa f0 53 ab 92 b0 53 a3 48 91 48 79 ba 1d ef ea 48 dc 6f ed 89 d1 5f 22 f7 4f 9c a6 31 c6 d2 48 b1 85 f1 6c 53 ca 49 23 6d 44 10 a7 b8 d8 6f 84 20 3a 74 a9 91 65 60 86 90 c6 82 39 6f 71 a4 13 6b 9b f1 c7 1c 70 76 c2 10 1e 6f 54 69 a2 6a 48 5d 25 8d 06 92 1f cc 56 dc 15 ec 2f e9 7b 60 2c ba 94 bc b1 e4 e8 b4 7e 15 3c 89 64 cd b2 f4 ef fe 04 92 d3 19 2a 19 a4 59 64 45 d9 89 3c 1e e3 6e 77 b6 33 9e 46 f7 bd ce b2 3a 78 c3 ca 96 c8 d8 aa 33 0d b5 21 00 05 6e db 70 00 fe 78 aa e8 31 63 4f e4 17 15 09 7d 3a 14 99 19 76 50 2c 7b 7a 62 97 92 b9 34 31 e9 ef 84 36 4c 81 a9 e1 56 7b c7 a8 7d 1b 9f cf 01 4b 3d ba 46 ce 3d 1f 4a 4d a0 da 1c ac 94 fa 4e c2 f6 b5 ac 30 2c f2 ee 6b e1 d3 6c 13 05 23 82 16 1f 10 3d c9 2a 16 e1 87 7c 57 f1 3d 4b 25 85 f6 20 aa a0 a8 fa 55 Data Ascii: SSHHyHo_"O1HlSI#mDo :te`9oqkpvoTijH]%V/{`,~<dYdE<nw3F:x3!npx1cO}:vP,{zb416LV{}K=F=JMN0,kl#=\|W=K% U
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 73 8b 0a 6c c7 ce ac 51 69 06 29 db 60 17 49 db 6e 70 f6 31 08 33 d2 d3 dc df ea d9 5a c4 6f ed db 0c 37 63 30 d5 a0 71 64 08 e3 94 6f a4 8f e9 89 58 e8 cb c2 21 9d 97 49 31 9d c1 bd c8 c4 da a2 84 49 04 ad a9 d8 30 0d 6b 15 6f da 1f e7 84 84 15 4f a7 41 4b 5c b9 04 12 fb 0f be 24 86 18 c7 a2 54 0a e0 34 a9 e5 05 7f 68 7b e2 69 58 d6 41 53 4f f2 13 29 e6 26 5b a2 db bf 7c 3b 54 32 25 a7 9c d8 73 62 6e d6 d8 61 d3 18 6d 4f 20 60 a0 8d 23 d0 7f bf e7 8b 04 c3 e0 98 c8 6c 76 17 e4 e2 48 81 6a e9 ca b6 92 a2 35 57 63 bd b0 44 1d ba 2a 92 d8 fd 11 23 ab 7e 12 f4 26 43 f0 c7 a2 a8 57 37 a9 ea 9c a5 73 9a 5c fb 29 aa 95 25 79 77 33 30 0c 6c a0 47 a1 2c 2c 2d 72 79 b0 83 71 9b f8 92 ec e8 86 34 af a5 be 51 c6 bf 4d bc da 97 a8 ba 87 a5 33 09 72 ca bc 93 a9 6a 32 Data Ascii: slQi)`Inp13Zo7c0qdoX!I1I0koOAK\$T4h{iXASO)&[\|;T2%sbnamO `#lvHj5WcD*#~&CW7s\)%yw30lG,,-ryq4QM3rj2
2024-05-15 22:36:57 UTC	7952	IN	Data Raw: b1 fa 63 05 d2 95 b3 d4 1f a2 c7 e9 57 ff 00 f8 b6 03 d1 9d 66 9f db ff 00 0f 33 30 d1 d4 d0 cb 1f 8a d4 21 fe a9 11 7f 6a 33 cb 47 ff 00 a9 6c dc 91 8f 2f 56 cc 17 2e 1a 4a 49 ee 5c 7e 3d 7e 8a c3 a5 32 9a 8c ef a2 5a 0e a4 f8 7f 9d ff 00 d3 e8 f3 15 93 c5 92 85 8a 13 e1 99 07 d5 1b 80 34 b9 fd a4 0a d6 6f aa 39 21 d2 fa bb 15 e3 cb d4 a9 f2 78 a3 31 a3 78 6a 25 a5 9b cb 34 4e 48 d3 df d0 8c 51 25 d2 f6 0b 4f ab 60 16 1a e4 f0 a7 8c 6a 22 e1 95 ad ab ed ef 8a f8 dd 13 f6 64 6e c4 a0 8a 5b ba df 67 d3 72 df e1 3e f8 8d 6f 68 7b da 98 f7 22 8b fb 05 e9 de ba 95 cc 06 4d 51 33 b5 c4 0c 7f 79 78 04 fe f7 6f 6c 15 a7 9e 35 3d f9 05 cb 19 74 ed c1 d2 17 e6 12 9e 32 29 9a 45 78 99 e9 9a 29 0b 34 44 f2 85 ad ba ef b8 3e bb 63 64 cf 13 4a e1 f2 f6 a7 96 43 22 a4 Data Ascii: cWf30!j3Gl/V.JI\~=~2Z4o9!x1xj%4NHQ%O`j"dn[gr>oh{"MQ3yxol5=t2)Ex)4D>cdJC"
2024-05-15 22:36:57 UTC	8144	IN	Data Raw: 21 e9 7a f9 b3 2a 89 72 bc c2 48 e9 e5 d0 cf a9 54 05 96 db 87 07 f6 40 de f6 e3 ed 82 74 f9 d6 65 45 59 b1 bc 6e c3 b3 3a a9 27 86 2a 89 a7 a7 aa 44 4d 32 22 c8 b7 90 12 6c 5b d7 61 fc 46 09 6c a1 7a 11 09 e4 8e 71 2d 11 9e 28 ff 00 f0 0b 15 b8 26 c2 ce 4e da 79 df db 0b e4 48 d2 f3 e4 d2 2e 88 e4 92 a7 57 87 51 1d 83 2c 80 9f 4b f9 86 e3 7e 71 1d d0 f6 99 05 7d 31 79 cc 14 88 5a 76 23 c4 89 c6 96 57 1d ac 79 f6 b6 22 d7 a0 e9 fa 93 50 c1 57 20 a5 9d 18 7c e4 b2 7c b1 a7 64 0a 24 1d 96 df b5 fc f0 d4 f9 26 98 cf 3c a7 7e 84 c8 7c 69 40 92 b9 bc af 1b ec 5e 56 26 d1 81 fb aa 39 fc 7d 71 64 97 c2 85 8f 0b 94 8a df 54 24 3d 45 49 94 f8 34 8f f3 54 e6 49 6a 51 db 50 5f a0 8b 1b 8d 4b b1 db 9e d8 0f 2c 14 e2 92 41 98 f3 3c 72 eb bd d3 4d 7d 00 e9 f2 40 1e 29 Data Ascii: !zrHT@teEYn:'DM2"l[aFlzq-(&NyH.WQ,K~q}1yZv#Wy"PW \|\|d$&<~\|i@^V&9}qdT$=EI4TIjQP_K,A<rM}@)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49916	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	424	OUT	GET /steam/apps/1672981/ss_02b994c796adfc5fc5984ec658caee4ce34fe69f.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Mon, 23 Aug 2021 13:45:15 GMT ETag: "6123a66b-13d5d" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 81245 Accept-Ranges: bytes Cache-Control: public, max-age=573619 Expires: Wed, 22 May 2024 13:57:15 GMT Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 01 00 09 ff c4 00 52 10 00 02 01 02 04 03 06 03 05 06 04 02 07 05 06 07 01 02 03 04 11 00 05 12 21 06 31 41 07 13 22 51 61 71 14 32 81 08 42 91 a1 b1 Data Ascii: JFIFCCQXR!1A"Qaq2B
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: c5 29 62 64 42 dc 55 e8 73 e4 c8 76 96 33 ef 5c d3 db 2d 52 4d 9b cd c4 19 2c 32 51 c1 53 75 aa 85 48 64 47 27 72 a7 c9 b9 91 d0 df cf 19 a5 82 f5 34 51 5d a6 1e 7b a4 60 82 63 75 c2 a7 65 30 d5 47 4f 13 52 66 a9 ae 61 71 0a 5c f3 f3 f2 c4 8c 7a 05 b5 dc a3 3b 29 8e 77 c6 de 15 9f 80 a2 cc 73 0e 26 f8 28 94 d5 66 12 4c aa 3b b5 2e 59 ef c8 01 cc 9e 56 c6 16 69 74 77 7c ae d3 a7 b6 37 c6 1e 4e 96 01 df c2 fd 27 fb 3c f6 59 98 f0 06 55 51 59 9c 01 15 75 64 6a a2 9e f7 68 d6 fa 8e ae 80 93 6d b7 b5 b1 97 87 8c f8 de e9 a5 e5 dd 97 9e 7d 2a eb 50 75 27 b2 0c 5d d8 cb df c9 e3 6f 6f 7e eb 55 ac cc e9 28 61 96 59 ea 21 89 23 04 b9 67 03 4d bd 31 71 f2 34 77 5c 44 70 c9 23 83 58 d2 49 e1 54 f3 8e d5 f8 6b 28 89 5d ab c5 49 26 c5 29 d7 51 51 6e 66 f6 c5 47 3c 9f Data Ascii: )bdBUsv3\-RM,2QSuHdG'r4Q]{`cue0GORfaq\z;)ws&(fL;.YVitw\|7N'<YUQYudjhm}*Pu']oo~U(aY!#gM1q4w\Dp#XITk(]I&)QQnfG<
2024-05-15 22:36:56 UTC	2003	IN	Data Raw: 50 a5 8a 89 d9 5a 78 1b ed 07 c5 bd 9c 47 fb 2e 59 62 cf b2 20 bd db e5 79 a0 32 44 63 fe 15 26 e5 47 a6 eb fe 5c 68 45 92 f8 fe 1e 42 e1 fa 9f d1 cc 5c d3 ea b3 fa 72 7f d9 bb 6f ee 3f f0 7d d5 c2 2e 16 ec df b5 ea c8 2b 38 3f 36 93 b3 6e 35 6f de 47 95 d4 3d a0 67 ff 00 e5 38 23 49 3f e4 20 ff 00 93 17 c3 62 97 76 1d 2e 5c 84 d9 1d 4f a5 34 c7 d4 23 13 c3 dd c3 9f bf fc fe 28 9c f7 8d 78 b3 83 a8 c7 0d 76 d1 c2 29 c5 99 05 f4 45 9a 69 53 28 ff 00 32 4c 2c ac de fa 1f cc e0 ba 9e d1 a6 61 61 50 8b 07 1b 25 df 59 e8 53 fa 6f ee de df 78 e4 7e 61 64 dd ad f0 af 03 e5 19 3d 26 7b c0 fc 5a 99 85 3d 4c dd cb 64 b5 a8 c2 b2 9f 6b 92 4d 87 84 6c 3c 40 73 16 2d 81 bc 30 0b 63 be e5 d1 f4 bc ce a1 2c ae c7 cf 83 49 02 f5 0f b2 7f 9e df 80 59 10 ad 98 d4 8b b2 a0 Data Ascii: PZxG.Yb y2Dc&G\hEB\ro?}.+8?6n5oG=g8#I? bv.\O4#(xv)EiS(2L,aaP%YSox~ad=&{Z=LdkMl<@s-0c,IY
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: a6 66 ef 84 a6 a1 e2 bc a8 74 95 d0 1b f8 77 b9 16 e6 01 e9 6c 67 88 b4 bb 50 3f b2 eb 58 f0 f0 a1 e9 eb a4 82 9e a2 38 64 0a b3 a1 8e 40 40 3a d7 50 6e 64 5c 6e ab be c7 6f 7c 48 b0 3a 8f 85 30 6b 95 1d 22 eb 65 0b 11 47 bd 89 b7 e9 89 fb 27 4f 68 0a 15 35 6a 60 45 d8 1b 81 fd ce 20 e3 d9 15 9e 54 e6 5f 96 17 2b fb ce 7e 98 03 c6 ca e4 4e 17 c2 d9 bb 1e e1 a6 cd 73 78 29 1c ab 28 61 b9 1d 31 c7 f5 5c b7 e3 c6 69 75 58 d1 b0 30 c8 57 76 af 62 f9 06 5b d9 e4 b2 56 53 a8 ad 78 43 2c ac 0d a3 27 70 36 bf 3e 44 9f cb 19 33 60 32 0e 94 73 f2 de 43 c8 04 1d e8 5f 03 6b e7 df bf 85 c4 0e bf 95 2f 51 11 c3 f6 01 aa f2 16 3d d9 6f 66 bc 35 9c f1 95 55 36 68 03 d2 8d 43 42 90 a4 13 b0 27 d0 73 3f 4e 98 c7 c3 ce 87 22 68 63 99 c4 35 db 5f 14 7b 5f b2 eb fa be 74 f8 Data Ascii: ftwlgP?X8d@@:Pnd\no\|H:0k"eG'Oh5j`E T_+~Nsx)(a1\iuX0Wvb[VSxC,'p6>D3`2sC_k/Q=of5U6hCB's?N"hc5_{_t
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 9c 36 26 c9 aa 05 4c a4 b0 6d ca 92 37 07 cf 7c 67 cf 8a 1e d3 a9 6d 62 e7 16 38 06 ad 4b 2e ad 8e b2 24 9a 24 2d 11 eb e5 8e 52 56 16 9d 24 6c ba c8 de 1e 2d a5 6b 3d 9f f6 99 98 f0 bd 32 d3 d3 34 31 a1 24 b2 b4 60 eb bf 2d 4d cc db a0 be d8 a3 a6 58 d9 a6 33 42 ee bf 73 df fb 2c 6e a1 d2 b1 fa 83 b5 4d 77 f3 e3 e4 38 df ba e8 be 0a e2 b8 f8 a7 26 8a a0 07 ef 90 68 94 ba 85 05 87 32 2d b5 b1 a7 8d 10 9a 30 5c 48 3b f6 1b d7 8a fc f8 d9 79 5f 52 c0 76 04 e6 33 c7 23 e4 ac 9c f1 5d 63 af 08 de f7 fa 61 a9 25 f6 22 9d 44 67 bc 35 47 c4 22 35 ac 33 69 40 40 58 e4 2a 0d fc fc f1 52 6c 66 4e 41 7d ec b4 31 73 65 c3 24 c5 5b f9 16 a1 a1 ec bf 23 a6 9d 26 89 6a 56 44 60 ca dd ff 00 22 37 07 96 2b 7d 46 2e 45 fe 2b 49 fd 73 31 ed 2c 75 51 f6 46 f1 27 04 65 5c 57 Data Ascii: 6&Lm7\|gmb8K.$$-RV$l-k=241$`-MX3Bs,nMw8&h2-0\H;y_Rv3#]ca%"Dg5G"53i@@X*RlfNA}1se$[#&jVD`"7+}F.E+Is1,uQF'e\W
2024-05-15 22:36:57 UTC	7952	IN	Data Raw: ca 22 91 bb b6 a9 00 ee 03 72 04 0d cf 52 3d b1 4d cd 24 90 ae b4 84 e6 63 49 45 49 97 66 34 59 1c 94 95 34 eb 12 cb 57 5f 57 a3 5c 6d 7f 92 06 36 2d b0 27 61 bd cf 3b 03 81 38 50 a2 8e 28 70 ab 99 b6 67 40 0f ff 00 ca e3 a8 a7 a5 64 44 76 ac 90 3c d2 b0 fb e4 81 e1 be fb 0d bf 52 ac 0d d4 ef 6a 51 b4 b5 16 9a 42 0e ea 37 07 7f a6 18 9b 2a 2a 43 bc d1 4c 58 25 91 96 fa 4e cc a7 cb fd 30 c9 92 29 a5 b4 69 65 62 3f 97 0c 99 10 b5 8b 1c f0 99 15 82 87 de e0 81 87 b4 94 ef ed ea 62 4f ef 05 ad b0 20 9c 4e c2 8d 28 aa ea e8 ea ab b5 44 0b 00 b6 d8 1e 78 6b dd 48 24 19 58 03 74 73 ec b8 49 22 32 cc ca 18 60 75 66 28 fa 8f 9f e9 84 08 1c a7 21 3d 57 9a d3 b5 33 80 d7 f0 d8 58 6f 7c 39 22 92 00 a0 21 94 88 d7 c0 c0 5b f8 71 1b 52 5f 35 48 8e 78 99 d5 82 86 de e0 Data Ascii: "rR=M$cIEIf4Y4W_W\m6-'a;8P(pg@dDv<RjQB7**CLX%N0)ieb?bO N(DxkH$XtsI"2`uf(!=W3Xo\|9"![qR_5Hx
2024-05-15 22:36:57 UTC	6096	IN	Data Raw: 00 75 b7 a6 fc b1 30 db d9 46 e9 45 48 8f 43 30 36 16 d5 a8 82 2f fe c7 ae 21 c2 9f 21 2a 49 4d 63 f7 71 78 63 17 0a 0e e7 f1 eb fa 61 f9 e1 2e 37 29 2f a5 61 54 04 69 50 41 73 b8 1e de 67 d7 0c 92 4c 54 e8 3c 2c fe cc a6 e0 e1 a9 22 bd a9 81 23 8f 52 b3 5e e2 db e1 14 c0 a7 63 9e 5d ad 33 0b 72 b6 1e d2 4b 50 6a 6a 62 57 91 cd ef b1 36 c2 1b 9d d2 e1 49 7e cd 8e db bb 2f 3d af 82 69 0a 3a 90 32 c5 f0 b5 80 45 23 8f 0e fb df ae 20 76 3b 29 8d d3 9d f4 df fc 67 37 e6 2f 86 b2 9e 82 4d 1d 30 9d a5 66 76 24 1f 3c 20 12 26 93 b3 51 44 a0 fe f1 8d bf cd 84 40 4e 0a 06 9a 59 10 15 49 58 0b 91 88 6e a6 8d d7 34 d1 9d 53 b7 76 3e 66 27 f2 c3 ef dd 2d 91 54 30 c0 45 a4 98 e8 3f 2c a8 de 13 e4 0f 96 10 01 31 27 b2 46 65 c3 90 c3 03 4c 93 39 6b de d7 e5 88 96 8a 53 Data Ascii: u0FEHC06/!!*IMcqxca.7)/aTiPAsgLT<,"#R^c]3rKPjjbW6I~/=i:2E# v;)g7/M0fv$< &QD@NYIXn4Sv>f'-T0E?,1'FeL9kS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49917	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	424	OUT	GET /steam/apps/1672980/ss_faecee368ca05e4d08ddf7db64f154df152a3722.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 24 Aug 2021 08:42:06 GMT ETag: "6124b0de-18683" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 99971 Accept-Ranges: bytes Cache-Control: public, max-age=256990 Expires: Sat, 18 May 2024 22:00:06 GMT Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 08 00 09 ff c4 00 50 10 00 02 01 02 04 04 03 05 05 05 05 07 03 01 05 09 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 07 14 32 71 81 23 42 91 a1 b1 Data Ascii: JFIFCCQXP!1A"Qa2q#B
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: 0e ae 4d bc a2 32 8c bf 2c 8c b5 4e 69 a6 b6 66 17 3a d8 d8 1d 37 00 8e ff 00 33 d3 19 ba 89 66 71 d9 1f 95 67 49 38 36 1d 76 9c 53 54 d2 37 28 2d 0a b1 11 91 71 7d 4a 41 be fe b6 ee 30 9f 9d 96 77 7f 4a b0 ea 04 79 03 3f a2 47 9c d1 ca d2 f8 23 92 41 70 35 df c4 09 ed 8d ad 34 ec 70 a3 ca 68 cc 25 ca 96 83 26 ab a2 98 4b 59 28 a7 5d ef 1b 9d db d0 9e 9f 96 18 74 8d 7f 95 b9 2a e0 11 ca 65 1e 6b 0c 69 08 a5 92 f5 46 61 cc 57 81 64 55 03 a0 5b 8b 7c b1 47 b7 66 5d 5f 7f d5 43 9c d7 37 6f 74 d3 39 aa a2 4a 8a 79 5d 66 aa 79 e2 6d 68 6c 2c e0 d8 5f 72 35 9e a4 74 ea 36 c5 63 d3 00 ca bc 2c 49 64 99 f2 ef 6f 3c 0e d7 d7 07 ed fa a4 1a a8 92 9c d4 54 33 bd 4a c8 82 1f 78 4d 25 90 92 1e e0 0b 1b 78 40 b7 91 c3 91 34 0c 37 84 39 99 3b 9d b9 f8 f6 fe 11 b3 57 45 Data Ascii: M2,Nif:73fqgI86vST7(-q}JA0wJy?G#Ap54ph%&KY(]t*ekiFaWdU[\|Gf]_C7ot9Jy]fymhl,_r5t6c,Ido<T3JxM%x@479;WE
2024-05-15 22:36:56 UTC	2393	IN	Data Raw: 88 8e de e2 5c 00 ef 9c d2 a9 c7 ca 8a cc 5e 4c e5 21 99 e9 e3 a7 78 85 9d e3 be b2 7c ac 7a 01 f2 f9 60 8e 0f 8d bb 59 9b 52 7c d9 5a 1a e8 a9 e8 05 3a 45 05 64 c5 0d 8c a8 55 ca 91 b9 be c0 90 7c b1 48 8d 65 c7 68 0a 0b 80 15 ca 42 94 75 bc 43 48 94 7c 97 59 e9 d9 bc 26 40 d1 90 7a dc 76 27 ce fb e2 5e eb 25 e3 8f 74 81 0f 9d bb 6b 23 d5 63 2f 4a d8 60 92 96 53 02 9a 69 09 07 94 15 d0 93 ba df a8 f9 1c 58 39 a0 13 5f 4f 45 78 5a e6 82 d3 58 43 55 e5 f9 7c ee ef 55 50 b4 13 89 37 29 11 65 23 e4 0e dd ae 77 c4 92 d7 80 5b d4 21 cb 14 64 d9 34 54 13 e4 f9 3e 61 49 57 51 06 61 1d 14 74 e6 c1 f4 10 5c f6 05 6f 73 7e db 5c e0 d8 15 62 ed 55 d1 42 e6 97 34 d5 2a 8c d4 ad 00 24 5f 94 4f f8 fc b3 63 63 d7 f3 c4 97 02 ea 06 d6 71 14 56 65 89 66 75 25 58 c5 dc a4 Data Ascii: \^L!x\|z`YR\|Z:EdU\|HehBuCH\|Y&@zv'^%tk#c/J`SiX9_OExZXCU\|UP7)e#w[!d4T>aIWQat\os~\bUB4*$_OccqVefu%X
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: b2 b2 f5 23 6b b6 a8 f8 62 9b de 33 88 d5 79 8c f1 a3 3c 62 20 4b 19 34 d9 14 01 ea 46 25 e7 68 43 85 a0 bd 74 ea 5e 0d 9f 2e cd a1 fd bc ca d5 12 22 94 0e 81 e3 85 ba 00 f6 db 57 d6 c0 8d f0 8b 65 6d e0 67 f7 5a 42 33 7e 74 e2 b5 a9 28 24 5a 58 b3 0f 79 a7 65 d2 c6 de 21 a4 f7 3d 08 f2 fe 38 00 88 bc ef 38 cf d1 14 90 3c b6 98 e5 32 54 6d 35 24 6f 2d 21 1e 26 28 1a fb ed 6b e2 d2 8d ae 00 ab b4 f6 e1 0d 1d 5b 55 66 cb 52 33 08 69 4c 02 ff 00 69 06 84 7b f5 06 fd ed eb f8 e2 44 65 bb b7 36 ef d5 56 ec dd a1 73 2c c4 54 66 19 85 96 3a 89 e2 8f 54 6b 4d 20 01 bd 4d cd cd bb 91 7c 73 d8 18 1a 72 86 e7 e4 81 92 a9 d4 32 c3 99 57 96 ab ad e4 cc ab ae 19 1a 37 60 2d d1 48 16 b7 cc 63 a8 bc d2 ca 63 bc 59 3c ee ca 6d 25 5d 44 73 b5 4e 5a ca 6a 26 04 ca 80 15 72 Data Ascii: #kb3y<b K4F%hCt^."WemgZB3~t($ZXye!=88<2Tm5$o-!&(k[UfR3iLi{De6Vs,Tf:TkM M\|sr2W7`-HccY<m%]DsNZj&r
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: e5 46 96 2a 6a 78 a3 65 d2 f2 28 25 98 f7 bf 6c 55 ce 07 dd 40 8b 3e 89 be 45 1d 59 99 66 a7 44 31 c1 d5 dd 6e 16 e3 d7 ae dd 86 17 03 bf 54 cb c8 c0 05 6e f5 3a 19 23 8d be d1 98 a9 3a 41 bd bb 9f 21 f4 c2 d2 30 b4 e5 3b 0b c3 c6 16 d4 55 6d 05 2b 44 9a 9a 46 7d 00 46 e5 3e 7d 3b 79 8c 0b 73 81 f2 9e 53 61 8d 20 5f 44 c0 56 81 1a 2c 73 a4 c8 00 1b 26 e2 dd 4e e7 a7 5b 6f 84 40 76 e2 d9 05 7f 4a 22 d4 3e 5d c2 33 64 1f d1 17 46 65 ad 8e 55 20 3c 4c a0 b7 30 eb 90 9b da c3 63 73 bf 9f e9 8a bf c2 dc 5e f7 d1 1e f9 47 7c bb 1c 05 1c f4 e8 3f 4a 56 6c 83 85 cd 43 7b c5 52 c7 4d 1b 80 b1 89 77 92 41 e4 aa 7a 7a 93 f9 e3 36 59 6b 0d 5e a2 38 83 c0 2e 1f 75 65 93 24 2e 6a 22 a5 8a 28 99 08 26 0a 89 83 09 8f 6d ed f1 75 da f6 b0 c2 45 fc 12 b4 8c 2c 7b 68 8b 50 Data Ascii: F*jxe(%lU@>EYfD1nTn:#:A!0;Um+DF}F>};ysSa _DV,s&N[o@vJ">]3dFeU <L0cs^G\|?JVlC{RMwAzz6Yk^8.ue$.j"(&muE,{hP
2024-05-15 22:36:57 UTC	7952	IN	Data Raw: a6 1a cc c4 bc 54 c1 8b 88 e3 5e c7 7b 2a fd d1 8b 39 ed 8c 6d 62 04 71 cb a8 78 92 63 41 31 e2 0a aa bc a2 08 e4 a1 a4 91 b9 c7 42 ce d1 dc 2b 75 d2 17 f7 be 7b 79 60 11 b1 ae 34 f2 b4 b5 1a 89 21 00 44 db 27 af e7 55 50 a4 e0 c9 06 75 ef d9 b0 4a fa 97 bc 8d 03 b9 3b 9e 85 8f de 37 ed d3 06 93 53 e4 d9 1e 02 16 9b e1 db df e3 6a 8e e2 7a 7f 7f d7 0b a5 d1 1a 84 8f c0 63 8c 29 1b 2d 98 01 b7 6f f4 c6 29 01 7a 3b a1 41 1f 9b 70 ff 00 bf a9 97 98 16 b1 b7 57 b5 83 0b 74 23 f8 e0 b0 ce 63 c1 e1 64 eb 34 6d d4 79 db 87 7e fe ea a9 9c 46 e9 2a c5 32 98 e4 88 d9 95 b6 3b 8f f4 c6 dc 4f 0e 16 17 8d 9a 37 46 ed ae 14 42 4b 55 50 10 32 8b 10 09 3d 7b 60 82 f0 4a 5a 96 94 d9 15 4e 68 44 84 18 a9 db ef 1e ad f2 fe 78 5e 49 c3 30 39 5a 7a 6d 0b a6 a7 3b 0d 5f 55 e4 Data Ascii: T^{9mbqxcA1B+u{y`4!D'UPuJ;7Sjzc)-o)z;ApWt#cd4my~F2;O7FBKUP2={`JZNhDx^I09Zzm;_U
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 73 56 69 23 a3 96 ae 2f 77 e5 de e2 40 65 88 6d 6b b7 d7 6c 57 75 79 8b 49 37 f7 fa 26 c4 ae aa 77 08 ac eb 35 87 dd 12 77 a8 4c c5 24 87 96 1a 3d 9d 4f 62 40 fa f9 61 8d 96 0b 9a 28 a2 3d f4 dd d7 6a b5 21 68 26 95 d6 39 64 85 60 01 a5 09 cb 0a 36 1d 3b ed 6f 9e 00 08 78 00 90 0d f1 ca 4b 2e 2b 6a c4 e4 81 22 55 42 58 d9 d9 e1 16 16 d8 5b 6d ef 6e c3 cb 16 6e 29 ae 67 df 2b 9c 43 40 05 0d 97 cb ef 35 d1 c9 1c 5a 64 7d f4 25 88 00 5f 72 4f 4e 98 3f 86 48 da 72 17 35 a5 c7 21 5b 06 59 34 f4 de f4 96 58 f5 99 39 48 e7 c2 7e 5d 36 c5 1e e1 90 e3 84 f6 d3 56 10 a2 a6 9d a8 e5 a4 9e 22 ec 80 bc 32 44 a0 1b f9 1f ae 08 c2 5d 96 9c 7a aa e2 b6 94 0f ec 69 67 82 34 2a d3 47 11 2c d1 c4 02 b3 75 b8 b9 27 7d fb 79 61 60 77 3c 96 60 9f d1 07 c2 23 21 56 2b d1 45 43 Data Ascii: sVi#/w@emklWuyI7&w5wL$=Ob@a(=j!h&9d`6;oxK.+j"UBX[mnn)g+C@5Zd}%_rON?Hr5![Y4X9H~]6V"2D]zig4*G,u'}ya`w<`#!V+EC
2024-05-15 22:36:57 UTC	8048	IN	Data Raw: 1c c1 24 31 92 4a 95 2c 37 ed d6 fd b1 c5 9b 9a 2b 1f a2 14 ae b3 ca 59 11 55 78 d5 9d a4 57 2c da 14 08 ca 8b 75 04 fd 7f 0c 52 ae cd 55 57 aa 08 a5 14 b3 aa 4e 44 4b a8 4a a0 69 b8 60 14 9e a0 5f 73 6f d3 13 b4 bb 2e e8 ba c9 3c 25 b9 9b a6 98 e2 1c d0 a8 37 49 08 eb df a7 4d ee 70 c3 2e af 19 52 f3 80 10 70 e8 58 6e c0 36 a3 72 2c 76 1d b7 c1 4d a5 c9 ae 53 68 2b 58 72 88 5b 98 87 85 8f 5f 91 f4 c0 49 c2 2f 89 40 27 05 6a ab 22 8a 69 62 48 e3 1b 92 a4 12 07 99 f4 f3 c5 5a f1 78 4c 02 e7 0b e8 a5 61 13 38 f7 78 04 7a 40 27 4b 80 0f 95 bf 3c 59 c0 8c 93 76 89 8e 81 6b 53 53 17 ba 88 64 41 28 04 3c 6c 45 d9 4f ae 39 a0 11 6d 2a 49 15 45 47 54 7d fe 9a cb 46 49 03 e2 88 e9 27 d0 db 10 c2 01 ab 5c 72 38 52 29 82 9e 36 95 a2 13 d2 e9 05 c1 b0 60 dd 85 fb 6f Data Ascii: $1J,7+YUxW,uRUWNDKJi`_so.<%7IMp.RpXn6r,vMSh+Xr[_I/@'j"ibHZxLa8xz@'K<YvkSSdA(<lEO9m*IEGT}FI'\r8R)6`o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49918	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	630	OUT	GET /steam/apps/578080/capsule_184x69.jpg?t=1713943796 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 8458 Last-Modified: Wed, 24 Apr 2024 07:06:23 GMT ETag: "6628af6f-210a" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=368964 Expires: Mon, 20 May 2024 05:06:20 GMT Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	8458	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 02 03 09 00 01 ff c4 00 3c 10 00 01 03 03 04 01 03 03 02 05 03 02 04 07 00 00 01 02 03 04 05 06 11 00 07 12 21 31 08 13 41 14 22 51 32 61 09 15 23 71 81 42 Data Ascii: JFIFCCE<!1A"Q2a#qB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49919	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	419	OUT	GET /steam/bundles/40751/resfcyr673l6y9dt/capsule_616x353.jpg?t=1715792253 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 142759 Last-Modified: Mon, 22 Apr 2024 17:40:16 GMT ETag: "6626a100-22da7" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16152	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 07 04 05 06 08 01 02 03 00 09 ff c4 00 5a 10 00 01 03 02 04 04 04 03 05 04 05 07 07 09 06 07 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 32 71 15 23 42 81 91 Data Ascii: JFIFvvCCahZ!1A"Qa2q#B
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: f3 a2 b7 1d 68 b9 3a 3f 0a e5 e5 6a d6 7f 4d 4b 38 d0 5e 32 20 bd 55 61 c6 e5 29 44 15 29 87 14 6f ab 50 36 1d 06 e0 9b da f8 a8 61 1e de ab d1 88 33 6e 12 cb 9a 10 92 32 f2 90 34 db 8f 1e 14 db 11 5d b8 b3 f6 55 93 99 1b 13 13 e5 ea 34 f8 1e 15 51 13 65 24 1d c5 c5 ec 76 38 ea 22 a9 75 9d 36 17 df 1b 0a d6 b2 da 75 a8 0e 9e f8 d8 6b 58 da a6 b9 5a 6b 31 61 f2 5c 04 b9 65 1d 20 75 bf 4d f0 f2 cd d4 36 8c aa df 5a 59 70 74 24 51 9b 29 b8 94 d3 a1 b6 77 71 2d 24 6a 3d f1 74 b0 f0 a1 29 9e 15 cf f1 04 19 26 89 39 5d 61 6e 34 a4 ae e0 58 6d d6 f8 b8 db 28 14 ef 5c ee f8 6f 14 63 cb c8 2a 4b 7b ef 89 97 c6 aa 2b dc d1 26 a2 b0 c6 4d 59 b9 2e ea 4e fe d7 c2 46 86 6b ae 94 69 d2 d8 f3 9a 17 3c 75 3e 77 b8 38 b1 9d 13 4a e2 95 30 f3 ae 29 2d 17 5c 53 48 16 d2 56 Data Ascii: h:?jMK8^2 Ua)D)oP6a3n24]U4Qe$v8"u6ukXZk1a\e uM6ZYpt$Q)wq-$j=t)&9]an4Xm(\oc*K{+&MY.NFki<u>w8J0)-\SHV
2024-05-15 22:36:56 UTC	2327	IN	Data Raw: b1 9a 74 d0 6a 78 9d b8 d7 5c 8d 9e 73 85 5d e7 93 44 55 22 97 cb 0b 08 66 a1 31 6d 33 25 49 b1 53 64 11 64 ab 71 62 b2 07 6b 8c 73 ab e7 ad d8 4c ad a2 ad a7 28 98 07 a7 2f 2d 6b b3 58 e2 b7 67 fd 34 a5 20 6c 09 20 12 37 15 2f 13 aa 30 a9 f1 eb 19 d9 12 32 72 6f ce 45 36 54 f4 ce 4c e4 8b 17 0c 76 6e 48 d8 8b 10 b4 8b 9b 5b 62 70 43 76 ed 14 84 e4 05 24 ec 47 e8 44 eb 53 2f b4 52 92 e1 41 0b e4 55 99 27 9f 51 e8 6a 43 5a f1 2d 29 8c 9c f6 56 c9 6f 54 1b 61 ed 08 4d 7a 4b eb 4c 94 36 a2 4a da 69 82 55 c9 50 d9 09 70 2d 47 48 36 b1 37 c0 16 f8 16 1e cd ea af 2d 98 09 59 9d a4 c7 c4 98 f3 aa fd e6 28 f5 d9 ca a3 a2 8e 80 7d 06 ea 3e a4 d4 6d 79 b3 88 ee 15 39 98 eb 15 6a 85 3a 7c 72 87 19 ad 2c a8 bc 84 f9 9b 52 54 a4 ea d4 95 58 82 37 b1 50 26 ca 38 da ea Data Ascii: tjx\s]DU"f1m3%ISddqbksL(/-kXg4 l 7/02roE6TLvnH[bpCv$GDS/RAU'QjCZ-)VoTaMzKL6JiUPp-GH67-Y(}>my9j:\|r,RTX7P&8
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: ac 9b 49 32 44 d1 8b 2b b2 99 ed a5 20 b7 01 ce 58 43 6e b4 de a4 20 f6 52 93 e9 f4 c7 3a bd 50 4a 89 22 7f 3e b5 d0 ac d0 56 98 49 ca 63 43 1a 0e b1 ca 9a ea 39 8b 36 53 26 39 06 5d 41 c8 f2 62 2b 74 47 6d 2d e9 49 e8 50 40 ba 81 1b a4 f7 c6 cd 5a d9 38 90 b4 22 41 e7 27 e3 fa d2 d7 af f1 36 96 5a 75 c2 92 9e 40 0f 50 79 1e 06 9a 83 2d 29 49 52 54 6c ab 9b 75 29 bf 5b 1f 5b dc 93 ef 83 24 f1 a5 b9 01 d4 71 a5 f0 2a 8e d2 e5 45 9b 1c 21 6e b1 d8 8d 95 ea 92 3a 10 7a 60 77 1a 4b c8 53 6b d8 fe 4d 18 c3 cb b7 71 2f 35 ba 7e 7c c1 e8 68 a1 0e 53 15 38 71 e6 45 24 c7 78 dd 09 be e8 3f 89 27 d0 83 b1 c5 41 c4 29 a5 96 d7 b8 fc 07 d6 ba 23 2e 22 e1 b4 bc d7 ba 7e 5c c1 ea 0d 76 fb 29 8a bc 47 e9 b2 5a 5b 91 26 20 32 ea 92 37 41 26 e9 58 f7 4a ac 47 ae 34 4b ea Data Ascii: I2D+ XCn R:PJ">VIcC96S&9]Ab+tGm-IP@Z8"A'6Zu@Py-)IRTlu)[[$q*E!n:z`wKSkMq/5~\|hS8qE$x?'A)#."~\v)GZ[& 27A&XJG4K
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 47 10 57 02 33 d1 5f a9 54 c2 5a 76 54 89 06 ff 00 07 15 36 2a 4a 5b 07 cc ad 5d 49 db 0b 4d b5 ca 1e 61 41 40 a5 d2 49 00 6c 3a 9e a4 d2 a7 70 f7 d8 36 cf 15 82 1e cc 60 0d 52 07 f7 1e 64 9f de ab a5 65 80 89 8f a7 52 56 02 ba a7 a6 2f 17 2d 84 b8 a4 8d 69 b5 eb 59 5c 23 7a 6e 4b 4e 47 2b 52 09 6d cd 0a d2 a2 37 1b 1b 11 7c 27 bb 6d 62 dd cc 9a 2a 34 a5 0a 42 91 31 a1 8a 67 71 c5 3f bb 8b 53 84 ef e7 51 38 e7 25 45 7a a8 cf 9d 28 27 37 bc 6b 52 94 b6 8b ec 91 8f 56 b1 c0 52 a8 54 e9 ae b0 ec 94 c2 93 f0 89 4d d7 23 92 ae 58 df 6b aa d6 eb b7 e7 87 98 48 5a 6e 20 83 04 11 fa 8a 9d a6 96 64 c6 94 be 8d 28 d3 2a 2c 48 b9 4a 52 a1 a8 a7 ad bb d8 74 c5 86 ea d1 4e 14 ba ca b2 b8 83 20 8f a7 e7 95 3a c3 ef 5d c3 5d 2e b6 27 a1 da 7f 37 a7 cc e9 95 63 40 0d 56 Data Ascii: GW3_TZvT6J[]IMaA@Il:p6`RdeRV/-iY\#znKNG+Rm7\|'mb4B1gq?SQ8%Ez('7kRVRTM#XkHZn d(*,HJRtN :]].'7c@V
2024-05-15 22:36:57 UTC	7952	IN	Data Raw: 34 81 f2 94 5e ea fa e1 10 04 75 a5 85 2a e2 4f c6 b0 95 25 f6 dd 8e 57 ae e9 50 4a ce e5 46 c7 19 95 0d 66 b5 95 8d 02 8c 72 93 15 0c 6a 22 9c 69 eb 0d db 6c b8 7e 80 8b e0 c4 a9 20 28 2b 8e de 73 45 2d 20 03 3c 69 31 46 34 14 39 4d 5c 7f 03 5c 4b 5e 56 a2 d5 61 cb a3 b6 aa 3c 49 22 4b 95 08 ee 14 49 7d e7 06 90 da af e5 50 42 10 48 1b 6d eb 7c 73 8e d2 d9 77 ae a5 c4 ae 0c 44 70 a9 d9 6d 4e 05 21 3b 9e 7d 3e f4 46 cf 99 06 83 c5 f6 ea b9 a7 34 41 98 e4 73 33 fc dd f6 1f 28 4a 6d 64 96 88 20 a4 82 90 94 91 6e b7 20 e2 aa cd d9 c3 1d 0d db a4 15 28 78 b7 fc eb 47 aa d9 2a 09 64 2a 08 1f 87 f7 a9 b5 2d 8a 26 75 80 a8 f2 59 79 a9 ff 00 3b 61 a5 14 72 5a d9 28 4a 4e e0 8d 86 c4 7a 62 b2 f5 d3 ac 38 a5 05 4e ba f5 3b d1 25 2a 66 32 fb a3 4a 62 e1 ae 6a 6a 1c Data Ascii: 4^uO%WPJFfrj"il~ (+sE- <i1F49M\\K^Va<I"KI}PBHm\|swDpmN!;}>F4As3(Jmd n (xGd-&uYy;arZ(JNzb8N;%f2Jbjj
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 30 52 72 ad 5b 71 e3 1f e6 87 b8 4d c3 2d 3b ec c8 ce b0 06 51 20 05 99 d8 1e 19 77 26 3c a6 ab 42 13 3a a5 f0 ce bf 12 55 2a 96 1b 5e 99 53 df 48 e7 95 39 e5 53 49 24 13 74 a9 16 1e b7 de f6 c1 62 02 25 42 22 6b 0d 77 ca 78 90 65 24 0d 20 82 08 1a fa 4c 99 d3 84 57 6a 73 eb a4 43 ab d4 9b a6 37 2a 1c 18 cc cd 86 e4 87 c3 62 63 6e ba 1a 16 4a 49 52 5c be a5 5b b8 45 ef be 24 b7 51 39 bc 3a 80 0e fc 09 fa d2 ac 5a e5 21 2d b4 d3 a4 29 6a 52 24 26 72 a9 09 cc a9 9d 20 68 27 51 27 8c 54 05 cc d9 31 39 85 85 45 a3 d3 35 5e e8 89 12 96 b7 d9 79 7e 64 97 5c 42 89 05 6a 24 92 a2 45 ed 70 05 b0 be 16 85 ca 40 9e 10 24 79 9e bd 69 e2 59 61 eb 45 36 e3 8b 29 57 88 92 b8 50 d8 e5 4a 84 10 91 1a 24 70 31 35 63 72 6f 1a 68 59 06 83 94 a8 cc 3e d3 15 0a 83 62 34 77 a6 Data Ascii: 0Rr[qM-;Q w&<B:U^SH9SI$tb%B"kwxe$ LWjsC7bcnJIR\[E$Q9:Z!-)jR$&r h'Q'T19E5^y~d\Bj$Ep@$yiYaE6)WPJ$p15crohY>b4w
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 95 62 a4 2c e9 57 28 7c aa ba f6 2a b1 09 f9 53 6a 69 20 93 d3 58 fc fd e8 96 65 2b 0e 9d 07 5e 3e 5d 47 3f 4a 95 65 1e 1c e5 da f7 16 a6 e7 b8 55 e8 59 a9 89 71 16 b6 29 2e 30 dc 88 8b 6b 96 96 ac 85 82 43 a1 08 49 3a 7a f9 89 ed 85 0c db be d7 f3 d0 9f 77 48 3f 3d 29 a3 98 83 6b 64 59 93 12 67 30 3e bb f0 9a 8e d7 f8 13 12 a3 c6 9a 2d 62 9a ed 0e 1d 16 03 0d cd 5d 16 2a 74 49 4c 74 2f 52 94 00 07 5b 65 ce 5d 94 4e c0 9e d6 c0 ee e6 79 25 d4 a2 00 de 36 fd a8 e6 2f 43 4d a9 85 a8 95 ab 40 49 fc d6 95 67 c9 3c a8 79 e6 a3 29 36 f8 98 ec d0 22 24 9f 3a d2 ed d7 21 69 1d 48 f3 5a ff 00 d9 c0 a5 c0 c5 99 28 3e 25 1f a6 df ad 68 84 07 1f 4a 48 d0 0f cf d2 a8 74 e8 0d e5 05 4e 8f 35 f4 b4 19 75 4d e8 48 2b 52 82 49 01 69 09 ec 45 b7 24 6f 8b 53 2b 37 49 4a 9b Data Ascii: b,W(\|Sji Xe+^>]G?JeUYq).0kCI:zwH?=)kdYg0>-b]tILt/R[e]Ny%6/CM@Ig<y)6"$:!iHZ(>%hJHtN5uMH+RIiE$oS+7IJ
2024-05-15 22:36:57 UTC	7952	IN	Data Raw: e2 12 e4 55 2a 25 ea 85 45 f7 9e 08 0d 25 d7 d6 56 b0 81 b2 52 09 fc 20 6c 3d 31 66 05 0c b6 43 69 81 bc 0f 9f c6 8c b3 51 70 f8 89 27 9e fe 55 0e 9d 46 76 9a da 1f 09 f8 86 de f3 c7 4a ae 95 3a 80 4a 4a c1 e9 d5 27 f4 f6 c5 5a e5 e4 a9 44 93 14 ef 22 33 14 85 44 74 ae 5c da 81 88 35 ad 2d 34 b5 84 69 fc 49 fe f1 ee 30 13 6f 34 17 a6 a6 b0 96 5a cd a0 93 45 de 1f e5 f5 c3 a6 48 e4 c8 fb 41 2e 72 96 5d 6d 25 28 4a 88 3b 24 9f 9b af ee 18 ca ef 11 23 32 b2 ef a1 de 2a 17 5b 4c 19 5e 5f cf 5a 94 bf 25 88 4f 9a 54 86 a2 09 d1 98 32 1d 65 c1 a5 c4 36 a5 00 16 ab 1b 91 72 00 3d 37 c1 0c bb 9c e6 4a cc 13 a6 9a 1f 2f c9 a5 17 16 8e 10 25 44 75 80 27 f3 ad 0e 78 6b 5b 54 2a 2e 6a a8 69 46 a5 d4 06 95 b6 92 97 6c 2d a8 25 7d 81 06 de f8 b0 3e 43 8b 42 39 0f 4e 9a Data Ascii: U%E%VR l=1fCiQp'UFvJ:JJ'ZD"3Dt\5-4iI0o4ZEHA.r]m%(J;$#2[L^_Z%OT2e6r=7J/%Du'xk[T*.jiFl-%}>CB9N
2024-05-15 22:36:57 UTC	14769	IN	Data Raw: 54 07 99 14 a3 28 54 68 59 b9 f9 d1 d9 cc 94 98 d2 a3 c4 5c 96 5a 72 53 6a 32 54 9d f9 28 01 57 2b 22 e4 5a fd 30 b2 f1 c7 2d 32 2b bb 2a 0a 50 06 38 4f 13 d2 8c 6a ea dd 64 24 2c 12 74 02 47 de a1 f9 d3 31 22 89 1d b4 b0 a1 f1 0e 00 bd 2e a0 94 84 9b f7 18 77 6a c1 74 92 ad 85 0f 7f 72 9b 60 12 93 a9 e9 50 68 39 e2 43 d3 f4 4e 4b 48 8c 6e 35 b4 08 20 f6 3d 70 cc db 80 3c 3b d5 71 bc 45 65 c8 76 32 f4 a9 23 ee 48 6d 01 60 2d 29 1d 0b 89 b8 38 8d 19 66 29 ba 96 b4 89 15 c1 b9 ee 20 7d e2 0f b9 46 08 03 91 ad 13 72 a1 ef 52 b6 dd 8a bb 2d 05 49 7f a2 5c 00 a1 49 f7 0a 1f c3 1b a1 d7 1b 32 0c 54 bd ea 14 24 6f f9 c6 96 05 3c fb 48 4b d2 1f 96 94 0f 20 75 c2 a0 9f 5d 24 ee 30 41 bb 79 d8 0b 59 d3 6a d5 4b 31 a9 27 cf f4 e3 49 83 4b 0b 09 49 d3 a3 e5 d2 7a 6f Data Ascii: T(ThY\ZrSj2T(W+"Z0-2+*P8Ojd$,tG1".wjtr`Ph9CNKHn5 =p<;qEev2#Hm`-)8f) }FrR-I\I2T$o<HK u]$0AyYjK1'IKIzo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49920	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:56 UTC	432	OUT	GET /steam/spotlights/f34a3a6eedf174a39998d1f2/spotlight_image_english.jpg?t=1715274766 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:56 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 98215 Last-Modified: Tue, 07 May 2024 22:51:36 GMT ETag: "663ab078-17fa7" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:56 GMT Connection: close
2024-05-15 22:36:56 UTC	16153	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:56 UTC	16384	IN	Data Raw: fe 2a e5 bd b8 a3 09 eb ce 4a b2 7b 1c bf e2 4d 44 dc 4c ff 00 ad ce f5 3f da 4c 2e 79 88 7f b1 2b 39 93 92 cf 0f e3 23 3d f2 62 7f e5 f9 81 ec 4a e0 bb 9f 92 04 5d a7 c3 25 c3 db 3e cf 5a ab 36 2d bf b6 5d 95 a5 bd aa dc 96 86 87 52 d5 51 dc fd 06 c5 58 f7 52 a0 2f 36 7c 7f 2a d2 a0 0f 0a 68 22 c4 21 63 60 cd 45 bc 4d 79 84 a1 a6 3e e5 82 1e db 1d 66 5c c9 5a 9c 8a c9 69 2a 0b 15 ec 6b 86 0b 2f e5 51 e6 a7 37 5a 3e 7f 4e a9 26 43 5f 32 64 f4 b5 eb 65 66 b4 8c b2 94 8b a5 8a e9 ab d9 53 11 67 7c 63 8b 21 75 5e bd 72 c2 99 ad e6 d9 db eb ec f3 05 6b 0e 56 72 4c d4 bf c6 97 c7 bb 13 17 45 a2 57 ed d6 eb 75 e3 0d 58 a2 19 4f 46 20 30 2f 6d 95 9a 9e 67 57 1f 2b 8c e0 0b 12 fb 21 d1 72 7e 2c f6 25 58 d9 ca 51 32 85 45 8d cf 61 bd 72 50 6f b0 bb c5 ad 18 2e e9 Data Ascii: J{MDL?L.y+9#=bJ]%>Z6-]RQXR/6\|h"!c`EMy>f\Zi*k/Q7Z>N&C_2defSg\|c!u^rkVrLEWuXOF 0/mgW+!r~,%XQ2EarPo.
2024-05-15 22:36:56 UTC	2574	IN	Data Raw: 52 d2 b4 ec e6 3b 3e aa fc 94 18 89 6b 90 35 3f 5f d8 01 ef ee c7 51 92 56 db 17 92 d5 3d 85 48 c0 79 3c 6d 0c a6 44 23 41 bc 96 15 19 e8 ac bc 8d 56 a7 8d 72 c5 d4 ee 29 af ec c5 64 7d c2 ba 1d 31 e0 c9 8f 03 a7 bf 87 b7 df 82 ac 08 38 3b c7 0f a7 05 8e 55 c4 93 34 f2 24 8a 94 50 19 b6 12 5d 6b 54 f8 6b b4 1f 15 01 a6 55 d0 60 46 23 08 29 43 4d c7 77 bf 4e d1 98 c8 60 7f 14 65 8a 09 2a 7b 2b 82 b5 f0 9c b1 d4 66 20 82 14 22 f2 df 21 d7 fb a8 18 8e da 60 e1 84 7a 0a 54 f7 fc f4 c4 91 25 69 95 0a eb e1 cf dd 5c ea 31 1b 6d 05 6b 40 2b c6 85 b3 a7 0c b3 e7 a5 45 6a 36 9a 9a 69 9f cf da 70 55 eb a6 58 23 ee 8e 23 02 87 2d 3d bf 3e 18 8e 44 62 1c 1d 46 a0 8d 08 3c 0e 84 76 e1 6d 65 ea b2 18 06 99 0d c2 9a 1d c4 13 51 cc 50 f6 e1 9d aa 64 3f 78 92 4f bc 92 7d Data Ascii: R;>k5?_QV=Hy<mD#AVr)d}18;U4$P]kTkU`F#)CMwN`e*{+f "!`zT%i\1mk@+Ej6ipUX##-=>DbF<vmeQPd?xO}
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 52 bb c4 33 f9 2e fe 54 94 07 23 e1 2c ac a1 8b 02 3e 5a 60 53 19 ff 00 b1 52 72 f9 35 c1 18 a8 43 ec c5 6b 83 97 c8 7a 7f 45 e9 f2 dc dd 88 de 42 b1 a9 62 23 8d 4b 3b 90 2a 76 aa 82 49 02 bc aa 48 18 37 37 e7 cb 81 58 00 bc 58 9a 8c a9 9f 03 4e 74 27 25 56 38 95 af 04 62 de 3a 55 bc cd 72 ad 10 2a 9a d0 72 04 64 68 69 af 9f 66 77 46 54 32 e6 08 20 e6 28 45 41 f7 fb b0 63 95 68 7b 71 07 a8 ba 35 ba a5 85 d3 95 92 35 1e 14 96 85 81 50 34 59 00 62 40 c8 30 34 c9 80 c1 22 2f 70 c5 4c 47 dd f3 18 03 4f 7e 2c 7a 4f 4f ab 5e dc ca b1 a0 cf 36 72 00 ad 01 c8 6a 4d 32 18 8b a5 58 46 ad 7c 40 6b 89 c8 fe 24 d2 91 99 63 9e c8 d6 bb 62 8c 64 88 2a d5 91 9d 89 da db b9 93 af f5 60 9c 3c 6e a1 91 90 82 08 04 10 75 04 1c 88 23 22 08 a1 15 04 53 03 d4 fe 9a 87 cb e9 52 Data Ascii: R3.T#,>Z`SRr5CkzEBb#K;vIH77XXNt'%V8b:UrrdhifwFT2 (EAch{q55P4Yb@04"/pLGO~,zOO^6rjM2XF\|@k$cbd*`<nu#"SR
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 5c b3 15 b7 92 6a db c3 d2 00 d6 35 e7 69 e4 4a 2a c0 8b 29 51 b2 e3 f2 1d cd 1e 59 53 07 00 ce 0b 94 dd 72 85 ff 00 00 5a cc e1 7e 6a cb 6f ec 0b 66 78 61 4c a9 e9 02 de 9a 1e 31 05 b2 ad 49 1b 1b c8 64 9d e7 69 be a0 c9 02 04 71 07 3e e5 f8 dc 9d 16 63 70 bb 49 76 99 4d 55 95 fd dd b1 a9 8f 5b e9 e2 4f c8 2c 79 12 4b d2 ce c4 d0 cf 28 d0 e4 85 81 7c e3 95 e5 3b 64 2b 75 33 ea d3 85 e0 05 d7 52 b3 e3 93 38 c2 69 a9 df 97 d1 e7 74 50 67 7d 43 32 a0 28 b2 88 39 14 ce f6 41 5d 00 cd 0c f2 a1 24 86 59 46 6e ea 39 a8 44 ca bd cb e3 5c 19 90 f0 b6 5b 83 f2 86 57 8b e6 ef ae a7 9f 6f c6 b2 ae 13 30 7c 6b 3c 42 56 69 16 ca 75 6e 3b 99 e3 8e b9 8e d8 f5 93 84 39 73 ab 54 52 58 f7 a3 98 f3 d6 e7 51 68 6d 6f a9 45 c5 bc 89 47 9f 55 e3 e0 47 d8 cc c6 66 32 86 40 9a Data Ascii: \j5iJ*)QYSrZ~jofxaL1Idiq>cpIvMU[O,yK(\|;d+u3R8itPg}C2(9A]$YFn9D\[Wo0\|k<BViun;9sTRXQhmoEGUGf2@
2024-05-15 22:36:57 UTC	7952	IN	Data Raw: 32 65 34 3b 8a f6 65 63 e3 5f 55 4f 8c 63 97 98 c6 45 4d 68 27 81 87 ad a9 90 7f a7 1e 6a ca 1b 86 95 37 cc 77 31 48 ac ca fb f8 0d 21 ea f2 e8 f9 06 29 94 59 e3 35 50 2b a3 54 a5 25 8e 71 44 05 31 5b 18 44 ee 30 5e 99 83 6f 71 a0 2b f7 b5 72 6a dc 86 e2 46 16 98 3e 41 8f 8b 2e 68 eb c9 36 e8 50 6d 32 fa bc 36 d1 c9 5c 24 11 34 c6 a6 4f df 25 e5 30 86 dd cc 16 aa f7 b5 3a cb 26 d7 51 e1 19 55 07 12 f1 af 23 d2 f2 49 6e 02 59 b9 6d 8d 83 b9 1a cf 1a a2 2e 3f 8c 63 71 ec 6c eb 09 0e 87 2b 89 94 59 c8 92 f2 55 bd c4 52 4d 9c d5 40 05 22 a0 c8 87 1b 9c d6 29 91 ed 22 11 8d 5d 1c f5 23 75 6b 9d a3 57 55 fb 7a e4 1e 42 ca f0 db fc d7 0e 6d 7c 9c 3b 16 c3 6a 32 dc a7 07 ff 00 11 2d e1 3e 3c fc a1 b3 27 e0 35 19 07 23 64 58 76 32 d7 44 1c ca fa 38 44 7c fb 22 08 Data Ascii: 2e4;ec_UOcEMh'j7w1H!)Y5P+T%qD1[D0^oq+rjF>A.h6Pm26\$4O%0:&QU#InYm.?cql+YURM@")"]#ukWUzBm\|;j2-><'5#dXv2D8D\|"
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 66 59 49 18 4a 58 d0 63 b5 d2 e4 a0 97 62 35 15 8e 76 31 c3 99 15 4c f9 5c 5d 76 46 3a f2 13 b2 15 85 91 4b b3 96 60 3e b2 d0 a0 ac 95 4b 59 59 06 aa 63 1b 2e 1d 79 4b 2c c4 22 ed 99 25 c0 21 e1 93 30 64 2a 29 33 78 c7 16 bd bd a4 c6 b2 9b bb 29 15 38 b6 55 55 4b 64 4a da fb f0 fd 6a a6 2d ce 51 51 92 38 e3 da 20 56 93 57 15 a2 3a 29 1a d0 36 f7 23 bb 65 6d be 79 8a e3 17 37 b8 b9 44 2b 69 38 c4 6c fe 0d 41 89 8a 0e 2d 59 e5 05 b6 10 62 ce 18 92 3b 9d 0d 80 85 08 cc 1b 62 2e e6 f6 c5 98 cf 7e 44 41 72 84 59 13 b2 eb a2 db 76 e9 2f 2d 31 c1 46 81 36 91 60 43 20 64 3a 5c b8 52 ab 1e 72 95 1a 2e d9 49 b7 73 9e fd 04 00 b3 b8 f2 a3 5a 8c 0b 5a 8c d1 ad 46 00 21 63 51 a8 88 d4 44 46 a3 7c 11 a9 a2 78 75 94 da 63 11 c6 96 f5 65 a3 83 5a f9 f0 c9 e9 ae f3 fb bc Data Ascii: fYIJXcb5v1L\]vF:K`>KYYc.yK,"%!0d*)3x)8UUKdJj-QQ8 VW:)6#emy7D+i8lA-Yb;b.~DArYv/-1F6`C d:\Rr.IsZZF!cQDF\|xuceZ
2024-05-15 22:36:57 UTC	6000	IN	Data Raw: 69 c3 70 df 73 bc 52 b1 68 ee f9 00 74 4d ca 79 73 3c e5 2f 6b b9 6e 33 97 ca b5 79 83 73 50 cc 2a 73 69 98 c1 b8 72 a7 3c 8e 10 fd d9 fe ed 4c a2 07 b9 ae 44 cf 32 c0 72 fe 25 c9 1e e4 ad 2d b8 cb 32 e3 ee 05 e3 3f 72 dc 3b 67 c7 5c 6f 2a c1 bc 99 cf 78 bf 2c e5 09 0a c7 08 ba ec d4 63 94 36 41 8e 5e d2 15 f1 84 77 9c 78 97 bb 7a 9f 78 99 0f 32 4d c5 71 2c ef 15 66 0d 63 c2 35 b8 3c 69 ac ce 31 f9 14 24 9a ec 82 37 28 e5 25 8e ea e6 9f ba 83 48 6f 42 aa 6d 57 37 cf ae 26 f7 0d 2f 8e 23 f1 59 9f ee db db 07 19 fe 13 8d 95 93 32 1a 33 89 39 33 0c c0 47 73 f5 a2 e3 b8 c3 95 f7 cc a3 49 4b 1f d2 e9 19 4b db 42 17 6e f7 7e ee 7d 34 fe e8 fb 9d f3 ff 00 ef 9e 0b eb 6f 87 fb 1f ff 00 af ba f5 c5 f6 6e a1 c5 f2 7a 3c 87 2e c6 b0 ac cb 1e ca 30 6e 2d ce c1 71 84 Data Ascii: ipsRhtMys</kn3ysPsir<LD2r%-2?r;g\ox,c6A^wxzx2Mq,fc5<i1$7(%HoBmW7&/#Y2393GsIKKBn~}4onz<.0n-q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49922	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	690	OUT	GET /public/images/v6/icon_platform_win.png?v=3 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1169 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-491" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	1169	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49921	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	688	OUT	GET /public/images/v6/icon_platform_linux.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3133 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-c3d" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	3133	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49923	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	686	OUT	GET /public/images/v6/icon_platform_mac.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1139 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-473" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	1139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49924	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	627	OUT	GET /steam/apps/730/capsule_184x69.jpg?t=1698860631 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	339	IN	HTTP/1.1 200 OK Last-Modified: Mon, 18 Sep 2023 22:33:56 GMT ETag: "6508d054-19a8" Server: nginx Content-Type: image/jpeg Content-Length: 6568 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=91035 Expires: Thu, 16 May 2024 23:54:12 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	6568	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 01 02 03 09 ff c4 00 40 10 00 01 03 02 05 02 04 03 04 07 05 09 00 00 00 00 01 02 03 04 05 11 00 06 07 12 21 31 41 08 13 22 51 14 61 71 23 32 81 91 09 16 Data Ascii: JFIFCCE@!1A"Qaq#2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49925	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	385	OUT	GET /public/images/ico/ico_twitter.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1430 Last-Modified: Wed, 06 Dec 2023 00:00:29 GMT ETag: "656fb99d-596" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close X-N: S
2024-05-15 22:36:57 UTC	1430	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49926	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	690	OUT	GET /public/images/v6/home/logo_steam_piston.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	260	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 4512 Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: "649bb1f9-11a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	4512	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 98 00 00 00 47 08 06 00 00 00 fb aa 8e db 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 07 e2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRGpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49927	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	386	OUT	GET /public/images/ico/ico_facebook.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1161 Last-Modified: Wed, 06 Dec 2023 00:00:29 GMT ETag: "656fb99d-489" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close X-N: S
2024-05-15 22:36:57 UTC	1161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49934	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	432	OUT	GET /steam/spotlights/6cc6099ab60aa21df29b4bb7/spotlight_image_english.jpg?t=1715207848 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 44480 Last-Modified: Wed, 08 May 2024 22:37:20 GMT ETag: "663bfea0-adc0" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	16154	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 8c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 64 62 61 33 64 61 33 62 35 2c 20 32 30 32 33 2f 31 32 2f 31 35 2d 31 30 3a 34 32 3a 33 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.dba3da3b5, 2023/12/15-10:42:37 "> <rdf:RDF
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 7a 6b 1b 0e 19 4b c5 8b 0a 44 4e e5 62 a3 69 02 b5 a7 76 4b 5b 58 df 6f 3f 96 e7 e0 37 da d9 f0 1a b2 d3 22 02 d9 73 91 ee 79 03 d5 d9 f2 53 47 20 b3 2f 91 7c f4 7b 7c b9 89 04 92 cb cc 5a 35 7c c6 29 68 d5 35 6c 45 3e 7a b3 0b 8a d2 7d 06 8c 8c 36 2f 84 76 fc 25 53 b9 88 17 a4 d2 b7 30 a1 2a a3 b2 84 8f 88 1f 06 74 53 1c e9 de 29 7f ad 57 77 ef 9d a6 1f 59 6f f5 ba bc 85 2c 6f e6 d9 e4 75 db b3 61 e8 f8 a8 b2 c6 65 29 b7 86 bb cd 6b b1 42 c3 c0 7a 3e 06 b6 e9 f0 8f a7 e0 e9 8b 69 53 ba b4 38 b3 0e 8a d9 e4 b9 d8 2d b4 d4 51 38 28 d2 6a 2a 0e ce d1 52 47 bb 37 17 77 db 5a b6 e2 37 d0 a5 1e 55 c9 42 a2 7e 63 27 11 bb ea 0f 0d 3b b1 8b 13 e7 34 ca e3 4b a1 b3 8a 5f b2 7e 4a 0a 05 80 a8 2f 0e b8 e4 05 9d ef db 6d 95 af 1e 5d 5f 59 3d 61 e7 1e 50 a3 69 3b 00 Data Ascii: zkKDNbivK[Xo?7"sySG /\|{\|Z5\|)h5lE>z}6/v%S0tS)WwYo,ouae)kBz>iS8-Q8(jRG7wZ7UB~c';4K_~J/m]_Y=aPi;
2024-05-15 22:36:57 UTC	1774	IN	Data Raw: 78 41 42 b2 8b 63 66 f7 c2 0e e7 42 14 10 dc c8 11 df c3 32 f1 de f7 ca ca 8c 93 6b 8e ea da cc c5 7b 94 fc 65 a6 fe 60 24 5f 19 95 dd f6 8c fc 0e 3d 10 96 cc 27 06 58 10 26 03 85 f9 74 3e 56 66 94 95 e0 3d 88 29 aa ec 99 f0 cc d3 37 32 55 01 47 b8 70 d9 b3 89 a4 90 1b 91 bb 80 12 61 9f 75 26 00 0e 2f 62 20 3b ea 01 5c a1 a7 6a 19 da ea 92 e0 d5 dd 2a 4c 46 05 e2 52 a3 87 91 83 87 3c 32 95 19 bb 78 8d c3 81 bf 88 cc aa fc 58 95 ce 02 63 bf 32 9b 3d e9 df 6a 9f 10 68 0e 89 e2 5b f0 c1 e0 02 af 41 80 05 99 a2 dc 33 02 2c d5 fa 26 09 d9 3b 90 80 6c 8c 83 20 1a 72 49 4c 2d 8a 57 cf 88 c8 8f ec 58 02 f8 01 87 0c cd 2e b9 74 ee 4a 8b 89 f8 95 f6 62 18 63 cc f7 23 a1 cc c1 70 de da d4 c4 a8 b9 c6 f9 8a 84 f9 9f 91 61 7c c4 71 11 03 dc 3b e2 ab fa 11 70 a3 09 ea Data Ascii: xABcfB2k{e`$_='X&t>Vf=)72UGpau&/b ;\j*LFR<2xXc2=jh[A3,&;l rIL-WX.tJbc#pa\|q;p
2024-05-15 22:36:57 UTC	10168	IN	Data Raw: bb 80 d6 92 51 74 ad d2 81 3a 20 79 13 30 9e ca 42 c6 1b 8b ae 62 b5 ed 1e 3c 96 4e 33 77 02 c1 03 df 73 d3 37 16 ed 73 52 18 5d dd 9a a2 c5 6c 5a 53 f1 12 8a fc 77 40 3f ab 40 0a 80 b8 4d ee 1d a4 18 03 9c 2b 81 64 24 16 c8 6b b4 54 ec e5 cc 60 4d d2 d3 15 99 87 26 25 a7 62 14 8a a3 f8 a6 d3 95 47 0c 2b c8 8b c4 50 a0 6e 70 30 e0 99 b0 65 f2 a7 63 b3 dd b2 06 cd 47 e4 85 1a 7d a8 46 a2 5f 31 eb 5b 59 e0 65 8f ed 80 18 0c 4a 83 ad 32 81 74 df 10 91 ea 25 53 ce fe 25 ca fd a2 c6 85 cd f1 89 9a dc 29 b8 21 9c 80 96 7b cb 5b 45 b4 4a be a9 42 f3 3f 7b f1 1a 82 b0 01 dd 94 08 d5 c3 64 be ae ce 5a 5c 30 e9 25 bd b8 7e d0 d1 c6 60 7f a5 16 45 0c a6 2a 74 ab 49 8f 96 4b 38 57 ba 47 09 d6 86 3e 1a 10 f9 5c b4 df 43 2d 50 03 6d 1b 43 b1 43 f3 1f c3 4e 63 15 80 da Data Ascii: Qt: y0Bb<N3ws7sR]lZSw@?@M+d$kT`M&%bG+Pnp0ecG}F_1[YeJ2t%S%)!{[EJB?{dZ\0%~`E*tIK8WG>\C-PmCCNc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49929	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	631	OUT	GET /steam/apps/2215430/capsule_184x69.jpg?t=1715792238 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6085 Last-Modified: Wed, 28 Feb 2024 16:31:50 GMT ETag: "65df5ff6-17c5" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=584433 Expires: Wed, 22 May 2024 16:57:30 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	6085	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 01 00 02 07 08 04 05 06 03 09 ff c4 00 40 10 00 01 02 04 05 02 04 03 04 07 06 07 00 00 00 00 01 02 03 04 05 06 11 00 07 12 21 31 08 41 13 22 51 61 14 32 71 09 15 a1 d1 23 Data Ascii: JFIFCCE@!1A"Qa2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49936	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	392	OUT	GET /steam/apps/2488510/header.jpg?t=1715042344 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 51575 Last-Modified: Fri, 30 Jun 2023 14:36:03 GMT ETag: "649ee853-c977" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=379122 Expires: Mon, 20 May 2024 07:55:39 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 02 09 01 0a ff c4 00 59 10 00 01 03 02 04 04 04 03 04 06 04 07 0b 0a 07 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 32 71 23 42 81 91 Data Ascii: JFIFCCY!1A"Qa2q#B
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: b5 34 ea 5b 3c b5 a5 28 50 3e 75 e8 b6 f6 ea 37 b5 b6 c2 ad 5a cb 4a 8e a8 fa a3 11 8e 38 e2 78 09 fd 12 6b bd d7 0c 0d 65 33 81 c3 86 5c 4c 7e aa ab a9 c7 7e 83 21 2d 4d 88 eb 6e a0 80 86 d5 b1 45 fb 7b 8f 42 2e 08 e9 8b c6 45 50 77 1c 20 eb c6 35 fc aa bd d2 c2 03 c4 7d bd 68 b8 9a 94 88 85 86 80 6c be a0 90 00 b7 53 b9 fc af 84 d3 9d fd e3 8c 7a 0b af 10 dd d1 aa f9 3d 01 aa 78 8e d1 e5 eb 29 69 27 d8 9f e5 7c 14 8c d4 2e 76 31 25 72 a3 61 9b 83 a2 31 c8 c0 46 6e 33 60 86 ae 12 a2 08 b8 4e ff 00 be df b7 09 6b bd e2 f3 9f dd 28 b3 dd 0c 19 22 9a 28 8d 2a 4a 92 83 75 94 a5 08 02 c4 e9 1d 7d 87 bf 4c 2c 82 f6 b4 4f 1f 99 fa a4 01 ba e3 eb 2f b2 98 65 6e 1e d5 ab ab 66 5a e2 2c b1 74 a8 6b 41 00 a0 df 74 dc a7 63 6b 5c 10 4f 62 36 c4 2a d7 54 a8 82 d2 71 Data Ascii: 4[<(P>u7ZJ8xke3\L~~!-MnE{B.EPw 5}hlSz=x)i'\|.v1%ra1Fn3`Nk("(Ju}L,O/enfZ,tkAtck\Ob6Tq
2024-05-15 22:36:57 UTC	2860	IN	Data Raw: b4 c8 e3 1f 95 77 64 6c af 97 47 09 69 4c 98 f1 3e 36 44 14 ca 9b 55 71 21 cf 83 6c 92 ad 57 3d 15 71 a4 20 6e 48 f4 07 19 6b bb 8a fe dc f3 27 74 18 03 29 39 47 4d 49 e1 e0 ae 6d e9 52 f6 66 8c 24 89 27 87 eb c0 2a d3 3e 67 89 19 d2 be f4 b7 5b 4b 6b 4a 43 2c 30 9f 95 28 17 df e8 4d d5 ec 4d bd 31 73 67 68 db 6a 41 80 e1 99 3c fd 60 a0 d7 ae 6b 3e 4e 7a 28 db 7f ef 72 34 2c 95 b5 7d 96 12 49 04 9e 84 0f 73 b7 e5 f5 9c 7f 68 64 66 a3 8f 73 3c 97 12 14 a8 a8 5c e7 08 49 09 00 b6 7a 69 bf 4f f3 ae 7e 97 db df 0a 68 0e fd 98 f5 fa 2e 3b dd f7 8a 8f 4c a6 c9 ad 39 26 74 85 72 d9 6d a5 14 20 75 04 6a f2 fd 41 1b 9f 5c 4f a7 51 b4 40 a6 dc c9 f4 7f 0a 1b 98 ea b2 f3 94 7a fd 54 59 20 15 00 4d 87 ee c5 82 86 a6 f5 1a 73 54 b8 5f 19 0d a4 15 a0 b6 a0 46 db 85 7e Data Ascii: wdlGiL>6DUq!lW=q nHk't)9GMImRf$'*>g[KkJC,0(MM1sghjA<`k>Nz(r4,}Ishdfs<\IziO~h.;L9&trm ujA\OQ@zTY MsT_F~
2024-05-15 22:36:57 UTC	16288	IN	Data Raw: c5 41 49 a2 c3 7d b8 a5 49 60 20 92 12 49 d0 be c0 1e c0 dc 9f c3 b5 f1 da 60 d6 70 2e cf ec b8 ef d9 82 1b 92 69 c8 79 de bd 91 6b 2e 4f cb d2 be 16 6b cc aa 3a 94 5b 4a c1 41 20 da ca 04 75 48 37 f6 c4 cb cb 4a 17 94 bb bb 81 2d 06 73 23 e8 a2 5b 57 ab 41 fb d4 8c 12 21 49 62 d3 34 25 d7 9e 90 e4 89 6f 28 38 b9 04 dc ea df a7 a0 dc ed dc 62 b1 d5 66 00 10 d1 84 2b 06 32 31 26 49 d5 21 ac 3a b9 94 59 0e 15 84 a5 27 46 94 1d 8d 95 6b fd 3b 81 e9 eb b5 a4 50 68 6d 50 3d 65 ea 53 15 89 75 22 7d 66 a1 89 68 3c 37 2a 1b da c0 62 e9 55 ae 7e 1d 48 b9 6d 67 e8 76 c0 85 24 e1 e6 50 9b 9f 73 75 36 81 19 41 a5 cb 7b 4b af 2f 64 b0 d0 ba 9d 79 5e 89 42 12 a5 1f 64 9c 40 be bb 65 8d bb ee 1d 8e e8 c0 6a 4e 40 0e 64 c0 1d 53 f6 d4 1d 73 55 b4 9b a9 cf 80 d4 f8 0c 54 Data Ascii: AI}I` I`p.iyk.Ok:[JA uH7J-s#[WA!Ib4%o(8bf+21&I!:Y'Fk;PhmP=eSu"}fh<7*bU~Hmgv$Psu6A{K/dy^Bd@ejN@dSsUT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49928	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	631	OUT	GET /steam/apps/1172470/capsule_184x69.jpg?t=1715104113 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7340 Last-Modified: Mon, 22 Apr 2024 20:23:12 GMT ETag: "6626c730-1cac" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=440533 Expires: Tue, 21 May 2024 00:59:10 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	7340	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 05 02 04 06 07 08 03 01 00 09 ff c4 00 40 10 00 02 01 02 05 02 03 06 03 03 09 09 00 00 00 00 01 02 03 04 11 00 05 06 12 21 07 31 13 41 51 08 14 22 61 71 81 32 91 a1 15 23 Data Ascii: JFIFCCE@!1AQ"aq2#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49931	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	631	OUT	GET /steam/apps/2668080/capsule_184x69.jpg?t=1714968679 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7191 Last-Modified: Wed, 06 Dec 2023 03:39:52 GMT ETag: "656fed08-1c17" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305189 Expires: Sun, 19 May 2024 11:23:26 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	7191	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 00 03 01 00 00 00 00 00 00 00 00 00 00 04 06 03 05 07 00 01 02 08 ff c4 00 37 10 00 01 03 03 03 02 04 04 04 06 02 03 01 00 00 00 01 02 03 04 05 06 11 00 12 21 07 31 13 22 41 51 14 32 61 71 08 15 16 81 23 42 52 Data Ascii: JFIFCCE7!1"AQ2aq#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49930	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	631	OUT	GET /steam/apps/1145350/capsule_184x69.jpg?t=1715727000 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 8856 Last-Modified: Wed, 01 May 2024 05:08:42 GMT ETag: "6631ce5a-2298" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=519187 Expires: Tue, 21 May 2024 22:50:04 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	8856	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 00 03 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 08 00 01 02 09 ff c4 00 58 10 00 01 03 02 05 02 04 02 04 06 0b 06 17 00 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 14 41 51 22 61 32 71 81 d3 09 15 16 Data Ascii: JFIFCCEX!1AQ"a2q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49933	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	405	OUT	GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	265	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 161 Last-Modified: Fri, 05 Jan 2018 22:31:55 GMT ETag: "5a4ffcdb-a1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 0c 08 06 00 00 00 80 d0 86 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 43 49 44 41 54 78 da 62 fc ff ff 3f 03 b5 00 e3 08 36 ec d8 91 c3 fc 40 ea 00 10 1b e0 d0 b7 c0 ca c6 36 91 68 97 e1 31 10 ab 41 04 bd 89 c5 40 9c 06 11 15 66 48 06 5e c0 67 d0 48 4f 1a e4 02 80 00 03 00 23 ae 37 e9 64 d5 5d 17 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<CIDATxb?6@6h1A@fH^gHO#7d]IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49932	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	631	OUT	GET /steam/apps/1203220/capsule_184x69.jpg?t=1715253758 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 8542 Last-Modified: Tue, 23 Apr 2024 11:04:58 GMT ETag: "662795da-215e" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=590232 Expires: Wed, 22 May 2024 18:34:09 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	8542	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 07 04 05 06 08 01 02 03 09 00 ff c4 00 3b 10 00 02 01 03 03 03 02 04 04 04 04 06 03 01 00 00 01 02 03 04 05 11 00 06 12 07 21 31 13 41 08 22 51 61 14 15 32 71 23 42 81 91 Data Ascii: JFIFCCE;!1A"Qa2q#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49935	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	398	OUT	GET /public/images/v6/home/background_spotlight.jpg HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	270	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 11100 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-2b5c" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	11100	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 5a 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyZ+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49937	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	472	OUT	GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_mobile_english.jpg?t=1713912919 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 55032 Last-Modified: Tue, 23 Apr 2024 13:37:43 GMT ETag: "6627b9a7-d6f8" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	16154	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 66 1f 69 16 b7 5d a3 21 67 35 a6 e0 f3 74 6d 2e c9 c9 59 c7 e2 71 11 6d 19 3a bb ec f9 ac 3d 3d 8b 6d 31 eb 50 e4 b2 d0 ea 78 51 b3 e5 6b 6e d9 0c ae 1b 0b 6e ce d7 8f c7 e5 73 79 6c 9e bf 91 ec b9 e7 c3 6c f1 e6 71 5a fd fd ce 66 ea 58 3d ca 77 ea d4 f2 f9 66 ea bd 79 95 96 ee 23 50 d8 2f db d9 6b e5 b3 f9 3c a6 ad 4b 35 51 9a dd bd 9f 3e 7a eb 70 c8 db bd af e5 76 2c d4 9a 4d 0c bd 61 eb 52 47 42 60 c8 17 8f bd ca fb 88 cd c9 12 f0 04 aa 39 b9 4d 3c 0b d5 7e ea 38 d3 cb 69 0e 19 45 80 b4 06 8f 5e e6 a1 10 11 e0 44 da 7f 5b 6e 34 70 b0 dc bb fb a3 69 da ac b7 17 b9 76 4e c1 4f 3d 6b b8 5a 5b 6b 3b 89 bb 4f 27 4e bc 55 e0 d9 64 7e 07 6c dc bf 47 9a 6d e3 30 63 d7 f3 33 cf 25 2d a3 32 32 fa 7b e1 b3 ae c3 9f c2 1c 75 2e df ff 00 53 ab d7 d5 b1 f9 2d d0 ea Data Ascii: fi]!g5tm.Yqm:==m1PxQknnsyllqZfX=wfy#P/k<K5Q>zpv,MaRGB`9M<~8iE^D[n4pivNO=kZ[k;O'NUd~lGm0c3%-22{u.S-
2024-05-15 22:36:57 UTC	2134	IN	Data Raw: 75 d6 88 bf da 2b db 42 85 b8 d0 d3 5e 66 b8 e9 40 68 48 ae b1 0b 08 ed ab da 8c 52 ea 92 e8 41 f1 a6 e8 1d 20 b7 5c 75 26 d9 3d 8e 64 68 54 29 d4 9b 70 fc d5 3c 7e 99 03 a8 91 cb 9d 2b fe 89 ac 39 7a ec a1 80 90 7b ea 29 e2 60 56 64 0d a7 b6 a5 20 70 3f df a0 7d 83 95 69 ad 69 a5 1e aa b5 29 26 c7 c2 95 e3 3e 7e 04 f8 d4 dd bb bc 4e 11 23 5f 53 06 57 36 1d 3c d6 e7 c2 a4 da bb 67 21 03 62 b1 f9 8c 83 67 5b 11 c0 6b c6 a4 95 b3 e1 cc 82 73 73 1c 89 a2 fb 41 5b 54 cf b9 3a 64 c3 94 96 11 0f 85 74 3c 2a 0d af 79 df b2 21 c4 c0 b3 6d fd 24 2b 06 51 61 ad b9 5e a3 c9 da 37 e9 37 cc 5b 08 73 70 a6 b1 26 3f 18 ed a8 36 1c 0d 29 da 5f 21 d7 30 7f e3 b8 44 90 cb 23 82 cd 75 e5 62 6b 75 ec ed df 1f 36 6d 81 50 4b b3 65 3a b3 f4 13 af 45 ed c4 71 15 8f 90 cc d9 52 Data Ascii: u+B^f@hHRA \u&=dhT)p<~+9z{)`Vd p?}ii)&>~N#_SW6<g!bg[kssA[T:dt<*y!m$+Qa^77[sp&?6)_!0D#ubku6mPKe:EqR
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 87 fc 47 f7 ae 17 cc f6 5f fc 3c 6d 91 ef 18 d8 ec b7 5c de e4 dc 24 f9 4d 93 0d 7f 94 67 63 25 c7 c2 51 4d 77 cc 92 a8 59 24 da 3b 7d a4 51 a8 0c 76 ac 62 40 f6 5e be a7 1b 58 1e c9 3f ff 00 25 89 58 bd a7 de dd d2 bd f3 d8 3b cf 78 b6 c1 b8 ec 79 d8 78 a9 24 18 99 39 a7 11 1f 1a 68 22 89 c3 44 18 30 0c 58 35 ac 46 b7 1f 46 b2 3b 43 02 0d a3 64 fa 87 89 97 dc 6d b3 e3 28 8e 1c 6c c9 30 b7 1c 7c a1 12 2d 82 ac 8f 0f a9 61 a0 2c 40 b0 b0 ae f7 dd be 8d 7d 4f c7 d8 fe 99 66 e5 c4 dd a5 b5 3e e7 8b 03 43 00 c6 89 5c 18 e4 c5 76 5b ca 1c ea c6 be b6 fd 64 fa d7 92 3b bf be fe 94 40 16 6d c7 2c 47 37 fe 33 24 92 e2 3e 62 f4 a8 52 f0 c3 86 e9 19 00 5b a8 30 d4 03 5b c7 74 f6 bf d4 7c be ca ed b8 b7 09 4f 6d f6 8e 04 18 c7 0e 0c 38 e4 3e 8c 73 a4 b1 39 99 ca 5b Data Ascii: G_<m\$Mgc%QMwY$;}Qvb@^X?%X;xyx$9h"D0X5FF;Cdm(l0\|-a,@}Of>C\v[d;@m,G73$>bR[0[t\|Om8>s9[
2024-05-15 22:36:57 UTC	3976	IN	Data Raw: e3 e8 6f 93 c0 28 f3 64 c8 3f 08 d1 88 ea d6 dd 23 8e 95 0f 73 6f 51 c9 0e d3 1e 6e cf b8 19 95 4b 13 8a 98 b0 41 24 8a a3 53 d2 d1 be 83 8d ab b5 23 ec 9c b9 77 b5 c2 c5 93 1d e5 5c 79 a1 eb 9f 22 55 e8 8d 12 64 47 63 a7 e8 db 51 6b d7 64 c6 e3 a5 e3 d8 ba 5d 78 d8 89 98 1e 15 b0 76 ef d6 4e e9 dc 37 1d ba 53 0b b7 70 47 93 3e e0 a9 87 3b 05 95 f1 db 2c 2b 0e 92 b6 71 d3 71 6b f4 b6 97 da f6 cd a1 12 3d ab 6f c4 87 1f 6d 44 6e a5 10 44 81 63 b3 5c df ca 06 bc eb fd ae dc f0 65 c9 db 64 dc a1 dd f1 9b 8f af 8b 32 04 9b d2 26 c0 b4 64 ba 80 4f 10 39 54 fd cb d8 dd d5 99 bf 6e 3d cd b9 e6 ee 3b de df 93 89 26 3a 62 7c cc 86 60 a8 d2 45 1f 57 99 c8 d0 b7 0a fa 39 d8 d8 92 9f 98 de bb 7f 69 dc 77 38 d4 8b fc b6 3e 1c 4b 0a 30 e3 67 94 96 1e d8 eb b2 b6 e9 3b Data Ascii: o(d?#soQnKA$S#w\y"UdGcQkd]xvN7SpG>;,+qqk=omDnDc\ed2&dO9Tn=;&:b\|`EW9iw8>K0g;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49938	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	392	OUT	GET /steam/apps/2194530/header.jpg?t=1712738249 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Fri, 15 Dec 2023 07:53:29 GMT ETag: "657c05f9-9786" Server: nginx Content-Type: image/jpeg Content-Length: 38790 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=390057 Expires: Mon, 20 May 2024 10:57:54 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 01 02 09 00 0a ff c4 00 48 10 00 01 03 02 05 01 06 03 06 03 05 07 03 03 05 00 01 02 03 04 05 11 00 06 07 12 21 31 08 13 22 41 51 61 14 71 81 09 15 23 32 Data Ascii: JFIF,,CCH!1"AQaq#2
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 09 c1 f5 c5 35 f0 77 7b df e6 4f 99 1b 22 d3 72 2d 3a a8 d4 24 ad 6e 48 79 c9 4f be e7 55 ba ea ac 07 fd 2d b6 94 8f 5d 97 ea 4e 3d 0a dc f0 2d 35 b0 cf cc 35 76 c4 89 ec 3e db 65 b4 ba a0 92 a0 0d 8a 94 02 4f 3f 27 3f 6c 31 14 d1 19 e7 05 50 6b 31 ea 54 36 1f 60 77 c1 49 92 15 25 0d a8 ad 60 80 12 a5 11 6d 80 93 c5 f9 23 d3 14 dd ec ca e9 6d 6e 42 51 34 23 3c 2d c5 c6 65 9a 6c a8 48 49 68 bc a9 a8 d8 f2 09 50 3e 1e 78 29 28 e3 a8 28 f3 1c e1 6d 36 04 63 4f 72 7e d2 6a 4d 03 24 51 1b cb d5 25 ae 3c e4 b6 84 bb 3e 34 ad 85 4e 6d 00 a8 24 12 a0 49 f3 3b 89 e2 f8 4e 47 35 ee 1d 1c 50 8b 8e fb 8e 1a 58 9f 43 af 7c 3b 19 8e 41 8e b5 1e e5 e2 0b a0 73 d1 e6 94 6e 3f bc 38 ff 00 23 84 fa 90 c9 42 35 ee fe 82 c6 67 ad d5 68 01 a9 55 26 db 93 11 47 ba 53 8c 10 4a Data Ascii: 5w{O"r-:$nHyOU-]N=-55v>eO?'?l1Pk1T6`wI%`m#mnBQ4#<-elHIhP>x)((m6cOr~jM$Q%<>4Nm$I;NG5PXC\|;Asn?8#B5ghU&GSJ
2024-05-15 22:36:57 UTC	2291	IN	Data Raw: 12 c7 01 c4 92 d4 60 7f bc 79 57 d0 7d 71 14 85 39 a4 56 8d 46 d5 1a fe a3 4c 4b d5 79 20 b2 d9 3f 0f 05 81 b5 96 af e8 3c cf f3 1b 9c 0d 99 e5 26 f9 13 72 e5 46 05 0d af 8a 93 dc ad d5 20 2e ee 32 97 49 24 9b 25 21 40 f4 00 1e 9e 7e d8 5d 75 72 14 1c 60 ac 72 d2 ea 59 77 50 9d 31 e5 c6 8d 15 e5 10 d7 de 2c c5 4b 12 23 12 6c 16 a0 80 03 88 07 a8 20 9b 74 20 e0 25 17 04 e5 0f b0 e8 4b 1e 67 d3 3d be 35 ba fd c6 95 23 2a d4 51 a8 2c d1 0a 63 b5 52 8f 31 4c ad a9 42 ed 29 6d 92 54 92 2c 77 03 b4 80 2d cd c6 33 ea b3 c2 1a 49 e5 95 f4 d7 6e 77 da ff 00 12 f4 9a 7c 92 d5 c7 0a ae a4 fb f1 b6 f5 f8 0f 59 32 fe 32 5b ce ef 52 c2 d4 48 52 fa 91 7e 2f f4 b7 1e 58 6e 1c 6b 0e 28 e3 4a a9 76 39 da 89 bc b9 65 96 4e db 67 93 62 93 83 32 81 2d 43 17 61 45 0c 4a 5a b7 Data Ascii: `yW}q9VFLKy ?<&rF .2I$%!@~]ur`rYwP1,K#l t %Kg=5#*Q,cR1LB)mT,w-3Inw\|Y22[RHR~/Xnk(Jv9eNgb2-CaEJZ
2024-05-15 22:36:57 UTC	4072	IN	Data Raw: ec 39 b1 ea 31 ac b8 a5 71 7c 33 cc 65 c1 3d 3c de 2c b1 a9 2e 50 96 b7 8a af 73 7c 3c 45 81 15 fa fe d8 b2 ac 4b a5 f8 1d 9c 8f 47 8e 22 04 3c 5c 3b 6d 88 10 12 9c b8 38 80 b7 62 b6 46 ca cf 67 9c e5 45 cb cc 38 19 72 a5 2d b8 dd e9 e8 da 54 7c 4a fa 0b 9f a6 03 24 d6 38 39 be c1 61 c4 f3 64 8e 35 dd 97 0f b5 d6 a9 e5 3d 2f d2 2a 7e 8a 64 c7 5b 72 48 65 b6 a6 a1 a5 05 7c 33 09 56 e5 77 8a f3 71 c5 72 47 5b 12 4f 51 8e 16 87 0e 4c d9 9e a7 2f f3 fe 8f 53 e2 9a 9c 5a 6d 3a d0 e0 fa fc 17 ee ca 32 b5 86 d2 54 4d 80 c7 a4 47 8c 11 e7 54 af 70 3a 62 8a 13 4c 95 9f d5 6c 5d 15 44 d1 a8 b9 06 52 28 cc 57 a0 29 35 3a 61 17 f8 a8 e2 fb 47 98 58 ea 92 30 11 95 9e cb c5 bc 2f 24 31 2d 4e 3f 6a 1e ab f5 f4 23 14 aa e3 d7 06 78 e3 3b b1 38 2d 70 65 7f d9 9c 52 2e c0 Data Ascii: 91q\|3e=<,.Ps\|<EKG"<\;m8bFgE8r-T\|J$89ad5=/*~d[rHe\|3VwqrG[OQL/SZm:2TMGTp:bLl]DR(W)5:aGX0/$1-N?j#x;8-peR.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49939	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	399	OUT	GET /steam/apps/578080/capsule_184x69.jpg?t=1713943796 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 8458 Last-Modified: Wed, 24 Apr 2024 07:06:23 GMT ETag: "6628af6f-210a" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=369040 Expires: Mon, 20 May 2024 05:07:37 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	8458	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 02 03 09 00 01 ff c4 00 3c 10 00 01 03 03 04 01 03 03 02 05 03 02 04 07 00 00 01 02 03 04 05 06 11 00 07 12 21 31 08 13 41 14 22 51 32 61 09 15 23 71 81 42 Data Ascii: JFIFCCE<!1A"Q2a#qB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49940	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	465	OUT	GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_static_english.jpg?t=1713912919 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 71723 Last-Modified: Tue, 23 Apr 2024 13:35:01 GMT ETag: "6627b905-1182b" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	16153	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: f6 f8 5b 0a 56 82 3e d3 72 d7 16 1a b3 09 19 9e f8 ef 01 0c 7c 33 79 36 ec ef c5 3a 4e 7b af c8 42 8e ab 9e 6e ca 20 6b de 64 2e 01 56 ed 24 36 0f db 93 69 20 6b e4 25 3e 44 e2 4f 4a 70 17 13 0f 62 cc 22 d0 88 c2 28 84 11 08 2c af 25 e4 42 85 a5 e6 3a 48 51 62 fd a3 11 ae c0 9d 5d 85 3e a3 4a 8a 2f b4 a2 97 20 39 64 ac 65 5a a6 24 16 eb 3e 37 78 a0 98 82 28 84 e1 d5 c3 28 82 87 f0 71 f5 61 33 a9 eb 80 11 00 a7 33 29 8c 21 05 84 42 25 35 c8 82 8c 45 c2 46 16 a3 d0 22 13 86 3a b7 ab 7e 5a 13 02 68 c2 90 12 83 08 36 1b e5 1c d1 f8 4a 0a 71 ec c7 21 f0 41 2a c4 79 12 b7 b1 1d c0 0e 1a d9 7c 7a 07 27 37 22 95 9c 09 a3 61 06 cf 8b 60 61 7b 9e 03 5b 66 b3 66 36 a1 11 b9 91 19 16 04 4e 8e 43 82 e4 f3 94 7e 4a 86 23 21 8a 20 c6 95 20 ec 41 4e 69 58 44 2c 2f e4 8a Data Ascii: [V>r\|3y6:N{Bn kd.V$6i k%>DOJpb"(,%B:HQb]>J/ 9deZ$>7x((qa33)!B%5EF":~Zh6Jq!A*y\|z'7"a`a{[ff6NC~J#! ANiXD,/
2024-05-15 22:36:57 UTC	2538	IN	Data Raw: 7c 64 23 f0 7a dd a3 58 0d 8e 91 f2 3d ba 5d 8c 6e d1 71 bd dd c2 ee 3f 3d 68 69 71 a9 e7 95 bf b6 d2 57 db 72 88 ec 4b ad b0 d8 f5 db 58 ed dd bd c9 b8 f4 f2 d7 b1 13 a3 73 c1 0b 01 01 84 e0 08 95 aa 41 82 ec 13 af 79 6b a5 fd 41 bd 9d 53 fd 5a 5d cf 16 d3 49 7a 4b 8e 34 22 e0 f5 e2 6c ef dc 7e f2 96 d3 57 1d 57 d2 97 c2 87 3b 24 c5 14 8f 73 aa b6 7a 37 b9 34 93 4f 4a 46 cb 66 6f 5d ca 28 ef a8 ed 6e 51 bb eb 7e 42 c8 4f 0e b9 3e ea 8f bd 78 f9 7d 06 3c bc ed b5 2c dc d2 f6 77 18 6c f0 fe 2e 7b 66 7a f3 f0 2f 63 6d b4 43 fe 2f 6f 6b b2 dd d0 b3 c6 78 f7 19 66 de e3 b9 4f b9 a9 fa 37 5b f8 f1 f9 11 5b dd 9a 9b d7 29 6b 29 f3 df 74 71 c3 ac f7 0f ba 2e 7b 8b 7f b4 de d5 a7 55 cd f1 52 b5 c4 c3 d9 da 5d 7c bb 5d 8f 1d e2 d5 78 ee 98 6f 68 72 8a da 9b 5b fe Data Ascii: \|d#zX=]nq?=hiqWrKXsAykASZ]IzK4"l~WW;$sz74OJFfo](nQ~BO>x}<,wl.{fz/cmC/okxfO7[[)k)tq.{UR]\|]xohr[
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 95 6a d6 a3 5b 90 70 3e 17 ca a6 d3 68 74 9c 76 a6 e7 43 a4 e4 55 34 1c 0b 85 71 59 b7 3c 47 89 f2 29 b7 3c 77 8f f2 38 68 6b e8 6a a9 ec 75 ba ed bd 3d 57 ad 7d 7d a3 b9 77 87 71 1d 96 ce fe be 86 d2 9c 7c 1b 85 43 ac a9 aa d5 eb e8 ee 78 9f 15 e4 6f db f0 fe 25 c8 24 af eb 7f 5d d4 b1 bb e1 5c 3f 92 c9 a6 e3 fa 2e 39 57 84 fa fd fc 7f 91 ed b4 ba 6d fd 4f f1 7f ad 15 4a 75 35 f5 6a 70 ee 23 43 6b b3 d4 ea f7 74 bf c5 fe b4 56 b8 6f 10 bb ad b1 c7 78 fd bd 46 9f 45 a3 e3 d5 a8 f1 1e 29 ac d9 aa 7c 57 8c 6b f6 97 b8 af 17 d9 ec f6 7a 9d 5e ee 96 ab 4f a9 d1 53 a3 c4 78 a6 b3 67 37 ad 7d 75 66 6d 57 0f e2 5a 15 a5 e2 bc 63 8d ba af 0c e1 f4 36 9f e2 ff 00 5a 2d 2f 17 e3 3c 6f e8 bf c6 2b 45 b2 91 95 aa 8e 43 c8 a4 6d 6d 86 cb f6 ad 1b c9 5d 67 43 6c 5a 8e Data Ascii: j[p>htvCU4qY<G)<w8hkju=W}}wq\|Cxo%$]\?.9WmOJu5jp#CktVoxFE)\|Wkz^OSxg7}ufmWZc6Z-/<o+ECmm]gClZ
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 1e 07 b2 5e e4 b1 d7 c6 c6 bd 47 9c 7c 6c 7a 42 9e 16 e4 6a 33 14 fa 83 f1 00 7f 6d 46 72 02 b3 01 6b 9a 5e 92 07 ba 8b 92 1a d6 e9 34 ea c2 ee a2 e6 33 ad c7 0b 8a 06 20 bd 6c a1 ee 34 0a 39 f3 d6 8f 49 12 c4 ba 9d 2d 7a ea 29 22 db e6 20 5c 7d b5 d1 d6 1c 11 a5 bf 65 63 e5 21 b2 b7 c3 2a ff 00 8a 4d 47 9f 8d ac 13 8f e2 28 d4 5c f0 34 bb 66 4c bf c2 7b 1c 7b f9 f2 a6 91 18 1e ad 6d e5 5b c4 64 5c 80 64 84 fe da 91 47 00 68 d1 07 95 72 ae 55 c4 57 2f 6f 9f b2 df 75 71 06 fa 5b d8 34 f6 83 ca b9 d1 d7 fc 35 cf f4 3c a8 56 9e cb de 8f 42 12 1b 4b 1a 32 c7 87 23 46 05 fa c0 36 34 56 40 51 97 42 0e 95 62 78 7b 07 b3 85 0a 34 df 67 b3 8d 0d 68 7b 35 ad 3c 69 47 02 35 a5 37 b5 27 c4 78 50 3d 7c 69 19 98 5e c3 f6 53 58 dc 13 44 5a d7 e1 5d 64 d8 9f d9 51 44 fa Data Ascii: ^G\|lzBj3mFrk^43 l49I-z)" \}ec!*MG(\4fL{{m[d\dGhrUW/ouq[45<VBK2#F64V@QBbx{4gh{5<iG57'xP=\|i^SXDZ]dQD
2024-05-15 22:36:57 UTC	3880	IN	Data Raw: 2d a8 ac 79 25 72 63 ea 00 8f 7d 47 93 12 82 65 8e fd 54 22 8b d4 78 af 60 b6 25 45 cd 28 dd 67 8b 1e 52 2e e1 cf 49 1f 79 a2 df d4 b1 ee fa 74 f5 0d 6d f6 d6 47 72 6c 73 46 fb 67 75 2a e7 7f 0a dd 29 92 a0 24 eb a7 8d 83 7f 9d 50 23 1e b4 96 dd 42 f5 14 b1 1f c9 e7 f4 fc 72 c7 60 ae 3f f1 00 d4 d1 84 60 9c a4 65 ba 4d 8e a5 92 de 66 c2 df 6d 0f ea 58 4d 8d 9d 8a 08 c3 dc 10 2f a8 85 87 02 09 f8 94 f3 07 f5 1a 57 fe ab 8f 87 1d ec f2 a4 6e f7 03 9d ae 3e eb d3 26 28 fc d6 71 5b 4b 9d 20 1d 6c 48 e0 3f 74 79 56 3b 5e f2 2a 91 29 1e 37 a8 ca 13 d7 72 8c 3d f6 a5 93 ab 46 22 d5 02 ab 91 d2 46 b5 1a b7 e0 1a 0e 57 02 b3 fb 67 f3 b2 ed 7b ac aa 64 d9 37 a8 02 19 b1 a6 e2 3a 3a c3 0b 37 03 71 fa eb 7d d9 b7 7e de c7 df 31 61 78 f1 e0 ed d4 3e 94 f3 e4 c4 40 69 Data Ascii: -y%rc}GeT"x`%E(gR.IytmGrlsFgu)$P#Br`?`eMfmXM/Wn>&(q[K lH?tyV;^)7r=F"FWg{d7::7q}~1ax>@i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49941	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	691	OUT	GET /public/images//v6/icon_cluster_controls.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=5iodj17TwVxP&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1283 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-503" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	1283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1b 00 00 00 15 08 06 00 00 00 b7 de 95 25 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR%tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49942	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	615	OUT	GET /public/javascript/applications/store/shared_english-json.js?contenthash=99f4a06d3498b0736099 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 Last-Modified: Tue, 14 May 2024 22:55:23 GMT ETag: "TznJS9p0z8rU" Strict-Transport-Security: max-age=10368000 Content-Length: 186966 Cache-Control: public, must-revalidate, max-age=173948 Expires: Fri, 17 May 2024 22:56:05 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	16016	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 37 35 5d 2c 7b 34 34 39 36 35 3a 65 3d 3e 7b 65 Data Ascii: /** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/"use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[7975],{44965:e=>{e
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 62 65 74 61 2c 20 73 65 61 73 6f 6e 2c 20 6f 72 20 44 4c 43 20 72 65 6c 65 61 73 65 20 73 63 68 65 64 75 6c 65 73 2e 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 45 76 65 6e 74 54 79 70 65 47 72 6f 75 70 5f 73 61 6c 65 73 22 3a 22 53 61 6c 65 73 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 45 76 65 6e 74 54 79 70 65 47 72 6f 75 70 5f 74 74 69 70 5f 73 61 6c 65 73 22 3a 22 49 6e 63 6c 75 64 65 73 20 64 69 73 63 6f 75 6e 74 73 2c 20 70 72 6f 6d 6f 74 69 6f 6e 73 2c 20 61 6e 64 20 66 72 65 65 20 74 72 69 61 6c 73 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 47 61 6d 65 53 6f 75 72 63 65 5f 72 65 63 65 6e 74 22 3a 22 52 65 63 65 6e 74 6c 79 20 50 6c 61 79 65 64 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 47 61 6d 65 53 6f 75 72 63 65 Data Ascii: beta, season, or DLC release schedules.","EventCalendar_EventTypeGroup_sales":"Sales","EventCalendar_EventTypeGroup_ttip_sales":"Includes discounts, promotions, and free trials","EventCalendar_GameSource_recent":"Recently Played","EventCalendar_GameSource
2024-05-15 22:36:57 UTC	1878	IN	Data Raw: 65 6e 74 20 6d 75 73 74 20 62 65 20 70 75 62 6c 69 63 6c 79 20 76 69 73 69 62 6c 65 20 74 6f 20 62 65 20 61 64 64 65 64 2e 22 2c 22 45 76 65 6e 74 52 65 70 6f 73 74 5f 44 69 61 6c 6f 67 5f 54 69 74 6c 65 22 3a 22 52 65 70 6f 73 74 20 45 76 65 6e 74 22 2c 22 45 76 65 6e 74 52 65 70 6f 73 74 5f 44 69 61 6c 6f 67 5f 4f 4b 22 3a 22 52 65 70 6f 73 74 22 2c 22 45 76 65 6e 74 52 65 70 6f 73 74 5f 44 69 61 6c 6f 67 5f 44 65 73 63 22 3a 22 52 65 70 6f 73 74 69 6e 67 20 69 73 20 72 65 66 65 72 65 6e 63 69 6e 67 20 74 68 65 20 65 76 65 6e 74 20 69 6e 20 74 68 65 20 6e 65 77 73 20 68 75 62 20 69 6e 20 74 68 65 20 74 69 6d 65 6c 69 6e 65 20 6f 66 20 74 68 65 20 63 68 6f 73 65 6e 20 67 72 6f 75 70 73 20 62 65 6c 6f 77 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 Data Ascii: ent must be publicly visible to be added.","EventRepost_Dialog_Title":"Repost Event","EventRepost_Dialog_OK":"Repost","EventRepost_Dialog_Desc":"Reposting is referencing the event in the news hub in the timeline of the chosen groups below. The following a
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 56 61 6c 76 65 41 70 70 72 6f 76 61 6c 5f 41 64 6d 69 6e 5f 54 6f 6f 6c 74 69 70 22 3a 22 4d 61 72 6b 69 6e 67 20 74 68 65 20 70 61 67 65 20 61 73 20 61 70 70 72 6f 76 65 64 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 74 68 65 20 70 61 72 74 6e 65 72 20 74 6f 20 70 75 62 6c 69 73 68 20 74 68 65 20 73 61 6c 65 20 61 6e 64 20 6d 61 6b 65 20 69 74 20 6c 69 76 65 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 53 61 6c 65 56 61 6c 76 65 41 70 70 72 6f 76 61 6c 5f 52 65 71 75 65 73 74 5f 42 75 74 74 6f 6e 22 3a 22 52 65 71 75 65 73 74 20 52 65 76 69 65 77 2e 2e 2e 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 53 61 6c 65 56 61 6c 76 65 41 70 70 72 6f 76 61 6c 5f 52 65 71 75 65 73 74 5f 41 70 70 72 6f 76 61 6c 22 3a 22 52 65 71 75 65 73 74 20 52 65 76 69 65 77 22 2c 22 45 Data Ascii: ValveApproval_Admin_Tooltip":"Marking the page as approved will allow the partner to publish the sale and make it live","EventEditor_SaleValveApproval_Request_Button":"Request Review...","EventEditor_SaleValveApproval_Request_Approval":"Request Review","E
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 2c 20 74 68 65 79 20 77 69 6c 6c 20 67 65 74 20 61 20 70 72 65 73 65 6e 74 65 72 20 62 61 64 67 65 20 6f 6e 20 74 68 65 20 53 74 65 61 6d 20 62 72 6f 61 64 63 61 73 74 20 74 68 61 74 20 61 70 70 65 61 72 73 20 6f 6e 20 61 20 53 74 65 61 6d 20 73 61 6c 65 20 70 61 67 65 2e 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 53 74 65 61 6d 41 63 63 6f 75 6e 74 5f 61 64 64 6d 65 22 3a 22 41 64 64 20 6d 65 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 53 74 65 61 6d 41 63 63 6f 75 6e 74 5f 61 64 64 66 72 69 65 6e 64 22 3a 22 41 64 64 20 61 20 66 72 69 65 6e 64 22 2c 22 45 76 65 6e 74 45 64 69 74 6f 72 5f 53 74 65 61 6d 41 63 63 6f 75 6e 74 5f 63 6c 65 61 72 22 3a 22 43 6c 65 61 72 20 61 73 73 6f 63 69 61 74 69 6f 6e 22 2c 22 42 42 43 6f 64 65 5f 43 68 6f 6f 73 65 49 Data Ascii: , they will get a presenter badge on the Steam broadcast that appears on a Steam sale page.","EventEditor_SteamAccount_addme":"Add me","EventEditor_SteamAccount_addfriend":"Add a friend","EventEditor_SteamAccount_clear":"Clear association","BBCode_ChooseI
2024-05-15 22:36:57 UTC	7952	IN	Data Raw: 65 78 70 69 72 65 64 22 2c 22 4c 6f 67 69 6e 5f 52 65 66 72 65 73 68 52 65 61 73 6f 6e 5f 50 61 73 73 77 6f 72 64 52 65 71 75 69 72 65 64 54 6f 4b 69 63 6b 53 65 73 73 69 6f 6e 22 3a 22 43 6f 6e 66 69 72 6d 20 79 6f 75 72 20 63 72 65 64 65 6e 74 69 61 6c 73 20 74 6f 20 6c 6f 67 20 6f 75 74 20 61 6e 6f 74 68 65 72 20 63 6f 6d 70 75 74 65 72 22 2c 22 4c 6f 67 69 6e 5f 52 65 66 72 65 73 68 52 65 61 73 6f 6e 5f 41 63 63 6f 75 6e 74 44 69 73 61 62 6c 65 64 22 3a 22 59 6f 75 72 20 61 63 63 6f 75 6e 74 20 68 61 73 20 62 65 65 6e 20 64 69 73 61 62 6c 65 64 22 2c 22 4c 6f 67 69 6e 5f 52 65 66 72 65 73 68 52 65 61 73 6f 6e 5f 50 61 72 65 6e 74 61 6c 43 6f 6e 74 72 6f 6c 52 65 73 74 72 69 63 74 65 64 22 3a 22 54 68 65 20 70 61 72 65 6e 74 61 6c 20 63 6f 6e 74 72 6f Data Ascii: expired","Login_RefreshReason_PasswordRequiredToKickSession":"Confirm your credentials to log out another computer","Login_RefreshReason_AccountDisabled":"Your account has been disabled","Login_RefreshReason_ParentalControlRestricted":"The parental contro
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 42 72 6f 61 64 63 61 73 74 43 68 61 74 5f 41 64 64 65 64 4d 6f 64 65 72 61 74 6f 72 22 3a 22 4d 6f 64 65 72 61 74 6f 72 20 25 31 24 73 20 61 64 64 65 64 2e 22 2c 22 42 72 6f 61 64 63 61 73 74 43 68 61 74 5f 52 65 6d 6f 76 65 64 4d 6f 64 65 72 61 74 6f 72 22 3a 22 4d 6f 64 65 72 61 74 6f 72 20 25 31 24 73 20 72 65 6d 6f 76 65 64 2e 22 2c 22 42 72 6f 61 64 63 61 73 74 43 68 61 74 5f 41 64 64 4d 6f 64 65 72 61 74 6f 72 46 61 69 6c 65 64 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 61 64 64 20 25 31 24 73 20 61 73 20 6d 6f 64 65 72 61 74 6f 72 21 22 2c 22 42 72 6f 61 64 63 61 73 74 43 68 61 74 5f 52 65 6d 6f 76 65 4d 6f 64 65 72 61 74 6f 72 46 61 69 6c 65 64 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 72 65 Data Ascii: Please try again.","BroadcastChat_AddedModerator":"Moderator %1$s added.","BroadcastChat_RemovedModerator":"Moderator %1$s removed.","BroadcastChat_AddModeratorFailed":"Failed to add %1$s as moderator!","BroadcastChat_RemoveModeratorFailed":"Failed to re
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 63 65 20 56 69 73 75 61 6c 20 4e 6f 76 65 6c 73 22 2c 22 53 61 6c 65 5f 64 65 66 61 75 6c 74 5f 6c 61 62 65 6c 5f 39 36 22 3a 22 4d 79 73 74 65 72 79 20 56 69 73 75 61 6c 20 4e 6f 76 65 6c 73 22 2c 22 53 61 6c 65 5f 64 65 66 61 75 6c 74 5f 6c 61 62 65 6c 5f 39 37 22 3a 22 54 65 78 74 2d 42 61 73 65 64 20 41 64 76 65 6e 74 75 72 65 73 22 2c 22 53 61 6c 65 5f 64 65 66 61 75 6c 74 5f 6c 61 62 65 6c 5f 39 38 22 3a 22 32 44 20 50 6c 61 74 66 6f 72 6d 65 72 73 22 2c 22 53 61 6c 65 5f 64 65 66 61 75 6c 74 5f 6c 61 62 65 6c 5f 39 39 22 3a 22 50 72 65 63 69 73 69 6f 6e 20 50 6c 61 74 66 6f 72 6d 65 72 73 22 2c 22 53 61 6c 65 5f 64 65 66 61 75 6c 74 5f 6c 61 62 65 6c 5f 31 30 30 22 3a 22 50 75 7a 7a 6c 65 20 50 6c 61 74 66 6f 72 6d 65 72 73 22 2c 22 53 61 6c 65 5f Data Ascii: ce Visual Novels","Sale_default_label_96":"Mystery Visual Novels","Sale_default_label_97":"Text-Based Adventures","Sale_default_label_98":"2D Platformers","Sale_default_label_99":"Precision Platformers","Sale_default_label_100":"Puzzle Platformers","Sale_
2024-05-15 22:36:57 UTC	7952	IN	Data Raw: 5f 43 6f 6e 74 72 6f 6c 6c 65 72 5f 74 74 69 70 22 3a 22 54 68 65 20 6d 6f 73 74 20 70 6f 70 75 6c 61 72 20 67 61 6d 65 73 20 72 69 67 68 74 20 6e 6f 77 20 62 61 73 65 64 20 6f 6e 20 6e 75 6d 62 65 72 20 6f 66 20 70 6c 61 79 65 72 73 20 75 73 69 6e 67 20 61 20 63 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 53 61 6c 65 5f 42 72 6f 77 73 65 72 53 6f 72 74 4f 70 74 69 6f 6e 5f 43 6f 6e 74 65 6e 74 48 75 62 5f 50 6f 70 75 6c 61 72 5f 47 72 65 61 74 4f 6e 44 65 63 6b 22 3a 22 57 68 61 74 5c 27 73 20 42 65 69 6e 67 20 50 6c 61 79 65 64 22 2c 22 53 61 6c 65 5f 42 72 6f 77 73 65 72 53 6f 72 74 4f 70 74 69 6f 6e 5f 43 6f 6e 74 65 6e 74 48 75 62 5f 50 6f 70 75 6c 61 72 5f 47 72 65 61 74 4f 6e 44 65 63 6b 5f 74 74 69 70 22 3a 22 54 68 65 20 6d 6f 73 74 20 70 6f 70 75 6c 61 Data Ascii: _Controller_ttip":"The most popular games right now based on number of players using a controller","Sale_BrowserSortOption_ContentHub_Popular_GreatOnDeck":"What\'s Being Played","Sale_BrowserSortOption_ContentHub_Popular_GreatOnDeck_ttip":"The most popula
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: 20 74 68 65 69 72 20 63 72 65 61 74 69 6f 6e 2e 20 54 68 69 73 20 67 61 6d 65 2c 20 74 6f 20 74 68 69 73 20 64 61 79 2c 20 69 73 20 73 74 69 6c 6c 20 67 65 74 74 69 6e 67 20 6e 65 77 20 63 6f 6e 74 65 6e 74 20 61 66 74 65 72 20 61 6c 6c 20 74 68 65 73 65 20 79 65 61 72 73 2e 22 2c 22 70 72 6f 6d 6f 5f 73 74 65 61 6d 61 77 61 72 64 73 32 30 32 30 5f 63 61 74 35 33 5f 64 65 73 63 22 3a 22 54 68 65 72 65 20 61 72 65 20 73 6f 6d 65 20 67 61 6d 65 73 20 6f 75 74 20 74 68 65 72 65 20 74 68 61 74 20 6a 75 73 74 20 61 72 65 6e 5c 27 74 20 74 68 65 20 73 61 6d 65 20 77 68 65 6e 20 79 6f 75 20 70 6c 61 79 20 62 79 20 79 6f 75 72 73 65 6c 66 2e 20 4d 61 79 62 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 61 20 66 72 69 65 6e 64 20 74 6f 20 77 61 74 63 68 Data Ascii: their creation. This game, to this day, is still getting new content after all these years.","promo_steamawards2020_cat53_desc":"There are some games out there that just aren\'t the same when you play by yourself. Maybe you need to have a friend to watch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49943	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	614	OUT	GET /public/javascript/applications/store/sales_english-json.js?contenthash=2427041da1c36f76f959 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	368	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 Last-Modified: Wed, 17 Apr 2024 23:38:58 GMT ETag: "irEu6eGLM50b" Strict-Transport-Security: max-age=10368000 Content-Length: 171820 Cache-Control: public, must-revalidate, max-age=177215 Expires: Fri, 17 May 2024 23:50:32 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	16016	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 35 32 5d 2c 7b 31 32 34 34 35 3a 65 3d 3e 7b 65 Data Ascii: /** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/"use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[7952],{12445:e=>{e
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 2e 20 22 2c 22 53 75 6d 6d 65 72 5f 32 31 5f 4f 76 65 72 76 69 65 77 5f 44 65 73 63 72 69 70 74 69 6f 6e 33 22 3a 22 43 68 6f 6f 73 65 20 66 72 6f 6d 20 74 77 6f 20 70 6f 73 73 69 62 6c 65 20 61 63 74 69 6f 6e 73 20 69 6e 20 65 61 63 68 20 6f 66 20 74 68 65 20 66 6f 75 72 74 65 65 6e 20 46 6f 72 67 65 20 59 6f 75 72 20 46 61 74 65 20 73 74 6f 72 69 65 73 20 66 6f 75 6e 64 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 73 61 6c 65 20 61 6e 64 20 72 65 63 65 69 76 65 20 61 6e 20 61 6e 69 6d 61 74 65 64 20 73 74 69 63 6b 65 72 20 61 73 20 61 20 6d 65 6d 65 6e 74 6f 20 6f 66 20 79 6f 75 72 20 64 65 63 69 73 69 6f 6e 2e 20 5c 5c 6e 55 70 6f 6e 20 63 6f 6d 70 6c 65 74 69 6e 67 20 61 6c 6c 20 6f 66 20 74 68 65 20 73 74 6f 72 69 65 73 2c 20 79 6f 75 5c 27 6c 6c Data Ascii: . ","Summer_21_Overview_Description3":"Choose from two possible actions in each of the fourteen Forge Your Fate stories found throughout the sale and receive an animated sticker as a memento of your decision. \\nUpon completing all of the stories, you\'ll
2024-05-15 22:36:57 UTC	3020	IN	Data Raw: 79 5f 53 70 6f 72 74 73 5f 47 65 6e 72 65 22 3a 22 53 70 6f 72 74 73 20 26 20 52 61 63 69 6e 67 22 2c 22 53 75 6d 6d 65 72 32 31 5f 53 74 6f 72 79 5f 53 70 6f 72 74 73 5f 50 67 22 3a 22 38 22 2c 22 53 75 6d 6d 65 72 32 31 5f 53 74 6f 72 79 5f 53 70 6f 72 74 73 5f 49 6e 74 72 6f 22 3a 22 41 6e 64 72 65 74 74 69 2e 20 45 61 72 6e 68 61 72 64 74 2e 20 52 61 63 65 72 20 58 2e 20 41 6c 6c 20 67 72 65 61 74 20 6e 61 6d 65 73 20 69 6e 20 72 61 63 69 6e 67 2c 20 62 75 74 20 65 76 65 6e 20 74 68 65 69 72 20 63 6f 6e 73 69 64 65 72 61 62 6c 65 20 64 72 69 76 69 6e 67 20 73 6b 69 6c 6c 73 20 70 61 6c 65 20 69 6e 20 63 6f 6d 70 61 72 69 73 6f 6e 20 74 6f 20 74 68 6f 73 65 20 6f 66 20 43 6f 72 67 69 20 73 65 6e 73 61 74 69 6f 6e 20 4d 72 2e 20 50 65 61 6e 75 74 20 4d Data Ascii: y_Sports_Genre":"Sports & Racing","Summer21_Story_Sports_Pg":"8","Summer21_Story_Sports_Intro":"Andretti. Earnhardt. Racer X. All great names in racing, but even their considerable driving skills pale in comparison to those of Corgi sensation Mr. Peanut M
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 6e 67 20 61 77 61 79 20 79 6f 75 72 20 6d 61 63 68 65 74 65 20 61 6e 64 20 62 6c 75 6e 64 65 72 69 6e 67 20 66 75 6c 6c 20 73 70 65 65 64 20 69 6e 74 6f 20 74 68 65 20 6a 75 6e 67 6c 65 2e 20 42 72 61 6e 63 68 65 73 20 74 65 61 72 20 61 74 20 79 6f 75 72 20 66 61 63 65 2e 20 53 6e 61 6b 65 73 20 64 69 76 65 20 6f 75 74 20 6f 66 20 74 72 65 65 73 20 61 74 20 79 6f 75 72 20 66 61 63 65 2e 20 52 6f 63 6b 73 20 6c 65 61 70 20 75 70 20 66 72 6f 6d 20 74 68 65 20 67 72 6f 75 6e 64 20 61 6e 64 20 68 69 74 20 79 6f 75 72 20 66 61 63 65 2e 20 5c 5c 6e 20 20 20 20 20 59 6f 75 20 73 74 75 6d 62 6c 65 20 6f 75 74 20 6f 66 20 74 68 65 20 6a 75 6e 67 6c 65 20 6f 6e 74 6f 20 74 68 65 20 61 69 72 73 74 72 69 70 2c 20 77 68 65 72 65 20 79 6f 75 72 20 62 69 70 6c 61 6e 65 Data Ascii: ng away your machete and blundering full speed into the jungle. Branches tear at your face. Snakes dive out of trees at your face. Rocks leap up from the ground and hit your face. \\n You stumble out of the jungle onto the airstrip, where your biplane
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 6f 75 20 66 6f 63 75 73 20 6f 6e 20 79 6f 75 72 20 65 6e 65 6d 79 e2 80 99 73 20 62 65 73 74 20 71 75 61 6c 69 74 69 65 73 20 61 6e 64 20 70 72 65 70 61 72 65 20 74 6f 20 75 6e 6c 65 61 73 68 20 79 6f 75 72 20 64 65 76 61 73 74 61 74 69 6e 67 20 66 69 6e 61 6c 20 61 74 74 61 63 6b 2c 20 74 68 65 20 53 69 6e 63 65 72 65 20 41 70 6f 6c 6f 67 79 20 54 65 63 68 6e 69 71 75 65 2e 20 49 6e 20 61 6e 20 65 6d 6f 74 69 6f 6e 61 6c 20 6f 6e 73 6c 61 75 67 68 74 2c 20 79 6f 75 20 66 6f 72 67 69 76 65 20 79 6f 75 72 20 61 72 63 68 2d 65 6e 65 6d 79 2c 20 74 72 79 20 74 6f 20 73 65 65 20 74 68 69 6e 67 73 20 66 72 6f 6d 20 68 69 73 20 70 65 72 73 70 65 63 74 69 76 65 20 61 6e 64 20 77 6f 72 6b 20 68 61 72 64 20 74 6f 20 75 6e 63 6f 76 65 72 20 73 6f 6d 65 20 73 68 61 Data Ascii: ou focus on your enemys best qualities and prepare to unleash your devastating final attack, the Sincere Apology Technique. In an emotional onslaught, you forgive your arch-enemy, try to see things from his perspective and work hard to uncover some sha
2024-05-15 22:36:57 UTC	7952	IN	Data Raw: 20 61 67 61 69 6e 73 74 20 74 68 65 20 72 65 73 74 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 43 6f 6d 6d 75 6e 69 74 79 22 2c 22 59 49 52 5f 43 6f 6d 70 61 72 65 5f 50 6c 61 79 65 72 50 72 6f 67 72 65 73 73 5f 41 63 68 69 65 76 65 6d 65 6e 74 73 5f 4c 61 62 65 6c 5f 73 65 63 6f 6e 64 22 3a 22 59 6f 75 20 75 6e 6c 6f 63 6b 65 64 20 25 31 24 73 20 61 63 68 69 65 76 65 6d 65 6e 74 73 22 2c 22 59 49 52 5f 43 6f 6d 70 61 72 65 5f 50 6c 61 79 65 72 50 72 6f 67 72 65 73 73 5f 41 63 68 69 65 76 65 6d 65 6e 74 73 5f 4c 61 62 65 6c 5f 74 68 69 72 64 22 3a 22 25 31 24 73 20 75 6e 6c 6f 63 6b 65 64 20 25 32 24 73 20 61 63 68 69 65 76 65 6d 65 6e 74 73 22 2c 22 59 49 52 5f 43 6f 6d 70 61 72 65 5f 50 6c 61 79 65 72 50 72 6f 67 72 65 73 73 5f 50 6c 61 79 65 64 47 61 6d Data Ascii: against the rest of the Steam Community","YIR_Compare_PlayerProgress_Achievements_Label_second":"You unlocked %1$s achievements","YIR_Compare_PlayerProgress_Achievements_Label_third":"%1$s unlocked %2$s achievements","YIR_Compare_PlayerProgress_PlayedGam
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 79 65 64 20 6f 76 65 72 20 25 32 24 73 20 67 61 6d 65 73 20 6f 6e 20 53 74 65 61 6d 20 44 65 63 6b 20 74 68 69 73 20 79 65 61 72 2e 22 2c 22 59 49 52 5f 4d 4d 5f 54 61 72 67 65 74 65 64 5f 76 72 22 3a 22 3c 31 3e 25 31 24 73 2c 3c 2f 31 3e 3c 32 3e 3c 2f 32 3e 59 6f 75 20 70 6c 61 79 65 64 20 6f 76 65 72 20 25 32 24 73 20 67 61 6d 65 73 20 69 6e 20 56 52 20 74 68 69 73 20 79 65 61 72 2e 22 2c 22 59 49 52 5f 4d 4d 5f 54 61 72 67 65 74 65 64 5f 44 65 6d 6f 22 3a 22 3c 31 3e 25 31 24 73 2c 3c 2f 31 3e 3c 32 3e 3c 2f 32 3e 59 6f 75 20 70 6c 61 79 65 64 20 6f 76 65 72 20 25 32 24 73 20 64 65 6d 6f 73 20 74 68 69 73 20 79 65 61 72 2e 22 2c 22 59 49 52 5f 53 70 69 64 65 72 5f 54 69 74 6c 65 22 3a 22 59 6f 75 20 61 72 65 20 77 68 61 74 20 79 6f 75 20 50 6c 61 79 Data Ascii: yed over %2$s games on Steam Deck this year.","YIR_MM_Targeted_vr":"<1>%1$s,</1><2></2>You played over %2$s games in VR this year.","YIR_MM_Targeted_Demo":"<1>%1$s,</1><2></2>You played over %2$s demos this year.","YIR_Spider_Title":"You are what you Play
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 6f 73 73 69 62 6c 79 20 67 6f 74 20 6d 61 75 6c 65 64 20 62 79 20 61 20 70 6f 6c 61 72 20 62 65 61 72 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 31 34 32 36 32 31 30 22 3a 22 59 6f 75 20 61 6e 64 20 61 20 66 72 69 65 6e 64 20 73 70 65 6e 74 20 68 6f 75 72 73 20 74 61 63 6b 6c 69 6e 67 20 70 6c 61 74 66 6f 72 6d 69 6e 67 2c 20 6d 61 72 69 74 61 6c 20 70 72 6f 62 6c 65 6d 73 2c 20 61 6e 64 20 6d 6f 72 65 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 31 34 34 36 37 38 30 22 3a 22 59 6f 75 20 73 70 65 6e 74 20 32 30 32 32 20 77 69 74 68 20 79 6f 75 72 20 50 61 6c 69 63 6f 20 61 6e 64 20 50 61 6c 61 6d 75 74 65 20 66 72 69 65 6e 64 73 2e 22 Data Ascii: ossibly got mauled by a polar bear.","steamrewind2022_gametext_appid_1426210":"You and a friend spent hours tackling platforming, marital problems, and more.","steamrewind2022_gametext_appid_1446780":"You spent 2022 with your Palico and Palamute friends."
2024-05-15 22:36:57 UTC	7952	IN	Data Raw: 69 6e 67 20 73 6f 6d 65 20 73 61 73 73 79 20 6d 61 68 6a 6f 6e 67 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 31 33 33 32 30 31 30 5f 73 65 63 6f 6e 64 22 3a 22 49 6e 20 25 31 24 73 20 79 6f 75 20 72 65 61 6c 69 7a 65 64 20 74 68 61 74 20 63 61 74 73 20 61 72 65 20 62 65 74 74 65 72 20 74 68 61 6e 20 70 65 6f 70 6c 65 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 31 34 31 38 36 33 30 5f 73 65 63 6f 6e 64 22 3a 22 49 6e 20 25 31 24 73 20 79 6f 75 20 65 78 70 6c 6f 72 65 64 20 74 68 65 20 61 72 63 74 69 63 2c 20 74 75 72 6e 65 64 20 6f 6e 20 79 6f 75 72 20 63 72 65 77 6d 61 74 65 73 2c 20 61 6e 64 20 70 6f 73 73 69 62 6c 79 20 67 6f 74 20 Data Ascii: ing some sassy mahjong.","steamrewind2022_gametext_appid_1332010_second":"In %1$s you realized that cats are better than people.","steamrewind2022_gametext_appid_1418630_second":"In %1$s you explored the arctic, turned on your crewmates, and possibly got
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 32 39 38 31 31 30 5f 74 68 69 72 64 22 3a 22 44 69 64 20 25 31 24 73 20 65 6e 6a 6f 79 20 74 68 65 20 63 72 61 62 20 72 61 6e 67 6f 6f 6e 3f 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 33 30 34 39 33 30 5f 74 68 69 72 64 22 3a 22 25 31 24 73 20 73 70 65 6e 74 20 61 20 6c 6f 74 20 6f 66 20 74 69 6d 65 20 69 6e 20 25 32 24 73 20 61 76 6f 69 64 69 6e 67 20 62 65 69 6e 67 20 74 75 72 6e 65 64 20 69 6e 74 6f 20 61 20 7a 6f 6d 62 69 65 2e 22 2c 22 73 74 65 61 6d 72 65 77 69 6e 64 32 30 32 32 5f 67 61 6d 65 74 65 78 74 5f 61 70 70 69 64 5f 33 31 30 39 35 30 5f 74 68 69 72 64 22 3a 22 49 66 20 74 68 69 73 20 77 61 73 20 74 68 65 20 39 30 73 2c 20 25 31 24 73 Data Ascii: _gametext_appid_298110_third":"Did %1$s enjoy the crab rangoon?","steamrewind2022_gametext_appid_304930_third":"%1$s spent a lot of time in %2$s avoiding being turned into a zombie.","steamrewind2022_gametext_appid_310950_third":"If this was the 90s, %1$s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49947	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	390	OUT	GET /public/images/v6/icon_platform_mac.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1139 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-473" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	1139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49946	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	394	OUT	GET /public/images/v6/icon_platform_win.png?v=3 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1169 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-491" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	1169	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49949	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	392	OUT	GET /public/images/v6/icon_platform_linux.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3133 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-c3d" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	3133	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49945	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	613	OUT	GET /public/javascript/applications/store/main_english-json.js?contenthash=6c5add9f48c608fe2aaa HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 Last-Modified: Tue, 14 May 2024 22:55:23 GMT ETag: "qK6Fl1QPYp4U" Strict-Transport-Security: max-age=10368000 Content-Length: 58046 Cache-Control: public, must-revalidate, max-age=174052 Expires: Fri, 17 May 2024 22:57:49 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	16017	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 31 35 5d 2c 7b 36 33 33 33 36 3a 65 3d 3e 7b 65 Data Ascii: /** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/"use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6815],{63336:e=>{e
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 3a 22 48 65 6c 70 20 52 65 71 75 65 73 74 73 20 61 6e 64 20 42 61 63 6b 6c 6f 67 22 2c 22 53 75 70 6f 72 74 53 74 61 74 73 5f 4d 6f 73 74 52 65 63 65 6e 74 39 30 44 61 79 73 22 3a 22 28 6d 6f 73 74 20 72 65 63 65 6e 74 20 39 30 20 64 61 79 73 29 22 2c 22 53 75 70 70 6f 72 74 53 74 61 74 73 5f 52 65 63 65 6e 74 53 75 70 70 6f 72 74 41 63 74 69 76 69 74 79 5f 54 69 74 6c 65 22 3a 22 52 65 63 65 6e 74 20 48 65 6c 70 20 52 65 71 75 65 73 74 20 41 63 74 69 76 69 74 79 22 2c 22 53 75 70 70 6f 72 74 53 74 61 74 73 5f 54 69 63 6b 65 74 73 42 79 43 61 74 65 67 6f 72 79 22 3a 22 52 65 71 75 65 73 74 20 43 61 74 65 67 6f 72 79 22 2c 22 53 75 70 70 6f 72 74 53 74 61 74 73 5f 54 69 63 6b 65 74 73 4c 61 73 74 32 34 48 6f 75 72 73 22 3a 22 53 75 62 6d 69 74 74 65 64 20 Data Ascii: :"Help Requests and Backlog","SuportStats_MostRecent90Days":"(most recent 90 days)","SupportStats_RecentSupportActivity_Title":"Recent Help Request Activity","SupportStats_TicketsByCategory":"Request Category","SupportStats_TicketsLast24Hours":"Submitted
2024-05-15 22:36:57 UTC	3261	IN	Data Raw: 6f 20 6a 6f 69 6e 20 74 68 65 69 72 20 66 61 6d 69 6c 79 20 61 73 20 61 6e 20 25 32 24 73 22 2c 22 46 61 6d 69 6c 79 4d 61 6e 61 67 65 6d 65 6e 74 5f 50 65 6e 64 69 6e 67 46 61 6d 69 6c 79 49 6e 76 69 74 65 49 6e 76 69 74 65 54 65 78 74 5f 43 68 69 6c 64 22 3a 22 25 31 24 73 20 68 61 73 20 69 6e 76 69 74 65 64 20 79 6f 75 20 74 6f 20 6a 6f 69 6e 20 74 68 65 69 72 20 66 61 6d 69 6c 79 20 61 73 20 61 20 25 32 24 73 22 2c 22 46 61 6d 69 6c 79 4d 61 6e 61 67 65 6d 65 6e 74 5f 43 6f 6e 66 69 72 6d 4a 6f 69 6e 5f 31 22 3a 22 59 6f 75 20 61 72 65 20 6a 6f 69 6e 69 6e 67 20 74 68 69 73 20 53 74 65 61 6d 20 66 61 6d 69 6c 79 20 61 73 20 61 6e 20 3c 31 3e 61 64 75 6c 74 3c 2f 31 3e 2e 20 44 6f 20 79 6f 75 20 77 69 73 68 20 74 6f 20 70 72 6f 63 65 65 64 3f 22 2c 22 Data Ascii: o join their family as an %2$s","FamilyManagement_PendingFamilyInviteInviteText_Child":"%1$s has invited you to join their family as a %2$s","FamilyManagement_ConfirmJoin_1":"You are joining this Steam family as an <1>adult</1>. Do you wish to proceed?","
2024-05-15 22:36:57 UTC	16384	IN	Data Raw: 79 4d 61 6e 61 67 65 6d 65 6e 74 5f 49 6e 76 69 74 65 65 41 6c 72 65 61 64 79 4d 65 6d 62 65 72 22 3a 22 46 72 69 65 6e 64 20 63 6f 64 65 20 25 31 24 73 20 69 73 20 61 6c 72 65 61 64 79 20 61 20 6d 65 6d 62 65 72 20 6f 66 20 74 68 65 20 66 61 6d 69 6c 79 2e 22 2c 22 46 61 6d 69 6c 79 4d 61 6e 61 67 65 6d 65 6e 74 5f 49 6e 76 69 74 65 65 41 6c 72 65 61 64 79 49 6e 76 69 74 65 64 22 3a 22 46 72 69 65 6e 64 20 63 6f 64 65 20 25 31 24 73 20 61 6c 72 65 61 64 79 20 68 61 73 20 61 20 70 65 6e 64 69 6e 67 20 69 6e 76 69 74 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 66 61 6d 69 6c 79 2e 22 2c 22 46 61 6d 69 6c 79 4d 61 6e 61 67 65 6d 65 6e 74 5f 4e 6f 43 75 72 72 65 6e 74 52 65 71 75 65 73 74 73 22 3a 22 59 6f 75 72 20 66 61 6d 69 6c 79 20 68 61 73 20 6e 6f 20 63 75 Data Ascii: yManagement_InviteeAlreadyMember":"Friend code %1$s is already a member of the family.","FamilyManagement_InviteeAlreadyInvited":"Friend code %1$s already has a pending invitation to the family.","FamilyManagement_NoCurrentRequests":"Your family has no cu
2024-05-15 22:36:57 UTC	6000	IN	Data Raw: 67 61 6d 65 20 69 6e 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 63 61 74 65 67 6f 72 79 20 74 6f 20 65 61 72 6e 20 6c 65 76 65 6c 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 61 64 67 65 2e 20 54 68 65 6e 2c 20 63 6f 6d 70 6c 65 74 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 74 61 73 6b 73 20 74 6f 20 6c 65 76 65 6c 20 69 74 20 75 70 2e 22 2c 22 53 74 65 61 6d 61 77 61 72 64 73 5f 42 61 64 67 65 5f 42 61 64 67 65 54 61 73 6b 31 22 3a 22 31 20 74 61 73 6b 20 63 6f 6d 70 6c 65 74 65 64 22 2c 22 53 74 65 61 6d 61 77 61 72 64 73 5f 42 61 64 67 65 5f 42 61 64 67 65 54 61 73 6b 32 22 3a 22 32 20 74 61 73 6b 73 20 63 6f 6d 70 6c 65 74 65 64 22 2c 22 53 74 65 61 6d 61 77 61 72 64 73 5f 42 61 64 67 65 5f 42 61 64 67 65 54 61 73 6b 33 22 3a 22 33 20 74 61 73 6b 73 20 63 6f 6d Data Ascii: game in at least one category to earn level one of the badge. Then, complete additional tasks to level it up.","Steamawards_Badge_BadgeTask1":"1 task completed","Steamawards_Badge_BadgeTask2":"2 tasks completed","Steamawards_Badge_BadgeTask3":"3 tasks com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49944	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	631	OUT	GET /steam/apps/2344520/capsule_184x69.jpg?t=1715714373 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 4173 Last-Modified: Tue, 29 Aug 2023 14:03:07 GMT ETag: "64edfa9b-104d" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=506604 Expires: Tue, 21 May 2024 19:20:21 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	4173	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 05 06 07 04 08 09 ff c4 00 35 10 00 02 01 03 02 05 03 03 03 02 05 05 00 00 00 00 01 02 03 00 04 11 05 21 06 07 12 31 41 13 51 61 08 22 71 14 32 81 91 b1 15 16 Data Ascii: JFIFCCE5!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49948	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	395	OUT	GET /public/images/v6/home/logo_steam_piston.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	260	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 4512 Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: "649bb1f9-11a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	4512	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 98 00 00 00 47 08 06 00 00 00 fb aa 8e db 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 07 e2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRGpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49950	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	631	OUT	GET /steam/apps/1604030/capsule_184x69.jpg?t=1715590903 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 4522 Last-Modified: Thu, 09 May 2024 09:49:12 GMT ETag: "663c9c18-11aa" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=383050 Expires: Mon, 20 May 2024 09:01:07 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	4522	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 09 00 ff c4 00 41 10 00 02 01 03 03 02 04 04 03 03 07 0d 01 00 00 00 01 02 03 04 05 11 00 06 21 07 12 08 31 41 51 13 22 61 71 14 32 81 52 82 91 18 Data Ascii: JFIFvvCCEA!1AQ"aq2R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49951	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	630	OUT	GET /steam/apps/553850/capsule_184x69.jpg?t=1709666906 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Mon, 11 Sep 2023 20:20:34 GMT ETag: "64ff7692-27cf" Server: nginx Content-Type: image/jpeg Content-Length: 10191 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=446699 Expires: Tue, 21 May 2024 02:41:56 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	10191	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 03 01 01 01 01 01 01 01 00 00 00 00 00 00 00 05 06 07 08 04 03 01 02 00 09 ff c4 00 3b 10 00 01 03 03 03 02 05 02 04 04 04 06 03 00 00 00 01 02 03 04 05 06 11 00 12 21 07 31 08 13 22 41 51 14 61 15 32 71 81 23 42 52 Data Ascii: JFIFCCE;!1"AQa2q#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49952	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	630	OUT	GET /steam/apps/281990/capsule_184x69.jpg?t=1715759591 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 4925 Last-Modified: Thu, 01 Sep 2022 08:15:32 GMT ETag: "63106a24-133d" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=551786 Expires: Wed, 22 May 2024 07:53:23 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	4925	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 07 01 02 06 08 00 ff c4 00 40 10 00 01 02 05 03 02 05 01 05 04 06 0b 00 00 00 00 01 02 03 00 04 05 06 11 07 12 21 31 41 08 13 22 51 61 71 14 32 81 91 a1 16 23 42 Data Ascii: JFIFCCE@!1A"Qaq2#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49953	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	631	OUT	GET /steam/apps/2195250/capsule_184x69.jpg?t=1713799333 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 8810 Last-Modified: Tue, 12 Sep 2023 13:36:59 GMT ETag: "6500697b-226a" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=224449 Expires: Sat, 18 May 2024 12:57:46 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	8810	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 09 02 00 01 ff c4 00 46 10 00 02 01 03 02 04 04 04 03 03 09 04 0b 01 00 00 01 02 03 04 05 11 06 07 00 08 12 21 13 31 41 51 09 14 22 61 15 23 32 42 52 71 Data Ascii: JFIFCCEF!1AQ"a#2BRq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49954	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	631	OUT	GET /steam/apps/2357570/capsule_184x69.jpg?t=1715731747 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7769 Last-Modified: Thu, 21 Dec 2023 16:49:36 GMT ETag: "65846ca0-1e59" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=524032 Expires: Wed, 22 May 2024 00:10:49 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	7769	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 07 02 01 08 00 ff c4 00 40 10 00 01 03 02 04 04 04 03 06 04 03 08 03 00 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 14 22 51 61 08 32 71 15 23 81 91 a1 b1 Data Ascii: JFIFCCE@!1A"Qa2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49955	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	396	OUT	GET /steam/apps/730/capsule_184x69.jpg?t=1698860631 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:57 UTC	339	IN	HTTP/1.1 200 OK Last-Modified: Mon, 18 Sep 2023 22:33:56 GMT ETag: "6508d054-19a8" Server: nginx Content-Type: image/jpeg Content-Length: 6568 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=91003 Expires: Thu, 16 May 2024 23:53:40 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:57 UTC	6568	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 08 01 02 03 09 ff c4 00 40 10 00 01 03 02 05 02 04 03 04 07 05 09 00 00 00 00 01 02 03 04 05 11 00 06 07 12 21 31 41 08 13 22 51 14 61 71 23 32 81 91 09 16 Data Ascii: JFIFCCE@!1A"Qaq#2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49956	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	400	OUT	GET /steam/apps/2215430/capsule_184x69.jpg?t=1715792238 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6085 Last-Modified: Wed, 28 Feb 2024 16:31:50 GMT ETag: "65df5ff6-17c5" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=584451 Expires: Wed, 22 May 2024 16:57:48 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:58 UTC	6085	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 01 00 02 07 08 04 05 06 03 09 ff c4 00 40 10 00 01 02 04 05 02 04 03 04 07 06 07 00 00 00 00 01 02 03 04 05 06 11 00 07 12 21 31 08 41 13 22 51 61 14 32 71 09 15 a1 d1 23 Data Ascii: JFIFCCE@!1A"Qa2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49957	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	400	OUT	GET /steam/apps/1172470/capsule_184x69.jpg?t=1715104113 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7340 Last-Modified: Mon, 22 Apr 2024 20:23:12 GMT ETag: "6626c730-1cac" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=440586 Expires: Tue, 21 May 2024 01:00:03 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:58 UTC	7340	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 05 02 04 06 07 08 03 01 00 09 ff c4 00 40 10 00 02 01 02 05 02 03 06 03 03 09 09 00 00 00 00 01 02 03 04 11 00 05 06 12 21 07 31 13 41 51 08 14 22 61 71 81 32 91 a1 15 23 Data Ascii: JFIFCCE@!1AQ"aq2#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49958	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	400	OUT	GET /steam/apps/1145350/capsule_184x69.jpg?t=1715727000 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 8856 Last-Modified: Wed, 01 May 2024 05:08:42 GMT ETag: "6631ce5a-2298" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=519137 Expires: Tue, 21 May 2024 22:49:14 GMT Date: Wed, 15 May 2024 22:36:57 GMT Connection: close
2024-05-15 22:36:58 UTC	8856	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 00 03 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 08 00 01 02 09 ff c4 00 58 10 00 01 03 02 05 02 04 02 04 06 0b 06 17 00 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 14 41 51 22 61 32 71 81 d3 09 15 16 Data Ascii: JFIFCCEX!1AQ"a2q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49959	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:57 UTC	400	OUT	GET /steam/apps/2668080/capsule_184x69.jpg?t=1714968679 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7191 Last-Modified: Wed, 06 Dec 2023 03:39:52 GMT ETag: "656fed08-1c17" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305163 Expires: Sun, 19 May 2024 11:23:01 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	7191	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 00 03 01 00 00 00 00 00 00 00 00 00 00 04 06 03 05 07 00 01 02 08 ff c4 00 37 10 00 01 03 03 03 02 04 04 04 06 02 03 01 00 00 00 01 02 03 04 05 06 11 00 12 21 07 31 13 22 41 51 14 32 61 71 08 15 16 81 23 42 52 Data Ascii: JFIFCCE7!1"AQ2aq#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49960	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	618	OUT	GET /public/javascript/applications/store/marketing_english-json.js?contenthash=deef5c040fa6e28f22c9 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 Last-Modified: Wed, 17 Apr 2024 23:38:58 GMT ETag: "0vaxNgS59N0r" Strict-Transport-Security: max-age=10368000 Content-Length: 22838 Cache-Control: public, must-revalidate, max-age=176878 Expires: Fri, 17 May 2024 23:44:56 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	16017	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 32 39 5d 2c 7b 35 3a 65 3d 3e 7b 65 2e 65 78 70 Data Ascii: /** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/"use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[4929],{5:e=>{e.exp
2024-05-15 22:36:58 UTC	6821	IN	Data Raw: 26 20 49 6d 6d 65 72 73 69 76 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 73 69 6d 5f 6c 69 66 65 5f 72 6f 6d 61 6e 63 65 22 3a 22 4c 69 66 65 20 53 69 6d 73 20 26 20 52 6f 6d 61 6e 63 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 73 69 6d 5f 6c 69 66 65 5f 72 6f 6d 61 6e 63 65 5f 6d 65 6e 75 22 3a 22 4c 69 66 65 20 26 20 52 6f 6d 61 6e 63 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 73 69 6d 5f 6d 61 6e 61 67 65 6d 65 6e 74 22 3a 22 53 69 6d 75 6c 61 74 69 6f 6e 20 26 20 4d 61 6e 61 67 65 6d 65 6e 74 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 73 69 6d 5f 6d 61 6e 61 67 65 6d 65 6e 74 5f 6d 65 6e 75 22 3a 22 53 69 6d 75 6c 61 74 69 6f 6e 20 26 20 4d 61 6e 61 67 65 6d 65 6e 74 22 2c 22 Data Ascii: & Immersive","ContentHubby_Hub_sim_life_romance":"Life Sims & Romance","ContentHubby_Hub_sim_life_romance_menu":"Life & Romance","ContentHubby_Hub_sim_management":"Simulation & Management","ContentHubby_Hub_sim_management_menu":"Simulation & Management","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49961	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	395	OUT	GET /public/images//v6/icon_cluster_controls.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1283 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-503" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	1283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1b 00 00 00 15 08 06 00 00 00 b7 de 95 25 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR%tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49962	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	631	OUT	GET /steam/apps/1449850/capsule_184x69.jpg?t=1715145592 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6638 Last-Modified: Tue, 07 May 2024 06:37:40 GMT ETag: "6639cc34-19ee" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=482227 Expires: Tue, 21 May 2024 12:34:05 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	6638	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 07 01 02 08 00 09 ff c4 00 38 10 00 02 01 03 03 03 02 05 03 03 03 02 07 00 00 00 01 02 03 04 05 11 00 06 21 07 12 31 13 41 08 22 32 51 61 14 23 42 15 71 81 16 Data Ascii: JFIFCCE8!1A"2Qa#Bq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49963	96.17.60.195	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	632	OUT	GET /categories/homepageimage/category/anime?cc=us&l=english HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	2067	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.akamai.steamstatic.com/ https://store.akamai.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com https://steamcommunity-a.akamaihd.net; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.akamai.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.akamai.steamstatic.com/ https://checkout.steampowered.com/ https://.steamstatic.com https://.steamcontent.com https://.valvesoftware.com https://.steambeta.net https://*.discovery.beta.steamse [TRUNCATED] X-Frame-Options: DENY Cache-Control: public,max-age=44820 Expires: Wed, 15 May 2024 21:46:48 GMT Last-Modified: Wed, 15 May 2024 06:27:00 GMT Strict-Transport-Security: max-age=10368000 Content-Length: 131789 Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	14317	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 e9 08 06 00 00 00 1a 8c ba c1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 10 63 61 4e 76 00 00 02 f2 00 00 01 bb 00 00 00 b4 00 00 00 3c 27 41 e8 f4 00 00 80 00 49 44 41 54 78 da 7c fd 77 9c 9d e9 59 df 8f bf ef fb 7e ea 69 33 67 fa 8c a4 51 5b f5 95 76 57 db 9b 7b ef 36 36 06 c7 c6 60 70 20 10 c2 0f d2 c8 37 40 0c 24 bf 6f 20 90 6f 12 4a 08 06 03 b6 31 36 a6 38 c6 65 71 5b 7b 7b ef d2 aa 77 69 fa cc e9 4f bb cb ef 8f e7 48 36 c4 df df ec 4b 2f 69 47 bb 33 d2 39 cf 75 5f d7 f5 69 b7 f8 cf 7f Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDcaNv<'AIDATx\|wY~i3gQ[vW{66`p 7@$o oJ168eq[{{wiOH6K/iG39u_i
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: 51 33 42 05 86 20 1e 60 fb 6d 2a 9e c6 fa 9a c0 15 6c 9d aa d3 4b 32 a2 30 e4 96 3b 0e 32 39 3b 45 d2 ef e1 0a cb 95 2b 5d c6 a7 36 b1 65 66 84 ac bb 4e c5 56 38 7d fa 32 17 2e af 73 66 6d c0 72 df d0 2f 24 56 7a f8 7e 88 ef 49 42 df 11 fa 0a 2d 7c 3c af 42 e4 b5 08 45 95 5a a5 8e 57 f5 25 eb 09 5c e8 68 7a 4e e0 e3 33 1a 7c 37 24 2e b0 12 5f f9 a4 c2 e1 b9 9c 7b 46 eb 4c 79 11 7f 78 aa c3 53 dd 3e a1 53 4c 7b 21 d2 d3 48 af 3c b8 8d 54 58 e9 33 30 86 50 16 dc 31 ee 63 80 53 3d cd ae 11 cb e1 89 0a af 6c 38 e6 63 4b e1 ca 04 ca a1 ea 94 a2 28 b8 7c e5 0a fd c1 80 1b 0e 1e c4 53 8a dc e6 08 27 40 58 aa b5 1a db 77 ec a0 93 19 a2 b8 4a 18 56 f0 82 0a d2 af 00 16 cf f3 10 f8 68 eb 90 42 13 36 7c 26 46 46 31 d6 92 cc cd 90 ed 39 40 af df 67 75 65 89 53 c7 8e Data Ascii: Q3B `m*lK20;29;E+]6efNV8}2.sfmr/$Vz~IB-\|<BEZW%\hzN3\|7$._{FLyxS>SL{!H<TX30P1cS=l8cK(\|S'@XwJVhB6\|&FF19@gueS
2024-05-15 22:36:58 UTC	3360	IN	Data Raw: a7 8a 31 19 3b db fb 48 91 a1 85 66 63 77 c8 24 4d 09 92 9c 69 92 63 7b 3e 95 6a 13 83 a0 d9 6c b2 bc b4 54 7e d0 e7 0e f3 f2 cb df 64 67 eb 06 b3 ad 26 cd 99 05 ee bb f7 3b d1 45 c8 b5 ab cf 91 e7 29 7b fb bb a5 bd b2 48 99 9b 5b c5 48 9b 30 0a 58 5e 5a 22 4d 73 7a bd 2e ca 12 24 29 74 77 02 ec d4 c1 64 59 59 8a 11 2e 64 92 2c 89 cb 81 89 14 34 9a 8b 48 cb 46 a8 52 16 90 a5 53 a6 49 8f 98 21 96 03 be 14 38 22 c5 b3 a1 e6 48 5c db c1 b3 5d 3c db c1 71 5c 6c c7 c6 96 ba 74 1c 15 19 ae 16 54 94 4b 9c c3 de 38 64 9c 6b 1c c7 61 e5 d0 32 97 77 3a 7c e3 ca 06 46 29 7c d7 67 75 65 89 85 85 79 f6 f6 f7 18 ec 6d b0 e8 0a 8e cc b7 c8 85 21 ce 33 c4 c7 f3 dc 14 52 12 8f a6 dc fa e6 1b 5c fd fa 8b f4 b6 b6 98 9f 9b 27 4b 0b 82 e9 94 20 18 d1 db d9 a4 ea d8 2c 2e cd Data Ascii: 1;Hfcw$Mic{>jlT~dg&;E){H[H0X^Z"Msz.$)twdYY.d,4HFRSI!8"H\]<q\ltTK8dka2w:\|F)\|gueym!3R\'K ,.
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: 67 a8 63 fe c5 7f fc 4f fc cb 5f fd 0d ee bf 70 8e ef 78 d7 93 3c fa f0 83 b4 1a 8d ff 6c 27 16 f4 fa 3d fe f0 13 7f c2 af fe e6 ef b0 db 9f 72 e4 c4 39 2a 54 a8 15 92 b6 eb 91 63 e8 4c 23 76 b7 77 e8 6e 6e 70 a4 51 e3 a1 fb ee e6 ca ad 3b fc ca ff ef d7 58 5f 5f a7 b2 38 cb 85 c5 8b d4 2b 75 aa ed 3a d5 66 9d fa cc 2c 95 7a 15 d7 b1 71 ab 35 5c cb 07 91 63 25 13 0a 6d 23 2b 0e 9e 6d 08 fb 1d ee dc ba c9 d5 37 af b3 b7 b5 83 ce 0b 7c d7 c1 96 92 24 49 f1 3c 0f db 2e e1 ea c2 92 24 0a 1c 34 75 d7 c7 52 36 39 92 c2 18 b2 38 c2 f1 5c 32 03 51 9c 31 9e 06 28 e9 a0 f0 91 b6 8d 29 34 f5 96 4b 73 a6 41 34 85 2c cd 30 42 a1 8d c1 ab d8 cc ae 18 b4 84 8d 7e c4 1b d7 bf 80 48 52 6a cd 65 96 8e 3d c0 64 b4 4f bf 77 19 ed 24 ac 77 6e d0 71 66 69 54 67 f8 e1 7b 1e e1 Data Ascii: gcO_px<l'=r9*TcL#vwnnpQ;X__8+u:f,zq5\c%m#+m7\|$I<.$4uR698\2Q1()4KsA4,0B~HRje=dOw$wnqfiTg{
2024-05-15 22:36:58 UTC	12120	IN	Data Raw: 81 36 c4 6e 04 4e 32 98 a6 04 5a d1 69 c5 5e d8 61 e5 03 35 99 2f 4c 4b 2b 69 13 45 31 69 96 31 18 0f 38 3c 3c a0 aa 2b 92 b8 85 56 e2 41 fa 64 6d 2b 46 c3 43 12 55 f1 b1 2b 0b 7c f6 89 1e 97 57 12 d6 f6 87 bc 7a 7b 93 d7 ef ed f1 ed db 05 d7 0e e7 58 3e de e7 97 3f 6b f9 fd af 9c e6 11 bd ce fa ed 5b fc fb ef 56 dc bc 59 32 c3 36 c7 5b db 2c 2c 3a e6 8e 9f 60 3a ed b2 bb 59 30 7f ac c3 f6 86 e4 bb 5f df e6 e6 1b 6b 7c ed 35 c3 7f fb 52 87 6b fb 6d 9e bb 02 bf fe a3 23 3e fe 8c 46 aa 45 5e fc ab 11 df fb ab 55 b6 07 25 77 0f 15 db 13 c7 c9 8e e0 47 2f 26 5c 5c 8c 99 0a cd ec c9 93 74 67 7a e4 d3 09 c7 4f 1c 23 ec 74 fc b5 26 3d 2e a3 a5 42 29 e9 11 69 25 bc 3c 35 af 08 92 1e 32 8a e8 cc f4 d9 de 3e e0 60 6f 80 d6 21 56 34 ee ad 52 22 03 af 25 96 52 21 95 Data Ascii: 6nN2Zi^a5/LK+iE1i18<<+VAdm+FCU+\|Wz{X>?k[VY26[,,:`:Y0_k\|5Rkm#>FE^U%wG/&\\tgzO#t&=.B)i%<52>`o!V4R"%R!
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: dc 62 d5 f0 c8 8f 5c 18 54 9d c1 e1 0d aa bd eb 94 93 43 ea 3c a3 ce 52 aa bc c4 94 9e e5 64 ad 69 ee 92 ee 88 c6 e3 8b 5d aa 07 e1 54 47 5f 9d f4 f1 90 52 fa f1 59 68 bf e7 95 42 fa 3b ae 92 48 ed 0d e7 aa d2 90 4d 0b b2 49 41 9e d5 94 b9 a5 28 2c 45 55 37 e6 7f de b9 a1 ac 2a f2 c2 f3 69 15 05 c7 ba 82 93 b3 0a e7 2a ae dd dd e5 fa fd 3d 6e 6d 0c 78 73 13 06 62 99 b3 67 e7 f8 c9 cf b4 f8 c9 cf 9e 27 7d e9 af 58 7d f5 bb bc ba 3b c7 2b f7 03 1e 7b 34 e0 4b 3f d2 e5 e2 92 63 3c aa d8 58 4b b9 7b 7d c4 e1 de 94 b0 e5 e8 f4 a1 3b 23 09 5a 2d 90 09 12 89 53 31 bb bb 15 ab 77 27 dc 59 1d f1 3f 7d d7 72 6d bf 4b 2b 89 99 89 27 0c 07 25 e7 96 ba fc c8 e3 cb 74 3a 82 57 ee ef 73 63 2d e5 e4 e9 b3 9c 3b bd c8 e1 c1 1e 4f bf f0 31 9e 7d df 47 c8 a6 fb dc bd 79 83 Data Ascii: b\TC<Rdi]TG_RYhB;HMIA(,EU7i=nmxsbg'}X};+{4K?c<XK{};#Z-S1w'Y?}rmK+'%t:Wsc-;O1}Gy
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: 80 41 3b e9 a0 f4 11 ba 02 aa 8e f2 5a 48 df ad 88 50 91 0b d3 92 b2 dc 99 3b fb e5 da 74 1b 83 cc 53 94 35 84 2a 20 f0 43 7c 3f 23 d4 ab 04 ba 4f e0 67 84 be 25 0c 35 a1 67 d0 5a a0 4a fe b1 70 cc 18 16 db 86 e5 ae 65 d3 b4 c7 b6 39 4d bd e2 23 19 21 45 e2 2a 23 2b b0 85 80 c2 65 1b a7 40 e4 87 24 15 c3 90 94 2c 37 8c 62 8b 50 06 71 ea 08 59 56 a5 36 bb 9d 6a 28 d1 d2 a7 1a c2 94 b5 a4 49 4c a7 93 d1 e9 0b 86 89 24 4b 04 69 09 09 94 c2 22 6c 8e ef c1 cc 64 93 8d f3 eb d8 b4 71 1d 8d ba 83 aa f7 3a 43 02 cf 52 51 d6 45 87 22 d0 56 e2 c9 1c 4f 4a 6c 2e d0 42 12 28 45 a4 ab 9c 5d 3a c5 d7 9f fc 22 cf ef ff 11 83 7e 9b a7 76 0b de 70 77 9b 8f fd c2 c5 5c bc ab 46 91 8b 92 ab 9d af ad 88 64 59 3a 1b 9b af d1 1f 5d 02 a0 53 0f 9a 52 ab 5e 4e 51 4b 6d b3 20 cf Data Ascii: A;ZHP;tS5* C\|?#Og%5gZJpe9M#!E*#+e@$,7bPqYV6j(IL$Ki"ldq:CRQE"VOJl.B(E]:"~vpw\FdY:]SR^NQKm
2024-05-15 22:36:58 UTC	7952	IN	Data Raw: 0f 99 9d dd 4c 92 2b 56 3a 39 2b ed 1e 59 1a 33 3f d7 62 d0 4f 58 3a bb c0 b5 57 cd f1 f3 3f f7 76 de f9 ae 77 d0 a8 b7 78 7e ef 21 9e 7f fe 10 7f f9 57 9f 62 69 b5 cb e6 f5 b3 0c 33 43 af 3b e0 d8 a9 36 79 a6 f0 3d cf 09 26 4c b1 56 b2 da d2 3c d1 5a bf 85 75 db 2e 21 88 aa 64 c9 88 d1 a0 8b 52 1e bd f6 12 c6 e4 78 9e 8f 1f 54 c8 b3 21 79 1a 13 0f bb a4 83 36 c3 de 0a 83 c1 88 a9 09 c9 7b ee db cc 3b ee dd 40 ab e9 93 a4 a5 12 4b 14 78 de 24 ad c9 eb a8 d5 2f 42 49 57 2e 1b 93 af ed 90 ad 75 e0 06 5d e2 b1 2c b8 f4 4f 29 5d 9b 65 0a b4 38 8f 33 6b 0a 4b 61 4b 97 88 74 83 0b 21 1d cc 3a 37 60 90 6c d8 34 c3 7d 6f be 89 6d 1b e6 79 e0 0b df 60 cf 17 bf 43 bc bc 44 b4 7e 8a 0f fc fa 47 78 d3 07 ee 75 fb 50 ad 39 72 f0 08 9f f9 a7 2f b2 77 f7 7e 54 c5 27 b7 Data Ascii: L+V:9+Y3?bOX:W?vwx~!Wbi3C;6y=&LV<Zu.!dRxT!y6{;@Kx$/BIW.u],O)]e83kKaKt!:7`l4}omy`CD~GxuP9r/w~T'
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: 7e e3 3e 1e ff fa d7 f1 72 19 de f8 f6 37 72 d7 1b 5e 89 c8 96 98 9c eb d2 6a b7 90 ba 45 d8 59 a2 b6 30 cf fc dc 12 4b 4b 35 7c 3f 58 03 63 18 a0 a1 24 75 cb c2 93 0a d7 c9 b2 50 18 22 c0 45 48 85 52 36 9e 93 2e e5 2d 21 b0 65 82 2d 53 40 86 d3 43 5f d9 56 ca b6 71 94 ec 81 3a 7a 41 6c c9 54 8f 4a 2a 3c 5b 90 37 1a 57 18 5c 05 25 09 03 8e 45 4e f5 0c d0 8d 26 ee 41 31 23 ad 21 5f c4 2b 0d a4 72 a9 3a 4e cb 9e de 13 b8 26 77 d3 23 23 a4 ab a4 34 80 55 26 43 76 60 18 a7 38 02 76 06 db 53 64 f2 16 b6 23 7b a4 7c c8 b8 8a 66 33 64 a9 1e a3 13 58 6d 86 a9 d5 0b 9a 76 d7 50 18 ae a2 94 21 6c b5 51 b6 03 52 10 d4 6b 29 c0 de cb a5 53 79 a1 c9 7a 36 b6 09 68 d4 57 7b c2 04 45 72 19 87 91 91 0a b6 e7 b1 b8 da 65 71 b5 4b ad d5 a5 1b 44 29 da da 18 ba 5d 9f a5 c5 Data Ascii: ~>r7r^jEY0KK5\|?Xc$uP"EHR6.-!e-S@C_Vq:zAlTJ*<[7W\%EN&A1#!_+r:N&w##4U&Cv`8vSd#{\|f3dXmvP!lQRk)Syz6hW{EreqKD)]
2024-05-15 22:36:58 UTC	8048	IN	Data Raw: 72 57 10 db 9f 77 ae 20 20 98 be 6e 33 eb d7 ab ff b5 df 31 ef fa 4e da df c6 00 de f8 b1 75 90 48 7f 7b d5 03 82 f4 a7 cd a4 53 69 4b a9 74 86 45 82 8f 4d 13 8f 2e 8a fe 58 4b 0a 4d 49 87 78 04 28 09 b1 b0 49 a4 45 28 53 1f 2c 2b 36 c4 44 68 6c 1a 5e 95 96 51 88 e6 2a 8f df f7 25 3e ff 57 7f 41 65 7c 0b df fb a1 1f e3 96 fd bb 29 04 cb 3c 71 e4 2c 0f 7c fb 49 8a 9b f7 73 d5 6d 77 22 5e 75 c7 fb 8d 2b 53 ea 96 a5 0d ae 30 38 9d 26 07 5a 0d 6e 48 42 82 38 26 d6 21 3a 8e 48 e2 80 c4 44 a9 35 44 8f eb 68 6b c3 a2 4e f8 ab 6e 87 f9 58 23 8b 45 82 91 11 32 99 3c 3a 89 b1 b2 59 1c 24 63 ad 06 bb e7 67 c9 2f 2e 90 41 a3 87 87 89 5e 7c 07 ce ed 2f a1 38 34 cc d4 c5 73 3c fe d8 a3 d4 16 66 d1 a1 4f d8 0d 71 25 14 1d 49 d6 92 78 96 45 ce 49 0d b7 5d 4b 1d b1 a4 fc Data Ascii: rWw n31NuH{SiKtEM.XKMIx(IE(S,+6Dhl^Q*%>WAe\|)<q,\|Ismw"^u+S08&ZnHB8&!:HD5DhkNnX#E2<:Y$cg/.A^\|/84s<fOq%IxEI]K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49964	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	630	OUT	GET /steam/apps/239140/capsule_184x69.jpg?t=1715341001 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7184 Last-Modified: Fri, 29 Jul 2022 15:39:13 GMT ETag: "62e3ff21-1c10" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=133189 Expires: Fri, 17 May 2024 11:36:47 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	7184	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 07 08 09 02 03 04 01 0a ff c4 00 3d 10 00 01 03 03 04 00 04 05 02 03 06 04 07 00 00 00 01 02 03 04 05 06 11 00 07 12 21 08 13 31 41 09 14 22 51 61 15 32 42 71 81 Data Ascii: JFIFCCE=!1A"Qa2Bq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49965	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	400	OUT	GET /steam/apps/1203220/capsule_184x69.jpg?t=1715253758 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 8542 Last-Modified: Tue, 23 Apr 2024 11:04:58 GMT ETag: "662795da-215e" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=590317 Expires: Wed, 22 May 2024 18:35:35 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	8542	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 07 04 05 06 08 01 02 03 09 00 ff c4 00 3b 10 00 02 01 03 03 03 02 04 04 04 04 06 03 01 00 00 01 02 03 04 05 11 00 06 12 07 21 31 13 41 08 22 51 61 14 15 32 71 23 42 81 91 Data Ascii: JFIFCCE;!1A"Qa2q#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49966	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	630	OUT	GET /steam/apps/230410/capsule_184x69.jpg?t=1715792355 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7987 Last-Modified: Wed, 27 Mar 2024 15:01:35 GMT ETag: "660434cf-1f33" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=584576 Expires: Wed, 22 May 2024 16:59:54 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	7987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 04 07 08 02 03 01 00 09 ff c4 00 3d 10 00 01 03 03 03 03 02 05 01 05 05 08 03 00 00 00 01 02 03 04 05 06 11 00 12 21 07 13 31 22 41 08 14 51 61 71 32 15 23 42 81 91 Data Ascii: JFIFCCE=!1"AQaq2#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49967	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	631	OUT	GET /steam/apps/1056640/capsule_184x69.jpg?t=1715705326 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7621 Last-Modified: Tue, 06 Jun 2023 22:02:01 GMT ETag: "647facd9-1dc5" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=497464 Expires: Tue, 21 May 2024 16:48:02 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	7621	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 02 03 04 05 01 07 08 00 09 ff c4 00 40 10 00 02 01 02 05 02 05 02 04 03 04 08 07 00 00 00 01 02 03 04 11 00 05 06 12 21 07 31 08 13 22 41 51 61 71 14 32 42 81 23 91 c1 Data Ascii: JFIFCCE@!1"AQaq2B#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	49968	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	630	OUT	GET /steam/apps/394360/capsule_184x69.jpg?t=1715685474 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6978 Last-Modified: Wed, 03 Apr 2024 11:22:43 GMT ETag: "660d3c03-1b42" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=477605 Expires: Tue, 21 May 2024 11:17:03 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	6978	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 01 05 01 00 00 00 00 00 00 00 00 00 00 00 06 07 03 01 02 04 05 08 00 ff c4 00 3f 10 00 01 03 03 03 02 04 03 05 03 0b 05 01 00 00 00 01 02 03 04 05 06 11 00 07 21 12 31 08 13 41 51 14 22 61 32 42 71 81 91 15 17 23 Data Ascii: JFIFCCE?!1AQ"a2Bq#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	49969	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	630	OUT	GET /steam/apps/271590/capsule_184x69.jpg?t=1714055751 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 9379 Last-Modified: Wed, 08 Jul 2015 17:56:23 GMT ETag: "559d6447-24a3" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=308525 Expires: Sun, 19 May 2024 12:19:03 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	9379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 07 08 05 06 02 04 09 01 03 00 ff c4 00 3c 10 00 01 03 03 03 02 05 01 05 06 05 04 03 00 00 00 01 02 03 04 05 06 11 00 12 21 07 31 08 13 22 41 51 14 15 23 32 61 71 16 72 81 Data Ascii: JFIFHHCCE<!1"AQ#2aqr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	49970	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	400	OUT	GET /steam/apps/2344520/capsule_184x69.jpg?t=1715714373 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 4173 Last-Modified: Tue, 29 Aug 2023 14:03:07 GMT ETag: "64edfa9b-104d" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=506577 Expires: Tue, 21 May 2024 19:19:55 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	4173	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 05 06 07 04 08 09 ff c4 00 35 10 00 02 01 03 02 05 03 03 03 02 05 05 00 00 00 00 01 02 03 00 04 11 05 21 06 07 12 31 41 13 51 61 08 22 71 14 32 81 91 b1 15 16 Data Ascii: JFIFCCE5!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	49972	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	400	OUT	GET /steam/apps/1604030/capsule_184x69.jpg?t=1715590903 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 4522 Last-Modified: Thu, 09 May 2024 09:49:12 GMT ETag: "663c9c18-11aa" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=383038 Expires: Mon, 20 May 2024 09:00:56 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	4522	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 09 00 ff c4 00 41 10 00 02 01 03 03 02 04 04 03 03 07 0d 01 00 00 00 01 02 03 04 05 11 00 06 21 07 12 08 31 41 51 13 22 61 71 14 32 81 52 82 91 18 Data Ascii: JFIFvvCCEA!1AQ"aq2R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	49973	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	399	OUT	GET /steam/apps/553850/capsule_184x69.jpg?t=1709666906 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Mon, 11 Sep 2023 20:20:34 GMT ETag: "64ff7692-27cf" Server: nginx Content-Type: image/jpeg Content-Length: 10191 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=446610 Expires: Tue, 21 May 2024 02:40:28 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	10191	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 03 01 01 01 01 01 01 01 00 00 00 00 00 00 00 05 06 07 08 04 03 01 02 00 09 ff c4 00 3b 10 00 01 03 03 03 02 05 02 04 04 04 06 03 00 00 00 01 02 03 04 05 06 11 00 12 21 07 31 08 13 22 41 51 14 61 15 32 71 81 23 42 52 Data Ascii: JFIFCCE;!1"AQa2q#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	49974	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	399	OUT	GET /steam/apps/281990/capsule_184x69.jpg?t=1715759591 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 4925 Last-Modified: Thu, 01 Sep 2022 08:15:32 GMT ETag: "63106a24-133d" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=551781 Expires: Wed, 22 May 2024 07:53:19 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	4925	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 07 01 02 06 08 00 ff c4 00 40 10 00 01 02 05 03 02 05 01 05 04 06 0b 00 00 00 00 01 02 03 00 04 05 06 11 07 12 21 31 41 08 13 22 51 61 71 14 32 81 91 a1 16 23 42 Data Ascii: JFIFCCE@!1A"Qaq2#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	49977	96.17.60.195	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	630	OUT	GET /categories/homepageimage/category/rpg?cc=us&l=english HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	2083	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.cloudflare.steamstatic.com/ https://store.cloudflare.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com https://steamcommunity-a.akamaihd.net; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.cloudflare.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.cloudflare.steamstatic.com/ https://checkout.steampowered.com/ https://.steamstatic.com https://.steamcontent.com https://.valvesoftware.com https://.steambeta.net https://*.discov [TRUNCATED] X-Frame-Options: DENY Cache-Control: public,max-age=44683 Expires: Wed, 15 May 2024 20:15:13 GMT Last-Modified: Wed, 15 May 2024 01:50:34 GMT Strict-Transport-Security: max-age=10368000 Content-Length: 127133 Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	14301	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 e9 08 06 00 00 00 1a 8c ba c1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 10 63 61 4e 76 00 00 02 f2 00 00 01 bb 00 00 00 b4 00 00 00 3c 27 41 e8 f4 00 00 80 00 49 44 41 54 78 da 74 fd 77 98 65 d7 75 de 09 ff f6 de 27 de 5c b9 ba ba ab ab 73 40 ea 46 8e 04 08 90 20 48 08 14 b3 44 53 c1 61 64 59 61 2c 07 d9 23 db 63 cf d0 df f8 7b fc c9 63 7b 6c 8f b3 15 46 b6 02 25 4a 14 25 31 07 80 20 88 9c d1 40 77 a3 73 57 55 57 0e 37 df 93 f6 de df 1f e7 de aa 6a 90 53 cf 53 4f 77 dd ba 55 75 cf b9 7b a5 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDcaNv<'AIDATxtweu'\s@F HDSadYa,#c{c{lF%J%1 @wsWUW7jSSOwUu{
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: e6 09 fc 52 8d e3 77 3e c8 77 ff e2 8b fc e1 ef fe 0e 17 2f 5c 40 67 86 7a 26 69 24 06 2b 5d 02 3f 67 a0 64 c6 12 a7 c9 d6 90 81 44 70 c3 81 03 fc ad 9f ff 9f a8 85 8a a7 7e f0 0c e7 2e ce b3 7b 6c 94 b1 89 61 fe c1 43 0f 30 77 6d 91 df fc 1f 5f e0 ed 8b 97 f1 7c 87 24 ed 8b ee f5 7a 00 24 49 82 d6 05 8a c5 22 42 38 28 e9 61 4d 7e 26 7a dd 1e a5 72 91 3d 7b a6 49 b3 94 62 b1 48 b9 5c 61 71 f1 5a ae e7 5d 2e 13 27 09 71 1c e3 0a cd f0 70 8d ce 9d 9f 24 79 e8 97 50 33 b7 20 34 10 e7 f3 e7 42 b2 d5 2d c9 6d 76 a0 d5 c6 0e 3d e9 be e0 42 7f 0e 42 08 81 6b eb 8c af fc 21 6a f5 3b a4 dd 0e 0a 17 4d 46 2f ee e5 29 74 94 e2 3a 1e ae ef 11 47 09 52 59 74 ba 41 ab 3e cf e8 4d 7f 03 39 f5 01 4c af 43 2f 03 a3 5b d8 c5 6f 93 cd 7d 97 9e 57 27 93 82 ae b5 c8 48 40 0f Data Ascii: Rw>w/\@gz&i$+]?gdDp~.{laC0wm_\|$z$I"B8(aM~&zr={IbH\aqZ].'qp$yP3 4B-mv=BBk!j;MF/)t:GRYtA>M9LC/[o}W'H@
2024-05-15 22:36:58 UTC	2792	IN	Data Raw: f9 19 3a 7e 22 12 f7 83 00 29 54 4a 36 90 18 22 35 66 07 e2 28 42 aa 88 8d 13 6b c8 67 1d 4e 9f 39 cf 89 53 93 bc 7d 6e 96 d0 57 48 53 e3 58 92 52 c1 a6 db 6d f2 d7 7f fb b7 bc f0 ca 61 4c 2b c7 e3 4f 3c c9 4c 7d 05 3f 50 64 2d 1b db 94 ac 19 2c d3 5f cc e2 ba 16 9d 4e 93 30 36 58 6a cc 60 99 06 6e c6 44 45 61 12 83 23 4d 82 58 81 96 d8 b6 49 18 1a 08 11 20 84 24 f2 3c 62 24 f6 8d 8f 90 7b df ef 60 6e ba 05 62 8d f6 7b a2 83 6b 20 95 5e 92 5f 9a ca 71 b5 45 be aa e1 ed ed 33 95 96 f8 1a 86 8d 36 9b 56 0e d1 bd f4 36 b5 10 3a 43 bb 10 95 31 a4 30 09 50 78 a1 62 73 ae cb 75 7d 06 91 96 c9 13 4a 2b ad 69 08 ce 4d cd f3 a5 c7 9e e3 b5 63 a7 a8 d5 eb 84 b1 42 58 0e e5 4a 85 d8 c9 32 ba 76 3d a5 5c 06 45 8c 32 93 f8 17 a5 13 2a f1 b9 2b f3 3c 7f e8 6d 32 b9 3c Data Ascii: :~")TJ6"5f(BkgN9S}nWHSXRmaL+O<L}?Pd-,_N06Xj`nDEa#MXI $<b${`nb{k ^_qE36V6:C10Pxbsu}J+iMcBXJ2v=\E2*+<m2<
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: a6 91 c4 68 0c be f4 bd a7 f8 fa 0f 9e 64 70 78 84 7c be 40 a1 98 c3 b1 6d f2 d9 2c b6 69 e0 66 32 ec de b4 8e e5 e5 3a 27 cf 4f b3 ec b8 98 b9 61 b4 69 60 1a 8a a5 96 c7 13 87 27 d9 be 76 30 71 4f b9 c6 40 23 56 82 81 72 8e 4f be ff 41 b2 8d 93 bc 7d f4 65 96 ea 8b 28 23 c6 2a 5b 14 2d 81 11 37 59 e9 f8 ec d8 b9 8f 7d 7b 76 26 6b a5 7f f3 fb bf a8 13 df ab 84 ff 1c 85 21 85 52 8e ea c0 00 f3 f3 75 5e 7f fd 38 53 97 17 f0 bc 36 d9 9c cd 67 fe d1 a7 d8 bb ef 46 7e fb b7 7f 9f a5 c5 39 b6 6e 9e a0 55 f7 98 5f 6e b0 d2 ee a0 54 44 21 9f c3 90 92 5a 6d 99 42 a1 40 7f 7f 99 c5 c5 45 86 4b 79 46 f3 36 39 23 a2 9a 35 d8 ba ef 76 6e 78 d7 47 19 1a df c0 e7 ff f8 73 fc e0 b1 6f 12 0a 87 f9 7a 8b be 81 3e 06 07 fb 18 e8 ef a3 58 2a 71 ec c4 69 1a cb 4b 5c bf 73 07 Data Ascii: hdpx\|@m,if2:'Oai`'v0qO@#VrOA}e(#[-7Y}{v&k!Ru^8S6gF~9nU_nTD!ZmB@EKyF69#5vnxGsoz>XqiK\s
2024-05-15 22:36:58 UTC	12120	IN	Data Raw: 3b cb e4 b3 06 51 f4 93 b3 bd 14 82 56 b7 cb d4 c2 32 e7 ae cc 73 79 61 99 e9 28 a0 63 4b 8a b9 02 7b 47 46 b8 6d bc 9f 82 65 a7 ef 71 fa 5a b5 c2 34 24 b3 0b 35 fe e2 3b cf 71 6e 7a 89 6a d9 65 a0 d0 cf c0 e0 5a f6 ed 9a 60 dd 80 45 d6 36 40 c4 f8 7e 4c ab 1b 72 65 61 99 b7 2f 2f 72 f2 d2 02 73 0d 8f 7a cb a7 dd 6e 73 cb 96 11 3e fd f0 ad ec 58 3f 9c be fe 5e 67 2c 52 41 8b a4 ed 79 3c f9 fa 31 1e 7b f6 65 e6 9a 1e 4b 81 4b 28 5d fa dd 80 2d 83 2e 1b 86 07 18 e9 af 52 cc 26 76 c8 41 18 d2 6a 77 58 5c 6e 30 39 b3 c0 95 d9 05 96 1a 2b 74 bc 2e ae e9 a4 99 c4 3e 22 eb 50 9e d8 c1 e0 ce 1b c8 1b 6d e2 8b 5f c5 bd f2 34 56 5b 83 c8 40 e8 91 0d 3c 50 0a b3 d0 8f 95 b5 e9 96 42 44 c1 c2 89 25 45 5d 62 c8 1d a0 9c c9 93 b1 9d 64 03 92 72 e6 a4 53 c1 28 8c a0 dc Data Ascii: ;QV2sya(cK{GFmeqZ4$5;qnzjeZ`E6@~Lrea//rszns>X?^g,RAy<1{eKK(]-.R&vAjwX\n09+t.>"Pm_4V[@<PBD%E]bdrS(
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: 11 5c fd 12 bc 1d fb b0 0b 0b 74 1f bb 0f d1 6d 61 94 07 42 23 a2 10 26 26 90 95 86 db 79 ca 52 37 ec 79 a8 c0 43 c4 31 42 79 0e 84 c9 73 ba a7 5f 40 2e cd 51 d9 b2 03 6f 78 cc a5 f2 69 5d ba 43 0e f0 5a 47 e0 10 25 99 43 89 01 1a 69 71 b4 39 8d 3b b1 30 1a a9 0d ca ba 04 42 84 42 2b 67 9a a7 74 8e c9 05 4a 54 00 e9 d2 ed b5 87 35 1e c2 78 25 f2 3a b0 08 28 d7 b7 ee ce 6c 9a 5b 58 be f6 6d ac f5 6e a3 b9 7a 0a 51 f4 d8 18 d9 45 da dc 8a d4 c2 3d ef fe 62 e9 7f 99 85 37 21 d0 7d e6 d9 a6 79 de 71 59 c4 26 87 cd 41 f3 51 de c8 9c ce d8 f5 dd 96 5c 43 2f 73 41 8b da 19 9e ba 14 43 3f 40 ab 51 ce ab 06 a7 e6 3b dc bf d8 e2 96 89 84 97 0e 77 d8 3a 56 23 0a 6b 84 be 47 96 25 fc e8 a9 17 78 ec d9 63 74 36 5a 78 9e 4f 51 db 81 9a 8a a8 f6 0e a3 12 8b f4 21 96 39 Data Ascii: \tmaB#&&yR7yC1Bys_@.Qoxi]CZG%Ciq9;0BB+gtJT5x%:(l[XmnzQE=b7!}yqY&AQ\C/sAC?@Q;w:V#kG%xct6ZxOQ!9
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: c7 58 6f 07 14 69 88 42 e3 ab 14 ac 8f a1 56 ce d2 1a 63 34 d3 0d 8f a8 0e 99 2f 10 91 44 46 92 20 30 f8 b1 a1 2a db 5c b6 71 86 a9 9e 43 b9 75 bd 4e 26 15 a7 ee ff 2a 2f fc c5 bf 61 f5 89 ef 60 8b ec ff 71 f1 82 9b 33 1f 79 e4 11 be f4 a5 2f 21 84 e0 c0 81 03 44 51 e4 b2 a0 37 e5 13 79 9e 43 b0 b5 d6 ec dd bb 97 b7 bc e5 2d 6c db b6 8d 47 1e 79 64 80 44 d7 6a 35 5e f3 9a d7 0c fc ab ba dd 2e 6f 7a d3 9b 98 9e 9e a6 dd 6e 03 0c 4e f5 3e 0a 1e 04 01 0f 3e f8 20 1f fa d0 87 58 58 58 20 4d 53 b4 d6 34 1a 0d f6 ef df cf 0d 37 dc 40 96 65 84 61 c8 f4 f4 f4 e0 e7 db ff bd cf b7 fe c6 37 be 81 b5 96 d7 bf fe f5 ec d8 b1 83 d3 a7 4f a3 b5 66 64 c4 85 a7 2d 2d 2d d1 6c 36 79 e2 89 27 b8 f2 ca 2b b9 e3 8e 3b d8 b3 67 8f 43 a1 5f f6 f1 2f db f5 93 a7 29 5a 1d aa 33 Data Ascii: XoiBVc4/DF 0\qCuN&/a`q3y/!DQ7yC-lGydDj5^.oznN>> XXX MS47@ea7Ofd---l6y'+;gC_/)Z3
2024-05-15 22:36:58 UTC	7952	IN	Data Raw: 8b 93 1a a6 67 66 f0 be f0 ab ec 7c ee 1f 12 ce 5f a2 2c 33 02 65 8a 69 8a 23 28 39 05 f2 d6 91 c5 87 af 04 81 23 8f 46 53 5a 14 88 20 a9 c4 07 14 52 61 51 4a e2 38 ea 08 68 25 8f 04 1d 12 35 3f 3b fd 92 e3 78 78 41 8d 72 6d 8e cc 24 18 d7 2b 50 2f a3 21 71 96 22 aa 33 28 d7 27 ec b7 20 8b c9 f3 88 2c 4a 99 7a fc 39 ca 33 33 05 72 c4 14 51 a2 45 76 30 05 50 0d b0 b2 68 7c 05 49 c8 ee 1f 7f 85 ee ee 2e d3 3f f5 97 71 4e 3d c4 56 68 48 cb 13 2c eb 94 de ea 2a 83 24 c3 68 8d d5 8a f4 60 9f cc 58 9c 89 59 86 9b 5b 68 bf 44 a3 5a 46 23 89 72 4b 6a 24 b9 d0 45 0e 93 d2 58 47 23 5d 0f a9 5d 8c 52 a0 5d 84 eb 16 8c e7 52 05 ca 55 44 e0 13 d4 ab 3c 73 76 99 ff ea e3 0f f3 b7 3f 74 8a a5 7a 89 30 cd 39 88 32 f6 e3 0c 93 e5 b8 36 45 da c2 3c 90 a5 31 db fd 88 6f 6f Data Ascii: gf\|_,3ei#(9#FSZ RaQJ8h%5?;xxArm$+P/!q"3(' ,Jz933rQEv0Ph\|I.?qN=VhH,*$h`XY[hDZF#rKj$EXG#]]R]RUD<sv?tz0926E<1oo
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: 1b c6 21 dd fe 90 24 07 1c 1f af 36 81 2e 55 8a b3 44 66 c7 19 b5 63 02 a2 35 58 a5 70 3c 1f 2f 08 d0 41 8d 5c bb 88 a0 4c d0 9c c2 68 b7 b0 66 65 39 56 3a 68 d7 27 1f 16 56 c4 a4 d3 01 93 63 d3 22 23 58 48 01 7e 09 39 33 83 9a 9c 22 0b 02 32 21 f8 e8 a9 19 fe ee 73 e7 b8 d6 89 f8 8d 77 d6 f8 ea f5 0d be 79 6b 83 6f de de e7 ab 77 f7 f9 f6 ce 80 db dd 21 35 cf 65 a6 e4 d0 f4 1c 1e 6e f8 3c 3f 55 22 b5 39 2f 6f f7 f9 fa bd 36 f7 ba 43 6a ae c0 97 92 f9 8a cb 23 53 35 1e 9f 6d 30 ed 6b ee b5 7b fc f3 37 ef f0 9b af df 64 bb 33 40 45 11 c9 d6 06 62 d8 47 db 9c c0 75 f0 1d 8d ab 80 34 26 8f 23 92 d1 88 3c 49 c8 e3 84 2c 8e 88 76 ee d1 bb f1 2a d1 ce dd 22 28 6e bc e3 36 cb 2e 97 8e 4f d2 ac 7a f4 87 09 7b bd 90 4e 37 e4 e4 42 8d e9 c9 26 27 4e 9e 64 76 61 86 Data Ascii: !$6.UDfc5Xp</A\Lhfe9V:h'Vc"#XH~93"2!swykow!5en<?U"9/o6Cj#S5m0k{7d3@EbGu4&#<I,v*"(n6.Oz{N7B&'Ndva
2024-05-15 22:36:58 UTC	8048	IN	Data Raw: 25 50 3e 3b 6a 05 42 4f b1 d0 ee d3 cb 2c 05 61 a8 16 7d 46 bd 02 17 8d 94 38 3c 5c e6 fe 53 0b 7c f1 e9 39 7c ab a9 05 96 92 b4 10 27 74 db 1d 94 d5 d4 cb 05 7a cd 36 8b 33 0b b4 9b 2d 74 1a 63 d3 14 9b 66 58 9d 61 8d b9 1d 6d 7e 5e 14 fc 3b 6d 9c 39 05 cb 43 9f fd db 68 dc 6f ad 97 00 3f 07 bc e1 af fb 41 21 04 a3 8d 32 a5 42 c8 f2 46 9b 6e ff 9b d9 5f db bc dc 1c 4d dc 22 dd 0b e1 56 09 25 84 3b cb 2a e7 bb d4 b3 ce 64 5c 09 e1 72 77 84 d8 f6 a2 0a a4 a4 20 15 05 69 29 e5 cd 3b 94 c1 54 64 98 44 32 58 0c 08 02 58 4f 33 4e 27 19 73 1e 68 a9 18 4e 2c d3 89 66 ba 10 30 31 2c a9 35 32 b4 95 f4 da 12 29 0d e5 1a 08 25 59 5f 83 8d 0d 89 46 90 68 47 27 2c 86 92 42 68 79 3a 32 fc 6e b3 c3 49 6d 00 7a c0 1f 83 fd d5 9b 46 a7 8e ff 5e af c5 97 3b ed bf f4 1a 8d Data Ascii: %P>;jBO,a}F8<\S\|9\|'tz63-tcfXam~^;m9Cho?A!2BFn_M"V%;*d\rw i);TdD2XXO3N'shN,f01,52)%Y_FhG',Bhy:2nImzF^;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	49976	96.17.60.195	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	635	OUT	GET /categories/homepageimage/category/strategy?cc=us&l=english HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	1676	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.akamai.steamstatic.com/ https://store.akamai.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com https://steamcommunity-a.akamaihd.net; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.akamai.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.akamai.steamstatic.com/ https://checkout.steampowered.com/ https://.steamstatic.com https://.steamcontent.com https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.cqloud.com https://steambroadcast.akamaized [TRUNCATED] X-Frame-Options: DENY Cache-Control: public,max-age=49858 Expires: Wed, 15 May 2024 23:44:49 GMT Last-Modified: Wed, 15 May 2024 08:55:54 GMT Strict-Transport-Security: max-age=10368000 Content-Length: 122989 Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	14708	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 e9 08 06 00 00 00 1a 8c ba c1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 10 63 61 4e 76 00 00 02 f2 00 00 01 bb 00 00 00 b4 00 00 00 3c 27 41 e8 f4 00 00 80 00 49 44 41 54 78 da 84 fd 77 b0 a6 79 76 d7 09 7e 7e e6 71 af 7f af 37 e9 6d 55 65 99 2c df d5 56 ed a5 6e b5 5a dd 52 0b 10 42 80 56 2b 69 57 0c 20 96 dd 99 65 62 66 2a 06 62 89 65 16 66 19 62 77 62 27 60 59 88 61 00 01 62 24 90 69 49 6d d4 6a 5b dd 65 ba 4c 66 56 55 7a 73 fd bd af 7f 1f f7 33 fb c7 f3 de cc 12 b0 b1 b7 e2 46 de ca 78 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDcaNv<'AIDATxwyv~~q7mUe,VnZRBV+iW ebf*befbwb'`Yab$iImj[eLfVUzs3Fx
2024-05-15 22:36:58 UTC	9868	IN	Data Raw: 90 79 25 4b f4 de 1d f2 45 66 ec ae 2a a3 09 3f 3b 7c d0 78 51 72 af 97 72 7b e2 39 e3 0a 6a b1 65 f5 e1 13 b4 c3 84 ef bc 35 c6 c7 09 22 8c d1 52 13 86 09 de 19 c6 e3 01 dd b9 39 84 83 69 bf 5f a1 9a f5 3a 51 9c 1c 26 fa 19 21 c5 a2 b5 22 90 92 22 4b 39 d8 b9 c7 70 77 0b 57 e6 78 66 c6 03 4a 57 76 a1 b3 41 fc e1 99 78 5f a5 39 fb 78 0d 8a e6 e2 3a 73 cb 47 50 5a 61 4c 31 23 b8 54 ad 47 57 66 1c f7 39 35 0c 13 04 3e 37 ac d7 e0 48 28 99 6f 36 a0 cc 78 ed ca 16 6f 5f cb 39 f7 50 97 67 3e 12 a3 ea 53 5e fe 7e 42 a6 02 5a 47 ba 3c b7 3c 22 ce 73 b6 27 1d c6 a6 20 28 27 68 03 99 73 58 61 71 ce 62 0a 4b 9a 16 4c c7 13 26 83 1e 73 35 4f bb 31 e6 ff fa 0f bf c2 7f ff 8f 5f e6 eb 3f dc e4 b5 4b db 8c f6 c7 9c a8 e7 7c f0 f9 63 5c 7c ea 0c 67 d6 6b 08 5b a3 1f 9d Data Ascii: y%KEf*?;\|xQrr{9je5"R9i_:Q&!""K9pwWxfJWvAx_9x:sGPZaL1#TGWf95>7H(o6xo_9Pg>S^~BZG<<"s' ('hsXaqbKL&s5O1_?K\|c\\|gk[
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: 82 10 d5 22 e9 20 a4 b3 7a bc 3a 28 f2 09 4e 07 18 32 7c 6e c9 a7 05 f5 6e 93 30 a8 68 af 7b 99 e0 95 9d 8c 6f ef 67 6c 59 c9 50 6a 76 8d 63 df 58 bc 6e 90 87 0d e2 38 42 05 01 b1 52 c4 a5 20 12 86 24 94 74 83 92 63 da 72 14 47 0b 89 57 7a 46 4c 90 94 45 c6 b8 cc 99 66 23 ce ce 85 7c fc a3 47 f8 e8 e7 9e e6 47 9e 10 0c bf f3 9b 7c ef 52 ce dd d5 9f c2 2f 5f c4 16 39 81 99 12 cb 92 5a 5c b9 9e e4 d3 92 b2 b4 95 25 43 e9 31 a5 47 29 8b b3 06 67 0c 52 96 68 59 56 d6 c4 b3 71 a6 c0 56 d4 5e 1c 42 58 ec 6c 59 b6 d6 a6 da 6d 25 35 42 4b 36 ae df e6 7b 5f fd 36 93 f1 84 a7 de ff 0c 67 2f 3e 42 52 4b aa 72 3b 08 40 04 14 85 26 2b d5 ec f0 f4 60 1d 0e 49 67 75 99 d5 f3 a7 88 eb 31 93 c1 98 3c cf c9 8d 65 38 49 d9 bf 7d 97 fd ab 57 29 ad 61 71 b1 49 12 6b 8c d7 28 Data Ascii: " z:(N2\|nn0h{oglYPjvcXn8BR $tcrGWzFLEf#\|GG\|R/_9Z\%C1G)gRhYVqV^BXlYm%5BK6{_6g/>BRKr;@&+`Igu1<e8I}W)aqIk(
2024-05-15 22:36:58 UTC	8192	IN	Data Raw: 9e f3 ff fe cc 3e 0e 3d 34 cc 4f 7c fe 5d 0e d5 7d 7e fc d9 bd 9c 9e ed f1 fb 27 6f 23 cb 19 4f 1e 98 e0 91 9d c3 bc f4 b1 63 34 2b 23 7c e1 1b ef f0 1b 5f 9a e5 d4 74 d7 79 13 29 f4 9d da e2 07 81 73 e8 14 e6 f4 8d 5e 52 29 85 14 2e b9 0f b8 77 00 0b 8c aa 93 16 ba b2 2d b7 16 2f 28 a1 c2 12 51 a9 4a a5 52 21 4f 13 d2 41 8f 41 af 4b 1a 0f f0 94 da 9c e4 ea 82 35 e4 79 3e 41 58 26 cb 52 d2 a4 5b 64 19 6d ac 7a 7c 90 8a a8 54 c6 0b 4a 8e 9e a0 73 e2 81 83 a8 e9 2c 75 6b 00 e3 1e 20 6d 25 06 d0 3a c5 5a 77 2b 05 61 44 b5 d1 c4 f3 03 ba ed 75 97 3a 28 d8 24 4d 7e ef ed 7b 7f 38 d9 1f 72 41 59 08 cb 55 86 27 a6 18 c4 96 4a b5 c4 1f fd 23 8f f0 53 af 8c a2 6e be cd e5 8b 2d 92 3d 1f c7 db fb 08 46 3a 91 7c ae ad c3 9c 16 3d 97 d5 02 63 25 d6 05 e7 e2 17 f2 3b Data Ascii: >=4O\|]}~'o#Oc4+#\|_ty)s^R).w-/(QJR!OAAK5y>AX&R[dmz\|TJs,uk m%:Zw+aDu:($M~{8rAYU'J#Sn-=F:\|=c%;
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: f4 e9 8b d4 9a 0d 1e 7b e6 11 ca cd 0a 9d 7e 4a 63 64 0b 7e 54 76 94 13 e9 61 71 17 85 f2 22 b7 06 8a 07 a4 71 46 9a a4 58 24 71 96 73 ee d4 49 ae be f9 4d 5a 8b 73 5c 9b 5d 66 7e b5 cb e4 50 c8 8f bf f2 20 3b 27 eb 2c ae f6 f0 c3 12 5b b7 4d b0 f7 c1 23 98 f6 2c 97 de bb c0 ad ab b3 64 49 8e f1 23 92 38 43 67 09 a1 b2 94 4b 65 66 e6 d6 58 6d 27 5c 5d 4f 09 cb 55 c6 86 2a c4 2a 60 61 69 19 93 f4 b1 c6 b0 77 db 08 2f 7e e8 61 e2 3c 64 7e 6d 40 9a 26 4c 4e 0c f3 e0 a3 0f b2 f7 e0 1e 5a b3 d3 bc fd cd ef 70 67 7a 9a 5d 7b b7 d3 9b 5f e6 cc db ef 91 e4 86 f5 7e 4c d0 18 65 cf e1 a3 54 1a 55 92 f5 75 ea cd 51 f6 3e f1 2c e1 f8 4e 0e ee 9e 62 7c a4 c1 6f 7c e3 02 df f8 cd df a4 22 7a e4 61 8d 74 75 96 89 8a e4 23 1f 7b 89 27 5e 7c 99 b0 52 c7 6a 8b 52 e1 d0 e7 Data Ascii: {~Jcd~Tvaq"qFX$qsIMZs\]f~P ;',[M#,dI#8CgKefXm'\]OU**`aiw/~a<d~m@&LNZpgz]{_~LeTUuQ>,Nb\|o\|"zatu#{'^\|RjR
2024-05-15 22:36:58 UTC	8192	IN	Data Raw: dd db e7 ea f5 9b ec 6c ef 82 8d c1 6f 36 04 8c d0 38 2f 10 de 20 83 c3 84 98 f8 a0 95 42 8b 08 c8 f9 d0 92 6c 5a f3 f8 64 04 9f c6 b5 40 7c be 94 92 91 61 d7 22 c3 69 46 74 3e d0 c9 3c 1b 85 e7 4c d7 73 aa 2f b0 e3 03 26 47 43 b0 86 97 76 2a 7e e5 62 c3 2b 47 b1 4a ca 94 22 f0 ef 36 69 4c 05 ee df 63 ae f8 1f 72 70 8f b3 a8 42 02 48 c5 b1 b7 15 69 95 49 ea 7a 48 9f 57 22 d0 79 41 6f 79 85 6e 7f c0 64 34 64 74 b0 87 58 3e f9 58 5c 6e d8 f9 1e 2a 52 cc 62 9b d0 26 1e f8 04 bc 57 bd cb 00 00 80 00 49 44 41 54 8f 5b 63 66 2d 66 eb b9 1c e1 32 15 b3 8a 92 4b e0 5d 77 9f e2 2f fe b9 ef e6 0f 7e 70 91 dd 67 be cc 27 9e 1d f1 c2 e0 49 9a a5 d3 e4 d2 23 bd 8d 15 d3 fb e8 52 69 4d 3a 78 16 d7 98 18 5e e6 e3 4c 3d 19 8f 21 78 ca a2 a4 c8 8b 59 15 75 36 12 4d 66 73 Data Ascii: lo68/ BlZd@\|a"iFt><Ls/&GCv~b+GJ"6iLcrpBHiIzHW"yAoynd4dtX>X\nRb&WIDAT[cf-f2K]w/~pg'I#RiM:x^L=!xYu6Mfs
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: b3 70 ed 05 30 67 71 b5 bc 69 7f 0c 30 8a 9e c9 16 7c 24 df 4b cf 4c c3 1c 42 0c 98 0a c1 e3 52 10 b9 b3 36 1d e2 d8 16 0b 04 75 dd b0 b3 b3 0b 21 70 72 63 95 32 cf 68 9a 18 70 96 ce 57 ac ae a9 ed 26 55 6d 29 04 2a cf 66 ae 14 c1 db 3b e6 b1 76 0c 31 8d 9d 21 da 33 bd 71 da 99 47 1b d5 f9 ac df a2 d7 a1 45 ac 99 5f 5e f1 c0 ce 7d c7 5a 30 ad 35 dd 0f a9 7d 54 79 81 35 35 17 9f fb 12 b7 af bd c1 85 47 de c5 89 f3 f7 13 9c a4 f1 8e 22 8b be cb 2d 21 26 a4 bd 6a d3 34 98 a6 8e a9 1a 0e 62 ed 4e 5f 8b 88 82 7d 91 c2 f4 24 3e 6a 1b 12 e5 56 a5 67 42 05 87 ca 05 84 8c ba 91 04 6f c9 89 31 a2 d7 97 1f e0 d6 e9 77 70 60 32 42 75 84 32 93 d8 41 1d 53 e2 84 f4 fa 0a 77 ac ca 0b 91 cc 06 7c 14 56 d8 18 20 b7 39 71 1c bc 71 c8 4a d6 70 66 39 27 cb 73 ce dc 7d 17 cb Data Ascii: p0gqi0\|$KLBR6u!prc2hpW&Um)*f;v1!3qGE_^}Z05}Ty55G"-!&j4bN_}$>jVgBo1wp`2Bu2ASw\|V 9qqJpf9's}
2024-05-15 22:36:58 UTC	8192	IN	Data Raw: 0d 85 e2 c2 99 13 fc e8 99 a7 39 7f ee 1c 77 ec 7b 90 87 3e f6 04 f9 42 07 8d 66 9d 03 af bd c0 4f 9e fd 01 c9 54 86 47 1f ff 34 db 77 ed 21 93 ce 12 46 01 73 73 b3 3c ff ec f7 f9 ee 37 be c6 e5 4b 17 01 03 d3 d0 9e c2 61 24 71 bd 80 a4 63 b3 63 db 32 1e 7d 68 0b 5b 36 0c 82 92 b8 ae a7 2f b8 d0 94 c7 c0 73 f1 5d 17 15 f9 a8 d0 8b ff d6 9a 5f 51 18 e1 bb 01 81 17 e1 fb 21 32 d4 b2 b1 73 25 9f b7 4f d7 78 ef 42 8d 6a 53 6a 8e ac a1 62 71 05 74 e0 0a 13 59 58 86 df b1 0a 69 a6 35 56 38 36 d4 06 b4 b0 be 8a 30 ac 04 a6 9d c5 b0 92 98 76 4a b3 87 4c dd 13 2b a5 df d4 5a e5 23 a6 47 18 02 91 4e 22 53 56 8c 2d 36 80 88 a0 3c 43 d4 f0 b1 3b 8a 18 c5 7e 48 f6 43 22 8f c8 16 10 a9 3c e1 c4 79 dc 03 5f 43 55 e7 c0 30 91 61 2b 86 36 46 da 2a 2f d4 41 88 e9 a0 1c 07 Data Ascii: 9w{>BfOTG4w!Fss<7Ka$qcc2}h[6/s]_Q!2s%OxBjSjbqtYXi5V860vJL+Z#GN"SV-6<C;~HC"<y_CU0a+6F*/A
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: 6e b9 e3 2e 1e 7a f4 09 1a b5 0a df ff e6 df e1 b9 2d c2 30 e4 8d d7 5e 66 a1 34 cf b2 15 ab b9 fb 9e 87 b8 eb de fb e9 1f 1c 26 08 7c de 7c ed 25 f6 bf f4 3c dd 7d 83 ac 5e b3 96 b7 f6 bf cc 91 83 ef d2 72 5d 04 7a af 17 4a 49 d3 0d b0 2c 93 1d 5b 87 79 ec e1 6d 6c 58 37 80 8a 22 42 2f 20 88 3c be fe bd c3 9c 3c 79 8d cf 3c b6 99 54 02 0a 49 13 21 02 a2 d0 d3 f6 8c 52 b1 ff 83 69 5e 78 67 86 bb b6 15 b9 79 5d 9a c8 d5 3d 64 a9 e2 73 f0 62 93 37 4f d7 98 a9 06 7a 2a dc de 11 2a b5 78 a2 07 46 06 3a c7 18 ea cf 3b 2f 1c 00 00 5f a6 49 44 41 54 ed a5 51 9e 27 10 02 cf cc d0 92 09 cc 64 0e c3 49 69 0c 75 e4 11 b9 35 84 df 24 a1 7c 9c 44 0a 27 9d c3 48 75 d2 12 19 cc 64 91 50 42 b3 3a 8d db 98 d3 7c 59 db 46 18 09 1c 2b 87 93 e9 d2 d4 3c 19 61 db 36 86 6d 21 Data Ascii: n.z-0^f4&\|\|%<}^r]zJI,[ymlX7"B/ <<y<TI!Ri^xgy]=dsb7Oz**xF:;/_IDATQ'dIiu5$\|D'HudPB:\|YF+<a6m!
2024-05-15 22:36:58 UTC	8192	IN	Data Raw: 73 5c 29 55 af 17 23 11 b6 8b 50 2e 06 87 54 3a 28 cb c6 75 5d ca 05 87 e1 42 8e e1 bc 24 9f 73 b0 6c 97 61 2b e5 95 c1 b3 c4 8b e7 b8 b8 59 a3 e6 05 9c 5b 6f 72 b6 da 64 a3 d5 20 8a 7d e2 28 02 04 c2 68 32 fd c8 7e ea 9b 55 22 a9 ce 60 a3 ca ce a3 9c 3c 18 41 92 24 18 a9 90 95 21 9c c9 bd 68 af 49 b4 f2 1c 60 f5 d2 6a c8 34 09 7a cd 29 29 51 96 c2 56 06 47 66 f4 ac da e0 19 23 3e 22 84 f8 4f 60 ce 00 28 29 a9 2e 9f fb 2b cf ed 7b 3e 72 a4 df 90 1a 6b ad 9e f9 b1 cd 33 8f bc cf 5f 39 3d ad 3b 55 84 8e 32 fa 5b 04 da 6c 73 da 54 93 24 19 e1 c3 65 a3 a1 41 f7 6b 00 9c 44 58 2e ce d0 14 e5 d9 ab 18 dd 73 1d 43 d3 57 e0 56 c6 90 96 95 b5 de 8c ec d5 ad bd de 8a 90 24 06 5e 57 ac f1 fa fc 46 46 34 21 b2 ed 2b 25 32 40 0e c2 26 95 36 a1 52 34 52 97 f9 d0 65 35 Data Ascii: s\)U#P.T:(u]B$sla+Y[ord }(h2~U"`<A$!hI`j4z))QVGf#>"O`().+{>rk3_9=;U2[lsT$eAkDX.sCWV$^WFF4!+%2@&6R4Re5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	49978	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	400	OUT	GET /steam/apps/2195250/capsule_184x69.jpg?t=1713799333 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 8810 Last-Modified: Tue, 12 Sep 2023 13:36:59 GMT ETag: "6500697b-226a" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=224454 Expires: Sat, 18 May 2024 12:57:52 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	8810	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 09 02 00 01 ff c4 00 46 10 00 02 01 03 02 04 04 04 03 03 09 04 0b 01 00 00 01 02 03 04 05 11 06 07 00 08 12 21 13 31 41 51 09 14 22 61 15 23 32 42 52 71 Data Ascii: JFIFCCEF!1AQ"a#2BRq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	49979	96.17.60.195	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	633	OUT	GET /categories/homepageimage/category/action?cc=us&l=english HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	2067	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.akamai.steamstatic.com/ https://store.akamai.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com https://steamcommunity-a.akamaihd.net; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.akamai.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.akamai.steamstatic.com/ https://checkout.steampowered.com/ https://.steamstatic.com https://.steamcontent.com https://.valvesoftware.com https://.steambeta.net https://*.discovery.beta.steamse [TRUNCATED] X-Frame-Options: DENY Cache-Control: public,max-age=45472 Expires: Thu, 16 May 2024 08:14:47 GMT Last-Modified: Wed, 15 May 2024 17:42:56 GMT Strict-Transport-Security: max-age=10368000 Content-Length: 121645 Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	14317	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 e9 08 06 00 00 00 1a 8c ba c1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 10 63 61 4e 76 00 00 02 f2 00 00 01 bb 00 00 00 b4 00 00 00 3c 27 41 e8 f4 00 00 80 00 49 44 41 54 78 da 5c fd 77 b0 6d db 75 de 07 fe 66 58 69 e7 7d 72 b8 39 be 1c 11 1e 91 08 40 48 24 40 42 0c a2 92 db ad 96 6d 59 ea 2e d9 25 db 6a 55 b5 ab 6c d8 92 3b b8 6c ab 6d 4b 6a cb 6a 59 a6 44 0a 14 21 90 20 09 01 24 00 12 00 91 5f 7e ef be 9b f3 bd 27 c7 9d f7 4a 73 ce fe 63 ae 73 1f d4 af ea d4 bd f7 bc 13 f6 5e 6b 8d 39 c6 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDcaNv<'AIDATx\wmufXi}r9@H$@BmY.%jUl;lmKjjYD! $_~'Jscs^k9
2024-05-15 22:36:58 UTC	10259	IN	Data Raw: 39 73 f6 2c 3b bb 7b 3c 7c 78 8f 63 c7 97 40 c4 74 3a 33 5c bf fe 36 a3 e1 98 4f 7d fa 93 f4 fa 3d ac 90 7c f7 e5 37 d9 39 18 01 0a 69 0d d9 a8 0f a5 41 e2 68 d4 34 a1 76 68 39 45 eb 80 c2 4d c9 4b 30 a5 a6 c8 0a a2 50 52 af c5 a4 93 1c 61 24 71 18 10 c7 0a 53 8e d9 da da a0 51 ab 53 4f 12 e2 50 a2 5c 4e b7 d9 60 32 49 e9 0f 46 ec ed ed d1 69 b6 19 8f 26 ac 6f 6c f3 70 6d 83 76 ab 4d 5e 14 ec 4d a6 88 74 4a fd 8f 7f 9f 63 df f8 12 ad ed 87 d5 e4 5a e5 da a2 a8 ca 52 6f 07 ac 65 25 ba 88 14 42 43 28 1d f5 40 d2 0c 35 49 e0 e7 e1 d7 f6 fb dc d8 d9 47 01 91 12 ec 0d c7 dc 79 78 c0 f7 bf 77 95 3f fe 93 2b bc f1 e6 0e 7b 13 45 66 a1 18 e4 b8 5c 31 28 24 0f c6 70 67 12 f1 30 ef b0 9e c6 ec d8 80 9d 1c 0e 06 29 e3 b1 61 ed a0 e0 f6 6e c1 e5 5b 7b fc f8 8d 07 bc Data Ascii: 9s,;{<\|xc@t:3\6O}=\|79iAh4vh9EMK0PRa$qSQSOP\N`2IFi&olpmvM^MtJcZRoe%BC(@5IGyxw?+{Ef\1($pg0)an[{
2024-05-15 22:36:58 UTC	16384	IN	Data Raw: dc 12 93 32 64 38 9e 90 a7 13 f2 bc 20 b7 6b 6c ec 7e 95 9f bc f6 0e 9f fd e4 87 f8 d0 4b ef a5 d1 68 e0 ac 25 37 c6 af 7e 94 8a ac 28 41 e6 c4 71 e4 c1 93 32 a7 48 a7 08 29 89 2a 80 cb 58 f3 a8 c7 c3 c1 68 d0 43 4a c1 ca d2 3c 1f fe c8 07 d9 de db 63 7d 73 9f f9 d9 8e d7 3b 2b f9 68 99 f7 24 2d 49 5d 8e 54 10 b4 1a 0c fb fb 6c ac 3f f4 48 a6 f0 40 9a ac 68 a0 e5 f9 06 51 18 e2 c7 de 05 81 8a 11 0e ac 9b 22 e2 05 ac 8e d0 45 0f 6d 26 68 a0 20 40 ea 3a f3 ed 39 3a 68 26 83 09 c6 4a 84 0a 08 75 4c 27 8a 38 77 fa 38 67 4e 2e b3 b8 d0 e5 5b 7f f8 47 ec 1e 8e 68 b4 16 d9 4f 85 f7 61 46 a0 e2 0e 2e 08 08 55 c9 2f fe e2 e7 f9 ab 7f fd 6f 30 b7 b4 c4 f0 70 8f d2 3a f2 34 27 4c 6a 18 07 87 7b fb c4 f5 3a a8 00 11 25 d4 90 8f f6 4c 59 4a 40 12 05 21 36 4b b1 b6 f0 Data Ascii: 2d8 kl~Kh%7~(Aq2H)*XhCJ<c}s;+h$-I]Tl?H@hQ"Em&h @:9:h&JuL'8w8gN.[GhOaF.U/o0p:4'Lj{:%LYJ@!6K
2024-05-15 22:36:58 UTC	8192	IN	Data Raw: 29 71 a5 44 50 27 d7 90 e9 82 52 19 92 69 c6 c6 34 26 29 4a d2 22 ad f4 33 5a 62 85 87 0c 3c a4 ef a2 6b 21 b6 e1 13 cc 75 a8 05 4d 3c 2f c4 7a 12 dc 10 9d 1b b4 4a c8 77 07 a4 c9 0e f9 74 84 2d a6 98 22 a1 2c 52 84 56 f4 0e 1d a1 bb ba 40 6f 65 01 bb b1 cf f6 5b d7 f1 cb 16 47 8e dd 89 2a 87 44 d1 1c 9d a5 e3 58 61 b9 fc c6 53 6c af 5f 07 5d e2 79 75 f0 02 b4 63 f0 8c c6 31 a0 84 83 88 3a 38 cd 65 94 df 40 b9 01 b9 9d 9d a4 dc 8a 70 a9 4d 35 90 f2 ac c5 13 ba 02 e8 89 4a 86 a0 b5 26 cb 52 bc 59 13 2f 74 5d 3c c7 79 07 f0 58 f9 f4 ec 3b e2 70 63 41 a9 19 4f 4e 69 ca 2c c5 1a cd 81 f9 1e d3 d1 80 9a 2b 38 76 60 11 d7 71 30 33 ab e3 f6 ce 0e bb 7b 03 0e 1d 5c 61 61 ae c7 a3 0f de c1 bb ef 39 c3 4f 7f f1 d3 88 db ee 79 bf 15 ff 4f 9b bc eb 30 df e9 90 4c 86 Data Ascii: )qDP'Ri4&)J"3Zb<k!uM</zJwt-",RV@oe[G*DXaSl_]yuc1:8e@pM5J&RY/t]<yX;pcAONi,+8v`q03{\aa9OyO0L
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 8e db a4 ee 51 4b 1d 74 9c 21 a3 3a 23 63 29 b4 c2 77 1d 16 7d 17 5d 66 bc f1 c6 36 bb fb 43 0a 61 11 51 c0 d5 09 ec d9 14 e9 d7 e9 4f 35 1b cf 5d c4 91 d0 9e 6b a2 8b 98 a8 dd c6 97 2e f3 f3 0d 7c 55 32 9c 0c 58 db d3 cc f7 3a 38 56 53 1a 89 70 2c 59 59 90 e7 3e 12 48 72 4d a9 60 e5 50 87 53 c7 0f 31 18 f6 d9 dc e8 f3 ee 77 3d c4 cf fc ec 7f cb 3d f7 dc cd ca 81 05 1a 8d 36 5a 6b f6 f6 f6 d9 de d9 c4 8b 07 cc ad bd 4a b4 7e 81 9a 28 b0 dd 1a 36 f4 71 02 9f b8 54 ec 6e 0d f0 84 83 83 4b 7f 2f 66 67 3f ad cc 82 b5 1a 45 9c 22 1d 0f 61 35 5a 5a 32 0c 42 1a 4c 6a 88 07 19 71 51 d0 57 96 91 f5 91 4e 40 dd af 83 1b 50 8c 73 84 d3 24 d4 9a f9 9a a5 d5 e9 d0 1f 26 5c db 2f 49 8d 4b 54 af b3 ed f7 c8 1b 75 16 5b 1e cb ab 6d da 2d 89 f4 04 fd 38 c7 93 1e 3a aa 73 Data Ascii: QKt!:#c)w}]f6CaQO5]k.\|U2X:8VSp,YY>HrM`PS1w==6ZkJ~(6qTnK/fg?E"a5ZZ2BLjqQWN@Ps$&\/IKTu[m-8:s
2024-05-15 22:36:59 UTC	8192	IN	Data Raw: ad fd df fd f0 33 4f f1 91 f7 ff 25 f7 7d eb 1e 5e 70 db 6d fc c4 cf bd 9b ad 7b f6 f6 7f b3 13 47 8e f2 c9 bf ff 30 1f ff f0 87 e9 f6 62 6e bc f9 66 da ed 36 df ba fb 1b 64 bd 84 4a 10 21 29 28 b2 c2 95 83 1c c7 dd b1 ef 4a 86 95 28 68 93 5d 15 d3 c9 63 8c 35 e7 05 ae 18 38 79 a4 94 8c 0e d5 d9 34 3e 44 b3 e6 92 52 25 31 48 6b cd c2 4a 87 a9 a9 61 a6 37 8d a2 8b 36 d4 f1 c9 31 86 86 86 dc 22 ed 79 58 63 98 99 3d c3 3d df 7f 9a fd cf ce a0 ad 25 ac 06 4c b4 ea c8 34 c3 13 c1 59 31 03 00 00 80 00 49 44 41 54 e0 3d ff 25 6f b9 53 1b 27 ff 92 a9 94 b9 b9 33 c4 49 4a 14 06 d4 6b 15 c2 20 70 d4 c1 e2 4c 5e 5a 58 20 e9 b5 f1 84 4f 67 65 96 2f 7e f2 83 24 ed 15 aa 51 0b e9 79 ac 76 db 74 3b 5d f6 ec d9 83 b5 86 2d 5b b7 b3 77 ef a5 24 69 86 1f 84 4c 4e 6e e0 c5 Data Ascii: 3O%}^pm{G0bnf6dJ!)(J(h]c58y4>DR%1HkJa761"yXc==%L4Y1IDAT=%oS'3IJk pL^ZX Oge/~$Qyvt;]-[w$iLNn
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 0c 6c 9c 9c 64 ff 81 67 a8 0e 35 f8 d5 7f fb 6f b8 ed a5 77 50 ad d5 e9 76 3a c4 71 cc c8 d8 28 08 c1 3f 7c f4 23 fc c6 bf ff 0d de fe f6 b7 f3 1f fe c3 ff c5 9d bf f9 ff f0 fe 3f fd 33 7c e1 39 a1 4b cf 9d b0 9e 70 35 71 e1 39 e2 47 ae 35 79 ae d0 16 12 95 90 a3 88 2a 91 fb 2e c6 f1 f3 7d df ef 83 37 cb 32 d2 34 3d 07 c8 cf 39 7f d6 71 97 7f 98 cb 0f aa 01 ff b0 16 79 ad 9b 3c 32 32 c2 f4 f4 34 be ef b3 b8 b8 48 92 24 28 a5 0a a2 8a 1b 72 ee fb e5 18 15 17 17 5f 76 d9 65 78 12 be f2 95 af d0 e9 f6 10 42 e2 6d de 75 d5 9d d6 68 b2 cc 59 5e 29 7d 7c 69 39 7d e8 51 8e ed bf ff 7f cb 5d 1e 3c 89 25 10 4a 37 cd 6f ad 76 d5 f9 b2 c8 6b f7 c3 c0 fe 06 5f 57 ea ae 17 4c 3a 47 72 80 73 de 67 00 d7 17 ac cf ae 7d ec 42 e5 aa d2 72 96 ef fd c3 c4 e3 0c be 86 b3 65 Data Ascii: ldg5owPv:q(?\|#?3\|9Kp5q9G5y*.}724=9qy<224H$(r_vexBmuhY^)}\|i9}Q]<%J7ovk_WL:Grsg}Bre
2024-05-15 22:36:59 UTC	8192	IN	Data Raw: f7 df c7 73 cf bd c8 4d 37 dd c4 37 bf f9 4d 5a 5a 5b 88 c5 e2 5c ba e5 52 ee bd f7 a3 6c dc b8 91 5d bb 76 f1 1f df fe 36 bf 7d f8 61 3a 3b 3a b5 e2 a5 01 96 09 56 a8 b0 11 43 03 31 a2 86 a6 09 32 a9 27 ca 79 01 a3 9e c4 0d fb 1f 11 02 f6 0d 61 4c 5c ac 72 c5 54 76 00 9c e8 69 85 06 57 98 68 61 b8 08 82 71 74 df 9c 0a 83 33 57 16 26 9f 94 81 cb 81 3c 39 a0 27 d3 02 65 65 06 f7 92 8b 71 2f db 82 a8 ad 23 a2 14 15 f9 11 cc 43 6f 33 76 68 2f e7 8e 1f a3 bf fd 34 c3 e7 ce 50 a1 1c 16 d4 55 30 33 22 98 59 59 81 33 d4 4b d7 c1 bd e4 4b 2e a9 86 6a 06 f3 79 da da ea 59 32 b7 96 d9 f5 49 a6 55 46 98 3e af 9a 4c 4d 94 81 e1 31 ba 3b fa 38 7d bc 8b 6c 6e 7c 42 de b5 ab fd 0c 03 bd dd 88 a0 40 65 dc 24 15 8f e1 16 f3 64 fb bb f1 9d 3c a6 0a 30 3c 45 2a 55 45 f3 b4 Data Ascii: sM77MZZ[\Rl]v6}a:;:VC12'yaL\rTviWhaqt3W&<9'eeq/#Co3vh/4PU03"YY3KK.jyY2IUF>LM1;8}ln\|B@e$d<0<E*UE
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 34 b2 f7 db 7b 48 29 27 ec 32 91 5a 24 5d 28 8f 54 cc a0 2a 19 23 11 b5 b1 0d bd 47 8d 47 a3 44 4d 81 28 8c e3 8f 0c 60 b9 05 2c 37 4b 44 15 99 33 bb 95 75 ab 2e 60 c1 dc 16 56 cc aa 61 c9 8c 6a e6 cc 68 20 62 42 2c 16 43 98 5a a3 cc b6 0c 66 b4 35 72 e1 92 69 8c 0f 8f d1 de 7e 0e 3f 08 26 bc 80 72 05 7d 90 64 9d 80 ae 51 87 ac ab 07 5a 96 21 98 d7 56 cb 45 ab e7 d2 d2 d2 48 34 1e 27 1a 4f 91 a8 a8 26 90 20 ac 18 8b 57 6c 60 c3 45 97 e2 94 5c 9e 7e f2 8f 8c 8f 8f 73 d5 75 37 32 67 de 02 76 bd f3 06 af bc f4 90 87 63 11 00 00 5a 66 49 44 41 54 02 96 6d 33 63 d6 1c 66 cc 98 c5 40 7f 1f 1d 1d 1d 8c 8f 0e 53 2a e5 69 a8 ab e1 dd d7 5f e2 4f 8f fd 96 ee ee 2e 2d 01 ac 14 f3 e7 34 72 f7 5f ac e1 86 ab 96 50 53 19 c5 29 16 18 18 18 e6 b5 b7 4e 70 ba 7d 80 4c cc Data Ascii: 4{H)'2Z$](T#GGDM(`,7KD3u.`Vajh bB,CZf5ri~?&r}dQZ!VEH4'O& Wl`E\~su72gvcZfIDATm3cf@Si_O.-4r_PS)Np}L
2024-05-15 22:36:59 UTC	6957	IN	Data Raw: ae e7 71 f8 e0 1e 7e 78 df b7 18 ea ef c3 f3 5c 3c df 27 f0 23 fa a9 a9 4c ea 5a 3b 78 ef af 7f 08 f1 bb ed 75 7a 3c 54 4c b5 e6 b1 ea 73 18 85 2c 52 43 79 6a 06 03 c9 92 a5 0b 30 ea d2 38 71 ee 42 e0 91 55 9a ca 44 85 e2 a4 83 3d 51 a1 c1 f1 59 24 35 4b b4 e6 4a 05 97 48 48 19 31 8f 5f 83 6b 40 20 04 a1 11 55 ef 1a 03 28 09 cd 1e 2d 78 56 c0 90 16 8c a3 39 85 7e bc 08 ff f3 a0 16 4f 36 11 69 f7 ce fc 64 d1 f2 b9 03 79 f3 46 34 d1 9e e1 d0 f1 2e 47 ab 4f a1 79 5d 32 66 18 75 95 62 22 47 9c 14 99 22 26 79 24 a0 8d 3d b5 88 d5 1c 2a b6 4d 18 4a f2 b9 2c a6 10 f8 ae 8b e3 46 5b e0 05 51 ce 9c 4d 59 18 f1 ea 52 43 18 64 d2 29 b2 e9 74 9c ee 45 1f 3e 0c 65 9c 97 47 a0 4d 44 f5 a2 96 49 dc d3 86 88 6c ef f9 b5 85 60 a1 8a e8 60 ab 57 74 f2 f6 bb 2f e5 ba ab 56 Data Ascii: q~x\<'#LZ;xuz<TLs,RCyj08qBUD=QY$5KJHH1_k@ U(-xV9~O6idyF4.GOy]2fub"G"&y$=*MJ,F[QMYRCd)tE>eGMDIl``Wt/V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	49980	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	627	OUT	GET /steam/apps/570/capsule_184x69.jpg?t=1714502360 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	339	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 3634 Last-Modified: Fri, 17 Nov 2023 22:50:01 GMT ETag: "6557ee19-e32" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=383204 Expires: Mon, 20 May 2024 09:03:42 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	3634	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 06 00 07 08 05 04 09 ff c4 00 3b 10 00 01 02 05 03 02 03 05 06 03 09 01 00 00 00 00 01 02 03 00 04 05 06 11 07 12 21 31 41 13 51 61 08 14 22 71 81 09 15 32 42 91 Data Ascii: JFIFCCE;!1AQa"q2B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	49982	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	400	OUT	GET /steam/apps/2357570/capsule_184x69.jpg?t=1715731747 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7769 Last-Modified: Thu, 21 Dec 2023 16:49:36 GMT ETag: "65846ca0-1e59" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=523979 Expires: Wed, 22 May 2024 00:09:57 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	7769	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 07 02 01 08 00 ff c4 00 40 10 00 01 03 02 04 04 04 03 06 04 03 08 03 00 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 14 22 51 61 08 32 71 15 23 81 91 a1 b1 Data Ascii: JFIFCCE@!1A"Qa2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	49981	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	631	OUT	GET /steam/apps/1665460/capsule_184x69.jpg?t=1713163424 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 12663 Last-Modified: Fri, 12 Apr 2024 19:13:09 GMT ETag: "661987c5-3177" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=270604 Expires: Sun, 19 May 2024 01:47:02 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	12663	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 00 03 02 09 01 ff c4 00 40 10 00 01 03 03 03 02 03 05 06 03 06 05 05 00 00 00 01 02 03 04 05 06 11 00 07 12 13 21 08 22 31 14 41 51 61 81 15 23 32 42 71 91 Data Ascii: JFIFCCE@!"1AQa#2Bq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	49983	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	631	OUT	GET /steam/apps/1840080/capsule_184x69.jpg?t=1715643382 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6244 Last-Modified: Fri, 03 Dec 2021 18:22:01 GMT ETag: "61aa6049-1864" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=435490 Expires: Mon, 20 May 2024 23:35:08 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	6244	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFvvCCE}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	49984	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	631	OUT	GET /steam/apps/1245620/capsule_184x69.jpg?t=1710261394 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	339	IN	HTTP/1.1 200 OK Last-Modified: Thu, 05 Aug 2021 22:00:39 GMT ETag: "610c5f87-c4d" Server: nginx Content-Type: image/jpeg Content-Length: 3149 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=451880 Expires: Tue, 21 May 2024 04:08:18 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	3149	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 07 01 04 05 06 08 02 03 09 ff c4 00 33 10 00 01 03 04 02 01 03 02 04 04 07 01 00 00 00 00 01 02 03 04 00 05 06 11 07 12 21 13 31 41 08 22 14 15 51 61 32 42 52 91 16 24 Data Ascii: JFIFCCE3!1A"Qa2BR$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	49986	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	630	OUT	GET /steam/apps/381210/capsule_184x69.jpg?t=1715700452 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7013 Last-Modified: Thu, 17 Mar 2022 10:40:07 GMT ETag: "62331007-1b65" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=492591 Expires: Tue, 21 May 2024 15:26:49 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	7013	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCE}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	49985	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	644	OUT	GET /steam/apps/1128860/capsule_184x69_alt_assets_0.jpg?t=1715795672 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7071 Last-Modified: Wed, 15 May 2024 17:01:36 GMT ETag: "6644ea70-1b9f" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=587788 Expires: Wed, 22 May 2024 17:53:26 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	7071	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 06 07 01 04 08 00 09 ff c4 00 3c 10 00 01 03 03 03 03 02 05 01 06 04 05 05 00 00 00 01 02 03 04 05 06 11 00 12 21 07 13 31 41 51 08 14 22 32 61 71 15 42 52 62 81 Data Ascii: JFIFvvCCE<!1AQ"2aqBRb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	49987	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	400	OUT	GET /steam/apps/1449850/capsule_184x69.jpg?t=1715145592 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6638 Last-Modified: Tue, 07 May 2024 06:37:40 GMT ETag: "6639cc34-19ee" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=482143 Expires: Tue, 21 May 2024 12:32:41 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	6638	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 07 01 02 08 00 09 ff c4 00 38 10 00 02 01 03 03 03 02 05 03 03 03 02 07 00 00 00 01 02 03 04 05 11 00 06 21 07 12 31 13 41 08 22 32 51 61 14 23 42 15 71 81 16 Data Ascii: JFIFCCE8!1A"2Qa#Bq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	49988	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	399	OUT	GET /steam/apps/239140/capsule_184x69.jpg?t=1715341001 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7184 Last-Modified: Fri, 29 Jul 2022 15:39:13 GMT ETag: "62e3ff21-1c10" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=133177 Expires: Fri, 17 May 2024 11:36:35 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	7184	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 07 08 09 02 03 04 01 0a ff c4 00 3d 10 00 01 03 03 04 00 04 05 02 03 06 04 07 00 00 00 01 02 03 04 05 06 11 00 07 12 21 08 13 31 41 09 14 22 51 61 15 32 42 71 81 Data Ascii: JFIFCCE=!1A"Qa2Bq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	49989	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	399	OUT	GET /steam/apps/230410/capsule_184x69.jpg?t=1715792355 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7987 Last-Modified: Wed, 27 Mar 2024 15:01:35 GMT ETag: "660434cf-1f33" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=584628 Expires: Wed, 22 May 2024 17:00:46 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	7987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 04 07 08 02 03 01 00 09 ff c4 00 3d 10 00 01 03 03 03 03 02 05 01 05 05 08 03 00 00 00 01 02 03 04 05 06 11 00 12 21 07 13 31 22 41 08 14 51 61 71 32 15 23 42 81 91 Data Ascii: JFIFCCE=!1"AQaq2#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	49990	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	400	OUT	GET /steam/apps/1056640/capsule_184x69.jpg?t=1715705326 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:58 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7621 Last-Modified: Tue, 06 Jun 2023 22:02:01 GMT ETag: "647facd9-1dc5" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=497427 Expires: Tue, 21 May 2024 16:47:25 GMT Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:58 UTC	7621	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 02 03 04 05 01 07 08 00 09 ff c4 00 40 10 00 02 01 02 05 02 05 02 04 03 04 08 07 00 00 00 01 02 03 04 11 00 05 06 12 21 07 31 08 13 22 41 51 61 71 14 32 42 81 23 91 c1 Data Ascii: JFIFCCE@!1"AQaq2B#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	49991	23.194.234.100	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	672	OUT	GET /IShoppingCartService/GetShoppingCartContents/v1?origin=https:%2F%2Fgtm.you1.cn&input_protobuf_encoded= HTTP/1.1 Host: api.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://gtm.you1.cn Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	264	IN	HTTP/1.1 400 Bad Request Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 142 Expires: Wed, 15 May 2024 22:36:58 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 15 May 2024 22:36:58 GMT Connection: close
2024-05-15 22:36:59 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 50 6c 65 61 73 65 20 76 65 72 69 66 79 20 74 68 61 74 20 61 6c 6c 20 72 65 71 75 69 72 65 64 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 62 65 69 6e 67 20 73 65 6e 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Bad Request</title></head><body><h1>Bad Request</h1>Please verify that all required parameters are being sent</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	49992	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	399	OUT	GET /steam/apps/394360/capsule_184x69.jpg?t=1715685474 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6978 Last-Modified: Wed, 03 Apr 2024 11:22:43 GMT ETag: "660d3c03-1b42" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=477658 Expires: Tue, 21 May 2024 11:17:57 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	6978	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 01 05 01 00 00 00 00 00 00 00 00 00 00 00 06 07 03 01 02 04 05 08 00 ff c4 00 3f 10 00 01 03 03 03 02 04 03 05 03 0b 05 01 00 00 00 01 02 03 04 05 06 11 00 07 21 12 31 08 13 41 51 14 22 61 32 42 71 81 91 15 17 23 Data Ascii: JFIFCCE?!1AQ"a2Bq#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	49993	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:58 UTC	694	OUT	GET /public/images/v6/icon_platform_win_dark.png?v=3 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1177 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-499" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	1177	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	49994	96.17.60.195	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	401	OUT	GET /categories/homepageimage/category/anime?cc=us&l=english HTTP/1.1 Host: store.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	2067	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.akamai.steamstatic.com/ https://store.akamai.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com https://steamcommunity-a.akamaihd.net; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.akamai.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.akamai.steamstatic.com/ https://checkout.steampowered.com/ https://.steamstatic.com https://.steamcontent.com https://.valvesoftware.com https://.steambeta.net https://*.discovery.beta.steamse [TRUNCATED] X-Frame-Options: DENY Cache-Control: public,max-age=44820 Expires: Wed, 15 May 2024 21:46:48 GMT Last-Modified: Wed, 15 May 2024 06:27:00 GMT Strict-Transport-Security: max-age=10368000 Content-Length: 131789 Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	14317	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 e9 08 06 00 00 00 1a 8c ba c1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 10 63 61 4e 76 00 00 02 f2 00 00 01 bb 00 00 00 b4 00 00 00 3c 27 41 e8 f4 00 00 80 00 49 44 41 54 78 da 7c fd 77 9c 9d e9 59 df 8f bf ef fb 7e ea 69 33 67 fa 8c a4 51 5b f5 95 76 57 db 9b 7b ef 36 36 06 c7 c6 60 70 20 10 c2 0f d2 c8 37 40 0c 24 bf 6f 20 90 6f 12 4a 08 06 03 b6 31 36 a6 38 c6 65 71 5b 7b 7b ef d2 aa 77 69 fa cc e9 4f bb cb ef 8f e7 48 36 c4 df df ec 4b 2f 69 47 bb 33 d2 39 cf 75 5f d7 f5 69 b7 f8 cf 7f Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDcaNv<'AIDATx\|wY~i3gQ[vW{66`p 7@$o oJ168eq[{{wiOH6K/iG39u_i
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 51 33 42 05 86 20 1e 60 fb 6d 2a 9e c6 fa 9a c0 15 6c 9d aa d3 4b 32 a2 30 e4 96 3b 0e 32 39 3b 45 d2 ef e1 0a cb 95 2b 5d c6 a7 36 b1 65 66 84 ac bb 4e c5 56 38 7d fa 32 17 2e af 73 66 6d c0 72 df d0 2f 24 56 7a f8 7e 88 ef 49 42 df 11 fa 0a 2d 7c 3c af 42 e4 b5 08 45 95 5a a5 8e 57 f5 25 eb 09 5c e8 68 7a 4e e0 e3 33 1a 7c 37 24 2e b0 12 5f f9 a4 c2 e1 b9 9c 7b 46 eb 4c 79 11 7f 78 aa c3 53 dd 3e a1 53 4c 7b 21 d2 d3 48 af 3c b8 8d 54 58 e9 33 30 86 50 16 dc 31 ee 63 80 53 3d cd ae 11 cb e1 89 0a af 6c 38 e6 63 4b e1 ca 04 ca a1 ea 94 a2 28 b8 7c e5 0a fd c1 80 1b 0e 1e c4 53 8a dc e6 08 27 40 58 aa b5 1a db 77 ec a0 93 19 a2 b8 4a 18 56 f0 82 0a d2 af 00 16 cf f3 10 f8 68 eb 90 42 13 36 7c 26 46 46 31 d6 92 cc cd 90 ed 39 40 af df 67 75 65 89 53 c7 8e Data Ascii: Q3B `m*lK20;29;E+]6efNV8}2.sfmr/$Vz~IB-\|<BEZW%\hzN3\|7$._{FLyxS>SL{!H<TX30P1cS=l8cK(\|S'@XwJVhB6\|&FF19@gueS
2024-05-15 22:36:59 UTC	3360	IN	Data Raw: a7 8a 31 19 3b db fb 48 91 a1 85 66 63 77 c8 24 4d 09 92 9c 69 92 63 7b 3e 95 6a 13 83 a0 d9 6c b2 bc b4 54 7e d0 e7 0e f3 f2 cb df 64 67 eb 06 b3 ad 26 cd 99 05 ee bb f7 3b d1 45 c8 b5 ab cf 91 e7 29 7b fb bb a5 bd b2 48 99 9b 5b c5 48 9b 30 0a 58 5e 5a 22 4d 73 7a bd 2e ca 12 24 29 74 77 02 ec d4 c1 64 59 59 8a 11 2e 64 92 2c 89 cb 81 89 14 34 9a 8b 48 cb 46 a8 52 16 90 a5 53 a6 49 8f 98 21 96 03 be 14 38 22 c5 b3 a1 e6 48 5c db c1 b3 5d 3c db c1 71 5c 6c c7 c6 96 ba 74 1c 15 19 ae 16 54 94 4b 9c c3 de 38 64 9c 6b 1c c7 61 e5 d0 32 97 77 3a 7c e3 ca 06 46 29 7c d7 67 75 65 89 85 85 79 f6 f6 f7 18 ec 6d b0 e8 0a 8e cc b7 c8 85 21 ce 33 c4 c7 f3 dc 14 52 12 8f a6 dc fa e6 1b 5c fd fa 8b f4 b6 b6 98 9f 9b 27 4b 0b 82 e9 94 20 18 d1 db d9 a4 ea d8 2c 2e cd Data Ascii: 1;Hfcw$Mic{>jlT~dg&;E){H[H0X^Z"Msz.$)twdYY.d,4HFRSI!8"H\]<q\ltTK8dka2w:\|F)\|gueym!3R\'K ,.
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 67 a8 63 fe c5 7f fc 4f fc cb 5f fd 0d ee bf 70 8e ef 78 d7 93 3c fa f0 83 b4 1a 8d ff 6c 27 16 f4 fa 3d fe f0 13 7f c2 af fe e6 ef b0 db 9f 72 e4 c4 39 2a 54 a8 15 92 b6 eb 91 63 e8 4c 23 76 b7 77 e8 6e 6e 70 a4 51 e3 a1 fb ee e6 ca ad 3b fc ca ff ef d7 58 5f 5f a7 b2 38 cb 85 c5 8b d4 2b 75 aa ed 3a d5 66 9d fa cc 2c 95 7a 15 d7 b1 71 ab 35 5c cb 07 91 63 25 13 0a 6d 23 2b 0e 9e 6d 08 fb 1d ee dc ba c9 d5 37 af b3 b7 b5 83 ce 0b 7c d7 c1 96 92 24 49 f1 3c 0f db 2e e1 ea c2 92 24 0a 1c 34 75 d7 c7 52 36 39 92 c2 18 b2 38 c2 f1 5c 32 03 51 9c 31 9e 06 28 e9 a0 f0 91 b6 8d 29 34 f5 96 4b 73 a6 41 34 85 2c cd 30 42 a1 8d c1 ab d8 cc ae 18 b4 84 8d 7e c4 1b d7 bf 80 48 52 6a cd 65 96 8e 3d c0 64 b4 4f bf 77 19 ed 24 ac 77 6e d0 71 66 69 54 67 f8 e1 7b 1e e1 Data Ascii: gcO_px<l'=r9*TcL#vwnnpQ;X__8+u:f,zq5\c%m#+m7\|$I<.$4uR698\2Q1()4KsA4,0B~HRje=dOw$wnqfiTg{
2024-05-15 22:36:59 UTC	12120	IN	Data Raw: 81 36 c4 6e 04 4e 32 98 a6 04 5a d1 69 c5 5e d8 61 e5 03 35 99 2f 4c 4b 2b 69 13 45 31 69 96 31 18 0f 38 3c 3c a0 aa 2b 92 b8 85 56 e2 41 fa 64 6d 2b 46 c3 43 12 55 f1 b1 2b 0b 7c f6 89 1e 97 57 12 d6 f6 87 bc 7a 7b 93 d7 ef ed f1 ed db 05 d7 0e e7 58 3e de e7 97 3f 6b f9 fd af 9c e6 11 bd ce fa ed 5b fc fb ef 56 dc bc 59 32 c3 36 c7 5b db 2c 2c 3a e6 8e 9f 60 3a ed b2 bb 59 30 7f ac c3 f6 86 e4 bb 5f df e6 e6 1b 6b 7c ed 35 c3 7f fb 52 87 6b fb 6d 9e bb 02 bf fe a3 23 3e fe 8c 46 aa 45 5e fc ab 11 df fb ab 55 b6 07 25 77 0f 15 db 13 c7 c9 8e e0 47 2f 26 5c 5c 8c 99 0a cd ec c9 93 74 67 7a e4 d3 09 c7 4f 1c 23 ec 74 fc b5 26 3d 2e a3 a5 42 29 e9 11 69 25 bc 3c 35 af 08 92 1e 32 8a e8 cc f4 d9 de 3e e0 60 6f 80 d6 21 56 34 ee ad 52 22 03 af 25 96 52 21 95 Data Ascii: 6nN2Zi^a5/LK+iE1i18<<+VAdm+FCU+\|Wz{X>?k[VY26[,,:`:Y0_k\|5Rkm#>FE^U%wG/&\\tgzO#t&=.B)i%<52>`o!V4R"%R!
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: dc 62 d5 f0 c8 8f 5c 18 54 9d c1 e1 0d aa bd eb 94 93 43 ea 3c a3 ce 52 aa bc c4 94 9e e5 64 ad 69 ee 92 ee 88 c6 e3 8b 5d aa 07 e1 54 47 5f 9d f4 f1 90 52 fa f1 59 68 bf e7 95 42 fa 3b ae 92 48 ed 0d e7 aa d2 90 4d 0b b2 49 41 9e d5 94 b9 a5 28 2c 45 55 37 e6 7f de b9 a1 ac 2a f2 c2 f3 69 15 05 c7 ba 82 93 b3 0a e7 2a ae dd dd e5 fa fd 3d 6e 6d 0c 78 73 13 06 62 99 b3 67 e7 f8 c9 cf b4 f8 c9 cf 9e 27 7d e9 af 58 7d f5 bb bc ba 3b c7 2b f7 03 1e 7b 34 e0 4b 3f d2 e5 e2 92 63 3c aa d8 58 4b b9 7b 7d c4 e1 de 94 b0 e5 e8 f4 a1 3b 23 09 5a 2d 90 09 12 89 53 31 bb bb 15 ab 77 27 dc 59 1d f1 3f 7d d7 72 6d bf 4b 2b 89 99 89 27 0c 07 25 e7 96 ba fc c8 e3 cb 74 3a 82 57 ee ef 73 63 2d e5 e4 e9 b3 9c 3b bd c8 e1 c1 1e 4f bf f0 31 9e 7d df 47 c8 a6 fb dc bd 79 83 Data Ascii: b\TC<Rdi]TG_RYhB;HMIA(,EU7i=nmxsbg'}X};+{4K?c<XK{};#Z-S1w'Y?}rmK+'%t:Wsc-;O1}Gy
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 80 41 3b e9 a0 f4 11 ba 02 aa 8e f2 5a 48 df ad 88 50 91 0b d3 92 b2 dc 99 3b fb e5 da 74 1b 83 cc 53 94 35 84 2a 20 f0 43 7c 3f 23 d4 ab 04 ba 4f e0 67 84 be 25 0c 35 a1 67 d0 5a a0 4a fe b1 70 cc 18 16 db 86 e5 ae 65 d3 b4 c7 b6 39 4d bd e2 23 19 21 45 e2 2a 23 2b b0 85 80 c2 65 1b a7 40 e4 87 24 15 c3 90 94 2c 37 8c 62 8b 50 06 71 ea 08 59 56 a5 36 bb 9d 6a 28 d1 d2 a7 1a c2 94 b5 a4 49 4c a7 93 d1 e9 0b 86 89 24 4b 04 69 09 09 94 c2 22 6c 8e ef c1 cc 64 93 8d f3 eb d8 b4 71 1d 8d ba 83 aa f7 3a 43 02 cf 52 51 d6 45 87 22 d0 56 e2 c9 1c 4f 4a 6c 2e d0 42 12 28 45 a4 ab 9c 5d 3a c5 d7 9f fc 22 cf ef ff 11 83 7e 9b a7 76 0b de 70 77 9b 8f fd c2 c5 5c bc ab 46 91 8b 92 ab 9d af ad 88 64 59 3a 1b 9b af d1 1f 5d 02 a0 53 0f 9a 52 ab 5e 4e 51 4b 6d b3 20 cf Data Ascii: A;ZHP;tS5* C\|?#Og%5gZJpe9M#!E*#+e@$,7bPqYV6j(IL$Ki"ldq:CRQE"VOJl.B(E]:"~vpw\FdY:]SR^NQKm
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 0f 99 9d dd 4c 92 2b 56 3a 39 2b ed 1e 59 1a 33 3f d7 62 d0 4f 58 3a bb c0 b5 57 cd f1 f3 3f f7 76 de f9 ae 77 d0 a8 b7 78 7e ef 21 9e 7f fe 10 7f f9 57 9f 62 69 b5 cb e6 f5 b3 0c 33 43 af 3b e0 d8 a9 36 79 a6 f0 3d cf 09 26 4c b1 56 b2 da d2 3c d1 5a bf 85 75 db 2e 21 88 aa 64 c9 88 d1 a0 8b 52 1e bd f6 12 c6 e4 78 9e 8f 1f 54 c8 b3 21 79 1a 13 0f bb a4 83 36 c3 de 0a 83 c1 88 a9 09 c9 7b ee db cc 3b ee dd 40 ab e9 93 a4 a5 12 4b 14 78 de 24 ad c9 eb a8 d5 2f 42 49 57 2e 1b 93 af ed 90 ad 75 e0 06 5d e2 b1 2c b8 f4 4f 29 5d 9b 65 0a b4 38 8f 33 6b 0a 4b 61 4b 97 88 74 83 0b 21 1d cc 3a 37 60 90 6c d8 34 c3 7d 6f be 89 6d 1b e6 79 e0 0b df 60 cf 17 bf 43 bc bc 44 b4 7e 8a 0f fc fa 47 78 d3 07 ee 75 fb 50 ad 39 72 f0 08 9f f9 a7 2f b2 77 f7 7e 54 c5 27 b7 Data Ascii: L+V:9+Y3?bOX:W?vwx~!Wbi3C;6y=&LV<Zu.!dRxT!y6{;@Kx$/BIW.u],O)]e83kKaKt!:7`l4}omy`CD~GxuP9r/w~T'
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 7e e3 3e 1e ff fa d7 f1 72 19 de f8 f6 37 72 d7 1b 5e 89 c8 96 98 9c eb d2 6a b7 90 ba 45 d8 59 a2 b6 30 cf fc dc 12 4b 4b 35 7c 3f 58 03 63 18 a0 a1 24 75 cb c2 93 0a d7 c9 b2 50 18 22 c0 45 48 85 52 36 9e 93 2e e5 2d 21 b0 65 82 2d 53 40 86 d3 43 5f d9 56 ca b6 71 94 ec 81 3a 7a 41 6c c9 54 8f 4a 2a 3c 5b 90 37 1a 57 18 5c 05 25 09 03 8e 45 4e f5 0c d0 8d 26 ee 41 31 23 ad 21 5f c4 2b 0d a4 72 a9 3a 4e cb 9e de 13 b8 26 77 d3 23 23 a4 ab a4 34 80 55 26 43 76 60 18 a7 38 02 76 06 db 53 64 f2 16 b6 23 7b a4 7c c8 b8 8a 66 33 64 a9 1e a3 13 58 6d 86 a9 d5 0b 9a 76 d7 50 18 ae a2 94 21 6c b5 51 b6 03 52 10 d4 6b 29 c0 de cb a5 53 79 a1 c9 7a 36 b6 09 68 d4 57 7b c2 04 45 72 19 87 91 91 0a b6 e7 b1 b8 da 65 71 b5 4b ad d5 a5 1b 44 29 da da 18 ba 5d 9f a5 c5 Data Ascii: ~>r7r^jEY0KK5\|?Xc$uP"EHR6.-!e-S@C_Vq:zAlTJ*<[7W\%EN&A1#!_+r:N&w##4U&Cv`8vSd#{\|f3dXmvP!lQRk)Syz6hW{EreqKD)]
2024-05-15 22:36:59 UTC	8048	IN	Data Raw: 72 57 10 db 9f 77 ae 20 20 98 be 6e 33 eb d7 ab ff b5 df 31 ef fa 4e da df c6 00 de f8 b1 75 90 48 7f 7b d5 03 82 f4 a7 cd a4 53 69 4b a9 74 86 45 82 8f 4d 13 8f 2e 8a fe 58 4b 0a 4d 49 87 78 04 28 09 b1 b0 49 a4 45 28 53 1f 2c 2b 36 c4 44 68 6c 1a 5e 95 96 51 88 e6 2a 8f df f7 25 3e ff 57 7f 41 65 7c 0b df fb a1 1f e3 96 fd bb 29 04 cb 3c 71 e4 2c 0f 7c fb 49 8a 9b f7 73 d5 6d 77 22 5e 75 c7 fb 8d 2b 53 ea 96 a5 0d ae 30 38 9d 26 07 5a 0d 6e 48 42 82 38 26 d6 21 3a 8e 48 e2 80 c4 44 a9 35 44 8f eb 68 6b c3 a2 4e f8 ab 6e 87 f9 58 23 8b 45 82 91 11 32 99 3c 3a 89 b1 b2 59 1c 24 63 ad 06 bb e7 67 c9 2f 2e 90 41 a3 87 87 89 5e 7c 07 ce ed 2f a1 38 34 cc d4 c5 73 3c fe d8 a3 d4 16 66 d1 a1 4f d8 0d 71 25 14 1d 49 d6 92 78 96 45 ce 49 0d b7 5d 4b 1d b1 a4 fc Data Ascii: rWw n31NuH{SiKtEM.XKMIx(IE(S,+6Dhl^Q*%>WAe\|)<q,\|Ismw"^u+S08&ZnHB8&!:HD5DhkNnX#E2<:Y$cg/.A^\|/84s<fOq%IxEI]K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	49995	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	631	OUT	GET /steam/apps/1651560/capsule_184x69.jpg?t=1715609768 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 9500 Last-Modified: Mon, 13 May 2024 14:00:12 GMT ETag: "66421cec-251c" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=401904 Expires: Mon, 20 May 2024 14:15:23 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	9500	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 06 07 04 05 02 03 08 01 09 00 ff c4 00 3b 10 00 01 03 02 04 04 04 05 03 02 05 04 03 00 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 15 32 71 81 23 91 a1 Data Ascii: JFIFHHCCE;!1A"Qa2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	49996	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	692	OUT	GET /public/images/v6/icon_platform_linux_dark.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/home.css?v=94M63Gcmmzh0&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1360 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-550" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	1360	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 01 fa 8e 2d 9b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR-tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	49997	96.17.60.195	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	399	OUT	GET /categories/homepageimage/category/rpg?cc=us&l=english HTTP/1.1 Host: store.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	2083	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.cloudflare.steamstatic.com/ https://store.cloudflare.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com https://steamcommunity-a.akamaihd.net; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.cloudflare.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.cloudflare.steamstatic.com/ https://checkout.steampowered.com/ https://.steamstatic.com https://.steamcontent.com https://.valvesoftware.com https://.steambeta.net https://*.discov [TRUNCATED] X-Frame-Options: DENY Cache-Control: public,max-age=44683 Expires: Wed, 15 May 2024 20:15:13 GMT Last-Modified: Wed, 15 May 2024 01:50:34 GMT Strict-Transport-Security: max-age=10368000 Content-Length: 127133 Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	14301	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 e9 08 06 00 00 00 1a 8c ba c1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 10 63 61 4e 76 00 00 02 f2 00 00 01 bb 00 00 00 b4 00 00 00 3c 27 41 e8 f4 00 00 80 00 49 44 41 54 78 da 74 fd 77 98 65 d7 75 de 09 ff f6 de 27 de 5c b9 ba ba ab ab 73 40 ea 46 8e 04 08 90 20 48 08 14 b3 44 53 c1 61 64 59 61 2c 07 d9 23 db 63 cf d0 df f8 7b fc c9 63 7b 6c 8f b3 15 46 b6 02 25 4a 14 25 31 07 80 20 88 9c d1 40 77 a3 73 57 55 57 0e 37 df 93 f6 de df 1f e7 de aa 6a 90 53 cf 53 4f 77 dd ba 55 75 cf b9 7b a5 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDcaNv<'AIDATxtweu'\s@F HDSadYa,#c{c{lF%J%1 @wsWUW7jSSOwUu{
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: e6 09 fc 52 8d e3 77 3e c8 77 ff e2 8b fc e1 ef fe 0e 17 2f 5c 40 67 86 7a 26 69 24 06 2b 5d 02 3f 67 a0 64 c6 12 a7 c9 d6 90 81 44 70 c3 81 03 fc ad 9f ff 9f a8 85 8a a7 7e f0 0c e7 2e ce b3 7b 6c 94 b1 89 61 fe c1 43 0f 30 77 6d 91 df fc 1f 5f e0 ed 8b 97 f1 7c 87 24 ed 8b ee f5 7a 00 24 49 82 d6 05 8a c5 22 42 38 28 e9 61 4d 7e 26 7a dd 1e a5 72 91 3d 7b a6 49 b3 94 62 b1 48 b9 5c 61 71 f1 5a ae e7 5d 2e 13 27 09 71 1c e3 0a cd f0 70 8d ce 9d 9f 24 79 e8 97 50 33 b7 20 34 10 e7 f3 e7 42 b2 d5 2d c9 6d 76 a0 d5 c6 0e 3d e9 be e0 42 7f 0e 42 08 81 6b eb 8c af fc 21 6a f5 3b a4 dd 0e 0a 17 4d 46 2f ee e5 29 74 94 e2 3a 1e ae ef 11 47 09 52 59 74 ba 41 ab 3e cf e8 4d 7f 03 39 f5 01 4c af 43 2f 03 a3 5b d8 c5 6f 93 cd 7d 97 9e 57 27 93 82 ae b5 c8 48 40 0f Data Ascii: Rw>w/\@gz&i$+]?gdDp~.{laC0wm_\|$z$I"B8(aM~&zr={IbH\aqZ].'qp$yP3 4B-mv=BBk!j;MF/)t:GRYtA>M9LC/[o}W'H@
2024-05-15 22:36:59 UTC	2792	IN	Data Raw: f9 19 3a 7e 22 12 f7 83 00 29 54 4a 36 90 18 22 35 66 07 e2 28 42 aa 88 8d 13 6b c8 67 1d 4e 9f 39 cf 89 53 93 bc 7d 6e 96 d0 57 48 53 e3 58 92 52 c1 a6 db 6d f2 d7 7f fb b7 bc f0 ca 61 4c 2b c7 e3 4f 3c c9 4c 7d 05 3f 50 64 2d 1b db 94 ac 19 2c d3 5f cc e2 ba 16 9d 4e 93 30 36 58 6a cc 60 99 06 6e c6 44 45 61 12 83 23 4d 82 58 81 96 d8 b6 49 18 1a 08 11 20 84 24 f2 3c 62 24 f6 8d 8f 90 7b df ef 60 6e ba 05 62 8d f6 7b a2 83 6b 20 95 5e 92 5f 9a ca 71 b5 45 be aa e1 ed ed 33 95 96 f8 1a 86 8d 36 9b 56 0e d1 bd f4 36 b5 10 3a 43 bb 10 95 31 a4 30 09 50 78 a1 62 73 ae cb 75 7d 06 91 96 c9 13 4a 2b ad 69 08 ce 4d cd f3 a5 c7 9e e3 b5 63 a7 a8 d5 eb 84 b1 42 58 0e e5 4a 85 d8 c9 32 ba 76 3d a5 5c 06 45 8c 32 93 f8 17 a5 13 2a f1 b9 2b f3 3c 7f e8 6d 32 b9 3c Data Ascii: :~")TJ6"5f(BkgN9S}nWHSXRmaL+O<L}?Pd-,_N06Xj`nDEa#MXI $<b${`nb{k ^_qE36V6:C10Pxbsu}J+iMcBXJ2v=\E2*+<m2<
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: a6 91 c4 68 0c be f4 bd a7 f8 fa 0f 9e 64 70 78 84 7c be 40 a1 98 c3 b1 6d f2 d9 2c b6 69 e0 66 32 ec de b4 8e e5 e5 3a 27 cf 4f b3 ec b8 98 b9 61 b4 69 60 1a 8a a5 96 c7 13 87 27 d9 be 76 30 71 4f b9 c6 40 23 56 82 81 72 8e 4f be ff 41 b2 8d 93 bc 7d f4 65 96 ea 8b 28 23 c6 2a 5b 14 2d 81 11 37 59 e9 f8 ec d8 b9 8f 7d 7b 76 26 6b a5 7f f3 fb bf a8 13 df ab 84 ff 1c 85 21 85 52 8e ea c0 00 f3 f3 75 5e 7f fd 38 53 97 17 f0 bc 36 d9 9c cd 67 fe d1 a7 d8 bb ef 46 7e fb b7 7f 9f a5 c5 39 b6 6e 9e a0 55 f7 98 5f 6e b0 d2 ee a0 54 44 21 9f c3 90 92 5a 6d 99 42 a1 40 7f 7f 99 c5 c5 45 86 4b 79 46 f3 36 39 23 a2 9a 35 d8 ba ef 76 6e 78 d7 47 19 1a df c0 e7 ff f8 73 fc e0 b1 6f 12 0a 87 f9 7a 8b be 81 3e 06 07 fb 18 e8 ef a3 58 2a 71 ec c4 69 1a cb 4b 5c bf 73 07 Data Ascii: hdpx\|@m,if2:'Oai`'v0qO@#VrOA}e(#[-7Y}{v&k!Ru^8S6gF~9nU_nTD!ZmB@EKyF69#5vnxGsoz>XqiK\s
2024-05-15 22:36:59 UTC	12120	IN	Data Raw: 3b cb e4 b3 06 51 f4 93 b3 bd 14 82 56 b7 cb d4 c2 32 e7 ae cc 73 79 61 99 e9 28 a0 63 4b 8a b9 02 7b 47 46 b8 6d bc 9f 82 65 a7 ef 71 fa 5a b5 c2 34 24 b3 0b 35 fe e2 3b cf 71 6e 7a 89 6a d9 65 a0 d0 cf c0 e0 5a f6 ed 9a 60 dd 80 45 d6 36 40 c4 f8 7e 4c ab 1b 72 65 61 99 b7 2f 2f 72 f2 d2 02 73 0d 8f 7a cb a7 dd 6e 73 cb 96 11 3e fd f0 ad ec 58 3f 9c be fe 5e 67 2c 52 41 8b a4 ed 79 3c f9 fa 31 1e 7b f6 65 e6 9a 1e 4b 81 4b 28 5d fa dd 80 2d 83 2e 1b 86 07 18 e9 af 52 cc 26 76 c8 41 18 d2 6a 77 58 5c 6e 30 39 b3 c0 95 d9 05 96 1a 2b 74 bc 2e ae e9 a4 99 c4 3e 22 eb 50 9e d8 c1 e0 ce 1b c8 1b 6d e2 8b 5f c5 bd f2 34 56 5b 83 c8 40 e8 91 0d 3c 50 0a b3 d0 8f 95 b5 e9 96 42 44 c1 c2 89 25 45 5d 62 c8 1d a0 9c c9 93 b1 9d 64 03 92 72 e6 a4 53 c1 28 8c a0 dc Data Ascii: ;QV2sya(cK{GFmeqZ4$5;qnzjeZ`E6@~Lrea//rszns>X?^g,RAy<1{eKK(]-.R&vAjwX\n09+t.>"Pm_4V[@<PBD%E]bdrS(
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 11 5c fd 12 bc 1d fb b0 0b 0b 74 1f bb 0f d1 6d 61 94 07 42 23 a2 10 26 26 90 95 86 db 79 ca 52 37 ec 79 a8 c0 43 c4 31 42 79 0e 84 c9 73 ba a7 5f 40 2e cd 51 d9 b2 03 6f 78 cc a5 f2 69 5d ba 43 0e f0 5a 47 e0 10 25 99 43 89 01 1a 69 71 b4 39 8d 3b b1 30 1a a9 0d ca ba 04 42 84 42 2b 67 9a a7 74 8e c9 05 4a 54 00 e9 d2 ed b5 87 35 1e c2 78 25 f2 3a b0 08 28 d7 b7 ee ce 6c 9a 5b 58 be f6 6d ac f5 6e a3 b9 7a 0a 51 f4 d8 18 d9 45 da dc 8a d4 c2 3d ef fe 62 e9 7f 99 85 37 21 d0 7d e6 d9 a6 79 de 71 59 c4 26 87 cd 41 f3 51 de c8 9c ce d8 f5 dd 96 5c 43 2f 73 41 8b da 19 9e ba 14 43 3f 40 ab 51 ce ab 06 a7 e6 3b dc bf d8 e2 96 89 84 97 0e 77 d8 3a 56 23 0a 6b 84 be 47 96 25 fc e8 a9 17 78 ec d9 63 74 36 5a 78 9e 4f 51 db 81 9a 8a a8 f6 0e a3 12 8b f4 21 96 39 Data Ascii: \tmaB#&&yR7yC1Bys_@.Qoxi]CZG%Ciq9;0BB+gtJT5x%:(l[XmnzQE=b7!}yqY&AQ\C/sAC?@Q;w:V#kG%xct6ZxOQ!9
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: c7 58 6f 07 14 69 88 42 e3 ab 14 ac 8f a1 56 ce d2 1a 63 34 d3 0d 8f a8 0e 99 2f 10 91 44 46 92 20 30 f8 b1 a1 2a db 5c b6 71 86 a9 9e 43 b9 75 bd 4e 26 15 a7 ee ff 2a 2f fc c5 bf 61 f5 89 ef 60 8b ec ff 71 f1 82 9b 33 1f 79 e4 11 be f4 a5 2f 21 84 e0 c0 81 03 44 51 e4 b2 a0 37 e5 13 79 9e 43 b0 b5 d6 ec dd bb 97 b7 bc e5 2d 6c db b6 8d 47 1e 79 64 80 44 d7 6a 35 5e f3 9a d7 0c fc ab ba dd 2e 6f 7a d3 9b 98 9e 9e a6 dd 6e 03 0c 4e f5 3e 0a 1e 04 01 0f 3e f8 20 1f fa d0 87 58 58 58 20 4d 53 b4 d6 34 1a 0d f6 ef df cf 0d 37 dc 40 96 65 84 61 c8 f4 f4 f4 e0 e7 db ff bd cf b7 fe c6 37 be 81 b5 96 d7 bf fe f5 ec d8 b1 83 d3 a7 4f a3 b5 66 64 c4 85 a7 2d 2d 2d d1 6c 36 79 e2 89 27 b8 f2 ca 2b b9 e3 8e 3b d8 b3 67 8f 43 a1 5f f6 f1 2f db f5 93 a7 29 5a 1d aa 33 Data Ascii: XoiBVc4/DF 0\qCuN&/a`q3y/!DQ7yC-lGydDj5^.oznN>> XXX MS47@ea7Ofd---l6y'+;gC_/)Z3
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 8b 93 1a a6 67 66 f0 be f0 ab ec 7c ee 1f 12 ce 5f a2 2c 33 02 65 8a 69 8a 23 28 39 05 f2 d6 91 c5 87 af 04 81 23 8f 46 53 5a 14 88 20 a9 c4 07 14 52 61 51 4a e2 38 ea 08 68 25 8f 04 1d 12 35 3f 3b fd 92 e3 78 78 41 8d 72 6d 8e cc 24 18 d7 2b 50 2f a3 21 71 96 22 aa 33 28 d7 27 ec b7 20 8b c9 f3 88 2c 4a 99 7a fc 39 ca 33 33 05 72 c4 14 51 a2 45 76 30 05 50 0d b0 b2 68 7c 05 49 c8 ee 1f 7f 85 ee ee 2e d3 3f f5 97 71 4e 3d c4 56 68 48 cb 13 2c eb 94 de ea 2a 83 24 c3 68 8d d5 8a f4 60 9f cc 58 9c 89 59 86 9b 5b 68 bf 44 a3 5a 46 23 89 72 4b 6a 24 b9 d0 45 0e 93 d2 58 47 23 5d 0f a9 5d 8c 52 a0 5d 84 eb 16 8c e7 52 05 ca 55 44 e0 13 d4 ab 3c 73 76 99 ff ea e3 0f f3 b7 3f 74 8a a5 7a 89 30 cd 39 88 32 f6 e3 0c 93 e5 b8 36 45 da c2 3c 90 a5 31 db fd 88 6f 6f Data Ascii: gf\|_,3ei#(9#FSZ RaQJ8h%5?;xxArm$+P/!q"3(' ,Jz933rQEv0Ph\|I.?qN=VhH,*$h`XY[hDZF#rKj$EXG#]]R]RUD<sv?tz0926E<1oo
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 1b c6 21 dd fe 90 24 07 1c 1f af 36 81 2e 55 8a b3 44 66 c7 19 b5 63 02 a2 35 58 a5 70 3c 1f 2f 08 d0 41 8d 5c bb 88 a0 4c d0 9c c2 68 b7 b0 66 65 39 56 3a 68 d7 27 1f 16 56 c4 a4 d3 01 93 63 d3 22 23 58 48 01 7e 09 39 33 83 9a 9c 22 0b 02 32 21 f8 e8 a9 19 fe ee 73 e7 b8 d6 89 f8 8d 77 d6 f8 ea f5 0d be 79 6b 83 6f de de e7 ab 77 f7 f9 f6 ce 80 db dd 21 35 cf 65 a6 e4 d0 f4 1c 1e 6e f8 3c 3f 55 22 b5 39 2f 6f f7 f9 fa bd 36 f7 ba 43 6a ae c0 97 92 f9 8a cb 23 53 35 1e 9f 6d 30 ed 6b ee b5 7b fc f3 37 ef f0 9b af df 64 bb 33 40 45 11 c9 d6 06 62 d8 47 db 9c c0 75 f0 1d 8d ab 80 34 26 8f 23 92 d1 88 3c 49 c8 e3 84 2c 8e 88 76 ee d1 bb f1 2a d1 ce dd 22 28 6e bc e3 36 cb 2e 97 8e 4f d2 ac 7a f4 87 09 7b bd 90 4e 37 e4 e4 42 8d e9 c9 26 27 4e 9e 64 76 61 86 Data Ascii: !$6.UDfc5Xp</A\Lhfe9V:h'Vc"#XH~93"2!swykow!5en<?U"9/o6Cj#S5m0k{7d3@EbGu4&#<I,v*"(n6.Oz{N7B&'Ndva
2024-05-15 22:36:59 UTC	8048	IN	Data Raw: 25 50 3e 3b 6a 05 42 4f b1 d0 ee d3 cb 2c 05 61 a8 16 7d 46 bd 02 17 8d 94 38 3c 5c e6 fe 53 0b 7c f1 e9 39 7c ab a9 05 96 92 b4 10 27 74 db 1d 94 d5 d4 cb 05 7a cd 36 8b 33 0b b4 9b 2d 74 1a 63 d3 14 9b 66 58 9d 61 8d b9 1d 6d 7e 5e 14 fc 3b 6d 9c 39 05 cb 43 9f fd db 68 dc 6f ad 97 00 3f 07 bc e1 af fb 41 21 04 a3 8d 32 a5 42 c8 f2 46 9b 6e ff 9b d9 5f db bc dc 1c 4d dc 22 dd 0b e1 56 09 25 84 3b cb 2a e7 bb d4 b3 ce 64 5c 09 e1 72 77 84 d8 f6 a2 0a a4 a4 20 15 05 69 29 e5 cd 3b 94 c1 54 64 98 44 32 58 0c 08 02 58 4f 33 4e 27 19 73 1e 68 a9 18 4e 2c d3 89 66 ba 10 30 31 2c a9 35 32 b4 95 f4 da 12 29 0d e5 1a 08 25 59 5f 83 8d 0d 89 46 90 68 47 27 2c 86 92 42 68 79 3a 32 fc 6e b3 c3 49 6d 00 7a c0 1f 83 fd d5 9b 46 a7 8e ff 5e af c5 97 3b ed bf f4 1a 8d Data Ascii: %P>;jBO,a}F8<\S\|9\|'tz63-tcfXam~^;m9Cho?A!2BFn_M"V%;*d\rw i);TdD2XXO3N'shN,f01,52)%Y_FhG',Bhy:2nImzF^;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	49999	96.17.60.195	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	404	OUT	GET /categories/homepageimage/category/strategy?cc=us&l=english HTTP/1.1 Host: store.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	1676	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.akamai.steamstatic.com/ https://store.akamai.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com https://steamcommunity-a.akamaihd.net; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.akamai.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.akamai.steamstatic.com/ https://checkout.steampowered.com/ https://.steamstatic.com https://.steamcontent.com https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.cqloud.com https://steambroadcast.akamaized [TRUNCATED] X-Frame-Options: DENY Cache-Control: public,max-age=49858 Expires: Wed, 15 May 2024 23:44:49 GMT Last-Modified: Wed, 15 May 2024 08:55:54 GMT Strict-Transport-Security: max-age=10368000 Content-Length: 122989 Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	14708	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 e9 08 06 00 00 00 1a 8c ba c1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 10 63 61 4e 76 00 00 02 f2 00 00 01 bb 00 00 00 b4 00 00 00 3c 27 41 e8 f4 00 00 80 00 49 44 41 54 78 da 84 fd 77 b0 a6 79 76 d7 09 7e 7e e6 71 af 7f af 37 e9 6d 55 65 99 2c df d5 56 ed a5 6e b5 5a dd 52 0b 10 42 80 56 2b 69 57 0c 20 96 dd 99 65 62 66 2a 06 62 89 65 16 66 19 62 77 62 27 60 59 88 61 00 01 62 24 90 69 49 6d d4 6a 5b dd 65 ba 4c 66 56 55 7a 73 fd bd af 7f 1f f7 33 fb c7 f3 de cc 12 b0 b1 b7 e2 46 de ca 78 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDcaNv<'AIDATxwyv~~q7mUe,VnZRBV+iW ebf*befbwb'`Yab$iImj[eLfVUzs3Fx
2024-05-15 22:36:59 UTC	9868	IN	Data Raw: 90 79 25 4b f4 de 1d f2 45 66 ec ae 2a a3 09 3f 3b 7c d0 78 51 72 af 97 72 7b e2 39 e3 0a 6a b1 65 f5 e1 13 b4 c3 84 ef bc 35 c6 c7 09 22 8c d1 52 13 86 09 de 19 c6 e3 01 dd b9 39 84 83 69 bf 5f a1 9a f5 3a 51 9c 1c 26 fa 19 21 c5 a2 b5 22 90 92 22 4b 39 d8 b9 c7 70 77 0b 57 e6 78 66 c6 03 4a 57 76 a1 b3 41 fc e1 99 78 5f a5 39 fb 78 0d 8a e6 e2 3a 73 cb 47 50 5a 61 4c 31 23 b8 54 ad 47 57 66 1c f7 39 35 0c 13 04 3e 37 ac d7 e0 48 28 99 6f 36 a0 cc 78 ed ca 16 6f 5f cb 39 f7 50 97 67 3e 12 a3 ea 53 5e fe 7e 42 a6 02 5a 47 ba 3c b7 3c 22 ce 73 b6 27 1d c6 a6 20 28 27 68 03 99 73 58 61 71 ce 62 0a 4b 9a 16 4c c7 13 26 83 1e 73 35 4f bb 31 e6 ff fa 0f bf c2 7f ff 8f 5f e6 eb 3f dc e4 b5 4b db 8c f6 c7 9c a8 e7 7c f0 f9 63 5c 7c ea 0c 67 d6 6b 08 5b a3 1f 9d Data Ascii: y%KEf*?;\|xQrr{9je5"R9i_:Q&!""K9pwWxfJWvAx_9x:sGPZaL1#TGWf95>7H(o6xo_9Pg>S^~BZG<<"s' ('hsXaqbKL&s5O1_?K\|c\\|gk[
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 82 10 d5 22 e9 20 a4 b3 7a bc 3a 28 f2 09 4e 07 18 32 7c 6e c9 a7 05 f5 6e 93 30 a8 68 af 7b 99 e0 95 9d 8c 6f ef 67 6c 59 c9 50 6a 76 8d 63 df 58 bc 6e 90 87 0d e2 38 42 05 01 b1 52 c4 a5 20 12 86 24 94 74 83 92 63 da 72 14 47 0b 89 57 7a 46 4c 90 94 45 c6 b8 cc 99 66 23 ce ce 85 7c fc a3 47 f8 e8 e7 9e e6 47 9e 10 0c bf f3 9b 7c ef 52 ce dd d5 9f c2 2f 5f c4 16 39 81 99 12 cb 92 5a 5c b9 9e e4 d3 92 b2 b4 95 25 43 e9 31 a5 47 29 8b b3 06 67 0c 52 96 68 59 56 d6 c4 b3 71 a6 c0 56 d4 5e 1c 42 58 ec 6c 59 b6 d6 a6 da 6d 25 35 42 4b 36 ae df e6 7b 5f fd 36 93 f1 84 a7 de ff 0c 67 2f 3e 42 52 4b aa 72 3b 08 40 04 14 85 26 2b d5 ec f0 f4 60 1d 0e 49 67 75 99 d5 f3 a7 88 eb 31 93 c1 98 3c cf c9 8d 65 38 49 d9 bf 7d 97 fd ab 57 29 ad 61 71 b1 49 12 6b 8c d7 28 Data Ascii: " z:(N2\|nn0h{oglYPjvcXn8BR $tcrGWzFLEf#\|GG\|R/_9Z\%C1G)gRhYVqV^BXlYm%5BK6{_6g/>BRKr;@&+`Igu1<e8I}W)aqIk(
2024-05-15 22:36:59 UTC	8192	IN	Data Raw: 9e f3 ff fe cc 3e 0e 3d 34 cc 4f 7c fe 5d 0e d5 7d 7e fc d9 bd 9c 9e ed f1 fb 27 6f 23 cb 19 4f 1e 98 e0 91 9d c3 bc f4 b1 63 34 2b 23 7c e1 1b ef f0 1b 5f 9a e5 d4 74 d7 79 13 29 f4 9d da e2 07 81 73 e8 14 e6 f4 8d 5e 52 29 85 14 2e b9 0f b8 77 00 0b 8c aa 93 16 ba b2 2d b7 16 2f 28 a1 c2 12 51 a9 4a a5 52 21 4f 13 d2 41 8f 41 af 4b 1a 0f f0 94 da 9c e4 ea 82 35 e4 79 3e 41 58 26 cb 52 d2 a4 5b 64 19 6d ac 7a 7c 90 8a a8 54 c6 0b 4a 8e 9e a0 73 e2 81 83 a8 e9 2c 75 6b 00 e3 1e 20 6d 25 06 d0 3a c5 5a 77 2b 05 61 44 b5 d1 c4 f3 03 ba ed 75 97 3a 28 d8 24 4d 7e ef ed 7b 7f 38 d9 1f 72 41 59 08 cb 55 86 27 a6 18 c4 96 4a b5 c4 1f fd 23 8f f0 53 af 8c a2 6e be cd e5 8b 2d 92 3d 1f c7 db fb 08 46 3a 91 7c ae ad c3 9c 16 3d 97 d5 02 63 25 d6 05 e7 e2 17 f2 3b Data Ascii: >=4O\|]}~'o#Oc4+#\|_ty)s^R).w-/(QJR!OAAK5y>AX&R[dmz\|TJs,uk m%:Zw+aDu:($M~{8rAYU'J#Sn-=F:\|=c%;
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: f4 e9 8b d4 9a 0d 1e 7b e6 11 ca cd 0a 9d 7e 4a 63 64 0b 7e 54 76 94 13 e9 61 71 17 85 f2 22 b7 06 8a 07 a4 71 46 9a a4 58 24 71 96 73 ee d4 49 ae be f9 4d 5a 8b 73 5c 9b 5d 66 7e b5 cb e4 50 c8 8f bf f2 20 3b 27 eb 2c ae f6 f0 c3 12 5b b7 4d b0 f7 c1 23 98 f6 2c 97 de bb c0 ad ab b3 64 49 8e f1 23 92 38 43 67 09 a1 b2 94 4b 65 66 e6 d6 58 6d 27 5c 5d 4f 09 cb 55 c6 86 2a c4 2a 60 61 69 19 93 f4 b1 c6 b0 77 db 08 2f 7e e8 61 e2 3c 64 7e 6d 40 9a 26 4c 4e 0c f3 e0 a3 0f b2 f7 e0 1e 5a b3 d3 bc fd cd ef 70 67 7a 9a 5d 7b b7 d3 9b 5f e6 cc db ef 91 e4 86 f5 7e 4c d0 18 65 cf e1 a3 54 1a 55 92 f5 75 ea cd 51 f6 3e f1 2c e1 f8 4e 0e ee 9e 62 7c a4 c1 6f 7c e3 02 df f8 cd df a4 22 7a e4 61 8d 74 75 96 89 8a e4 23 1f 7b 89 27 5e 7c 99 b0 52 c7 6a 8b 52 e1 d0 e7 Data Ascii: {~Jcd~Tvaq"qFX$qsIMZs\]f~P ;',[M#,dI#8CgKefXm'\]OU**`aiw/~a<d~m@&LNZpgz]{_~LeTUuQ>,Nb\|o\|"zatu#{'^\|RjR
2024-05-15 22:36:59 UTC	8192	IN	Data Raw: dd db e7 ea f5 9b ec 6c ef 82 8d c1 6f 36 04 8c d0 38 2f 10 de 20 83 c3 84 98 f8 a0 95 42 8b 08 c8 f9 d0 92 6c 5a f3 f8 64 04 9f c6 b5 40 7c be 94 92 91 61 d7 22 c3 69 46 74 3e d0 c9 3c 1b 85 e7 4c d7 73 aa 2f b0 e3 03 26 47 43 b0 86 97 76 2a 7e e5 62 c3 2b 47 b1 4a ca 94 22 f0 ef 36 69 4c 05 ee df 63 ae f8 1f 72 70 8f b3 a8 42 02 48 c5 b1 b7 15 69 95 49 ea 7a 48 9f 57 22 d0 79 41 6f 79 85 6e 7f c0 64 34 64 74 b0 87 58 3e f9 58 5c 6e d8 f9 1e 2a 52 cc 62 9b d0 26 1e f8 04 bc 57 bd cb 00 00 80 00 49 44 41 54 8f 5b 63 66 2d 66 eb b9 1c e1 32 15 b3 8a 92 4b e0 5d 77 9f e2 2f fe b9 ef e6 0f 7e 70 91 dd 67 be cc 27 9e 1d f1 c2 e0 49 9a a5 d3 e4 d2 23 bd 8d 15 d3 fb e8 52 69 4d 3a 78 16 d7 98 18 5e e6 e3 4c 3d 19 8f 21 78 ca a2 a4 c8 8b 59 15 75 36 12 4d 66 73 Data Ascii: lo68/ BlZd@\|a"iFt><Ls/&GCv~b+GJ"6iLcrpBHiIzHW"yAoynd4dtX>X\nRb&WIDAT[cf-f2K]w/~pg'I#RiM:x^L=!xYu6Mfs
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: b3 70 ed 05 30 67 71 b5 bc 69 7f 0c 30 8a 9e c9 16 7c 24 df 4b cf 4c c3 1c 42 0c 98 0a c1 e3 52 10 b9 b3 36 1d e2 d8 16 0b 04 75 dd b0 b3 b3 0b 21 70 72 63 95 32 cf 68 9a 18 70 96 ce 57 ac ae a9 ed 26 55 6d 29 04 2a cf 66 ae 14 c1 db 3b e6 b1 76 0c 31 8d 9d 21 da 33 bd 71 da 99 47 1b d5 f9 ac df a2 d7 a1 45 ac 99 5f 5e f1 c0 ce 7d c7 5a 30 ad 35 dd 0f a9 7d 54 79 81 35 35 17 9f fb 12 b7 af bd c1 85 47 de c5 89 f3 f7 13 9c a4 f1 8e 22 8b be cb 2d 21 26 a4 bd 6a d3 34 98 a6 8e a9 1a 0e 62 ed 4e 5f 8b 88 82 7d 91 c2 f4 24 3e 6a 1b 12 e5 56 a5 67 42 05 87 ca 05 84 8c ba 91 04 6f c9 89 31 a2 d7 97 1f e0 d6 e9 77 70 60 32 42 75 84 32 93 d8 41 1d 53 e2 84 f4 fa 0a 77 ac ca 0b 91 cc 06 7c 14 56 d8 18 20 b7 39 71 1c bc 71 c8 4a d6 70 66 39 27 cb 73 ce dc 7d 17 cb Data Ascii: p0gqi0\|$KLBR6u!prc2hpW&Um)*f;v1!3qGE_^}Z05}Ty55G"-!&j4bN_}$>jVgBo1wp`2Bu2ASw\|V 9qqJpf9's}
2024-05-15 22:36:59 UTC	8192	IN	Data Raw: 0d 85 e2 c2 99 13 fc e8 99 a7 39 7f ee 1c 77 ec 7b 90 87 3e f6 04 f9 42 07 8d 66 9d 03 af bd c0 4f 9e fd 01 c9 54 86 47 1f ff 34 db 77 ed 21 93 ce 12 46 01 73 73 b3 3c ff ec f7 f9 ee 37 be c6 e5 4b 17 01 03 d3 d0 9e c2 61 24 71 bd 80 a4 63 b3 63 db 32 1e 7d 68 0b 5b 36 0c 82 92 b8 ae a7 2f b8 d0 94 c7 c0 73 f1 5d 17 15 f9 a8 d0 8b ff d6 9a 5f 51 18 e1 bb 01 81 17 e1 fb 21 32 d4 b2 b1 73 25 9f b7 4f d7 78 ef 42 8d 6a 53 6a 8e ac a1 62 71 05 74 e0 0a 13 59 58 86 df b1 0a 69 a6 35 56 38 36 d4 06 b4 b0 be 8a 30 ac 04 a6 9d c5 b0 92 98 76 4a b3 87 4c dd 13 2b a5 df d4 5a e5 23 a6 47 18 02 91 4e 22 53 56 8c 2d 36 80 88 a0 3c 43 d4 f0 b1 3b 8a 18 c5 7e 48 f6 43 22 8f c8 16 10 a9 3c e1 c4 79 dc 03 5f 43 55 e7 c0 30 91 61 2b 86 36 46 da 2a 2f d4 41 88 e9 a0 1c 07 Data Ascii: 9w{>BfOTG4w!Fss<7Ka$qcc2}h[6/s]_Q!2s%OxBjSjbqtYXi5V860vJL+Z#GN"SV-6<C;~HC"<y_CU0a+6F*/A
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 6e b9 e3 2e 1e 7a f4 09 1a b5 0a df ff e6 df e1 b9 2d c2 30 e4 8d d7 5e 66 a1 34 cf b2 15 ab b9 fb 9e 87 b8 eb de fb e9 1f 1c 26 08 7c de 7c ed 25 f6 bf f4 3c dd 7d 83 ac 5e b3 96 b7 f6 bf cc 91 83 ef d2 72 5d 04 7a af 17 4a 49 d3 0d b0 2c 93 1d 5b 87 79 ec e1 6d 6c 58 37 80 8a 22 42 2f 20 88 3c be fe bd c3 9c 3c 79 8d cf 3c b6 99 54 02 0a 49 13 21 02 a2 d0 d3 f6 8c 52 b1 ff 83 69 5e 78 67 86 bb b6 15 b9 79 5d 9a c8 d5 3d 64 a9 e2 73 f0 62 93 37 4f d7 98 a9 06 7a 2a dc de 11 2a b5 78 a2 07 46 06 3a c7 18 ea cf 3b 2f 1c 00 00 5f a6 49 44 41 54 ed a5 51 9e 27 10 02 cf cc d0 92 09 cc 64 0e c3 49 69 0c 75 e4 11 b9 35 84 df 24 a1 7c 9c 44 0a 27 9d c3 48 75 d2 12 19 cc 64 91 50 42 b3 3a 8d db 98 d3 7c 59 db 46 18 09 1c 2b 87 93 e9 d2 d4 3c 19 61 db 36 86 6d 21 Data Ascii: n.z-0^f4&\|\|%<}^r]zJI,[ymlX7"B/ <<y<TI!Ri^xgy]=dsb7Oz**xF:;/_IDATQ'dIiu5$\|D'HudPB:\|YF+<a6m!
2024-05-15 22:36:59 UTC	8192	IN	Data Raw: 73 5c 29 55 af 17 23 11 b6 8b 50 2e 06 87 54 3a 28 cb c6 75 5d ca 05 87 e1 42 8e e1 bc 24 9f 73 b0 6c 97 61 2b e5 95 c1 b3 c4 8b e7 b8 b8 59 a3 e6 05 9c 5b 6f 72 b6 da 64 a3 d5 20 8a 7d e2 28 02 04 c2 68 32 fd c8 7e ea 9b 55 22 a9 ce 60 a3 ca ce a3 9c 3c 18 41 92 24 18 a9 90 95 21 9c c9 bd 68 af 49 b4 f2 1c 60 f5 d2 6a c8 34 09 7a cd 29 29 51 96 c2 56 06 47 66 f4 ac da e0 19 23 3e 22 84 f8 4f 60 ce 00 28 29 a9 2e 9f fb 2b cf ed 7b 3e 72 a4 df 90 1a 6b ad 9e f9 b1 cd 33 8f bc cf 5f 39 3d ad 3b 55 84 8e 32 fa 5b 04 da 6c 73 da 54 93 24 19 e1 c3 65 a3 a1 41 f7 6b 00 9c 44 58 2e ce d0 14 e5 d9 ab 18 dd 73 1d 43 d3 57 e0 56 c6 90 96 95 b5 de 8c ec d5 ad bd de 8a 90 24 06 5e 57 ac f1 fa fc 46 46 34 21 b2 ed 2b 25 32 40 0e c2 26 95 36 a1 52 34 52 97 f9 d0 65 35 Data Ascii: s\)U#P.T:(u]B$sla+Y[ord }(h2~U"`<A$!hI`j4z))QVGf#>"O`().+{>rk3_9=;U2[lsT$eAkDX.sCWV$^WFF4!+%2@&6R4Re5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	49998	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	605	OUT	GET /public/javascript/applications/store/navevents.js?contenthash=a4eb1ee72718a7bf1c88 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 Last-Modified: Tue, 07 May 2024 22:56:51 GMT ETag: "9WBe50LohiBS" Strict-Transport-Security: max-age=10368000 Content-Length: 14599 Cache-Control: public, must-revalidate, max-age=35723 Expires: Thu, 16 May 2024 08:32:22 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	14599	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 31 30 33 5d 2c 7b 31 39 39 3a 65 3d 3e 7b 65 2e 65 Data Ascii: /** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/"use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[4103],{199:e=>{e.e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50000	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	399	OUT	GET /steam/apps/271590/capsule_184x69.jpg?t=1714055751 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 9379 Last-Modified: Wed, 08 Jul 2015 17:56:23 GMT ETag: "559d6447-24a3" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=308465 Expires: Sun, 19 May 2024 12:18:04 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	9379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 07 08 05 06 02 04 09 01 03 00 ff c4 00 3c 10 00 01 03 03 03 02 05 01 05 06 05 04 03 00 00 00 01 02 03 04 05 06 11 00 12 21 07 31 08 13 22 41 51 14 15 23 32 61 71 16 72 81 Data Ascii: JFIFHHCCE<!1"AQ#2aqr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50001	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	631	OUT	GET /steam/apps/1847150/capsule_184x69.jpg?t=1715747566 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 11504 Last-Modified: Tue, 07 May 2024 13:06:50 GMT ETag: "663a276a-2cf0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=539732 Expires: Wed, 22 May 2024 04:32:31 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	11504	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 09 03 00 01 ff c4 00 3b 10 00 01 03 03 03 03 03 02 04 05 01 07 05 00 00 00 01 02 03 04 05 06 11 07 12 21 00 13 31 08 22 41 14 51 15 32 61 71 09 16 23 42 81 Data Ascii: JFIFCCE;!1"AQ2aq#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50002	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	630	OUT	GET /steam/apps/427410/capsule_184x69.jpg?t=1714694871 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 8875 Last-Modified: Wed, 01 May 2024 22:11:22 GMT ETag: "6632be0a-22ab" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=452049 Expires: Tue, 21 May 2024 04:11:08 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	8875	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 02 03 01 00 00 00 00 00 00 00 00 00 00 06 07 05 08 03 04 00 02 09 01 ff c4 00 40 10 00 01 03 02 05 03 02 03 06 03 06 04 07 00 00 00 01 02 03 04 05 11 00 06 07 12 21 13 31 41 08 51 14 22 61 15 23 32 42 71 81 52 Data Ascii: JFIFCCE@!1AQ"a#2BqR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50003	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	644	OUT	GET /steam/apps/1158310/capsule_184x69_alt_assets_4.jpg?t=1715685390 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7403 Last-Modified: Mon, 15 Apr 2024 14:43:57 GMT ETag: "661d3d2d-1ceb" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=477610 Expires: Tue, 21 May 2024 11:17:09 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	7403	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 00 01 09 ff c4 00 45 10 00 01 03 03 04 00 03 04 06 05 0b 01 09 00 00 00 01 02 03 04 05 06 11 00 07 12 21 13 31 41 08 14 22 51 15 23 32 61 71 b1 16 42 Data Ascii: JFIFCCEE!1A"Q#2aqB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50004	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	630	OUT	GET /steam/apps/359550/capsule_184x69.jpg?t=1713914116 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 5587 Last-Modified: Thu, 25 Aug 2022 13:25:49 GMT ETag: "6307785d-15d3" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=499659 Expires: Tue, 21 May 2024 17:24:38 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	5587	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 02 07 08 09 00 01 ff c4 00 3e 10 00 02 01 03 03 02 03 05 06 05 02 04 07 00 00 00 01 02 03 04 05 11 00 06 21 07 12 13 31 41 08 22 51 61 71 09 14 15 32 81 91 16 Data Ascii: JFIFCCE>!1A"Qaq2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50005	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	627	OUT	GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/webm_page_bg_english.webm?t=1714777083 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://gtm.you1.cn/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-05-15 22:36:59 UTC	287	IN	HTTP/1.1 206 Partial Content Server: nginx Content-Type: video/webm Last-Modified: Fri, 03 May 2024 22:17:42 GMT ETag: "66356286-102ff4" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Content-Range: bytes 0-1060851/1060852 Content-Length: 1060852 Connection: close
2024-05-15 22:36:59 UTC	16097	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 10 2f c4 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 f0 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 4d 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 10 2f ae ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 ca 2a d7 b1 83 0f 42 40 4d 80 8d 4c 61 76 66 35 39 2e 32 37 2e 31 30 30 57 41 9a 48 61 6e 64 42 72 61 6b 65 20 31 2e 36 2e 31 Data Ascii: EBBBBBwebmBBSg/MtMSIfSMSTkSMSTgSMMSSkS/XIf*B@MLavf59.27.100WAHandBrake 1.6.1
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 55 25 50 b1 7d e6 79 d2 fe 52 81 39 f2 e8 4c d5 c4 76 37 56 17 15 52 ea a7 51 9e 59 58 14 94 6e cb 5d 13 6c e0 22 f6 06 52 8f 8b 3f 96 c2 28 8c 3e 17 f9 f9 9e d7 c9 95 3b 11 ed b2 65 34 d6 b9 d2 79 f8 7c f0 fe 60 5b b5 03 56 73 fa 78 3a 36 de cd e5 f3 e9 7c 5b 2c 7e 41 fa fb 48 6f 63 6b 38 ad ce 94 12 9d 40 f0 95 d9 e3 82 eb 64 de 58 56 e2 4c 04 ce 6e 24 b5 02 7b 03 b3 fa 98 6a 92 c2 9c 21 62 58 b1 1c a1 fa e2 44 30 2d df 9c 1e 72 62 d0 b3 db 8d de c4 b9 85 4d 8a 2c cb 8f 4a 82 aa 55 38 1d 2c 38 d1 ac 9a ef 7a 3c 2f cb ae a7 21 96 28 ae 20 d9 e9 45 e4 e3 91 d0 56 42 b8 c4 31 4b dc a0 eb af 8c 4d df 83 20 91 df ef 35 68 1d 37 48 e5 81 fa 39 37 5e a5 05 5f 42 9d 2f 7c 04 1b 63 ef a0 8c 2a eb 29 52 bb 4a 87 7d 3d 14 3c 1c 51 c7 23 1d 0b ba d5 99 02 b6 db 11 Data Ascii: U%P}yR9Lv7VRQYXn]l"R?(>;e4y\|`[Vsx:6\|[,~AHock8@dXVLn${j!bXD0-rbM,JU8,8z</!( EVB1KM 5h7H97^_B/\|c*)RJ}=<Q#
2024-05-15 22:36:59 UTC	2227	IN	Data Raw: 69 e1 90 79 f1 10 67 f3 e7 f9 1d 0b 62 8b 0a 07 f3 af 6b d1 ce fc 60 64 de 76 09 9f 88 b6 ca 13 f8 d0 a6 38 11 22 c0 83 25 e9 2f 99 9d 95 8f 12 ab cd 5c bf 4f 87 b3 f6 c9 a7 2f 19 5b fb 8e a0 71 8b d6 8a 0d a1 20 8d de 95 a2 ab b5 f2 b7 00 52 87 2d 30 71 45 c5 3f 15 fc 21 71 2d 2c 55 64 1e f8 c0 ae 92 56 a6 e8 bb 9b 11 7f b3 41 da 69 ad 25 ac a8 8f 18 fd 67 48 5d 8f 9f ef 54 bb ff 6f 5b 1b 35 60 cc 17 19 fa e4 86 a0 d5 1d 58 5b a6 96 e5 00 45 65 0a cb 4d d2 8c 32 f2 53 5a e5 c0 b6 e0 76 00 85 dd ed 91 48 5e 0c 43 27 00 9c 98 54 00 31 52 18 dc 58 2f 55 12 d1 8c bf 5c 39 4f 7c da 8d e7 91 0b d0 22 70 bc 5b 27 b1 4b a5 94 4e c8 74 3f 72 67 cb 0c e9 a3 52 2d 34 cd 71 3c 18 ad 8d d0 b5 f6 b8 5a 33 2e 5e 50 f0 5e 8c 12 e3 d6 40 fe 41 42 ee e1 ab 57 70 57 32 34 Data Ascii: iygbk`dv8"%/\O/[q R-0qE?!q-,UdVAi%gH]To[5`X[EeM2SZvH^C'T1RX/U\9O\|"p['KNt?rgR-4q<Z3.^P^@ABWpW24
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 93 29 99 38 79 73 99 a4 1a 5d 66 d6 65 8e ba 39 76 be 5d 98 f0 19 49 4b e2 dd 67 1e b2 0e fb 64 d8 76 fc e0 58 9e ce 52 4a ba b2 d3 04 d0 9a 27 da e0 3a 1f 8a 09 fb 9a 82 9a fa bc 9b 1d 05 04 92 78 ec 33 a5 50 b4 90 24 bc ae 86 7e 8d eb a1 3a 6c 15 20 64 0c dc f1 69 41 93 a8 2d b4 44 fc 3b b2 bf 96 d7 6f 6e 0b 7e 3f 48 0c 38 47 8d 79 50 87 50 bb 2f 8c 1f 53 c2 14 8e ba 26 cf d1 81 85 6e ee 89 65 d3 b6 b6 fe 32 4d 0d 17 2a cc 49 fc 26 50 ff b5 d2 ee b6 38 a0 81 9c da 3d 5c 76 a8 e9 09 95 e7 0e d9 9f bf 5a 2e 93 56 1b e7 97 b0 5a 55 ee 91 48 ab 8d 2d cf 0c 1a 0d 2f 22 bc 6b 3e b9 c0 c3 5e ad 74 25 6c 0c 0c 1e 35 f2 4e d7 04 9f 06 a1 8f 3f 84 93 17 39 e6 d1 aa 88 13 29 d3 16 ab 9c 55 b3 16 35 30 0a 2b f5 59 a6 2b c3 64 e8 92 18 d9 de 33 d2 2d 4a 7b f1 7f 4c Data Ascii: )8ys]fe9v]IKgdvXRJ':x3P$~:l diA-D;on~?H8GyPP/S&ne2M*I&P8=\vZ.VZUH-/"k>^t%l5N?9)U50+Y+d3-J{L
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: d9 2d e6 87 26 cf ee 0a c8 08 62 f8 ba 09 bf b7 3a 40 a3 53 df c1 0a 6f 26 e0 38 3f d1 cc d0 94 73 93 64 7f c5 b1 a0 7b 61 f5 c6 0e 32 62 91 63 c8 5a f2 e4 60 b2 9b 01 4e f1 8d 1f 94 2c a0 29 53 81 f3 15 6d ac c7 6a e2 5a 11 63 a0 6f c8 ca 81 06 8e 4c 37 93 6a 7b e9 29 4c 8a 65 c3 a3 f8 d9 d5 6c 5f 33 f8 66 3b 2b 4f 18 64 73 f3 59 da 25 4d 7b c7 51 53 41 5e c0 e5 32 d1 53 9a 4d 0f 98 73 31 bc ac cb 8a bb a0 04 ca 74 7c c9 f7 00 23 4f 6e 70 2b ef dc fb 90 05 76 4a 51 ab 1a 14 29 32 96 bf a8 24 38 f2 b0 7c e0 13 c6 c5 8c 3c 45 22 08 ca 93 72 30 e7 ca 5e 5c dd ee 1d 08 f5 e3 69 3d 95 02 6c b2 8e 2e 5c a1 56 ee 9d 51 ba 58 bf 72 97 4b 21 08 c7 ed b6 06 7c d5 11 26 86 1d f2 d1 c9 e1 d0 d1 36 d3 86 18 08 27 33 73 a0 53 62 77 5d f8 cf 2c 20 23 3d 97 c1 db 84 84 Data Ascii: -&b:@So&8?sd{a2bcZ`N,)SmjZcoL7j{)Lel_3f;+OdsY%M{QSA^2SMs1t\|#Onp+vJQ)2$8\|<E"r0^\i=l.\VQXrK!\|&6'3sSbw], #=
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 1d 5c 9d 67 35 a9 18 81 b9 e3 9f 12 16 60 68 0b 7d be 22 1c b7 c3 d6 5a da c1 f2 85 f3 97 34 01 54 3e 88 6f 89 d9 86 8c e0 a1 45 9a 7f d0 6c 77 2b f9 f4 bc 06 bb fc 93 ad 87 ec bb 02 14 36 2d c8 d0 a9 b4 da a9 ca 8d fb f7 3b 25 6b f8 4c 45 71 ac 5d dd 35 8b 73 95 e0 23 81 8d 1d 9e b1 05 d2 49 fc 09 14 9e a4 3c 1d d0 f2 31 3d 2d 50 54 c4 e9 ef 3a e9 5d 68 f5 9c 57 bb 00 03 7f de 39 df a1 93 58 8b 20 82 fd 8e f1 8f 19 14 99 7f 83 de 2b 18 e2 c7 67 dc f4 20 ec 07 74 47 8a a3 41 2e 33 b6 c7 9a 7a d9 16 b9 14 13 aa 07 ee 36 fd 77 fa 31 e8 6d f5 de 30 24 af d9 73 6e 4a 4a e0 fd 80 98 86 44 fa a5 01 27 01 fb c7 a7 23 79 c3 a8 12 e9 e5 33 40 32 31 38 8d 83 7b 4e c7 6e dc 16 ba f8 8d a6 65 93 81 5e 99 97 99 f1 09 a4 2e 96 4e c5 73 82 4f 27 ff 3e 71 cd e4 29 99 ce Data Ascii: \g5`h}"Z4T>oElw+6-;%kLEq]5s#I<1=-PT:]hW9X +g tGA.3z6w1m0$snJJD'#y3@218{Nne^.NsO'>q)
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 0f 46 d9 ee 35 2e 40 69 9a 54 44 f8 c1 a7 12 97 36 d2 47 5f 47 13 46 e2 66 19 e5 7c 68 60 1a 93 1b 24 ca 3b db 59 3f bb 59 00 a8 30 06 8c a2 33 d4 34 2a 32 81 7f 7d c5 84 12 d3 ca db 7a 1c 49 4d 15 98 c6 f9 a1 9f 2e 91 22 3c 4c 1a f5 d0 60 4b bf f5 81 08 5f 17 44 53 ab 65 ff ae 56 e2 7a af 53 83 57 12 39 bd e2 ef 0c b0 87 f0 a3 f2 0e be e0 f9 d0 66 9a 8c 67 c0 25 55 41 58 00 43 15 a0 37 52 95 7e d0 2f 89 a8 9c 5b fe 8e b3 ca dd c6 78 49 1f a3 d2 8c bd 35 e0 bf 54 48 e4 6c c0 ba 58 d6 7c d8 d4 b8 56 17 84 1b e6 02 ef 46 8d 00 63 22 d9 29 65 37 d2 ae c6 90 96 67 5d 6b bc d8 6d 68 2b f4 d5 e8 65 70 03 0c 75 2c 97 d6 2f 0e 1c 39 90 0b 38 65 80 b5 fe 4e 82 2d 0b 89 d3 c9 3e 55 85 79 f4 22 ab 62 a2 16 40 4d 03 17 00 f8 6d 3e 6c 29 90 ca c6 ca 24 5f 9e af b3 a4 Data Ascii: F5.@iTD6G_GFf\|h`$;Y?Y034*2}zIM."<L`K_DSeVzSW9fg%UAXC7R~/[xI5THlX\|VFc")e7g]kmh+epu,/98eN->Uy"b@Mm>l)$_
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 02 40 07 53 c5 0e bb 5d 31 5e a0 e7 9c b8 2e 39 f0 4d e2 93 d4 b0 28 f4 c4 28 7b 8c 25 db 02 60 eb c4 55 8d 3f 6e b1 4d 8b 61 a3 24 8f 18 e6 9c bd 3d 27 3c fe 93 9e d2 a8 17 61 d8 a1 82 c3 48 fa 4b 0c 4d d4 91 20 4f fa 6e 39 1f a9 9a a8 33 0a 44 c4 4a 0f 66 ff ee e5 15 7f 49 d0 d3 5d 3c ed 40 27 64 a1 7c 85 93 d6 63 e8 3e 66 70 06 dd 47 76 15 91 2e 9a 48 9d 43 53 26 b4 d6 71 5b ce f1 78 26 57 9a ce 1d b1 32 1e 36 b2 e9 77 c0 ca 85 1c 63 07 46 fa bd 3e cb 72 7b 83 df 37 57 bc 76 94 b9 0a 45 55 10 f9 e5 01 a9 f5 f2 20 4d c5 1d aa 11 42 6d 20 44 e5 66 ea d4 0c 25 ad 60 12 e4 3f 8a 60 0d 12 11 a9 6b 07 2c 71 9f 94 f1 9d 3a 24 ae de fa 61 14 a6 cc 50 e4 9c 8e 2e cf 06 a4 aa 18 4a 50 d5 64 9e db 1a f0 09 bb 82 03 9e 21 b7 95 96 32 65 c0 45 04 05 12 4e b4 15 fa Data Ascii: @S]1^.9M(({%`U?nMa$='<aHKM On93DJfI]<@'d\|c>fpGv.HCS&q[x&W26wcF>r{7WvEU MBm Df%`?`k,q:$aP.JPd!2eEN
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: f5 1f 73 94 6e 63 eb d2 1d a4 bf 9f d8 5c 37 9e a8 13 3b 30 33 c5 27 df 18 c6 c6 73 da 72 2b 89 8b c6 0c 9e d2 73 3a 70 07 61 da 68 59 da 63 4a 94 e4 2c cf 4b e3 c6 8c 35 3c 5a 42 ee f9 dc 7f 18 e2 f1 36 a8 a0 fc c8 3b 81 f0 e8 fc 73 dc 58 9f 64 52 65 88 6e 50 5e 8a 48 1f 94 21 c4 a7 76 77 81 51 16 bb be b3 91 80 52 b6 25 39 10 8b 54 cf 1b fc 18 b6 72 ee 71 bc cb d5 20 38 e8 95 98 99 84 80 6b 9b 11 e3 eb 33 de f9 b4 52 68 1c df cd 88 b5 ec e0 b3 71 f0 0a 33 fb a4 f4 41 c3 45 79 8f 6a 1c d8 30 3b 93 61 d6 40 f8 e9 83 3c 52 e0 d1 ac 35 5e 5c af f7 98 14 51 e0 40 13 cf 95 b4 ba f9 64 fe c0 8a a0 ca 2c 75 a2 fa 2d 94 76 54 1b c7 d5 68 4f 43 a3 09 3e 62 be cc 60 6c 47 e3 03 2c 51 0c 24 19 b8 9e 98 b5 b2 3f de 9f f1 be 1e 90 f6 86 f9 0f 63 d8 c6 7e 3a b9 b1 17 Data Ascii: snc\7;03'sr+s:pahYcJ,K5<ZB6;sXdRenP^H!vwQR%9Trq 8k3Rhq3AEyj0;a@<R5^\Q@d,u-vThOC>b`lG,Q$?c~:
2024-05-15 22:36:59 UTC	14924	IN	Data Raw: 07 9a 22 94 0e 75 ab 54 c6 9b d2 0f 71 2c 28 82 cc 86 67 b8 82 2a b0 3a ea e9 3c d7 36 7a 48 9b b9 8f 9c e5 27 53 ac b6 43 08 df d9 5d 3a d9 6c 19 20 45 d5 8c 6f 9c 9c a7 00 13 3b 55 1f 0a 64 e3 3d 66 85 0c 49 83 2e 01 af f1 9a 10 e9 7b e4 6d 50 a2 9f c8 b5 82 16 68 57 12 0b 4a 1a 00 b1 5e ae fa a2 53 a3 67 01 9b a7 8d 22 f1 6a 75 b9 f1 38 93 c2 0b ce 39 c8 06 be 61 7d a3 b0 81 42 a0 fd ee fa 64 d8 aa 79 d1 4f b2 4e d5 20 cd 9b 4d e8 95 34 25 47 9b 30 db ff 80 ee ea 61 18 90 fb 00 bc 7e 71 7e e6 bc af df e7 63 73 d6 c3 7f 48 84 68 41 cd a6 fa c2 ba 0c ea 96 b0 05 7f e8 fd 44 69 13 06 95 54 95 84 81 1a b9 76 41 0c 21 dc b3 ad 3b f0 d2 42 f1 72 6d e6 52 e6 ba 54 0f 3c ca 49 c9 47 21 cd d0 b9 92 36 d8 b4 12 68 6f 98 23 88 14 52 c9 a7 0f ac 68 5f 27 d8 fe 67 Data Ascii: "uTq,(g*:<6zH'SC]:l Eo;Ud=fI.{mPhWJ^Sg"ju89a}BdyON M4%G0a~q~csHhADiTvA!;BrmRT<IG!6ho#Rh_'g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50006	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	396	OUT	GET /steam/apps/570/capsule_184x69.jpg?t=1714502360 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	339	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 3634 Last-Modified: Fri, 17 Nov 2023 22:50:01 GMT ETag: "6557ee19-e32" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=383134 Expires: Mon, 20 May 2024 09:02:33 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	3634	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 06 00 07 08 05 04 09 ff c4 00 3b 10 00 01 02 05 03 02 03 05 06 03 09 01 00 00 00 00 01 02 03 00 04 05 06 11 07 12 21 31 41 13 51 61 08 14 22 71 81 09 15 32 42 91 Data Ascii: JFIFCCE;!1AQa"q2B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50007	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	400	OUT	GET /steam/apps/1665460/capsule_184x69.jpg?t=1713163424 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 12663 Last-Modified: Fri, 12 Apr 2024 19:13:09 GMT ETag: "661987c5-3177" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=270693 Expires: Sun, 19 May 2024 01:48:32 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	12663	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 00 03 02 09 01 ff c4 00 40 10 00 01 03 03 03 02 03 05 06 03 06 05 05 00 00 00 01 02 03 04 05 06 11 00 07 12 13 21 08 22 31 14 41 51 61 81 15 23 32 42 71 91 Data Ascii: JFIFCCE@!"1AQa#2Bq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50008	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	400	OUT	GET /steam/apps/1840080/capsule_184x69.jpg?t=1715643382 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6244 Last-Modified: Fri, 03 Dec 2021 18:22:01 GMT ETag: "61aa6049-1864" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=435531 Expires: Mon, 20 May 2024 23:35:50 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	6244	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFvvCCE}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50009	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	400	OUT	GET /steam/apps/1245620/capsule_184x69.jpg?t=1710261394 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	339	IN	HTTP/1.1 200 OK Last-Modified: Thu, 05 Aug 2021 22:00:39 GMT ETag: "610c5f87-c4d" Server: nginx Content-Type: image/jpeg Content-Length: 3149 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=451868 Expires: Tue, 21 May 2024 04:08:07 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	3149	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 07 01 04 05 06 08 02 03 09 ff c4 00 33 10 00 01 03 04 02 01 03 02 04 04 07 01 00 00 00 00 01 02 03 04 00 05 06 11 07 12 21 13 31 41 08 22 14 15 51 61 32 42 52 91 16 24 Data Ascii: JFIFCCE3!1A"Qa2BR$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50010	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	413	OUT	GET /steam/apps/1128860/capsule_184x69_alt_assets_0.jpg?t=1715795672 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7071 Last-Modified: Wed, 15 May 2024 17:01:36 GMT ETag: "6644ea70-1b9f" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=587817 Expires: Wed, 22 May 2024 17:53:56 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	7071	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 06 07 01 04 08 00 09 ff c4 00 3c 10 00 01 03 03 03 03 02 05 01 06 04 05 05 00 00 00 01 02 03 04 05 06 11 00 12 21 07 13 31 41 51 08 14 22 32 61 71 15 42 52 62 81 Data Ascii: JFIFvvCCE<!1AQ"2aqBRb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50011	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	671	OUT	GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gtm.you1.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 124048 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1e490" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 e4 88 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 89 ce b2 88 00 00 01 6c 00 00 75 9a 47 53 55 42 e1 64 c1 db 00 00 77 08 00 00 1b a4 4f 53 2f 32 75 9a 9f 11 00 00 92 ac 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 93 0c 00 00 05 8e 63 76 74 20 47 bc 0a 74 00 01 d4 d0 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d5 98 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 d4 c8 00 00 00 08 67 6c 79 66 35 8e 7d 32 00 00 98 9c 00 01 06 e4 68 65 61 64 17 e9 fb 57 00 01 9f 80 00 00 00 36 68 68 65 61 06 f4 06 76 00 01 9f b8 00 00 00 24 68 6d 74 78 a2 5f 58 e0 00 01 9f dc 00 00 0c e6 6c 6f 63 61 ba 3a 79 56 00 01 ac c4 00 00 06 a6 6d 61 78 70 04 a0 0f 0c 00 01 b3 6c 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSluGSUBdwOS/2u`cmapdcvt Gtfpgm6!gaspglyf5}2headW6hheav$hmtx_Xloca:yVmaxpl nam
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 05 00 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e5 ff fb 00 09 00 00 00 0e 00 00 00 13 00 05 00 00 00 00 00 00 00 00 ff b7 ff c8 00 00 00 00 00 00 00 00 00 00 ff ae 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e7 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-15 22:36:59 UTC	1974	IN	Data Raw: 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 Data Ascii:
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 01 c1 01 c3 01 c4 01 c5 01 c6 01 c8 01 c9 01 ca 01 cb 01 cc 01 cd 01 ce 01 cf 01 d0 01 d1 01 d2 01 d3 01 d4 01 d5 01 d6 01 d7 01 d8 01 d9 01 da 01 db 01 dc 01 dd 01 de 01 df 01 e0 01 e1 01 e2 01 e3 01 e4 01 e5 01 e6 01 e7 01 e8 01 e9 01 ea 01 eb 01 ec 01 ed 01 ee 01 ef 01 f0 01 f1 01 f2 01 f3 01 f4 01 f5 01 f6 01 f7 01 f8 01 f9 01 fa 01 fb 01 fc 01 fd 01 fe 01 76 01 ac 01 ff 02 00 02 01 02 02 02 03 02 04 02 05 02 06 02 07 02 08 02 09 02 0a 02 0b 02 0c 02 0d 02 0e 02 0f 02 10 02 11 02 12 02 13 02 14 02 15 02 16 02 17 02 18 02 19 02 1a 02 1b 02 1c 02 1d 02 1e 02 1f 02 20 02 21 02 22 02 23 02 24 02 25 02 26 02 27 02 28 02 29 02 2a 02 2b 02 2c 02 2d 02 2e 02 2f 02 8e 02 8f 02 90 02 91 02 92 02 93 02 94 02 95 02 96 02 97 02 c5 02 c6 02 c7 02 c8 02 c9 02 c3 02 Data Ascii: v !"#$%&'()*+,-./
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 00 2d 00 a3 4b b0 21 50 58 40 18 1a 01 04 05 19 01 03 04 14 01 06 03 24 23 05 03 00 06 0a 01 01 00 05 4c 1b 40 18 1a 01 04 05 19 01 03 04 14 01 06 03 24 23 05 03 00 06 0a 01 01 07 05 4c 59 4b b0 21 50 58 40 20 00 03 00 06 00 03 06 69 00 04 04 05 61 00 05 05 53 4d 08 07 02 00 00 01 61 02 01 01 01 51 01 4e 1b 40 2a 00 03 00 06 00 03 06 69 00 04 04 05 61 00 05 05 53 4d 00 00 00 01 61 02 01 01 01 51 4d 08 01 07 07 01 61 02 01 01 01 51 01 4e 59 40 10 21 21 21 2d 21 2c 28 24 23 24 22 24 12 09 0a 1d 2b 25 14 16 33 32 37 07 06 23 22 27 06 23 22 26 35 34 36 33 32 17 35 34 23 22 07 27 36 36 33 32 16 15 02 36 37 35 26 26 23 22 06 15 14 16 33 01 e4 12 13 05 10 09 13 2d 4c 0f 40 65 4a 64 77 5b 37 3c 6f 48 44 2f 29 6a 3a 69 6c ce 44 14 14 3b 1a 30 3c 33 23 7c 16 13 02 Data Ascii: -K!PX@$#L@$#LYK!PX@ iaSMaQN@*iaSMaQMaQNY@!!!-!,($#$"$+%327#"'#"&5463254#"'6632675&&#"3-L@eJdw[7<oHD/)j:ilD;0<3#\|
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 01 96 00 00 01 07 03 39 01 cd 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 ff ff 00 22 00 00 02 34 02 39 00 02 01 97 00 00 00 01 00 4f 00 00 01 cc 02 39 00 0b 00 29 40 26 00 03 00 04 05 03 04 67 00 02 02 01 5f 00 01 01 2c 4d 00 05 05 00 5f 00 00 00 2d 00 4e 11 11 11 11 11 10 06 08 1c 2b 21 21 11 21 15 21 15 33 15 23 15 21 01 cc fe 83 01 7d fe fb e4 e4 01 05 02 39 62 83 64 8d 00 00 00 ff ff 00 4f 00 00 01 cc 03 01 00 22 01 9a 00 00 01 07 03 36 01 e6 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f 00 00 01 cc 03 03 00 22 01 9a 00 00 01 07 03 3a 01 b8 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f 00 00 01 cc 02 fe 00 22 01 9a 00 00 01 07 03 39 01 bc 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f 00 00 01 cc 03 05 00 22 01 9a 00 00 01 07 03 Data Ascii: 9--5+"49O9)@&g_,M_-N+!!!!3#!}9bdO"6--5+O":--5+O"9--5+O"
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 02 39 00 22 02 04 00 00 00 03 03 41 01 d9 00 00 ff ff 00 4f ff f1 02 21 03 01 00 22 02 04 00 00 01 07 03 35 01 ae 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f ff f1 02 21 03 26 00 22 02 04 00 00 01 07 03 3e 03 16 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 4f ff f1 02 87 02 af 00 1a 00 27 40 24 05 01 03 02 01 4c 00 00 02 00 85 04 01 02 02 2c 4d 00 03 03 01 61 00 01 01 31 01 4e 23 23 13 27 10 05 08 1b 2b 01 33 15 14 06 07 11 14 06 23 22 26 35 11 33 11 14 16 33 32 36 35 11 33 32 36 35 02 2a 5d 36 30 84 66 65 83 74 3c 38 39 3d 45 1e 1a 02 af 39 35 40 0a fe de 71 73 73 71 01 64 fe 91 31 3d 3d 31 01 6f 1b 1b 00 00 00 ff ff 00 4f ff f1 02 87 03 01 00 22 02 11 00 00 01 07 03 36 02 10 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f ff 4a 02 Data Ascii: 9"AO!"5--5+O!&">--5+O'@$L,Ma1N##'+3#"&5332653265*]60fet<89=E95@qssqd1==1oO"6--5+OJ
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 23 18 21 21 26 4f 18 1e 4b 41 2b 3b 23 1c 24 17 15 d4 24 22 21 24 25 20 22 24 00 00 00 02 00 32 ff 8a 01 96 01 df 00 0b 00 26 00 3e 40 3b 17 01 02 04 18 01 03 02 02 4c 00 04 00 02 00 04 02 80 05 01 01 00 00 04 01 00 69 00 02 03 03 02 59 00 02 02 03 62 00 03 02 03 52 00 00 26 25 1c 1a 16 14 00 0b 00 0a 24 06 08 17 2b 00 16 15 14 06 23 22 26 35 34 36 33 17 14 06 07 06 06 15 14 16 33 32 37 17 06 06 23 22 26 35 34 36 37 36 36 35 35 33 01 0e 2a 2a 1f 1f 29 29 1f 32 22 21 1b 19 29 27 3a 33 2f 22 5e 34 53 5d 2a 27 1e 1c 64 01 df 24 21 21 25 25 21 21 24 e7 27 33 1f 19 23 18 21 21 26 4f 18 1e 4b 41 2b 3b 23 1c 24 17 15 00 00 00 01 ff 51 01 0b ff da 01 96 00 0b 00 1f 40 1c 02 01 01 00 00 01 59 02 01 01 01 00 61 00 00 01 00 51 00 00 00 0b 00 0a 24 03 08 17 2b 02 16 Data Ascii: #!!&OKA+;#$$"!$% "$2&>@;LiYbR&%$+#"&5463327#"&546766553*))2"!)':3/"^4S]'d$!!%%!!$'3#!!&OKA+;#$Q@YaQ$+
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 02 78 00 1c 02 3b 00 4f 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 fa 00 12 02 23 00 4f 02 21 00 29 02 21 00 29 02 21 00 29 02 21 00 29 02 21 00 29 02 21 00 29 02 5d 00 4f 02 5d 00 22 02 5d 00 4f 02 5d 00 22 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 02 6d 00 29 01 ed 00 4f 02 47 00 29 02 47 00 29 02 47 00 29 02 47 00 29 02 47 00 29 02 47 00 29 02 89 00 Data Ascii: x;ODDDDDDDDDDDDDDDDDDDDDDD#O!)!)!)!)!)!)]O]"]O]"OOOOOOOOOOOOOOOOOOm)OG)G)G)G)G)G)
2024-05-15 22:36:59 UTC	8144	IN	Data Raw: 75 6e 69 31 45 45 39 07 75 6e 69 31 45 46 31 07 75 6e 69 31 45 45 42 07 75 6e 69 31 45 45 44 07 75 6e 69 31 45 45 46 0d 75 68 75 6e 67 61 72 75 6d 6c 61 75 74 07 75 6d 61 63 72 6f 6e 07 75 6f 67 6f 6e 65 6b 05 75 72 69 6e 67 06 75 74 69 6c 64 65 06 77 61 63 75 74 65 0b 77 63 69 72 63 75 6d 66 6c 65 78 09 77 64 69 65 72 65 73 69 73 06 77 67 72 61 76 65 0b 79 63 69 72 63 75 6d 66 6c 65 78 07 75 6e 69 31 45 46 35 06 79 67 72 61 76 65 07 75 6e 69 31 45 46 37 07 75 6e 69 30 32 33 33 07 75 6e 69 31 45 46 39 06 7a 61 63 75 74 65 0a 7a 64 6f 74 61 63 63 65 6e 74 0a 75 6e 69 31 45 39 45 2e 73 63 04 61 2e 73 63 09 61 61 63 75 74 65 2e 73 63 09 61 62 72 65 76 65 2e 73 63 0a 75 6e 69 31 45 41 46 2e 73 63 0a 75 6e 69 31 45 42 37 2e 73 63 0a 75 6e 69 31 45 42 31 2e 73 Data Ascii: uni1EE9uni1EF1uni1EEBuni1EEDuni1EEFuhungarumlautumacronuogonekuringutildewacutewcircumflexwdieresiswgraveycircumflexuni1EF5ygraveuni1EF7uni0233uni1EF9zacutezdotaccentuni1E9E.sca.scaacute.scabreve.scuni1EAF.scuni1EB7.scuni1EB1.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50012	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	399	OUT	GET /public/images/v6/icon_platform_win_dark.png?v=3 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1177 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-499" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	1177	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50013	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	672	OUT	GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gtm.you1.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 122684 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1df3c" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 df 34 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 3a 3e 7d 8f 00 00 01 6c 00 00 75 7a 47 53 55 42 e1 64 c1 db 00 00 76 e8 00 00 1b a4 4f 53 2f 32 75 36 9e 08 00 00 92 8c 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 92 ec 00 00 05 8e 63 76 74 20 46 bf 09 94 00 01 cf 7c 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d0 44 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 cf 74 00 00 00 08 67 6c 79 66 8a 5f 6d c2 00 00 98 7c 00 01 01 ee 68 65 61 64 17 b4 fb 48 00 01 9a 6c 00 00 00 36 68 68 65 61 06 bf 06 47 00 01 9a a4 00 00 00 24 68 6d 74 78 86 e3 6c 96 00 01 9a c8 00 00 0c e6 6c 6f 63 61 43 48 02 9a 00 01 a7 b0 00 00 06 a6 6d 61 78 70 04 a0 0f 13 00 01 ae 58 00 00 00 20 6e 61 6d Data Ascii: DSIG4GDEF4,@GPOS:>}luzGSUBdvOS/2u6`cmapdcvt F\|fpgm6!Dgasptglyf_m\|headHl6hheaG$hmtxllocaCHmaxpX nam
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 02 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff df ff f8 00 05 00 00 00 07 00 00 00 09 00 02 00 00 00 00 00 00 00 00 ff b1 ff c1 00 00 00 00 00 00 00 00 00 00 ff a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ea ff fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-15 22:36:59 UTC	2658	IN	Data Raw: 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 Data Ascii:
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 02 fc 03 33 03 34 03 35 03 36 03 37 03 38 03 39 03 3a 03 3b 03 3c 03 3d 03 3e 03 3f 03 40 03 41 03 42 03 43 03 44 00 02 07 d4 00 14 02 a7 02 fb 03 20 03 21 03 22 03 23 03 24 03 25 03 26 03 27 03 28 03 29 03 2a 03 2b 03 2c 03 2d 03 2e 03 2f 03 30 03 31 00 01 07 c2 00 01 00 08 00 02 00 06 00 0c 01 74 00 02 00 fa 01 75 00 02 01 0f 00 02 07 ae 01 7e 01 78 01 79 01 7a 01 7b 01 7c 01 7d 01 7e 01 7f 01 80 01 81 01 82 01 83 01 84 01 85 01 86 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 ba 01 bb 01 bc 01 bd 01 Data Ascii: 3456789:;<=>?@ABCD !"#$%&'()*+,-./01tu~xyz{\|}~
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 43 27 53 72 63 66 12 14 05 10 07 02 31 25 e8 50 19 15 47 1d 38 4a 3c 29 95 02 33 08 2a 22 39 43 05 43 4f 4d 48 4f 4e 08 05 45 3b 35 33 3a 45 5e 5d f5 17 14 02 3c 01 3f 30 29 d0 2a 24 4e 05 08 2a 2e 29 28 ff ff 00 2d ff f3 02 13 03 01 00 22 00 ba 00 00 00 03 03 09 01 b7 00 00 ff ff 00 2d ff f3 02 13 02 cd 00 22 00 ba 00 00 00 02 03 1c 4d 00 00 00 00 03 00 2d ff f4 03 55 02 18 00 2c 00 33 00 3f 01 03 4b b0 18 50 58 40 16 23 01 05 06 29 22 02 04 05 1c 01 00 04 34 11 0c 0b 04 01 00 04 4c 1b 4b b0 1b 50 58 40 16 23 01 05 06 29 22 02 04 05 1c 01 0a 04 34 11 0c 0b 04 01 00 04 4c 1b 40 16 23 01 05 06 29 22 02 04 05 1c 01 0a 09 34 11 0c 0b 04 01 00 04 4c 59 59 4b b0 18 50 58 40 25 0d 09 02 04 0a 01 00 01 04 00 69 08 01 05 05 06 61 0c 07 02 06 06 53 4d 0b 01 01 01 Data Ascii: C'Srcf1%PG8J<)3"9CCOMHONE;53:E^]<?0)$N*.)(-"-"M-U,3?KPX@#)"4LKPX@#)"4L@#)"4LYYKPX@%iaSM
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 2b 01 33 15 06 06 23 22 26 26 35 34 36 36 33 32 17 07 26 23 22 06 15 14 16 33 32 37 35 23 01 27 eb 20 77 41 49 7a 4a 4b 7e 4c 6b 57 2c 45 54 57 60 62 58 40 3b 96 01 3e fd 1f 2e 3f 86 63 65 85 3f 3f 44 33 6f 68 6a 72 21 93 00 00 ff ff 00 2d ff f4 02 12 02 f8 00 22 01 ae 00 00 01 07 03 3a 01 d3 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 2d ff f4 02 12 02 f4 00 22 01 ae 00 00 01 07 03 39 01 d3 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 2d ff f4 02 12 02 fb 00 22 01 ae 00 00 01 07 03 38 01 d6 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 2d ff 32 02 12 02 45 00 22 01 ae 00 00 00 03 03 42 01 be 00 00 ff ff 00 2d ff f4 02 12 02 fb 00 22 01 ae 00 00 01 07 03 34 01 b5 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 55 00 00 02 22 02 39 00 Data Ascii: +3#"&&546632&#"3275#' wAIzJK~LkW,ETW`bX@;>.?ce??D3ohjr!-":--5+-"9--5+-"8--5+-2E"B-"4--5+U"9
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 01 a6 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 29 00 00 01 cd 02 39 00 09 00 29 40 26 00 01 02 03 05 01 01 00 02 4c 00 02 02 03 5f 00 03 03 2c 4d 00 00 00 01 5f 00 01 01 2d 01 4e 11 12 11 11 04 08 1a 2b 01 01 21 15 21 35 01 21 35 21 01 c5 fe d0 01 38 fe 5c 01 32 fe e7 01 83 01 fb fe 54 4f 3f 01 ac 4e ff ff 00 29 00 00 01 cd 02 f5 00 22 02 2c 00 00 01 07 03 36 01 c3 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 29 00 00 01 cd 02 f4 00 22 02 2c 00 00 01 07 03 39 01 9e 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 29 00 00 01 cd 02 fb 00 22 02 2c 00 00 01 07 03 34 01 7f 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 02 00 30 01 7e 01 61 02 c7 00 20 00 2c 00 57 40 54 17 01 03 04 16 01 02 03 10 01 06 02 24 23 02 05 06 05 01 00 05 05 4c 00 04 Data Ascii: --5+)9)@&L_,M_-N+!!5!5!8\2TO?N)",6--5+)",9--5+)",4--5+0~a ,W@T$#L
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 05 27 0b 02 01 04 00 08 03 4c 0a 01 00 49 1b 4b b0 14 50 58 40 18 18 01 05 04 19 01 03 05 27 01 02 09 08 0b 02 02 00 09 04 4c 0a 01 00 49 1b 40 1c 18 01 05 04 19 01 03 05 27 01 02 09 08 0b 01 01 09 04 4c 02 01 01 01 4b 0a 01 00 49 59 59 4b b0 12 50 58 40 22 06 01 03 07 01 02 08 03 02 67 00 05 05 04 61 00 04 04 50 4d 0a 09 02 08 08 00 61 01 01 00 00 51 00 4e 1b 4b b0 14 50 58 40 2c 06 01 03 07 01 02 08 03 02 67 00 05 05 04 61 00 04 04 50 4d 00 08 08 00 61 01 01 00 00 51 4d 0a 01 09 09 00 61 01 01 00 00 51 00 4e 1b 40 2a 06 01 03 07 01 02 08 03 02 67 00 05 05 04 61 00 04 04 50 4d 00 08 08 01 61 00 01 01 49 4d 0a 01 09 09 00 61 00 00 00 51 00 4e 59 59 40 12 00 00 00 2d 00 2c 25 11 13 25 23 11 15 22 23 0b 0a 1f 2b 24 37 17 06 23 22 27 26 23 22 07 27 36 35 35 Data Ascii: 'LIKPX@'LI@'LKIYYKPX@"gaPMaQNKPX@,gaPMaQMaQN@*gaPMaIMaQNYY@-,%%#"#+$7#"'&#"'655
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 08 e4 08 f6 09 02 09 0e 09 3c 09 7c 09 a2 09 ae 09 ba 09 c6 0a 0a 0a 16 0a 5e 0a 6a 0a 76 0a 82 0a 8e 0a a0 0a b0 0a c2 0a d4 0a e6 0b 5a 0b 66 0b 78 0b 84 0b e2 0b ee 0b fa 0c 0c 0c 18 0c 24 0c 30 0c 3c 0c a4 0c b0 0c fa 0d 34 0d 72 0d c2 0d fe 0e 0a 0e 16 0e 22 0e 7e 0e 8a 0e 96 0f 22 0f 2e 0f 3a 0f b4 10 08 10 26 10 58 10 64 10 b8 10 c4 10 f2 10 fe 11 0a 11 16 11 22 11 80 11 e8 12 5a 12 c6 13 2e 13 3a 13 4c 13 58 13 ba 13 c6 13 d2 13 e4 13 f0 13 fc 14 08 14 14 14 5e 14 6a 14 76 14 96 14 c2 14 ce 14 da 15 36 15 48 15 74 15 98 15 a4 15 b0 16 02 16 0e 16 20 16 2c 16 38 16 44 16 70 16 7c 16 88 16 9a 17 1a 17 26 17 32 17 3e 17 4e 17 5a 17 66 17 72 17 7e 17 8a 17 96 17 a6 17 b2 17 be 17 ca 17 d6 17 e2 17 ee 17 fa 18 06 18 8a 18 96 18 a2 19 80 1a 10 1a 58 1a Data Ascii: <\|^jvZfx$0<4r"~".:&Xd"Z.:LX^jv6Ht ,8Dp\|&2>NZfr~X
2024-05-15 22:36:59 UTC	6096	IN	Data Raw: 7a 2e 73 63 09 7a 61 63 75 74 65 2e 73 63 09 7a 63 61 72 6f 6e 2e 73 63 0d 7a 64 6f 74 61 63 63 65 6e 74 2e 73 63 07 75 6e 69 30 33 39 34 07 75 6e 69 30 33 41 39 07 75 6e 69 30 33 42 43 08 7a 65 72 6f 2e 6f 73 66 07 6f 6e 65 2e 6f 73 66 07 74 77 6f 2e 6f 73 66 09 74 68 72 65 65 2e 6f 73 66 08 66 6f 75 72 2e 6f 73 66 08 66 69 76 65 2e 6f 73 66 07 73 69 78 2e 6f 73 66 09 73 65 76 65 6e 2e 6f 73 66 09 65 69 67 68 74 2e 6f 73 66 08 6e 69 6e 65 2e 6f 73 66 07 7a 65 72 6f 2e 74 66 06 6f 6e 65 2e 74 66 06 74 77 6f 2e 74 66 08 74 68 72 65 65 2e 74 66 07 66 6f 75 72 2e 74 66 07 66 69 76 65 2e 74 66 06 73 69 78 2e 74 66 08 73 65 76 65 6e 2e 74 66 08 65 69 67 68 74 2e 74 66 07 6e 69 6e 65 2e 74 66 09 7a 65 72 6f 2e 74 6f 73 66 08 6f 6e 65 2e 74 6f 73 66 08 74 77 6f Data Ascii: z.sczacute.sczcaron.sczdotaccent.scuni0394uni03A9uni03BCzero.osfone.osftwo.osfthree.osffour.osffive.osfsix.osfseven.osfeight.osfnine.osfzero.tfone.tftwo.tfthree.tffour.tffive.tfsix.tfseven.tfeight.tfnine.tfzero.tosfone.tosftwo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50014	96.17.60.195	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	402	OUT	GET /categories/homepageimage/category/action?cc=us&l=english HTTP/1.1 Host: store.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	2067	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.akamai.steamstatic.com/ https://store.akamai.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com https://steamcommunity-a.akamaihd.net; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.akamai.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.akamai.steamstatic.com/ https://checkout.steampowered.com/ https://.steamstatic.com https://.steamcontent.com https://.valvesoftware.com https://.steambeta.net https://*.discovery.beta.steamse [TRUNCATED] X-Frame-Options: DENY Cache-Control: public,max-age=45472 Expires: Thu, 16 May 2024 08:14:47 GMT Last-Modified: Wed, 15 May 2024 17:42:56 GMT Strict-Transport-Security: max-age=10368000 Content-Length: 121645 Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	14317	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 e9 08 06 00 00 00 1a 8c ba c1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 10 63 61 4e 76 00 00 02 f2 00 00 01 bb 00 00 00 b4 00 00 00 3c 27 41 e8 f4 00 00 80 00 49 44 41 54 78 da 5c fd 77 b0 6d db 75 de 07 fe 66 58 69 e7 7d 72 b8 39 be 1c 11 1e 91 08 40 48 24 40 42 0c a2 92 db ad 96 6d 59 ea 2e d9 25 db 6a 55 b5 ab 6c d8 92 3b b8 6c ab 6d 4b 6a cb 6a 59 a6 44 0a 14 21 90 20 09 01 24 00 12 00 91 5f 7e ef be 9b f3 bd 27 c7 9d f7 4a 73 ce fe 63 ae 73 1f d4 af ea d4 bd f7 bc 13 f6 5e 6b 8d 39 c6 Data Ascii: PNGIHDRgAMAa cHRMz&u0`:pQ<bKGDcaNv<'AIDATx\wmufXi}r9@H$@BmY.%jUl;lmKjjYD! $_~'Jscs^k9
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 39 73 f6 2c 3b bb 7b 3c 7c 78 8f 63 c7 97 40 c4 74 3a 33 5c bf fe 36 a3 e1 98 4f 7d fa 93 f4 fa 3d ac 90 7c f7 e5 37 d9 39 18 01 0a 69 0d d9 a8 0f a5 41 e2 68 d4 34 a1 76 68 39 45 eb 80 c2 4d c9 4b 30 a5 a6 c8 0a a2 50 52 af c5 a4 93 1c 61 24 71 18 10 c7 0a 53 8e d9 da da a0 51 ab 53 4f 12 e2 50 a2 5c 4e b7 d9 60 32 49 e9 0f 46 ec ed ed d1 69 b6 19 8f 26 ac 6f 6c f3 70 6d 83 76 ab 4d 5e 14 ec 4d a6 88 74 4a fd 8f 7f 9f 63 df f8 12 ad ed 87 d5 e4 5a e5 da a2 a8 ca 52 6f 07 ac 65 25 ba 88 14 42 43 28 1d f5 40 d2 0c 35 49 e0 e7 e1 d7 f6 fb dc d8 d9 47 01 91 12 ec 0d c7 dc 79 78 c0 f7 bf 77 95 3f fe 93 2b bc f1 e6 0e 7b 13 45 66 a1 18 e4 b8 5c 31 28 24 0f c6 70 67 12 f1 30 ef b0 9e c6 ec d8 80 9d 1c 0e 06 29 e3 b1 61 ed a0 e0 f6 6e c1 e5 5b 7b fc f8 8d 07 bc Data Ascii: 9s,;{<\|xc@t:3\6O}=\|79iAh4vh9EMK0PRa$qSQSOP\N`2IFi&olpmvM^MtJcZRoe%BC(@5IGyxw?+{Ef\1($pg0)an[{
2024-05-15 22:36:59 UTC	3408	IN	Data Raw: b2 64 82 52 39 53 d1 a4 ec 1e c1 d4 da 98 2c 86 22 66 9a 6b 92 42 a1 ad 87 32 50 aa 0c 47 40 b3 5e a7 5b f7 79 f7 b9 db f8 fc e7 3e c5 b9 bb cf 51 af 85 58 55 f5 49 1d 29 99 8c 27 60 34 7e 18 10 36 5a a8 b2 1a 90 e5 45 4a 38 73 3b 19 a3 29 4b 55 0d d1 4c 95 f4 91 6e c5 17 2b ca 02 3f 0c 70 9c d9 64 f4 ed 18 a0 b6 d5 5b d4 98 0a db eb ba 98 32 c7 f3 03 76 07 53 fe f3 1f fd 39 8f 7f ef 69 6e 6d 0d d0 56 e2 b9 12 c7 11 d5 c0 4d 82 ef 87 64 71 75 2f 57 46 63 44 95 96 0a 7c 1f e9 c2 f2 c2 3c ab 07 0f 11 85 75 76 77 f7 38 7c e4 30 8f 3e f2 08 79 5e 32 1d 6e e3 33 61 ed f2 eb dc 76 fa 04 c7 8f df c6 ea e1 63 a8 99 50 db 68 8b 44 61 06 eb 0c ae bd 49 91 c5 e4 42 53 08 c5 e6 cd 6d be f3 b5 17 78 fa d5 ab 4c ca 94 b9 ba 87 ab 1d d2 d4 30 87 e0 e4 7c 9b 8d 69 ca f5 Data Ascii: dR9S,"fkB2PG@^[y>QXUI)'`4~6ZEJ8s;)KULn+?pd[2vS9inmVMdqu/WFcD\|<uvw8\|0>y^2n3avcPhDaIBSmxL0\|i
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 5e 83 b9 b0 46 d9 9c 63 bf d9 e0 56 ac 88 ad cf 6a ab c5 ed c2 65 2e 03 b5 bf 8b ce 12 ae 47 0b bc b2 74 8c 62 65 15 37 6c a0 55 89 ce 53 4c 91 d0 70 2d 4a 0b 86 59 c9 3c 70 b4 c8 18 25 13 ae e8 1a 93 b0 07 2d 97 a6 6b 11 45 42 7b 71 8e 85 4e 97 e9 f5 75 46 fd 31 23 e1 33 f1 23 b4 57 7d 30 1c aa fc b4 63 14 f9 ee 2d cc 74 30 e3 48 4b dc a0 46 d8 6a d1 6d 35 30 f9 98 69 36 c0 6b 44 cc 2f 1d c0 31 90 24 09 a9 36 95 29 c2 f3 67 30 78 01 9e 8f 0c 03 0a 63 50 58 1c 29 f0 ac 45 ab a2 ca 50 c8 6a 30 e5 a3 09 85 21 12 9a 80 02 5f 15 d4 8c 25 b2 16 4f 18 84 b0 78 8e 98 a1 8a 0c 85 2a 51 b3 19 93 52 0a f7 60 23 43 1b 43 a1 1b 0c fb 25 f4 77 58 ac 19 7e ec c3 27 58 bb b5 c7 9b d7 63 02 df e2 39 05 a9 29 08 a3 a8 ca 68 cc e0 da 5a db 0a 50 a7 8b 4a e7 38 fb 32 45 51 Data Ascii: ^FcVje.Gtbe7lUSLp-JY<p%-kEB{qNuF1#3#W}0c-t0HKFjm50i6kD/1$6)g0xcPX)EPj0!_%Ox*QR`#CC%wX~'Xc9)hZPJ82EQ
2024-05-15 22:36:59 UTC	12120	IN	Data Raw: 9a 91 4f 33 88 68 f7 96 98 3f b2 ca a1 c3 c7 29 83 79 26 4a b3 dc ab 91 94 25 0b 8d 1a 8d 9a e4 eb 7f fe 35 be fd d5 af d1 df df 02 ab 88 7c 8f 56 2d a0 d9 68 56 4d aa 2c 66 32 89 ab a5 bf 70 e8 cc cf 23 ac 43 32 1d e3 47 21 ae e7 f2 81 d3 ab 7c f2 70 03 3f db 43 4b 03 42 20 8d a4 62 b4 2b b0 25 2a 2f e9 8f 14 83 18 02 3f a4 13 42 e0 94 28 6d 29 8c 60 90 24 28 c7 e0 f8 0e 65 a9 18 8e 53 76 27 05 5b 49 c1 d4 0a 4a 2c 49 aa 99 0c 12 fa a3 29 13 6f 9e b1 d3 c1 0b 03 9c 28 22 b6 01 69 9c 91 66 63 16 8f 1e 66 7e 71 99 0c 0f 23 2c 2d 12 ea 81 c7 48 f4 78 6b 7d 84 2b a0 d7 6e 82 95 38 b5 88 58 08 e2 e9 94 ae 8c 79 ef 6d 3d ee 3f b5 8c 9b 8c 58 5b 5b e3 96 ad b1 99 f8 d4 d3 09 ec 5f 65 7f 67 1b 3f 6c b2 b0 32 cf f2 72 9b 86 c8 f1 27 63 86 eb 3b 9c bf 7a 83 b7 f6 Data Ascii: O3h?)y&J%5\|V-hVM,f2p#C2G!\|p?CKB b+%*/?B(m)`$(eSv'[IJ,I)o("ifcf~q#,-Hxk}+n8Xym=?X[[_eg?l2r'c;z
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 48 9d 5a 02 69 9d 6e 58 e0 51 a9 04 b4 ea 55 aa 81 e7 e8 a1 b5 88 ca 68 9d 68 b4 89 ac 57 10 51 80 95 ce 8d 53 99 22 4f 52 d2 b8 87 ce 32 27 d6 26 03 b4 c6 cd 8c ee 76 c9 db 1d b2 76 9b 78 65 85 74 75 19 d5 ed 40 1c 43 96 40 9a 61 e3 04 13 77 b0 aa e7 26 fd e5 86 2c cb e9 a5 5d ac d2 04 4a a0 95 61 c5 e4 6c bb e9 7a de f6 5b bf c5 8e e7 df 82 f4 22 ac 56 1c 7d e6 00 5f fa c8 47 f9 cc df fe 0d 8f 3f f8 10 53 93 1b 99 d8 b8 09 2a 11 d3 bb 76 b2 ba b2 c2 a7 3f f2 31 be f3 4f 5f e5 c8 d3 cf d0 68 36 18 df 34 45 54 ad b1 79 c7 0e 6e bc fd 36 5e fe a6 d7 f3 b2 d7 bd 96 46 ab 45 b7 d3 e6 bb df f8 26 df fa e2 97 39 f2 cc 01 54 aa f0 2b 15 4c d1 c6 e7 17 cc 33 83 45 17 0b bf f3 f0 8b 26 95 00 9a c3 92 a1 d1 80 28 72 44 8c 62 70 36 d2 13 05 c7 19 a7 2a e9 7b ae 94 Data Ascii: HZinXQUhhWQS"OR2'&vvxetu@C@aw&,]Jalz["V}_G?Sv?1O_h64ETyn6^FE&9T+L3E&(rDbp6{
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 33 80 92 82 30 90 44 9e 53 fe 57 da 50 f5 3c aa be 47 a6 15 9d 4c 23 b5 a1 26 05 a1 10 a4 16 56 ad 25 37 25 61 a0 20 56 08 a8 79 1e da c0 6a f1 63 9e 2f 96 2d ff ae cd 54 af f5 6c ca f0 20 2b 62 e4 f2 78 c9 35 66 59 db b3 6e 78 b9 48 0e 7a 47 e5 c5 03 6a 38 91 bb 72 41 2e c3 08 71 0e 79 46 10 cb 90 2e 01 99 c9 a9 0f 0d 73 c5 ed 2f 62 ef ad 37 e1 55 23 56 16 97 10 c6 10 06 01 08 8b 27 84 fb ec 85 67 84 75 93 21 dc dc 69 ed 2c 6c 01 a4 f2 6a 4c 11 af 1a 53 4c 4c 74 16 d9 98 b3 f1 31 c5 64 45 97 41 73 ae b6 2e e2 5d 61 0c be 70 64 11 95 e7 c5 fe ce c6 d3 fd 1a 72 11 67 96 71 37 d6 90 e7 8a b9 a5 36 f3 cb 3d 72 65 f0 bc b3 00 2d 09 14 65 6c 5a 36 4a ac a5 54 96 8c a9 4a a5 52 b4 71 e6 7d eb 5d 76 47 95 df a3 5a 75 e1 43 1c c7 24 49 42 9e e7 fd ec 7b c9 7f ce Data Ascii: 30DSWP<GL#&V%7%a Vyjc/-Tl +bx5fYnxHzGj8rA.qyF.s/b7U#V'gu!i,ljLSLLt1dEAs.]apdrgq76=re-elZ6JTJRq}]vGZuC$IB{
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: e5 5c 70 c1 66 9a a6 b4 72 fa f4 19 be f9 cf df 60 d7 ce 37 50 86 c0 f5 25 41 20 a9 ad 4c 31 77 56 1b 97 6f bd 8e 9b 3e 70 07 f9 5c 9e df fd fe 37 ec 78 eb 55 ae bf ee 7a b6 5c b2 95 93 27 cf f0 1f ff f1 6d 5e 7d f5 35 2e bd f4 12 fe fa af ff 06 d7 29 f1 bd ef 7d 87 fb 3e f6 09 d6 ad db c8 be 7d 7b b9 f7 de 7b e8 68 3f c9 94 29 b5 44 63 36 f9 7c 89 dc 58 8e 7c c9 c5 71 3c fc c0 47 84 c3 9d 64 5c d3 d4 7c a5 17 e6 91 88 0e 5e cb 38 6f 40 2d 03 2d 08 ae 5c 1f e5 05 13 f6 a7 65 6a b6 08 59 27 53 15 2c 37 2d 7a 6b d3 f4 bb 3e 63 25 07 5f 2a f2 8e a4 e0 6b 29 14 89 d6 3d 36 0c a1 7b 17 43 68 e3 6d a5 28 06 0a c7 d3 12 2d 46 38 95 0e 42 0c 75 32 62 b3 fa 92 cd 5c 78 e3 0d d8 0d 75 38 85 7c 68 b1 19 7a 08 85 27 b9 0c b9 a0 65 8b 4d 33 74 a9 40 4a 22 a6 20 1e f8 Data Ascii: \pfr`7P%A L1wVo>p\7xUz\'m^}5.)}>}{{h?)Dc6\|X\|q<Gd\\|^8o@--\ejY'S,7-zk>c%_*k)=6{Chm(-F8Bu2b\xu8\|hz'eM3t@J"
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: b9 f7 ce 7b b8 e0 c2 15 bc fe c6 6b fc fe 8f 8f b0 eb f0 01 1a eb a7 f0 1f ff f8 4d 2e 58 ba 82 5c 3e c7 e0 d0 10 bf f9 dd c3 fc e1 91 df d3 df df 47 32 19 a7 a9 b5 91 c6 c6 29 1c 3f 76 8a fe ee 3e 84 65 91 1f 19 65 fd 58 8e 0f 07 b0 0c cd cc 91 13 4a f7 9a 1f 9b 03 de 30 4d 1e 8d 47 c9 9a 26 d7 7a 1e 57 16 5d 6a 42 72 bc 12 5a 5a cc 54 9a d5 72 1a f8 8d 2d 38 30 a5 9e 2d 99 0c 57 9e ee 20 ef 38 3c 54 5d c1 7b 75 35 64 aa 2a 49 99 02 b7 50 24 97 cf 23 0c 85 29 22 54 d5 54 13 4f 45 19 ea ed c7 c9 97 f0 1c 17 84 a2 58 28 e1 14 4b 04 be c4 73 7d 02 2f a0 a2 be 96 65 57 6f 65 ee 86 0d 44 13 71 6d 43 6a 5b 58 86 19 7a c6 96 cb 7c ad 16 69 9a 06 28 ed 88 a7 94 9e 2c 2b ca 9e b3 1e 42 49 44 a0 cb 66 83 70 e7 ab 24 11 a1 b0 64 40 dc 36 a8 4c 98 a4 a2 26 89 a8 89 Data Ascii: {kM.X\>G2)?v>eeXJ0MG&zW]jBrZZTr-80-W 8<T]{u5d*IP$#)"TTOEX(Ks}/eWoeDqmCj[Xz\|i(,+BIDfp$d@6L&
2024-05-15 22:36:59 UTC	1928	IN	Data Raw: a3 75 34 51 14 84 9a a3 87 0f 32 f4 e8 b7 58 e0 8f 71 78 64 9a a6 4c 8a fa 14 54 3d 45 c7 fa 4b 69 bc ea 75 0c 4d 4c 71 f0 c0 01 16 36 e5 59 12 0c 21 8a 03 ec 3b 31 ca e0 70 89 ae 35 1b 69 58 71 31 e6 b1 3e 96 16 07 69 5b dd 8d ed 65 b1 9f 7f 11 6f 7c 92 b4 34 78 41 49 be 5e 29 f1 de 74 1d b7 b4 34 12 44 93 40 b3 e7 81 06 a5 05 93 be 8f 75 a6 e0 2c f6 d4 cf 02 9f 05 1e 4c ee 37 e2 17 9f b7 9f cc 12 a2 c4 a2 ce 46 80 23 68 3e 08 7c 8d 88 cd 75 bd 9e ad 4f 01 d4 c6 32 cf c2 78 f3 81 6f 00 9f 03 f6 24 8f fc 7b 03 6e 62 a6 69 26 e3 9c 1e f0 4f 5a eb 87 89 d8 5c 1f 4a 0a 88 f0 ca 21 f3 fc e7 40 34 64 62 10 b2 68 c9 62 b8 fc 26 9e fd ea 3f 62 8c 4f 93 6b 2d d0 d2 5e 4f e0 fb 1c 7c 61 0b 0b a5 8f b5 6c 03 23 c3 27 39 f5 d2 20 3f ec 3b c4 e1 53 e3 28 91 a6 67 d1 Data Ascii: u4Q2XqxdLT=EKiuMLq6Y!;1p5iXq1>i[eo\|4xAI^)t4D@u,L7F#h>\|uO2xo${nbi&OZ\J!@4dbhb&?bOk-^O\|al#'9 ?;S(g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50015	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	669	OUT	GET /public/shared/fonts/MotivaSans-Bold.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gtm.you1.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 123884 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1e3ec" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 e3 e4 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 44 f4 60 3e 00 00 01 6c 00 00 75 e8 47 53 55 42 e1 64 c1 db 00 00 77 54 00 00 1b a4 4f 53 2f 32 76 62 a0 f8 00 00 92 f8 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 93 58 00 00 05 8e 63 76 74 20 48 67 0b 08 00 01 d4 2c 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d4 f4 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 d4 24 00 00 00 08 67 6c 79 66 cf 0e c7 af 00 00 98 e8 00 01 06 58 68 65 61 64 18 0f fb 61 00 01 9f 40 00 00 00 36 68 68 65 61 07 19 06 92 00 01 9f 78 00 00 00 24 68 6d 74 78 b4 4e 4c 2e 00 01 9f 9c 00 00 0c e6 6c 6f 63 61 7b 9c 3a 94 00 01 ac 84 00 00 06 a6 6d 61 78 70 04 a0 0f 12 00 01 b3 2c 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSD`>luGSUBdwTOS/2vb`cmapdXcvt Hg,fpgm6!gasp$glyfXheada@6hheax$hmtxNL.loca{:maxp, nam
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 06 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e9 ff fc 00 0c 00 00 00 13 00 00 00 19 00 06 00 00 00 00 00 00 00 00 ff ba ff cd 00 00 00 00 00 00 00 00 00 00 ff b7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e6 ff fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-15 22:36:59 UTC	1810	IN	Data Raw: 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 Data Ascii:
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 00 0c 02 36 02 37 02 38 02 39 02 3a 02 3b 02 3c 02 3d 02 3e 02 3f 02 cc 02 ce 00 01 0a ec ff ec 00 01 0a f0 00 14 00 02 0a f4 00 16 02 40 02 41 02 42 02 43 02 44 02 45 02 46 02 47 02 48 02 49 02 54 02 55 02 56 02 57 02 58 02 59 02 5a 02 5b 02 5c 02 5d 02 d3 02 d4 00 02 0a de 00 df 01 77 01 78 01 79 01 7a 01 7b 01 7c 01 7d 01 7e 01 7f 01 80 01 81 01 82 01 83 01 84 01 85 01 86 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 ba 01 bb 01 bc 01 bd 01 be 01 bf 01 c0 01 c1 01 c3 01 c4 01 c5 01 c6 01 c8 01 c9 01 Data Ascii: 6789:;<=>?@ABCDEFGHITUVWXYZ[\]wxyz{\|}~
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 00 ad 00 00 00 03 03 22 01 c4 00 00 ff ff 00 05 00 00 02 7f 03 b5 00 22 00 ad 00 00 00 03 03 2b 02 74 00 00 ff ff 00 05 00 00 02 7f 03 61 00 22 00 ad 00 00 00 03 03 2a 02 03 00 00 ff ff 00 05 00 00 02 7f 03 93 00 22 00 ad 00 00 00 03 03 29 02 00 00 00 00 01 00 26 00 00 02 4c 02 bc 00 09 00 29 40 26 00 01 02 03 05 01 01 00 02 4c 00 02 02 03 5f 00 03 03 48 4d 00 00 00 01 5f 00 01 01 49 01 4e 11 12 11 11 04 0a 1a 2b 01 01 21 15 21 35 01 21 35 21 02 3e fe 9c 01 72 fd da 01 63 fe ae 02 07 02 5c fe 22 7e 65 01 d9 7e ff ff 00 26 00 00 02 4c 03 8c 00 22 00 b6 00 00 00 03 03 23 02 1d 00 00 ff ff 00 26 00 00 02 4c 03 8c 00 22 00 b6 00 00 00 03 03 26 01 ea 00 00 ff ff 00 26 00 00 02 4c 03 98 00 22 00 b6 00 00 00 03 03 21 01 cb 00 00 00 02 00 24 ff f0 02 25 02 1c 00 Data Ascii: ""+ta"*")&L)@&L_HM_IN+!!5!5!>rc\"~e~&L"#&L"&&L"!$%
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 08 00 07 21 06 08 17 2b 33 11 33 32 16 15 14 06 23 27 32 36 35 34 26 23 23 11 4b d4 86 9c 9c 86 0c 50 50 50 50 3c 02 3a 8a 8d 94 8f 72 55 5a 55 51 fe ab 00 00 02 00 20 00 00 02 41 02 3a 00 0c 00 19 00 3f 40 3c 06 01 03 07 01 02 04 03 02 67 00 05 05 00 5f 08 01 00 00 2c 4d 09 01 04 04 01 5f 00 01 01 2d 01 4e 0e 0d 01 00 18 17 16 15 14 12 0d 19 0e 19 0b 0a 09 08 07 05 00 0c 01 0c 0a 08 16 2b 01 32 16 15 14 06 23 23 35 23 35 33 11 13 32 36 35 34 26 23 23 15 33 15 23 15 01 1f 86 9c 9c 86 d4 2b 2b c8 50 50 50 50 3c 59 59 02 3a 8a 8d 94 8f f3 46 01 01 fe 38 55 5a 55 51 8e 46 81 00 00 00 ff ff 00 4b 00 00 02 41 03 06 00 22 01 96 00 00 01 07 03 39 01 db 00 2e 00 08 b1 02 01 b0 2e b0 35 2b 00 00 ff ff 00 20 00 00 02 41 02 3a 00 02 01 97 00 00 00 01 00 4b 00 00 01 Data Ascii: !+332#'2654&##KPPPP<:rUZUQ A:?@<g_,M_-N+2##5#532654&##3#++PPPP<YY:F8UZUQFKA"9..5+ A:K
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 10 04 04 2f 2e 2b 29 26 25 21 1f 10 1b 10 1a 16 14 04 0f 04 0e 25 11 10 0c 08 19 2b 13 21 15 21 16 26 35 34 36 33 32 16 15 14 06 23 32 26 35 34 36 33 32 16 15 14 06 23 13 14 06 06 23 22 26 26 35 11 33 11 14 16 33 32 36 35 11 33 b9 01 0d fe f3 0a 25 25 1c 1c 23 24 1b a4 25 25 1d 1b 23 23 1b 89 3f 6d 43 43 6d 3f 86 37 32 32 37 86 03 70 46 ac 20 20 21 20 20 21 20 20 20 20 21 20 20 21 20 20 fe 5c 4d 69 34 34 69 4d 01 60 fe 96 2d 36 36 2d 01 6a ff ff 00 4b ff 45 02 29 02 3a 00 22 02 04 00 00 00 03 03 41 01 ea 00 00 ff ff 00 4b ff f0 02 29 03 0a 00 22 02 04 00 00 01 07 03 35 01 b5 00 2e 00 08 b1 01 01 b0 2e b0 35 2b 00 00 ff ff 00 4b ff f0 02 29 03 32 00 22 02 04 00 00 01 07 03 3e 03 14 00 2e 00 08 b1 01 01 b0 2e b0 35 2b 00 00 00 01 00 4b ff f0 02 96 02 b0 00 Data Ascii: /.+)&%!%+!!&54632#2&54632##"&&5332653%%#$%%##?mCCm?7227pF ! ! ! ! \Mi44iM`-66-jKE):"AK)"5..5+K)2">..5+K
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 27 36 36 33 32 16 15 14 06 07 06 06 15 15 23 16 26 35 34 36 33 32 16 15 14 06 23 a5 21 21 1a 18 28 24 38 34 34 24 64 36 56 61 2a 27 1d 1d 72 18 2e 2e 21 21 2d 2c 22 dd 28 30 1e 17 20 17 1e 1e 26 5a 19 1f 4c 42 2d 3b 22 19 24 17 15 d5 26 24 23 27 27 23 24 26 00 00 00 02 00 2d ff 85 01 a2 01 db 00 0b 00 26 00 3e 40 3b 17 01 02 04 18 01 03 02 02 4c 00 04 00 02 00 04 02 80 05 01 01 00 00 04 01 00 69 00 02 03 03 02 59 00 02 02 03 62 00 03 02 03 52 00 00 26 25 1c 1a 16 14 00 0b 00 0a 24 06 08 17 2b 00 16 15 14 06 23 22 26 35 34 36 33 17 14 06 07 06 06 15 14 16 33 32 37 17 06 06 23 22 26 35 34 36 37 36 36 35 35 33 01 12 2e 2d 22 22 2c 2d 21 39 22 20 1a 18 28 24 3a 32 34 24 64 36 57 60 2a 27 1d 1d 72 01 db 27 23 24 26 26 24 23 27 eb 28 31 1c 17 20 17 1e 1e 26 5b Data Ascii: '6632#&54632#!!($844$d6Va'r..!!-,"(0 &ZLB-;"$&$#''#$&-&>@;LiYbR&%$+#"&5463327#"&546766553.-"",-!9" ($:24$d6W`'r'#$&&$#'(1 &[
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 02 55 00 41 02 55 00 41 02 55 00 41 02 55 00 41 02 36 00 07 03 1d 00 0c 03 1d 00 0c 03 1d 00 0c 03 1d 00 0c 03 1d 00 0c 02 14 00 09 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 01 e8 00 27 01 e8 00 27 01 e8 00 27 01 e8 00 27 02 b0 00 19 02 8a 00 19 02 49 00 4b 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 03 11 00 0f 02 2d 00 4b 02 22 00 26 02 22 00 26 02 22 00 26 02 22 00 26 02 22 00 26 02 22 00 26 02 67 00 4b 02 67 00 20 02 67 00 4b 02 67 00 20 02 02 00 4b 02 02 00 Data Ascii: UAUAUAUA6GGGGGGGGG''''IKNNNNNNNNNNNNNNNNNNNNNNN-K"&"&"&"&"&"&gKg gKg K
2024-05-15 22:36:59 UTC	8144	IN	Data Raw: 75 6e 69 31 45 45 39 07 75 6e 69 31 45 46 31 07 75 6e 69 31 45 45 42 07 75 6e 69 31 45 45 44 07 75 6e 69 31 45 45 46 0d 75 68 75 6e 67 61 72 75 6d 6c 61 75 74 07 75 6d 61 63 72 6f 6e 07 75 6f 67 6f 6e 65 6b 05 75 72 69 6e 67 06 75 74 69 6c 64 65 06 77 61 63 75 74 65 0b 77 63 69 72 63 75 6d 66 6c 65 78 09 77 64 69 65 72 65 73 69 73 06 77 67 72 61 76 65 0b 79 63 69 72 63 75 6d 66 6c 65 78 07 75 6e 69 31 45 46 35 06 79 67 72 61 76 65 07 75 6e 69 31 45 46 37 07 75 6e 69 30 32 33 33 07 75 6e 69 31 45 46 39 06 7a 61 63 75 74 65 0a 7a 64 6f 74 61 63 63 65 6e 74 0a 75 6e 69 31 45 39 45 2e 73 63 04 61 2e 73 63 09 61 61 63 75 74 65 2e 73 63 09 61 62 72 65 76 65 2e 73 63 0a 75 6e 69 31 45 41 46 2e 73 63 0a 75 6e 69 31 45 42 37 2e 73 63 0a 75 6e 69 31 45 42 31 2e 73 Data Ascii: uni1EE9uni1EF1uni1EEBuni1EEDuni1EEFuhungarumlautumacronuogonekuringutildewacutewcircumflexwdieresiswgraveycircumflexuni1EF5ygraveuni1EF7uni0233uni1EF9zacutezdotaccentuni1E9E.sca.scaacute.scabreve.scuni1EAF.scuni1EB7.scuni1EB1.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50016	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	634	OUT	GET /steam/clusters/frontpage/bf38182a775bd250555d2bf4/webm_page_bg_mobile_english.webm?t=1714777083 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://gtm.you1.cn/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-05-15 22:36:59 UTC	283	IN	HTTP/1.1 206 Partial Content Server: nginx Content-Type: video/webm Last-Modified: Fri, 03 May 2024 22:21:02 GMT ETag: "6635634e-3b703" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Content-Range: bytes 0-243458/243459 Content-Length: 243459 Connection: close
2024-05-15 22:36:59 UTC	16101	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 03 b6 d3 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 f0 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 4d 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 03 b6 bd ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 ca 2a d7 b1 83 0f 42 40 4d 80 8d 4c 61 76 66 35 39 2e 32 37 2e 31 30 30 57 41 9a 48 61 6e 64 42 72 61 6b 65 20 31 2e 36 2e 31 Data Ascii: EBBBBBwebmBBSgMtMSIfSMSTkSMSTgSMMSSkSXIf*B@MLavf59.27.100WAHandBrake 1.6.1
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 34 63 76 23 9b ab 7b 44 10 33 b5 2e e7 5f 0e be 69 7b ee cf 57 91 66 46 08 fe f5 5d b2 fd fa fc 4d fc 81 7b 9e 25 30 68 89 d1 74 e1 c1 d8 39 24 e1 d4 fd 7d e5 93 c5 93 60 b0 ab c6 55 e8 5d 2f 51 82 9b 5e cd 64 10 df 8c 1f fb dd 75 27 fc cd 2f 09 d0 59 ad f5 31 93 af 3f 85 fa e2 2f c9 e0 12 cf fd 72 23 55 b6 fa 19 77 6f 93 bc c9 2e 6c c0 dd 46 ec bb ff fa 6e bf 62 89 26 a7 8a 20 17 df 2d 3f cc 02 a5 8d 7f db 61 2a 10 ab e6 62 f8 cd cd 23 12 73 da 7b c8 59 ce e3 d8 6f f9 cb 1b 2d bb d1 b3 a4 d5 bb 9e 4e 13 d6 a4 f0 d9 ae 29 3d bc de 8b 8d 3a e5 4e 56 5a 89 d5 f5 0f 6c 15 2f 75 08 1c af 27 29 aa 58 5a 08 34 e2 78 d0 11 f8 61 72 6e d9 7e 20 e7 46 d3 76 48 44 70 29 0f f1 f7 72 92 ec 6f 71 72 c1 13 ec d1 7d cd 6c ae 7d 38 28 85 74 a5 ac 6e a5 eb 55 60 71 51 26 Data Ascii: 4cv#{D3._i{WfF]M{%0ht9$}`U]/Q^du'/Y1?/r#Uwo.lFnb& -?a*b#s{Yo-N)=:NVZl/u')XZ4xarn~ FvHDp)roqr}l}8(tnU`qQ&
2024-05-15 22:36:59 UTC	3302	IN	Data Raw: 88 c1 7b ed 11 21 9f 76 52 40 a7 ba 29 ed 6b 6b c4 0d 38 e5 46 c8 9b d7 08 db 1d 3d 9e 49 13 01 27 5a 9d 1b 16 18 a4 ac dc 66 8b 57 0a 76 37 8e 30 2b df f4 ae eb 23 5b f0 e2 8f 8f 73 6a ea a7 49 bd 00 ef c4 7b 35 ad 98 ed a0 76 54 76 9b 19 14 fb 7e a1 16 3d e5 39 f3 09 83 14 29 b1 df de f9 0a 60 3e c9 d5 61 64 1b d3 5d 5d fd 77 5e 84 7e c0 c4 63 6c b1 ab a0 65 8a 76 32 a2 7a 25 fa 37 9e 8f 73 f8 a6 77 a1 c2 cc c0 8f 84 5c 0b bd a2 38 7d d8 2e 9a c3 ac 06 4b c0 8c af bc 61 1a 37 5f 37 05 9c 2d b2 32 aa e5 46 cf e9 03 19 c8 88 21 95 ef cb a9 6a 5e b1 e2 de ea 17 c7 da 86 e0 ca bd 66 50 96 27 78 8c 13 be 93 92 78 6f 4d 0f 74 90 0f 56 b4 df de 50 ef 6b af b2 7b db 61 0f 52 68 45 0c 7d 49 a7 a5 c0 a1 44 14 b1 fa 82 23 a5 f5 cc d7 84 48 59 67 0c 29 70 c2 93 f6 Data Ascii: {!vR@)kk8F=I'ZfWv70+#[sjI{5vTv~=9)`>ad]]w^~clev2z%7sw\8}.Ka7_7-2F!j^fP'xxoMtVPk{aRhE}ID#HYg)p
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 00 00 00 00 00 04 6a 01 24 20 6b 14 0b 6e 88 a3 20 67 cc 81 01 4d 00 86 00 c0 92 f0 21 09 04 02 1e 7f cb f9 ff 6f c9 dc 7f 4f d1 f1 52 06 4f d5 ff 68 7e 67 f6 cf c6 fd 83 f5 af ee 2f 51 ec 7f ca ba 8f ba 89 1f b3 7f 68 7e c1 fd b3 ee b8 34 92 7f 93 fd 53 e5 59 fe 25 be a4 c3 3f 3f f8 7e 97 ed 19 5f ef df c0 fa 5f 57 fd a0 3e bb 61 0d cb 7e fc bf f6 be d9 fc bf f6 df f6 1f 0b fe bb f1 7f c4 7a 6d 89 fd bf 8b fe 5b fc af f8 dc f8 6f ed ff 3b ec af c9 99 3f 17 f9 1e f0 99 0f fc 6f 83 fe f3 c0 1f 00 f6 3b df e3 7a ee 9d fe 94 f2 e2 65 de 53 5e 4c fb 46 e7 3c a5 3a 77 b4 ed 30 d1 de 4c fe 4f f6 27 f8 4b 2e f2 4f a7 7f 78 f5 7f 7c c0 1f 49 d3 b1 55 d6 b1 73 2e d1 1e b9 55 af 27 3f 9b 62 83 f5 3f 46 24 fb 95 fd 00 d2 cc 57 fa bb 37 ed fb 0b d2 fe ee dd fa 3c d5 Data Ascii: j$ kn gM!oOROh~g/Qh~4SY%??~__W>a~zm[o;?o;zeS^LF<:w0LO'K.Ox\|IUs.U'?b?F$W7<
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: eb 66 40 c0 9b 5f d9 d4 64 7d 1f 88 da c9 47 b9 03 45 30 9a f1 6d bd 82 4d e1 e0 49 34 13 8f b4 bd 5d 98 ee bd b7 c7 40 a1 8c bb de 7d b1 0e bb c0 d3 6a a9 29 3e 3e f4 d1 64 9b ce f5 cb b9 2a 32 3a bf e6 ff 32 44 0c 7d df 38 6f aa 30 ab 91 30 cd 4e 93 1e 16 c9 89 1a 26 b2 d9 95 d2 8a f1 ae 33 7b 14 e5 3c 7c 6c 01 6e d5 7a 3b c5 12 23 9d de 99 1e b2 70 b4 97 96 22 c9 0e 78 bc d6 13 9f 0c c5 34 45 e1 fb e3 a0 84 93 09 0f 9d fd d9 24 67 33 8c 41 9d 5a b4 4f 0b f0 96 99 3b ab 15 55 ea 87 57 b4 b2 aa df 3a ff 84 95 e4 80 02 4c 27 5b 43 19 ef 5b a0 bc 85 d4 d0 a2 f8 f9 c0 f3 b9 6e 60 5b ac 6d 01 4e e2 61 13 a1 52 84 fc fc 02 ee 2b bc 7d 43 7e ce 8e 84 63 aa 50 21 64 44 3f db 67 7c cd 16 fb fd b7 e1 41 03 b5 29 b8 73 89 ad 8f 45 89 f0 9d bb 71 03 bc 07 5f 87 4a Data Ascii: f@_d}GE0mMI4]@}j)>>d*2:2D}8o00N&3{<\|lnz;#p"x4E$g3AZO;UW:L'[C[n`[mNaR+}C~cP!dD?g\|A)sEq_J
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: e6 2f f0 de 13 7d 38 64 e5 6d 30 6b 06 83 f8 69 12 7f a9 a5 88 e8 e1 59 53 25 27 c8 df f1 7f 90 a7 9a 01 1c 5a 4a b2 6d 02 43 65 a1 d0 47 f5 77 b2 2a 16 90 b1 85 07 3e e5 41 de 1e 1b e1 1d 26 cc 58 cd a4 74 52 8c a2 b8 ee 14 99 e2 84 38 1b 63 8c f8 d7 d1 03 8f dc 43 69 11 0f f3 ce cc cc cf 7c f5 7f f1 e5 bc e2 cb 1a 9f 49 6f dd 7a 38 05 27 21 b6 5f 5a db 4c ae ef 6f 9b 49 45 51 8d de 6a 60 d9 ef 2f 47 6d d3 a3 a8 48 34 fe 0c 1e 5e 97 b6 ac e1 d2 db 6e 54 63 04 06 60 7b 8e ea fe 27 13 4c da 71 9a 22 a6 2e 64 41 d3 30 78 fe ce 98 c8 05 ed 65 2b 60 d9 2c 2e e5 11 92 bf fd ea 07 4a f2 38 de c7 ff f3 40 18 3d 22 d5 c2 62 9d b2 a2 3b fc 34 ab 58 04 21 43 6d 5e ed 63 57 ed 61 cd 34 69 6d 90 3f 89 bc 50 64 45 24 5f 14 e4 9a e6 6f cf bc 88 bd 39 d4 5e d8 dd 34 77 Data Ascii: /}8dm0kiYS%'ZJmCeGw*>A&XtR8cCi\|Ioz8'!_ZLoIEQj`/GmH4^nTc`{'Lq".dA0xe+`,.J8@="b;4X!Cm^cWa4im?PdE$_o9^4w
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: a5 9c f8 02 8b 1c 0d 92 72 6a 0a 82 4e b1 d7 7d ff 02 27 b8 5c d9 06 6f 7b 5c 61 96 07 31 e2 ed bf 1f ec f3 e8 c0 25 54 4c 44 b5 48 75 0e 2a de e7 05 0e 08 8d ac 4b d2 14 eb 23 b4 ad c6 d3 7d d6 30 b3 1b 00 d9 0b c3 62 7d 48 a9 f1 ea 96 e6 46 79 86 8a 59 6f 5e e5 56 40 11 b5 5d 26 7b 81 2f fe 0c 45 54 b0 90 39 ff 7f fe bf 48 01 0d 9c ba d1 67 29 51 9c 52 57 56 4d ca e7 54 c9 a8 08 d3 96 c8 bf 98 d1 39 5c 2c 52 45 5a 7e ae e3 91 10 be 9c c0 20 73 75 49 81 fc db 82 54 e1 c4 d8 62 ce 9b 9d ea 39 23 26 3d 65 2d 9a 54 c3 56 54 8f dc 47 bb 24 0e 4d a9 ea f4 cd dc d7 02 b4 f4 26 48 a2 ef 4f b8 c2 06 ec 5d 5b cd a1 23 c9 71 df 15 2f 2f 85 8d 3f 1e 49 6b a4 58 45 cc b5 c7 06 c1 71 fb f1 c8 c7 8b c5 76 13 8e 8d 59 00 96 4e 8e b3 06 13 95 9e 6a e5 85 4e 89 15 97 e5 Data Ascii: rjN}'\o{\a1%TLDHu*K#}0b}HFyYo^V@]&{/ET9Hg)QRWVMT9\,REZ~ suITb9#&=e-TVTG$M&HO][#q//?IkXEqvYNjN
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 53 bb fc 71 71 0a dd 2e 02 c8 cf 30 42 5b 87 26 8e d1 89 37 ef b3 a4 15 40 2f 47 da a5 1f 88 2d db 63 82 61 0d bc 17 be c0 b1 f9 c2 60 d9 42 2e d1 00 cc 59 44 17 3e fc 30 65 eb d2 b8 41 a8 2e 7d c8 bc 02 28 81 68 52 ed 83 42 aa 10 99 01 e9 70 6c 1c 15 c2 e2 ad 3e 7a d5 8f 82 32 10 5d 09 a7 40 49 7f f9 e9 94 5b f8 e9 41 40 93 5f 0f 2b c8 d8 b9 4e 42 60 95 39 0f dd b3 4a ef fd e6 4a da 5c 4e 5e 8a 7b a2 fc ba e9 01 8f c5 66 02 e0 43 f8 b8 8d 49 2c 17 6f 23 f0 86 e0 dd c5 97 42 c1 51 ea a8 73 4b f7 fc c4 09 4d 5f be 06 6a d6 ac e0 14 eb b1 bd 23 65 bd 2f f1 7c f7 a5 be cb 8e c3 63 47 94 ea cc ea d7 a1 6e 3c 65 8d 27 a5 a8 b4 6f 5f c6 e8 2b 56 6f 4e 74 74 37 bb 66 09 84 fd 3d 51 59 6b 83 d9 c8 49 95 55 2f 07 24 96 6d 30 f6 9a fa ac f6 c1 ab 82 a2 1f 0f 3f 1c Data Ascii: Sqq.0B[&7@/G-ca`B.YD>0eA.}(hRBpl>z2]@I[A@_+NB`9JJ\N^{fCI,o#BQsKM_j#e/\|cGn<e'o_+VoNtt7f=QYkIU/$m0?
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 9d a6 3d 22 d9 8d 03 d2 24 75 38 23 76 d2 22 7a d0 84 6a 07 9a c2 6d a6 13 b9 0e b6 08 64 af 73 87 fd 62 33 47 5e 19 3a ac ae 3d f9 eb 55 be 52 6e 14 aa a3 d9 55 33 10 6a 8e 44 93 fe e9 cd 1b 4f 36 75 2a ed 15 f1 81 c5 01 63 f4 bb 28 54 18 5f 92 48 88 2a cf 2f 0f f8 83 64 84 eb 32 88 13 bb f2 2c 41 e9 eb ba 82 a5 92 b4 95 5e 61 dd cb 0d 02 be 0c 00 b7 75 96 80 bf 38 e3 90 e7 5d b8 f1 fa 84 ed 00 17 f6 7e 59 fc 38 7a 71 f2 cb 45 34 9f a1 a7 b9 9e b6 ce cb 4a e4 1b df b1 50 aa f2 19 ee 2d bd 66 c8 7f 38 dc f6 dd d3 4f 1a 57 73 63 c7 7b 2a 3f 43 6c 90 62 0f c4 ed 93 ae 5e 80 4c 73 c9 7d 84 00 2a 80 30 3a de 65 8c 97 85 f1 9f 1c d4 0f 0e 3c 54 18 fe 52 ad 7c a0 11 e6 f9 36 71 cd 49 52 a0 11 cb b5 ff bb c6 c2 d4 0f 66 26 fc b3 ef 09 b7 76 8a 55 b5 66 02 3c 12 Data Ascii: ="$u8#v"zjmdsb3G^:=URnU3jDO6uc(T_H/d2,A^au8]~Y8zqE4JP-f8OWsc{?Clb^Ls}0:e<TR\|6qIRf&vUf<
2024-05-15 22:37:00 UTC	13845	IN	Data Raw: 35 a6 af c8 91 79 bc 02 ec 76 04 55 83 ce e9 ca 39 15 43 a7 93 3b c6 83 04 38 9a fb a7 40 39 15 15 d2 1a e0 29 5e 3b 42 ff c3 60 75 ff bc 20 76 39 49 27 4f 66 dd 52 e7 31 da 57 c9 ed e3 b9 b6 3a aa 76 83 d6 31 92 3e 8b c8 ea 76 de ea 1d 55 ef 6c 78 e2 9b b1 e6 3b 08 e7 5c 2c f5 ae 82 79 bd 28 a7 bd 56 8c 38 5d 47 24 0f 98 05 a5 a6 39 91 3f 23 90 14 59 51 49 53 0c 9b 84 51 da 91 1c 37 12 d1 04 78 be 7d 70 61 75 a6 0b 2c b4 b4 61 70 46 59 30 56 3f d8 b6 2e 04 49 90 de 35 00 be 2f 96 f0 fb 85 3a d2 9b 13 e1 87 21 e8 d0 95 f9 68 f8 ca dd 7a bd 16 fd c6 93 d0 b7 e8 b1 9b 9a 19 62 7c 43 f2 f3 1a e2 47 c8 d3 7e 0a 00 e3 6e b2 60 2e 95 04 7e 1a f7 ee ce 5b aa d0 80 a3 af 81 09 a3 00 86 00 40 92 ac 00 47 e1 00 01 80 60 00 00 00 00 00 06 67 c9 fd 1f 7b 00 61 3d 5f Data Ascii: 5yvU9C;8@9)^;B`u v9I'OfR1W:v1>vUlx;\,y(V8]G$9?#YQISQ7x}pau,apFY0V?.I5/:!hzb\|CG~n`.~[@G`g{a=_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50018	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	676	OUT	GET /public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gtm.you1.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 133600 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-209e0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 02 09 d8 00 00 00 08 47 44 45 46 0b 7c 0d 40 00 00 01 2c 00 00 00 3a 47 50 4f 53 c5 b3 72 1c 00 00 01 68 00 00 8b 64 47 53 55 42 03 65 18 00 00 00 8c cc 00 00 1d 50 4f 53 2f 32 74 d3 9c f2 00 00 aa 1c 00 00 00 60 63 6d 61 70 c9 c4 e3 fb 00 00 aa 7c 00 00 05 96 63 76 74 20 46 74 09 1d 00 01 fa 20 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 fa e8 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 fa 18 00 00 00 08 67 6c 79 66 60 85 de 9d 00 00 b0 14 00 01 14 1c 68 65 61 64 17 e4 fb 31 00 01 c4 30 00 00 00 36 68 68 65 61 07 9d 09 cc 00 01 c4 68 00 00 00 24 68 6d 74 78 83 5b 4f 22 00 01 c4 8c 00 00 0c fe 6c 6f 63 61 70 a0 2b 90 00 01 d1 8c 00 00 06 b2 6d 61 78 70 04 a8 0f 1d 00 01 d8 40 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF\|@,:GPOSrhdGSUBePOS/2t`cmap\|cvt Ft fpgm6!gaspglyf`head106hheah$hmtx[O"locap+maxp@ nam
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 00 00 00 00 00 09 00 00 00 01 00 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 01 00 01 00 00 00 01 00 00 00 00 00 02 ff ff 00 00 00 00 00 00 ff ee 00 00 00 02 ff f9 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 12 ff ce 00 00 ff f7 ff ec 00 01 00 01 ff fa ff f7 ff e2 00 00 ff fe ff e1 00 04 00 00 00 05 00 00 00 02 ff d8 ff e0 ff ec 00 00 00 00 ff f7 ff ee ff f6 ff fc ff e1 ff cf ff e0 ff ea ff ec ff eb ff d2 ff f8 00 00 ff ed 00 04 ff fe ff f8 00 00 00 01 00 01 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 27 ff c9 ff f7 ff 89 ff ed ff Data Ascii: '
2024-05-15 22:36:59 UTC	3382	IN	Data Raw: 00 74 00 39 00 79 00 7c 00 3f 00 81 00 86 00 43 00 89 00 8d 00 49 00 9b 00 a0 00 4e 00 a6 00 b5 00 54 00 ce 00 ce 00 64 00 d1 00 f0 00 65 00 fa 01 0c 00 85 01 0f 01 12 00 98 01 14 01 14 00 9c 01 1a 01 1a 00 9d 01 1c 01 36 00 9e 01 38 01 3b 00 b9 01 43 01 47 00 bd 01 55 01 5a 00 c2 01 5d 01 5d 00 c8 01 60 01 65 00 c9 01 67 01 6f 00 cf 01 74 01 74 00 d8 01 78 01 79 00 d9 01 92 01 92 00 db 01 9e 01 af 00 dc 01 b1 01 b1 00 ee 01 b8 01 cd 00 ef 01 d2 01 d2 01 05 01 d6 01 dc 01 06 01 f5 01 f5 01 0d 02 15 02 1a 01 0e 02 20 02 20 01 14 02 27 02 2f 01 15 02 bd 02 bd 01 1e 02 bf 02 bf 01 1f 02 d0 02 d0 01 20 00 02 00 01 00 02 00 b9 00 00 00 02 00 02 01 7a 01 d3 00 00 01 d5 02 33 00 5a 00 02 00 09 02 9c 02 a0 00 00 02 a4 02 a5 00 05 02 a7 02 a7 00 07 02 a9 02 aa 00 Data Ascii: t9y\|?CINTde68;CGUZ]]`egottxy '/ z3Z
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 02 aa 02 aa 00 1e 02 ae 02 ae 00 1a 02 b0 02 b0 00 1f 02 b1 02 b1 00 24 02 b2 02 b2 00 18 02 b5 02 b8 00 14 02 b9 02 b9 00 1c 02 bd 02 bd 00 13 02 be 02 be 00 12 02 bf 02 bf 00 13 02 c0 02 c0 00 12 02 c1 02 c1 00 22 02 c3 02 c3 00 22 02 c5 02 c5 00 20 02 c6 02 c6 00 21 02 d0 02 d0 00 03 02 f4 02 f4 00 06 00 01 02 35 00 01 00 01 00 02 00 04 02 41 02 41 00 02 02 43 02 43 00 01 02 4b 02 4b 00 02 02 4d 02 4d 00 01 00 02 00 05 00 1b 00 20 00 01 00 38 00 3d 00 01 00 61 00 79 00 01 00 7c 00 7c 00 01 00 88 00 88 00 01 00 01 00 00 00 0a 02 4c 0c de 00 02 44 46 4c 54 00 0e 6c 61 74 6e 00 3e 00 04 00 00 00 00 ff ff 00 13 00 00 00 0b 00 16 00 21 00 2c 00 37 00 42 00 4d 00 61 00 6c 00 77 00 82 00 8d 00 98 00 a3 00 ae 00 b9 00 c4 00 cf 00 3a 00 09 41 5a 45 20 00 66 43 Data Ascii: $"" !5AACCKKMM 8=ay\|\|LDFLTlatn>!,7BMalw:AZE fC
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 03 72 00 22 00 7d 00 00 00 03 03 2c 01 d3 00 00 ff ff 00 1f ff 36 02 56 02 bc 00 22 00 7d 00 00 00 03 03 35 01 84 00 00 00 01 00 0c ff f4 02 3d 02 c9 00 29 00 34 40 31 17 01 02 01 18 03 02 00 02 02 01 03 00 03 4c 00 02 02 01 61 00 01 01 50 4d 00 00 00 03 61 04 01 03 03 51 03 4e 00 00 00 29 00 28 23 2e 24 05 0a 19 2b 16 26 27 37 16 33 32 36 36 35 34 26 26 27 2e 02 35 34 36 36 33 32 17 07 26 23 22 06 15 14 16 16 17 1e 02 15 14 06 06 23 ab 75 2a 28 5a 6a 41 53 26 26 3a 31 3b 4a 33 3a 75 52 79 5a 2c 51 5a 4e 5e 28 3b 33 3b 47 32 3d 7d 5c 0c 23 1d 41 37 27 3b 1f 20 2e 1f 15 1a 2a 47 33 35 5d 38 40 3f 36 44 33 21 30 20 16 1a 29 42 30 34 64 41 00 ff ff 00 0c ff f4 02 3d 03 72 00 22 00 81 00 00 00 03 03 29 02 5f 00 00 ff ff 00 0c ff f4 02 3d 03 72 00 22 00 81 00 Data Ascii: r"},6V"}5=)4@1LaPMaQN)(#.$+&'7326654&&'.546632&#"#u(ZjAS&&:1;J3:uRyZ,QZN^(;3;G2=}\#A7'; .G35]8@?6D3!0 )B04dA=r")_=r"
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 00 00 06 03 06 00 03 80 00 05 05 53 4d 00 07 07 4b 4d 00 06 06 03 62 00 03 03 51 4d 00 01 01 02 61 00 02 02 55 02 4e 59 59 40 0b 14 2a 23 28 2d 24 17 10 08 0a 1e 2b 24 33 32 37 07 06 06 15 14 33 32 37 07 06 23 22 26 35 34 36 37 26 26 35 34 37 23 06 06 23 22 26 35 34 37 36 35 34 26 23 22 07 37 36 33 32 16 15 14 06 07 06 06 15 14 16 33 32 36 36 37 37 33 07 06 02 15 01 d6 1a 06 0c 0b 21 2a 1f 07 10 07 0f 1a 23 25 2d 26 16 15 0e 04 21 69 3d 38 48 1e 13 0f 0d 0c 07 09 17 1a 21 21 0f 09 0a 11 2f 1f 29 54 46 11 1d 4b 1a 04 36 2b 02 30 23 46 1e 19 02 2d 06 22 1d 1f 4a 23 03 1a 1b 1e 3e 47 51 44 3c 2f a9 6c 10 0f 0c 01 30 07 1f 1c 12 5d 31 37 6a 16 2a 26 46 89 61 a6 8b 16 fe e7 15 00 ff ff 00 55 ff f3 02 2a 02 f7 00 22 01 48 00 00 00 03 03 21 00 9f 00 00 ff ff 00 Data Ascii: SMKMbQMaUNYY@#(-$+$327327#"&5467&&547##"&547654&#"76323266773!#%-&!i=8H!!/)TFK6+0#F-"J#>GQD</l0]17j&FaU"H!
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 13 25 24 07 08 1b 2b 00 17 07 26 26 23 22 06 06 15 14 16 33 32 36 37 37 23 37 33 07 06 06 23 22 26 35 34 36 36 33 01 ec 48 32 1c 4c 2d 46 6c 3c 54 51 2a 48 17 1a 9d 0c e7 2c 28 74 42 67 7a 5f 98 56 02 46 40 3a 19 1d 44 7c 51 5d 5e 19 14 98 3f f6 24 2c 79 7c 70 9e 4f 00 00 00 ff ff 00 32 ff f4 02 34 02 f2 00 22 01 b2 00 00 01 07 03 40 01 f4 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 32 ff f4 02 34 02 ef 00 22 01 b2 00 00 01 07 03 3f 01 f2 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 32 ff f4 02 34 02 f5 00 22 01 b2 00 00 01 07 03 3e 01 ec 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 32 ff 36 02 34 02 46 00 22 01 b2 00 00 00 03 03 48 01 9b 00 00 ff ff 00 32 ff f4 02 34 02 f5 00 22 01 b2 00 00 01 07 03 3a 01 a5 00 2d 00 08 b1 01 01 b0 2d Data Ascii: %$+&&#"32677#73#"&54663H2L-Fl<TQ*H,(tBgz_VF@:D\|Q]^?$,y\|pO24"@--5+24"?--5+24">--5+264F"H24":--
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: ff ff 00 01 ff 6c 00 f6 00 f9 01 07 02 6d ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff e9 ff 6c 01 2f 01 01 01 07 02 6e ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff e6 ff 64 01 34 01 01 01 07 02 6f ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff e9 ff 6c 01 2d 00 fa 01 07 02 70 ff e6 ff 6c 00 09 b1 00 02 b8 ff 6c b0 35 2b 00 00 00 ff ff ff f4 ff 64 01 35 00 f9 01 07 02 71 ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff 00 01 ff 64 01 4c 01 01 01 07 02 72 ff e6 ff 6c 00 09 b1 00 02 b8 ff 6c b0 35 2b 00 00 00 ff ff ff ed ff 6c 01 27 00 f9 01 07 02 73 ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff f7 ff 64 01 46 01 01 01 07 02 74 ff e6 ff 6c 00 09 b1 00 03 b8 ff 6c b0 35 2b 00 00 Data Ascii: lmll5+l/nll5+d4oll5+l-pll5+d5qll5+dLrll5+l'sll5+dFtll5+
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 11 40 3e fe c8 19 19 12 34 26 25 1f 29 31 23 39 1e 5f 1d 29 22 27 25 bb 38 52 33 48 2a 29 3d 32 31 47 29 0b 25 33 20 29 46 29 3b 2b 2c 43 22 1d 56 1a 63 18 63 2a 1d 0b 20 35 19 16 1d 2e 21 fe 9f 20 23 6c 13 1c 2b 1b 1a 20 00 00 ff ff 00 43 ff ad 01 c9 02 13 00 02 02 d7 1b 00 00 05 00 39 ff f7 02 52 02 1d 00 0d 00 11 00 1c 00 2a 00 35 00 91 4b b0 1b 50 58 40 29 02 0a 02 01 0b 01 05 04 01 05 69 00 04 00 00 07 04 00 69 0c 01 07 0d 01 09 08 07 09 69 00 08 08 03 61 06 01 03 03 2d 03 4e 1b 40 34 00 02 01 05 01 02 05 80 0a 01 01 0b 01 05 04 01 05 69 00 04 00 00 07 04 00 69 0c 01 07 0d 01 09 08 07 09 69 00 03 03 2d 4d 00 08 08 06 61 00 06 06 31 06 4e 59 40 26 2b 2b 1d 1d 12 12 00 00 2b 35 2b 34 31 2f 1d 2a 1d 29 24 22 12 1c 12 1b 18 16 11 10 0f 0e 00 0d 00 0c 25 Data Ascii: @>4&%)1#9_)"'%8R3H)=21G)%3 )F);+,C"Vcc 5.! #l+ C9R5KPX@)iiia-N@4iii-Ma1NY@&+++5+41/)$"%
2024-05-15 22:37:00 UTC	16288	IN	Data Raw: 02 11 ff e3 02 11 ff e3 02 11 ff e3 01 f1 00 00 01 f1 00 00 01 f1 00 00 01 f1 00 00 01 62 00 18 02 37 00 0d 02 11 00 27 02 11 00 27 02 53 ff a1 02 58 ff a1 02 0c 00 20 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 cb ff f8 01 fd 00 20 02 23 00 31 02 23 00 31 02 23 00 31 02 23 00 31 02 23 00 31 02 23 00 31 02 3f 00 20 02 3f 00 20 02 3f 00 20 02 3f 00 20 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 Data Ascii: b7''SX EEEEEEEEEEEEEEEEEEEEEEE #1#1#1#1#1#1? ? ? ? ##############

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50017	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	399	OUT	GET /steam/apps/381210/capsule_184x69.jpg?t=1715700452 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7013 Last-Modified: Thu, 17 Mar 2022 10:40:07 GMT ETag: "62331007-1b65" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=492595 Expires: Tue, 21 May 2024 15:26:54 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	7013	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCE}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50019	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	653	OUT	GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_webm_english.webm?t=1713912919 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://gtm.you1.cn/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-05-15 22:36:59 UTC	283	IN	HTTP/1.1 206 Partial Content Server: nginx Content-Type: video/webm Last-Modified: Tue, 23 Apr 2024 13:35:38 GMT ETag: "6627b92a-b33f8" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Content-Range: bytes 0-734199/734200 Content-Length: 734200 Connection: close
2024-05-15 22:36:59 UTC	16101	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 0b 33 c8 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 f0 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 4c 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 0b 33 b2 ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 ca 2a d7 b1 83 0f 42 40 4d 80 8d 4c 61 76 66 35 39 2e 32 37 2e 31 30 30 57 41 9a 48 61 6e 64 42 72 61 6b 65 20 31 2e 36 2e 31 Data Ascii: EBBBBBwebmBBSg3MtMSIfSMSTkSMSTgSLMSSkS3XIf*B@MLavf59.27.100WAHandBrake 1.6.1
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: cc c2 a0 3f 8f 2a 41 aa e3 e5 80 db 2e e8 8d 15 ef 2c 9c b1 59 10 d2 83 dd 0b f1 21 63 1e 6a 50 ff dd 47 1f 90 44 e0 2a 93 74 b2 76 94 5e ed 31 0d 8b 4f ba 83 47 4a bb 52 1b f4 a0 38 79 25 60 15 92 70 eb 79 28 fa 33 c6 dc ca fc c0 00 36 1c 25 27 d7 5b d1 55 eb bf e4 00 8a e5 1b fc 30 b8 80 e3 a7 8b ca b9 53 3c 39 1d 53 51 f2 37 b6 fb 92 f6 d1 7f 11 99 68 17 58 93 72 56 3d 53 dd f0 08 16 7b 42 f5 9d 4f b7 e3 86 3f 45 d9 e2 9f a7 a2 d2 0c 05 e8 60 c1 3f 89 ca 1e 16 25 3d 46 d7 c8 b8 02 5c ff 95 ac ec 81 d2 c6 cb d1 00 f3 8d 92 a2 34 02 17 af 61 f5 1f 37 84 4d 90 d6 2c 4a 82 e8 32 6c ae 2d 26 0d cf 38 c3 74 66 0c a5 9b 35 e8 8c 88 4a 2d 6a d0 1b 29 18 a6 04 e7 d6 76 20 70 ae 20 65 8d 90 2f fb c5 6b d9 6f 97 61 c1 16 77 db 73 fc a2 0c 02 71 67 71 93 06 a2 66 Data Ascii: ?A.,Y!cjPGDtv^1OGJR8y%`py(36%'[U0S<9SQ7hXrV=S{BO?E`?%=F\4a7M,J2l-&8tf5J-j)v p e/koawsqgqf
2024-05-15 22:36:59 UTC	3379	IN	Data Raw: 28 1a d2 3c 96 d4 00 69 40 aa c9 c3 be 5a 1e 63 a5 79 ba 84 18 5a 2c cf a3 60 81 e7 3c 46 d4 71 bd 2b ef 21 7b 31 a7 35 fd 4e 68 1e 02 13 bc f5 d0 74 cf e7 26 4a de 08 58 6a d6 a6 5a 9c 99 14 b2 1a 39 87 9d dd 71 ce c1 7a d7 a7 73 7d 11 f1 60 73 3b 0f 5f 02 2b 7c 07 20 43 d2 4b a1 41 0b d1 66 55 ce f7 b1 52 b4 25 ec 10 32 f2 d2 cb 58 f6 86 5a 13 55 f3 d2 9e f4 0c 08 6f cc 81 77 ea 92 c9 9e da 6c 0c 46 f3 de d6 94 c3 93 a9 ba 99 69 ea 54 de 40 5d e5 da 9b 8d ac af 86 9d ce 3b a5 8b 70 ea 72 03 8c c5 2e 4c 95 20 2c cf d6 4f e3 15 3d e3 6d b8 72 fe e6 a1 7f cc a3 51 ba 8f 66 7e ac c5 74 d7 e2 1f 01 c3 e4 9c e9 1c 1c bf bf 46 28 b8 51 bf 87 eb bb 2f 80 96 2f 70 f3 1a c2 99 82 ca 23 cf cd 2a e3 85 31 1f 20 4f f6 4d b0 22 93 c4 6e 93 54 c3 53 5d be a1 13 aa 97 Data Ascii: (<i@ZcyZ,`<Fq+!{15Nht&JXjZ9qzs}`s;_+\| CKAfUR%2XZUowlFiT@];pr.L ,O=mrQf~tF(Q//p#*1 OM"nTS]
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: e0 66 5e 5d 4b 67 60 8f ed 85 96 0b a5 64 0e fa f0 38 a5 24 b8 07 f4 62 8b de e3 be 8b eb b5 8f b7 22 1a 1a 4d ef f5 48 f7 59 4a 2e d2 c9 0a 2a 0e ee d3 25 e1 73 32 82 6b ce 56 ba 49 66 70 04 d7 bc 30 d2 28 40 e8 b2 82 02 68 73 4f 7d 8d 50 0e 10 cc 94 87 b7 a3 9a 86 be 64 a9 86 1f 4a 5f 4f 8f 1a ee 6a c9 d9 8b b4 b4 4a db 04 91 ea 25 ff a6 2b 52 2a 10 9c 10 6e a1 e8 a0 1a 36 6a c5 1f 00 e3 dd 72 bd c4 64 ad 28 5b f5 c5 59 37 9d d6 3a fd 2e 64 7e b9 2b 99 49 2b 24 f4 b3 03 f3 88 5c 3b e7 5c 28 0e a7 db 59 9b 2f 24 ba 64 e4 59 5e 10 bf 18 38 90 d3 86 93 15 04 9c cf f4 7a 2a 1c 38 88 43 32 d8 12 ea 8d 54 08 68 40 bc 79 f9 60 b5 5b f6 72 45 69 1d da c7 fb 36 48 41 90 ba c4 dd 8c 62 af 3c c9 cf 83 9f 4e a4 11 94 94 ea 89 06 a4 dc 23 77 09 73 4d f5 56 f6 9f 65 Data Ascii: f^]Kg`d8$b"MHYJ.%s2kVIfp0(@hsO}PdJ_OjJ%+Rn6jrd([Y7:.d~+I+$\;\(Y/$dY^8z*8C2Th@y`[rEi6HAb<N#wsMVe
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: af 75 c0 1f 40 1b 4f 51 a2 bf cb ff 3b fd ef f4 3f 0f c3 fc 9e 9f 9d 4f f6 ff 17 db 7f f0 17 5d f9 f8 f7 e1 dd 0d 6b d5 b2 cf c7 fd df 17 c5 7b 0e 2d 41 ca 1e 1c c7 c7 fd 1d 17 d1 f8 8f f7 7f db fb 9c fc 9d 2f 76 ec e6 5a ba a7 e9 de b0 1c 4b f3 fe 6d 47 f8 f6 c1 fd 1c e5 fa 6e a0 f4 5f 6a 7e 3f e0 fc 5e 9b df b3 f1 b9 55 d1 74 d7 51 fa bf a2 f5 df 33 e8 bd 8e f7 fe d6 eb bd 53 cb 2b fb 2b ea e5 95 66 00 00 00 00 3d f4 7b 78 43 87 df fa e7 3b 1b 80 73 ef 75 77 d6 31 4b c1 40 47 26 88 db 99 83 62 87 24 53 99 77 7a da 51 e2 57 3c 76 e2 5d 4d 75 5f a6 8c d2 ee c2 1c 9d 18 b8 50 95 21 d3 cb d5 cb 68 5b 8d 85 81 5a e4 75 fa 74 d8 49 12 d4 88 be 76 9b 94 2a 57 af 91 ef a5 f7 7b 60 7e 69 de b3 4c 9c 46 77 dd 53 95 a7 0c 6e 78 e9 bf a9 11 59 e7 5f 89 9a fe 72 26 Data Ascii: u@OQ;?O]k{-A/vZKmGn_j~?^UtQ3S++f={xC;suw1K@G&b$SwzQW<v]Mu_P!h[ZutIv*W{`~iLFwSnxY_r&
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: ff ac 8c 54 ae ec 91 94 9a 88 9b fb 02 f1 7a d9 54 63 ff b4 85 fd b9 bc bd d3 01 37 40 16 3c 01 9c cb dc b3 e9 01 e7 97 a6 c5 84 73 ca 8b ad f7 13 f4 f1 30 c5 27 b1 fe 84 21 c1 9a 9a ec 14 6c 85 57 84 4d 6d e1 cc 0c 83 9b e0 c3 39 42 d9 f8 ff 64 d8 75 5f b0 f7 d3 87 65 ea 80 49 c9 1d a1 53 6c 6d fb 30 c3 0f e2 46 43 40 3c a8 5c 67 8d c7 af 82 f0 bf 85 3f fe 83 70 74 a9 12 0b 9a 30 ba d9 37 5f f9 fe c0 7c a8 c1 34 2f 72 41 64 a0 e4 46 ff 7d 99 cc 1c 84 f1 18 35 49 b7 02 69 a7 de d6 84 78 cf ab 90 ab b7 5d d5 34 49 9a 77 b9 2a d5 9f 62 2a 74 0c c3 cd cb 40 de 89 80 5f 01 d5 59 0d de af 21 4d 6a 8b c2 17 b3 1f d8 f9 92 1a 68 7c ce 28 0c 2c 79 69 76 f8 ca ff b3 11 bd 0b 43 c9 e8 60 b4 5c 48 62 47 d8 24 49 36 50 58 dc ee 86 d3 bc 09 30 ea b1 05 f6 27 92 da e1 Data Ascii: TzTc7@<s0'!lWMm9Bdu_eISlm0FC@<\g?pt07_\|4/rAdF}5Iix]4Iwbt@_Y!Mjh\|(,yivC`\HbG$I6PX0'
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 7a 55 cc df 1d 27 33 50 72 5b cc 6b 8b fa 91 d2 f8 06 92 a9 5c 58 96 be a9 62 a8 0d 2c 3c bf ab aa 51 1b 13 db 2d 36 60 74 0e 52 a8 f0 32 f2 59 09 25 2f 44 d8 1b 82 bc 64 fd f9 16 5b 0e 66 65 04 ab 48 e0 ab 7b 3a 66 ed 42 19 82 f5 e9 45 19 62 90 6e e7 d5 74 77 86 23 80 0b 84 f7 2c bd 35 f0 48 02 46 35 39 29 83 56 95 78 49 8b 56 4c 82 c2 ef e5 25 fe d1 b2 bf 9c ae 4f fc 90 f6 cf d8 cb f4 b9 f8 31 88 78 ba 33 f8 97 4b b3 c7 dd 22 a0 ce be 5b 87 2c b7 d2 06 56 f1 78 ae cd a8 89 67 c8 60 94 60 55 d2 79 c7 b8 1b 37 3b 14 0f 87 39 0e 9c 45 9a f2 d5 7f 03 ba 76 d8 d4 c9 3f 2b 22 b4 c3 ef f8 7d b1 78 02 ca 8f e5 a6 ff c6 0e 9c fb 25 4a 2f c4 6d ff 60 62 ff 27 79 88 06 6a 3b 43 22 0c 5a b0 69 58 d9 34 b1 06 3e c4 3d 3a 21 f8 6a 1a e3 e1 c7 15 15 8c d4 c9 54 3b 36 Data Ascii: zU'3Pr[k\Xb,<Q-6`tR2Y%/Dd[feH{:fBEbntw#,5HF59)VxIVL%O1x3K"[,Vxg``Uy7;9Ev?+"}x%J/m`b'yj;C"ZiX4>=:!jT;6
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 62 37 3f 9e a8 13 5c b8 02 cf 58 cd 12 a6 23 09 58 b4 e4 89 c8 c7 87 c8 ae 62 62 9b c0 b6 bb ce 2d 58 4c da 28 62 b4 8c 42 14 86 e3 c6 c1 c5 d6 2e 05 59 3a 47 3d 53 51 6e f0 3c 50 a0 64 0a 92 18 75 71 31 0d aa a0 6d 97 3e f2 86 58 e7 96 dd 25 e3 94 7c 6e f7 b4 a2 c8 33 72 94 cd 60 78 9c be 57 a9 36 f2 72 ca 3f 5d 56 eb 05 25 27 a6 ab af ec 0b 85 e4 c4 ea 4e ca 37 22 c9 2f 6e d5 14 30 e0 b8 2f 43 8c 00 bb 00 36 88 a9 9c 74 b6 1a 82 6d d1 8b 8b ed 49 36 d3 11 32 40 57 1b 60 0d f4 d4 67 fe 9c 95 b3 37 7d 96 35 79 44 3b bf d5 c4 85 ba cb 7e e5 a9 01 74 04 a6 89 c0 69 65 de bd 79 3d 99 65 b0 68 f7 08 72 f7 3d cc f3 04 16 8f 2f f4 f1 0a da 68 9f 49 72 3d e3 e4 52 e6 3b aa 5f 6d 3a 44 1c 83 c7 e7 2f 64 6f 59 6a f5 1f 43 ac 74 9d 86 f7 96 e6 85 86 34 1c 62 46 5e Data Ascii: b7?\X#Xbb-XL(bB.Y:G=SQn<Pduq1m>X%\|n3r`xW6r?]V%'N7"/n0/C6tmI62@W`g7}5yD;~tiey=ehr=/hIr=R;_m:D/doYjCt4bF^
2024-05-15 22:37:00 UTC	7952	IN	Data Raw: 18 13 bf 46 d5 b2 57 b6 3a ef 05 f5 ef 78 5e 07 70 12 73 90 07 d6 85 bb 81 12 e2 d6 a6 43 f3 95 8e a6 65 e1 c8 94 15 0c 10 e4 e6 08 e5 d5 5b aa 61 e7 65 56 b2 92 95 3f d7 f9 0b 57 8d 41 cb 2b c2 cf 6d 6e 02 5a 9b 24 72 92 11 45 19 5e c6 56 c0 76 6a 58 5a 75 7c 60 48 d5 f0 d9 a2 58 ef 26 87 25 bb 8a cd d1 30 54 65 6b d0 60 1d 40 84 c0 82 6f 30 51 e6 28 3f 77 f2 6c a9 2f 24 3e 61 e8 14 44 dd 20 e1 1c c9 07 6e 84 90 a3 ab 49 a8 a9 d9 02 48 25 49 36 61 9d 7c c1 20 35 92 3b 5e d3 46 d9 1c a6 22 32 c4 33 50 f5 a4 bd a3 8e 89 7a c1 20 80 39 ee c5 38 18 08 3d 9f 2f 1e ea 59 9d 6f 55 47 44 a5 0e c9 d0 56 8f 82 0e 79 b0 b5 35 90 c7 45 70 65 68 c6 ff ed 5a 51 98 20 e2 a5 09 44 4e c1 32 8b 7e de ee 9f 29 e4 99 c2 e1 93 f3 19 e6 f4 d1 4e eb c9 fb 40 8c 1b 24 73 dc 39 Data Ascii: FW:x^psCe[aeV?WA+mnZ$rE^VvjXZu\|`HX&%0Tek`@o0Q(?wl/$>aD nIH%I6a\| 5;^F"23Pz 98=/YoUGDVy5EpehZQ DN2~)N@$s9
2024-05-15 22:37:00 UTC	13768	IN	Data Raw: 90 78 72 f2 51 67 ee 97 aa bc 2a 96 65 ce f1 e9 19 a4 7d 7a 6d 18 42 d0 08 c1 2b 99 84 d5 dc c8 d6 1d 5f a8 af bd 94 b0 89 ba a3 ce 76 e9 fe 0d f4 20 33 ef c6 77 39 fa 70 ca 34 26 4f b8 42 96 d9 b5 f8 cf 94 6b a5 85 48 40 db fc 18 e8 03 65 07 25 c0 85 9f 27 b2 44 77 82 d8 aa 54 29 cd 57 2b 1d e8 03 d8 f0 f7 41 31 81 25 e9 4d e9 82 bf 0a ce 79 02 60 c6 84 50 a0 d7 1c e7 39 46 da bf d4 bb 80 48 27 8c 4f 77 34 76 8e cc e1 ae a0 a1 5d 3c 11 98 73 cc ab 79 52 f2 99 27 d6 70 7d 89 97 ab f4 82 41 4b c4 3b a4 d5 8b 2e 71 22 7e 95 2b 20 26 64 24 18 5e 24 44 38 9a 91 dc 26 7c d6 64 8b 90 ee 1d e0 1c 94 da b8 db 74 a1 90 e8 11 31 d9 0d b7 cc ac b5 c5 d5 62 01 b3 29 ef 25 ec c2 3c 49 7d cc b2 97 84 51 27 e7 73 00 e8 7d 01 0f ec 40 9b 92 9b b1 7c 3a c6 44 e6 2c 01 2d Data Ascii: xrQg*e}zmB+_v 3w9p4&OBkH@e%'DwT)W+A1%My`P9FH'Ow4v]<syR'p}AK;.q"~+ &d$^$D8&\|dt1b)%<I}Q's}@\|:D,-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50020	23.219.3.153	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	397	OUT	GET /public/images/v6/icon_platform_linux_dark.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1360 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-550" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	1360	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 01 fa 8e 2d 9b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR-tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50021	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	660	OUT	GET /steam/clusters/sale_autumn2019_assets/54b5034d397baccb93181cc6/deck_banner_animated_webm_mobile_english.webm?t=1713912919 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://gtm.you1.cn/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-05-15 22:36:59 UTC	283	IN	HTTP/1.1 206 Partial Content Server: nginx Content-Type: video/webm Last-Modified: Tue, 23 Apr 2024 13:38:25 GMT ETag: "6627b9d1-7ccaf" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Content-Range: bytes 0-511150/511151 Content-Length: 511151 Connection: close
2024-05-15 22:36:59 UTC	16101	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 07 cc 7f 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 f0 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 4c 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 07 cc 69 ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 ca 2a d7 b1 83 0f 42 40 4d 80 8d 4c 61 76 66 35 39 2e 32 37 2e 31 30 30 57 41 9a 48 61 6e 64 42 72 61 6b 65 20 31 2e 36 2e 31 Data Ascii: EBBBBBwebmBBSgMtMSIfSMSTkSMSTgSLMSSkSiXIf*B@MLavf59.27.100WAHandBrake 1.6.1
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 5e cf ad 94 7c 1c d2 eb 0b a9 61 17 16 6c 39 d4 02 3c 6a d0 6f 8b 4d a7 26 51 1c 8d e9 6e 21 98 43 29 0d cb 34 21 1a d7 41 1e ec 72 b9 e4 a7 37 ec 20 b5 5b 94 88 81 07 02 ff 3b 2c f4 8c f4 97 13 43 74 e6 6d 61 f8 56 54 b9 32 98 63 ba 36 f7 a2 fd fe 19 45 d6 26 12 35 37 7e bc fc b2 05 41 41 47 38 a9 44 0e ef 6c 2e 43 1b 4e 08 78 c4 eb 96 dd 7e 8f 53 09 c6 57 d2 c9 99 38 37 76 07 aa e1 2f 2d 05 d9 9f 6e dc 64 e8 96 05 8e 0f ad 72 7f a0 0f e3 93 d5 f3 21 1a e8 a8 81 07 76 af b1 c0 79 39 d7 b6 36 3f 12 a8 29 95 fe 40 91 f3 7d 15 80 e5 d3 a2 a3 92 b0 b8 44 7b 26 17 6e 2f 22 a7 93 d9 5e 8c 56 e1 40 6d d6 e5 81 a5 98 81 7d 79 e0 53 fc 8e 38 4d 89 4b ba b5 a0 50 6a fc 34 6c 52 ac 9c d5 e9 46 1e af 93 50 7e 71 e0 eb 56 52 7e aa 90 64 f7 ff e2 f4 89 40 ae f1 a9 5c Data Ascii: ^\|al9<joM&Qn!C)4!Ar7 [;,CtmaVT2c6E&57~AAG8Dl.CNx~SW87v/-ndr!vy96?)@}D{&n/"^V@m}yS8MKPj4lRFP~qVR~d@\
2024-05-15 22:36:59 UTC	2242	IN	Data Raw: c2 60 9b c3 57 12 a9 b9 3f 72 6c 25 ff 44 31 07 59 66 62 35 08 fc 67 53 6f fc ba d2 90 d6 5a f1 39 e4 0c cf 44 8a 85 bc a3 d6 0b ca 26 30 db 63 d0 d4 03 68 df 69 84 07 40 d5 72 76 35 14 3a 5a 69 d0 8d 45 d6 81 a5 40 14 1e 0d 05 59 00 a3 4a 57 81 00 fa 00 86 00 40 92 f0 e1 2c 04 00 14 65 2f ba c3 be c0 0e 78 00 00 00 00 09 76 7f ae e1 9b 28 64 c1 81 3c 10 fd c5 ae 82 d7 56 84 d4 bb 3d ff fb d9 f8 64 2e dc a4 0e 0f 7c 81 e2 87 29 80 57 15 13 7a 0f 6f 32 de 9e 3f 09 4a bc 5a 19 1f d1 90 78 af cf ee a8 d5 a4 ae 5c a6 a6 81 3f 5d b1 db ef 00 db 15 36 32 a1 d0 a9 de 3f be e6 72 f5 15 6a 42 47 c0 91 ea 3f 04 13 6e 9a fb 1e ba a1 8f d3 64 01 6e 8b c7 37 eb eb 75 06 ea 2d 81 1b 32 67 3d a3 f2 87 03 54 f9 69 15 4b 11 0e 10 21 e7 e3 4e 25 81 db 82 56 41 a1 4f 0a 12 Data Ascii: `W?rl%D1Yfb5gSoZ9D&0chi@rv5:ZiE@YJW@,e/xv(d<V=d.\|)Wzo2?JZx\?]62?rjBG?ndn7u-2g=TiK!N%VAO
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: ed 31 94 41 06 4a 06 a3 b7 12 41 87 58 ad ac 99 c2 2e bc 6b ed a1 74 68 40 f2 a4 be a5 90 25 99 62 c1 fc 41 f5 b2 e8 60 ac b4 7c 79 18 c9 c0 6d 0f 99 50 97 64 ac 10 13 a2 87 aa af 6f 46 a0 b9 6d 8a 63 9e 39 db e3 e7 25 9e 24 57 bf 13 27 d8 cf ee 22 a0 24 4c 7e 50 f1 ab 31 c8 91 be bb 48 29 a1 62 4e 8f 6c 65 d0 1e ff be 5b a4 83 33 cf 3b 5d f9 fb 4a 55 8d 96 df c4 5e ee 50 3d c2 ab d2 af f2 e1 a4 6f 7e 7c 6e f4 8f 05 63 b6 56 fc a1 2e 15 29 a5 ea a1 a2 d6 db 5c 38 33 43 ef 45 bb e7 0b 18 03 bc e0 88 f3 75 1a d3 a4 22 b6 71 fe 19 3b 06 b0 36 c7 e9 62 5e 4d ac 4c 71 f4 4f 65 7e 50 af c0 13 d0 b1 87 57 5d 86 a1 8d 88 7e 44 3d b8 74 e7 6e 94 b2 9f a3 00 be 91 74 eb 1b 3d 8b 4b f8 7b 85 79 6c 8c 9b bd de a3 6e 58 f6 c2 6b 72 fd ce be db 27 f2 bb 58 ae cd 36 13 Data Ascii: 1AJAX.kth@%bA`\|ymPdoFmc9%$W'"$L~P1H)bNle[3;]JU^P=o~\|ncV.)\83CEu"q;6b^MLqOe~PW]~D=tnt=K{ylnXkr'X6
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: e8 b9 0a 88 6c 36 be 21 4b be c1 aa 43 b3 f0 cb 02 a9 8c eb 4c 07 88 9c 62 6f e5 8b 18 40 73 96 1c 03 af 9f 38 24 41 5d e2 0c c5 5d d7 30 77 40 53 36 73 92 9b 31 b0 a2 c0 84 54 35 3c ee 6d d9 64 93 0f 28 e5 c9 df 11 07 d0 1e 09 2b fb d5 55 81 99 0e 52 79 bf 1c e1 4e 11 81 7a bb 62 cb 13 26 2f 99 f2 65 bd fb 5c 9b 34 a4 e3 33 de 5d c5 ac 8f f5 01 3b 11 52 0b 4b d3 af 8b 3e 31 86 ca 3c 9f 23 7e 21 a1 fa 10 04 3e e4 14 a3 93 55 b5 78 72 7f b1 2a 09 8d 4b d9 19 e4 72 76 7e 45 38 3f 25 d0 8d f1 a0 e5 de bb ac db bb 92 48 a8 e4 46 b3 16 20 13 f2 b4 e1 f2 f5 6f 75 4e 51 2d 4a 38 99 81 2a 7a 90 97 7b 46 dc 84 0f 9e f1 83 f3 60 bf e3 28 db 91 b6 31 3d ba d3 56 d2 97 74 2b a4 87 08 68 bb 16 8c 88 70 81 a7 96 89 55 58 6c be 22 1f 12 39 eb a8 72 e2 6b c1 c4 e4 f8 40 Data Ascii: l6!KCLbo@s8$A]]0w@S6s1T5<md(+URyNzb&/e\43];RK>1<#~!>UxrKrv~E8?%HF ouNQ-J8z{F`(1=Vt+hpUXl"9rk@
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: c5 89 04 60 69 8c cf 7e c5 b3 f4 f5 a1 f6 6d 8a cd fe 31 64 61 f4 a9 95 cd 82 6a 97 36 71 7a 00 15 99 8a 72 3b 56 fe 6d 59 a4 06 b7 b4 b5 85 a7 b6 a6 b6 39 0b d7 ce 05 3a 2b 0b f7 e3 97 cc a9 10 12 eb 60 78 e3 fb 9b a9 d1 10 ad c8 d7 94 28 b6 9e 6e 6d 8a 09 dc 9d 24 3e 50 4f 68 30 5e e7 52 84 ba 16 6d 2d 21 f6 b1 f5 a8 c7 0e 29 db f9 86 74 86 8d 0d 14 13 68 a8 91 69 e8 d0 6e 1b fc af 4c 70 30 3d aa c5 3e 08 f6 0c 75 61 ef fc c4 8e 92 db c3 e5 a2 15 e8 a4 00 1a fd 6f e5 f0 44 ae 77 8e bf 79 51 88 17 c7 3a fe e6 b4 d0 56 66 a8 8e 4b 4f 90 33 5c cb b0 a4 cf 12 32 6e bb 4c 59 63 15 e8 fe 54 28 0d 62 ba f3 8e 98 94 97 5d 3e 08 46 b4 7c ee d6 02 7c 3f c8 1a ac da fa e5 53 7c dc 70 5b f2 ff 72 ee cc 2d 48 6f 6a db 6e ec c8 e0 86 1c dd 19 36 0a 74 63 a1 45 16 f0 Data Ascii: `i~m1daj6qzr;VmY9:+`x(nm$>POh0^Rm-!)thinLp0=>uaoDwyQ:VfKO3\2nLYcT(b]>F\|\|?S\|p[r-Hojn6tcE
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: ba e7 3b 88 0f 2d 82 da 47 1c 5c c1 0f fd 0e 10 40 bb a9 03 99 00 d5 e8 5c 53 e8 75 ee d9 b6 59 b1 5b 30 20 51 4a e5 fc 14 57 3f 7d 6b b5 9c 8f cb bf 28 2a 7f 82 00 46 43 ed 5e a1 a1 37 67 9e 0f ae 4d ed 4a 20 3f 37 a7 89 f9 47 00 03 c0 8b ae 8d c5 08 b4 ee ee be d8 1a b5 b4 f1 65 1a 40 50 0c 7e fa e1 6c 9b e7 e9 f5 66 0a ca 6b f6 60 cd ad e0 f2 e1 f0 f9 23 ec 8f 07 28 4c 14 2d d4 9c b5 06 17 a8 9f ad be c0 00 7b 5b 5a a9 6e 1f 57 39 a3 cd 5d 22 bf 2d 41 47 fd 69 aa 5b 55 a1 ef 3f 84 2b b3 7b 64 e0 49 52 ba db ae fb 50 55 73 6e 40 91 37 49 b7 50 c4 4d c7 1b 37 50 44 45 2a 9d a1 75 83 cc c5 c5 a4 86 77 18 41 91 82 84 cd 9c 09 3e d1 2a 7f bc 18 76 84 d6 4f b0 74 c5 e6 b6 f7 97 12 d4 d0 f8 00 f3 c8 8e 07 13 f3 e4 9c 76 b2 45 66 9c b5 69 1f c5 85 1f 9a 4e 7b Data Ascii: ;-G\@\SuY[0 QJW?}k(FC^7gMJ ?7Ge@P~lfk`#(L-{[ZnW9]"-AGi[U?+{dIRPUsn@7IPM7PDEuwA>*vOtvEfiN{
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 02 42 b0 b2 49 1e 79 42 66 57 16 59 76 0d 71 eb 8c fe 67 d1 80 1a 36 4f 09 22 e9 43 8f c7 94 58 cc 33 f6 01 e2 a2 a3 fc 8e 08 21 bf 69 1a 4f 56 af 5a cc ea 6d 43 0c 65 be b2 cb 08 f4 2d 60 56 42 52 73 cb e7 23 e7 60 75 01 a6 80 41 d6 8d 9a 39 c8 80 64 b0 17 42 16 d9 3c 9d 93 c9 80 21 de e7 77 5b be 3d 9c 73 13 63 84 d8 ae 85 d0 8f 9e d8 2f f6 e1 2e 5a c2 c6 64 7b e9 f0 cf 13 92 f2 44 62 12 af f3 bf b4 a6 65 6d 48 65 25 e4 13 2d 10 51 f9 d2 64 c8 7c 7b 06 63 08 77 0d 76 63 fc 15 61 34 23 dc 6d 9a 90 b2 d2 0d 51 81 a7 8c df c8 ac e7 d7 a3 e1 f7 bd 6c d2 7e 31 7d 11 04 8b 40 b2 6b f6 47 a5 59 7f 8d ab 76 d2 e8 2a a3 9f c1 d8 87 37 71 10 57 a4 52 70 d5 0c 25 db 7b 20 0f 15 ad 66 44 a1 fa ee 1b e6 9b 0c e6 3a 6c f6 6c 68 69 07 23 f3 28 c9 2a 9c d3 b1 d4 9f e3 Data Ascii: BIyBfWYvqg6O"CX3!iOVZmCe-`VBRs#`uA9dB<!w[=sc/.Zd{DbemHe%-Qd\|{cwvca4#mQl~1}@kGYv7qWRp%{ fD:llhi#(
2024-05-15 22:36:59 UTC	7952	IN	Data Raw: 52 94 08 62 3f 2d 56 66 6b cb d8 38 c1 c1 b4 72 4e ce 73 ba 1f 82 c0 d2 98 a4 5f 8f 4d 98 db a4 dc 3e 69 f8 9c 21 c4 b3 94 25 5f f8 b8 d7 37 5c 4c 0e 95 ec 6f 47 63 6e c1 24 40 d4 b8 a0 97 82 f1 1a c5 24 68 a6 7b dd 28 53 1b 64 1a 84 33 5f 7b c2 d8 c3 03 b2 30 70 4d ac 0c a1 50 74 3f 7c ee 56 6a f0 0f af d3 3a b8 50 41 36 80 d1 c4 dc 8b d8 f0 ea c0 1e e3 8c 16 82 47 00 9f 1c df 98 64 25 7b fe 55 8e 32 4b 98 b2 d7 5b 67 a4 a8 33 01 d2 68 f0 c9 e1 df 4b 86 32 ac d2 fa e8 fe 76 09 8c ba 52 40 24 54 28 56 7a df f9 30 0b 6c 2a 1c 02 19 fb 77 f0 cb c4 77 3e 26 0c c7 67 98 2d 17 4b 55 0c e6 6c 10 7b 01 80 f6 ff a0 36 69 3e 47 d5 57 14 8d 2a a5 f4 2e c5 a0 16 af 9b ec 9b eb fd b0 02 2f 81 31 00 90 ef 85 de 99 ff 86 33 f8 40 a6 0e f9 64 cd 17 ea 89 33 75 d1 8c 72 Data Ascii: Rb?-Vfk8rNs_M>i!%_7\LoGcn$@$h{(Sd3_{0pMPt?\|Vj:PA6Gd%{U2K[g3hK2vR@$T(Vz0lww>&g-KUl{6i>GW./13@d3ur
2024-05-15 22:37:00 UTC	14905	IN	Data Raw: 6b a6 5f 3e 94 fc 6b cf cc d7 f2 90 c3 67 a5 52 e2 e0 05 4e 30 74 bf 6f 68 3f 34 38 e1 3a 73 b5 57 4d 64 20 c6 db 09 c7 fc 00 a3 49 59 81 04 66 00 86 00 40 92 f0 d1 2c 04 00 1c 68 bf 07 01 99 cb 47 8e 55 51 cf c0 00 00 00 00 08 7b 7e 14 a1 df 95 7a 01 be 09 7a f3 c6 2f 8d 71 c4 22 ff 3e 57 a0 42 00 84 4b 7f 71 dd be f2 97 f4 d1 bb c4 d1 dc 66 da 9c a9 27 bd a7 84 50 77 1c b3 ef 65 2e 59 16 38 0a 0a 0a bb 3b b1 8e e5 4b 82 0d 08 5f ae 83 8a c7 17 2c 77 1e b0 13 4c 4d ca c9 4d 9a bb 21 ba 3a 2b 10 2e 1b 06 ba 0b cc ab 54 3c 6e 31 5b d3 de 4a 07 ce f5 79 e0 d1 a1 9c 2f 5b 40 05 49 f6 cb 6a d9 d5 b5 de 42 15 e2 4f db 97 43 24 27 0b e4 14 76 1d c5 bf a3 b2 1b d0 67 1c 36 79 f6 52 53 cb 72 c0 59 69 1a 00 83 46 a8 48 39 4e bf 0c 20 e0 12 a9 49 18 9b b1 5c d3 36 Data Ascii: k_>kgRN0toh?48:sWMd IYf@,hGUQ{~zz/q">WBKqf'Pwe.Y8;K_,wLMM!:+.T<n1[Jy/[@IjBOC$'vg6yRSrYiFH9N I\6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50022	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	627	OUT	GET /steam/subs/94174/header_ratio.jpg?t=1476893662 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 40410 Last-Modified: Wed, 19 Oct 2016 16:14:19 GMT ETag: "58079bdb-9dda" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	16154	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 05 03 04 06 07 08 02 09 01 00 0a ff c4 00 4f 10 00 02 01 03 03 03 02 04 03 06 03 04 07 04 08 07 01 02 03 04 05 11 00 06 21 07 12 31 13 41 08 22 51 61 14 32 71 09 15 23 42 Data Ascii: JFIFHHCCO!1A"Qa2q#B
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: f9 d6 8a 34 26 ca 62 b6 68 3b cf 68 01 88 c3 7d cf b9 fd 75 64 9a 07 e0 fa ef 4b 41 b8 ee 30 4c ea 93 d4 d3 18 e2 66 5c 80 47 2b 93 ac e7 c8 a4 58 fd 72 b6 6e 7e b5 d8 a1 b1 ed 6a 37 ac ae 81 96 a2 58 5a 64 86 38 94 70 18 c8 ec 14 8f 38 1c 9d 44 6a 3b b1 bd c7 ff 00 0f 5f 06 3b 83 65 75 13 6f df 37 55 f2 cf 2d 9e d9 3c 77 76 a7 b6 b3 4f 2d 4d 62 71 0c 2d de a0 08 d0 92 e6 41 9c b7 81 9c 30 25 91 35 48 69 1b de 96 b4 55 1e ee ec f3 92 73 ef ae 62 c2 b1 d6 a4 48 09 70 07 d3 40 c1 37 bd d3 0c 13 76 17 1f 2a 8c 73 a1 21 00 ee 3b e2 0f c3 53 0f 50 10 10 e3 9f 1c e9 d0 ac 15 fe 3a 02 29 82 30 c3 80 1b f4 cf b6 9d 00 36 eb bc 63 4a 62 cd 26 31 a2 80 81 de 3a 8f 05 3b 10 25 03 3f 53 ab a1 01 47 53 e1 42 ec 26 c8 cf 3a 28 07 49 d5 38 fb 23 ed 90 1f eb e7 45 01 27 Data Ascii: 4&bh;h}udKA0Lf\G+Xrn~j7XZd8p8Dj;_;euo7U-<wvO-Mbq-A0%5HiUsbHp@7v*s!;SP:)06cJb&1:;%?SGSB&:(I8#E'
2024-05-15 22:36:59 UTC	1776	IN	Data Raw: 18 4e 29 4a 57 4e b7 bd fa 9e 26 6c d9 31 e7 6d 3d 97 42 b0 e8 45 a2 54 eb be d7 da db 96 d6 8f 34 37 46 a3 af a0 ae 89 64 52 54 36 55 d5 81 04 64 7e 87 8d 7c e7 a7 e8 d4 3d 46 38 b3 46 e9 bd 9f c8 f4 73 e5 bd 3b 9c 18 db 70 d2 c7 4b d4 0d d7 4d 4f 04 54 f4 f0 5d aa e2 86 28 94 2a 46 8b 33 05 50 a3 80 00 00 60 6b e7 bd 56 11 86 a7 24 62 a9 71 3f dc ef d3 49 bc 71 6f b2 08 50 2b aa 8e 1b c7 b2 ff 00 5f f7 6b e7 32 45 f6 3d 05 22 67 41 b7 2f 2e 80 9b 4d 71 ce 08 22 99 f2 7f 4e 3c 6a 1f a7 ea df 2c 32 fe 97 f4 27 db e2 5f 79 79 42 eb b5 af 42 72 bf b9 eb c0 f2 41 a5 71 8f d7 8d 4b f4 ed 65 7f 83 2f e9 7f 42 bd e3 0f e3 5e 50 c6 e3 63 b9 2c eb 02 db 6a fd 6c 64 86 81 86 3f 41 8e 75 87 b9 6a 93 e1 78 a5 f2 e1 7f 40 f6 d8 f9 f1 2a f9 83 65 db 97 35 ff 00 ea fa Data Ascii: N)JWN&l1m=BET47FdRT6Ud~\|=F8Fs;pKMOT](F3P`kV$bq?IqoP+_k2E="gA/.Mq"N<j,2'_yyBBrAqKe/B^Pc,jld?Aujx@e5
2024-05-15 22:36:59 UTC	6096	IN	Data Raw: dd 42 e9 70 a5 8f e6 73 4c f1 ba 89 30 39 08 3d 76 24 9f fb 97 3e 06 75 ef 45 7b 6d 07 0c 7e eb ff 00 bf b9 c7 7c 19 ed f5 33 24 53 3d 7f a3 4f 4f 1b d4 54 cc cb 1c 50 c4 a5 9d d8 9c 05 55 1c 92 49 c6 06 be 6a 38 64 e7 48 f4 5c 95 59 ab 3e 32 d4 6d 6b 7f 46 36 15 44 81 ef 7b 6b 6b 44 b7 0e cf 11 c9 22 c6 bd 9f d3 d1 63 8f a1 07 df 5e bf ac d4 31 e2 c2 f9 c5 7d 3e 87 2e 93 77 29 f7 65 0d 05 5e 63 20 37 b6 be 26 50 dc f6 13 2f ad cb 53 53 4d f0 49 d3 fa ba 49 5e 9e aa 9f 79 d4 4d 14 b0 b1 57 47 58 e5 2a ca 47 20 82 01 07 5f 62 e6 f1 fa 5e 29 27 bf 17 d4 f2 d2 e2 d4 c9 7e 45 d7 d3 4a 78 ba fb bd 3a 6f d5 bb 52 c4 bb 9e d1 5d 0d b7 78 d1 42 98 2c de 99 58 6b 00 fa 37 00 ff 00 41 fc 87 5e ae 95 43 5f 3c 7a d8 ff 00 34 76 97 8e 7f f7 fd 8e 5c ad e0 8c b0 be 4f Data Ascii: BpsL09=v$>uE{m~\|3$S=OOTPUIj8dH\Y>2mkF6D{kkD"c^1}>.w)e^c 7&P/SSMII^yMWGX*G _b^)'~EJx:oR]xB,Xk7A^C_<z4v\O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50023	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	628	OUT	GET /steam/subs/633707/header_ratio.jpg?t=1667324398 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 40161 Last-Modified: Tue, 01 Nov 2022 17:39:06 GMT ETag: "636159ba-9ce1" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	16154	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 00 02 05 06 07 08 01 03 04 09 ff c4 00 46 10 00 01 03 02 04 04 04 04 03 05 06 05 02 07 01 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 32 71 81 09 15 91 23 Data Ascii: JFIFCCF!1A"Qa2q#
2024-05-15 22:36:59 UTC	16384	IN	Data Raw: 7d 49 bf f0 e8 71 f3 bc 77 fe 65 f7 23 bb 27 fe 2a 2b 67 0b 78 29 48 e2 d7 8c ec e5 02 b5 19 6e d0 a9 d5 09 95 39 31 80 2b 4c 85 07 c0 6d ae f7 05 4b 49 3d 8a 52 47 7c 7d 0e 3e 72 79 5e 1b 09 41 fa 4d 24 bd c7 1c 30 96 26 3b bd 91 6b b8 f7 e2 a3 28 f8 74 93 4c a3 cc a6 c8 ab 55 5f 8a 97 5b a7 d3 52 94 08 ec dc a0 28 95 58 27 74 a8 25 29 1d 12 7e 5d 89 f9 9c 8f 0e c5 cf a7 34 e9 76 be d3 d1 c5 c7 8e 0d 23 39 13 30 e4 bf 18 dc 3b cc 90 a5 d3 9e 19 70 c8 4c 70 d3 cc 84 49 8e f7 25 2a 2e 6a 2a 23 98 95 ac 9d 43 62 00 bd c5 c1 bc 5c 3c 5e 13 8d 07 19 2b f8 32 14 a3 98 8b 4d 1e 51 e7 ac b5 23 29 e6 9a ce 5d 94 35 4a a5 4c 7a 0a dd 45 fc cb 6d 65 04 ff 00 fc ed 6f 5c 7e 97 96 c4 58 90 58 8b 66 ac f0 e5 1a 6e 22 b7 09 1e 31 b8 8d 93 5d 5a 16 da bf 3b 88 a3 a9 bb Data Ascii: }Iqwe#'+gx)Hn91+LmKI=RG\|}>ry^AM$0&;k(tLU_[R(X't%)~]4v#90;pLpI%.j*#Cb\<^+2MQ#)]5JLzEmeo\~XXfn"1]Z;
2024-05-15 22:36:59 UTC	1527	IN	Data Raw: 2f 4a 5a f9 ee 48 5c 66 8b 8a 5d ca ae 5c 32 01 2a b8 3e e6 f7 ee 31 ac 7c a1 c5 5e 87 e1 74 db af ca 89 79 15 eb 79 cf bf 79 a1 df 01 74 9a b4 87 a5 27 8a 3f 98 c9 75 1c f2 eb 91 92 b5 2d 46 fb ac f3 54 ae b7 3a ac 40 02 f8 17 94 33 82 51 f3 14 b6 df fa 29 e4 53 77 cf 6c d7 3f c0 c3 f4 a8 d1 29 c7 39 ce 10 fe 23 9c 84 a1 bb c6 07 48 49 79 29 2a b0 b0 ee 6c 6d b5 fa 61 2f 28 63 36 e5 2c 25 75 ed f0 d8 7f 82 69 57 30 ac df 81 96 91 4b 54 68 f9 fa a0 fc 61 20 ba 1b f8 34 a5 a5 3c 00 1a c5 9c 22 e3 a6 b2 2f 6b 01 8c 3f d7 db 97 37 99 57 b6 ff 00 d1 a7 e0 e9 7a c2 75 53 c1 9e 5b a8 bc 99 55 0e 24 3b 3e 6b cf 72 e4 4a 90 eb 7a 95 b8 ea 4b 84 ab 6b 9b 92 2d 60 00 df 6d a3 c7 71 a1 e8 c3 06 97 4f ba 21 e5 62 f7 91 b7 32 f8 13 aa d5 aa 0e 4e 56 73 7a 79 90 96 d5 Data Ascii: /JZH\f]\2>1\|^tyyyt'?u-FT:@3Q)Swl?)9#HIy)lma/(c6,%uiW0KTha 4<"/k?7WzuS[U$;>krJzKk-`mqO!b2NVszy
2024-05-15 22:36:59 UTC	6096	IN	Data Raw: 92 d8 2d ce d1 fd da ed 67 02 80 21 c6 94 02 fc c3 e4 50 20 d9 24 5a ed d5 13 43 5b 32 55 72 4e 4d a4 0c ab 39 86 18 9a 54 1d 7e 03 68 b3 c9 68 a9 c0 56 93 6f 37 53 6e d6 b9 1f 2e 16 89 50 f7 29 14 be 19 e5 dc b7 2a 62 32 ec b7 99 97 36 5b ed b1 26 7b 88 17 46 83 64 27 d1 24 91 f3 6e 4b 88 f4 c0 e4 de e2 a4 b6 21 9a 34 33 43 cc d3 e1 c8 91 c9 a9 a1 9e 62 64 bc bb 04 ab 50 d6 3b ea d4 82 af b9 18 d5 ea ac 85 a3 1e 94 3a dd 3a 3b 19 9a 3d 29 f7 25 c6 75 b7 1b 8c e3 c0 f3 5c 67 42 86 a2 2f e5 2a d4 85 11 da e4 7a 62 1a 7a 59 49 ee 43 19 c3 e3 22 72 e1 3e 0a 5b 49 d6 90 7b 9b 5a e3 ed 6f e3 8e 8c 3a dc c6 43 61 23 ae 35 64 9b 53 b7 6c 48 1d 09 50 b0 b6 d8 9a 2c 38 37 ee 7d 70 00 74 9b 03 73 72 47 6d f0 14 1d 0a 17 f2 8b ab b6 f8 9a 2c 09 2a ec 00 b7 6b 6d 81 Data Ascii: -g!P $ZC[2UrNM9T~hhVo7Sn.P)b26[&{Fd'$nK!43CbdP;::;=)%u\gB/zbzYIC"r>[I{Zo:Ca#5dSlHP,87}ptsrGm,*km

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50024	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	400	OUT	GET /steam/apps/1651560/capsule_184x69.jpg?t=1715609768 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 9500 Last-Modified: Mon, 13 May 2024 14:00:12 GMT ETag: "66421cec-251c" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=401927 Expires: Mon, 20 May 2024 14:15:46 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	9500	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 06 07 04 05 02 03 08 01 09 00 ff c4 00 3b 10 00 01 03 02 04 04 04 05 03 02 05 04 03 00 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 15 32 71 81 23 91 a1 Data Ascii: JFIFHHCCE;!1A"Qa2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50027	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	400	OUT	GET /steam/apps/1847150/capsule_184x69.jpg?t=1715747566 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 11504 Last-Modified: Tue, 07 May 2024 13:06:50 GMT ETag: "663a276a-2cf0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=539786 Expires: Wed, 22 May 2024 04:33:25 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	11504	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 09 03 00 01 ff c4 00 3b 10 00 01 03 03 03 03 03 02 04 05 01 07 05 00 00 00 01 02 03 04 05 06 11 07 12 21 00 13 31 08 22 41 14 51 15 32 61 71 09 16 23 42 81 Data Ascii: JFIFCCE;!1"AQ2aq#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50025	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	399	OUT	GET /steam/apps/427410/capsule_184x69.jpg?t=1714694871 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 8875 Last-Modified: Wed, 01 May 2024 22:11:22 GMT ETag: "6632be0a-22ab" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=451964 Expires: Tue, 21 May 2024 04:09:43 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	8875	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 02 03 01 00 00 00 00 00 00 00 00 00 00 06 07 05 08 03 04 00 02 09 01 ff c4 00 40 10 00 01 03 02 05 03 02 03 06 03 06 04 07 00 00 00 01 02 03 04 05 11 00 06 07 12 21 13 31 41 08 51 14 22 61 15 23 32 42 71 81 52 Data Ascii: JFIFCCE@!1AQ"a#2BqR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50026	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	413	OUT	GET /steam/apps/1158310/capsule_184x69_alt_assets_4.jpg?t=1715685390 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:36:59 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 7403 Last-Modified: Mon, 15 Apr 2024 14:43:57 GMT ETag: "661d3d2d-1ceb" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=477583 Expires: Tue, 21 May 2024 11:16:42 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:36:59 UTC	7403	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 00 01 09 ff c4 00 45 10 00 01 03 03 04 00 03 04 06 05 0b 01 09 00 00 00 01 02 03 04 05 06 11 00 07 12 21 13 31 41 08 14 22 51 15 23 32 61 71 b1 16 42 Data Ascii: JFIFCCEE!1A"Q#2aqB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50028	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:36:59 UTC	399	OUT	GET /steam/apps/359550/capsule_184x69.jpg?t=1713914116 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 5587 Last-Modified: Thu, 25 Aug 2022 13:25:49 GMT ETag: "6307785d-15d3" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=499660 Expires: Tue, 21 May 2024 17:24:39 GMT Date: Wed, 15 May 2024 22:36:59 GMT Connection: close
2024-05-15 22:37:00 UTC	5587	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 45 00 b8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 02 07 08 09 00 01 ff c4 00 3e 10 00 02 01 03 03 02 03 05 06 05 02 04 07 00 00 00 01 02 03 04 05 11 00 06 21 07 12 13 31 41 08 22 51 61 71 09 14 15 32 81 91 16 Data Ascii: JFIFCCE>!1A"Qaq2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50029	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	670	OUT	GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gtm.you1.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 122660 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1df24" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 df 1c 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 b7 ad 6e 29 00 00 01 6c 00 00 75 6a 47 53 55 42 e1 64 c1 db 00 00 76 d8 00 00 1b a4 4f 53 2f 32 74 d2 9d 02 00 00 92 7c 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 92 dc 00 00 05 8e 63 76 74 20 46 29 09 0f 00 01 cf 64 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d0 2c 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 cf 5c 00 00 00 08 67 6c 79 66 e0 8a ae 64 00 00 98 6c 00 01 01 b6 68 65 61 64 17 93 fb 41 00 01 9a 24 00 00 00 36 68 68 65 61 06 9e 06 2b 00 01 9a 5c 00 00 00 24 68 6d 74 78 76 c1 78 00 00 01 9a 80 00 00 0c e6 6c 6f 63 61 a7 f7 67 d6 00 01 a7 68 00 00 06 a6 6d 61 78 70 04 a0 0f 16 00 01 ae 10 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSn)lujGSUBdvOS/2t\|`cmapdcvt F)dfpgm6!,gasp\glyfdlheadA$6hhea+\$hmtxvxlocaghmaxp nam
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 01 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff db ff f7 00 02 00 00 00 03 00 00 00 04 00 01 00 00 00 00 00 00 00 00 ff ad ff bd 00 00 00 00 00 00 00 00 00 00 ff 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff eb ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-05-15 22:37:00 UTC	2634	IN	Data Raw: 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 Data Ascii:
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 02 c4 02 fd 02 fe 02 ff 02 fc 03 33 03 34 03 35 03 36 03 37 03 38 03 39 03 3a 03 3b 03 3c 03 3d 03 3e 03 3f 03 40 03 41 03 42 03 43 03 44 00 02 07 d4 00 14 02 a7 02 fb 03 20 03 21 03 22 03 23 03 24 03 25 03 26 03 27 03 28 03 29 03 2a 03 2b 03 2c 03 2d 03 2e 03 2f 03 30 03 31 00 01 07 c2 00 01 00 08 00 02 00 06 00 0c 01 74 00 02 00 fa 01 75 00 02 01 0f 00 02 07 ae 01 7e 01 78 01 79 01 7a 01 7b 01 7c 01 7d 01 7e 01 7f 01 80 01 81 01 82 01 83 01 84 01 85 01 86 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 Data Ascii: 3456789:;<=>?@ABCD !"#$%&'()*+,-./01tu~xyz{\|}~
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 33 2b 0d 04 05 07 0a 01 01 05 01 01 06 01 05 4c 00 02 00 07 05 02 07 69 00 03 03 04 61 00 04 04 53 4d 0a 08 02 05 05 01 61 00 01 01 51 4d 09 01 06 06 00 62 00 00 00 4d 00 4e 31 31 00 00 31 3c 31 3b 37 35 00 30 00 2f 25 24 24 24 2a 23 0b 0a 1c 2b 04 37 07 06 23 22 26 35 34 36 37 26 26 27 06 06 23 22 26 35 34 36 33 32 17 35 34 26 23 22 07 27 36 36 33 32 16 15 11 14 16 33 32 37 07 06 15 14 33 26 36 37 35 26 23 22 06 15 14 16 33 02 04 0c 05 13 16 26 2a 21 1d 1d 21 05 22 5c 38 48 5f 7a 5b 3e 46 4b 3a 4d 47 21 29 5d 3a 5f 63 12 14 0e 08 07 33 24 e2 5a 1a 51 31 3e 51 40 2d 9c 02 2b 07 28 21 1e 42 1f 03 23 24 27 2c 4c 47 50 4b 0e 4f 3e 3a 36 30 21 24 5d 5c fe fd 16 15 02 30 41 35 2a cd 2e 26 55 0d 2d 32 2d 2a 00 00 00 ff ff 00 30 ff f3 02 0d 02 f5 00 22 00 ba 00 Data Ascii: 3+LiaSMaQMbMN111<1;750/%$$$#+7#"&5467&&'#"&5463254&#"'66323273&675&#"3&!!"\8H_z[>FK:MG!)]:_c3$ZQ1>Q@-+(!B#$',LGPKO>:60!$]\0A5.&U-2-0"
2024-05-15 22:37:00 UTC	7952	IN	Data Raw: 49 fe d6 48 48 01 36 01 03 fd c7 f4 f4 02 39 fe fd 00 00 00 00 02 00 2a 00 00 02 40 02 39 00 13 00 17 00 36 40 33 08 06 02 00 0b 05 02 01 0a 00 01 67 00 0a 00 03 02 0a 03 67 09 01 07 07 2c 4d 04 01 02 02 2d 02 4e 17 16 15 14 13 12 11 11 11 11 11 11 11 11 10 0c 08 1f 2b 01 33 15 23 11 23 35 21 15 23 11 23 35 33 35 33 15 21 35 33 01 21 35 21 02 13 2d 2d 49 fe d6 48 2e 2e 48 01 2a 49 fe 8d 01 2a fe d6 01 d0 37 fe 67 f4 f4 01 99 37 69 69 69 fe fd 63 00 00 ff ff 00 58 00 00 02 13 02 f4 00 22 01 b4 00 00 01 07 03 38 01 d0 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 58 00 00 00 a1 02 39 00 03 00 13 40 10 00 00 00 2c 4d 00 01 01 2d 01 4e 11 10 02 08 18 2b 13 33 11 23 58 49 49 02 39 fd c7 ff ff 00 58 00 00 00 a1 02 39 00 02 01 b7 00 00 ff ff 00 49 00 00 00 Data Ascii: IHH69@96@3gg,M-N+3##5!##5353!53!5!--IH..HI*7g7iiicX"8--5+X9@,M-N+3#XII9X9I
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 00 00 01 c9 02 f2 00 22 02 2c 00 00 01 07 03 34 01 7d 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 02 00 36 01 85 01 5c 02 c8 00 20 00 2c 00 51 40 4e 17 01 03 04 16 01 02 03 10 01 07 02 27 26 02 05 07 05 01 00 05 05 4c 00 04 00 03 02 04 03 69 00 02 00 07 05 02 07 69 06 08 02 05 00 00 05 59 06 08 02 05 05 00 61 01 01 00 05 00 51 00 00 2a 28 24 22 00 20 00 1f 24 24 24 23 22 09 0b 1b 2b 01 07 06 23 22 27 06 06 23 22 26 35 34 36 33 32 17 35 34 26 23 22 07 27 36 36 33 32 16 15 15 14 33 26 16 33 32 36 37 35 26 23 22 06 15 01 5c 04 0f 13 2a 09 13 37 1b 2d 3b 46 3c 21 27 23 23 29 2c 13 11 3e 21 37 3c 17 de 20 1d 1a 2d 0e 26 19 25 2e 01 af 24 05 28 13 16 33 2a 30 2d 07 1a 26 21 16 25 0d 13 37 35 95 18 1c 1a 14 0e 3e 09 1c 1c 00 00 00 02 00 30 01 83 01 63 02 c8 00 Data Ascii: ",4}--5+6\ ,Q@N'&LiiYaQ($" $$$#"+#"'#"&5463254&#"'66323&32675&#"\7-;F<!'##),>!7< -&%.$(3*0-&!%75>0c
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 21 1a 2f 05 28 23 39 09 43 0c 07 06 0c 3f 12 3f 2a 9b 3e 8f 58 5a 3a 3c 1a 17 3b 3d 84 3e 92 30 35 15 0a 06 01 07 00 00 00 01 00 2c 00 00 02 5f 02 bc 00 18 00 39 40 36 18 01 01 00 01 4c 09 01 01 08 01 02 03 01 02 68 07 01 03 06 01 04 05 03 04 67 0a 01 00 00 48 4d 00 05 05 49 05 4e 17 16 15 14 21 11 11 11 11 12 11 11 10 0b 0a 1f 2b 01 33 03 33 15 23 07 15 33 15 23 15 23 35 23 35 33 35 27 23 35 33 03 33 13 02 0b 54 ce a2 c6 01 c7 c7 4a c9 c9 01 c8 a3 d0 5d bf 02 bc fe ac 3d 01 42 3d ab ab 3d 42 01 3d 01 54 fe b6 00 01 00 4b ff ae 01 b7 02 13 00 1e 00 5d 40 11 12 10 0d 03 03 02 1e 13 02 04 03 06 01 00 04 03 4c 4b b0 0e 50 58 40 1b 00 01 00 00 01 71 00 03 03 02 5f 00 02 02 4b 4d 00 04 04 00 61 00 00 00 49 00 4e 1b 40 1a 00 01 00 01 86 00 03 03 02 5f 00 02 02 Data Ascii: !/(#9C??*>XZ:<;=>05,_9@6LhgHMIN!+33#3##5#535'#533TJ]=B==B=TK]@LKPX@q_KMaIN@_
2024-05-15 22:37:00 UTC	7952	IN	Data Raw: 0b 66 0b 72 0b d0 0b dc 0b e8 0b fa 0c 06 0c 12 0c 1e 0c 2a 0c 96 0c a2 0c f0 0d 2a 0d 68 0d ba 0d f6 0e 02 0e 0e 0e 1a 0e 74 0e 80 0e 8c 0f 16 0f 22 0f 2e 0f aa 0f fe 10 1c 10 4e 10 5a 10 ae 10 ba 10 ec 10 f8 11 04 11 10 11 1c 11 7c 12 02 12 92 13 1e 13 88 13 94 13 a6 13 b2 14 06 14 12 14 1e 14 30 14 3c 14 48 14 54 14 60 14 aa 14 b6 14 c2 14 e2 15 0e 15 1a 15 26 15 82 15 94 15 c0 15 e4 15 f0 15 fc 16 4e 16 5a 16 6c 16 78 16 84 16 90 16 bc 16 c8 16 d4 16 e6 17 6a 17 76 17 82 17 8e 17 9e 17 aa 17 b6 17 c2 17 ce 17 da 17 e6 17 f6 18 02 18 0e 18 1a 18 26 18 32 18 3e 18 4a 18 56 18 dc 18 e8 18 f4 19 c0 1a 2e 1a 72 1a 7e 1a 8a 1b 04 1b 10 1b 1c 1b 88 1b e4 1b f0 1c 6e 1c c2 1c ce 1c da 1c e6 1c f2 1c fe 1d 0e 1d 1a 1d 26 1d 32 1d 3e 1d 4a 1d 56 1d 62 1d 6e 1d Data Ascii: fr**ht".NZ\|0<HT`&NZlxjv&2>JV.r~n&2>JVbn
2024-05-15 22:37:00 UTC	6096	IN	Data Raw: 7a 2e 73 63 09 7a 61 63 75 74 65 2e 73 63 09 7a 63 61 72 6f 6e 2e 73 63 0d 7a 64 6f 74 61 63 63 65 6e 74 2e 73 63 07 75 6e 69 30 33 39 34 07 75 6e 69 30 33 41 39 07 75 6e 69 30 33 42 43 08 7a 65 72 6f 2e 6f 73 66 07 6f 6e 65 2e 6f 73 66 07 74 77 6f 2e 6f 73 66 09 74 68 72 65 65 2e 6f 73 66 08 66 6f 75 72 2e 6f 73 66 08 66 69 76 65 2e 6f 73 66 07 73 69 78 2e 6f 73 66 09 73 65 76 65 6e 2e 6f 73 66 09 65 69 67 68 74 2e 6f 73 66 08 6e 69 6e 65 2e 6f 73 66 07 7a 65 72 6f 2e 74 66 06 6f 6e 65 2e 74 66 06 74 77 6f 2e 74 66 08 74 68 72 65 65 2e 74 66 07 66 6f 75 72 2e 74 66 07 66 69 76 65 2e 74 66 06 73 69 78 2e 74 66 08 73 65 76 65 6e 2e 74 66 08 65 69 67 68 74 2e 74 66 07 6e 69 6e 65 2e 74 66 09 7a 65 72 6f 2e 74 6f 73 66 08 6f 6e 65 2e 74 6f 73 66 08 74 77 6f Data Ascii: z.sczacute.sczcaron.sczdotaccent.scuni0394uni03A9uni03BCzero.osfone.osftwo.osfthree.osffour.osffive.osfsix.osfseven.osfeight.osfnine.osfzero.tfone.tftwo.tfthree.tffour.tffive.tfsix.tfseven.tfeight.tfnine.tfzero.tosfone.tosftwo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50030	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	669	OUT	GET /public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gtm.you1.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 118736 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1cfd0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 cf c8 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 22 a8 6a e1 00 00 01 6c 00 00 6a 86 47 53 55 42 e1 64 c1 db 00 00 6b f4 00 00 1b a4 4f 53 2f 32 74 0a 9a fe 00 00 87 98 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 87 f8 00 00 05 8e 63 76 74 20 45 b2 08 a6 00 01 c0 10 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 c0 d8 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 c0 08 00 00 00 08 67 6c 79 66 3b 39 02 90 00 00 8d 88 00 00 fd 54 68 65 61 64 17 7a fb 3b 00 01 8a dc 00 00 00 36 68 68 65 61 06 85 06 15 00 01 8b 14 00 00 00 24 68 6d 74 78 6a 34 80 77 00 01 8b 38 00 00 0c e6 6c 6f 63 61 69 6a 2a 56 00 01 98 20 00 00 06 a6 6d 61 78 70 04 9c 0f 17 00 01 9e c8 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOS"jljGSUBdkOS/2t`cmapdcvt Efpgm6!gaspglyf;9Theadz;6hhea$hmtxj4w8locaij*V maxp nam
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 00 00 12 b2 00 00 12 b8 00 00 12 c4 12 ca 12 d0 00 00 12 c4 12 ca 12 d6 00 00 12 c4 12 ca 12 dc 00 00 12 c4 12 ca 12 e2 00 00 12 c4 12 ca 12 e8 00 00 12 c4 12 ca 12 ee 00 00 12 f4 12 ca 12 e8 00 00 12 c4 12 ca 12 ee 00 00 12 c4 12 ca 12 fa 00 00 12 c4 12 ca 13 00 00 00 12 c4 12 ca 13 06 00 00 12 c4 12 ca 12 d0 00 00 12 f4 12 ca 12 d0 00 00 12 c4 12 ca 13 0c 00 00 12 c4 12 ca 13 12 00 00 12 c4 12 ca 13 18 00 00 12 c4 12 ca 12 d0 00 00 12 c4 12 ca 13 1e 00 00 13 24 00 00 13 2a 00 00 13 30 00 00 13 36 00 00 13 30 00 00 13 3c 00 00 13 30 00 00 13 42 00 00 13 30 00 00 13 48 00 00 13 4e 00 00 13 36 00 00 13 30 00 00 13 36 00 00 13 54 00 00 13 5a 00 00 13 54 00 00 13 5a 00 00 13 54 00 00 13 60 00 00 13 66 13 6c 13 72 00 00 13 78 13 6c 13 7e 00 00 13 66 13 6c 13 Data Ascii: $*060<0B0HN606TZTZT`flrxl~fl
2024-05-15 22:37:00 UTC	2782	IN	Data Raw: 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 ba 01 bb 01 bc 01 bd 01 be 01 bf 01 c0 01 c1 01 c3 01 c4 01 c5 01 c8 01 c9 01 ca 01 cb 01 cc 01 cd 01 ce 01 cf 01 d0 01 d1 01 d2 01 d3 01 d4 01 d5 01 d6 01 d7 01 d8 01 da 01 db 01 dc 01 dd 01 de 01 df 01 e0 01 e1 01 e2 01 e3 01 e4 01 e5 01 e6 01 e7 01 e8 01 e9 01 ea 01 eb 01 ec 01 ed 01 ee 01 ef 01 f0 01 f1 01 f2 01 f3 01 f4 01 f5 01 f6 01 f7 01 f8 01 f9 01 fa 01 fb 01 fd 01 fe 01 76 01 ac 01 ff 02 00 02 01 02 03 02 04 02 05 02 06 02 07 02 08 02 09 02 0a 02 Data Ascii: v
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 a6 00 00 00 00 00 00 00 00 00 00 03 9e 00 00 00 00 00 00 00 01 02 9d 02 c1 02 a4 02 ce 02 eb 02 ef 02 c2 02 a9 02 aa 02 a3 02 d5 02 99 02 b1 02 98 02 a5 02 9a 02 9b 02 dc 02 d9 02 db 02 9f 02 ee 00 02 00 1a 00 1b 00 21 00 25 00 37 00 38 00 3e 00 41 00 4f 00 52 00 54 00 5a 00 5b 00 61 00 7a 00 7c 00 7d 00 81 00 89 00 8e 00 a6 00 a7 00 ac 00 ad 00 b6 02 ad 02 a6 02 ae 02 e3 02 b5 03 15 00 ba 00 d2 00 d3 00 d9 00 dd 00 f0 00 f1 00 f7 00 fa 01 09 01 0d 01 0f 01 15 01 16 01 1c 01 35 01 37 01 38 01 3c 01 43 01 48 01 60 01 61 01 66 01 67 01 70 02 ab 02 f6 02 ac 02 e1 02 ca 02 9e 02 cc 02 d1 02 cd 02 d2 02 f7 02 f1 03 13 02 f2 02 30 02 bd 02 e2 02 b2 02 f3 03 1d 02 f5 02 df 02 7d 02 7e 03 16 02 e9 02 f0 02 a1 03 Data Ascii: !%78>AORTZ[az\|}578<CH`afgp0}~
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 2b 00 16 17 33 37 33 11 14 06 23 22 26 27 37 16 33 32 36 35 35 06 23 22 26 26 35 34 36 36 33 0e 02 15 14 16 33 32 36 37 11 26 26 23 01 5f 4f 1b 03 15 20 77 67 3c 65 24 1d 45 5c 4c 5f 47 61 43 6b 3f 49 74 41 32 59 35 63 50 2e 54 22 16 4a 32 02 18 1e 18 2a fd fb 6f 6e 23 1c 2d 35 47 4a 5f 43 3a 73 51 58 79 3b 34 2f 60 46 62 6b 27 28 01 13 1b 25 00 ff ff 00 32 ff 2a 02 01 02 bf 00 22 00 f1 00 00 00 02 03 1a 7b 00 00 00 ff ff 00 32 ff 2a 02 01 02 bc 00 22 00 f1 00 00 00 03 03 07 01 b7 00 00 ff ff 00 32 ff 2a 02 01 02 c3 00 22 00 f1 00 00 00 03 03 06 01 bb 00 00 00 03 00 32 ff 2a 02 01 02 d1 00 03 00 21 00 2f 00 93 40 0e 2c 2b 17 06 04 07 08 11 10 02 04 05 02 4c 4b b0 23 50 58 40 30 00 00 00 01 5f 00 01 01 4a 4d 00 02 02 4b 4d 0a 01 08 08 06 61 09 01 06 06 53 Data Ascii: +373#"&'732655#"&&546633267&&#_O wg<e$E\L_GaCk?ItA2Y5cP.T"J2on#-5GJ_C:sQXy;4/`Fbk'(%2"{2"2"2*!/@,+LK#PX@0_JMKMaS
2024-05-15 22:37:00 UTC	7952	IN	Data Raw: 40 2e 0d 01 01 04 01 4c 00 04 00 01 00 04 01 67 06 01 05 05 03 5f 00 03 03 2c 4d 02 01 00 00 2d 00 4e 0e 0e 0e 16 0e 15 27 21 11 11 10 07 08 1b 2b 21 23 27 23 15 23 11 33 32 16 15 14 06 07 03 15 33 32 36 35 34 26 23 01 dd 46 7f 83 3a b7 61 53 37 39 c1 77 3f 3f 3d 41 df df 02 39 58 4e 3e 5d 11 01 1e f1 3f 3c 3d 39 00 00 00 ff ff 00 5b 00 00 01 dd 02 e9 00 22 01 f5 00 00 01 07 03 36 01 b7 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 ff ff 00 5b 00 00 01 dd 02 e9 00 22 01 f5 00 00 01 07 03 39 01 96 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 ff ff 00 5b ff 3b 01 dd 02 39 00 22 01 f5 00 00 00 03 03 42 01 90 00 00 00 01 00 32 ff f4 01 a7 02 45 00 27 00 32 40 2f 16 02 01 03 02 00 01 4c 15 01 02 01 4b 00 00 00 03 61 04 01 03 03 30 4d 00 02 02 01 61 00 01 01 31 01 4e Data Ascii: @.Lg_,M-N'!+!#'##3232654&#F:aS79w??=A9XN>]?<=9["6--5+["9--5+[;9"B2E'2@/LKa0Ma1N
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: ff f3 02 4a 02 c8 00 0f 00 1d 00 2c 40 29 05 01 03 03 01 61 04 01 01 01 50 4d 00 02 02 00 61 00 00 00 51 00 4e 10 10 00 00 10 1d 10 1c 17 15 00 0f 00 0e 26 06 0a 17 2b 00 16 16 15 14 06 06 23 22 26 26 35 34 36 36 33 06 06 15 14 16 16 33 32 36 36 35 34 26 23 01 8d 76 47 47 77 47 47 77 47 47 76 48 5b 6c 31 5a 3c 3c 5a 31 6c 5b 02 c8 4e a5 7b 76 a2 4f 4f a2 76 7b a5 4e 3a a0 94 5f 88 46 47 88 5e 94 a0 00 00 00 01 00 8e 00 00 02 18 02 bc 00 0a 00 29 40 26 09 08 07 03 00 03 01 4c 04 01 03 03 48 4d 02 01 00 00 01 5f 00 01 01 49 01 4e 00 00 00 0a 00 0a 11 11 11 05 0a 19 2b 01 11 33 15 21 35 33 11 07 27 37 01 8d 8b fe 8a af ac 17 d3 02 bc fd 79 35 35 02 42 52 2e 69 00 00 ff ff 00 56 00 00 02 3d 02 c8 00 02 02 38 0b 00 00 01 00 40 ff f4 02 4b 02 c8 00 2a 00 3f 40 Data Ascii: J,@)aPMaQN&+#"&&54663326654&#vGGwGGwGGvH[l1Z<<Z1l[N{vOOv{N:_FG^)@&LHM_IN+3!53'7y55BR.iV=8@K*?@
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 02 bc 00 0c 00 27 40 24 07 01 00 01 01 4c 00 01 01 03 5f 04 01 03 03 48 4d 02 01 00 00 49 00 4e 00 00 00 0c 00 0b 11 11 11 05 0a 19 2b 01 11 23 11 23 11 23 11 26 35 34 36 33 01 a3 3b 3b 3b a7 57 5c 02 bc fd 44 02 88 fd 78 01 79 0f 97 49 54 00 02 00 4b ff f1 01 9b 02 c8 00 33 00 3f 00 53 40 50 02 01 00 03 2d 03 02 05 00 1c 13 02 02 04 1b 01 01 02 04 4c 07 01 05 00 04 00 05 04 80 00 04 02 00 04 02 7e 00 00 00 03 61 06 01 03 03 50 4d 00 02 02 01 62 00 01 01 51 01 4e 34 34 00 00 34 3f 34 3e 3a 38 00 33 00 32 1f 1d 1a 18 25 08 0a 17 2b 00 16 17 07 26 26 23 22 06 15 14 16 16 17 1e 02 15 14 07 16 16 15 14 06 23 22 27 37 16 33 32 36 35 34 26 26 27 26 27 26 26 35 34 36 37 26 26 35 34 36 33 02 06 15 14 16 33 32 36 35 34 26 23 01 20 48 19 10 17 40 1f 3b 3c 25 35 31 Data Ascii: '@$L_HMIN+###&5463;;;W\DxyITK3?S@P-L~aPMbQN444?4>:832%+&&#"#"'732654&&'&'&&5467&&546332654&# H@;<%51
2024-05-15 22:37:00 UTC	7952	IN	Data Raw: 00 da 00 de 00 e0 03 2b 03 2c 03 2d 03 2e 03 2f 03 30 03 31 03 32 03 33 03 34 03 35 03 36 03 37 03 38 03 39 03 3a 03 3b 03 3c 03 3d 03 3e 03 3f 03 40 03 41 03 42 03 43 03 44 03 45 03 46 03 47 03 48 03 49 03 4a 03 4b 03 4c 03 4d 03 4e 03 4f 03 50 03 51 03 52 03 53 03 54 03 55 03 56 03 57 03 58 03 59 03 5a 03 5b 03 5c 06 41 62 72 65 76 65 07 75 6e 69 31 45 41 45 07 75 6e 69 31 45 42 36 07 75 6e 69 31 45 42 30 07 75 6e 69 31 45 42 32 07 75 6e 69 31 45 42 34 07 75 6e 69 30 31 43 44 07 75 6e 69 31 45 41 34 07 75 6e 69 31 45 41 43 07 75 6e 69 31 45 41 36 07 75 6e 69 31 45 41 38 07 75 6e 69 31 45 41 41 07 75 6e 69 31 45 41 30 07 75 6e 69 31 45 41 32 07 41 6d 61 63 72 6f 6e 07 41 6f 67 6f 6e 65 6b 0b 43 63 69 72 63 75 6d 66 6c 65 78 0a 43 64 6f 74 61 63 63 65 6e Data Ascii: +,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\Abreveuni1EAEuni1EB6uni1EB0uni1EB2uni1EB4uni01CDuni1EA4uni1EACuni1EA6uni1EA8uni1EAAuni1EA0uni1EA2AmacronAogonekCcircumflexCdotaccen
2024-05-15 22:37:00 UTC	2024	IN	Data Raw: 43 63 38 2d b0 39 2c b1 02 00 16 25 20 2e 20 47 b0 00 23 42 b0 02 25 49 8a 8a 47 23 47 23 61 20 58 62 1b 21 59 b0 01 23 42 b2 38 01 01 15 14 2a 2d b0 3a 2c b0 00 16 b0 17 23 42 b0 04 25 b0 04 25 47 23 47 23 61 b1 0c 00 42 b0 0b 43 2b 65 8a 2e 23 20 20 3c 8a 38 2d b0 3b 2c b0 00 16 b0 17 23 42 b0 04 25 b0 04 25 20 2e 47 23 47 23 61 20 b0 06 23 42 b1 0c 00 42 b0 0b 43 2b 20 b0 60 50 58 20 b0 40 51 58 b3 04 20 05 20 1b b3 04 26 05 1a 59 42 42 23 20 b0 0a 43 20 8a 23 47 23 47 23 61 23 46 60 b0 06 43 b0 02 62 20 b0 00 50 58 b0 40 60 59 66 b0 01 63 60 20 b0 01 2b 20 8a 8a 61 20 b0 04 43 60 64 23 b0 05 43 61 64 50 58 b0 04 43 61 1b b0 05 43 60 59 b0 03 25 b0 02 62 20 b0 00 50 58 b0 40 60 59 66 b0 01 63 61 23 20 20 b0 04 26 23 46 61 38 1b 23 b0 0a 43 46 b0 02 25 Data Ascii: Cc8-9,% . G#B%IG#G#a Xb!Y#B8*-:,#B%%G#G#aBC+e.# <8-;,#B%% .G#G#a #BBC+ `PX @QX &YBB# C #G#G#a#F`Cb PX@`Yfc` + a C`d#CadPXCaC`Y%b PX@`Yfca# &#Fa8#CF%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50032	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	655	OUT	GET /steam/apps/1604030/ss_19d6b903fd65c410af902a8c5f62c820cfe09292.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 85452 Last-Modified: Mon, 06 May 2024 10:22:20 GMT ETag: "6638af5c-14dcc" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=581227 Expires: Wed, 22 May 2024 16:04:07 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 00 01 02 08 09 ff c4 00 4b 10 00 02 01 03 03 02 04 04 03 06 04 04 05 01 05 09 01 02 03 04 05 11 00 12 21 06 31 13 22 41 51 07 14 61 71 32 81 91 08 15 23 42 Data Ascii: JFIFCCQXK!1"AQaq2#B
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: a0 86 d9 5e 43 35 3c 9b a5 99 89 79 67 75 05 55 a4 66 24 92 ab e4 04 60 6d 0a 31 c0 3a a5 14 98 64 3a d3 97 2a 22 68 e4 26 3d c4 26 7e b9 07 3e ba 2b ae c8 6f c6 f1 d5 37 af 11 f1 9f 53 f7 3e 83 43 fa 16 73 53 4e aa 19 e2 21 a2 27 8c 0c 63 e9 a8 9f 86 4a 12 8d ca 00 c3 b8 3d f5 2a c8 3b 81 3c 79 54 9d a0 b1 23 73 76 39 f7 d0 37 48 24 ac 92 b4 cb 35 82 ba 07 90 27 cb f8 c0 3b 94 0c 42 e7 cc 39 ee 08 c8 d4 be 4b 44 ae 2f 61 e3 41 6d 92 79 7c 62 3e 56 5a 56 0a c1 ff 00 c2 9c 1f 33 8f 53 f4 1c 0c 1c 13 ee b4 d9 9d d4 66 d7 82 32 cf 2c b4 97 1a 44 a0 8e 3b 89 9e a3 6c 54 fe 19 1b b9 01 55 b2 30 09 c6 48 1c 7d 78 d4 25 5a 2f 0a 3e b3 a9 6a 69 2c 3d 4b d2 f5 f4 95 28 e1 fe 6a a2 05 84 c6 44 9b c9 2c 46 36 ee 5c 02 08 1e e4 8c e8 65 92 f7 76 54 31 71 7a 54 ca 4f Data Ascii: ^C5<yguUf$`m1:d:"h&=&~>+o7S>CsSN!'cJ=;<yT#sv97H$5';B9KD/aAmy\|b>VZV3Sf2,D;lTU0H}x%Z/>ji,=K(jD,F6\evT1qzTO
2024-05-15 22:37:00 UTC	2138	IN	Data Raw: 29 9c e1 47 a7 61 cf df eb a1 77 b0 92 a4 4f 7c 3a 99 26 5b b0 65 dd 53 e5 9c 11 d8 80 4f 61 fe fb e8 a1 b4 c5 cd d3 43 de ac b6 c9 53 4d 5a e2 3d f1 c2 84 87 60 00 5e 41 c8 fb 81 ab 6b 44 52 dd 21 97 4b d9 e9 ba 86 c7 75 b3 d4 ab 1b bd 30 12 51 36 ff 00 2a 0e ec 3e b9 e0 7e 60 fa 69 54 de 83 d4 76 03 cb 14 94 f2 c9 13 ab 46 ea 4a b2 9e 08 23 b8 3a 10 cd 18 d9 71 95 23 23 23 3e a3 50 83 98 6a 5e 8d 9e 19 51 66 87 70 2f 13 36 54 91 ea 08 3c 1f a8 f7 d4 28 ca f9 69 eb 2b a7 96 96 0f 93 81 8e e4 80 b9 7d 9f f2 86 f5 1f 7d 45 a2 c6 c5 4a fa 11 f7 d4 20 f6 d7 50 23 95 83 27 8a 0a 9f 21 f5 fa 0f cb 3a 16 8b 43 c6 86 49 a1 f1 55 99 9e 30 a3 85 e3 b9 c3 67 ef c7 eb a0 b4 9d 04 af b1 09 e9 dd 97 c4 f2 2b 37 7c 31 cf 60 7f df df 56 9a 5a 2d a6 f6 1c 74 8f 89 51 4b Data Ascii: )GawO\|:&[eSOaCSMZ=`^AkDR!Ku0Q6*>~`iTvFJ#:q###>Pj^Qfp/6T<(i+}}EJ P#'!:CIU0g+7\|1`VZ-tQK
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: e1 7d 8e 5b dd 44 f5 93 ca 67 b6 42 5e 95 e0 66 c3 28 66 04 b6 7d 72 07 df be 9d 89 a8 dd b1 73 4d bd 20 45 44 c6 e1 3d 25 14 ef 2b 43 01 34 62 99 40 2d 83 96 dc 7d 4e d0 78 f5 c6 95 18 a9 5a 43 79 34 38 ac a5 a8 b8 2d 0a 35 25 44 33 cd 4c bb 56 44 7f e3 31 39 da 83 d3 be 4f a0 c7 6e c3 54 e3 4d 22 27 f2 c3 ff 00 86 fd 5b d3 ef d2 d7 2e 9b bd 51 0a c6 a8 65 9e 34 96 77 28 ca 30 c5 76 f7 40 18 02 54 77 c9 ed ce ab 1c 25 37 49 f4 5b 9a 8c 5d 80 7f 15 6f 49 55 53 fb aa 86 78 67 ab a8 92 3f 1b e5 57 6a 8d dc 04 27 df 81 91 ed 8f ae ba 12 7a e2 8c f0 4f ee 60 f7 43 59 e2 5e ab ab 2d 2a ce b4 4a e2 26 5e 0b 30 3b 41 fe fa ac 6b dc 0e 59 7b 3f 52 26 aa 0a 8a 9b ed 4d 25 59 8d 27 08 b0 8d 8c 48 8f 95 00 0f 7c 67 fb e8 5d b7 4c 62 69 46 d1 3b d1 56 e1 43 d4 77 44 Data Ascii: }[DgB^f(f}rsM ED=%+C4b@-}NxZCy48-5%D3LVD19OnTM"'[.Qe4w(0v@Tw%7I[]oIUSxg?Wj'zO`CY^-*J&^0;AkY{?R&M%Y'H\|g]LbiF;VCwD
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 2a b4 71 9f 2f 3f 88 63 18 f7 e7 9d 2f b4 31 2a 23 3a d2 38 2e 50 d3 d3 c7 56 65 45 9d 46 1d f1 23 13 90 78 e4 00 39 39 23 45 8f 94 6d b0 24 93 d5 8a 50 74 8d 35 4d b0 4d f2 d2 4d 4a 5c f8 74 94 2c 54 b9 ce 0b b3 64 1f f5 3e 83 55 c9 a7 5e 4b 50 54 4d af 49 db a6 a8 b5 d5 49 11 b0 4d 15 6a 4a b2 78 c7 94 0d 90 8c 17 8f 4c fa 9e df 98 f2 74 d7 65 b8 ef 7a 3d 15 6b eb 3f 86 f5 37 19 17 fe 25 b7 54 dd 36 6d 78 6a a9 26 a6 a1 12 9e 48 62 72 f1 e3 be 38 1f 96 b0 7d 1c 8d 5d 51 a5 64 87 4d 8f e8 3a e2 4b bc d2 ad 35 c2 9e a2 1a 54 14 f1 53 db 76 3d 24 6d e6 39 3b 47 27 1d 81 f7 24 8c e8 1e 3e 2a 9a 0a 32 4f a2 95 f8 db d1 52 53 54 3d da 08 23 1b b9 98 c2 84 07 6c f2 7e 87 39 d6 ff 00 4b 95 57 06 66 cd 8f f8 91 41 5d 6d 91 4c 4b b5 3c 59 3c ef c6 18 fe 63 5d 1a Data Ascii: q/?c/1#:8.PVeEF#x99#Em$Pt5MMMJ\t,Td>U^KPTMIIMjJxLtez=k?7%T6mxj&Hbr8}]QdM:K5TSv=$m9;G'$>*2ORST=#l~9KWfA]mLK<Y<c]
2024-05-15 22:37:00 UTC	7952	IN	Data Raw: a2 19 9f e5 10 01 96 44 18 c9 c1 6c b6 4e 5b 71 ce 00 0d 73 49 53 dd 7e 2b 66 45 b5 6c 56 cd d5 d4 56 ea 93 5a 84 5a e0 a2 8e 40 f0 53 4a ee 8c ac 0a 89 36 b0 52 c7 39 ef 93 d8 9d 26 9c 17 7c 9f e4 ca e5 18 5b 7e 01 5a fa a8 96 67 8a 2a b9 dc 55 d4 45 4e 93 55 04 fe 22 2e 59 98 91 ca 11 dc e0 73 81 92 74 b7 27 27 c9 a3 34 a5 7b f9 21 3a b2 4b 0d 2d 73 25 ae aa 5a ab 74 84 88 a6 28 42 83 8c e1 49 03 3c 72 4e 3d 7b 9d 33 1f d4 92 a6 b6 04 9c 6e a3 d1 7a da 7a 82 1e a3 f8 7f 6d b4 d4 2d 3c 34 e9 4c 88 fb 37 ec 91 14 e5 8b 30 03 72 e5 72 42 90 18 e0 76 d5 46 1f 08 4b 93 b1 dd f2 f3 4d 45 65 8a 90 d3 22 c4 15 63 22 5f c2 f8 0d 85 7f 08 82 4e 08 ca 60 00 5b d7 19 d3 21 0b e8 19 3f 27 94 3e 2f 74 84 f6 fb a2 dc 6d 91 a2 5a 66 61 e1 d1 d1 59 a4 a4 8d 5f d4 26 e2 Data Ascii: DlN[qsIS~+fElVVZZ@SJ6R9&\|[~Zg*UENU".Yst''4{!:K-s%Zt(BI<rN={3nzzm-<4L70rrBvFKMEe"c"_N`[!?'>/tmZfaY_&
2024-05-15 22:37:00 UTC	10168	IN	Data Raw: 80 c0 91 7b 1d 4a 76 4d 50 dc c6 7d f9 d1 02 38 a0 ae 34 85 a3 71 be 07 fc 69 fe a3 eb aa 2d 3a 25 de d9 9a 75 9e 29 04 b1 81 9e 07 a7 b8 ff 00 b7 a6 8d 49 74 c9 43 35 8d 58 32 b3 28 c7 63 a8 d9 12 b3 80 8e cd b4 36 47 bf d3 53 a5 b2 23 60 94 0e 00 e3 81 9c f7 d0 76 42 52 df 4c b4 eb 21 90 e1 99 7b fb 68 1b b6 1a 4c 76 25 86 18 1a 3e 7c bc e7 41 d8 ce 8d 51 d7 3d 51 10 84 50 8e 09 df 9e 5b 07 b0 1a 80 a6 49 33 22 32 a0 38 52 08 e3 18 cf be 7f 5d 44 da 27 63 0a c8 44 94 12 37 19 61 dc e7 8c 71 f7 d4 8f e4 8d 68 58 55 35 8e c2 b8 6f e3 d4 1f 22 81 d8 7a 7f df 51 c5 ce 74 52 f6 c6 c6 36 44 7a 73 3d 7c ac 48 1e 51 93 c9 27 b9 d3 a7 a5 48 18 6d db 16 92 f4 92 bb bc 49 8c 80 37 1e e0 76 ed ab 8c 65 5b 05 b4 d9 dc 15 9f 28 5b ca ad db 96 19 d1 b4 a8 89 d0 ee 93 Data Ascii: {JvMP}84qi-:%u)ItC5X2(c6GS#`vBRL!{hLv%>\|AQ=QP[I3"28R]D'cD7aqhXU5o"zQtR6Dzs=\|HQ'HmI7ve[([

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50031	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	655	OUT	GET /steam/apps/1604030/ss_712d9885b750317ab0be515158e51c03cf5944b6.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 49524 Last-Modified: Mon, 06 May 2024 10:22:20 GMT ETag: "6638af5c-c174" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=84674 Expires: Thu, 16 May 2024 22:08:14 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 00 01 06 07 08 09 ff c4 00 42 10 00 02 01 03 03 02 04 03 05 06 04 05 03 05 01 00 01 02 03 00 04 11 12 21 31 05 41 13 22 51 61 06 71 81 14 32 42 91 a1 07 23 52 Data Ascii: JFIFHHCCQXB!1A"Qaq2B#R
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: c9 85 64 38 20 f2 0d 20 20 1f 0a 78 3b ed 9a 43 20 64 24 12 37 c7 63 b1 a0 05 de 46 2f be e7 dc 53 03 5a 95 87 6f ad 21 99 e3 be 86 42 49 4c fd d2 73 40 21 67 2b ab d7 23 b6 f4 ac 62 b2 93 f9 d2 03 ce e4 66 2a 43 11 12 a1 c0 88 1a e5 3a 0c b3 b9 36 b2 eb 51 ab b1 07 b8 a6 84 1e 37 69 9c e9 62 41 e0 1e d4 c4 10 a7 86 30 e3 39 1b 0c 50 06 28 08 ac 4f 9b 03 03 14 c4 41 25 f0 c7 7a 74 01 63 b8 00 9c 67 24 73 45 08 97 8c c7 39 66 3f 5a 74 30 cb 04 d2 20 d3 0e 41 dc 39 1c fe 74 08 34 16 24 0d ce 1b 19 07 b6 29 58 16 22 dd 16 00 ac c9 1e af bd 2b b6 3f 4a 00 51 67 86 13 a2 0c b0 fe 26 18 cd 00 69 a6 33 4b e6 62 54 1e 1b 81 f2 14 08 14 ad df f5 34 d0 1a b4 d9 d9 f8 c0 c0 38 da 80 0f e3 92 fe 72 5b 6c 06 93 fb 0e 28 02 66 69 74 10 93 61 3f 81 36 19 a6 04 26 ba 92 Data Ascii: d8 x;C d$7cF/SZo!BILs@!g+#bf*C:6Q7ibA09P(OA%ztcg$sE9f?Zt0 A9t4$)X"+?JQg&i3KbT48r[l(fita?6&
2024-05-15 22:37:00 UTC	2856	IN	Data Raw: ff 00 4a 7e 09 b4 87 6d 2c 12 c4 95 69 00 98 0d 4e ac c3 cc 41 e0 0f 4f 9d 38 d7 86 4b 7e 5a 07 6f 74 b7 57 33 ea 92 30 c6 3d 40 33 ee c0 54 fd 4e ca fa 55 20 32 75 38 84 4a af 34 7a 83 6c 9c 9f 9f bf ca a3 a2 97 dc bb e8 7f 0b cd d7 ad e7 b9 7b 41 0c 03 18 9a 6f dd 82 7e 47 7f cb 7a de 10 72 56 d1 cf 39 c6 2e 93 2e 20 e8 29 6f 04 6b 1c 71 89 86 cd 2b 64 ff 00 a9 f9 fb 76 ad 3e 1d 11 f1 4b 6b 4b 74 b6 84 65 54 15 dd 9f 18 ce e7 26 ad 46 b6 cc dc ef 48 a8 e9 bd 77 aa de f5 26 81 e0 02 d8 48 c4 69 c6 95 1d 8a b0 3c e3 1d eb 18 b9 b9 fd 8d a4 a0 a1 f7 3a b8 83 49 bb 9d 4e 49 25 89 c9 62 7d 4d 75 9c 83 b0 f9 46 dc d3 11 73 d3 d8 10 75 67 34 e2 62 c6 64 b1 ce 59 71 83 43 41 16 06 15 75 7c 46 b9 23 6d f8 a8 34 a1 f8 9a 58 54 33 c8 04 80 82 00 d8 8a ab 74 1c 51 Data Ascii: J~m,iNAO8K~ZotW30=@3TNU 2u8J4zl{Ao~GzrV9.. )okq+dv>KkKteT&FHw&Hi<:INI%b}MuFsug4bdYqCAu\|F#m4XT3tQ
2024-05-15 22:37:00 UTC	14240	IN	Data Raw: 8f 0d 90 b0 df 0a ca 7f af ce 92 7c ba 25 c1 a2 9a e2 41 e1 97 59 75 67 f0 8c f1 df 9a b4 c8 a2 ab a8 b2 90 ea d2 20 2a 77 f6 c7 34 68 71 d1 47 73 71 1a 5c 0b 72 5f c4 61 90 55 36 f5 c1 3f 4a 86 d2 74 6f 14 da 72 23 24 31 c8 ca a6 4d 04 1c 92 78 fc c6 f8 a7 d8 26 43 a6 de d8 cb e3 97 9a 23 2d bb 60 c4 e8 e5 64 f5 20 8c 6d 59 a9 a6 d9 a3 83 5b 1c b7 b9 39 66 82 78 e2 5d d7 31 82 84 8f cb 8f ed 5a 19 93 9a 0f 16 42 1a ee 06 07 28 5f 53 10 3f 4e 0f 6f 7a 68 45 65 ec 0b 6a 59 96 e2 29 b1 81 88 f5 1f af 14 86 54 cb ae 4d bc 45 23 3f 8b ff 00 14 ac 28 8c 52 36 a5 53 22 8f 6f 6a a4 cc da 2b 7a 9d 9e 89 0e 0a e9 3d c1 ef 41 70 76 57 0b 60 57 7c 00 39 34 8d 2c 5a 52 55 74 80 02 03 db b9 f5 34 ba 18 ab 13 9c ae c4 6f b5 21 84 62 26 5d 59 0b 27 71 c6 6a 84 23 2d ca Data Ascii: \|%AYug *w4hqGsq\r_aU6?Jtor#$1Mx&C#-`d mY[9fx]1ZB(_S?NozhEejY)TME#?(R6S"oj+z=ApvW`W\|94,ZRUt4o!b&]Y'qj#-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50033	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	655	OUT	GET /steam/apps/1604030/ss_262496a8c3ed1335d63398fe06f8dd4d43d311cf.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 73337 Last-Modified: Mon, 06 May 2024 10:22:20 GMT ETag: "6638af5c-11e79" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=333310 Expires: Sun, 19 May 2024 19:12:10 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 00 02 07 01 08 09 ff c4 00 4c 10 00 02 01 02 04 03 05 05 06 04 04 05 04 01 00 0b 01 02 03 04 11 00 05 12 21 06 31 41 13 22 51 61 71 07 14 32 81 91 23 42 a1 b1 Data Ascii: JFIFCCQXL!1A"Qaq2#B
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 19 a1 93 4c ea 35 55 5c 9a 67 8f 56 3b 95 dd df 05 be 56 91 4a 4b 24 1a 74 7c 43 50 36 3c b9 8e 78 e9 45 da df 63 98 d2 bd 88 e5 24 a0 95 d8 c2 4e c8 ce 6c 09 fe f8 22 72 06 b4 26 0a 49 99 56 30 9f 11 77 22 ed e4 3c 7c b0 3a 92 18 90 39 a2 94 9d 6a 19 0f c2 4c 97 e4 3c 06 0b 90 d5 25 ee 78 f2 1a 48 49 62 08 1b 73 b6 f8 2a a2 9b b7 b8 34 95 71 54 95 44 55 0e de 76 b7 ad b1 49 f6 2e 51 ad c8 6a 29 c4 51 01 fc c6 27 9a 9e 67 c4 f9 62 fd c1 03 9e 48 e0 8a cb 21 69 49 00 dc 5a c3 a9 f2 c4 e0 80 f7 5b 11 6b ff 00 a7 03 61 a4 45 ef 7d 9a 9e cc 90 c7 61 e5 e7 6c 44 fc 11 a2 6a 5a 85 66 d2 49 0d ca dc 89 c4 b4 08 c2 12 22 7d 21 be 23 76 d5 f7 7f df 04 9a e0 a1 8a 91 14 5b 3a c8 dd 0d f7 c1 50 34 7b 4d 5a d1 33 1e d7 4b 78 0d b7 fe f8 14 50 dc d6 76 d0 2a 30 0e 5b Data Ascii: L5U\gV;VJK$t\|CP6<xEc$Nl"r&IV0w"<\|:9jL<%xHIbs4qTDUvI.Qj)Q'gbH!iIZ[kaE}alDjZfI"}!#v[:P4{MZ3KxPv0[
2024-05-15 22:37:00 UTC	2239	IN	Data Raw: a6 0a 8a b3 5f e1 e2 40 ae d6 53 6d 99 7a 79 60 fe 1f 90 75 b4 32 cb ee 49 8d 88 27 4f 21 f7 86 1d 15 d8 5b 7d c9 25 a1 0c b7 2b 7b 72 b7 5c 35 47 c8 ab a1 2d 56 58 22 96 f6 ee 9d c6 17 2c 5e 06 c3 28 18 a3 31 bb 28 1b 74 c0 28 0d 73 3c 6a 62 bb 81 8b d0 45 32 7c ba 59 72 ea d4 9e 31 ba 9d c7 46 1e 18 38 c5 a2 39 26 3d cf 32 d4 ab 8e 3c ca 9c 00 92 5b 5d ba 37 43 fa 1c 39 46 c5 6a a0 4a 6a 6e d1 6e 07 ae 1d 18 09 72 1c 65 54 94 fe fd 0f bd 29 30 16 01 ec 6d 6f 3c 3e 31 33 b9 1d 31 69 21 a6 8d 62 86 35 48 c0 b0 55 16 03 0c 48 16 c5 19 d6 66 9c 3f 1c 93 43 31 67 6d da 96 40 5e 39 4f 2b db ee 7a 8f a1 c0 4a e3 bc 5f e0 52 51 9e d2 fc c5 7c 05 c5 91 c5 1d 56 5e 84 d3 c6 b2 17 a5 86 56 07 b8 4d f4 0e 84 a9 bd ba d8 e3 17 4f 91 41 bc 4f 6f 1f c1 a3 a8 c5 a9 2c Data Ascii: _@Smzy`u2I'O![}%+{r\5G-VX",^(1(t(s<jbE2\|Yr1F89&=2<[]7C9FjJjnnreT)0mo<>131i!b5HUHf?C1gm@^9O+zJ_RQ\|V^VMOAOo,
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: f7 3a 77 0e f0 fc d1 15 af ac 84 c3 51 29 0b f6 82 eb 0c 7e 02 dc f9 ee 76 c7 53 12 d2 ad f2 cc 19 1e af 4a e1 1d 13 2d cb a3 ca e4 13 6b f7 8b d8 0b 11 a4 1b f2 36 bf d3 0e b6 cc fb 0e b8 76 93 de 78 9a 92 84 21 68 e5 a9 45 92 16 da ea 4f 2f a6 f8 94 12 68 f6 67 19 b5 62 c6 a9 a6 a6 b6 40 da 6d dd 00 b5 91 47 90 b8 db 14 69 4a 86 93 ae 9c d6 48 29 66 65 a2 89 9a 28 0a ec c5 35 5a ff 00 32 09 3e 37 c5 7b 82 f8 3b 67 b3 9f 63 34 be d0 38 71 dd b3 3c c3 2d a9 47 d3 34 f1 d9 81 42 0e 90 97 e4 c3 9d cd f9 f2 e5 80 9e 45 8f b5 83 18 b9 1f 36 7f 88 5f 65 99 f6 5b a2 6a 2e 28 5e 34 a8 a5 98 d3 4b 49 04 b2 76 b0 15 b0 8f 49 6e eb 6d d0 1d ad 6b e1 1d 4c 16 47 af 4f e1 74 68 e9 a7 a1 38 ea af 7a b3 e4 79 b2 c9 5f 3d a5 15 b9 6b 50 49 55 da b2 54 76 8c cd 2c 91 b1 Data Ascii: :wQ)~vSJ-k6vx!hEO/hgb@mGiJH)fe(5Z2>7{;gc48q<-G4BE6_e[j.(^4KIvInmkLGOth8zy_=kPIUTv,
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 90 42 97 31 49 60 fa 8f f5 28 fa 5f 96 16 f1 e9 6e ff 00 d0 89 26 86 f5 4f 3d 34 9a 8c 36 8d 6e 74 e9 e7 e5 7c 5a d9 02 80 a9 aa 85 66 69 3b c9 22 bd a3 05 15 6e 05 af 6b 5b cb 6c 03 de 41 2e 09 63 8a 47 ac 63 18 68 b6 b3 91 ce c7 f2 c4 ad c9 66 e7 29 82 48 99 59 59 85 b9 83 72 71 4a 28 bb 64 4f 1d 6d 04 36 86 67 ec 0f dc 76 0d a4 5f c4 ef 86 27 28 ec 02 a7 bb 04 a3 99 9e 91 a4 7a 99 43 31 d2 80 b7 dd 1e bc ef 89 16 f9 6c b6 92 00 cc de 4a 95 d4 5d c9 5b 00 64 e6 c3 d0 72 c5 3b 64 8a a0 ba aa 59 a2 54 31 b6 85 e4 c3 9d c7 ec 61 d4 c1 b0 16 35 10 25 95 83 6a 21 ac db d8 60 2d a5 b1 40 49 50 05 43 76 92 1b b0 24 93 c8 1f 4f 0c 0d 84 93 02 9a 48 c4 4c 9f 13 31 dc 9d c9 c0 6d 43 10 94 cb 1a 31 8a 29 18 bd f9 c8 c1 40 f9 9e 98 cb 29 4d bd 28 1b 92 ed b0 ae b5 Data Ascii: B1I`(_n&O=46nt\|Zfi;"nk[lA.cGchf)HYYrqJ(dOm6gv_'(zC1lJ][dr;dYT1a5%j!`-@IPCv$OHL1mC1)@)M(
2024-05-15 22:37:00 UTC	5904	IN	Data Raw: 6b 25 a7 77 05 87 c2 75 6c 3f f3 8e 66 5c 6f 1b 71 7c 9e 83 06 65 92 3a a2 b6 12 b4 45 49 e4 2c 7f 1c 66 69 a3 5a 76 83 4d 64 72 d2 46 b2 2b 76 ea 48 32 03 7d 4b d0 5b cb 0d d6 9c 52 6b 74 2f 4d 3d 88 16 af b1 a9 49 54 0f b3 22 de 76 3d 70 31 9e 89 6a 2f 45 c6 88 a4 93 5c 8e e3 70 c4 9c 49 35 26 e4 82 4a 95 13 c3 56 9d 98 47 bf 2d 3b ef 7e 78 25 2a e0 5b 83 bb 46 d4 f4 15 55 54 f2 54 45 0c b3 43 17 c6 ca 84 aa 75 dc 8c 68 84 32 e4 8b 9c 62 da 5c f8 44 72 8c 5e 97 b0 db 86 a9 68 73 ba b7 a6 af aa 5a 10 54 68 6d 00 86 6b da d7 be db 6f e7 8d 7d 26 3c 59 f2 69 cb 3a ba 4b 6b dd ba df c2 42 32 ea c6 b5 43 71 55 65 37 bb ca ea 80 93 1b 14 6f 91 b6 13 24 e3 26 bc 6d f9 0e 84 ad 6e 1d 1e 70 d9 a6 5d 47 95 54 84 09 03 30 82 73 70 52 ff 00 74 f4 2b 7b 6f d3 1a 23 Data Ascii: k%wul?f\oq\|e:EI,fiZvMdrF+vH2}K[Rkt/M=IT"v=p1j/E\pI5&JVG-;~x%*[FUTTECuh2b\Dr^hsZThmko}&<Yi:KkB2CqUe7o$&mnp]GT0spRt+{o#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50035	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	396	OUT	GET /steam/subs/94174/header_ratio.jpg?t=1476893662 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 40410 Last-Modified: Wed, 19 Oct 2016 16:14:19 GMT ETag: "58079bdb-9dda" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16154	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 05 03 04 06 07 08 02 09 01 00 0a ff c4 00 4f 10 00 02 01 03 03 03 02 04 03 06 03 04 07 04 08 07 01 02 03 04 05 11 00 06 21 07 12 31 13 41 08 22 51 61 14 32 71 09 15 23 42 Data Ascii: JFIFHHCCO!1A"Qa2q#B
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: f9 d6 8a 34 26 ca 62 b6 68 3b cf 68 01 88 c3 7d cf b9 fd 75 64 9a 07 e0 fa ef 4b 41 b8 ee 30 4c ea 93 d4 d3 18 e2 66 5c 80 47 2b 93 ac e7 c8 a4 58 fd 72 b6 6e 7e b5 d8 a1 b1 ed 6a 37 ac ae 81 96 a2 58 5a 64 86 38 94 70 18 c8 ec 14 8f 38 1c 9d 44 6a 3b b1 bd c7 ff 00 0f 5f 06 3b 83 65 75 13 6f df 37 55 f2 cf 2d 9e d9 3c 77 76 a7 b6 b3 4f 2d 4d 62 71 0c 2d de a0 08 d0 92 e6 41 9c b7 81 9c 30 25 91 35 48 69 1b de 96 b4 55 1e ee ec f3 92 73 ef ae 62 c2 b1 d6 a4 48 09 70 07 d3 40 c1 37 bd d3 0c 13 76 17 1f 2a 8c 73 a1 21 00 ee 3b e2 0f c3 53 0f 50 10 10 e3 9f 1c e9 d0 ac 15 fe 3a 02 29 82 30 c3 80 1b f4 cf b6 9d 00 36 eb bc 63 4a 62 cd 26 31 a2 80 81 de 3a 8f 05 3b 10 25 03 3f 53 ab a1 01 47 53 e1 42 ec 26 c8 cf 3a 28 07 49 d5 38 fb 23 ed 90 1f eb e7 45 01 27 Data Ascii: 4&bh;h}udKA0Lf\G+Xrn~j7XZd8p8Dj;_;euo7U-<wvO-Mbq-A0%5HiUsbHp@7v*s!;SP:)06cJb&1:;%?SGSB&:(I8#E'
2024-05-15 22:37:00 UTC	1776	IN	Data Raw: 18 4e 29 4a 57 4e b7 bd fa 9e 26 6c d9 31 e7 6d 3d 97 42 b0 e8 45 a2 54 eb be d7 da db 96 d6 8f 34 37 46 a3 af a0 ae 89 64 52 54 36 55 d5 81 04 64 7e 87 8d 7c e7 a7 e8 d4 3d 46 38 b3 46 e9 bd 9f c8 f4 73 e5 bd 3b 9c 18 db 70 d2 c7 4b d4 0d d7 4d 4f 04 54 f4 f0 5d aa e2 86 28 94 2a 46 8b 33 05 50 a3 80 00 00 60 6b e7 bd 56 11 86 a7 24 62 a9 71 3f dc ef d3 49 bc 71 6f b2 08 50 2b aa 8e 1b c7 b2 ff 00 5f f7 6b e7 32 45 f6 3d 05 22 67 41 b7 2f 2e 80 9b 4d 71 ce 08 22 99 f2 7f 4e 3c 6a 1f a7 ea df 2c 32 fe 97 f4 27 db e2 5f 79 79 42 eb b5 af 42 72 bf b9 eb c0 f2 41 a5 71 8f d7 8d 4b f4 ed 65 7f 83 2f e9 7f 42 bd e3 0f e3 5e 50 c6 e3 63 b9 2c eb 02 db 6a fd 6c 64 86 81 86 3f 41 8e 75 87 b9 6a 93 e1 78 a5 f2 e1 7f 40 f6 d8 f9 f1 2a f9 83 65 db 97 35 ff 00 ea fa Data Ascii: N)JWN&l1m=BET47FdRT6Ud~\|=F8Fs;pKMOT](F3P`kV$bq?IqoP+_k2E="gA/.Mq"N<j,2'_yyBBrAqKe/B^Pc,jld?Aujx@e5
2024-05-15 22:37:00 UTC	6096	IN	Data Raw: dd 42 e9 70 a5 8f e6 73 4c f1 ba 89 30 39 08 3d 76 24 9f fb 97 3e 06 75 ef 45 7b 6d 07 0c 7e eb ff 00 bf b9 c7 7c 19 ed f5 33 24 53 3d 7f a3 4f 4f 1b d4 54 cc cb 1c 50 c4 a5 9d d8 9c 05 55 1c 92 49 c6 06 be 6a 38 64 e7 48 f4 5c 95 59 ab 3e 32 d4 6d 6b 7f 46 36 15 44 81 ef 7b 6b 6b 44 b7 0e cf 11 c9 22 c6 bd 9f d3 d1 63 8f a1 07 df 5e bf ac d4 31 e2 c2 f9 c5 7d 3e 87 2e 93 77 29 f7 65 0d 05 5e 63 20 37 b6 be 26 50 dc f6 13 2f ad cb 53 53 4d f0 49 d3 fa ba 49 5e 9e aa 9f 79 d4 4d 14 b0 b1 57 47 58 e5 2a ca 47 20 82 01 07 5f 62 e6 f1 fa 5e 29 27 bf 17 d4 f2 d2 e2 d4 c9 7e 45 d7 d3 4a 78 ba fb bd 3a 6f d5 bb 52 c4 bb 9e d1 5d 0d b7 78 d1 42 98 2c de 99 58 6b 00 fa 37 00 ff 00 41 fc 87 5e ae 95 43 5f 3c 7a d8 ff 00 34 76 97 8e 7f f7 fd 8e 5c ad e0 8c b0 be 4f Data Ascii: BpsL09=v$>uE{m~\|3$S=OOTPUIj8dH\Y>2mkF6D{kkD"c^1}>.w)e^c 7&P/SSMII^yMWGX*G _b^)'~EJx:oR]xB,Xk7A^C_<z4v\O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50034	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	397	OUT	GET /steam/subs/633707/header_ratio.jpg?t=1667324398 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 40161 Last-Modified: Tue, 01 Nov 2022 17:39:06 GMT ETag: "636159ba-9ce1" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16154	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 00 02 05 06 07 08 01 03 04 09 ff c4 00 46 10 00 01 03 02 04 04 04 04 03 05 06 05 02 07 01 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 32 71 81 09 15 91 23 Data Ascii: JFIFCCF!1A"Qa2q#
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 7d 49 bf f0 e8 71 f3 bc 77 fe 65 f7 23 bb 27 fe 2a 2b 67 0b 78 29 48 e2 d7 8c ec e5 02 b5 19 6e d0 a9 d5 09 95 39 31 80 2b 4c 85 07 c0 6d ae f7 05 4b 49 3d 8a 52 47 7c 7d 0e 3e 72 79 5e 1b 09 41 fa 4d 24 bd c7 1c 30 96 26 3b bd 91 6b b8 f7 e2 a3 28 f8 74 93 4c a3 cc a6 c8 ab 55 5f 8a 97 5b a7 d3 52 94 08 ec dc a0 28 95 58 27 74 a8 25 29 1d 12 7e 5d 89 f9 9c 8f 0e c5 cf a7 34 e9 76 be d3 d1 c5 c7 8e 0d 23 39 13 30 e4 bf 18 dc 3b cc 90 a5 d3 9e 19 70 c8 4c 70 d3 cc 84 49 8e f7 25 2a 2e 6a 2a 23 98 95 ac 9d 43 62 00 bd c5 c1 bc 5c 3c 5e 13 8d 07 19 2b f8 32 14 a3 98 8b 4d 1e 51 e7 ac b5 23 29 e6 9a ce 5d 94 35 4a a5 4c 7a 0a dd 45 fc cb 6d 65 04 ff 00 fc ed 6f 5c 7e 97 96 c4 58 90 58 8b 66 ac f0 e5 1a 6e 22 b7 09 1e 31 b8 8d 93 5d 5a 16 da bf 3b 88 a3 a9 bb Data Ascii: }Iqwe#'+gx)Hn91+LmKI=RG\|}>ry^AM$0&;k(tLU_[R(X't%)~]4v#90;pLpI%.j*#Cb\<^+2MQ#)]5JLzEmeo\~XXfn"1]Z;
2024-05-15 22:37:00 UTC	1527	IN	Data Raw: 2f 4a 5a f9 ee 48 5c 66 8b 8a 5d ca ae 5c 32 01 2a b8 3e e6 f7 ee 31 ac 7c a1 c5 5e 87 e1 74 db af ca 89 79 15 eb 79 cf bf 79 a1 df 01 74 9a b4 87 a5 27 8a 3f 98 c9 75 1c f2 eb 91 92 b5 2d 46 fb ac f3 54 ae b7 3a ac 40 02 f8 17 94 33 82 51 f3 14 b6 df fa 29 e4 53 77 cf 6c d7 3f c0 c3 f4 a8 d1 29 c7 39 ce 10 fe 23 9c 84 a1 bb c6 07 48 49 79 29 2a b0 b0 ee 6c 6d b5 fa 61 2f 28 63 36 e5 2c 25 75 ed f0 d8 7f 82 69 57 30 ac df 81 96 91 4b 54 68 f9 fa a0 fc 61 20 ba 1b f8 34 a5 a5 3c 00 1a c5 9c 22 e3 a6 b2 2f 6b 01 8c 3f d7 db 97 37 99 57 b6 ff 00 d1 a7 e0 e9 7a c2 75 53 c1 9e 5b a8 bc 99 55 0e 24 3b 3e 6b cf 72 e4 4a 90 eb 7a 95 b8 ea 4b 84 ab 6b 9b 92 2d 60 00 df 6d a3 c7 71 a1 e8 c3 06 97 4f ba 21 e5 62 f7 91 b7 32 f8 13 aa d5 aa 0e 4e 56 73 7a 79 90 96 d5 Data Ascii: /JZH\f]\2>1\|^tyyyt'?u-FT:@3Q)Swl?)9#HIy)lma/(c6,%uiW0KTha 4<"/k?7WzuS[U$;>krJzKk-`mqO!b2NVszy
2024-05-15 22:37:00 UTC	6096	IN	Data Raw: 92 d8 2d ce d1 fd da ed 67 02 80 21 c6 94 02 fc c3 e4 50 20 d9 24 5a ed d5 13 43 5b 32 55 72 4e 4d a4 0c ab 39 86 18 9a 54 1d 7e 03 68 b3 c9 68 a9 c0 56 93 6f 37 53 6e d6 b9 1f 2e 16 89 50 f7 29 14 be 19 e5 dc b7 2a 62 32 ec b7 99 97 36 5b ed b1 26 7b 88 17 46 83 64 27 d1 24 91 f3 6e 4b 88 f4 c0 e4 de e2 a4 b6 21 9a 34 33 43 cc d3 e1 c8 91 c9 a9 a1 9e 62 64 bc bb 04 ab 50 d6 3b ea d4 82 af b9 18 d5 ea ac 85 a3 1e 94 3a dd 3a 3b 19 9a 3d 29 f7 25 c6 75 b7 1b 8c e3 c0 f3 5c 67 42 86 a2 2f e5 2a d4 85 11 da e4 7a 62 1a 7a 59 49 ee 43 19 c3 e3 22 72 e1 3e 0a 5b 49 d6 90 7b 9b 5a e3 ed 6f e3 8e 8c 3a dc c6 43 61 23 ae 35 64 9b 53 b7 6c 48 1d 09 50 b0 b6 d8 9a 2c 38 37 ee 7d 70 00 74 9b 03 73 72 47 6d f0 14 1d 0a 17 f2 8b ab b6 f8 9a 2c 09 2a ec 00 b7 6b 6d 81 Data Ascii: -g!P $ZC[2UrNM9T~hhVo7Sn.P)b26[&{Fd'$nK!43CbdP;::;=)%u\gB/zbzYIC"r>[I{Zo:Ca#5dSlHP,87}ptsrGm,*km

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50036	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	655	OUT	GET /steam/apps/1604030/ss_4a88ba3b0353f3d43f045e5230c9d600e19daae8.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 58596 Last-Modified: Mon, 06 May 2024 10:22:20 GMT ETag: "6638af5c-e4e4" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=273752 Expires: Sun, 19 May 2024 02:39:32 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 09 ff c4 00 4e 10 00 02 01 03 02 03 05 05 05 06 03 06 04 04 05 05 01 02 03 00 04 11 12 21 05 31 41 06 13 22 51 61 32 71 81 91 a1 07 14 42 b1 c1 Data Ascii: JFIFCCQXN!1A"Qa2qB
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: e1 0f b1 bc bf e1 d6 fd c8 b1 8e 4f 13 36 bf bc a8 ce 49 3c aa 51 94 e2 aa bf 52 b9 28 be 6c 21 e2 fc 4c 02 47 0e 8c 7b ee 47 f2 ab 37 4f ff 00 cf ea 55 51 f7 1a 38 cf 14 07 6e 1d 1b 7f fe c8 a3 7c ff 00 fc fe a4 76 c7 dc 72 f1 9e 24 c7 7e 1b 1e 47 ff 00 dc 8a 37 64 ff 00 f3 fa 8f 6c 7d ff 00 41 e7 8a df cb 1c 91 9e 18 b8 75 2a 7f da 17 a8 c5 45 ce 5d 6d fd 49 c6 31 ee c1 4d 67 28 ec c3 c1 2e 3b c4 8c 10 32 0e e2 a3 2f ff 00 aa 9f 65 b8 d5 e4 e3 a0 1d 93 bb fd d3 21 ce c7 38 cd 55 8d f6 8b 65 1f 25 57 6c 38 95 cd e7 15 6b 58 f2 2d 11 4a 9d 23 39 7e 59 e5 9e a4 0f 8d 73 f5 19 53 93 8f b1 d7 d3 e2 c9 8a 2a 69 fe 24 cb 9f b3 ee 27 24 77 66 cd 20 0a af cd 9c 13 86 51 be 37 ea 07 e5 ee ac b8 dd 49 be d9 d4 96 4f 56 11 85 52 5c 7e 61 3b 7f c5 45 f4 33 46 91 3c Data Ascii: O6I<QR(l!LG{G7OUQ8n\|vr$~G7dl}AuE]mI1Mg(.;2/e!8Ue%Wl8kX-J#9~YsSi$'$wf Q7IOVR\~a;E3F<
2024-05-15 22:37:00 UTC	1737	IN	Data Raw: be d1 ac 6c 64 9e 49 e1 b6 0d 74 8d fb 99 a3 52 c5 ed 98 b1 2a c7 a0 47 07 07 a0 60 2b 57 c0 f2 ec c9 b2 6f 86 bf 5f fd 30 7f a9 f4 de a6 1f 52 0b 98 bf 1e cf fc 33 c8 b8 9b 2a 77 a8 c3 1a b0 de 7d 79 57 af 9a a6 7c c6 2e cc f4 fa 66 6b 86 6f 65 10 92 7d 7f ef 9a a1 16 90 6e 54 5b 0d 0a c0 b6 7a 8d cf ad 32 05 82 28 48 e1 8f 4e c8 03 93 fd fa d2 fa 8c 07 10 bb b3 90 fd c2 69 95 1e 75 c6 9d 58 24 1d b6 34 76 1c ae 4f 3e bd 4d 57 4d 0c 39 78 e3 27 05 8f 4c ed 93 42 24 fd 81 45 65 0a 16 12 36 b6 03 24 e7 00 51 6f c1 1a 5e 49 17 f6 2f 69 1c 53 6a 57 86 51 90 ca 73 a4 f5 52 7c f1 bd 4a 2f c0 dc 69 59 54 c5 a6 07 f8 7f 3a 99 58 f2 9d fa fb 2a 1d 77 c8 18 cd 3a 11 11 8f 4f 2e 84 72 a4 33 b4 ed b9 c7 a7 5a 00 7b 4b a9 11 02 28 09 be c3 72 7c c9 a7 60 74 d7 52 cd Data Ascii: ldItRG`+Wo_0R3w}yW\|.fkoe}nT[z2(HNiuX$4vO>MWM9x'LB$Ee6$Qo^I/iSjWQsR\|J/iYT:X*w:O.r3Z{K(r\|`tR
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 42 55 7c 99 be 35 c5 52 4e 19 73 05 d5 bf 73 76 ac a0 a6 43 6c 4e 46 1b e1 4a bd 8b 22 bb 6c c9 33 ba c6 ce c3 c4 e4 90 45 4a 88 b0 fc 1e 3b 65 62 f7 4e 00 c6 a5 57 e4 c7 38 1f a9 a6 c8 c4 d0 58 47 63 00 68 5e df bf b3 90 86 99 75 9d 27 d4 1e 98 e9 8a ad b6 5b 1a ba 6b 86 66 2e fb a8 ef 27 58 43 08 15 d9 63 0f cf 48 27 19 ab a3 d1 4c bb 74 01 9c 2a ea 53 e2 cf 2a 9f d4 80 36 47 70 64 51 93 c8 e0 72 a4 30 00 9c d2 02 d2 da 5e 1d 6c 80 9d 52 c9 8e 6c b9 c7 c3 95 5f 17 8d 22 0f 73 2b ef 25 59 ae a4 91 7d 96 39 1b 62 aa 93 4d b6 89 2e 10 26 c6 06 3e b5 11 8b 19 c1 d4 40 20 74 3d 69 a0 1b 48 05 55 2c c0 0d c9 d8 51 d8 16 5c 42 d2 0b 6b 38 c0 21 a5 e5 91 cc f9 e6 af 9c 54 63 f5 20 9d b2 b0 82 39 8c 75 aa 09 9d 40 04 86 77 81 b2 a7 63 cc 79 d4 a3 27 17 c0 9a b2 Data Ascii: BU\|5RNssvClNFJ"l3EJ;ebNW8XGch^u'[kf.'XCcH'LtS6GpdQr0^lRl_"s+%Y}9bM.&>@ t=iHU,Q\Bk8!Tc 9u@wcy'
2024-05-15 22:37:00 UTC	8048	IN	Data Raw: 96 c0 b2 b3 8c 40 6d a5 8e 32 d9 6d 39 f7 6f 51 6a 86 9d 95 f4 80 ea 00 ea 00 ea 00 ea 00 ea 00 ea 00 ea 00 ea 00 ea 00 ea 00 e0 32 46 4e 07 9d 00 6a ed 6c ad a1 b7 64 31 ac aa 57 66 28 0b 67 ce a7 28 3a e0 8a 7e e0 0f 05 86 65 20 af 77 e4 47 b5 f1 e9 f0 fa d1 18 7b 85 fb 05 e1 50 cb 62 b2 5b b9 0c 80 ea 47 1c 8f 98 a9 c5 35 c0 9f b9 62 ba 40 24 e2 a4 47 91 c8 da 94 85 3a 8f 53 4c 74 fc 0a 8d 82 79 0f 33 40 50 8f e3 db 3b 74 c7 5a 2c 29 88 8e 13 c8 0f ce 80 1c c4 8c 1e 44 f9 d2 43 a1 11 bb cd 98 0f 41 e9 40 1c a0 1c f2 24 6c 31 40 0b 2b 18 e3 e6 0e 7a 9a 43 44 1f dd c8 af 1c ac c8 84 83 a9 17 27 dd 54 cd 79 44 90 32 f2 4e 0a 41 13 45 00 db 51 d9 db e3 d3 e1 55 a8 d8 c7 47 61 30 1b bb 03 d2 ad 50 42 b1 e6 d6 74 52 dd f3 8e 98 d4 46 69 6c 57 43 4c 13 43 38 Data Ascii: @m2m9oQj2FNjld1Wf(g(:~e wG{Pb[G5b@$G:SLty3@P;tZ,)DCA@$l1@+zCD'TyD2NAEQUGa0PBtRFilWCLC8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50037	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	632	OUT	GET /steam/apps/1604030/capsule_616x353.jpg?t=1715590903 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 58243 Last-Modified: Mon, 06 May 2024 13:20:24 GMT ETag: "6638d918-e383" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=383020 Expires: Mon, 20 May 2024 09:00:40 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 56 10 00 02 01 03 02 04 04 04 03 05 05 04 04 0a 07 09 01 02 03 00 04 11 05 21 06 12 31 41 07 13 51 61 08 22 71 81 14 32 91 15 23 42 Data Ascii: JFIFvvCCahV!1AQa"q2#B
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 22 9e d6 e0 79 70 36 3c b6 6c b4 2d 92 4a ed fc 3f 98 67 da 97 04 9c f1 ec ca 3a a8 2c 79 7d 64 77 0b 01 25 cd c3 15 b7 e7 52 9e 63 34 59 e6 18 ef 8e 9d 33 9f a5 68 f6 98 37 e1 1c bf e2 17 c4 6d 37 c3 6f 0c 35 ad 56 6b 95 8f 54 68 4d a6 90 99 25 cc f2 1c 73 28 1b e2 35 67 93 d3 99 46 7a d1 b5 14 e6 f8 5f 6b ef c8 d1 86 0e 72 d2 78 8f 80 fe 23 bc 40 e1 26 56 d3 38 bf 5f d4 ad 63 71 20 b7 b9 d6 a6 9a 0d bd 63 72 e3 71 b7 4c d6 38 e4 4a dd 59 d4 6a 4b 96 74 0f 12 3e 3d 7c 5e f1 17 41 6d 16 ff 00 51 d0 f4 dd 21 87 2c 96 f6 ba 61 73 20 f7 25 f1 eb db 07 d2 95 64 d0 f5 41 24 fe 7f a8 ff 00 89 54 95 fe 5f a1 e7 c7 ba 7b c2 ce f0 0b b7 0d cc a5 a0 8e 08 62 ff 00 86 34 50 a3 ea 41 34 3c 49 3f 69 2a bd 84 6b ee 25 d3 ad 22 5f da 1e 56 a7 2c 43 f7 50 cc ed 24 50 fd Data Ascii: "yp6<l-J?g:,y}dw%Rc4Y3h7m7o5VkThM%s(5gFz_krx#@&V8_cq crqL8JYjKt>=\|^AmQ!,as %dA$T_{b4PA4<I?i*k%"_V,CP$P
2024-05-15 22:37:00 UTC	3432	IN	Data Raw: be 19 3e ec 4d 50 fa 89 ff 00 aa 48 b9 62 55 bb 1e 6d 73 51 b0 78 d8 59 db 6a 51 16 03 99 59 97 bf f1 28 23 15 64 3a 98 ff 00 b2 f9 ff 00 02 78 6d 1d 5f c0 2e 38 b8 e1 1b 8e 22 7d 3a 21 1d dd d1 b7 74 2c ec fc 9c be 68 db 3d 7f 38 fa e2 ba 5e 8d c9 ff 00 23 5c 3a fd ce 77 53 8d aa b3 a5 71 6f 1c 6b 9c 60 b6 f2 eb 97 a7 50 bf 81 59 04 f2 05 f3 39 09 c8 42 c0 0c 80 79 88 ce 71 cc 77 af 61 d1 c1 e0 c4 d2 55 7b d7 df 99 e0 3d 2f 97 17 51 91 24 ed ad 9b fd af d8 64 64 bb 1f 37 39 c1 15 7e bf 33 88 b1 d7 04 09 26 12 64 97 23 1d aa a7 2b 2f 8a a2 9e f5 89 72 06 e4 ff 00 5a a1 bb 36 e3 47 a5 b8 27 87 74 fe 00 e1 26 d1 f5 39 3f 0c b0 46 da c7 13 de 47 f9 a1 f2 d0 e2 10 4e c4 c4 09 40 3b cb 2b 0d fe 5a e4 66 c9 a9 b7 d9 7d fe 7f a6 fb 6e 7b ae 87 a7 fe df 15 bf c4 Data Ascii: >MPHbUmsQxYjQY(#d:xm_.8"}:!t,h=8^#\:wSqok`PY9ByqwaU{=/Q$dd79~3&d#+/rZ6G't&9?FGN@;+Zf}n{
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: c6 e7 ab c8 a3 d3 b1 6b 7d 6f 24 8d 22 c2 a7 99 bc b5 0c 4e 3b 60 ed bf 4d fd 6b 36 eb 83 6d 46 49 c6 4c 67 50 b5 36 97 b3 46 14 2a ab 65 40 e9 ca 77 5c 7d 88 34 5a 16 0f 54 53 19 1d 2a 0f 46 83 4b ba fc 45 a8 07 f3 a7 ca 77 ed d8 d6 88 3b 46 59 c7 4b 24 b5 30 88 a1 b1 85 43 8f 4f 5a ae 2b 73 44 de c3 f7 d2 66 5c 0e 8a 00 ff 00 3f f3 a7 96 ec 18 95 44 82 ef b1 cd 25 17 a2 3c 60 46 98 03 73 d4 ff 00 95 22 54 88 b7 76 c2 39 3d 69 a8 70 bc ae 75 38 1e c3 1f 7f f9 50 d3 68 16 91 15 48 05 81 f4 aa 97 74 39 6f a2 c8 21 bb 86 62 b9 8d 25 53 21 07 f2 ae 46 ff 00 d6 b4 e3 f3 32 e5 dd 50 cc d2 16 76 eb d6 a3 6d 8f 14 90 cc ae 44 64 93 55 c9 ec 59 14 22 d9 88 71 8e b9 14 90 be c1 92 d8 b4 d5 25 59 2f ae 18 00 33 21 39 1e bd eb 44 b9 66 7c 7f 85 12 38 57 43 8f 89 78 Data Ascii: k}o$"N;`Mk6mFILgP6Fe@w\}4ZTSFKEw;FYK$0COZ+sDf\?D%<`Fs"Tv9=ipu8PhHt9o!b%S!F2PvmDdUY"q%Y/3!9Df\|8WCx
2024-05-15 22:37:00 UTC	6000	IN	Data Raw: c9 a5 63 6d 1d dd 9c c9 11 3f 2a bb 24 a1 88 1e a4 22 e7 fe 11 e9 5a 71 77 32 66 e5 1f 37 86 d5 41 a0 50 39 15 08 02 bb 6d 4c 80 1a 36 68 80 71 5c 63 af eb 52 c1 42 89 18 a2 0a 0d 64 e5 ce f4 41 43 eb 70 39 4f ad 4b 06 90 49 21 3d 8d 46 14 86 59 ba 6d 81 42 c6 a1 a2 fd 76 fb d1 4c 94 34 5d 85 1b 0d 06 ae 7e b5 09 43 88 0b 53 24 23 d8 79 08 50 77 a6 13 91 2f 20 de a5 85 22 01 b8 07 f8 4d 67 d4 69 51 a1 3e 62 9f 6a 16 83 4c 0a c9 9e a0 54 b4 0a 63 8b 2a 8f e2 14 c9 a1 1c 58 65 d4 8e a2 a5 a2 24 d0 c9 5e bb d2 16 a6 27 94 fa 8a 50 80 26 7a b0 a9 40 b0 c4 63 f9 b3 f7 a9 40 b0 cc 61 6a 51 2c 2a 04 0b 96 a0 6c 2c e2 85 d0 46 cc 9d 71 55 39 f9 0e a3 e6 22 a9 6c 70 a8 10 20 39 98 0f 53 44 87 b0 a3 06 dd f9 08 07 18 f9 5c 64 11 8e 84 7a 57 a1 4b b1 e7 db ee 87 23 Data Ascii: cm?$"Zqw2f7AP9mL6hq\cRBdACp9OKI!=FYmBvL4]~CS$#yPw/ "MgiQ>bjLTcXe$^'P&z@c@ajQ,*l,FqU9"lp 9SD\dzWK#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50038	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	622	OUT	GET /steam/apps/239140/header.jpg?t=1715341001 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 38421 Last-Modified: Fri, 29 Jul 2022 15:37:40 GMT ETag: "62e3fec4-9615" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=133138 Expires: Fri, 17 May 2024 11:35:58 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 05 06 07 08 03 04 09 01 0a ff c4 00 58 10 00 01 03 02 04 04 04 04 03 04 06 03 0b 07 0d 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 09 14 32 71 15 42 81 Data Ascii: JFIFCCX!1A"Qa2qB
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 85 1f 7d 20 01 ec 06 38 67 06 ea e3 b8 11 e5 05 56 fe 38 e1 76 ad 35 ba a4 0b 58 e3 cb 97 25 f4 db db 2a da 8a 49 38 e3 72 aa c4 ae 62 95 f4 db f4 c7 1b 95 b7 cb 4c 4a a6 29 5b ef b9 c7 2c b1 ad ca d8 62 9e 96 5a 5b 8b 29 69 b6 c6 a5 b8 b5 04 a5 03 d4 93 b0 18 63 27 9b 7e 17 77 7e 1e d3 dc 87 5c a7 a2 75 3a 53 35 18 6b 25 28 91 1d 7a d0 48 ea 2e 3a 1f 63 be 33 dd 87 26 1d fc 77 73 ef 17 2c 72 c2 f6 e7 35 5a 2f d2 2b 4e 3c a2 d2 22 b4 d8 36 4f 38 a9 45 5e fe 5e 83 db ae 3e 56 53 9b 7e 3c 3d 12 f1 c9 e7 6f 9a fc 7f 51 7c 60 c0 3f f8 0a 80 e7 1b b8 7c 82 19 3a eb b0 93 67 c9 08 37 7d 03 72 3a 7f b7 01 f4 1b e2 d9 12 95 e1 9f 89 4a 82 d7 3a 62 28 52 d6 d3 76 be a3 cb 57 f9 5f 01 c1 9f 06 35 11 4a f1 5b c2 a9 0a 40 71 23 30 44 6d 49 3e 8b 58 41 fe 4a c0 77 07 Data Ascii: } 8gV8v5X%*I8rbLJ)[,bZ[)ic'~w~\u:S5k%(zH.:c3&ws,r5Z/+N<"6O8E^^>VS~<=oQ\|`?\|:g7}r:J:b(RvW_5J[@q#0DmI>XAJw
2024-05-15 22:37:00 UTC	1922	IN	Data Raw: 7e 04 30 2b 1c 36 97 53 cc 19 e7 33 d3 1f f9 95 3f 17 5b 91 21 21 a0 97 51 a5 44 95 ad 5a c6 9b 6e 02 05 b7 db 1e 79 97 75 f3 e2 46 95 56 5c f9 6c d4 9d 76 44 a5 4c 92 b2 0b ca 78 95 eb 36 e8 bd 5b 92 3a 6f e9 8f 43 2b 93 c1 df 09 15 d7 38 99 c2 57 d1 53 a7 bf 95 aa ad c7 75 fa 99 90 cb 82 7a 1f 50 2a 8a 98 e8 5a d4 00 ba 59 59 56 9d 2a d5 70 34 ef cb 2b e2 c6 a3 b4 f0 6b 50 61 e7 47 68 3a 54 99 ef c2 13 1b d0 95 14 16 9b 50 41 04 fd 20 8d 69 b0 ea 41 bf 6c 67 0f 17 48 35 64 7f bf 4c b7 e5 4f d1 2f 73 d4 79 51 d3 1b fe d4 3e 0e 35 00 a1 be 35 94 97 da 35 2a ad f3 29 ee a0 10 90 ad 89 3f 7c 71 e6 9b e3 b2 35 8f b3 4a 2a 57 17 2f 55 65 b6 12 db ec 0e 62 14 a4 dc 25 68 b9 b9 f6 f5 f6 c7 c9 e3 c6 cc 33 ca 7b 9a ff 00 07 7d ee c8 ad 99 ab 30 41 87 35 89 72 2d Data Ascii: ~0+6S3?[!!QDZnyuFV\lvDLx6[:oC+8WSuzPZYYVp4+kPaGh:TPA iAlgH5dLO/syQ>555)?\|q5JW/Ueb%h3{}0A5r-
2024-05-15 22:37:00 UTC	4072	IN	Data Raw: 55 4c 76 93 29 8a 98 8a f4 76 6e dc 89 8f f2 be 4d c4 28 a8 04 ab bd be a0 9e b6 27 d3 19 a1 ed c5 fc f9 98 38 eb 5f a0 b6 9c d3 51 cf 55 88 b4 c4 c0 e4 b9 11 31 da 60 6a 52 b9 31 1b b9 52 d0 91 62 56 ab 29 46 e6 d6 18 4f cb 3c aa 4f 57 18 38 6d 4d f0 25 47 e1 b5 6e 95 1a ad 9c 06 60 7e 53 0f 32 8b 4a a6 a1 4e 5d c7 c2 bb 12 94 25 b2 d9 3e 6d af f4 82 33 e6 e5 e0 f8 2b 57 e0 65 4e 0f 70 73 29 e7 0a 56 5e 15 7a fc 43 0a 6b 35 44 3a c8 1a d4 1c 5b 0b 91 a9 05 45 07 49 b2 12 00 3c bd 25 57 b6 39 e3 6e 59 59 5a be 22 c9 71 b3 22 cc f1 2b 4b f0 a1 98 33 cc a6 66 e6 4c d3 31 50 dc 93 47 0a 44 39 90 de 40 90 e3 4f 8b a5 c4 6c 95 24 e8 36 09 71 60 5e d7 c6 e5 b7 68 ba 14 3c 8b 07 2c 78 8e c9 6c d3 e0 42 a6 45 a3 f0 fe 45 29 88 d1 91 70 d3 28 95 15 28 6d 0a 50 d4 Data Ascii: ULv)vnM('8_QU1`jR1RbV)FO<OW8mM%Gn`~S2JN]%>m3+WeNps)V^zCk5D:[EI<%W9nYYZ"q"+K3fL1PGD9@Ol$6q`^h<,xlBEE)p((mP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50039	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	424	OUT	GET /steam/apps/1604030/ss_712d9885b750317ab0be515158e51c03cf5944b6.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 49524 Last-Modified: Mon, 06 May 2024 10:22:20 GMT ETag: "6638af5c-c174" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=84596 Expires: Thu, 16 May 2024 22:06:56 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 00 01 06 07 08 09 ff c4 00 42 10 00 02 01 03 03 02 04 03 05 06 04 05 03 05 01 00 01 02 03 00 04 11 12 21 31 05 41 13 22 51 61 06 71 81 14 32 42 91 a1 07 23 52 Data Ascii: JFIFHHCCQXB!1A"Qaq2B#R
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: c9 85 64 38 20 f2 0d 20 20 1f 0a 78 3b ed 9a 43 20 64 24 12 37 c7 63 b1 a0 05 de 46 2f be e7 dc 53 03 5a 95 87 6f ad 21 99 e3 be 86 42 49 4c fd d2 73 40 21 67 2b ab d7 23 b6 f4 ac 62 b2 93 f9 d2 03 ce e4 66 2a 43 11 12 a1 c0 88 1a e5 3a 0c b3 b9 36 b2 eb 51 ab b1 07 b8 a6 84 1e 37 69 9c e9 62 41 e0 1e d4 c4 10 a7 86 30 e3 39 1b 0c 50 06 28 08 ac 4f 9b 03 03 14 c4 41 25 f0 c7 7a 74 01 63 b8 00 9c 67 24 73 45 08 97 8c c7 39 66 3f 5a 74 30 cb 04 d2 20 d3 0e 41 dc 39 1c fe 74 08 34 16 24 0d ce 1b 19 07 b6 29 58 16 22 dd 16 00 ac c9 1e af bd 2b b6 3f 4a 00 51 67 86 13 a2 0c b0 fe 26 18 cd 00 69 a6 33 4b e6 62 54 1e 1b 81 f2 14 08 14 ad df f5 34 d0 1a b4 d9 d9 f8 c0 c0 38 da 80 0f e3 92 fe 72 5b 6c 06 93 fb 0e 28 02 66 69 74 10 93 61 3f 81 36 19 a6 04 26 ba 92 Data Ascii: d8 x;C d$7cF/SZo!BILs@!g+#bf*C:6Q7ibA09P(OA%ztcg$sE9f?Zt0 A9t4$)X"+?JQg&i3KbT48r[l(fita?6&
2024-05-15 22:37:00 UTC	2856	IN	Data Raw: ff 00 4a 7e 09 b4 87 6d 2c 12 c4 95 69 00 98 0d 4e ac c3 cc 41 e0 0f 4f 9d 38 d7 86 4b 7e 5a 07 6f 74 b7 57 33 ea 92 30 c6 3d 40 33 ee c0 54 fd 4e ca fa 55 20 32 75 38 84 4a af 34 7a 83 6c 9c 9f 9f bf ca a3 a2 97 dc bb e8 7f 0b cd d7 ad e7 b9 7b 41 0c 03 18 9a 6f dd 82 7e 47 7f cb 7a de 10 72 56 d1 cf 39 c6 2e 93 2e 20 e8 29 6f 04 6b 1c 71 89 86 cd 2b 64 ff 00 a9 f9 fb 76 ad 3e 1d 11 f1 4b 6b 4b 74 b6 84 65 54 15 dd 9f 18 ce e7 26 ad 46 b6 cc dc ef 48 a8 e9 bd 77 aa de f5 26 81 e0 02 d8 48 c4 69 c6 95 1d 8a b0 3c e3 1d eb 18 b9 b9 fd 8d a4 a0 a1 f7 3a b8 83 49 bb 9d 4e 49 25 89 c9 62 7d 4d 75 9c 83 b0 f9 46 dc d3 11 73 d3 d8 10 75 67 34 e2 62 c6 64 b1 ce 59 71 83 43 41 16 06 15 75 7c 46 b9 23 6d f8 a8 34 a1 f8 9a 58 54 33 c8 04 80 82 00 d8 8a ab 74 1c 51 Data Ascii: J~m,iNAO8K~ZotW30=@3TNU 2u8J4zl{Ao~GzrV9.. )okq+dv>KkKteT&FHw&Hi<:INI%b}MuFsug4bdYqCAu\|F#m4XT3tQ
2024-05-15 22:37:00 UTC	14240	IN	Data Raw: 8f 0d 90 b0 df 0a ca 7f af ce 92 7c ba 25 c1 a2 9a e2 41 e1 97 59 75 67 f0 8c f1 df 9a b4 c8 a2 ab a8 b2 90 ea d2 20 2a 77 f6 c7 34 68 71 d1 47 73 71 1a 5c 0b 72 5f c4 61 90 55 36 f5 c1 3f 4a 86 d2 74 6f 14 da 72 23 24 31 c8 ca a6 4d 04 1c 92 78 fc c6 f8 a7 d8 26 43 a6 de d8 cb e3 97 9a 23 2d bb 60 c4 e8 e5 64 f5 20 8c 6d 59 a9 a6 d9 a3 83 5b 1c b7 b9 39 66 82 78 e2 5d d7 31 82 84 8f cb 8f ed 5a 19 93 9a 0f 16 42 1a ee 06 07 28 5f 53 10 3f 4e 0f 6f 7a 68 45 65 ec 0b 6a 59 96 e2 29 b1 81 88 f5 1f af 14 86 54 cb ae 4d bc 45 23 3f 8b ff 00 14 ac 28 8c 52 36 a5 53 22 8f 6f 6a a4 cc da 2b 7a 9d 9e 89 0e 0a e9 3d c1 ef 41 70 76 57 0b 60 57 7c 00 39 34 8d 2c 5a 52 55 74 80 02 03 db b9 f5 34 ba 18 ab 13 9c ae c4 6f b5 21 84 62 26 5d 59 0b 27 71 c6 6a 84 23 2d ca Data Ascii: \|%AYug *w4hqGsq\r_aU6?Jtor#$1Mx&C#-`d mY[9fx]1ZB(_S?NozhEejY)TME#?(R6S"oj+z=ApvW`W\|94,ZRUt4o!b&]Y'qj#-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50040	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	623	OUT	GET /steam/apps/1649240/header.jpg?t=1696502086 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Fri, 18 Nov 2022 16:44:27 GMT ETag: "6377b66b-a562" Server: nginx Content-Type: image/jpeg Content-Length: 42338 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=339097 Expires: Sun, 19 May 2024 20:48:37 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 09 ff c4 00 45 10 00 02 01 03 03 02 04 04 03 05 05 08 02 01 04 03 01 02 03 04 05 11 00 06 21 12 31 07 13 41 51 08 22 61 71 14 32 81 15 23 42 91 Data Ascii: JFIFCCE!1AQ"aq2#B
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: fb 6a 55 2d 96 8d aa 24 00 0f bf 4f 3a 93 ed 4f 81 bb 46 87 fc bf 75 0d e0 93 0d e9 41 ee 8f ec ec df 36 7a 69 6b 29 6f b6 29 e9 a2 89 e6 97 aa 67 ca 85 05 88 18 1c e4 0e 3e fa d7 85 f6 99 c1 f1 0f 11 39 af cc 48 03 4e aa b7 f0 59 58 2d a5 52 7c 13 f8 4c bb f8 bb 5b 7e 4a 7b 85 0c 09 63 ab 8a 9a ad 2a 59 a3 2c 5d 0b 8e 9c 03 9e 06 31 ae ef 1d ed 76 13 82 36 23 38 3f dc 04 8a d7 63 4a 8c 2f 0e 7c c5 d5 ad 2a df 8c db 02 bf c2 ed e7 5d b6 2e 14 b6 f8 6b a1 44 9a 48 ad f2 f9 91 22 b0 ca 64 90 08 62 b8 38 fa eb a7 c1 78 9c 3c 5f 0a dc 6e 1c 92 c3 60 58 ab ad fe 17 a2 4c 4c 2e 85 c6 37 6e a8 14 f4 7e 6c 7c 28 c9 6c 12 46 4e 07 70 07 ae bd 0b b4 d5 73 c1 bd 02 d5 f6 ef 80 95 fb c6 d1 b7 6a a8 6a 63 92 4b bc ab 0c 44 fe 4e e4 61 4f 7c fd 3b eb 91 8a e2 70 e0 d8 Data Ascii: jU-$O:OFuA6zik)o)g>9HNYX-R\|L[~J{cY,]1v6#8?cJ/\|].kDH"db8x<_n`XLL.7n~l\|(lFNpsjjcKDNaO\|;p
2024-05-15 22:37:00 UTC	1767	IN	Data Raw: 00 6d 30 25 04 00 9d 7e 0d 9a af a8 46 70 7b 16 1c 31 fb e9 c0 d5 53 9c 06 ee 9f 45 0a ce 12 2e 0b f5 00 3a 4e 30 7d 38 d5 c1 67 27 2d b9 2d b8 ec 50 52 44 92 03 fb c7 70 bf ba fc aa 7d 73 eb 9d 4b da 00 b5 5e 1a 77 3c 96 9d 82 2d 25 0b 19 4a 16 e8 5c a8 eb 03 81 f6 d4 b4 27 73 f4 b4 a5 fa cc d1 dc a6 56 66 98 7c a7 cc 6e e7 ef a9 73 75 49 87 96 e3 07 65 1a b4 4c b2 60 2f 6f 41 a4 a5 a7 36 9a a5 e3 47 45 67 60 41 ec 07 7f e9 a6 09 34 d9 38 86 df 2c f2 f5 05 62 b8 2c 5c 0f 4d 00 14 85 e0 04 7f d8 ca d8 ea 5e 5b f2 9f 73 a6 ca 94 4a 52 d6 db 11 86 a2 2e bf c9 d6 a0 92 33 c9 3d ff 00 4d 01 94 95 f3 02 d3 4a e1 b1 ad 8b 73 bf 52 d3 b4 8f 4d 9b 84 30 ac 89 f2 bc 59 ce 0a 9f eb f7 c6 ad 60 5c ac 64 bd dc 25 c3 5f 09 3e aa c9 bf 8b ec 5d d1 76 b7 a4 cd 5b 2a d4 Data Ascii: m0%~Fp{1SE.:N0}8g'--PRDp}sK^w<-%J\'sVf\|nsuIeL`/oA6GEg`A48,b,\M^[sJR.3=MJsRM0Y`\d%_>]v[*
2024-05-15 22:37:00 UTC	8144	IN	Data Raw: d9 1b 9a 4b 14 fe 7c 6c bc ab 28 0f f9 58 7f 74 fd f4 30 a9 c5 40 25 14 52 d6 0a 39 6f 1b ba 68 e2 96 51 49 34 4f 2d 6f cf 8c c3 d2 4b 73 ed 9c 71 a0 6a 54 4a f1 14 16 46 a3 41 ea aa 54 aa 64 4a 99 91 d7 ca a3 1d 4b c6 0b 7c d8 5e 34 83 ec ba 07 4a 07 9a 92 b3 cb 7c de d5 8f 63 a4 ad 9e 4a 9b ab a5 32 c4 d2 16 59 49 61 c6 3d 4f a8 f5 e3 48 f9 32 b1 ce 71 a0 05 fc 94 36 28 d8 e6 90 dd 97 73 f8 dd 79 8f 65 ec 2b 55 ae cf 4c 91 d2 43 43 4b 68 58 22 05 5a 58 62 5c 3c aa 0f e5 ea 71 26 51 b0 46 78 ef 9d 79 ee cf 30 3a 29 b1 da dc ae d2 f5 d0 79 aa b8 a3 f3 ca cc 39 35 41 71 c6 e6 dc 2d b8 2e 2d d2 cd 3c f2 be 15 48 f9 8b 7d b5 df 7b ac a6 82 2e e9 ab 5d f8 09 a7 fc 37 88 5b c3 c4 19 e2 92 58 36 d5 b4 53 c0 a8 70 7c e9 dc 26 41 f4 c2 07 6c e9 e0 66 67 1f 25 9b Data Ascii: K\|l(Xt0@%R9ohQI4O-oKsqjTJFATdJK\|^4J\|cJ2YIa=OH2q6(sye+ULCCKhX"ZXb\<q&QFxy0:)y95Aq-.-<H}{.]7[X6Sp\|&Alfg%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50041	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	622	OUT	GET /steam/apps/394360/header.jpg?t=1715685474 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 43044 Last-Modified: Wed, 03 Apr 2024 11:47:47 GMT ETag: "660d41e3-a824" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=477626 Expires: Tue, 21 May 2024 11:17:26 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 09 00 0a ff c4 00 5b 10 00 01 03 03 02 04 04 04 02 06 05 06 07 0a 0f 00 01 02 03 11 04 05 21 00 06 07 12 31 41 08 13 51 61 09 14 22 71 81 91 15 23 Data Ascii: JFIFCC[!1AQa"q#
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 3a 36 9f 03 f8 31 45 c3 3b 02 6a aa d0 87 b7 1d 6b 60 d5 3e 4f 30 65 24 c8 69 04 81 80 72 4f 72 3d 04 9c d9 9a ad 27 1e 79 a5 9a 57 c4 7b 2f dc 96 ef bb c3 3b 57 68 dc af 48 75 0c bb 4a d9 50 05 22 1c 02 4f 29 88 30 7b 10 64 13 3e c7 2a 57 c7 7d 85 ae 77 10 d9 b8 d5 45 5f b4 68 eb aa 79 a9 42 2a 9b a0 7d b5 7e d3 2e 29 61 24 ac c9 00 09 04 93 d3 3e 9a 09 39 5e 9f 24 12 c6 ae d0 8b 72 f1 2a 9d 81 71 63 cb 29 76 9c 72 25 4a 23 ea 24 90 71 18 c8 9d 07 3b 8c 8c 19 5f 31 ba 95 5c 5c 75 2b 92 08 31 d4 48 3a 9a 68 7d 12 4d c1 e2 16 c5 c2 9d 9a dd 65 7d be ae f1 71 a9 75 42 92 96 95 a2 42 dc 00 40 2e 11 09 00 c9 ee 63 a0 3a d3 d3 c3 c4 7e c6 4c b0 77 b1 90 f8 9b 57 c4 ff 00 10 f7 67 2e 97 bb 65 5d 35 03 12 69 2d c9 49 65 96 53 e8 80 a2 0a d4 7a 12 64 93 d2 04 01 Data Ascii: :61E;jk`>O0e$irOr='yW{/;WhHuJP"O)0{d>W}wE_hyB}~.)a$>9^$r*qc)vr%J#$q;_1\\u+1H:h}Me}quBB@.c:~LwWg.e]5i-IeSzd
2024-05-15 22:37:00 UTC	2473	IN	Data Raw: fa 0f 45 7e 22 0f 7c bf 83 ce 20 38 0c 11 fa 3f 3f 7b 85 30 d6 8c bb c1 99 71 7d 68 a6 3e 11 4f 79 dc 35 e2 01 f4 bd 35 ff 00 ab a7 41 d3 fd 21 e7 fa 88 47 c5 e6 a3 c8 dc dc 30 13 d6 8e e3 8f fe db 1a 1e a1 5d 0c e9 df 26 e3 f0 d0 79 bc 3a f0 ac ff 00 f5 52 d4 7f fe 23 5a d3 1f a5 7b 19 65 f5 3f 73 ce ff 00 19 96 de 0c 6d 7b 05 f3 75 70 e2 ff 00 cf c5 ba 7e 22 3e e5 cd d7 6e 0a 45 ca 8d e4 b9 50 e3 c1 a6 41 4c 32 87 92 d9 43 89 49 cf 28 e7 26 75 9f 22 8a 56 b9 b3 46 3d 4d d3 e2 8c 53 ba f7 ee e0 de db ad 17 7b dd e2 b2 ff 00 7c 75 4d 23 e6 ee 2f 97 9d 59 49 01 09 2b 51 24 81 00 09 38 1a c9 a9 ca 56 cd 8a 0a 31 3d 3d a8 e2 6f 8f e0 7f 51 c2 5d 90 a1 1f da ab 62 7f fe c0 6b a6 b5 56 e7 33 e5 b0 81 c4 ff 00 88 34 e7 84 7b 1a 3f f2 ca 7f f6 8e ab e6 2f e4 f3 Data Ascii: E~"\| 8??{0q}h>Oy55A!G0]&y:R#Z{e?sm{up~">nEPAL2CI(&u"VF=MS{\|uM#/YI+Q$8V1==oQ]bkV34{?/
2024-05-15 22:37:00 UTC	8144	IN	Data Raw: 0b bd aa f9 41 7e 35 3f a3 ea 6d c5 c0 bf d4 96 ca c3 8d a9 20 20 90 ea 48 01 4a 1d 73 ac d9 63 5b 9a f0 ca f6 19 78 31 e1 9f 89 5c 77 b8 ae 83 66 ed b7 ae 74 ed b8 12 fd cd f5 06 69 28 c9 82 42 de 54 09 00 83 ca 25 44 64 24 e9 30 8b 9f 03 25 35 0e 4d bd b3 be 0e c5 8b 3b 4e 6e 0e 26 ad ab bb bf 53 ec da ed 81 74 ed 98 8e 54 2d c5 85 2c 0f 52 94 cf a0 ef a7 c0 4d 6e 66 f1 df 64 29 a7 f8 4e ec db dd 75 65 05 27 18 5f ab ad a3 50 4d 4d 3d 3d 0b 0b 71 83 24 00 b4 07 49 49 c1 ea 06 a2 c1 15 dc 8f 3c bc 88 67 17 7e 12 9b c7 6f db cd 77 0f 77 55 2e ed 75 08 97 2d b7 16 05 0b eb 20 e0 36 b2 a5 21 44 fa 28 a0 08 ea 7a 68 5e 0f 22 e3 9b cc c9 fb 03 81 d5 37 7e 3e da 38 71 bf ea 5d d8 15 6f d5 1a 5a e7 ee 0d 25 b5 d2 12 d2 96 82 42 d4 94 90 af a4 03 30 42 d2 41 32 Data Ascii: A~5?m HJsc[x1\wfti(BT%Dd$0%5M;Nn&StT-,RMnfd)Nue'_PMM==q$II<g~owwU.u- 6!D(zh^"7~>8q]oZ%B0BA2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50042	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	623	OUT	GET /steam/apps/2379780/header.jpg?t=1713537191 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 47940 Last-Modified: Tue, 20 Feb 2024 13:33:34 GMT ETag: "65d4aa2e-bb44" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=506654 Expires: Tue, 21 May 2024 19:21:14 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 04 05 08 09 02 06 07 03 0a ff c4 00 60 10 00 01 03 03 02 03 04 06 06 04 07 0a 08 0b 09 00 01 02 03 04 00 05 11 06 21 07 12 31 08 13 41 51 09 14 22 32 61 71 15 42 81 Data Ascii: JFIFCC`!1AQ"2aqB
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: ec 77 2d 7f ae 16 fd bd a5 49 b9 cb 92 d5 aa d6 80 9c e6 43 ca 0d a0 81 e3 ca 09 27 e0 6a 89 f2 67 73 9e 56 da 2a 61 4f 13 60 66 ea fd 78 71 a0 2d bc 30 d0 9a 7b 47 59 d2 13 6e b2 c3 6e 1b 6a e9 ce 52 3d b7 15 f1 52 b9 94 4f 9a 8d 54 38 97 1b 95 a1 63 43 1a 00 50 43 b7 6f 6a 05 4b bb 4f d1 f6 4b 82 a1 db e0 36 53 73 9a c2 b0 b6 9b 56 dd ca 3c 9d 77 c4 f5 4a 08 1d 54 69 14 f1 09 dd d7 bf d9 1b 77 f7 fd 13 75 53 98 47 e5 e3 f6 8e fd dd df 55 c6 bd 1e da b1 b5 f6 8a d1 77 40 96 2d 70 dc fa 4e 13 89 49 08 6d 31 c4 75 2d 29 51 f1 c1 48 39 f3 ab 17 7f 1d 83 28 b9 be 8a 0b 23 34 b3 e4 76 9a 6b f1 53 8b b5 5f 15 6d 3a 83 80 bc 47 b2 db a2 bb 31 a7 ec af a0 cc 59 ee d1 9d b7 4a 4e e7 cf 27 15 29 98 7c 91 b0 cb 21 b1 1c 37 47 2d 53 5f d8 68 bf 7a 84 9d 93 f8 93 76 Data Ascii: w-IC'jgsV*aO`fxq-0{GYnnjR=ROT8cCPCojKOK6SsV<wJTiwuSGUw@-pNIm1u-)QH9(#4vkS_m:G1YJN')\|!7G-S_hzv
2024-05-15 22:37:00 UTC	3297	IN	Data Raw: 43 61 aa 05 8f 6d fc 56 3f f3 b5 f8 24 82 7a 59 4b 4f f4 93 6f 31 b1 1e 21 7b 6a 7b 9b d7 26 a1 c8 65 2a 4b ae c7 0e a9 2d 8e 8b 0a 29 24 0f 22 47 e3 4d d1 44 21 73 9a 4e c6 c3 e2 a7 74 9a 71 88 43 15 54 4c b3 a4 8c 39 c0 0d 2e 1c 5a 6c 39 13 ad b6 d6 cb 36 64 17 d9 4a fc 48 dc 79 56 a3 52 3b 5b ae 4e 03 01 39 36 5e 8c b8 a6 5c 0b 1e 14 6c 25 8e 0e 09 4f 63 64 61 69 59 3e f7 78 a3 42 47 67 75 d1 c4 dc 8d b2 c1 2e ad 23 01 6a 03 c8 1a 6c 17 0d 8a 70 b5 ae d4 84 bb 51 bc db 71 19 c2 40 7c 60 a5 69 3b f5 39 07 ec ab 2c 56 b5 ff 00 9d 75 30 d4 00 0f 81 b7 cf 45 4d d1 dc 16 0f f8 7a 3c 4d dd 97 b9 ce 6f 73 db 72 2f e2 0d c5 f9 78 2d 92 df 05 77 6d 3e d4 90 8e f0 fb 8e a4 75 3b 6c ac 78 d6 8a 96 a6 19 18 c8 aa 80 b9 17 04 fa 11 7f 2b ac 4d 76 1d 5d 1f 5b 57 86 Data Ascii: CamV?$zYKOo1!{j{&e*K-)$"GMD!sNtqCTL9.Zl96dJHyVR;[N96^\l%OcdaiY>xBGgu.#jlpQq@\|`i;9,Vu0EMz<Mosr/x-wm>u;lx+Mv][W
2024-05-15 22:37:00 UTC	12216	IN	Data Raw: dc 6d e1 cb bc e5 77 f3 e6 38 65 20 ad 6b 75 5b f3 1d c9 e5 c0 dc d3 54 94 f1 40 f1 90 6b cf 89 53 31 bc 6a bf 15 8c 8a 87 f6 05 ac d1 a3 07 20 1a 34 d3 85 ee a9 fb 53 b3 19 db ee ac e7 6c 97 c4 95 72 a8 9d bd f3 5a 48 99 0b a3 79 2d ed 0e 3e 6b 15 24 d3 b5 d1 30 3b b3 cb c9 48 be c3 da fa 1f 0a f5 76 94 d5 73 e4 33 16 25 b5 db 91 5b af 82 52 0a a3 a9 20 60 6e 54 49 00 0f 12 45 56 54 07 f5 44 46 2e eb a9 b0 16 0a 80 64 36 16 fa ae 23 c7 19 8a 7a 5d b1 85 a8 87 97 df 4b 79 b5 7b c1 4e ba a5 8e 61 e0 70 73 4f 16 ec de 49 b8 8f b4 ee 65 49 cf 46 55 8a 6a f8 e7 c3 b4 08 ee 0e e1 57 1b 9b 9e c9 f6 23 fa b9 40 71 5e 40 a9 69 00 f8 f3 0f 3a 44 9d 96 25 c4 73 4f a7 25 6d 7a 9b 5c 5a 34 a1 0d 4c 79 4e cb 50 ca 62 47 4f 3b a4 79 91 e0 3e 75 4f 24 cc 8b da 2a f1 91 Data Ascii: mw8e ku[T@kS1j 4SlrZHy->k$0;Hvs3%[R `nTIEVTDF.d6#z]Ky{NapsOIeIFUjW#@q^@i:D%sO%mz\Z4LyNPbGO;y>uO$*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50043	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	424	OUT	GET /steam/apps/1604030/ss_19d6b903fd65c410af902a8c5f62c820cfe09292.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 85452 Last-Modified: Mon, 06 May 2024 10:22:20 GMT ETag: "6638af5c-14dcc" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=581225 Expires: Wed, 22 May 2024 16:04:05 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 00 01 02 08 09 ff c4 00 4b 10 00 02 01 03 03 02 04 04 03 06 04 04 05 01 05 09 01 02 03 04 05 11 00 12 21 06 31 13 22 41 51 07 14 61 71 32 81 91 08 15 23 42 Data Ascii: JFIFCCQXK!1"AQaq2#B
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: a0 86 d9 5e 43 35 3c 9b a5 99 89 79 67 75 05 55 a4 66 24 92 ab e4 04 60 6d 0a 31 c0 3a a5 14 98 64 3a d3 97 2a 22 68 e4 26 3d c4 26 7e b9 07 3e ba 2b ae c8 6f c6 f1 d5 37 af 11 f1 9f 53 f7 3e 83 43 fa 16 73 53 4e aa 19 e2 21 a2 27 8c 0c 63 e9 a8 9f 86 4a 12 8d ca 00 c3 b8 3d f5 2a c8 3b 81 3c 79 54 9d a0 b1 23 73 76 39 f7 d0 37 48 24 ac 92 b4 cb 35 82 ba 07 90 27 cb f8 c0 3b 94 0c 42 e7 cc 39 ee 08 c8 d4 be 4b 44 ae 2f 61 e3 41 6d 92 79 7c 62 3e 56 5a 56 0a c1 ff 00 c2 9c 1f 33 8f 53 f4 1c 0c 1c 13 ee b4 d9 9d d4 66 d7 82 32 cf 2c b4 97 1a 44 a0 8e 3b 89 9e a3 6c 54 fe 19 1b b9 01 55 b2 30 09 c6 48 1c 7d 78 d4 25 5a 2f 0a 3e b3 a9 6a 69 2c 3d 4b d2 f5 f4 95 28 e1 fe 6a a2 05 84 c6 44 9b c9 2c 46 36 ee 5c 02 08 1e e4 8c e8 65 92 f7 76 54 31 71 7a 54 ca 4f Data Ascii: ^C5<yguUf$`m1:d:"h&=&~>+o7S>CsSN!'cJ=;<yT#sv97H$5';B9KD/aAmy\|b>VZV3Sf2,D;lTU0H}x%Z/>ji,=K(jD,F6\evT1qzTO
2024-05-15 22:37:00 UTC	2138	IN	Data Raw: 29 9c e1 47 a7 61 cf df eb a1 77 b0 92 a4 4f 7c 3a 99 26 5b b0 65 dd 53 e5 9c 11 d8 80 4f 61 fe fb e8 a1 b4 c5 cd d3 43 de ac b6 c9 53 4d 5a e2 3d f1 c2 84 87 60 00 5e 41 c8 fb 81 ab 6b 44 52 dd 21 97 4b d9 e9 ba 86 c7 75 b3 d4 ab 1b bd 30 12 51 36 ff 00 2a 0e ec 3e b9 e0 7e 60 fa 69 54 de 83 d4 76 03 cb 14 94 f2 c9 13 ab 46 ea 4a b2 9e 08 23 b8 3a 10 cd 18 d9 71 95 23 23 23 3e a3 50 83 98 6a 5e 8d 9e 19 51 66 87 70 2f 13 36 54 91 ea 08 3c 1f a8 f7 d4 28 ca f9 69 eb 2b a7 96 96 0f 93 81 8e e4 80 b9 7d 9f f2 86 f5 1f 7d 45 a2 c6 c5 4a fa 11 f7 d4 20 f6 d7 50 23 95 83 27 8a 0a 9f 21 f5 fa 0f cb 3a 16 8b 43 c6 86 49 a1 f1 55 99 9e 30 a3 85 e3 b9 c3 67 ef c7 eb a0 b4 9d 04 af b1 09 e9 dd 97 c4 f2 2b 37 7c 31 cf 60 7f df df 56 9a 5a 2d a6 f6 1c 74 8f 89 51 4b Data Ascii: )GawO\|:&[eSOaCSMZ=`^AkDR!Ku0Q6*>~`iTvFJ#:q###>Pj^Qfp/6T<(i+}}EJ P#'!:CIU0g+7\|1`VZ-tQK
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: e1 7d 8e 5b dd 44 f5 93 ca 67 b6 42 5e 95 e0 66 c3 28 66 04 b6 7d 72 07 df be 9d 89 a8 dd b1 73 4d bd 20 45 44 c6 e1 3d 25 14 ef 2b 43 01 34 62 99 40 2d 83 96 dc 7d 4e d0 78 f5 c6 95 18 a9 5a 43 79 34 38 ac a5 a8 b8 2d 0a 35 25 44 33 cd 4c bb 56 44 7f e3 31 39 da 83 d3 be 4f a0 c7 6e c3 54 e3 4d 22 27 f2 c3 ff 00 86 fd 5b d3 ef d2 d7 2e 9b bd 51 0a c6 a8 65 9e 34 96 77 28 ca 30 c5 76 f7 40 18 02 54 77 c9 ed ce ab 1c 25 37 49 f4 5b 9a 8c 5d 80 7f 15 6f 49 55 53 fb aa 86 78 67 ab a8 92 3f 1b e5 57 6a 8d dc 04 27 df 81 91 ed 8f ae ba 12 7a e2 8c f0 4f ee 60 f7 43 59 e2 5e ab ab 2d 2a ce b4 4a e2 26 5e 0b 30 3b 41 fe fa ac 6b dc 0e 59 7b 3f 52 26 aa 0a 8a 9b ed 4d 25 59 8d 27 08 b0 8d 8c 48 8f 95 00 0f 7c 67 fb e8 5d b7 4c 62 69 46 d1 3b d1 56 e1 43 d4 77 44 Data Ascii: }[DgB^f(f}rsM ED=%+C4b@-}NxZCy48-5%D3LVD19OnTM"'[.Qe4w(0v@Tw%7I[]oIUSxg?Wj'zO`CY^-*J&^0;AkY{?R&M%Y'H\|g]LbiF;VCwD
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 2a b4 71 9f 2f 3f 88 63 18 f7 e7 9d 2f b4 31 2a 23 3a d2 38 2e 50 d3 d3 c7 56 65 45 9d 46 1d f1 23 13 90 78 e4 00 39 39 23 45 8f 94 6d b0 24 93 d5 8a 50 74 8d 35 4d b0 4d f2 d2 4d 4a 5c f8 74 94 2c 54 b9 ce 0b b3 64 1f f5 3e 83 55 c9 a7 5e 4b 50 54 4d af 49 db a6 a8 b5 d5 49 11 b0 4d 15 6a 4a b2 78 c7 94 0d 90 8c 17 8f 4c fa 9e df 98 f2 74 d7 65 b8 ef 7a 3d 15 6b eb 3f 86 f5 37 19 17 fe 25 b7 54 dd 36 6d 78 6a a9 26 a6 a1 12 9e 48 62 72 f1 e3 be 38 1f 96 b0 7d 1c 8d 5d 51 a5 64 87 4d 8f e8 3a e2 4b bc d2 ad 35 c2 9e a2 1a 54 14 f1 53 db 76 3d 24 6d e6 39 3b 47 27 1d 81 f7 24 8c e8 1e 3e 2a 9a 0a 32 4f a2 95 f8 db d1 52 53 54 3d da 08 23 1b b9 98 c2 84 07 6c f2 7e 87 39 d6 ff 00 4b 95 57 06 66 cd 8f f8 91 41 5d 6d 91 4c 4b b5 3c 59 3c ef c6 18 fe 63 5d 1a Data Ascii: q/?c/1#:8.PVeEF#x99#Em$Pt5MMMJ\t,Td>U^KPTMIIMjJxLtez=k?7%T6mxj&Hbr8}]QdM:K5TSv=$m9;G'$>*2ORST=#l~9KWfA]mLK<Y<c]
2024-05-15 22:37:01 UTC	7952	IN	Data Raw: a2 19 9f e5 10 01 96 44 18 c9 c1 6c b6 4e 5b 71 ce 00 0d 73 49 53 dd 7e 2b 66 45 b5 6c 56 cd d5 d4 56 ea 93 5a 84 5a e0 a2 8e 40 f0 53 4a ee 8c ac 0a 89 36 b0 52 c7 39 ef 93 d8 9d 26 9c 17 7c 9f e4 ca e5 18 5b 7e 01 5a fa a8 96 67 8a 2a b9 dc 55 d4 45 4e 93 55 04 fe 22 2e 59 98 91 ca 11 dc e0 73 81 92 74 b7 27 27 c9 a3 34 a5 7b f9 21 3a b2 4b 0d 2d 73 25 ae aa 5a ab 74 84 88 a6 28 42 83 8c e1 49 03 3c 72 4e 3d 7b 9d 33 1f d4 92 a6 b6 04 9c 6e a3 d1 7a da 7a 82 1e a3 f8 7f 6d b4 d4 2d 3c 34 e9 4c 88 fb 37 ec 91 14 e5 8b 30 03 72 e5 72 42 90 18 e0 76 d5 46 1f 08 4b 93 b1 dd f2 f3 4d 45 65 8a 90 d3 22 c4 15 63 22 5f c2 f8 0d 85 7f 08 82 4e 08 ca 60 00 5b d7 19 d3 21 0b e8 19 3f 27 94 3e 2f 74 84 f6 fb a2 dc 6d 91 a2 5a 66 61 e1 d1 d1 59 a4 a4 8d 5f d4 26 e2 Data Ascii: DlN[qsIS~+fElVVZZ@SJ6R9&\|[~Zg*UENU".Yst''4{!:K-s%Zt(BI<rN={3nzzm-<4L70rrBvFKMEe"c"_N`[!?'>/tmZfaY_&
2024-05-15 22:37:01 UTC	10168	IN	Data Raw: 80 c0 91 7b 1d 4a 76 4d 50 dc c6 7d f9 d1 02 38 a0 ae 34 85 a3 71 be 07 fc 69 fe a3 eb aa 2d 3a 25 de d9 9a 75 9e 29 04 b1 81 9e 07 a7 b8 ff 00 b7 a6 8d 49 74 c9 43 35 8d 58 32 b3 28 c7 63 a8 d9 12 b3 80 8e cd b4 36 47 bf d3 53 a5 b2 23 60 94 0e 00 e3 81 9c f7 d0 76 42 52 df 4c b4 eb 21 90 e1 99 7b fb 68 1b b6 1a 4c 76 25 86 18 1a 3e 7c bc e7 41 d8 ce 8d 51 d7 3d 51 10 84 50 8e 09 df 9e 5b 07 b0 1a 80 a6 49 33 22 32 a0 38 52 08 e3 18 cf be 7f 5d 44 da 27 63 0a c8 44 94 12 37 19 61 dc e7 8c 71 f7 d4 8f e4 8d 68 58 55 35 8e c2 b8 6f e3 d4 1f 22 81 d8 7a 7f df 51 c5 ce 74 52 f6 c6 c6 36 44 7a 73 3d 7c ac 48 1e 51 93 c9 27 b9 d3 a7 a5 48 18 6d db 16 92 f4 92 bb bc 49 8c 80 37 1e e0 76 ed ab 8c 65 5b 05 b4 d9 dc 15 9f 28 5b ca ad db 96 19 d1 b4 a8 89 d0 ee 93 Data Ascii: {JvMP}84qi-:%u)ItC5X2(c6GS#`vBRL!{hLv%>\|AQ=QP[I3"28R]D'cD7aqhXU5o"zQtR6Dzs=\|HQ'HmI7ve[([

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50044	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	424	OUT	GET /steam/apps/1604030/ss_262496a8c3ed1335d63398fe06f8dd4d43d311cf.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:00 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 73337 Last-Modified: Mon, 06 May 2024 10:22:20 GMT ETag: "6638af5c-11e79" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=333314 Expires: Sun, 19 May 2024 19:12:14 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:00 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 00 02 07 01 08 09 ff c4 00 4c 10 00 02 01 02 04 03 05 05 06 04 04 05 04 01 00 0b 01 02 03 04 11 00 05 12 21 06 31 41 13 22 51 61 71 07 14 32 81 91 23 42 a1 b1 Data Ascii: JFIFCCQXL!1A"Qaq2#B
2024-05-15 22:37:00 UTC	16384	IN	Data Raw: 19 a1 93 4c ea 35 55 5c 9a 67 8f 56 3b 95 dd df 05 be 56 91 4a 4b 24 1a 74 7c 43 50 36 3c b9 8e 78 e9 45 da df 63 98 d2 bd 88 e5 24 a0 95 d8 c2 4e c8 ce 6c 09 fe f8 22 72 06 b4 26 0a 49 99 56 30 9f 11 77 22 ed e4 3c 7c b0 3a 92 18 90 39 a2 94 9d 6a 19 0f c2 4c 97 e4 3c 06 0b 90 d5 25 ee 78 f2 1a 48 49 62 08 1b 73 b6 f8 2a a2 9b b7 b8 34 95 71 54 95 44 55 0e de 76 b7 ad b1 49 f6 2e 51 ad c8 6a 29 c4 51 01 fc c6 27 9a 9e 67 c4 f9 62 fd c1 03 9e 48 e0 8a cb 21 69 49 00 dc 5a c3 a9 f2 c4 e0 80 f7 5b 11 6b ff 00 a7 03 61 a4 45 ef 7d 9a 9e cc 90 c7 61 e5 e7 6c 44 fc 11 a2 6a 5a 85 66 d2 49 0d ca dc 89 c4 b4 08 c2 12 22 7d 21 be 23 76 d5 f7 7f df 04 9a e0 a1 8a 91 14 5b 3a c8 dd 0d f7 c1 50 34 7b 4d 5a d1 33 1e d7 4b 78 0d b7 fe f8 14 50 dc d6 76 d0 2a 30 0e 5b Data Ascii: L5U\gV;VJK$t\|CP6<xEc$Nl"r&IV0w"<\|:9jL<%xHIbs4qTDUvI.Qj)Q'gbH!iIZ[kaE}alDjZfI"}!#v[:P4{MZ3KxPv0[
2024-05-15 22:37:00 UTC	2239	IN	Data Raw: a6 0a 8a b3 5f e1 e2 40 ae d6 53 6d 99 7a 79 60 fe 1f 90 75 b4 32 cb ee 49 8d 88 27 4f 21 f7 86 1d 15 d8 5b 7d c9 25 a1 0c b7 2b 7b 72 b7 5c 35 47 c8 ab a1 2d 56 58 22 96 f6 ee 9d c6 17 2c 5e 06 c3 28 18 a3 31 bb 28 1b 74 c0 28 0d 73 3c 6a 62 bb 81 8b d0 45 32 7c ba 59 72 ea d4 9e 31 ba 9d c7 46 1e 18 38 c5 a2 39 26 3d cf 32 d4 ab 8e 3c ca 9c 00 92 5b 5d ba 37 43 fa 1c 39 46 c5 6a a0 4a 6a 6e d1 6e 07 ae 1d 18 09 72 1c 65 54 94 fe fd 0f bd 29 30 16 01 ec 6d 6f 3c 3e 31 33 b9 1d 31 69 21 a6 8d 62 86 35 48 c0 b0 55 16 03 0c 48 16 c5 19 d6 66 9c 3f 1c 93 43 31 67 6d da 96 40 5e 39 4f 2b db ee 7a 8f a1 c0 4a e3 bc 5f e0 52 51 9e d2 fc c5 7c 05 c5 91 c5 1d 56 5e 84 d3 c6 b2 17 a5 86 56 07 b8 4d f4 0e 84 a9 bd ba d8 e3 17 4f 91 41 bc 4f 6f 1f c1 a3 a8 c5 a9 2c Data Ascii: _@Smzy`u2I'O![}%+{r\5G-VX",^(1(t(s<jbE2\|Yr1F89&=2<[]7C9FjJjnnreT)0mo<>131i!b5HUHf?C1gm@^9O+zJ_RQ\|V^VMOAOo,
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: f7 3a 77 0e f0 fc d1 15 af ac 84 c3 51 29 0b f6 82 eb 0c 7e 02 dc f9 ee 76 c7 53 12 d2 ad f2 cc 19 1e af 4a e1 1d 13 2d cb a3 ca e4 13 6b f7 8b d8 0b 11 a4 1b f2 36 bf d3 0e b6 cc fb 0e b8 76 93 de 78 9a 92 84 21 68 e5 a9 45 92 16 da ea 4f 2f a6 f8 94 12 68 f6 67 19 b5 62 c6 a9 a6 a6 b6 40 da 6d dd 00 b5 91 47 90 b8 db 14 69 4a 86 93 ae 9c d6 48 29 66 65 a2 89 9a 28 0a ec c5 35 5a ff 00 32 09 3e 37 c5 7b 82 f8 3b 67 b3 9f 63 34 be d0 38 71 dd b3 3c c3 2d a9 47 d3 34 f1 d9 81 42 0e 90 97 e4 c3 9d cd f9 f2 e5 80 9e 45 8f b5 83 18 b9 1f 36 7f 88 5f 65 99 f6 5b a2 6a 2e 28 5e 34 a8 a5 98 d3 4b 49 04 b2 76 b0 15 b0 8f 49 6e eb 6d d0 1d ad 6b e1 1d 4c 16 47 af 4f e1 74 68 e9 a7 a1 38 ea af 7a b3 e4 79 b2 c9 5f 3d a5 15 b9 6b 50 49 55 da b2 54 76 8c cd 2c 91 b1 Data Ascii: :wQ)~vSJ-k6vx!hEO/hgb@mGiJH)fe(5Z2>7{;gc48q<-G4BE6_e[j.(^4KIvInmkLGOth8zy_=kPIUTv,
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 90 42 97 31 49 60 fa 8f f5 28 fa 5f 96 16 f1 e9 6e ff 00 d0 89 26 86 f5 4f 3d 34 9a 8c 36 8d 6e 74 e9 e7 e5 7c 5a d9 02 80 a9 aa 85 66 69 3b c9 22 bd a3 05 15 6e 05 af 6b 5b cb 6c 03 de 41 2e 09 63 8a 47 ac 63 18 68 b6 b3 91 ce c7 f2 c4 ad c9 66 e7 29 82 48 99 59 59 85 b9 83 72 71 4a 28 bb 64 4f 1d 6d 04 36 86 67 ec 0f dc 76 0d a4 5f c4 ef 86 27 28 ec 02 a7 bb 04 a3 99 9e 91 a4 7a 99 43 31 d2 80 b7 dd 1e bc ef 89 16 f9 6c b6 92 00 cc de 4a 95 d4 5d c9 5b 00 64 e6 c3 d0 72 c5 3b 64 8a a0 ba aa 59 a2 54 31 b6 85 e4 c3 9d c7 ec 61 d4 c1 b0 16 35 10 25 95 83 6a 21 ac db d8 60 2d a5 b1 40 49 50 05 43 76 92 1b b0 24 93 c8 1f 4f 0c 0d 84 93 02 9a 48 c4 4c 9f 13 31 dc 9d c9 c0 6d 43 10 94 cb 1a 31 8a 29 18 bd f9 c8 c1 40 f9 9e 98 cb 29 4d bd 28 1b 92 ed b0 ae b5 Data Ascii: B1I`(_n&O=46nt\|Zfi;"nk[lA.cGchf)HYYrqJ(dOm6gv_'(zC1lJ][dr;dYT1a5%j!`-@IPCv$OHL1mC1)@)M(
2024-05-15 22:37:01 UTC	5904	IN	Data Raw: 6b 25 a7 77 05 87 c2 75 6c 3f f3 8e 66 5c 6f 1b 71 7c 9e 83 06 65 92 3a a2 b6 12 b4 45 49 e4 2c 7f 1c 66 69 a3 5a 76 83 4d 64 72 d2 46 b2 2b 76 ea 48 32 03 7d 4b d0 5b cb 0d d6 9c 52 6b 74 2f 4d 3d 88 16 af b1 a9 49 54 0f b3 22 de 76 3d 70 31 9e 89 6a 2f 45 c6 88 a4 93 5c 8e e3 70 c4 9c 49 35 26 e4 82 4a 95 13 c3 56 9d 98 47 bf 2d 3b ef 7e 78 25 2a e0 5b 83 bb 46 d4 f4 15 55 54 f2 54 45 0c b3 43 17 c6 ca 84 aa 75 dc 8c 68 84 32 e4 8b 9c 62 da 5c f8 44 72 8c 5e 97 b0 db 86 a9 68 73 ba b7 a6 af aa 5a 10 54 68 6d 00 86 6b da d7 be db 6f e7 8d 7d 26 3c 59 f2 69 cb 3a ba 4b 6b dd ba df c2 42 32 ea c6 b5 43 71 55 65 37 bb ca ea 80 93 1b 14 6f 91 b6 13 24 e3 26 bc 6d f9 0e 84 ad 6e 1d 1e 70 d9 a6 5d 47 95 54 84 09 03 30 82 73 70 52 ff 00 74 f4 2b 7b 6f d3 1a 23 Data Ascii: k%wul?f\oq\|e:EI,fiZvMdrF+vH2}K[Rkt/M=IT"v=p1j/E\pI5&JVG-;~x%*[FUTTECuh2b\Dr^hsZThmko}&<Yi:KkB2CqUe7o$&mnp]GT0spRt+{o#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50045	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	636	OUT	GET /steam/apps/1158310/header_alt_assets_4.jpg?t=1715685390 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 37743 Last-Modified: Mon, 15 Apr 2024 14:43:57 GMT ETag: "661d3d2d-936f" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=477611 Expires: Tue, 21 May 2024 11:17:11 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 07 00 05 08 09 ff c4 00 5f 10 00 01 02 05 03 02 04 03 03 06 07 09 0b 07 0d 00 01 02 03 00 04 05 06 11 07 12 21 08 31 13 22 41 51 09 14 61 15 32 71 16 23 42 Data Ascii: JFIFCC_!1"AQa2q#B
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 95 0c c9 8b c4 8d 1e 87 eb ed 63 a3 6e b2 e9 32 17 55 7b 52 a5 ad 8a fc b4 b8 69 33 ec bd f2 73 e1 b0 49 0d 3a c3 a8 3e 20 49 27 18 04 f2 76 ab 07 93 7b 64 64 c4 f5 18 1e d4 8e 30 bb ef ed 02 d0 cf 9b 94 d1 e9 6a 8e a3 5d ae 36 e3 0d de 17 6b 08 f9 2a 78 50 29 52 e5 65 0a 13 e2 39 82 70 b7 52 42 4e 0a 41 f4 4f 10 e6 27 52 3b f5 29 47 3b a5 f0 fe ac b7 7e 1e 5d 53 69 6f 48 9a 2d 75 4d de 97 0b b3 75 ba f5 53 c5 62 83 48 93 71 f9 94 34 cb 61 21 4b 51 09 6d 3b 8a 95 8c af b0 fc 40 74 24 9a 39 7a 9d 3c f1 ce bb 1c 77 a3 ba fd 55 d1 4d 7c 91 d4 ab 78 38 85 31 51 72 61 d9 25 2b 02 66 55 c5 9f 15 85 fa 61 48 51 19 f4 38 50 e4 03 02 9d 31 ae 2a 50 da 77 77 5f fa ef d3 2f 51 da 69 45 b8 a4 2f 29 b4 6a 04 9c 8b ae 52 9a a7 d3 56 b7 55 94 95 09 49 cd c0 25 09 f1 31 Data Ascii: cn2U{Ri3sI:> I'v{dd0j]6kxP)Re9pRBNAO'R;)G;~]SioH-uMuSbHq4a!KQm;@t$9z<wUM\|x81Qra%+fUaHQ8P1Pww_/QiE/)jRVUI%1
2024-05-15 22:37:01 UTC	3292	IN	Data Raw: 51 2b 72 33 52 96 c1 a0 cc 09 ba 45 3a dd 93 6e 4a 4a 41 dd c1 45 6d b2 81 b4 a9 44 0d ca 5e e5 28 70 a2 40 02 1f 1d 3e 35 17 17 cd f5 be 58 b7 91 a2 c2 d4 5e ba 6f 6d 44 99 fb 51 db 5e c8 a2 5d 65 b0 da ae ca 4d 09 28 ab 1c 0d bb 92 fb 8b 59 42 f1 90 16 80 95 0c f0 46 06 33 e3 d0 e3 c7 c5 b6 bd 1b e0 8f 34 a5 d8 e7 97 1e 5b ab 71 d7 16 a7 1c 59 2a 52 d6 72 54 4f 72 4f ac 6e f8 11 79 63 67 40 69 b7 5c da 81 a7 da 5a 74 ed fa 65 b1 79 da cd ee 12 b2 97 6d 2f e7 c4 a0 24 9d a8 05 69 49 48 24 90 16 14 06 70 38 e2 31 64 d0 e2 9c fc 54 da 7f 07 44 86 69 56 de a6 9b 51 ba b3 bd 35 7a c0 b6 ec 8b 9e 4a 88 f5 bf 44 9c 33 6c a2 9d 4d 6e 4d d5 02 b5 9f 0c 14 79 5b 48 4a f6 00 da 13 c2 53 9c 9c 92 58 f4 b8 f1 4d e4 83 76 c6 ee 94 d6 d1 3e a4 ba 8e a8 f5 1d 72 51 eb Data Ascii: Q+r3RE:nJJAEmD^(p@>5X^omDQ^]eM(YBF34[qY*RrTOrOnycg@i\Zteym/$iIH$p81dTDiVQ5zJD3lMnMy[HJSXMv>rQ
2024-05-15 22:37:01 UTC	2024	IN	Data Raw: 92 46 26 ef e9 81 b1 15 2a 64 b2 ca 41 09 6d b0 41 19 e3 d0 c6 27 2d 0a e7 6c 99 b6 2b cb cf 53 45 35 31 77 29 f7 14 fc f4 9a 94 95 2b cc a6 00 0a 23 d7 b4 6b 8c f4 b5 4a 2c cb 28 f2 6c 29 52 1a 88 a4 29 6c b9 4b 71 ae 79 73 6f 3e b9 c6 33 ff 00 fb 08 9e 6f 67 f4 7b ac 28 63 c9 f0 a3 62 d5 bb a9 13 b8 dd 3f 49 61 2a c7 90 04 93 fb 31 91 ef 0a 7a 9f 67 c7 a4 64 c6 78 79 1f 74 33 a8 52 2f 26 e4 e6 1b 9c ae 4a a0 0f 21 43 72 d9 27 f5 e3 88 28 6a 74 9b 96 dc 6f ef 07 64 a9 db 2b 2a 75 4a 66 61 73 a5 f7 8c c2 db 73 c3 2a f7 ef 98 f4 32 c7 14 a3 b5 55 9c 37 26 dc be 01 d6 e1 74 13 83 cf 61 ed 14 95 03 7c 1b bb 11 45 9a da 0e 70 a5 1e 01 ed 01 95 5c 49 07 52 1c 6a cb 89 9a ba 5d 98 c7 2f 34 da c9 f5 27 6e 39 fd 90 ed 3f 10 11 97 a9 5f a9 38 59 ef 1b 11 92 80 71 Data Ascii: F&dAmA'-l+SE51w)+#kJ,(l)R)lKqyso>3og{(cb?Ia1zgdxyt3R/&J!Cr'(jtod+uJfass2U7&ta\|Ep\IRj]/4'n9?_8Yq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50046	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	424	OUT	GET /steam/apps/1604030/ss_4a88ba3b0353f3d43f045e5230c9d600e19daae8.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 58596 Last-Modified: Mon, 06 May 2024 10:22:20 GMT ETag: "6638af5c-e4e4" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=273775 Expires: Sun, 19 May 2024 02:39:55 GMT Date: Wed, 15 May 2024 22:37:00 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 09 ff c4 00 4e 10 00 02 01 03 02 03 05 05 05 06 03 06 04 04 05 05 01 02 03 00 04 11 12 21 05 31 41 06 13 22 51 61 32 71 81 91 a1 07 14 42 b1 c1 Data Ascii: JFIFCCQXN!1A"Qa2qB
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: e1 0f b1 bc bf e1 d6 fd c8 b1 8e 4f 13 36 bf bc a8 ce 49 3c aa 51 94 e2 aa bf 52 b9 28 be 6c 21 e2 fc 4c 02 47 0e 8c 7b ee 47 f2 ab 37 4f ff 00 cf ea 55 51 f7 1a 38 cf 14 07 6e 1d 1b 7f fe c8 a3 7c ff 00 fc fe a4 76 c7 dc 72 f1 9e 24 c7 7e 1b 1e 47 ff 00 dc 8a 37 64 ff 00 f3 fa 8f 6c 7d ff 00 41 e7 8a df cb 1c 91 9e 18 b8 75 2a 7f da 17 a8 c5 45 ce 5d 6d fd 49 c6 31 ee c1 4d 67 28 ec c3 c1 2e 3b c4 8c 10 32 0e e2 a3 2f ff 00 aa 9f 65 b8 d5 e4 e3 a0 1d 93 bb fd d3 21 ce c7 38 cd 55 8d f6 8b 65 1f 25 57 6c 38 95 cd e7 15 6b 58 f2 2d 11 4a 9d 23 39 7e 59 e5 9e a4 0f 8d 73 f5 19 53 93 8f b1 d7 d3 e2 c9 8a 2a 69 fe 24 cb 9f b3 ee 27 24 77 66 cd 20 0a af cd 9c 13 86 51 be 37 ea 07 e5 ee ac b8 dd 49 be d9 d4 96 4f 56 11 85 52 5c 7e 61 3b 7f c5 45 f4 33 46 91 3c Data Ascii: O6I<QR(l!LG{G7OUQ8n\|vr$~G7dl}AuE]mI1Mg(.;2/e!8Ue%Wl8kX-J#9~YsSi$'$wf Q7IOVR\~a;E3F<
2024-05-15 22:37:01 UTC	1737	IN	Data Raw: be d1 ac 6c 64 9e 49 e1 b6 0d 74 8d fb 99 a3 52 c5 ed 98 b1 2a c7 a0 47 07 07 a0 60 2b 57 c0 f2 ec c9 b2 6f 86 bf 5f fd 30 7f a9 f4 de a6 1f 52 0b 98 bf 1e cf fc 33 c8 b8 9b 2a 77 a8 c3 1a b0 de 7d 79 57 af 9a a6 7c c6 2e cc f4 fa 66 6b 86 6f 65 10 92 7d 7f ef 9a a1 16 90 6e 54 5b 0d 0a c0 b6 7a 8d cf ad 32 05 82 28 48 e1 8f 4e c8 03 93 fd fa d2 fa 8c 07 10 bb b3 90 fd c2 69 95 1e 75 c6 9d 58 24 1d b6 34 76 1c ae 4f 3e bd 4d 57 4d 0c 39 78 e3 27 05 8f 4c ed 93 42 24 fd 81 45 65 0a 16 12 36 b6 03 24 e7 00 51 6f c1 1a 5e 49 17 f6 2f 69 1c 53 6a 57 86 51 90 ca 73 a4 f5 52 7c f1 bd 4a 2f c0 dc 69 59 54 c5 a6 07 f8 7f 3a 99 58 f2 9d fa fb 2a 1d 77 c8 18 cd 3a 11 11 8f 4f 2e 84 72 a4 33 b4 ed b9 c7 a7 5a 00 7b 4b a9 11 02 28 09 be c3 72 7c c9 a7 60 74 d7 52 cd Data Ascii: ldItRG`+Wo_0R3w}yW\|.fkoe}nT[z2(HNiuX$4vO>MWM9x'LB$Ee6$Qo^I/iSjWQsR\|J/iYT:X*w:O.r3Z{K(r\|`tR
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 42 55 7c 99 be 35 c5 52 4e 19 73 05 d5 bf 73 76 ac a0 a6 43 6c 4e 46 1b e1 4a bd 8b 22 bb 6c c9 33 ba c6 ce c3 c4 e4 90 45 4a 88 b0 fc 1e 3b 65 62 f7 4e 00 c6 a5 57 e4 c7 38 1f a9 a6 c8 c4 d0 58 47 63 00 68 5e df bf b3 90 86 99 75 9d 27 d4 1e 98 e9 8a ad b6 5b 1a ba 6b 86 66 2e fb a8 ef 27 58 43 08 15 d9 63 0f cf 48 27 19 ab a3 d1 4c bb 74 01 9c 2a ea 53 e2 cf 2a 9f d4 80 36 47 70 64 51 93 c8 e0 72 a4 30 00 9c d2 02 d2 da 5e 1d 6c 80 9d 52 c9 8e 6c b9 c7 c3 95 5f 17 8d 22 0f 73 2b ef 25 59 ae a4 91 7d 96 39 1b 62 aa 93 4d b6 89 2e 10 26 c6 06 3e b5 11 8b 19 c1 d4 40 20 74 3d 69 a0 1b 48 05 55 2c c0 0d c9 d8 51 d8 16 5c 42 d2 0b 6b 38 c0 21 a5 e5 91 cc f9 e6 af 9c 54 63 f5 20 9d b2 b0 82 39 8c 75 aa 09 9d 40 04 86 77 81 b2 a7 63 cc 79 d4 a3 27 17 c0 9a b2 Data Ascii: BU\|5RNssvClNFJ"l3EJ;ebNW8XGch^u'[kf.'XCcH'LtS6GpdQr0^lRl_"s+%Y}9bM.&>@ t=iHU,Q\Bk8!Tc 9u@wcy'
2024-05-15 22:37:01 UTC	8048	IN	Data Raw: 96 c0 b2 b3 8c 40 6d a5 8e 32 d9 6d 39 f7 6f 51 6a 86 9d 95 f4 80 ea 00 ea 00 ea 00 ea 00 ea 00 ea 00 ea 00 ea 00 ea 00 ea 00 e0 32 46 4e 07 9d 00 6a ed 6c ad a1 b7 64 31 ac aa 57 66 28 0b 67 ce a7 28 3a e0 8a 7e e0 0f 05 86 65 20 af 77 e4 47 b5 f1 e9 f0 fa d1 18 7b 85 fb 05 e1 50 cb 62 b2 5b b9 0c 80 ea 47 1c 8f 98 a9 c5 35 c0 9f b9 62 ba 40 24 e2 a4 47 91 c8 da 94 85 3a 8f 53 4c 74 fc 0a 8d 82 79 0f 33 40 50 8f e3 db 3b 74 c7 5a 2c 29 88 8e 13 c8 0f ce 80 1c c4 8c 1e 44 f9 d2 43 a1 11 bb cd 98 0f 41 e9 40 1c a0 1c f2 24 6c 31 40 0b 2b 18 e3 e6 0e 7a 9a 43 44 1f dd c8 af 1c ac c8 84 83 a9 17 27 dd 54 cd 79 44 90 32 f2 4e 0a 41 13 45 00 db 51 d9 db e3 d3 e1 55 a8 d8 c7 47 61 30 1b bb 03 d2 ad 50 42 b1 e6 d6 74 52 dd f3 8e 98 d4 46 69 6c 57 43 4c 13 43 38 Data Ascii: @m2m9oQj2FNjld1Wf(g(:~e wG{Pb[G5b@$G:SLty3@P;tZ,)DCA@$l1@+zCD'TyD2NAEQUGa0PBtRFilWCLC8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50048	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	401	OUT	GET /steam/apps/1604030/capsule_616x353.jpg?t=1715590903 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 58243 Last-Modified: Mon, 06 May 2024 13:20:24 GMT ETag: "6638d918-e383" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=383026 Expires: Mon, 20 May 2024 09:00:47 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 56 10 00 02 01 03 02 04 04 04 03 05 05 04 04 0a 07 09 01 02 03 00 04 11 05 21 06 12 31 41 07 13 51 61 08 22 71 81 14 32 91 15 23 42 Data Ascii: JFIFvvCCahV!1AQa"q2#B
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 22 9e d6 e0 79 70 36 3c b6 6c b4 2d 92 4a ed fc 3f 98 67 da 97 04 9c f1 ec ca 3a a8 2c 79 7d 64 77 0b 01 25 cd c3 15 b7 e7 52 9e 63 34 59 e6 18 ef 8e 9d 33 9f a5 68 f6 98 37 e1 1c bf e2 17 c4 6d 37 c3 6f 0c 35 ad 56 6b 95 8f 54 68 4d a6 90 99 25 cc f2 1c 73 28 1b e2 35 67 93 d3 99 46 7a d1 b5 14 e6 f8 5f 6b ef c8 d1 86 0e 72 d2 78 8f 80 fe 23 bc 40 e1 26 56 d3 38 bf 5f d4 ad 63 71 20 b7 b9 d6 a6 9a 0d bd 63 72 e3 71 b7 4c d6 38 e4 4a dd 59 d4 6a 4b 96 74 0f 12 3e 3d 7c 5e f1 17 41 6d 16 ff 00 51 d0 f4 dd 21 87 2c 96 f6 ba 61 73 20 f7 25 f1 eb db 07 d2 95 64 d0 f5 41 24 fe 7f a8 ff 00 89 54 95 fe 5f a1 e7 c7 ba 7b c2 ce f0 0b b7 0d cc a5 a0 8e 08 62 ff 00 86 34 50 a3 ea 41 34 3c 49 3f 69 2a bd 84 6b ee 25 d3 ad 22 5f da 1e 56 a7 2c 43 f7 50 cc ed 24 50 fd Data Ascii: "yp6<l-J?g:,y}dw%Rc4Y3h7m7o5VkThM%s(5gFz_krx#@&V8_cq crqL8JYjKt>=\|^AmQ!,as %dA$T_{b4PA4<I?i*k%"_V,CP$P
2024-05-15 22:37:01 UTC	3432	IN	Data Raw: be 19 3e ec 4d 50 fa 89 ff 00 aa 48 b9 62 55 bb 1e 6d 73 51 b0 78 d8 59 db 6a 51 16 03 99 59 97 bf f1 28 23 15 64 3a 98 ff 00 b2 f9 ff 00 02 78 6d 1d 5f c0 2e 38 b8 e1 1b 8e 22 7d 3a 21 1d dd d1 b7 74 2c ec fc 9c be 68 db 3d 7f 38 fa e2 ba 5e 8d c9 ff 00 23 5c 3a fd ce 77 53 8d aa b3 a5 71 6f 1c 6b 9c 60 b6 f2 eb 97 a7 50 bf 81 59 04 f2 05 f3 39 09 c8 42 c0 0c 80 79 88 ce 71 cc 77 af 61 d1 c1 e0 c4 d2 55 7b d7 df 99 e0 3d 2f 97 17 51 91 24 ed ad 9b fd af d8 64 64 bb 1f 37 39 c1 15 7e bf 33 88 b1 d7 04 09 26 12 64 97 23 1d aa a7 2b 2f 8a a2 9e f5 89 72 06 e4 ff 00 5a a1 bb 36 e3 47 a5 b8 27 87 74 fe 00 e1 26 d1 f5 39 3f 0c b0 46 da c7 13 de 47 f9 a1 f2 d0 e2 10 4e c4 c4 09 40 3b cb 2b 0d fe 5a e4 66 c9 a9 b7 d9 7d fe 7f a6 fb 6e 7b ae 87 a7 fe df 15 bf c4 Data Ascii: >MPHbUmsQxYjQY(#d:xm_.8"}:!t,h=8^#\:wSqok`PY9ByqwaU{=/Q$dd79~3&d#+/rZ6G't&9?FGN@;+Zf}n{
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: c6 e7 ab c8 a3 d3 b1 6b 7d 6f 24 8d 22 c2 a7 99 bc b5 0c 4e 3b 60 ed bf 4d fd 6b 36 eb 83 6d 46 49 c6 4c 67 50 b5 36 97 b3 46 14 2a ab 65 40 e9 ca 77 5c 7d 88 34 5a 16 0f 54 53 19 1d 2a 0f 46 83 4b ba fc 45 a8 07 f3 a7 ca 77 ed d8 d6 88 3b 46 59 c7 4b 24 b5 30 88 a1 b1 85 43 8f 4f 5a ae 2b 73 44 de c3 f7 d2 66 5c 0e 8a 00 ff 00 3f f3 a7 96 ec 18 95 44 82 ef b1 cd 25 17 a2 3c 60 46 98 03 73 d4 ff 00 95 22 54 88 b7 76 c2 39 3d 69 a8 70 bc ae 75 38 1e c3 1f 7f f9 50 d3 68 16 91 15 48 05 81 f4 aa 97 74 39 6f a2 c8 21 bb 86 62 b9 8d 25 53 21 07 f2 ae 46 ff 00 d6 b4 e3 f3 32 e5 dd 50 cc d2 16 76 eb d6 a3 6d 8f 14 90 cc ae 44 64 93 55 c9 ec 59 14 22 d9 88 71 8e b9 14 90 be c1 92 d8 b4 d5 25 59 2f ae 18 00 33 21 39 1e bd eb 44 b9 66 7c 7f 85 12 38 57 43 8f 89 78 Data Ascii: k}o$"N;`Mk6mFILgP6Fe@w\}4ZTSFKEw;FYK$0COZ+sDf\?D%<`Fs"Tv9=ipu8PhHt9o!b%S!F2PvmDdUY"q%Y/3!9Df\|8WCx
2024-05-15 22:37:01 UTC	6000	IN	Data Raw: c9 a5 63 6d 1d dd 9c c9 11 3f 2a bb 24 a1 88 1e a4 22 e7 fe 11 e9 5a 71 77 32 66 e5 1f 37 86 d5 41 a0 50 39 15 08 02 bb 6d 4c 80 1a 36 68 80 71 5c 63 af eb 52 c1 42 89 18 a2 0a 0d 64 e5 ce f4 41 43 eb 70 39 4f ad 4b 06 90 49 21 3d 8d 46 14 86 59 ba 6d 81 42 c6 a1 a2 fd 76 fb d1 4c 94 34 5d 85 1b 0d 06 ae 7e b5 09 43 88 0b 53 24 23 d8 79 08 50 77 a6 13 91 2f 20 de a5 85 22 01 b8 07 f8 4d 67 d4 69 51 a1 3e 62 9f 6a 16 83 4c 0a c9 9e a0 54 b4 0a 63 8b 2a 8f e2 14 c9 a1 1c 58 65 d4 8e a2 a5 a2 24 d0 c9 5e bb d2 16 a6 27 94 fa 8a 50 80 26 7a b0 a9 40 b0 c4 63 f9 b3 f7 a9 40 b0 cc 61 6a 51 2c 2a 04 0b 96 a0 6c 2c e2 85 d0 46 cc 9d 71 55 39 f9 0e a3 e6 22 a9 6c 70 a8 10 20 39 98 0f 53 44 87 b0 a3 06 dd f9 08 07 18 f9 5c 64 11 8e 84 7a 57 a1 4b b1 e7 db ee 87 23 Data Ascii: cm?$"Zqw2f7AP9mL6hq\cRBdACp9OKI!=FYmBvL4]~CS$#yPw/ "MgiQ>bjLTcXe$^'P&z@c@ajQ,*l,FqU9"lp 9SD\dzWK#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50047	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:00 UTC	651	OUT	GET /steam/apps/730/ss_d830cfd0550fbb64d80e803e93c929c3abb02056.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 78350 Last-Modified: Fri, 29 Sep 2023 17:33:48 GMT ETag: "65170a7c-1320e" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=75537 Expires: Thu, 16 May 2024 19:35:58 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 00 09 ff c4 00 52 10 00 02 01 02 04 03 06 03 05 06 03 04 07 05 07 05 01 02 03 04 11 00 05 12 21 06 31 41 07 13 22 51 61 71 14 32 81 08 42 91 a1 b1 Data Ascii: JFIFCCQXR!1A"Qaq2B
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 26 ae 8f d3 db 0e 4b 91 7c d0 83 3d cf 28 72 3c ba 4a dc c6 a7 e1 e8 e1 b1 65 02 e5 89 d8 00 39 92 4f 21 81 39 a8 26 e4 c9 14 df 08 cd dd a9 f1 3d 2f 18 e7 94 99 b5 05 14 d0 45 51 0a 47 79 64 1e 22 a4 ea 25 46 c0 db 4a f9 f8 46 31 e3 9b 79 af c3 0e 48 a7 8d af 28 0d 7a 43 59 c1 ff 00 b4 1e 42 b5 59 64 3d d4 b1 bc 46 cf 1e af 0b 5c 02 06 92 d6 dc f9 79 62 64 5b 66 d2 26 17 be 29 79 44 22 93 2c ad cc f3 55 51 14 a5 55 45 48 68 f7 32 d9 4e b0 57 99 50 05 f5 6c 07 9e 2c f5 11 c5 1e 5f 25 9e 27 36 da e8 9f f6 41 96 ac 3c 41 43 c4 d9 b5 0b d0 64 5d eb d2 c3 2d 42 68 67 25 4a 99 94 1e 82 e4 5c 7a db 96 e8 d5 4a 78 e3 df cc 9d d2 f1 5e 07 e9 f1 c6 71 72 5c c7 a3 49 70 9f 6f 5c 39 99 e4 b4 90 71 2e 65 0d 1c b0 d5 bd 2d 4b 51 9e f5 65 31 b0 0a ca 6f b2 bd d7 c5 c8 Data Ascii: &K\|=(r<Je9O!9&=/EQGyd"%FJF1yH(zCYBYd=F\ybd[f&)yD",UQUEHh2NWPl,_%'6A<ACd]-Bhg%J\zJx^qr\Ipo\9q.e-KQe1o
2024-05-15 22:37:01 UTC	3179	IN	Data Raw: 5d a4 8f 88 2b 11 a7 a7 94 90 5f e6 b1 46 00 d8 a0 50 77 e6 2f 84 5f 3b aa 87 c7 98 d5 d9 52 d3 f0 d2 d6 55 54 f7 b5 f0 ba 33 16 47 dc 6e 56 d6 fa 1b 1d b1 a5 cd 4a d5 f7 c8 88 c1 ae 7f 21 ca 96 80 53 65 c5 fe 21 0d 53 82 23 58 7c 41 58 29 6b 7a dc 8b 6d 8a 3c fb 6b 2c 5f 25 d6 1d d7 8e 4b 82 c2 e1 9e c5 2b f8 a7 86 13 36 7a 84 a4 ac 90 31 14 b5 30 d8 39 07 62 58 1d b5 7b 73 c5 66 d3 f9 97 92 d0 b5 f2 32 77 d9 ff 00 63 b9 5e 43 05 44 f9 9e 5d 4f 25 6c c5 75 00 e5 96 ca 08 b9 b1 b1 27 51 c2 dc 92 fb a3 23 0f ea 26 50 f0 9e 47 38 ba e5 d4 c1 cf 36 89 4a 1f c4 5b 06 12 93 ed 82 51 8d f4 0a 7e 10 a3 7a 63 1c 55 39 8d 2e e0 fe e2 ba 50 3f 02 c4 1c 5f 73 15 b2 22 5a 6c 9a b2 82 69 9a 9f 3f cd 44 cd a4 89 64 a8 66 65 03 62 01 bf 22 3c ef 89 c3 e5 a5 fa 03 6d 5a Data Ascii: ]+_FPw/_;RUT3GnVJ!Se!S#X\|AX)kzm<k,_%K+6z109bX{sf2wc^CD]O%lu'Q#&PG86J[Q~zcU9.P?_s"Zli?Ddfeb"<mZ
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: a4 d3 63 c9 87 f8 89 a9 73 c8 8c da ac 90 c9 78 da 71 e3 83 3e d1 50 4b 98 c4 f5 92 d4 10 8f 21 68 a2 29 7d 28 09 00 73 eb 6b fd 71 23 3d b0 db 41 94 77 cf 75 89 ea 22 9a aa 95 23 86 33 2c 9d f2 9d 0b cc 8d 2f ff 00 0c 23 03 da db 1f 99 5a a4 39 e5 7a e9 e1 8e 19 14 a4 91 aa 2b 25 f7 06 d6 23 12 32 e5 d0 1c 78 e4 4b 5b 4f 24 f9 9d 5e 94 2a 82 38 d8 36 9f 0b 12 2c 54 f4 27 6b f9 e1 bb 9c 1d a0 45 29 2a 63 5c 94 ed e2 08 bc be 68 89 fc c6 37 e2 ca 9f 7d 89 9e 3a fc 0f 47 2b aa 68 b1 a8 86 d6 d2 77 2b ed fd c6 34 5f b7 62 6b c3 e8 4e f1 89 9f f7 0d a8 ff 00 03 9b 1f c7 fb db 17 8b e3 92 8d 57 43 ef 0d 40 d5 a1 b2 c9 a0 64 b4 ab 21 59 07 85 48 b9 62 50 f5 d2 3e b6 17 1d 71 97 57 71 c7 69 d5 97 c4 93 74 d1 30 cb e9 e9 5c c6 90 9d 55 0e ca 25 90 80 cd 7b 13 b8 Data Ascii: csxq>PK!h)}(skq#=Awu"#3,/#Z9z+%#2xK[O$^86,T'kE)c\h7}:G+hw+4_bkNWC@d!YHbP>qWqit0\U%{
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: ec de 5e c7 d7 1b f2 63 59 17 d4 c9 83 2b c2 ed 72 8b db 85 78 ef 25 e2 38 75 47 22 b5 4f 76 0b 40 ed e3 bf de d8 9d f1 8f 98 5a 92 3a f0 94 72 ab 8b 12 f1 1f 19 65 39 02 b4 f3 4b 1c 2b f2 84 26 e5 8f 3b 00 39 9c 2a dc b8 8a b1 af 6c 15 cd d1 52 67 7d aa ad 63 48 61 76 5d 5f 2f 76 82 ea 2e 6d 72 4f 3f a6 04 70 e6 93 e5 25 f8 bf fa 15 3d 56 08 c6 a2 db 7f 45 ff 00 64 3a a3 32 6c c1 d9 c3 3c 8c c7 c4 d3 1b 96 f7 f4 c7 4f 1c 5c 55 4a bf 23 8d 92 51 9b b5 7f 99 e8 d2 5b ee da 47 a2 81 fd 30 c1 21 ea 88 a3 c5 34 84 fa 11 88 40 c5 2a 36 0c e7 fd 47 10 07 42 6a dd 81 d5 d0 b3 1d b1 02 73 e1 d2 de 21 72 37 e7 88 40 22 9d 01 b9 8c 01 ed 7c 40 d8 74 29 0b 1d 0a a0 b1 fb aa bb fe 03 13 a2 2e 49 56 49 d9 8f 15 71 00 07 2d e1 ac ce a6 36 e5 22 d2 b2 29 ff 00 53 58 63 Data Ascii: ^cY+rx%8uG"Ov@Z:re9K+&;9lRg}cHav]_/v.mrO?p%=VEd:2l<O\UJ#Q[G0!4@6GBjs!r7@"\|@t).IVIq-6")SXc
2024-05-15 22:37:01 UTC	7952	IN	Data Raw: 8a 4e 2c 40 af b5 b5 d8 df 0e 12 1c b2 69 b3 2b b2 b0 3c c1 df 15 7c f0 cb 2e 3a 64 db 84 fb 67 e2 6e 12 31 c4 b5 47 32 a2 5b 7f bb d6 92 e0 0f 25 6f 99 71 cf cb a2 c3 97 94 a9 fd 0d f8 b5 99 31 f0 f9 45 d1 c3 bf 68 3e 17 cd 61 06 b2 57 ca 6a fe f4 75 0a 59 01 f4 75 07 6f 70 31 c6 c9 a0 cd 0e 95 a3 ab 8f 5b 8a 7d ba 60 73 0e de 68 b2 a9 43 54 65 cd 53 40 ce 55 2b f2 fa b8 e7 42 3a 5d 76 2a 7d 0e 04 34 52 9a f9 5f 3e cf 82 d2 d5 46 1c b5 c7 ba e4 4b c5 5c 7f c1 dd a1 f0 a5 76 5b 1e 77 05 2c f3 c7 68 d6 ac 34 3a 5f 98 b9 22 d8 38 b0 67 c1 91 4d c3 84 49 e6 c5 9a 0e 2a 5d 99 57 34 e1 d1 f1 32 c4 4a c7 3a 31 56 28 c1 81 37 f3 1b 11 8f 45 28 47 32 b3 85 09 cb 0c a8 8e d4 f0 fc c8 48 68 04 8b 7f b9 cb f0 c7 3d e0 9c 5d ae 4d cb 3c 26 a9 f0 3a f0 84 f5 9c 35 c4 Data Ascii: N,@i+<\|.:dgn1G2[%oq1Eh>aWjuYuop1[}`shCTeS@U+B:]v}4R_>FK\v[w,h4:_"8gMI]W42J:1V(7E(G2Hh=]M<&:5
2024-05-15 22:37:01 UTC	2024	IN	Data Raw: e0 cc 54 af ed 7a 68 aa 4e fd d9 05 ac 7d 5b fb 5f 0e 96 a1 47 a8 ba 2b 1d 2c a4 ad be 44 19 9e 5f 55 93 ca 23 a8 8c 02 77 57 56 0c ad ea 08 c3 f1 65 8e 55 71 11 93 0c b1 bf 98 6f 6a 8e 77 3a 46 1a 26 8f 24 af 29 b4 4a cf fe 41 7c 4b 0a 8f b0 a9 28 2a 55 03 4a 04 23 ff 00 7d 22 af e4 4d f0 37 2e 8b 6c 60 64 02 1b 01 24 72 7f e1 9b db f2 c4 4c ae da 0b ef ad 73 7c 10 51 ce f8 9b d8 73 c4 25 01 49 58 f3 3b 62 06 a8 f7 79 ff 00 ae 21 28 53 92 d0 cb 9c e7 54 74 11 92 1e a2 45 8f 50 17 b0 be e7 e8 2e 71 49 cf 64 5c bd 8b c2 3b e5 b5 1a 5f 26 a1 a6 c8 72 e8 e8 a8 61 ee a9 e2 16 00 0d d8 f5 66 3d 49 f3 c7 9d 94 dc de e9 33 b7 08 a8 2a 42 d3 52 74 dc 02 3e 98 a1 62 92 ed af 8b 97 32 cc 62 c9 e3 4d a8 9b bc 92 4d 47 77 23 e5 b7 a0 fd 71 d7 d1 e3 71 4e 6f c9 cd d5 Data Ascii: TzhN}[_G+,D_U#wWVeUqojw:F&$)JA\|K(UJ#}"M7.l`d$rLs\|Qs%IX;by!(STtEP.qId\;_&raf=I3BRt>b2bMMGw#qqNo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50049	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	651	OUT	GET /steam/apps/730/ss_796601d9d67faf53486eeb26d0724347cea67ddc.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 73624 Last-Modified: Fri, 29 Sep 2023 17:35:06 GMT ETag: "65170aca-11f98" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=62025 Expires: Thu, 16 May 2024 15:50:46 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 08 01 00 09 ff c4 00 50 10 00 02 01 02 04 03 06 04 03 06 04 03 06 03 05 09 01 02 03 04 11 00 05 12 21 06 31 41 07 13 22 51 61 71 14 32 81 91 23 a1 b1 08 Data Ascii: JFIFCCQXP!1A"Qaq2#
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 01 a8 a9 20 72 e4 3d bc f1 66 2b 77 07 91 c9 f4 0c b2 4d ca 71 6e ef f7 aa bd ea ae f7 52 dd c7 3c d5 31 ca 4e 1d 92 4a a7 03 ba 50 95 3d d8 25 8f 32 ad b8 1a 76 f9 bd 4f 99 c4 ed ed 9d 87 fe 9f c9 06 9e f8 ff 00 5f fb a3 2f 3d 74 d5 2e 15 9a 76 65 5b 4a 28 e5 49 9e 35 d6 8c 00 7e 47 9f 3c 56 92 54 d3 3d d6 eb 67 21 71 dd 6d 64 1c 49 53 17 7a d3 a3 ec 8f 7d 57 1c 80 07 1e 5b 2a 6a 6d 2e 46 20 ef 65 9f bd 67 cd 28 60 15 73 52 44 85 e5 32 3b e9 0f b5 ac 3e 98 d2 d1 c2 6e 51 5d 00 da 5c 9d 33 91 71 6e 5b c2 54 d0 e6 19 a5 6a 53 d1 43 0d de 57 dc 92 47 20 07 32 7c b1 ad 95 a8 c2 d9 11 4e 4e 91 4a ff 00 f6 c2 e1 f9 5c d2 e6 50 b4 2a 25 70 b2 53 a9 2b dd df c3 70 4d ef 6e 76 db 19 ab 3d fd c8 bc f4 d5 f6 b3 48 c8 b8 96 93 89 f2 f8 eb 32 9a 88 ea e9 e4 5b 89 13 Data Ascii: r=f+wMqnR<1NJP=%2vO_/=t.ve[J(I5~G<VT=g!qmdISz}W[jm.F eg(`sRD2;>nQ]\3qn[TjSCWG 2\|NNJ\P%pS+pMnv=H2[
2024-05-15 22:37:01 UTC	2525	IN	Data Raw: f0 f0 aa 11 4b 14 99 ab c7 aa 9e 99 ae d7 24 ed 70 37 03 9e fb 61 59 31 bc 92 af 03 31 cd 42 2d 82 f2 7e 3d 82 3c 91 2a 33 99 23 a6 ac 42 da e3 44 3b 8b ed 61 bf 4b 62 be 4d 2c 94 aa 0b 82 cc 35 11 71 b9 76 0a a2 ed 39 b3 6c f4 d0 c6 a9 14 72 c5 23 41 24 c0 16 d4 8a 5b 71 ca c4 03 86 fe cb b1 27 60 2d 43 95 d2 0a d2 57 8a 95 8a 19 4b 28 96 30 a6 d2 30 17 3c ec 2f 61 cc e2 cc a1 4a d1 56 2e dd 30 b5 37 65 cb 54 a9 35 34 a5 05 b7 77 25 47 d4 9d 8e 2b b9 46 3c b6 58 8c 27 2f b5 07 b8 0f 81 1b 80 e2 aa 5a 3a ca 5e fe ae 6d 53 4b 34 ba d5 63 03 65 00 0b ea b9 6b 74 17 c2 65 9e 15 56 5b c5 82 6a ec 3e 24 4a 09 5e 86 04 a5 4a 0a 90 43 b9 90 da 37 e8 d6 23 97 e9 8a 73 cb 19 f9 e4 d0 c7 8e 51 f1 c1 9b 71 ae 61 51 4d 9b e5 59 66 5b 55 0a c9 1c 31 99 67 48 ae 63 77 Data Ascii: K$p7aY11B-~=<*3#BD;aKbM,5qv9lr#A$[q'`-CWK(00</aJV.07eT54w%G+F<X'/Z:^mSK4cekteV[j>$J^JC7#sQqaQMYf[U1gHcw
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: b9 36 3b ec 0f e6 31 a3 18 a5 8e df 93 22 6d ef af 82 5c fc 51 16 66 8b 45 1c 87 51 5d 4f 1d 8d 94 f5 df ed 8c c7 8d a9 d9 7f 14 ee 1b 41 35 a0 d3 d5 53 4e 7a 1b 1b ff 00 bf 5c 48 7e 42 15 15 f5 54 10 77 f4 88 2a 18 5e e8 5a c0 8f 6f 3c 0e d8 c9 f2 4b 6e b8 02 e4 66 a0 ad 46 60 ac 1e 49 0e 95 12 1b 09 0d ee c4 fb 6d f5 38 6c da 49 44 ad 16 d3 dc 8d d3 81 b3 52 32 fa 3a 84 67 89 58 f8 c1 f9 85 f6 60 70 18 65 b2 4c b5 37 ba 29 8d 76 9d 33 64 7c 75 93 d7 40 ee ab 25 3c 90 bb 87 37 b8 ba 83 6e 57 01 b9 f4 b6 2f 64 a5 22 b2 e6 36 7c bd 8f 65 35 3c 05 2f 10 66 50 d7 52 e6 49 1c 8f 1f e2 e9 b4 7a fc 17 53 7b 82 37 bf 33 71 8c d9 e6 6b 2e c2 f6 3c 2b d2 dc 63 15 15 23 29 2d 72 58 33 14 05 98 9b 00 4f 2c 3a 71 e6 90 ed 0c a3 26 e7 25 d1 47 e2 0a c9 b3 8c c4 5b 53 Data Ascii: 6;1"m\QfEQ]OA5SNz\H~BTw*^Zo<KnfF`Im8lIDR2:gX`peL7)v3d\|u@%<7nW/d"6\|e5</fPRIzS{73qk.<+c#)-rX3O,:q&%G[S
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: ec 1f 59 f4 4d 13 d4 10 4b 22 46 be 7c c8 c3 a3 85 21 6f 23 64 4a dc de 96 98 aa 09 85 45 4b 72 8d 4e c3 d4 e1 9b 14 50 2a 56 c8 99 7d 05 46 75 54 c1 49 23 fe 64 a7 90 f4 1f db 0a ec 62 2d d0 65 54 74 74 8b 0b 46 ac 83 7f 1a dc 93 e6 70 c8 f0 0b e4 85 98 52 e5 cd 01 46 84 21 1b 29 06 c4 7b 0c 32 93 ec 04 e8 ab e7 94 d5 0f 93 54 d0 b3 99 e9 5c 5d 37 36 56 06 e3 db fd 70 a7 c2 a0 bb 32 0a ea 42 a4 bc 77 07 a8 c0 c2 75 c4 88 71 b5 68 66 2a f7 88 d9 b9 60 9c 13 21 4e 8d 1b b2 5c d1 ea b8 ae 92 18 24 ee 92 cc 5e 01 b8 7b a9 07 6e bb 6e 2f cb 7c 57 92 70 63 e0 d4 99 b0 22 3c b2 7e 34 c4 32 9f f0 e2 3a 00 f7 b6 e7 16 97 3c 8a ae 42 69 14 92 c7 22 bf e2 46 ea 55 95 89 20 83 b1 07 d3 12 a2 81 30 de d0 38 2a 5e 16 ae 33 44 87 f7 7c cd f8 32 a8 f9 4f 3d 0d e4 7c bc Data Ascii: YMK"F\|!o#dJEKrNPV}FuTI#db-eTttFpRF!){2T\]76Vp2Bwuqhf`!N\$^{nn/\|Wpc"<~42:<Bi"FU 08*^3D\|2O=\|
2024-05-15 22:37:01 UTC	5904	IN	Data Raw: 27 f0 64 d9 ad 1a c7 a9 a3 21 94 fc bb ee 46 34 53 b3 15 90 69 d8 f7 4e a7 a9 da f8 9a 26 37 46 9b c0 4b 97 65 51 d3 ea a9 41 5d 3a 86 b1 ea c6 f6 4f b7 e7 8a 99 95 c2 46 8e 8e 5b 33 42 bf e5 9a 95 29 ee e9 ac 2f ee 47 3c 65 c9 76 7a 1c 73 4d 46 c5 2c d7 3c ed ed 8a fc a2 d5 a6 28 4c 14 f3 0d 6f 3c 12 93 f2 2d 91 73 2c f2 9a 82 05 35 53 24 2b 21 b2 90 37 3f 4c 58 c7 17 37 48 ab 97 2c 30 2d d2 01 55 71 ad 0a 44 ff 00 0b ad e5 00 95 2e 7c 37 fa 62 e2 d3 af 2c cc 97 d4 a5 cd 44 ca 78 93 88 33 0a b9 ea 3e 2e ae 46 12 90 7b b5 36 88 5a d6 b2 f4 e4 7c f9 e2 de 3c 71 8f da 8c 9c ba 8c b9 5b 72 7c 3f 1e 0a f4 a1 7f c4 6b 87 24 9d 3e 7e b8 7a ea 8a d5 e4 84 76 66 37 de f8 92 6a bc 8e 45 23 29 d4 0d 88 3b 1c 0b 0a 2c b5 71 3e 7e 78 8e 7a 5a b2 87 52 d2 47 0b 93 fc Data Ascii: 'd!F4SiN&7FKeQA]:OF[3B)/G<evzsMF,<(Lo<-s,5S$+!7?LX7H,0-UqD.\|7b,Dx3>.F{6Z\|<q[r\|?k$>~zvf7jE#);,q>~xzZRG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50050	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	651	OUT	GET /steam/apps/730/ss_13bb35638c0267759276f511ee97064773b37a51.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Fri, 29 Sep 2023 17:35:44 GMT ETag: "65170af0-138c8" Server: nginx Content-Type: image/jpeg Content-Length: 80072 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=568616 Expires: Wed, 22 May 2024 12:33:57 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 ff c4 00 4d 10 00 02 01 03 03 02 03 06 03 05 04 08 05 02 04 07 01 02 03 04 05 11 00 12 21 06 31 13 41 51 07 14 22 61 71 81 32 91 a1 15 23 42 Data Ascii: JFIFCCQXM!1AQ"aq2#B
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 3b fe 23 9f f3 d6 f8 f8 47 11 3f f5 72 19 c5 67 57 5d a5 be cf 1d 3c 54 62 17 9c a2 47 25 0c 6f b5 73 db 76 06 7e ba cf eb 34 d9 91 62 8d 1e 37 59 57 55 dc 0d 33 5a ed b3 83 27 86 a3 dd 19 18 8c e3 f8 58 0c e9 96 76 f8 0b c1 1a b3 49 b2 59 61 a5 ea fa af 0a 9f c1 8a 92 12 76 29 38 53 b4 03 dc 9f 32 75 77 90 ed 4b 4c 97 fd cc 35 ec be cf 38 9a ae a5 a6 55 6f 77 6c 7c 39 c3 33 0e 75 9e 17 b9 d9 af 5a d7 a7 18 fe 51 99 5e 29 c7 8d 1c 66 42 d1 c5 50 f0 31 f9 39 65 cf e6 75 56 29 ec cc 9f e5 1b b5 58 bd 4d 34 97 e0 4b 5a 24 45 c3 00 4e be a2 a4 7c 6e ab 82 85 6d 2a 6d 38 19 3a 64 c0 d0 39 21 01 f9 f2 f4 d4 2b 08 53 2a ec 20 e3 40 74 71 25 1a 90 cc 08 3a 36 0a 22 f7 5d a0 91 fc b4 41 44 6f 41 bc 64 28 5e 74 6c 2a cf 52 93 0a 57 1f 41 a9 60 39 8a 84 2c a0 b7 97 Data Ascii: ;#G?rgW]<TbG%osv~4b7YWU3Z'XvIYav)8S2uwKL58Uowl\|93uZQ^)fBP19euV)XM4KZ$EN\|nmm8:d9!+S @tq%:6"]ADoAd(^tl*RWA`9,
2024-05-15 22:37:01 UTC	2854	IN	Data Raw: 28 ba 68 c6 bd b4 d1 47 68 ea 8b 2d ee 24 6f 06 a8 7b 9d 43 fa 32 e4 a1 27 e8 4f fe 9d 47 c0 f1 e5 50 e1 61 ba cb 2d b2 37 dc 24 91 78 2a 0f 73 ff 00 7f cf 49 7c 92 84 ff 00 69 12 b5 2c 71 54 0b 51 ba 25 54 2f 41 34 08 e4 16 49 01 29 fc 2c 32 09 6c 67 fa 68 b9 50 0c 63 d9 a7 b4 f8 3a 76 e9 5f d2 b7 95 6a 38 fc 53 4c cc 5c 23 45 21 70 9f 19 dc bc 6e c9 18 e7 19 f9 6a a7 95 31 bb 32 9f 68 f6 8a 2e b4 b9 54 55 53 dc e5 15 11 49 25 22 ac d2 3c b1 39 43 90 61 39 27 69 dc 30 83 2c 03 12 78 04 ea b6 93 15 23 34 a2 e9 4b ec 22 2b 6c b6 f9 c3 56 c0 64 a3 96 42 c8 8a 0b e1 9d 79 e4 02 8e 09 ed 9c f9 8d 59 08 4a 4f 8e 85 dd b6 d1 a6 5d 7a fa 8b ae 7a 72 8a cd 55 fb 39 24 b7 d6 12 93 25 30 82 8a 68 84 58 3e 22 81 bd 09 23 fc 24 f3 f0 9c 93 a2 4f 72 da d0 52 5d c5 88 Data Ascii: (hGh-$o{C2'OGPa-7$x*sI\|i,qTQ%T/A4I),2lghPc:v_j8SL\#E!pnj12h.TUSI%"<9Ca9'i0,x#4K"+lVdByYJO]zzrU9$%0hX>"#$OrR]
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 53 a7 a2 f7 0b 83 dd e7 85 95 11 fc 56 56 76 3b a4 39 24 fa 8c eb cf 4d dc d9 ee f1 c5 43 12 81 b8 f4 a5 b2 3b 65 8a 28 59 7e 27 06 46 1e 59 3c e3 5d 0c 71 4a 34 79 1d 4e 47 3c ad d8 5e 18 d1 00 60 a0 71 80 06 9c ca 04 ae 91 aa 9e 76 0e b1 85 6d 81 5d 7b ff 00 df f4 d4 19 74 67 fd 5b 4b 53 35 d2 19 63 1b 15 63 d8 1c 70 c3 9e c7 e5 aa ac b1 50 bf 51 69 aa 81 61 11 b3 6f 51 8c 21 ee 4f 3f f7 f5 d5 6d c8 6a 4c a9 49 51 70 9a 98 55 54 4d 21 fd e3 2a c4 aa 17 01 58 af 3e bd b5 6c 57 00 a0 ac 55 94 77 4a 28 63 69 3c 5a 85 66 0f ce 70 06 72 31 eb ea 3e 5a 2d 11 70 26 5c ba 7e 2a 4a 4b 8c 4d 48 b5 34 f5 80 2a 43 20 1b 10 67 07 bf 3f 3d 54 d1 74 5d 74 60 1d 6b ec ca 78 68 aa 2e 76 c9 65 a5 64 95 a3 7f 09 b6 c9 19 07 bf fc 4a 47 3f cf d7 55 b5 46 c8 4a ca 1d 2b 79 Data Ascii: SVVv;9$MC;e(Y~'FY<]qJ4yNG<^`qvm]{tg[KS5ccpPQiaoQ!O?mjLIQpUTM!X>lWUwJ(ci<Zfpr1>Z-p&\~JKMH4*C g?=Tt]t`kxh.vedJG?UFJ+y
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 0c 8c d2 08 d1 49 28 06 78 f3 3f 5d 29 64 56 e7 46 6f 71 79 2b ea 5e 6f f6 2a 71 e1 c6 47 23 5c ec b2 b7 67 ac d3 62 f4 f1 a4 52 8e 42 18 b4 f2 6e 19 c2 92 30 07 c8 ea 8f 06 e8 ae 0b 6a f1 54 a9 59 08 2a 3d 7f 4d 1b 2a 69 f8 39 8e 9d 7f 69 c1 4d 11 31 cb 22 17 39 1f 88 10 46 07 3e 7f 51 a8 95 91 ca a2 c9 ab 6b 1e ba 80 51 d4 54 99 60 a7 90 98 a2 7d d8 54 ce 02 7c ce 39 c9 fa 6a cd dc 50 b1 8b 8b dc 91 4a dd 57 37 4e 56 4c f4 11 78 d4 b2 30 de b9 c1 04 76 e7 d3 cb 4f 09 ed e8 c9 a9 c1 2c d4 c3 14 bd 6b 7c ba 4e 04 36 19 a4 89 08 52 d1 90 dc 9c fc fe 59 d6 98 64 6c e2 66 d3 fa 4a e4 1c 81 fa 92 48 5e 59 2d d1 46 40 ca c6 d3 02 40 f5 3f e5 ab d3 b3 1b a2 4a 4a fa 8b 2d b9 bd f6 9a 58 5e 63 e2 19 bc 3d fb 89 cf 9a e7 1c 7f 4d 4b a1 4b 76 69 e2 ad 85 ea 97 71 Data Ascii: I(x?])dVFoqy+^oqG#\gbRBn0jTY=M*i9iM1"9F>QkQT`}T\|9jPJW7NVLx0vO,k\|N6RYdlfJH^Y-F@@?JJ-X^c=MKKviq
2024-05-15 22:37:01 UTC	7952	IN	Data Raw: 08 a9 b2 c9 ee 91 43 1f cb 69 7c 01 90 08 f2 00 b0 63 f5 d3 6a 21 9a 59 77 a4 24 5a 51 a2 5b ef 4d da fa 8b a7 ea ad d5 2e f6 d8 64 75 95 24 85 77 9f 18 16 3c 64 82 23 21 b1 81 8e 35 92 18 f2 b7 ea 21 a5 b5 c6 8c eb ae fd 94 da 3a 5a dd 43 1d ba 96 ba aa b2 a1 55 a4 a9 0a c6 2c 0e fb 76 f0 0e 72 31 c9 f9 0d 5d a5 fe 24 9e ef 04 97 b6 94 4f e8 5f fa 26 29 e2 92 46 b9 c2 12 35 2c 71 01 e3 1f f3 6b 73 92 4a d8 91 4e 4e 91 15 35 64 36 da 48 da 4f 8b 0b bb 6f 62 da f3 73 c9 be 6e 4c f4 d8 b1 fa 50 51 07 3c 0f 77 a3 13 0a 87 49 19 8c b0 b1 5d 85 3b e3 3e 7f 9f 71 aa 9b 2c 3f 41 77 54 90 ad 6c 7e ec c8 a3 02 20 cf 19 1e 67 23 b7 d0 fe 67 41 49 30 d3 08 4b 73 a1 31 30 12 a5 4a b0 1f ec 5b 71 f9 63 45 30 1d d3 56 d0 c0 01 5a 84 dc ea 0a ee 62 ce c3 1c 0c 72 73 ce Data Ascii: Ci\|cj!Yw$ZQ[M.du$w<d#!5!:ZCU,vr1]$O_&)F5,qksJNN5d6HOobsnLPQ<wI];>q,?AwTl~ g#gAI0Ks10J[qcE0VZbrs
2024-05-15 22:37:01 UTC	4072	IN	Data Raw: 5b 10 f4 de a3 2a be ef 03 d4 87 e0 3b 9f 0d 41 1e b9 e7 f4 d4 df 4a d0 51 3c 52 42 85 1e 49 56 49 db 9d a8 d9 00 fa 01 a3 15 6a d9 09 26 aa 2a 70 cb fb b3 fc 23 93 a8 e2 00 55 65 e6 28 29 e6 a9 9a 4f 75 86 9e 26 96 77 76 0a 11 57 24 9c 9f 20 01 ce 91 70 e8 65 1b 46 19 d4 de de 7f d2 b8 a7 a4 e9 ab 83 b5 32 21 3e f2 b1 90 b3 8c 0e 50 9f 8b 19 25 5b 20 10 48 3d 88 3a 2d 53 f7 01 23 01 eb be a1 bd dc 28 7f 71 70 aa 9a 8c 3e 7d d2 ae 4f 19 11 87 92 16 e5 7e c7 5a b1 b4 f8 23 40 2a c5 8b a8 ac 86 b6 8a 68 e8 2e b1 90 b5 56 f9 c6 d4 93 8f c7 0b 7e 59 53 e7 db d0 5c d0 82 c7 4a fb 29 ea 0f 68 fd 5f fb 22 db 4e aa ca a2 4a 9a c9 db 31 53 c6 4e 37 31 1e 7d f0 a3 93 fa ea 8c 99 63 8a 36 c6 84 77 1f 64 7b 30 f6 35 d3 be c9 69 59 ad f3 52 cd 73 d9 b6 aa ed 5f b1 66 Data Ascii: [;AJQ<RBIVIj&p#Ue()Ou&wvW$ peF2!>P%[ H=:-S#(qp>}O~Z#@*h.V~YS\J)h_"NJ1SN71}c6wd{05iYRs_f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50051	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	391	OUT	GET /steam/apps/239140/header.jpg?t=1715341001 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 38421 Last-Modified: Fri, 29 Jul 2022 15:37:40 GMT ETag: "62e3fec4-9615" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=133096 Expires: Fri, 17 May 2024 11:35:17 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 05 06 07 08 03 04 09 01 0a ff c4 00 58 10 00 01 03 02 04 04 04 04 03 04 06 03 0b 07 0d 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 09 14 32 71 15 42 81 Data Ascii: JFIFCCX!1A"Qa2qB
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 85 1f 7d 20 01 ec 06 38 67 06 ea e3 b8 11 e5 05 56 fe 38 e1 76 ad 35 ba a4 0b 58 e3 cb 97 25 f4 db db 2a da 8a 49 38 e3 72 aa c4 ae 62 95 f4 db f4 c7 1b 95 b7 cb 4c 4a a6 29 5b ef b9 c7 2c b1 ad ca d8 62 9e 96 5a 5b 8b 29 69 b6 c6 a5 b8 b5 04 a5 03 d4 93 b0 18 63 27 9b 7e 17 77 7e 1e d3 dc 87 5c a7 a2 75 3a 53 35 18 6b 25 28 91 1d 7a d0 48 ea 2e 3a 1f 63 be 33 dd 87 26 1d fc 77 73 ef 17 2c 72 c2 f6 e7 35 5a 2f d2 2b 4e 3c a2 d2 22 b4 d8 36 4f 38 a9 45 5e fe 5e 83 db ae 3e 56 53 9b 7e 3c 3d 12 f1 c9 e7 6f 9a fc 7f 51 7c 60 c0 3f f8 0a 80 e7 1b b8 7c 82 19 3a eb b0 93 67 c9 08 37 7d 03 72 3a 7f b7 01 f4 1b e2 d9 12 95 e1 9f 89 4a 82 d7 3a 62 28 52 d6 d3 76 be a3 cb 57 f9 5f 01 c1 9f 06 35 11 4a f1 5b c2 a9 0a 40 71 23 30 44 6d 49 3e 8b 58 41 fe 4a c0 77 07 Data Ascii: } 8gV8v5X%*I8rbLJ)[,bZ[)ic'~w~\u:S5k%(zH.:c3&ws,r5Z/+N<"6O8E^^>VS~<=oQ\|`?\|:g7}r:J:b(RvW_5J[@q#0DmI>XAJw
2024-05-15 22:37:01 UTC	1922	IN	Data Raw: 7e 04 30 2b 1c 36 97 53 cc 19 e7 33 d3 1f f9 95 3f 17 5b 91 21 21 a0 97 51 a5 44 95 ad 5a c6 9b 6e 02 05 b7 db 1e 79 97 75 f3 e2 46 95 56 5c f9 6c d4 9d 76 44 a5 4c 92 b2 0b ca 78 95 eb 36 e8 bd 5b 92 3a 6f e9 8f 43 2b 93 c1 df 09 15 d7 38 99 c2 57 d1 53 a7 bf 95 aa ad c7 75 fa 99 90 cb 82 7a 1f 50 2a 8a 98 e8 5a d4 00 ba 59 59 56 9d 2a d5 70 34 ef cb 2b e2 c6 a3 b4 f0 6b 50 61 e7 47 68 3a 54 99 ef c2 13 1b d0 95 14 16 9b 50 41 04 fd 20 8d 69 b0 ea 41 bf 6c 67 0f 17 48 35 64 7f bf 4c b7 e5 4f d1 2f 73 d4 79 51 d3 1b fe d4 3e 0e 35 00 a1 be 35 94 97 da 35 2a ad f3 29 ee a0 10 90 ad 89 3f 7c 71 e6 9b e3 b2 35 8f b3 4a 2a 57 17 2f 55 65 b6 12 db ec 0e 62 14 a4 dc 25 68 b9 b9 f6 f5 f6 c7 c9 e3 c6 cc 33 ca 7b 9a ff 00 07 7d ee c8 ad 99 ab 30 41 87 35 89 72 2d Data Ascii: ~0+6S3?[!!QDZnyuFV\lvDLx6[:oC+8WSuzPZYYVp4+kPaGh:TPA iAlgH5dLO/syQ>555)?\|q5JW/Ueb%h3{}0A5r-
2024-05-15 22:37:01 UTC	4072	IN	Data Raw: 55 4c 76 93 29 8a 98 8a f4 76 6e dc 89 8f f2 be 4d c4 28 a8 04 ab bd be a0 9e b6 27 d3 19 a1 ed c5 fc f9 98 38 eb 5f a0 b6 9c d3 51 cf 55 88 b4 c4 c0 e4 b9 11 31 da 60 6a 52 b9 31 1b b9 52 d0 91 62 56 ab 29 46 e6 d6 18 4f cb 3c aa 4f 57 18 38 6d 4d f0 25 47 e1 b5 6e 95 1a ad 9c 06 60 7e 53 0f 32 8b 4a a6 a1 4e 5d c7 c2 bb 12 94 25 b2 d9 3e 6d af f4 82 33 e6 e5 e0 f8 2b 57 e0 65 4e 0f 70 73 29 e7 0a 56 5e 15 7a fc 43 0a 6b 35 44 3a c8 1a d4 1c 5b 0b 91 a9 05 45 07 49 b2 12 00 3c bd 25 57 b6 39 e3 6e 59 59 5a be 22 c9 71 b3 22 cc f1 2b 4b f0 a1 98 33 cc a6 66 e6 4c d3 31 50 dc 93 47 0a 44 39 90 de 40 90 e3 4f 8b a5 c4 6c 95 24 e8 36 09 71 60 5e d7 c6 e5 b7 68 ba 14 3c 8b 07 2c 78 8e c9 6c d3 e0 42 a6 45 a3 f0 fe 45 29 88 d1 91 70 d3 28 95 15 28 6d 0a 50 d4 Data Ascii: ULv)vnM('8_QU1`jR1RbV)FO<OW8mM%Gn`~S2JN]%>m3+WeNps)V^zCk5D:[EI<%W9nYYZ"q"+K3fL1PGD9@Ol$6q`^h<,xlBEE)p((mP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50052	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	392	OUT	GET /steam/apps/1649240/header.jpg?t=1696502086 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Fri, 18 Nov 2022 16:44:27 GMT ETag: "6377b66b-a562" Server: nginx Content-Type: image/jpeg Content-Length: 42338 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=339123 Expires: Sun, 19 May 2024 20:49:04 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 09 ff c4 00 45 10 00 02 01 03 03 02 04 04 03 05 05 08 02 01 04 03 01 02 03 04 05 11 00 06 21 12 31 07 13 41 51 08 22 61 71 14 32 81 15 23 42 91 Data Ascii: JFIFCCE!1AQ"aq2#B
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: fb 6a 55 2d 96 8d aa 24 00 0f bf 4f 3a 93 ed 4f 81 bb 46 87 fc bf 75 0d e0 93 0d e9 41 ee 8f ec ec df 36 7a 69 6b 29 6f b6 29 e9 a2 89 e6 97 aa 67 ca 85 05 88 18 1c e4 0e 3e fa d7 85 f6 99 c1 f1 0f 11 39 af cc 48 03 4e aa b7 f0 59 58 2d a5 52 7c 13 f8 4c bb f8 bb 5b 7e 4a 7b 85 0c 09 63 ab 8a 9a ad 2a 59 a3 2c 5d 0b 8e 9c 03 9e 06 31 ae ef 1d ed 76 13 82 36 23 38 3f dc 04 8a d7 63 4a 8c 2f 0e 7c c5 d5 ad 2a df 8c db 02 bf c2 ed e7 5d b6 2e 14 b6 f8 6b a1 44 9a 48 ad f2 f9 91 22 b0 ca 64 90 08 62 b8 38 fa eb a7 c1 78 9c 3c 5f 0a dc 6e 1c 92 c3 60 58 ab ad fe 17 a2 4c 4c 2e 85 c6 37 6e a8 14 f4 7e 6c 7c 28 c9 6c 12 46 4e 07 70 07 ae bd 0b b4 d5 73 c1 bd 02 d5 f6 ef 80 95 fb c6 d1 b7 6a a8 6a 63 92 4b bc ab 0c 44 fe 4e e4 61 4f 7c fd 3b eb 91 8a e2 70 e0 d8 Data Ascii: jU-$O:OFuA6zik)o)g>9HNYX-R\|L[~J{cY,]1v6#8?cJ/\|].kDH"db8x<_n`XLL.7n~l\|(lFNpsjjcKDNaO\|;p
2024-05-15 22:37:01 UTC	1767	IN	Data Raw: 00 6d 30 25 04 00 9d 7e 0d 9a af a8 46 70 7b 16 1c 31 fb e9 c0 d5 53 9c 06 ee 9f 45 0a ce 12 2e 0b f5 00 3a 4e 30 7d 38 d5 c1 67 27 2d b9 2d b8 ec 50 52 44 92 03 fb c7 70 bf ba fc aa 7d 73 eb 9d 4b da 00 b5 5e 1a 77 3c 96 9d 82 2d 25 0b 19 4a 16 e8 5c a8 eb 03 81 f6 d4 b4 27 73 f4 b4 a5 fa cc d1 dc a6 56 66 98 7c a7 cc 6e e7 ef a9 73 75 49 87 96 e3 07 65 1a b4 4c b2 60 2f 6f 41 a4 a5 a7 36 9a a5 e3 47 45 67 60 41 ec 07 7f e9 a6 09 34 d9 38 86 df 2c f2 f5 05 62 b8 2c 5c 0f 4d 00 14 85 e0 04 7f d8 ca d8 ea 5e 5b f2 9f 73 a6 ca 94 4a 52 d6 db 11 86 a2 2e bf c9 d6 a0 92 33 c9 3d ff 00 4d 01 94 95 f3 02 d3 4a e1 b1 ad 8b 73 bf 52 d3 b4 8f 4d 9b 84 30 ac 89 f2 bc 59 ce 0a 9f eb f7 c6 ad 60 5c ac 64 bd dc 25 c3 5f 09 3e aa c9 bf 8b ec 5d d1 76 b7 a4 cd 5b 2a d4 Data Ascii: m0%~Fp{1SE.:N0}8g'--PRDp}sK^w<-%J\'sVf\|nsuIeL`/oA6GEg`A48,b,\M^[sJR.3=MJsRM0Y`\d%_>]v[*
2024-05-15 22:37:01 UTC	8144	IN	Data Raw: d9 1b 9a 4b 14 fe 7c 6c bc ab 28 0f f9 58 7f 74 fd f4 30 a9 c5 40 25 14 52 d6 0a 39 6f 1b ba 68 e2 96 51 49 34 4f 2d 6f cf 8c c3 d2 4b 73 ed 9c 71 a0 6a 54 4a f1 14 16 46 a3 41 ea aa 54 aa 64 4a 99 91 d7 ca a3 1d 4b c6 0b 7c d8 5e 34 83 ec ba 07 4a 07 9a 92 b3 cb 7c de d5 8f 63 a4 ad 9e 4a 9b ab a5 32 c4 d2 16 59 49 61 c6 3d 4f a8 f5 e3 48 f9 32 b1 ce 71 a0 05 fc 94 36 28 d8 e6 90 dd 97 73 f8 dd 79 8f 65 ec 2b 55 ae cf 4c 91 d2 43 43 4b 68 58 22 05 5a 58 62 5c 3c aa 0f e5 ea 71 26 51 b0 46 78 ef 9d 79 ee cf 30 3a 29 b1 da dc ae d2 f5 d0 79 aa b8 a3 f3 ca cc 39 35 41 71 c6 e6 dc 2d b8 2e 2d d2 cd 3c f2 be 15 48 f9 8b 7d b5 df 7b ac a6 82 2e e9 ab 5d f8 09 a7 fc 37 88 5b c3 c4 19 e2 92 58 36 d5 b4 53 c0 a8 70 7c e9 dc 26 41 f4 c2 07 6c e9 e0 66 67 1f 25 9b Data Ascii: K\|l(Xt0@%R9ohQI4O-oKsqjTJFATdJK\|^4J\|cJ2YIa=OH2q6(sye+ULCCKhX"ZXb\<q&QFxy0:)y95Aq-.-<H}{.]7[X6Sp\|&Alfg%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50054	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	651	OUT	GET /steam/apps/730/ss_0f8cf82d019c614760fd20801f2bb4001da7ea77.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 53903 Last-Modified: Fri, 29 Sep 2023 17:37:04 GMT ETag: "65170b40-d28f" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=461292 Expires: Tue, 21 May 2024 06:45:13 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 09 ff c4 00 51 10 00 02 01 03 03 02 03 05 05 06 03 04 05 0a 05 05 01 02 03 00 04 11 05 12 21 06 31 13 41 51 07 22 61 71 81 14 32 91 a1 b1 08 23 Data Ascii: JFIFCCQXQ!1AQ"aq2#
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: ad 05 a4 1d 68 bb 8f ca 93 06 86 76 d6 f9 04 9e f9 a5 44 ed 06 c7 08 14 13 41 31 a6 41 a4 52 ec df 18 a0 a2 48 d7 83 49 8d 1b 6c a4 33 d8 c5 00 41 7c 6e 2d 9d e5 92 e6 18 a2 6e 55 5e 4c b1 fc 2b e7 4f 70 27 4c 9a e6 65 05 64 da b9 ce e0 fc 11 eb f0 a4 08 d8 a4 f2 a3 3d c4 a8 23 53 9c b1 20 f7 e0 82 3c a8 19 85 d5 16 16 8e 36 be 8d e6 6e 46 33 8f 95 02 0c 59 16 e9 76 49 b6 4c 9e 07 95 03 37 85 84 72 e7 05 80 e0 05 1c e2 81 74 59 b4 df 0e 58 c8 f0 58 85 e7 27 83 f9 d0 30 bd 3b 55 31 de 85 4d ed 06 e0 85 87 bc 50 fa 11 e9 50 66 5d 2d 00 50 c0 38 72 4f c8 e2 98 89 d9 15 a1 6c e7 39 fc a9 01 c8 ae b4 78 e2 bf 95 14 32 18 e4 2a c9 9c 8c e4 f6 fc a9 97 14 64 16 80 13 20 0e 33 80 a3 ca 82 84 7d 49 72 be 11 54 01 73 fc 03 f3 a0 45 63 1b 06 0d 03 44 24 29 60 a0 77 Data Ascii: hvDA1ARHIl3A\|n-nU^L+Op'Led=#S <6nF3YvIL7rtYXX'0;U1MPPf]-P8rOl9x2*d 3}IrTsEcD$)`w
2024-05-15 22:37:01 UTC	3164	IN	Data Raw: 5c ac 51 13 26 00 6e 28 10 1b 4a 1d 8f 84 fb 9b d2 81 9c ab f6 b8 99 ae 3d 97 68 2e fe f3 c3 aa 85 cf a0 31 48 31 f9 57 b5 fc 5b fc e4 8f 9b fe 6a 3f f1 c6 5f d9 f2 6a c8 ae 7b 73 5f 4a 95 1f 27 1d 05 45 95 1c 1c 79 d6 32 5f 67 4a 9f d3 2d fd 2f d4 2f a5 cf 1b e7 7c 67 87 4f 5a f2 33 e1 ed a3 e9 3c 4f 21 46 94 8e 8f 28 8b 54 8e 3b bb 79 33 bc 77 51 de b0 c5 99 ab 52 3d 99 41 3f c9 15 4d 63 47 ff 00 13 86 56 8c 62 70 08 19 e3 77 ce bb d1 cd 47 3e ba 49 6d 26 78 a5 52 ae a7 04 55 a3 36 7a 2b 99 95 18 a3 91 8f 2f 5a 64 83 9b d9 4f bd bd b3 f3 a2 89 1a 41 71 ba 25 2e 54 12 05 4d 01 90 14 10 77 67 1e 54 a8 08 25 bb 89 8b 23 29 4c 1f e3 f3 a2 80 f4 3f 69 91 0a c3 19 7f 20 63 04 9a 00 71 a0 e9 1a 9a ea 51 38 f7 17 7a ef f1 1b 19 19 e7 8a ca 74 e2 cd f1 da 7d 9d Data Ascii: \Q&n(J=h.1H1W[j?_j{s_J'Ey2_gJ-//\|gOZ3<O!F(T;y3wQR=A?McGVbpwG>Im&xRU6z+/ZdOAq%.TMwgT%#)L?i cqQ8zt}
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 59 cc 9b 24 86 61 95 61 e9 8a 50 93 8b b4 0d 26 b6 7c 8d d7 be cb ba af a4 35 70 bd 2f a4 4d af e8 92 96 75 b5 66 57 92 06 dd 9d ab b7 92 07 1e 7e 9e 7c d7 bd 8b 2c 32 2a 9e 99 c1 38 b5 fa ec 59 79 ad 75 65 8f 4f 5c cf d4 3d 2f 77 a2 17 65 86 0b ab 9c 2f 8d 27 3e e9 5e f9 c7 9f 6c 0f 5a ae 31 bf c5 d9 9a 77 d9 4e 4b e2 a4 87 3b 78 6f de 0e f8 cf bc df 32 78 ad 93 26 4a d0 6c 3a 87 84 bc 66 3d a0 6e 29 fc 0a 7b 22 8f e6 3e b4 ec cd 2a 0d 8a e1 9b 70 22 34 68 c6 e2 ad fe 55 b8 f8 ff 00 33 d2 28 22 2b f6 88 47 32 b4 a8 5f 88 ce 37 4f 2f c8 7f 02 d4 d0 ec 63 1e a9 e2 dc 24 6c 09 ba 88 61 61 b4 c3 ca a4 f9 bc 87 b7 fc f1 48 76 3b b1 d5 5e f0 a5 bd e4 36 fa ca 6c c4 88 d1 89 a4 5f 86 e2 31 53 42 b1 de 89 0d 95 dc ac 34 9b 58 e0 99 46 5e dc 42 22 94 79 f1 81 9a Data Ascii: Y$aaP&\|5p/MufW~\|,28YyueO\=/we/'>^lZ1wNK;xo2x&Jl:f=n){">p"4hU3("+G2_7O/c$laaHv;^6l_1SB4XF^B"y
2024-05-15 22:37:01 UTC	1928	IN	Data Raw: bc d5 26 6e 77 39 c6 72 06 73 40 0d 61 d5 55 c1 0d db 18 e0 66 98 1a 4d 25 bc 8a c5 bd df 2c 81 de 8a 1d 91 88 13 2a 56 e0 f1 d8 51 43 4c 8a 68 c4 65 9f c4 07 d7 1e 74 50 59 1f db 15 71 92 14 7f bb 45 0e cd e3 b9 8b 6e 14 91 f0 35 34 16 6a d7 b1 a9 c6 e2 0d 14 16 6a f7 ca 36 aa b8 24 51 40 7b c7 dc 73 bb bf a5 14 22 48 2e 63 d8 43 12 49 a2 86 4c 64 c4 25 53 68 03 9e d4 50 18 b7 ba 08 e0 ee 20 fc 29 01 60 b2 d4 81 3d c8 f4 e2 8a 10 d7 4f bf 3f 69 4e 7c c7 7a 12 22 fb 2c d0 c6 ff 00 6d 32 b5 d3 ec dd b8 46 3b 66 ba 62 b7 47 9e e6 9d 8e 4d fa ed fb fc fc 2b 64 a8 ce c5 f7 3a c0 89 5a 46 62 23 1d e8 a2 91 cd 7d a7 ea 7a bf 52 74 d8 83 48 81 a4 88 ca 0c c8 a7 12 3a 0e 46 d1 e7 cf 97 ca b3 4e ce ac 34 9d 9c 93 fc 6d ad 9d 62 ba 8d ad 65 c7 31 dc 21 42 3f 11 49 Data Ascii: &nw9rs@aUfM%,*VQCLhetPYqEn54jj6$Q@{s"H.cCILd%ShP )`=O?iN\|z",m2F;fbGM+d:ZFb#}zRtH:FN4mbe1!B?I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50055	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	628	OUT	GET /steam/apps/730/capsule_616x353.jpg?t=1698860631 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Mon, 18 Sep 2023 22:33:56 GMT ETag: "6508d054-faed" Server: nginx Content-Type: image/jpeg Content-Length: 64237 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=101762 Expires: Fri, 17 May 2024 02:53:03 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 03 05 01 00 00 00 00 00 00 00 00 00 00 00 00 01 04 05 02 03 06 07 08 09 ff c4 00 62 10 00 01 02 03 05 05 04 05 05 0b 07 08 07 05 08 03 01 02 11 00 03 04 05 06 12 21 31 07 41 51 81 91 13 22 61 71 08 32 92 a1 c1 14 Data Ascii: JFIFCCahb!1AQ"aq2
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: ca c7 34 10 5d 29 18 9f 8e a0 75 38 95 cc 40 0f e0 0d 09 b7 3b cb f7 c6 f0 4b b2 e5 9c 52 28 13 df 00 fa d3 14 01 57 bb 02 78 ba 95 1e 21 cb 6c c7 a7 c5 c7 05 07 a5 3d 5f fa 9f d1 7c cf 5e e4 96 07 a1 c2 cb 15 2d b3 d9 d8 be ae ef dc 6b 40 08 39 10 54 0e bb 89 73 9f 35 39 f2 4c 79 b7 1c 77 78 9d d8 ee 8d 09 44 92 bd 12 ad 09 fd 11 a7 ef e6 62 dc 9d dd 88 b1 b6 ce af f5 99 6f 6d 5e cd b2 68 eb 24 9a 5a 14 cc b4 2b 2a 5c 2b 12 64 a4 ab b3 96 34 24 96 73 c0 29 b3 62 3a 8c bf 2c 74 a2 f1 78 a5 65 1d 52 f9 bf 91 ce 63 71 bc ff 00 e1 e8 6a e5 a5 fe 86 ad f4 ad be 75 69 b6 ec 5b 47 35 d4 4f 9b 3e 72 25 8c fb e0 a3 00 6d e0 64 1a 32 f2 58 3c 75 4a f5 27 be d7 ec d7 e4 59 cc 5a c2 42 94 23 bb c7 43 85 36 93 66 cd b2 af 24 89 d5 f3 91 53 da ad 33 66 7c 9a a5 13 26 Data Ascii: 4])u8@;KR(Wx!l=_\|^-k@9Ts59LywxDbom^h$Z+*\+d4$s)b:,txeRcqjui[G5O>r%md2X<uJ'YZB#C6f$S3f\|&
2024-05-15 22:37:01 UTC	3306	IN	Data Raw: 20 02 00 20 0d b5 64 8f c5 f6 c4 6b 6d 12 02 2d 6b d5 34 d2 53 90 ae f2 29 51 eb 9e 7d e0 7f b4 93 1d f5 0f f7 4e 43 3a ff 00 ff 00 4c 4b e6 af 64 16 df 7e ab bd 1c 7d 6f f7 8e 71 1a 3f c9 41 5d ff 00 a9 ec f7 6d ee 66 a5 8e 04 ec 02 00 20 0d a1 b0 7b 2a 45 35 ad 6a 5e eb 41 04 d9 b7 76 99 55 3e 0b 9c 41 12 d2 3c 75 23 c7 0c 76 fc 96 a1 08 56 a9 99 d7 5e 85 08 b9 76 cb 5b 2e 37 d8 e5 79 41 5a 52 a5 0c 05 27 e9 d6 76 ee de f8 dd 73 09 b4 af 9d b7 6a 5a 15 55 93 ad 4a b1 36 a2 6a a6 a8 26 7a 80 04 92 58 00 72 19 e9 1c d5 6c cb 17 5e ac aa ca ac af 26 de d7 bc de 52 c0 e1 a9 53 8d 38 d3 56 4a db 10 db f0 92 d7 fd 6b 5b f5 85 fe f8 b3 e5 b8 9f 5b 2f 7b fa 97 7c 96 87 ab 5e e4 1f 84 96 bf eb 5a df ac 2f f7 c3 cb 71 3e b6 5e f7 f5 1e 4b 43 d5 af 72 0f c2 4b 5f Data Ascii: dkm-k4S)Q}NC:LKd~}oq?A]mf {*E5j^AvU>A<u#vV^v[.7yAZR'vsjZUJ6j&zXrl^&RS8VJk[[/{\|^Z/q>^KCrK_
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: c3 0f 33 f1 de b6 9f ea fb 0f 39 70 9e ae 7f a7 ee 1f 93 9d e2 fd 6b 60 fd 7f fc 30 f3 3f 1d eb 69 fe af b0 f3 97 09 ea e7 fa 7e e1 f9 39 de 2f d6 b6 0f d7 ff 00 c3 0f 33 f1 de b6 9f ea fb 0f 39 70 9e ae 7f a7 ee 1f 93 9d e2 fd 6b 60 fd 7f fc 30 f3 3f 1d eb 69 fe af b0 f3 97 09 ea e7 fa 7e e1 f9 39 de 2f d6 b6 0f d7 ff 00 c3 0f 33 f1 de b6 9f ea fb 0f 39 70 9e ae 7f a7 ee 1f 93 9d e2 fd 6b 60 fd 7f fc 30 f3 3f 1d eb 69 fe af b0 f3 97 09 ea e7 fa 7e e1 f9 39 de 2f d6 b6 0f d7 ff 00 c3 0f 33 f1 de b6 9f ea fb 0f 39 70 9e ae 7f a7 ee 1f 93 9d e2 fd 6b 60 fd 7f fc 30 f3 3f 1d eb 69 fe af b0 f3 97 09 ea e7 fa 7e e1 f9 39 de 2f d6 b6 0f d7 ff 00 c3 0f 33 f1 de b6 9f ea fb 0f 39 70 9e ae 7f a7 ee 1f 93 9d e2 fd 6b 60 fd 7f fc 30 f3 3f 1d eb 69 fe af b0 f3 97 09 Data Ascii: 39pk`0?i~9/39pk`0?i~9/39pk`0?i~9/39pk`0?i~9/39pk`0?i
2024-05-15 22:37:01 UTC	12120	IN	Data Raw: 20 02 1c 1d 46 84 45 32 3e 5d 57 78 ae 6e 6d 35 d1 b4 f5 51 d8 f7 6c 57 77 d9 b3 79 5c d3 92 b4 ba 0e 76 5f 17 cf 4f 63 7b 57 7e 9e d2 56 e7 5c 6b cd 73 36 1b 6a d9 96 5d d6 f9 15 f0 ac 2a 91 37 0d 64 92 66 83 90 9d 8c cc 20 61 41 2c 97 f5 81 20 67 18 39 8e 69 80 cc 73 fa 58 8c 46 27 9d 86 85 9a f4 65 a5 b5 e6 db 9b 77 77 b5 db 66 97 d0 ca c1 e0 71 78 2c a2 74 68 d0 b5 69 68 f5 5a ff 00 9a f7 b6 8b 77 5e ed 4b 3b 29 d9 65 e6 d9 86 cc 2f 1d 44 8b 34 4e be 76 92 4a 24 53 4b 9f 28 19 29 03 0a 0e 32 ac 39 15 29 65 95 9b 01 ac 5c cf 73 cc 06 77 9b 61 e1 3a 96 c3 53 d5 bb 4b 5d ef 4b 5f 5b 28 ad 3a de c2 39 56 55 8b ca f2 fa d2 8c 2f 5e 7b 15 d6 9b 96 b7 b7 b7 69 67 62 1e 8e 34 b6 75 8b 5f 51 7e 6c 49 55 16 a4 f9 ed 2a 9e 7c c4 cd 12 a5 81 eb 02 85 10 ea 24 be Data Ascii: FE2>]Wxnm5QlWwy\v_Oc{W~V\ks6j]7df aA, g9isXF'ewwfqx,thihZw^K;)e/D4NvJ$SK()29)e\swa:SK]K_[(:9VU/^{igb4u_Q~lIU\|$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50056	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	391	OUT	GET /steam/apps/394360/header.jpg?t=1715685474 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 43044 Last-Modified: Wed, 03 Apr 2024 11:47:47 GMT ETag: "660d41e3-a824" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=477622 Expires: Tue, 21 May 2024 11:17:23 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 09 00 0a ff c4 00 5b 10 00 01 03 03 02 04 04 04 02 06 05 06 07 0a 0f 00 01 02 03 11 04 05 21 00 06 07 12 31 41 08 13 51 61 09 14 22 71 81 91 15 23 Data Ascii: JFIFCC[!1AQa"q#
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 3a 36 9f 03 f8 31 45 c3 3b 02 6a aa d0 87 b7 1d 6b 60 d5 3e 4f 30 65 24 c8 69 04 81 80 72 4f 72 3d 04 9c d9 9a ad 27 1e 79 a5 9a 57 c4 7b 2f dc 96 ef bb c3 3b 57 68 dc af 48 75 0c bb 4a d9 50 05 22 1c 02 4f 29 88 30 7b 10 64 13 3e c7 2a 57 c7 7d 85 ae 77 10 d9 b8 d5 45 5f b4 68 eb aa 79 a9 42 2a 9b a0 7d b5 7e d3 2e 29 61 24 ac c9 00 09 04 93 d3 3e 9a 09 39 5e 9f 24 12 c6 ae d0 8b 72 f1 2a 9d 81 71 63 cb 29 76 9c 72 25 4a 23 ea 24 90 71 18 c8 9d 07 3b 8c 8c 19 5f 31 ba 95 5c 5c 75 2b 92 08 31 d4 48 3a 9a 68 7d 12 4d c1 e2 16 c5 c2 9d 9a dd 65 7d be ae f1 71 a9 75 42 92 96 95 a2 42 dc 00 40 2e 11 09 00 c9 ee 63 a0 3a d3 d3 c3 c4 7e c6 4c b0 77 b1 90 f8 9b 57 c4 ff 00 10 f7 67 2e 97 bb 65 5d 35 03 12 69 2d c9 49 65 96 53 e8 80 a2 0a d4 7a 12 64 93 d2 04 01 Data Ascii: :61E;jk`>O0e$irOr='yW{/;WhHuJP"O)0{d>W}wE_hyB}~.)a$>9^$r*qc)vr%J#$q;_1\\u+1H:h}Me}quBB@.c:~LwWg.e]5i-IeSzd
2024-05-15 22:37:01 UTC	2473	IN	Data Raw: fa 0f 45 7e 22 0f 7c bf 83 ce 20 38 0c 11 fa 3f 3f 7b 85 30 d6 8c bb c1 99 71 7d 68 a6 3e 11 4f 79 dc 35 e2 01 f4 bd 35 ff 00 ab a7 41 d3 fd 21 e7 fa 88 47 c5 e6 a3 c8 dc dc 30 13 d6 8e e3 8f fe db 1a 1e a1 5d 0c e9 df 26 e3 f0 d0 79 bc 3a f0 ac ff 00 f5 52 d4 7f fe 23 5a d3 1f a5 7b 19 65 f5 3f 73 ce ff 00 19 96 de 0c 6d 7b 05 f3 75 70 e2 ff 00 cf c5 ba 7e 22 3e e5 cd d7 6e 0a 45 ca 8d e4 b9 50 e3 c1 a6 41 4c 32 87 92 d9 43 89 49 cf 28 e7 26 75 9f 22 8a 56 b9 b3 46 3d 4d d3 e2 8c 53 ba f7 ee e0 de db ad 17 7b dd e2 b2 ff 00 7c 75 4d 23 e6 ee 2f 97 9d 59 49 01 09 2b 51 24 81 00 09 38 1a c9 a9 ca 56 cd 8a 0a 31 3d 3d a8 e2 6f 8f e0 7f 51 c2 5d 90 a1 1f da ab 62 7f fe c0 6b a6 b5 56 e7 33 e5 b0 81 c4 ff 00 88 34 e7 84 7b 1a 3f f2 ca 7f f6 8e ab e6 2f e4 f3 Data Ascii: E~"\| 8??{0q}h>Oy55A!G0]&y:R#Z{e?sm{up~">nEPAL2CI(&u"VF=MS{\|uM#/YI+Q$8V1==oQ]bkV34{?/
2024-05-15 22:37:01 UTC	8144	IN	Data Raw: 0b bd aa f9 41 7e 35 3f a3 ea 6d c5 c0 bf d4 96 ca c3 8d a9 20 20 90 ea 48 01 4a 1d 73 ac d9 63 5b 9a f0 ca f6 19 78 31 e1 9f 89 5c 77 b8 ae 83 66 ed b7 ae 74 ed b8 12 fd cd f5 06 69 28 c9 82 42 de 54 09 00 83 ca 25 44 64 24 e9 30 8b 9f 03 25 35 0e 4d bd b3 be 0e c5 8b 3b 4e 6e 0e 26 ad ab bb bf 53 ec da ed 81 74 ed 98 8e 54 2d c5 85 2c 0f 52 94 cf a0 ef a7 c0 4d 6e 66 f1 df 64 29 a7 f8 4e ec db dd 75 65 05 27 18 5f ab ad a3 50 4d 4d 3d 3d 0b 0b 71 83 24 00 b4 07 49 49 c1 ea 06 a2 c1 15 dc 8f 3c bc 88 67 17 7e 12 9b c7 6f db cd 77 0f 77 55 2e ed 75 08 97 2d b7 16 05 0b eb 20 e0 36 b2 a5 21 44 fa 28 a0 08 ea 7a 68 5e 0f 22 e3 9b cc c9 fb 03 81 d5 37 7e 3e da 38 71 bf ea 5d d8 15 6f d5 1a 5a e7 ee 0d 25 b5 d2 12 d2 96 82 42 d4 94 90 af a4 03 30 42 d2 41 32 Data Ascii: A~5?m HJsc[x1\wfti(BT%Dd$0%5M;Nn&StT-,RMnfd)Nue'_PMM==q$II<g~owwU.u- 6!D(zh^"7~>8q]oZ%B0BA2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50057	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	392	OUT	GET /steam/apps/2379780/header.jpg?t=1713537191 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 47940 Last-Modified: Tue, 20 Feb 2024 13:33:34 GMT ETag: "65d4aa2e-bb44" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=506703 Expires: Tue, 21 May 2024 19:22:04 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 04 05 08 09 02 06 07 03 0a ff c4 00 60 10 00 01 03 03 02 03 04 06 06 04 07 0a 08 0b 09 00 01 02 03 04 00 05 11 06 21 07 12 31 08 13 41 51 09 14 22 32 61 71 15 42 81 Data Ascii: JFIFCC`!1AQ"2aqB
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: ec 77 2d 7f ae 16 fd bd a5 49 b9 cb 92 d5 aa d6 80 9c e6 43 ca 0d a0 81 e3 ca 09 27 e0 6a 89 f2 67 73 9e 56 da 2a 61 4f 13 60 66 ea fd 78 71 a0 2d bc 30 d0 9a 7b 47 59 d2 13 6e b2 c3 6e 1b 6a e9 ce 52 3d b7 15 f1 52 b9 94 4f 9a 8d 54 38 97 1b 95 a1 63 43 1a 00 50 43 b7 6f 6a 05 4b bb 4f d1 f6 4b 82 a1 db e0 36 53 73 9a c2 b0 b6 9b 56 dd ca 3c 9d 77 c4 f5 4a 08 1d 54 69 14 f1 09 dd d7 bf d9 1b 77 f7 fd 13 75 53 98 47 e5 e3 f6 8e fd dd df 55 c6 bd 1e da b1 b5 f6 8a d1 77 40 96 2d 70 dc fa 4e 13 89 49 08 6d 31 c4 75 2d 29 51 f1 c1 48 39 f3 ab 17 7f 1d 83 28 b9 be 8a 0b 23 34 b3 e4 76 9a 6b f1 53 8b b5 5f 15 6d 3a 83 80 bc 47 b2 db a2 bb 31 a7 ec af a0 cc 59 ee d1 9d b7 4a 4e e7 cf 27 15 29 98 7c 91 b0 cb 21 b1 1c 37 47 2d 53 5f d8 68 bf 7a 84 9d 93 f8 93 76 Data Ascii: w-IC'jgsV*aO`fxq-0{GYnnjR=ROT8cCPCojKOK6SsV<wJTiwuSGUw@-pNIm1u-)QH9(#4vkS_m:G1YJN')\|!7G-S_hzv
2024-05-15 22:37:01 UTC	3297	IN	Data Raw: 43 61 aa 05 8f 6d fc 56 3f f3 b5 f8 24 82 7a 59 4b 4f f4 93 6f 31 b1 1e 21 7b 6a 7b 9b d7 26 a1 c8 65 2a 4b ae c7 0e a9 2d 8e 8b 0a 29 24 0f 22 47 e3 4d d1 44 21 73 9a 4e c6 c3 e2 a7 74 9a 71 88 43 15 54 4c b3 a4 8c 39 c0 0d 2e 1c 5a 6c 39 13 ad b6 d6 cb 36 64 17 d9 4a fc 48 dc 79 56 a3 52 3b 5b ae 4e 03 01 39 36 5e 8c b8 a6 5c 0b 1e 14 6c 25 8e 0e 09 4f 63 64 61 69 59 3e f7 78 a3 42 47 67 75 d1 c4 dc 8d b2 c1 2e ad 23 01 6a 03 c8 1a 6c 17 0d 8a 70 b5 ae d4 84 bb 51 bc db 71 19 c2 40 7c 60 a5 69 3b f5 39 07 ec ab 2c 56 b5 ff 00 9d 75 30 d4 00 0f 81 b7 cf 45 4d d1 dc 16 0f f8 7a 3c 4d dd 97 b9 ce 6f 73 db 72 2f e2 0d c5 f9 78 2d 92 df 05 77 6d 3e d4 90 8e f0 fb 8e a4 75 3b 6c ac 78 d6 8a 96 a6 19 18 c8 aa 80 b9 17 04 fa 11 7f 2b ac 4d 76 1d 5d 1f 5b 57 86 Data Ascii: CamV?$zYKOo1!{j{&e*K-)$"GMD!sNtqCTL9.Zl96dJHyVR;[N96^\l%OcdaiY>xBGgu.#jlpQq@\|`i;9,Vu0EMz<Mosr/x-wm>u;lx+Mv][W
2024-05-15 22:37:01 UTC	12216	IN	Data Raw: dc 6d e1 cb bc e5 77 f3 e6 38 65 20 ad 6b 75 5b f3 1d c9 e5 c0 dc d3 54 94 f1 40 f1 90 6b cf 89 53 31 bc 6a bf 15 8c 8a 87 f6 05 ac d1 a3 07 20 1a 34 d3 85 ee a9 fb 53 b3 19 db ee ac e7 6c 97 c4 95 72 a8 9d bd f3 5a 48 99 0b a3 79 2d ed 0e 3e 6b 15 24 d3 b5 d1 30 3b b3 cb c9 48 be c3 da fa 1f 0a f5 76 94 d5 73 e4 33 16 25 b5 db 91 5b af 82 52 0a a3 a9 20 60 6e 54 49 00 0f 12 45 56 54 07 f5 44 46 2e eb a9 b0 16 0a 80 64 36 16 fa ae 23 c7 19 8a 7a 5d b1 85 a8 87 97 df 4b 79 b5 7b c1 4e ba a5 8e 61 e0 70 73 4f 16 ec de 49 b8 8f b4 ee 65 49 cf 46 55 8a 6a f8 e7 c3 b4 08 ee 0e e1 57 1b 9b 9e c9 f6 23 fa b9 40 71 5e 40 a9 69 00 f8 f3 0f 3a 44 9d 96 25 c4 73 4f a7 25 6d 7a 9b 5c 5a 34 a1 0d 4c 79 4e cb 50 ca 62 47 4f 3b a4 79 91 e0 3e 75 4f 24 cc 8b da 2a f1 91 Data Ascii: mw8e ku[T@kS1j 4SlrZHy->k$0;Hvs3%[R `nTIEVTDF.d6#z]Ky{NapsOIeIFUjW#@q^@i:D%sO%mz\Z4LyNPbGO;y>uO$*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50059	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	405	OUT	GET /steam/apps/1158310/header_alt_assets_4.jpg?t=1715685390 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 37743 Last-Modified: Mon, 15 Apr 2024 14:43:57 GMT ETag: "661d3d2d-936f" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=477644 Expires: Tue, 21 May 2024 11:17:45 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 07 00 05 08 09 ff c4 00 5f 10 00 01 02 05 03 02 04 03 03 06 07 09 0b 07 0d 00 01 02 03 00 04 05 06 11 07 12 21 08 31 13 22 41 51 09 14 61 15 32 71 16 23 42 Data Ascii: JFIFCC_!1"AQa2q#B
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 95 0c c9 8b c4 8d 1e 87 eb ed 63 a3 6e b2 e9 32 17 55 7b 52 a5 ad 8a fc b4 b8 69 33 ec bd f2 73 e1 b0 49 0d 3a c3 a8 3e 20 49 27 18 04 f2 76 ab 07 93 7b 64 64 c4 f5 18 1e d4 8e 30 bb ef ed 02 d0 cf 9b 94 d1 e9 6a 8e a3 5d ae 36 e3 0d de 17 6b 08 f9 2a 78 50 29 52 e5 65 0a 13 e2 39 82 70 b7 52 42 4e 0a 41 f4 4f 10 e6 27 52 3b f5 29 47 3b a5 f0 fe ac b7 7e 1e 5d 53 69 6f 48 9a 2d 75 4d de 97 0b b3 75 ba f5 53 c5 62 83 48 93 71 f9 94 34 cb 61 21 4b 51 09 6d 3b 8a 95 8c af b0 fc 40 74 24 9a 39 7a 9d 3c f1 ce bb 1c 77 a3 ba fd 55 d1 4d 7c 91 d4 ab 78 38 85 31 51 72 61 d9 25 2b 02 66 55 c5 9f 15 85 fa 61 48 51 19 f4 38 50 e4 03 02 9d 31 ae 2a 50 da 77 77 5f fa ef d3 2f 51 da 69 45 b8 a4 2f 29 b4 6a 04 9c 8b ae 52 9a a7 d3 56 b7 55 94 95 09 49 cd c0 25 09 f1 31 Data Ascii: cn2U{Ri3sI:> I'v{dd0j]6kxP)Re9pRBNAO'R;)G;~]SioH-uMuSbHq4a!KQm;@t$9z<wUM\|x81Qra%+fUaHQ8P1Pww_/QiE/)jRVUI%1
2024-05-15 22:37:01 UTC	3292	IN	Data Raw: 51 2b 72 33 52 96 c1 a0 cc 09 ba 45 3a dd 93 6e 4a 4a 41 dd c1 45 6d b2 81 b4 a9 44 0d ca 5e e5 28 70 a2 40 02 1f 1d 3e 35 17 17 cd f5 be 58 b7 91 a2 c2 d4 5e ba 6f 6d 44 99 fb 51 db 5e c8 a2 5d 65 b0 da ae ca 4d 09 28 ab 1c 0d bb 92 fb 8b 59 42 f1 90 16 80 95 0c f0 46 06 33 e3 d0 e3 c7 c5 b6 bd 1b e0 8f 34 a5 d8 e7 97 1e 5b ab 71 d7 16 a7 1c 59 2a 52 d6 72 54 4f 72 4f ac 6e f8 11 79 63 67 40 69 b7 5c da 81 a7 da 5a 74 ed fa 65 b1 79 da cd ee 12 b2 97 6d 2f e7 c4 a0 24 9d a8 05 69 49 48 24 90 16 14 06 70 38 e2 31 64 d0 e2 9c fc 54 da 7f 07 44 86 69 56 de a6 9b 51 ba b3 bd 35 7a c0 b6 ec 8b 9e 4a 88 f5 bf 44 9c 33 6c a2 9d 4d 6e 4d d5 02 b5 9f 0c 14 79 5b 48 4a f6 00 da 13 c2 53 9c 9c 92 58 f4 b8 f1 4d e4 83 76 c6 ee 94 d6 d1 3e a4 ba 8e a8 f5 1d 72 51 eb Data Ascii: Q+r3RE:nJJAEmD^(p@>5X^omDQ^]eM(YBF34[qY*RrTOrOnycg@i\Zteym/$iIH$p81dTDiVQ5zJD3lMnMy[HJSXMv>rQ
2024-05-15 22:37:01 UTC	2024	IN	Data Raw: 92 46 26 ef e9 81 b1 15 2a 64 b2 ca 41 09 6d b0 41 19 e3 d0 c6 27 2d 0a e7 6c 99 b6 2b cb cf 53 45 35 31 77 29 f7 14 fc f4 9a 94 95 2b cc a6 00 0a 23 d7 b4 6b 8c f4 b5 4a 2c cb 28 f2 6c 29 52 1a 88 a4 29 6c b9 4b 71 ae 79 73 6f 3e b9 c6 33 ff 00 fb 08 9e 6f 67 f4 7b ac 28 63 c9 f0 a3 62 d5 bb a9 13 b8 dd 3f 49 61 2a c7 90 04 93 fb 31 91 ef 0a 7a 9f 67 c7 a4 64 c6 78 79 1f 74 33 a8 52 2f 26 e4 e6 1b 9c ae 4a a0 0f 21 43 72 d9 27 f5 e3 88 28 6a 74 9b 96 dc 6f ef 07 64 a9 db 2b 2a 75 4a 66 61 73 a5 f7 8c c2 db 73 c3 2a f7 ef 98 f4 32 c7 14 a3 b5 55 9c 37 26 dc be 01 d6 e1 74 13 83 cf 61 ed 14 95 03 7c 1b bb 11 45 9a da 0e 70 a5 1e 01 ed 01 95 5c 49 07 52 1c 6a cb 89 9a ba 5d 98 c7 2f 34 da c9 f5 27 6e 39 fd 90 ed 3f 10 11 97 a9 5f a9 38 59 ef 1b 11 92 80 71 Data Ascii: F&dAmA'-l+SE51w)+#kJ,(l)R)lKqyso>3og{(cb?Ia1zgdxyt3R/&J!Cr'(jtod+uJfass2U7&ta\|Ep\IRj]/4'n9?_8Yq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50058	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	623	OUT	GET /steam/apps/2208920/header.jpg?t=1697654233 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Tue, 15 Nov 2022 15:44:04 GMT ETag: "6373b3c4-adf3" Server: nginx Content-Type: image/jpeg Content-Length: 44531 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=185011 Expires: Sat, 18 May 2024 02:00:32 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 04 06 07 08 02 03 09 01 00 ff c4 00 54 10 00 01 03 02 04 04 04 03 06 03 03 07 07 09 09 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 32 71 09 15 23 42 81 Data Ascii: JFIFCCT!1A"Qa2q#B
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: ee 48 2a 6e 2f b1 70 32 e5 70 d6 1c 8e d2 0a 1d 6d d4 85 05 24 dd 24 75 b8 3f 4c 57 17 65 72 d8 7c b7 15 86 89 28 6d 29 27 a9 03 7c 5a 67 b6 27 7e 93 1d f7 4a 94 34 dc dc db 6b e0 50 54 84 72 a1 30 c0 2a be a4 a4 58 12 6f 89 43 c5 80 be 36 24 17 d4 a5 0f 30 dc 1b f7 c0 1a 98 9e 56 6f 4a b5 24 28 5c 0e a3 0b a8 75 8d 82 5f aa 2d d4 d8 00 37 ea 4e f8 5b 7d 87 50 a3 52 79 f2 92 52 16 ab 0d 82 51 b9 c2 d3 63 7b 51 b9 aa 34 85 26 fc 9b ff 00 b6 bd f1 34 07 5a 2a e4 76 c3 08 74 b6 43 8d 1d cd 85 ec 2f df fb b1 ea 8f 20 88 e7 34 65 ef ba 9d 93 cb 8e d2 90 df f9 cc 50 ea 75 16 92 49 d5 a0 f5 0a 16 20 76 ba 53 71 8a da a1 e2 ec dd 48 d3 36 33 12 92 90 92 e2 4a 56 47 ca 55 ab cc 3e bd 0f eb 87 5b ee 09 6c 3c b8 4b 51 56 5a e2 75 2c eb d0 c4 e4 bd 09 db 9e 89 23 5a Data Ascii: Hn/p2pm$$u?LWer\|(m)'\|Zg'~J4kPTr0XoC6$0VoJ$(\u_-7N[}PRyRQc{Q4&4Z*vtC/ 4ePuI vSqH63JVGU>[l<KQVZu,#Z
2024-05-15 22:37:01 UTC	1936	IN	Data Raw: e6 42 9e 33 ab 15 3a 74 c8 d4 c8 91 a2 49 79 fa c8 7e 05 59 c6 d2 0a 10 cf e2 ae 3b ae 1b 94 3b cc d0 df 5b 16 c0 3b dc e3 83 96 31 5d 46 4a 7f 8f fc 1d ac 2a 5e 84 1b 5c ff 00 6f f2 37 9d ce 12 73 ee 73 5d 4e 6e 60 7a 99 0e 6d 3d 0b a4 33 12 09 90 4c 40 0a 4a 54 80 b0 03 88 70 ac 2d b4 ef b5 ed 6b 5f 3b 82 4b e4 3a 6e 2e 97 72 20 cd 15 3f bc 63 a2 9e dd 5d 19 84 c9 94 a4 be 22 b5 c9 72 42 af e4 43 e5 60 3a 96 f5 0b 94 79 92 48 06 e4 5a da 63 b7 62 bf d6 eb c9 93 f9 21 ca 85 4b 2f 41 a5 21 2f d5 e5 2b 95 28 9b 28 ba b5 2c 04 ef d8 5f 60 07 4c 3e 34 e6 eb c8 f9 f4 c2 36 bb 72 3a 33 c7 0b 2b 9c 19 cf 94 c8 35 e9 2c 3b 08 b4 89 8c cf 8d ab 95 25 00 90 51 a8 a4 12 41 16 50 3b 8d 49 3d 08 c6 8c f8 65 d3 cb 44 96 e6 3e 9b 24 7a 85 ad 3d 8b 17 e1 63 8d 5f 7f 71 Data Ascii: B3:tIy~Y;;[;1]FJ*^\o7ss]Nn`zm=3L@JTp-k_;K:n.r ?c]"rBC`:yHZcb!K/A!/+((,_`L>46r:3+5,;%QAP;I=eD>$z=c_q
2024-05-15 22:37:01 UTC	10168	IN	Data Raw: ca 4b 82 20 f0 b9 5a 7e 7a 73 55 1a 2c 99 31 a5 b2 b6 6a 21 c8 8e 06 5c 72 3a 81 69 c6 b9 8a 3a 6d 70 95 04 9f 45 5b a9 c7 03 3e b8 d6 48 76 3b dd 34 a1 ee 84 df 3f d8 6a 71 b1 9a 9d 6e a9 19 35 19 12 1e 7a 23 4a 61 c7 92 da 50 14 92 02 50 85 79 94 40 00 5b 4f 4d fb 61 31 64 6d b6 3e 68 c7 4a 8f 8b 7f 9e 03 91 32 cd 47 2b 70 9b 29 54 25 4a 52 d2 dc 83 36 3f 45 32 cb 4f 15 23 6b 74 52 96 d3 6a 55 cd fc c3 b5 b1 7c ae 12 d2 de cd 5a fa 94 42 a7 0d 49 5b ba 65 ab e3 ef 14 e8 fc 3c e0 d4 1a b6 60 28 7e 6d 45 a4 3d 48 cb ef a0 7c 4c 89 40 05 21 4b 42 b7 6d b6 97 a5 c7 16 7f f2 61 23 cc ad ba fd 43 59 22 a1 e6 af fa 9c 9e 9e f1 c9 cb c7 1f d2 ce 77 64 dc b3 53 9d 16 55 6a 1d 6a 4b 35 e8 72 43 b0 d0 d3 4a 53 0e 15 dc be e3 ae 12 12 c2 7c c0 0e a5 45 47 6d b1 ca Data Ascii: K Z~zsU,1j!\r:i:mpE[>Hv;4?jqn5z#JaPPy@[OMa1dm>hJ2G+p)T%JR6?E2O#ktRjU\|ZBI[e<`(~mE=H\|L@!KBma#CY"wdSUjjK5rCJS\|EGm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50060	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	630	OUT	GET /steam/apps/629730/header_292x136.jpg?t=1701774481 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Sun, 28 Jun 2020 06:24:56 GMT ETag: "5ef837b8-478e" Server: nginx Content-Type: image/jpeg Content-Length: 18318 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=500008 Expires: Tue, 21 May 2024 17:30:29 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 01 02 08 00 09 ff c4 00 41 10 00 01 03 02 04 04 04 05 02 04 04 05 03 05 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 32 71 81 91 15 23 09 Data Ascii: JFIFHHCC$A!1A"Qa2q#
2024-05-15 22:37:01 UTC	2275	IN	Data Raw: 99 81 86 db 75 c2 a2 1a 8d 20 93 72 95 24 ed 6d 89 d8 6c 45 ad 62 0e 16 2e 73 c5 48 2c 27 2a 36 3b fc 66 88 fa ae d7 93 c4 dc 91 02 86 65 c0 95 2b 34 be d0 22 5b d4 88 2b 0c 17 52 91 cc 25 d7 02 5b 4a 4a ae 2f a9 56 e9 bd ad 86 44 91 e9 e3 a1 d3 3f da cc ee e4 9e 5b 78 54 86 78 f1 00 fe 43 93 26 62 28 f4 b9 f9 86 79 2d c6 65 d9 6b 71 8a 6c 6d b4 b0 96 9b dd 4e 29 40 97 14 a5 02 48 4e d6 00 63 3b b3 7b 4f f5 e5 ef 6b 08 68 c0 27 17 ed e6 9b d7 e9 19 a5 0c 6b 5c 09 3c fa 20 b4 9c 93 c7 6e 3b 69 72 a0 89 94 6a 13 bb ea 94 91 4d 8a 47 f8 5b 00 2d 7f 85 7d 71 b2 4c b2 7f af d8 24 a2 6c 6d 37 27 dc ab 33 25 78 22 a1 d0 5a 4b 95 aa cb f5 49 6b 1e 76 60 03 19 ab fa 15 92 56 af ff 00 5c 10 69 03 b3 23 b1 e4 3e e9 a7 6a cd 54 4c a3 e6 7e df f6 a5 d9 a7 87 94 6c bd Data Ascii: u r$mlEb.sH,'*6;fe+4"[+R%[JJ/VD?[xTxC&b(y-ekqlmN)@HNc;{Okh'k\< n;irjMG[-}qL$lm7'3%x"ZKIkv`V\i#>jTL~l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50061	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	420	OUT	GET /steam/apps/730/ss_d830cfd0550fbb64d80e803e93c929c3abb02056.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 78350 Last-Modified: Fri, 29 Sep 2023 17:33:48 GMT ETag: "65170a7c-1320e" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=75563 Expires: Thu, 16 May 2024 19:36:24 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 00 09 ff c4 00 52 10 00 02 01 02 04 03 06 03 05 06 03 04 07 05 07 05 01 02 03 04 11 00 05 12 21 06 31 41 07 13 22 51 61 71 14 32 81 08 42 91 a1 b1 Data Ascii: JFIFCCQXR!1A"Qaq2B
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 26 ae 8f d3 db 0e 4b 91 7c d0 83 3d cf 28 72 3c ba 4a dc c6 a7 e1 e8 e1 b1 65 02 e5 89 d8 00 39 92 4f 21 81 39 a8 26 e4 c9 14 df 08 cd dd a9 f1 3d 2f 18 e7 94 99 b5 05 14 d0 45 51 0a 47 79 64 1e 22 a4 ea 25 46 c0 db 4a f9 f8 46 31 e3 9b 79 af c3 0e 48 a7 8d af 28 0d 7a 43 59 c1 ff 00 b4 1e 42 b5 59 64 3d d4 b1 bc 46 cf 1e af 0b 5c 02 06 92 d6 dc f9 79 62 64 5b 66 d2 26 17 be 29 79 44 22 93 2c ad cc f3 55 51 14 a5 55 45 48 68 f7 32 d9 4e b0 57 99 50 05 f5 6c 07 9e 2c f5 11 c5 1e 5f 25 9e 27 36 da e8 9f f6 41 96 ac 3c 41 43 c4 d9 b5 0b d0 64 5d eb d2 c3 2d 42 68 67 25 4a 99 94 1e 82 e4 5c 7a db 96 e8 d5 4a 78 e3 df cc 9d d2 f1 5e 07 e9 f1 c6 71 72 5c c7 a3 49 70 9f 6f 5c 39 99 e4 b4 90 71 2e 65 0d 1c b0 d5 bd 2d 4b 51 9e f5 65 31 b0 0a ca 6f b2 bd d7 c5 c8 Data Ascii: &K\|=(r<Je9O!9&=/EQGyd"%FJF1yH(zCYBYd=F\ybd[f&)yD",UQUEHh2NWPl,_%'6A<ACd]-Bhg%J\zJx^qr\Ipo\9q.e-KQe1o
2024-05-15 22:37:01 UTC	3179	IN	Data Raw: 5d a4 8f 88 2b 11 a7 a7 94 90 5f e6 b1 46 00 d8 a0 50 77 e6 2f 84 5f 3b aa 87 c7 98 d5 d9 52 d3 f0 d2 d6 55 54 f7 b5 f0 ba 33 16 47 dc 6e 56 d6 fa 1b 1d b1 a5 cd 4a d5 f7 c8 88 c1 ae 7f 21 ca 96 80 53 65 c5 fe 21 0d 53 82 23 58 7c 41 58 29 6b 7a dc 8b 6d 8a 3c fb 6b 2c 5f 25 d6 1d d7 8e 4b 82 c2 e1 9e c5 2b f8 a7 86 13 36 7a 84 a4 ac 90 31 14 b5 30 d8 39 07 62 58 1d b5 7b 73 c5 66 d3 f9 97 92 d0 b5 f2 32 77 d9 ff 00 63 b9 5e 43 05 44 f9 9e 5d 4f 25 6c c5 75 00 e5 96 ca 08 b9 b1 b1 27 51 c2 dc 92 fb a3 23 0f ea 26 50 f0 9e 47 38 ba e5 d4 c1 cf 36 89 4a 1f c4 5b 06 12 93 ed 82 51 8d f4 0a 7e 10 a3 7a 63 1c 55 39 8d 2e e0 fe e2 ba 50 3f 02 c4 1c 5f 73 15 b2 22 5a 6c 9a b2 82 69 9a 9f 3f cd 44 cd a4 89 64 a8 66 65 03 62 01 bf 22 3c ef 89 c3 e5 a5 fa 03 6d 5a Data Ascii: ]+_FPw/_;RUT3GnVJ!Se!S#X\|AX)kzm<k,_%K+6z109bX{sf2wc^CD]O%lu'Q#&PG86J[Q~zcU9.P?_s"Zli?Ddfeb"<mZ
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: a4 d3 63 c9 87 f8 89 a9 73 c8 8c da ac 90 c9 78 da 71 e3 83 3e d1 50 4b 98 c4 f5 92 d4 10 8f 21 68 a2 29 7d 28 09 00 73 eb 6b fd 71 23 3d b0 db 41 94 77 cf 75 89 ea 22 9a aa 95 23 86 33 2c 9d f2 9d 0b cc 8d 2f ff 00 0c 23 03 da db 1f 99 5a a4 39 e5 7a e9 e1 8e 19 14 a4 91 aa 2b 25 f7 06 d6 23 12 32 e5 d0 1c 78 e4 4b 5b 4f 24 f9 9d 5e 94 2a 82 38 d8 36 9f 0b 12 2c 54 f4 27 6b f9 e1 bb 9c 1d a0 45 29 2a 63 5c 94 ed e2 08 bc be 68 89 fc c6 37 e2 ca 9f 7d 89 9e 3a fc 0f 47 2b aa 68 b1 a8 86 d6 d2 77 2b ed fd c6 34 5f b7 62 6b c3 e8 4e f1 89 9f f7 0d a8 ff 00 03 9b 1f c7 fb db 17 8b e3 92 8d 57 43 ef 0d 40 d5 a1 b2 c9 a0 64 b4 ab 21 59 07 85 48 b9 62 50 f5 d2 3e b6 17 1d 71 97 57 71 c7 69 d5 97 c4 93 74 d1 30 cb e9 e9 5c c6 90 9d 55 0e ca 25 90 80 cd 7b 13 b8 Data Ascii: csxq>PK!h)}(skq#=Awu"#3,/#Z9z+%#2xK[O$^86,T'kE)c\h7}:G+hw+4_bkNWC@d!YHbP>qWqit0\U%{
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: ec de 5e c7 d7 1b f2 63 59 17 d4 c9 83 2b c2 ed 72 8b db 85 78 ef 25 e2 38 75 47 22 b5 4f 76 0b 40 ed e3 bf de d8 9d f1 8f 98 5a 92 3a f0 94 72 ab 8b 12 f1 1f 19 65 39 02 b4 f3 4b 1c 2b f2 84 26 e5 8f 3b 00 39 9c 2a dc b8 8a b1 af 6c 15 cd d1 52 67 7d aa ad 63 48 61 76 5d 5f 2f 76 82 ea 2e 6d 72 4f 3f a6 04 70 e6 93 e5 25 f8 bf fa 15 3d 56 08 c6 a2 db 7f 45 ff 00 64 3a a3 32 6c c1 d9 c3 3c 8c c7 c4 d3 1b 96 f7 f4 c7 4f 1c 5c 55 4a bf 23 8d 92 51 9b b5 7f 99 e8 d2 5b ee da 47 a2 81 fd 30 c1 21 ea 88 a3 c5 34 84 fa 11 88 40 c5 2a 36 0c e7 fd 47 10 07 42 6a dd 81 d5 d0 b3 1d b1 02 73 e1 d2 de 21 72 37 e7 88 40 22 9d 01 b9 8c 01 ed 7c 40 d8 74 29 0b 1d 0a a0 b1 fb aa bb fe 03 13 a2 2e 49 56 49 d9 8f 15 71 00 07 2d e1 ac ce a6 36 e5 22 d2 b2 29 ff 00 53 58 63 Data Ascii: ^cY+rx%8uG"Ov@Z:re9K+&;9lRg}cHav]_/v.mrO?p%=VEd:2l<O\UJ#Q[G0!4@6GBjs!r7@"\|@t).IVIq-6")SXc
2024-05-15 22:37:02 UTC	7952	IN	Data Raw: 8a 4e 2c 40 af b5 b5 d8 df 0e 12 1c b2 69 b3 2b b2 b0 3c c1 df 15 7c f0 cb 2e 3a 64 db 84 fb 67 e2 6e 12 31 c4 b5 47 32 a2 5b 7f bb d6 92 e0 0f 25 6f 99 71 cf cb a2 c3 97 94 a9 fd 0d f8 b5 99 31 f0 f9 45 d1 c3 bf 68 3e 17 cd 61 06 b2 57 ca 6a fe f4 75 0a 59 01 f4 75 07 6f 70 31 c6 c9 a0 cd 0e 95 a3 ab 8f 5b 8a 7d ba 60 73 0e de 68 b2 a9 43 54 65 cd 53 40 ce 55 2b f2 fa b8 e7 42 3a 5d 76 2a 7d 0e 04 34 52 9a f9 5f 3e cf 82 d2 d5 46 1c b5 c7 ba e4 4b c5 5c 7f c1 dd a1 f0 a5 76 5b 1e 77 05 2c f3 c7 68 d6 ac 34 3a 5f 98 b9 22 d8 38 b0 67 c1 91 4d c3 84 49 e6 c5 9a 0e 2a 5d 99 57 34 e1 d1 f1 32 c4 4a c7 3a 31 56 28 c1 81 37 f3 1b 11 8f 45 28 47 32 b3 85 09 cb 0c a8 8e d4 f0 fc c8 48 68 04 8b 7f b9 cb f0 c7 3d e0 9c 5d ae 4d cb 3c 26 a9 f0 3a f0 84 f5 9c 35 c4 Data Ascii: N,@i+<\|.:dgn1G2[%oq1Eh>aWjuYuop1[}`shCTeS@U+B:]v}4R_>FK\v[w,h4:_"8gMI]W42J:1V(7E(G2Hh=]M<&:5
2024-05-15 22:37:02 UTC	2024	IN	Data Raw: e0 cc 54 af ed 7a 68 aa 4e fd d9 05 ac 7d 5b fb 5f 0e 96 a1 47 a8 ba 2b 1d 2c a4 ad be 44 19 9e 5f 55 93 ca 23 a8 8c 02 77 57 56 0c ad ea 08 c3 f1 65 8e 55 71 11 93 0c b1 bf 98 6f 6a 8e 77 3a 46 1a 26 8f 24 af 29 b4 4a cf fe 41 7c 4b 0a 8f b0 a9 28 2a 55 03 4a 04 23 ff 00 7d 22 af e4 4d f0 37 2e 8b 6c 60 64 02 1b 01 24 72 7f e1 9b db f2 c4 4c ae da 0b ef ad 73 7c 10 51 ce f8 9b d8 73 c4 25 01 49 58 f3 3b 62 06 a8 f7 79 ff 00 ae 21 28 53 92 d0 cb 9c e7 54 74 11 92 1e a2 45 8f 50 17 b0 be e7 e8 2e 71 49 cf 64 5c bd 8b c2 3b e5 b5 1a 5f 26 a1 a6 c8 72 e8 e8 a8 61 ee a9 e2 16 00 0d d8 f5 66 3d 49 f3 c7 9d 94 dc de e9 33 b7 08 a8 2a 42 d3 52 74 dc 02 3e 98 a1 62 92 ed af 8b 97 32 cc 62 c9 e3 4d a8 9b bc 92 4d 47 77 23 e5 b7 a0 fd 71 d7 d1 e3 71 4e 6f c9 cd d5 Data Ascii: TzhN}[_G+,D_U#wWVeUqojw:F&$)JA\|K(UJ#}"M7.l`d$rLs\|Qs%IX;by!(STtEP.qId\;_&raf=I3BRt>b2bMMGw#qqNo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50062	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	631	OUT	GET /steam/apps/1764400/header_292x136.jpg?t=1704285584 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Last-Modified: Mon, 17 Apr 2023 11:47:11 GMT ETag: "643d31bf-27ba" Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 10170 Accept-Ranges: bytes Cache-Control: public, max-age=513280 Expires: Tue, 21 May 2024 21:11:41 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	10170	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 07 08 00 05 09 ff c4 00 5c 10 00 01 02 04 03 04 05 02 0d 0d 0d 06 07 00 00 00 01 02 03 00 04 05 11 06 07 21 08 12 13 31 14 22 41 51 61 71 81 15 18 32 42 74 Data Ascii: JFIFCC$\!1"AQaq2Bt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50064	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	631	OUT	GET /steam/apps/1619350/header_292x136.jpg?t=1689933372 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Jun 2021 18:12:04 GMT ETag: "60b67874-4483" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 17539 Accept-Ranges: bytes Cache-Control: public, max-age=108988 Expires: Fri, 17 May 2024 04:53:29 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	1566	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 00 01 09 ff c4 00 4d 10 00 01 03 02 04 03 05 05 04 07 05 05 05 09 00 00 01 02 03 04 05 11 00 06 12 21 07 31 41 13 22 51 61 71 08 14 32 81 91 42 52 a1 Data Ascii: JFIFCC$M!1A"Qaq2BR
2024-05-15 22:37:01 UTC	15973	IN	Data Raw: 28 a2 df 23 2e 26 8d 9a ab b1 99 71 35 16 62 38 a8 68 94 94 d9 2a 71 47 48 55 ba 6c 17 f4 c7 67 0e b3 36 df 1f c8 1a 59 ac 8e ca e1 f3 90 93 c2 76 90 d0 69 53 e4 ba c4 64 04 d9 2b 52 10 95 2d 46 e7 c1 08 40 f2 bf 9e 3d 96 1a 19 1c 17 0b 49 be d7 64 bc 75 05 7a ae 73 73 bf 1f 44 03 51 a2 54 65 67 29 b5 47 de 42 62 44 a7 97 23 a8 2e e5 2d b6 94 84 fa 77 af e9 8b 23 1c af ea e7 6f 1f ea e3 e6 cf 74 b8 20 7f 69 fc df 02 37 08 32 d5 0a 3b a4 ca 50 ed 54 12 7b a1 25 00 92 47 8f c2 3e b8 e4 62 a4 e1 3a d3 97 f3 d3 ae c9 95 c6 9e 6d 79 1c 39 3d d0 da 64 38 2f 72 92 d2 0d fa 1e 7f 9e 3c c4 db 8b 6d 72 b7 88 cd 05 e4 ac a4 ac e1 5d 87 4c 5b de eb 1d d5 96 de 91 6b fb bb 08 49 71 f7 48 f0 4a 02 8f a9 03 ae 33 4b eb cb 1e c5 fb 17 64 db 04 4c 88 11 69 d5 66 d1 1c 3e Data Ascii: (#.&q5b8h*qGHUlg6YviSd+R-F@=IduzssDQTeg)GBbD#.-w#ot i72;PT{%G>b:my9=d8/r<mr]L[kIqHJ3KdLif>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50066	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	631	OUT	GET /steam/apps/1745170/header_292x136.jpg?t=1714383419 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 13336 Last-Modified: Tue, 30 Nov 2021 14:55:19 GMT ETag: "61a63b57-3418" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=512945 Expires: Tue, 21 May 2024 21:06:06 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	13336	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 ff c4 00 52 10 00 01 02 04 03 05 04 05 08 04 09 09 09 00 00 00 01 02 03 00 04 05 11 06 12 21 07 13 14 31 61 08 41 51 71 22 32 81 91 a1 15 42 Data Ascii: JFIFCC$R!1aAQq"2B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50063	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	420	OUT	GET /steam/apps/730/ss_0f8cf82d019c614760fd20801f2bb4001da7ea77.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 53903 Last-Modified: Fri, 29 Sep 2023 17:37:04 GMT ETag: "65170b40-d28f" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=461275 Expires: Tue, 21 May 2024 06:44:56 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 09 ff c4 00 51 10 00 02 01 03 03 02 03 05 05 06 03 04 05 0a 05 05 01 02 03 00 04 11 05 12 21 06 31 13 41 51 07 22 61 71 81 14 32 91 a1 b1 08 23 Data Ascii: JFIFCCQXQ!1AQ"aq2#
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: ad 05 a4 1d 68 bb 8f ca 93 06 86 76 d6 f9 04 9e f9 a5 44 ed 06 c7 08 14 13 41 31 a6 41 a4 52 ec df 18 a0 a2 48 d7 83 49 8d 1b 6c a4 33 d8 c5 00 41 7c 6e 2d 9d e5 92 e6 18 a2 6e 55 5e 4c b1 fc 2b e7 4f 70 27 4c 9a e6 65 05 64 da b9 ce e0 fc 11 eb f0 a4 08 d8 a4 f2 a3 3d c4 a8 23 53 9c b1 20 f7 e0 82 3c a8 19 85 d5 16 16 8e 36 be 8d e6 6e 46 33 8f 95 02 0c 59 16 e9 76 49 b6 4c 9e 07 95 03 37 85 84 72 e7 05 80 e0 05 1c e2 81 74 59 b4 df 0e 58 c8 f0 58 85 e7 27 83 f9 d0 30 bd 3b 55 31 de 85 4d ed 06 e0 85 87 bc 50 fa 11 e9 50 66 5d 2d 00 50 c0 38 72 4f c8 e2 98 89 d9 15 a1 6c e7 39 fc a9 01 c8 ae b4 78 e2 bf 95 14 32 18 e4 2a c9 9c 8c e4 f6 fc a9 97 14 64 16 80 13 20 0e 33 80 a3 ca 82 84 7d 49 72 be 11 54 01 73 fc 03 f3 a0 45 63 1b 06 0d 03 44 24 29 60 a0 77 Data Ascii: hvDA1ARHIl3A\|n-nU^L+Op'Led=#S <6nF3YvIL7rtYXX'0;U1MPPf]-P8rOl9x2*d 3}IrTsEcD$)`w
2024-05-15 22:37:01 UTC	3164	IN	Data Raw: 5c ac 51 13 26 00 6e 28 10 1b 4a 1d 8f 84 fb 9b d2 81 9c ab f6 b8 99 ae 3d 97 68 2e fe f3 c3 aa 85 cf a0 31 48 31 f9 57 b5 fc 5b fc e4 8f 9b fe 6a 3f f1 c6 5f d9 f2 6a c8 ae 7b 73 5f 4a 95 1f 27 1d 05 45 95 1c 1c 79 d6 32 5f 67 4a 9f d3 2d fd 2f d4 2f a5 cf 1b e7 7c 67 87 4f 5a f2 33 e1 ed a3 e9 3c 4f 21 46 94 8e 8f 28 8b 54 8e 3b bb 79 33 bc 77 51 de b0 c5 99 ab 52 3d 99 41 3f c9 15 4d 63 47 ff 00 13 86 56 8c 62 70 08 19 e3 77 ce bb d1 cd 47 3e ba 49 6d 26 78 a5 52 ae a7 04 55 a3 36 7a 2b 99 95 18 a3 91 8f 2f 5a 64 83 9b d9 4f bd bd b3 f3 a2 89 1a 41 71 ba 25 2e 54 12 05 4d 01 90 14 10 77 67 1e 54 a8 08 25 bb 89 8b 23 29 4c 1f e3 f3 a2 80 f4 3f 69 91 0a c3 19 7f 20 63 04 9a 00 71 a0 e9 1a 9a ea 51 38 f7 17 7a ef f1 1b 19 19 e7 8a ca 74 e2 cd f1 da 7d 9d Data Ascii: \Q&n(J=h.1H1W[j?_j{s_J'Ey2_gJ-//\|gOZ3<O!F(T;y3wQR=A?McGVbpwG>Im&xRU6z+/ZdOAq%.TMwgT%#)L?i cqQ8zt}
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 59 cc 9b 24 86 61 95 61 e9 8a 50 93 8b b4 0d 26 b6 7c 8d d7 be cb ba af a4 35 70 bd 2f a4 4d af e8 92 96 75 b5 66 57 92 06 dd 9d ab b7 92 07 1e 7e 9e 7c d7 bd 8b 2c 32 2a 9e 99 c1 38 b5 fa ec 59 79 ad 75 65 8f 4f 5c cf d4 3d 2f 77 a2 17 65 86 0b ab 9c 2f 8d 27 3e e9 5e f9 c7 9f 6c 0f 5a ae 31 bf c5 d9 9a 77 d9 4e 4b e2 a4 87 3b 78 6f de 0e f8 cf bc df 32 78 ad 93 26 4a d0 6c 3a 87 84 bc 66 3d a0 6e 29 fc 0a 7b 22 8f e6 3e b4 ec cd 2a 0d 8a e1 9b 70 22 34 68 c6 e2 ad fe 55 b8 f8 ff 00 33 d2 28 22 2b f6 88 47 32 b4 a8 5f 88 ce 37 4f 2f c8 7f 02 d4 d0 ec 63 1e a9 e2 dc 24 6c 09 ba 88 61 61 b4 c3 ca a4 f9 bc 87 b7 fc f1 48 76 3b b1 d5 5e f0 a5 bd e4 36 fa ca 6c c4 88 d1 89 a4 5f 86 e2 31 53 42 b1 de 89 0d 95 dc ac 34 9b 58 e0 99 46 5e dc 42 22 94 79 f1 81 9a Data Ascii: Y$aaP&\|5p/MufW~\|,28YyueO\=/we/'>^lZ1wNK;xo2x&Jl:f=n){">p"4hU3("+G2_7O/c$laaHv;^6l_1SB4XF^B"y
2024-05-15 22:37:01 UTC	1928	IN	Data Raw: bc d5 26 6e 77 39 c6 72 06 73 40 0d 61 d5 55 c1 0d db 18 e0 66 98 1a 4d 25 bc 8a c5 bd df 2c 81 de 8a 1d 91 88 13 2a 56 e0 f1 d8 51 43 4c 8a 68 c4 65 9f c4 07 d7 1e 74 50 59 1f db 15 71 92 14 7f bb 45 0e cd e3 b9 8b 6e 14 91 f0 35 34 16 6a d7 b1 a9 c6 e2 0d 14 16 6a f7 ca 36 aa b8 24 51 40 7b c7 dc 73 bb bf a5 14 22 48 2e 63 d8 43 12 49 a2 86 4c 64 c4 25 53 68 03 9e d4 50 18 b7 ba 08 e0 ee 20 fc 29 01 60 b2 d4 81 3d c8 f4 e2 8a 10 d7 4f bf 3f 69 4e 7c c7 7a 12 22 fb 2c d0 c6 ff 00 6d 32 b5 d3 ec dd b8 46 3b 66 ba 62 b7 47 9e e6 9d 8e 4d fa ed fb fc fc 2b 64 a8 ce c5 f7 3a c0 89 5a 46 62 23 1d e8 a2 91 cd 7d a7 ea 7a bf 52 74 d8 83 48 81 a4 88 ca 0c c8 a7 12 3a 0e 46 d1 e7 cf 97 ca b3 4e ce ac 34 9d 9c 93 fc 6d ad 9d 62 ba 8d ad 65 c7 31 dc 21 42 3f 11 49 Data Ascii: &nw9rs@aUfM%,*VQCLhetPYqEn54jj6$Q@{s"H.cCILd%ShP )`=O?iN\|z",m2F;fbGM+d:ZFb#}zRtH:FN4mbe1!B?I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50065	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	420	OUT	GET /steam/apps/730/ss_796601d9d67faf53486eeb26d0724347cea67ddc.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:01 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 73624 Last-Modified: Fri, 29 Sep 2023 17:35:06 GMT ETag: "65170aca-11f98" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=62001 Expires: Thu, 16 May 2024 15:50:22 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:01 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 08 01 00 09 ff c4 00 50 10 00 02 01 02 04 03 06 04 03 06 04 03 06 03 05 09 01 02 03 04 11 00 05 12 21 06 31 41 07 13 22 51 61 71 14 32 81 91 23 a1 b1 08 Data Ascii: JFIFCCQXP!1A"Qaq2#
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: 01 a8 a9 20 72 e4 3d bc f1 66 2b 77 07 91 c9 f4 0c b2 4d ca 71 6e ef f7 aa bd ea ae f7 52 dd c7 3c d5 31 ca 4e 1d 92 4a a7 03 ba 50 95 3d d8 25 8f 32 ad b8 1a 76 f9 bd 4f 99 c4 ed ed 9d 87 fe 9f c9 06 9e f8 ff 00 5f fb a3 2f 3d 74 d5 2e 15 9a 76 65 5b 4a 28 e5 49 9e 35 d6 8c 00 7e 47 9f 3c 56 92 54 d3 3d d6 eb 67 21 71 dd 6d 64 1c 49 53 17 7a d3 a3 ec 8f 7d 57 1c 80 07 1e 5b 2a 6a 6d 2e 46 20 ef 65 9f bd 67 cd 28 60 15 73 52 44 85 e5 32 3b e9 0f b5 ac 3e 98 d2 d1 c2 6e 51 5d 00 da 5c 9d 33 91 71 6e 5b c2 54 d0 e6 19 a5 6a 53 d1 43 0d de 57 dc 92 47 20 07 32 7c b1 ad 95 a8 c2 d9 11 4e 4e 91 4a ff 00 f6 c2 e1 f9 5c d2 e6 50 b4 2a 25 70 b2 53 a9 2b dd df c3 70 4d ef 6e 76 db 19 ab 3d fd c8 bc f4 d5 f6 b3 48 c8 b8 96 93 89 f2 f8 eb 32 9a 88 ea e9 e4 5b 89 13 Data Ascii: r=f+wMqnR<1NJP=%2vO_/=t.ve[J(I5~G<VT=g!qmdISz}W[jm.F eg(`sRD2;>nQ]\3qn[TjSCWG 2\|NNJ\P%pS+pMnv=H2[
2024-05-15 22:37:01 UTC	2525	IN	Data Raw: f0 f0 aa 11 4b 14 99 ab c7 aa 9e 99 ae d7 24 ed 70 37 03 9e fb 61 59 31 bc 92 af 03 31 cd 42 2d 82 f2 7e 3d 82 3c 91 2a 33 99 23 a6 ac 42 da e3 44 3b 8b ed 61 bf 4b 62 be 4d 2c 94 aa 0b 82 cc 35 11 71 b9 76 0a a2 ed 39 b3 6c f4 d0 c6 a9 14 72 c5 23 41 24 c0 16 d4 8a 5b 71 ca c4 03 86 fe cb b1 27 60 2d 43 95 d2 0a d2 57 8a 95 8a 19 4b 28 96 30 a6 d2 30 17 3c ec 2f 61 cc e2 cc a1 4a d1 56 2e dd 30 b5 37 65 cb 54 a9 35 34 a5 05 b7 77 25 47 d4 9d 8e 2b b9 46 3c b6 58 8c 27 2f b5 07 b8 0f 81 1b 80 e2 aa 5a 3a ca 5e fe ae 6d 53 4b 34 ba d5 63 03 65 00 0b ea b9 6b 74 17 c2 65 9e 15 56 5b c5 82 6a ec 3e 24 4a 09 5e 86 04 a5 4a 0a 90 43 b9 90 da 37 e8 d6 23 97 e9 8a 73 cb 19 f9 e4 d0 c7 8e 51 f1 c1 9b 71 ae 61 51 4d 9b e5 59 66 5b 55 0a c9 1c 31 99 67 48 ae 63 77 Data Ascii: K$p7aY11B-~=<*3#BD;aKbM,5qv9lr#A$[q'`-CWK(00</aJV.07eT54w%G+F<X'/Z:^mSK4cekteV[j>$J^JC7#sQqaQMYf[U1gHcw
2024-05-15 22:37:01 UTC	16384	IN	Data Raw: b9 36 3b ec 0f e6 31 a3 18 a5 8e df 93 22 6d ef af 82 5c fc 51 16 66 8b 45 1c 87 51 5d 4f 1d 8d 94 f5 df ed 8c c7 8d a9 d9 7f 14 ee 1b 41 35 a0 d3 d5 53 4e 7a 1b 1b ff 00 bf 5c 48 7e 42 15 15 f5 54 10 77 f4 88 2a 18 5e e8 5a c0 8f 6f 3c 0e d8 c9 f2 4b 6e b8 02 e4 66 a0 ad 46 60 ac 1e 49 0e 95 12 1b 09 0d ee c4 fb 6d f5 38 6c da 49 44 ad 16 d3 dc 8d d3 81 b3 52 32 fa 3a 84 67 89 58 f8 c1 f9 85 f6 60 70 18 65 b2 4c b5 37 ba 29 8d 76 9d 33 64 7c 75 93 d7 40 ee ab 25 3c 90 bb 87 37 b8 ba 83 6e 57 01 b9 f4 b6 2f 64 a5 22 b2 e6 36 7c bd 8f 65 35 3c 05 2f 10 66 50 d7 52 e6 49 1c 8f 1f e2 e9 b4 7a fc 17 53 7b 82 37 bf 33 71 8c d9 e6 6b 2e c2 f6 3c 2b d2 dc 63 15 15 23 29 2d 72 58 33 14 05 98 9b 00 4f 2c 3a 71 e6 90 ed 0c a3 26 e7 25 d1 47 e2 0a c9 b3 8c c4 5b 53 Data Ascii: 6;1"m\QfEQ]OA5SNz\H~BTw*^Zo<KnfF`Im8lIDR2:gX`peL7)v3d\|u@%<7nW/d"6\|e5</fPRIzS{73qk.<+c#)-rX3O,:q&%G[S
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: ec 1f 59 f4 4d 13 d4 10 4b 22 46 be 7c c8 c3 a3 85 21 6f 23 64 4a dc de 96 98 aa 09 85 45 4b 72 8d 4e c3 d4 e1 9b 14 50 2a 56 c8 99 7d 05 46 75 54 c1 49 23 fe 64 a7 90 f4 1f db 0a ec 62 2d d0 65 54 74 74 8b 0b 46 ac 83 7f 1a dc 93 e6 70 c8 f0 0b e4 85 98 52 e5 cd 01 46 84 21 1b 29 06 c4 7b 0c 32 93 ec 04 e8 ab e7 94 d5 0f 93 54 d0 b3 99 e9 5c 5d 37 36 56 06 e3 db fd 70 a7 c2 a0 bb 32 0a ea 42 a4 bc 77 07 a8 c0 c2 75 c4 88 71 b5 68 66 2a f7 88 d9 b9 60 9c 13 21 4e 8d 1b b2 5c d1 ea b8 ae 92 18 24 ee 92 cc 5e 01 b8 7b a9 07 6e bb 6e 2f cb 7c 57 92 70 63 e0 d4 99 b0 22 3c b2 7e 34 c4 32 9f f0 e2 3a 00 f7 b6 e7 16 97 3c 8a ae 42 69 14 92 c7 22 bf e2 46 ea 55 95 89 20 83 b1 07 d3 12 a2 81 30 de d0 38 2a 5e 16 ae 33 44 87 f7 7c cd f8 32 a8 f9 4f 3d 0d e4 7c bc Data Ascii: YMK"F\|!o#dJEKrNPV}FuTI#db-eTttFpRF!){2T\]76Vp2Bwuqhf`!N\$^{nn/\|Wpc"<~42:<Bi"FU 08*^3D\|2O=\|
2024-05-15 22:37:02 UTC	5904	IN	Data Raw: 27 f0 64 d9 ad 1a c7 a9 a3 21 94 fc bb ee 46 34 53 b3 15 90 69 d8 f7 4e a7 a9 da f8 9a 26 37 46 9b c0 4b 97 65 51 d3 ea a9 41 5d 3a 86 b1 ea c6 f6 4f b7 e7 8a 99 95 c2 46 8e 8e 5b 33 42 bf e5 9a 95 29 ee e9 ac 2f ee 47 3c 65 c9 76 7a 1c 73 4d 46 c5 2c d7 3c ed ed 8a fc a2 d5 a6 28 4c 14 f3 0d 6f 3c 12 93 f2 2d 91 73 2c f2 9a 82 05 35 53 24 2b 21 b2 90 37 3f 4c 58 c7 17 37 48 ab 97 2c 30 2d d2 01 55 71 ad 0a 44 ff 00 0b ad e5 00 95 2e 7c 37 fa 62 e2 d3 af 2c cc 97 d4 a5 cd 44 ca 78 93 88 33 0a b9 ea 3e 2e ae 46 12 90 7b b5 36 88 5a d6 b2 f4 e4 7c f9 e2 de 3c 71 8f da 8c 9c ba 8c b9 5b 72 7c 3f 1e 0a f4 a1 7f c4 6b 87 24 9d 3e 7e b8 7a ea 8a d5 e4 84 76 66 37 de f8 92 6a bc 8e 45 23 29 d4 0d 88 3b 1c 0b 0a 2c b5 71 3e 7e 78 8e 7a 5a b2 87 52 d2 47 0b 93 fc Data Ascii: 'd!F4SiN&7FKeQA]:OF[3B)/G<evzsMF,<(Lo<-s,5S$+!7?LX7H,0-UqD.\|7b,Dx3>.F{6Z\|<q[r\|?k$>~zvf7jE#);,q>~xzZRG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50067	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	631	OUT	GET /steam/apps/2421410/header_292x136.jpg?t=1715738345 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 25243 Last-Modified: Fri, 15 Mar 2024 02:40:11 GMT ETag: "65f3b50b-629b" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=530608 Expires: Wed, 22 May 2024 02:00:29 GMT Date: Wed, 15 May 2024 22:37:01 GMT Connection: close
2024-05-15 22:37:02 UTC	1552	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 06 04 07 02 03 08 01 00 09 ff c4 00 46 10 00 02 01 03 02 04 04 04 03 05 05 05 08 02 03 00 01 02 03 04 05 11 00 06 07 12 21 31 13 22 41 51 08 14 61 71 32 81 91 15 23 42 Data Ascii: JFIFCC$F!1"AQaq2#B
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 18 e2 22 cd ff 00 29 07 e2 88 c1 67 3c c0 98 5a 30 ea 1d 54 9e 63 82 3a 75 f5 d1 c4 7d 50 cb c6 a8 e5 05 84 5d 2c d7 db 59 4c cb 55 44 d2 c2 31 ff 00 1a 13 e2 26 3e e1 58 7e 7a 6e 38 bb 58 e4 87 a8 bf 31 a8 4a c9 27 66 f6 4b d0 fc 0e 87 e8 9e 7e 19 77 3f 0e 76 d5 b6 5a ed f3 b9 e3 b5 8a b9 52 8a 7b 54 8a d8 a8 55 6e 68 e4 66 53 fd 98 0d 87 1f d7 24 0c fc b2 16 44 3b 3a cd d6 c6 95 dd f2 4c 4d 99 d3 65 70 f6 46 b7 e3 cb f9 57 37 10 37 b7 07 ee 34 b6 f7 da 77 ad bd 70 9e 00 d0 c6 d4 f5 45 19 54 f9 b9 5b 9d 3f 0f 30 e9 e6 f2 e7 18 c1 d0 70 ce 9d f6 e9 6f c6 be bf 44 32 d6 c4 69 a7 f3 c1 53 15 91 cb 4f 7b 49 25 44 68 a4 8c 9a 69 55 86 02 93 f4 e8 c3 eb fa 6a cc 55 58 d5 58 e1 9d 7a 02 9b 76 f2 32 cb ca 13 04 9c 16 1d 06 7d c6 84 e0 af da 41 16 ba 0b 87 72 d0 Data Ascii: ")g<Z0Tc:u}P],YLUD1&>X~zn8X1J'fK~w?vZR{TUnhfS$D;:LMepFW774wpET[?0poD2iSO{I%DhiUjUXXzv2}Ar
2024-05-15 22:37:02 UTC	7307	IN	Data Raw: a2 a2 31 c9 fa 63 5f 16 9b 88 c1 2f ea 07 e2 27 75 47 19 3e 61 82 80 1d 49 2b 57 1f 66 c9 f2 39 d4 18 2b d3 4f 33 64 d2 a4 b8 81 ff 00 66 fd c3 6a 6d 29 ae 96 7d d4 fb 82 be 17 85 0d bd 6d de 17 32 b4 8a 8e 43 07 27 ca 1b 9b b7 61 ad 1e 03 f5 9c 58 ac 40 8a 68 b2 34 de b9 af 6d 7a 73 db c5 7b 0d 2c 33 4c 18 45 0e fe ef bf cd 3e ff 00 da 05 71 8f 6c f0 d3 60 f0 ee d9 d5 ea ea 11 56 05 1d 5a 3a 74 58 e3 18 f6 2e eb fa 6a b7 f4 6b 0e 2b 19 89 e2 12 7e 17 1b 3f 00 a5 84 fe b3 a4 90 ff 00 71 af 8d 9f a2 47 ba fc 06 f0 df 6f 5d 6d 96 4d c5 c6 13 67 dc 55 f1 23 47 6d 9e 9e 9d 5d d9 ba 79 01 6e a3 98 10 09 f6 d3 f1 fe a8 c7 e2 18 f9 b0 f8 3c d1 b4 9d 41 3f 6e 89 42 c7 4c 4f 66 c2 46 bf 05 4e df fe 16 ec 96 ff 00 89 88 b8 5f 4b ba 2a e5 b6 c3 12 bd 7d de 5a 45 32 Data Ascii: 1c_/'uG>aI+Wf9+O3dfjm)}m2C'aX@h4mzs{,3LE>ql`VZ:tX.jk+~?qGo]mMgU#Gm]yn<A?nBLOfFN_K*}ZE2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50068	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	420	OUT	GET /steam/apps/730/ss_13bb35638c0267759276f511ee97064773b37a51.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Fri, 29 Sep 2023 17:35:44 GMT ETag: "65170af0-138c8" Server: nginx Content-Type: image/jpeg Content-Length: 80072 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=568656 Expires: Wed, 22 May 2024 12:34:38 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 ff c4 00 4d 10 00 02 01 03 03 02 03 06 03 05 04 08 05 02 04 07 01 02 03 04 05 11 00 12 21 06 31 13 41 51 07 14 22 61 71 81 32 91 a1 15 23 42 Data Ascii: JFIFCCQXM!1AQ"aq2#B
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 3b fe 23 9f f3 d6 f8 f8 47 11 3f f5 72 19 c5 67 57 5d a5 be cf 1d 3c 54 62 17 9c a2 47 25 0c 6f b5 73 db 76 06 7e ba cf eb 34 d9 91 62 8d 1e 37 59 57 55 dc 0d 33 5a ed b3 83 27 86 a3 dd 19 18 8c e3 f8 58 0c e9 96 76 f8 0b c1 1a b3 49 b2 59 61 a5 ea fa af 0a 9f c1 8a 92 12 76 29 38 53 b4 03 dc 9f 32 75 77 90 ed 4b 4c 97 fd cc 35 ec be cf 38 9a ae a5 a6 55 6f 77 6c 7c 39 c3 33 0e 75 9e 17 b9 d9 af 5a d7 a7 18 fe 51 99 5e 29 c7 8d 1c 66 42 d1 c5 50 f0 31 f9 39 65 cf e6 75 56 29 ec cc 9f e5 1b b5 58 bd 4d 34 97 e0 4b 5a 24 45 c3 00 4e be a2 a4 7c 6e ab 82 85 6d 2a 6d 38 19 3a 64 c0 d0 39 21 01 f9 f2 f4 d4 2b 08 53 2a ec 20 e3 40 74 71 25 1a 90 cc 08 3a 36 0a 22 f7 5d a0 91 fc b4 41 44 6f 41 bc 64 28 5e 74 6c 2a cf 52 93 0a 57 1f 41 a9 60 39 8a 84 2c a0 b7 97 Data Ascii: ;#G?rgW]<TbG%osv~4b7YWU3Z'XvIYav)8S2uwKL58Uowl\|93uZQ^)fBP19euV)XM4KZ$EN\|nmm8:d9!+S @tq%:6"]ADoAd(^tl*RWA`9,
2024-05-15 22:37:02 UTC	2854	IN	Data Raw: 28 ba 68 c6 bd b4 d1 47 68 ea 8b 2d ee 24 6f 06 a8 7b 9d 43 fa 32 e4 a1 27 e8 4f fe 9d 47 c0 f1 e5 50 e1 61 ba cb 2d b2 37 dc 24 91 78 2a 0f 73 ff 00 7f cf 49 7c 92 84 ff 00 69 12 b5 2c 71 54 0b 51 ba 25 54 2f 41 34 08 e4 16 49 01 29 fc 2c 32 09 6c 67 fa 68 b9 50 0c 63 d9 a7 b4 f8 3a 76 e9 5f d2 b7 95 6a 38 fc 53 4c cc 5c 23 45 21 70 9f 19 dc bc 6e c9 18 e7 19 f9 6a a7 95 31 bb 32 9f 68 f6 8a 2e b4 b9 54 55 53 dc e5 15 11 49 25 22 ac d2 3c b1 39 43 90 61 39 27 69 dc 30 83 2c 03 12 78 04 ea b6 93 15 23 34 a2 e9 4b ec 22 2b 6c b6 f9 c3 56 c0 64 a3 96 42 c8 8a 0b e1 9d 79 e4 02 8e 09 ed 9c f9 8d 59 08 4a 4f 8e 85 dd b6 d1 a6 5d 7a fa 8b ae 7a 72 8a cd 55 fb 39 24 b7 d6 12 93 25 30 82 8a 68 84 58 3e 22 81 bd 09 23 fc 24 f3 f0 9c 93 a2 4f 72 da d0 52 5d c5 88 Data Ascii: (hGh-$o{C2'OGPa-7$x*sI\|i,qTQ%T/A4I),2lghPc:v_j8SL\#E!pnj12h.TUSI%"<9Ca9'i0,x#4K"+lVdByYJO]zzrU9$%0hX>"#$OrR]
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 53 a7 a2 f7 0b 83 dd e7 85 95 11 fc 56 56 76 3b a4 39 24 fa 8c eb cf 4d dc d9 ee f1 c5 43 12 81 b8 f4 a5 b2 3b 65 8a 28 59 7e 27 06 46 1e 59 3c e3 5d 0c 71 4a 34 79 1d 4e 47 3c ad d8 5e 18 d1 00 60 a0 71 80 06 9c ca 04 ae 91 aa 9e 76 0e b1 85 6d 81 5d 7b ff 00 df f4 d4 19 74 67 fd 5b 4b 53 35 d2 19 63 1b 15 63 d8 1c 70 c3 9e c7 e5 aa ac b1 50 bf 51 69 aa 81 61 11 b3 6f 51 8c 21 ee 4f 3f f7 f5 d5 6d c8 6a 4c a9 49 51 70 9a 98 55 54 4d 21 fd e3 2a c4 aa 17 01 58 af 3e bd b5 6c 57 00 a0 ac 55 94 77 4a 28 63 69 3c 5a 85 66 0f ce 70 06 72 31 eb ea 3e 5a 2d 11 70 26 5c ba 7e 2a 4a 4b 8c 4d 48 b5 34 f5 80 2a 43 20 1b 10 67 07 bf 3f 3d 54 d1 74 5d 74 60 1d 6b ec ca 78 68 aa 2e 76 c9 65 a5 64 95 a3 7f 09 b6 c9 19 07 bf fc 4a 47 3f cf d7 55 b5 46 c8 4a ca 1d 2b 79 Data Ascii: SVVv;9$MC;e(Y~'FY<]qJ4yNG<^`qvm]{tg[KS5ccpPQiaoQ!O?mjLIQpUTM!X>lWUwJ(ci<Zfpr1>Z-p&\~JKMH4*C g?=Tt]t`kxh.vedJG?UFJ+y
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 0c 8c d2 08 d1 49 28 06 78 f3 3f 5d 29 64 56 e7 46 6f 71 79 2b ea 5e 6f f6 2a 71 e1 c6 47 23 5c ec b2 b7 67 ac d3 62 f4 f1 a4 52 8e 42 18 b4 f2 6e 19 c2 92 30 07 c8 ea 8f 06 e8 ae 0b 6a f1 54 a9 59 08 2a 3d 7f 4d 1b 2a 69 f8 39 8e 9d 7f 69 c1 4d 11 31 cb 22 17 39 1f 88 10 46 07 3e 7f 51 a8 95 91 ca a2 c9 ab 6b 1e ba 80 51 d4 54 99 60 a7 90 98 a2 7d d8 54 ce 02 7c ce 39 c9 fa 6a cd dc 50 b1 8b 8b dc 91 4a dd 57 37 4e 56 4c f4 11 78 d4 b2 30 de b9 c1 04 76 e7 d3 cb 4f 09 ed e8 c9 a9 c1 2c d4 c3 14 bd 6b 7c ba 4e 04 36 19 a4 89 08 52 d1 90 dc 9c fc fe 59 d6 98 64 6c e2 66 d3 fa 4a e4 1c 81 fa 92 48 5e 59 2d d1 46 40 ca c6 d3 02 40 f5 3f e5 ab d3 b3 1b a2 4a 4a fa 8b 2d b9 bd f6 9a 58 5e 63 e2 19 bc 3d fb 89 cf 9a e7 1c 7f 4d 4b a1 4b 76 69 e2 ad 85 ea 97 71 Data Ascii: I(x?])dVFoqy+^oqG#\gbRBn0jTY=M*i9iM1"9F>QkQT`}T\|9jPJW7NVLx0vO,k\|N6RYdlfJH^Y-F@@?JJ-X^c=MKKviq
2024-05-15 22:37:02 UTC	7952	IN	Data Raw: 08 a9 b2 c9 ee 91 43 1f cb 69 7c 01 90 08 f2 00 b0 63 f5 d3 6a 21 9a 59 77 a4 24 5a 51 a2 5b ef 4d da fa 8b a7 ea ad d5 2e f6 d8 64 75 95 24 85 77 9f 18 16 3c 64 82 23 21 b1 81 8e 35 92 18 f2 b7 ea 21 a5 b5 c6 8c eb ae fd 94 da 3a 5a dd 43 1d ba 96 ba aa b2 a1 55 a4 a9 0a c6 2c 0e fb 76 f0 0e 72 31 c9 f9 0d 5d a5 fe 24 9e ef 04 97 b6 94 4f e8 5f fa 26 29 e2 92 46 b9 c2 12 35 2c 71 01 e3 1f f3 6b 73 92 4a d8 91 4e 4e 91 15 35 64 36 da 48 da 4f 8b 0b bb 6f 62 da f3 73 c9 be 6e 4c f4 d8 b1 fa 50 51 07 3c 0f 77 a3 13 0a 87 49 19 8c b0 b1 5d 85 3b e3 3e 7f 9f 71 aa 9b 2c 3f 41 77 54 90 ad 6c 7e ec c8 a3 02 20 cf 19 1e 67 23 b7 d0 fe 67 41 49 30 d3 08 4b 73 a1 31 30 12 a5 4a b0 1f ec 5b 71 f9 63 45 30 1d d3 56 d0 c0 01 5a 84 dc ea 0a ee 62 ce c3 1c 0c 72 73 ce Data Ascii: Ci\|cj!Yw$ZQ[M.du$w<d#!5!:ZCU,vr1]$O_&)F5,qksJNN5d6HOobsnLPQ<wI];>q,?AwTl~ g#gAI0Ks10J[qcE0VZbrs
2024-05-15 22:37:02 UTC	4072	IN	Data Raw: 5b 10 f4 de a3 2a be ef 03 d4 87 e0 3b 9f 0d 41 1e b9 e7 f4 d4 df 4a d0 51 3c 52 42 85 1e 49 56 49 db 9d a8 d9 00 fa 01 a3 15 6a d9 09 26 aa 2a 70 cb fb b3 fc 23 93 a8 e2 00 55 65 e6 28 29 e6 a9 9a 4f 75 86 9e 26 96 77 76 0a 11 57 24 9c 9f 20 01 ce 91 70 e8 65 1b 46 19 d4 de de 7f d2 b8 a7 a4 e9 ab 83 b5 32 21 3e f2 b1 90 b3 8c 0e 50 9f 8b 19 25 5b 20 10 48 3d 88 3a 2d 53 f7 01 23 01 eb be a1 bd dc 28 7f 71 70 aa 9a 8c 3e 7d d2 ae 4f 19 11 87 92 16 e5 7e c7 5a b1 b4 f8 23 40 2a c5 8b a8 ac 86 b6 8a 68 e8 2e b1 90 b5 56 f9 c6 d4 93 8f c7 0b 7e 59 53 e7 db d0 5c d0 82 c7 4a fb 29 ea 0f 68 fd 5f fb 22 db 4e aa ca a2 4a 9a c9 db 31 53 c6 4e 37 31 1e 7d f0 a3 93 fa ea 8c 99 63 8a 36 c6 84 77 1f 64 7b 30 f6 35 d3 be c9 69 59 ad f3 52 cd 73 d9 b6 aa ed 5f b1 66 Data Ascii: [;AJQ<RBIVIj&p#Ue()Ou&wvW$ peF2!>P%[ H=:-S#(qp>}O~Z#@*h.V~YS\J)h_"NJ1SN71}c6wd{05iYRs_f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50069	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:01 UTC	631	OUT	GET /steam/apps/2582650/header_292x136.jpg?t=1715400017 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 20473 Last-Modified: Tue, 23 Apr 2024 21:21:20 GMT ETag: "66282650-4ff9" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=192218 Expires: Sat, 18 May 2024 04:00:40 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 00 04 05 07 02 03 08 01 09 ff c4 00 47 10 00 01 03 03 03 02 04 04 03 05 04 08 05 04 03 00 01 02 03 04 05 06 11 00 12 21 07 31 13 22 41 51 08 14 61 71 32 81 a1 15 23 42 Data Ascii: JFIFCC$G!1"AQaq2#B
2024-05-15 22:37:02 UTC	4430	IN	Data Raw: 87 34 e7 ef aa 56 4d 26 cc b4 e4 ad d2 3e 31 7a d7 31 95 34 ff 00 52 ab 8e 34 4f e1 53 89 c0 c7 b7 97 8f cb 4a 64 75 29 1a 0b 34 fc 61 f5 a6 34 40 c2 7a 93 5a 4b 44 11 e0 85 a3 69 1f 51 b7 9c fd 74 57 34 b4 59 26 fd d5 8b 40 09 53 7e 31 ba cd 11 41 03 a9 35 d6 9a 27 2a d8 e2 72 7d 39 e3 9f cf 5c 8e 8b 87 78 4d 7b a8 c0 db f1 70 ba c6 cd 9d 0f a8 96 af 4d ad 2b e2 7f ed e8 57 24 69 17 53 b5 8a 94 94 b1 22 44 d0 97 5b 6a 9f 1a 41 1b 62 a1 6a 65 08 71 60 13 95 8c e3 ca 75 f4 fe c2 d2 4b 07 64 6a fb 5b b3 89 92 6b da 1b c8 00 55 b8 b7 97 38 02 48 f2 03 17 95 a5 1c 57 0b df 0e 4f 15 ed e9 e7 9f 92 1d b8 7a 15 06 25 89 5b ab d6 ac 3b a3 a6 55 e6 5c 8e c5 1a 91 3a b6 cd 59 35 b9 0e 39 b5 4c 32 c8 40 7b ca 9c ab 78 24 76 1c 93 ad 3f c3 3f 88 3b 4b b4 35 82 2d 43 Data Ascii: 4VM&>1z14R4OSJdu)4a4@zZKDiQtW4Y&@S~1A5'*r}9\xM{pM+W$iS"D[jAbjeq`uKdj[kU8HWOz%[;U\:Y59L2@{x$v??;K5-C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50070	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	631	OUT	GET /steam/apps/2239550/header_292x136.jpg?t=1692817793 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	340	IN	HTTP/1.1 200 OK Last-Modified: Mon, 12 Dec 2022 13:40:12 GMT ETag: "63972f3c-66bf" Server: nginx Content-Type: image/jpeg Content-Length: 26303 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=67002 Expires: Thu, 16 May 2024 17:13:44 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 03 02 01 00 09 ff c4 00 42 10 00 02 01 03 03 02 04 04 04 03 06 04 04 07 00 00 01 02 03 04 05 11 06 12 21 00 07 13 31 41 51 08 14 22 61 32 71 81 91 15 23 42 Data Ascii: JFIFCC$B!1AQ"a2q#B
2024-05-15 22:37:02 UTC	10259	IN	Data Raw: 59 3f 4b 3b 9d ce c8 df b9 7d 82 3d 93 b2 d8 6e 35 da de 3b d4 b5 c8 5e 5a 77 a6 42 aa 42 e4 f8 6f b8 31 00 9c 02 c3 ea 03 20 0f 2e b4 18 9f 89 67 c6 95 a4 fc 6c f3 3a fb 1a ff 00 0b 24 78 28 9e 37 17 1e 47 03 db 4f be f5 e8 bf 69 ca 4d 12 3b 7d 5c 6d f7 5b d5 da d7 53 5f 12 dc 2e 15 16 6f a2 da ef 95 f0 e9 e3 57 25 d8 8c 91 93 93 81 81 ce 3a 22 29 e4 e2 72 92 1b 4d 17 56 6e 87 df 45 96 e2 ec 18 11 78 6d 70 32 10 48 17 57 43 ad ec 3b 9e db a3 4e e5 f6 96 e1 6a a1 d3 f5 ba 21 eb 74 40 a5 da 29 ad 34 12 b9 bb d6 53 b3 e2 7a b9 a4 8b 76 d9 b0 e0 78 58 3b 46 72 7f a4 68 58 e8 b1 99 47 40 7e ab c8 31 33 25 cf 7c 90 4e df 1b 7b 35 f0 34 8d 9a 01 dd bf fb ba 9d 85 6a ab 6f 1d bf ed f5 3e 9c af bb ea 5b 0d c6 cf a6 e9 2a 7c 76 ae b8 9a ba db d5 5d 49 c8 06 69 80 Data Ascii: Y?K;}=n5;^ZwBBo1 .gl:$x(7GOiM;}\m[S_.oW%:")rMVnExmp2HWC;Nj!t@)4SzvxX;FrhXG@~13%\|N{54jo>[*\|v]Ii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50072	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	630	OUT	GET /steam/apps/447040/header_292x136.jpg?t=1692817739 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jun 2016 18:54:31 GMT ETag: "575869e7-46ec" Server: nginx Content-Type: image/jpeg Content-Length: 18156 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=580066 Expires: Wed, 22 May 2024 15:44:48 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 00 08 09 ff c4 00 43 10 00 01 03 02 04 04 03 06 04 03 07 03 03 05 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 14 51 61 08 15 22 32 71 81 42 52 91 Data Ascii: JFIFCC$C!1AQa"2qBR
2024-05-15 22:37:02 UTC	2113	IN	Data Raw: 96 c1 a2 50 d9 5d 68 fc 3f 91 99 df cc f4 15 a1 4b 0c d6 58 a8 b0 be 81 4c 1b a5 e0 3c fe 1b fd f1 07 b2 81 dc da f4 07 0d e6 56 b2 75 36 b1 41 a8 3e f4 c8 b9 7a a4 a8 31 64 73 14 34 c7 5a 49 68 29 5d 0e 93 a4 5e dd c0 b8 b6 3c f7 88 62 b0 b8 4e dd af 95 d2 c5 9d c0 18 cf 64 a6 49 8e dc bc fb 53 e2 25 2b 3f ce 87 4c cb 47 95 51 a3 b5 0f 9d cc 90 4a 9b 05 d4 a5 57 2d 58 6a d1 6d 46 da 80 17 be 39 50 35 8c d5 26 93 7f 7e a9 d9 12 59 0c 27 85 b3 4e f6 90 a7 e6 9e 1d ce 9b 02 bf 06 53 80 ba c2 5b 54 77 63 38 f3 89 48 57 29 21 42 da ca 48 da fd 08 f3 c6 f2 eb 70 63 7d e3 c0 59 34 9d 25 dd 82 c5 eb b5 f9 7c 3a e2 1b 54 37 e4 b8 ac b7 17 43 53 b7 b1 71 f7 1b fe f0 e1 ef a7 9a b5 6f 7b 6c 31 8b 39 cc 9e 4a 1d 85 0f 92 db 88 4c 0c a6 ed 66 d5 a2 a1 9c a7 29 6d b6 Data Ascii: P]h?KXL<Vu6A>z1ds4ZIh)]^<bNdIS%+?LGQJW-XjmF9P5&~Y'NS[Twc8HW)!BHpc}Y4%\|:T7CSqo{l19JLf)m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50071	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	655	OUT	GET /steam/apps/1128860/ss_96487c455abe12d84fa57c487e4d05807089eb5d.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 23 Apr 2024 13:41:12 GMT ETag: "6627ba78-1613e" Server: nginx Content-Type: image/jpeg Content-Length: 90430 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=439034 Expires: Tue, 21 May 2024 00:34:16 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 ff c4 00 56 10 00 02 01 03 03 02 05 02 03 04 05 06 0a 08 02 0b 01 02 03 04 05 11 00 12 21 06 31 07 13 22 41 51 14 61 32 71 81 15 23 42 91 08 Data Ascii: JFIFCCQXV!1"AQa2q#B
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 57 f9 f1 49 5d 29 78 1c fd 44 75 d4 e7 1e 5b 3a b7 f5 52 82 33 bd 0e 7b e7 3c 12 ab 03 4e ec 6e 68 d3 d2 c1 45 4d 10 8e 05 3e 5a fe 15 76 2c 47 ea 49 3a b2 4d 0b 68 1f 5b 66 8c a1 c0 0a bf 9e 8a 00 bd 59 d3 ae 55 9a 30 a4 1f 8d 31 ad 01 e7 e9 ca a2 a4 94 63 f9 0d 15 2a 05 20 2d 6d 8e af 25 44 32 8c f0 38 e3 4c 98 b4 07 9b a7 2b 63 0c 8d 14 81 8f be 34 54 90 bc 58 06 e1 63 aa 9a 13 cb 6f 53 8c 63 41 cb 46 51 67 36 9b 45 7e 5e 32 a7 03 d5 9e fa d1 9a 33 83 39 ba da ea e0 91 ca 02 fc 67 2b 9d 3f 35 42 f1 00 55 5c 2a e2 a6 d8 ec 78 3d 8e a4 e4 a8 74 a8 31 d3 77 99 d2 95 f1 18 c1 6e 49 1a 78 55 01 e8 bc f7 a3 e7 05 11 a0 2f 93 9d bf 7d 52 c5 38 8a ba 6a 80 f1 fa 10 6d ec 17 24 9f b6 94 c1 96 aa fa 1a 59 27 91 ce 55 39 c0 3e c3 ed ce 89 8c 62 0e a7 9a 2b bc 75 Data Ascii: WI])xDu[:R3{<NnhEM>Zv,GI:Mh[fYU01c* -m%D28L+c4TXcoScAFQg6E~^239g+?5BU\*x=t1wnIxU/}R8jm$Y'U9>b+u
2024-05-15 22:37:02 UTC	3044	IN	Data Raw: 36 3b 8d bb b2 d3 6a 55 1a a2 bf f4 b1 e9 97 e8 cf e9 0b 59 70 a2 66 80 4f 1d 3d 6a 49 12 8c ae 62 01 99 73 c6 41 8d b1 9e 35 e5 fe c3 cc b2 7a 48 af a5 af e4 ce af da 30 6b 34 a4 fc 9f 48 f8 29 59 4f d0 3f d1 f6 95 e0 65 8e ae a6 51 70 46 a9 4c 99 fe a1 a3 71 24 80 77 20 4a a0 81 f1 c6 be 7b f6 84 17 ab f5 f2 f2 ba fe 57 ff 00 47 b9 e8 67 ec fa 65 7f e5 ff 00 f4 72 b2 f8 85 59 4d d7 91 f4 e3 d2 c1 25 20 ac 75 69 46 e0 cb 08 44 21 b8 38 dc 4b 13 f9 7c 6b ce 5e 93 1c bd 3f bd 6e eb fa ef fe 8f 47 26 69 a9 b8 57 d4 6e 7b f5 14 d1 d3 99 05 39 96 b2 33 3c 10 54 39 0e ec 01 25 46 47 21 7b 9f 8d 72 60 c2 e3 76 93 51 7d 9d f1 c9 4a 2a e9 bf f3 f9 99 37 8d 12 5e ae 10 5a c5 9d 61 4b 6d 1b 09 6a a7 8d 97 cf 05 89 46 8b 70 1b 99 58 91 9f 8e 35 f4 5e 96 58 76 97 6f Data Ascii: 6;jUYpfO=jIbsA5zH0k4H)YO?eQpFLq$w J{WGgerYM% uiFD!8K\|k^?nG&iWn{93<T9%FG!{r`vQ}J*7^ZaKmjFpX5^Xvo
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 75 64 d4 6d 18 6f 2f f6 cc 8b ba 6d a5 9b 3b c1 24 6e ce 33 ce 4e 75 d5 2f 46 d3 52 82 49 fe 5e 04 c7 ea e2 ee 39 1b 6b f3 f2 69 7d 2d d3 fd 17 e2 6f 48 c9 60 a9 ab ea 4b 75 fa 2c cf 07 50 c9 5e af 30 56 5e 14 84 55 df 18 27 38 60 48 c8 cb 63 18 48 61 96 16 e5 34 b7 f6 ff 00 bb ef f9 0d 97 d5 73 69 63 6f f9 ff 00 d7 d0 c7 24 fe 8e 9e 23 78 7d d5 b0 d1 d8 e9 a9 ae 97 00 b2 d7 c7 5e 23 d9 44 ea 18 01 b2 56 fc 2e 43 16 64 27 81 cf 6d 76 73 f7 63 25 27 f1 eb 67 14 65 0c 32 8c e1 1f 97 76 bf f6 7d 07 6a 86 cd 6e e9 08 29 7a ca a2 d9 5d d4 b2 05 9a ba a3 d7 2c 46 58 c1 11 2c 4a ec 0f a0 60 f1 fc 59 6f 8d 4f 1e 1e 1f 83 48 3e a3 d5 bc ed cb 23 31 4e a2 b3 ad f2 ed 7a bc 5d ba 9d 67 a1 f2 04 50 c3 03 7e fa 7a 90 a7 68 68 83 1d df 84 06 6c e3 b9 ef af 56 14 a3 56 Data Ascii: udmo/m;$n3Nu/FRI^9ki}-oH`Ku,P^0V^U'8`HcHa4sico$#x}^#DV.Cd'mvsc%'ge2v}jn)z],FX,J`YoOH>#1Nz]gP~zhhlVV
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: ac b4 3a 7d 5d b6 79 8e c9 27 1e a8 c6 1b 12 94 ce e3 c8 21 88 ce 32 72 70 39 ed cb 15 92 0a 6b b3 8f 13 78 e6 e0 fa 3f a1 e7 a8 65 98 0d cb 31 42 32 24 84 c3 1e 47 db 68 3c 7e ba ed 51 64 f9 23 3d f1 57 a7 aa fa a2 cd 25 5f 4f 25 45 17 56 db e3 69 6d b5 8a c6 59 18 e4 16 85 c3 7a 5a 37 da 01 53 c0 38 3d c6 83 8a 4b 94 9f 41 8c df 51 5d 94 7a 1b c6 0b 45 fa 55 b6 d5 da 62 b1 f5 1c 71 a1 9e 86 a8 79 72 e5 b0 06 d4 6f 92 7b 77 1f 71 82 5a 0f 97 6c 12 b5 b4 8d 00 5f 5e 10 72 fb 49 1f 85 bb 8f d3 ff 00 0d 3f 12 6a 42 87 52 5b 69 2a 6f 36 fb bc 54 f1 54 4c 8e 60 ab 4d bb 4b c0 dc 6e ef c9 46 0a c3 ed bb 41 c7 c8 2c ca bc 58 aa 99 2a b6 d2 c3 fb 42 96 b6 b2 96 3a 48 d8 13 24 b5 11 a3 ef 8d 5f b9 8c 22 8d cd fc 24 80 09 ec 21 97 1f 34 d2 2d 8b 27 b6 ec c8 3a 9b Data Ascii: :}]y'!2rp9kx?e1B2$Gh<~Qd#=W%_O%EVimYzZ7S8=KAQ]zEUbqyro{wqZl_^rI?jBR[io6TTL`MKnFA,XB:H$_"$!4-':
2024-05-15 22:37:02 UTC	7952	IN	Data Raw: 9d 21 0e dc 64 ae 96 cf 99 ea 66 5a 74 f3 92 2d 9e a8 89 f5 36 d7 39 1f 9e e2 08 39 38 c1 3a 13 5c 62 99 93 e4 da 0a db fa 8a 6b 2b 54 f9 d5 d5 14 f0 53 38 10 e6 9d 4c 9c b3 12 ac ab e9 e3 18 3f 04 70 75 b1 54 5b de c3 3b a2 9d fe ed 74 ea 24 9c d4 c8 d5 94 30 3f d4 21 2a de 6c 6d 85 f4 12 d8 38 c7 20 67 dc fc 70 99 1b 6e d8 d8 fa 65 54 bb d3 7f 93 c2 df fb 2e 39 25 94 79 d1 aa ce cb 50 5c 38 0b c8 ce 00 05 d4 0c 02 49 07 3c 69 94 be 22 d5 1c 5b 0d be ba 9d 6d d5 2d e5 47 0c 4c 63 5a b6 65 64 65 3b f6 38 8d 72 d9 6d c4 16 38 1c 7b 0d 49 bd d8 e9 68 e9 ed b6 e7 6a 87 17 37 a5 28 56 18 c5 3c 6c e8 e0 2b 12 bc 2a 9c 79 9b 47 21 78 27 e3 47 b0 78 b4 3a 74 8f 80 a3 c5 4a 4b dd 64 77 1a 1b 3c 36 fa a9 56 96 ab e9 b0 6a 26 43 96 79 18 60 f9 63 3f 27 90 0e 30 bc Data Ascii: !dfZt-6998:\bk+TS8L?puT[;t$0?!lm8 gpneT.9%yP\8I<i"[m-GLcZede;8rm8{Ihj7(V<l+yG!x'Gx:tJKdw<6Vj&Cy`c?'0
2024-05-15 22:37:02 UTC	14240	IN	Data Raw: af 98 4b b8 46 3e a5 73 c6 58 31 dc 3d f9 c6 91 cb dd 8a 4b b4 1e 2f 1c 9d f4 cc e3 a7 3a ad 29 eb 98 4d 4d 1b d3 b8 65 21 a3 39 0a 46 30 73 df f5 ed a9 c9 36 86 83 49 86 fa db af ab 2e 91 d2 46 03 d2 a4 40 08 da 32 5e 26 01 70 55 86 06 33 8c 81 cf 6d 46 2a 4d 96 93 8d 51 ef 4c f5 db 9a b6 a5 a7 b5 44 97 50 5e 34 2a 8c 92 ca 84 81 8c 8f 6c e7 3e de a1 91 ae b8 cf 82 a7 13 9a b9 3d 33 61 f0 ee 69 2a 23 9a 5b 9d 6a 41 7c 8e ae 55 8a 00 ac 19 ca c9 82 a5 31 95 fc 40 82 4f 65 3c 1c 12 0c 27 b6 9f e8 19 c5 24 9a 3a f1 03 a1 2c 55 d7 3a 6b 8f ec c8 a4 58 60 95 6a 69 e2 04 29 77 ff 00 d7 1c 76 60 07 7f b6 ba 61 08 29 6c 8c a5 29 2d 19 15 45 2d 57 4e 5b 60 79 04 72 db ab a2 06 05 8d 8b 9a 72 c0 80 a4 f7 07 18 ef df 3c eb 8f 37 a7 6a a7 1f 25 b1 65 fe 16 0c bb 54 Data Ascii: KF>sX1=K/:)MMe!9F0s6I.F@2^&pU3mFMQLDP^4l>=3ai*#[jA\|U1@Oe<'$:,U:kX`ji)wv`a)l)-E-WN[`yrr<7j%eT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50073	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	655	OUT	GET /steam/apps/1128860/ss_6a6e8fb986c72dd4436566373debb93bfa9d5f57.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 23 Apr 2024 13:43:01 GMT ETag: "6627bae5-16179" Server: nginx Content-Type: image/jpeg Content-Length: 90489 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305715 Expires: Sun, 19 May 2024 11:32:17 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 01 00 08 ff c4 00 51 10 00 02 01 02 05 02 04 04 03 04 05 0a 05 02 02 0b 01 02 03 04 11 00 05 12 21 31 13 41 06 22 51 61 14 32 71 81 07 91 a1 15 23 42 b1 Data Ascii: JFIFCCQXQ!1A"Qa2q#B
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: a5 cf 56 b3 26 a8 69 e2 d5 3c 4e 17 4c 4d c0 1b 10 79 b9 1d fd 41 db 8c 3e da 90 b8 6a c5 5f 13 21 c9 a5 78 a3 97 e2 25 90 74 e5 92 32 54 2d ef df 60 6e 07 e4 70 e9 d3 c8 bc 2b a3 d8 33 06 92 96 a2 38 25 30 c7 2c 6a 63 91 56 ed 20 20 a9 d8 9e c2 f8 c9 c9 72 0b 62 68 6b 65 55 84 55 34 8f d1 1a 91 9f f8 a4 d5 72 01 e0 59 40 ed be 2e 9f 68 cf 26 af 22 8a 7c c9 04 dd 7a 85 89 d6 e5 d3 c8 a4 f6 00 5b 7e 39 c2 5d 72 15 1b c8 d9 b2 56 4f de 2d 5c cc eb 7f 9c 03 f9 ed 8d be f1 43 6d 32 f9 95 09 ac 92 4b f9 18 1b 80 0e d7 f5 c5 a2 da 05 18 ac d1 25 a7 99 d6 52 74 fb 8d b1 74 ec 02 c9 20 55 8b 58 1a 47 17 c3 d8 b4 57 19 8d 4b 02 75 28 dc 0e 2d 8c 13 ca 6a a8 a0 9b a8 09 0c 06 f6 c0 68 c8 e8 19 06 66 b5 90 c5 ab 74 40 12 fc da e6 e0 fd 31 ca f1 81 ae ce a5 93 56 ac Data Ascii: V&i<NLMyA>j_!x%t2T-`np+38%0,jcV rbhkeUU4rY@.h&"\|z[~9]rVO-\Cm2K%Rtt UXGWKu(-jhft@1V
2024-05-15 22:37:02 UTC	3103	IN	Data Raw: 8f c0 39 8f 8c 33 7c ca 1c e2 ab 2a cf 73 b9 42 ca 9e 27 4c db e1 db 44 7e 57 86 55 9f 4a dc 83 65 6b 6a b9 3b b0 1b 4b e7 28 61 31 5e 9c 9f 47 2a 7f 04 cd 15 34 c6 a6 9a 64 92 16 d0 ed 28 d1 13 5b 96 d5 6d ed c0 b7 3c e1 ff 00 dc c5 bc 31 3e 5c fb 42 2a 0f 0a d7 d7 d4 2f 4a b2 19 1f ac a1 99 49 b2 dd 49 bd cf 3c 7e 63 0d 2d 78 a5 94 52 3a 3a 92 c2 40 75 f4 74 f9 7e 7f 99 64 f3 d2 40 73 26 d0 ab 5a 4d df 4d af 65 3f c1 b8 24 91 cd ed 7e d8 31 72 9c 54 e2 f1 e0 e9 84 56 9d c2 4b 26 3e af c1 b5 55 f9 96 75 55 96 e6 5f 13 9b d3 9e a3 d2 c0 86 3e aa 1f 98 ab 13 b9 1b 6d 6d fb 63 a3 e6 a8 a4 a4 b0 c9 ed b6 dc 5e 40 bc 0b e1 e6 f1 2b cb 46 94 73 d6 d2 d8 a5 41 5b fe e4 b1 dc 1e 06 96 dc d8 ff 00 44 e2 d3 d4 50 57 26 4e 11 72 c2 37 79 6f e1 5f 88 eb a8 8b c3 93 Data Ascii: 93\|sB'LD~WUJekj;K(a1^G4d([m<1>\B*/JII<~c-xR::@ut~d@s&ZMMe?$~1rTVK&>UuU_>mmc^@+FsA[DPW&Nr7yo_
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 24 af 04 46 73 66 b4 d5 d1 04 4a c4 75 56 32 07 0c 35 01 c1 1b f0 3c bf cb 13 51 6b a0 67 b2 73 d3 c3 d7 26 04 69 63 72 ae 35 1b 92 01 e0 db b1 da d8 d1 6e b2 6a c0 0c b9 6b c5 d5 57 53 04 61 88 06 45 bf ca 2e 7f ab 8f 51 8a 29 7e a3 71 c9 ee 5b 9d 34 73 46 ce 59 51 50 58 26 e4 13 7b db ef 7c 69 43 0e 80 99 44 b5 21 eb 1d e3 62 8a 2c 05 fb d8 73 f7 c3 d5 2a 33 3d 85 52 46 62 cd a9 d8 72 0f bd bf ab 04 c1 99 44 c9 40 43 ca 3a ac a0 aa ae ab 6c 46 f7 fa e2 52 8e ee 02 b0 1d 1e 69 76 13 08 48 20 f9 54 3b 02 3d af f4 ef 85 d8 f8 32 a0 a6 cd e9 a5 a8 59 b4 30 54 00 22 5e fd f7 b1 1c 0b 0e fb ef 80 b4 da 54 6a b0 c7 cc 68 1e 4f 2c c6 9d 4b 5d 56 42 6f 6e d7 3b 7b ef 8c a2 e8 65 45 f5 65 aa c8 91 62 59 64 52 62 22 32 74 ea 22 e7 cd ea 78 b7 af d7 1e 7c 52 8d a7 Data Ascii: $FsfJuV25<Qkgs&icr5njkWSaE.Q)~q[4sFYQPX&{\|iCD!b,s*3=RFbrD@C:lFRivH T;=2Y0T"^TjhO,K]VBon;{eEebYdRb"2t"x\|R
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: f7 db 14 a8 ae 03 96 13 41 46 cf 5a f4 b3 b7 c3 39 07 4c cc 4b 46 18 0b f9 88 e0 5b b8 bd af 7e 30 ae 58 b5 90 22 f5 a3 ad a2 7a 9a 69 63 26 58 81 67 a3 53 e6 2c 84 9d bd 6e 36 bf fa c0 8c 23 9c 79 0a cd a3 a3 66 1f 86 1e 12 a4 ca 20 cc a7 fc 4a a4 6a ba d8 3e 22 3a 2a 3c 96 a2 ad 63 27 f8 1e 50 ca 2e 18 e9 24 29 17 1b 72 2e 91 d4 5f 4d 70 04 ed d0 57 e1 92 7e 0e 1f 0c 49 37 89 69 33 ba ea e2 3a 73 bc 75 f1 d3 00 d7 05 1a 25 08 de 53 70 0e b2 4d ef b7 16 57 36 9d 31 79 22 72 7f 0d d1 e6 d5 93 53 7c 7d 7e 42 ce 0c 54 cd 5d 08 ac 3a 4f 95 c9 8d 4a ea 0b 72 cb 6b 7b e3 95 c9 bc 13 4a b1 d0 37 8d b2 2c bb 2b 9a 96 bb c2 b2 cd 9a e5 59 94 22 7a 6e b3 a0 aa a4 74 b8 96 36 d3 b1 75 71 70 c2 da 83 03 6b df 14 75 7e a6 1d dc d0 09 9e 3a ba ba 59 da 24 2b 2a 2c 8f Data Ascii: AFZ9LKF[~0X"zic&XgS,n6#yf Jj>":<c'P.$)r._MpW~I7i3:su%SpMW61y"rS\|}~BT]:OJrk{J7,+Y"znt6uqpku~:Y$+,
2024-05-15 22:37:02 UTC	7952	IN	Data Raw: 96 44 34 b2 b6 67 96 2b 4b 09 40 f2 39 67 66 00 33 12 5b 4b 05 f4 b8 3f 6f 7c 56 6b 68 b0 76 37 cb 4c f4 b9 49 98 d3 d3 a5 3a 31 85 cb 2e a2 7c ad a6 d6 f9 47 9b 8b 8b d8 1d ed 8e 45 2a 93 5f 66 55 aa 56 86 b9 35 13 4f 2d 25 4c 72 c6 c2 99 5a 69 63 06 d7 45 de e4 0e dc 6e 70 da 92 74 e3 e7 8f d4 45 1b 58 17 e7 b9 cc 7f 1e c6 46 57 f8 b8 d9 b4 b1 df 75 d3 62 7b 9f 95 b1 1d 38 62 bc 30 46 36 f2 67 f3 54 8e b1 61 9d 62 58 67 6d 0e c5 05 89 20 de ff 00 cf 8f af 38 ec 51 a4 ca ca 09 c5 50 2c 50 56 ad 64 48 56 46 58 25 8e 40 fb 05 60 1b 55 f7 3b ec 01 fc f0 8f 6e db f2 45 c6 b0 0f 9b cd 5b 9c e4 a3 30 ad 98 95 8e 73 48 ab 2b 96 2a 87 cc a0 7f cd 7b 7d 4e 1e 11 8c 3d 31 5e e5 14 7d 39 15 65 59 59 cd 68 cc b1 ca a9 a1 ba 4d d5 36 53 20 6b 81 ed e4 05 8d f6 01 4f Data Ascii: D4g+K@9gf3[K?o\|Vkhv7LI:1.\|GE_fUV5O-%LrZicEnptEXFWub{8b0F6gTabXgm 8QP,PVdHVFX%@`U;nE[0sH+{}N=1^}9eYYhM6S kO
2024-05-15 22:37:02 UTC	14240	IN	Data Raw: 8b 2c 10 ca 3a 95 33 48 a6 c5 ff 00 85 2f fe a8 de c2 fb 9d f0 da 72 b9 db cb eb f3 dc d1 ca 32 f0 b4 29 0d a3 61 50 8e 14 97 bd 8e 90 6d b5 fd 09 1b fb e2 f1 4c 31 58 09 9e 9a 8e ad 73 69 69 9e a5 0c 3a 4a 09 01 97 59 22 ef 7b 0d 8f a6 26 9c 95 58 6b 2e 88 4b 1c d1 65 74 72 f4 a6 20 6b 6e bb b1 3d ad a4 58 6d 6e 48 b9 3b e1 93 56 d3 1b a3 e8 64 9e 96 96 27 8a 5d 52 4b 2a b3 e9 d6 83 cb b8 26 c3 7c 36 1f 28 c9 8e ab 33 1a 1c c6 b2 aa b9 62 83 2d b4 57 10 d3 c4 4c 32 39 27 62 bc 8b fa 9b ef 89 28 b4 ab 91 9d 3c 99 ea 7a c0 f2 9a 99 50 ba 8d 40 a4 ea 76 b6 da 41 ee 2c 7f bb 14 71 e8 9e 39 29 c9 92 19 f2 e7 49 a1 1d 69 9e c6 36 60 81 b7 16 f3 76 17 db 7f 7f ae 0c f1 2f 60 46 2b b2 fa cc be 4a 9c da 0a 49 0c 34 61 18 2a c3 b1 17 3f 31 27 fa b0 89 d4 5b 03 8e Data Ascii: ,:3H/r2)aPmL1Xsii:JY"{&Xk.Ketr kn=XmnH;Vd']RK&\|6(3b-WL29'b(<zP@vA,q9)Ii6`v/`F+JI4a?1'[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50074	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	397	OUT	GET /steam/apps/730/capsule_616x353.jpg?t=1698860631 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Mon, 18 Sep 2023 22:33:56 GMT ETag: "6508d054-faed" Server: nginx Content-Type: image/jpeg Content-Length: 64237 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=101696 Expires: Fri, 17 May 2024 02:51:58 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 03 05 01 00 00 00 00 00 00 00 00 00 00 00 00 01 04 05 02 03 06 07 08 09 ff c4 00 62 10 00 01 02 03 05 05 04 05 05 0b 07 08 07 05 08 03 01 02 11 00 03 04 05 06 12 21 31 07 41 51 81 91 13 22 61 71 08 32 92 a1 c1 14 Data Ascii: JFIFCCahb!1AQ"aq2
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: ca c7 34 10 5d 29 18 9f 8e a0 75 38 95 cc 40 0f e0 0d 09 b7 3b cb f7 c6 f0 4b b2 e5 9c 52 28 13 df 00 fa d3 14 01 57 bb 02 78 ba 95 1e 21 cb 6c c7 a7 c5 c7 05 07 a5 3d 5f fa 9f d1 7c cf 5e e4 96 07 a1 c2 cb 15 2d b3 d9 d8 be ae ef dc 6b 40 08 39 10 54 0e bb 89 73 9f 35 39 f2 4c 79 b7 1c 77 78 9d d8 ee 8d 09 44 92 bd 12 ad 09 fd 11 a7 ef e6 62 dc 9d dd 88 b1 b6 ce af f5 99 6f 6d 5e cd b2 68 eb 24 9a 5a 14 cc b4 2b 2a 5c 2b 12 64 a4 ab b3 96 34 24 96 73 c0 29 b3 62 3a 8c bf 2c 74 a2 f1 78 a5 65 1d 52 f9 bf 91 ce 63 71 bc ff 00 e1 e8 6a e5 a5 fe 86 ad f4 ad be 75 69 b6 ec 5b 47 35 d4 4f 9b 3e 72 25 8c fb e0 a3 00 6d e0 64 1a 32 f2 58 3c 75 4a f5 27 be d7 ec d7 e4 59 cc 5a c2 42 94 23 bb c7 43 85 36 93 66 cd b2 af 24 89 d5 f3 91 53 da ad 33 66 7c 9a a5 13 26 Data Ascii: 4])u8@;KR(Wx!l=_\|^-k@9Ts59LywxDbom^h$Z+*\+d4$s)b:,txeRcqjui[G5O>r%md2X<uJ'YZB#C6f$S3f\|&
2024-05-15 22:37:02 UTC	3306	IN	Data Raw: 20 02 00 20 0d b5 64 8f c5 f6 c4 6b 6d 12 02 2d 6b d5 34 d2 53 90 ae f2 29 51 eb 9e 7d e0 7f b4 93 1d f5 0f f7 4e 43 3a ff 00 ff 00 4c 4b e6 af 64 16 df 7e ab bd 1c 7d 6f f7 8e 71 1a 3f c9 41 5d ff 00 a9 ec f7 6d ee 66 a5 8e 04 ec 02 00 20 0d a1 b0 7b 2a 45 35 ad 6a 5e eb 41 04 d9 b7 76 99 55 3e 0b 9c 41 12 d2 3c 75 23 c7 0c 76 fc 96 a1 08 56 a9 99 d7 5e 85 08 b9 76 cb 5b 2e 37 d8 e5 79 41 5a 52 a5 0c 05 27 e9 d6 76 ee de f8 dd 73 09 b4 af 9d b7 6a 5a 15 55 93 ad 4a b1 36 a2 6a a6 a8 26 7a 80 04 92 58 00 72 19 e9 1c d5 6c cb 17 5e ac aa ca ac af 26 de d7 bc de 52 c0 e1 a9 53 8d 38 d3 56 4a db 10 db f0 92 d7 fd 6b 5b f5 85 fe f8 b3 e5 b8 9f 5b 2f 7b fa 97 7c 96 87 ab 5e e4 1f 84 96 bf eb 5a df ac 2f f7 c3 cb 71 3e b6 5e f7 f5 1e 4b 43 d5 af 72 0f c2 4b 5f Data Ascii: dkm-k4S)Q}NC:LKd~}oq?A]mf {*E5j^AvU>A<u#vV^v[.7yAZR'vsjZUJ6j&zXrl^&RS8VJk[[/{\|^Z/q>^KCrK_
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: c3 0f 33 f1 de b6 9f ea fb 0f 39 70 9e ae 7f a7 ee 1f 93 9d e2 fd 6b 60 fd 7f fc 30 f3 3f 1d eb 69 fe af b0 f3 97 09 ea e7 fa 7e e1 f9 39 de 2f d6 b6 0f d7 ff 00 c3 0f 33 f1 de b6 9f ea fb 0f 39 70 9e ae 7f a7 ee 1f 93 9d e2 fd 6b 60 fd 7f fc 30 f3 3f 1d eb 69 fe af b0 f3 97 09 ea e7 fa 7e e1 f9 39 de 2f d6 b6 0f d7 ff 00 c3 0f 33 f1 de b6 9f ea fb 0f 39 70 9e ae 7f a7 ee 1f 93 9d e2 fd 6b 60 fd 7f fc 30 f3 3f 1d eb 69 fe af b0 f3 97 09 ea e7 fa 7e e1 f9 39 de 2f d6 b6 0f d7 ff 00 c3 0f 33 f1 de b6 9f ea fb 0f 39 70 9e ae 7f a7 ee 1f 93 9d e2 fd 6b 60 fd 7f fc 30 f3 3f 1d eb 69 fe af b0 f3 97 09 ea e7 fa 7e e1 f9 39 de 2f d6 b6 0f d7 ff 00 c3 0f 33 f1 de b6 9f ea fb 0f 39 70 9e ae 7f a7 ee 1f 93 9d e2 fd 6b 60 fd 7f fc 30 f3 3f 1d eb 69 fe af b0 f3 97 09 Data Ascii: 39pk`0?i~9/39pk`0?i~9/39pk`0?i~9/39pk`0?i~9/39pk`0?i
2024-05-15 22:37:02 UTC	12120	IN	Data Raw: 20 02 1c 1d 46 84 45 32 3e 5d 57 78 ae 6e 6d 35 d1 b4 f5 51 d8 f7 6c 57 77 d9 b3 79 5c d3 92 b4 ba 0e 76 5f 17 cf 4f 63 7b 57 7e 9e d2 56 e7 5c 6b cd 73 36 1b 6a d9 96 5d d6 f9 15 f0 ac 2a 91 37 0d 64 92 66 83 90 9d 8c cc 20 61 41 2c 97 f5 81 20 67 18 39 8e 69 80 cc 73 fa 58 8c 46 27 9d 86 85 9a f4 65 a5 b5 e6 db 9b 77 77 b5 db 66 97 d0 ca c1 e0 71 78 2c a2 74 68 d0 b5 69 68 f5 5a ff 00 9a f7 b6 8b 77 5e ed 4b 3b 29 d9 65 e6 d9 86 cc 2f 1d 44 8b 34 4e be 76 92 4a 24 53 4b 9f 28 19 29 03 0a 0e 32 ac 39 15 29 65 95 9b 01 ac 5c cf 73 cc 06 77 9b 61 e1 3a 96 c3 53 d5 bb 4b 5d ef 4b 5f 5b 28 ad 3a de c2 39 56 55 8b ca f2 fa d2 8c 2f 5e 7b 15 d6 9b 96 b7 b7 b7 69 67 62 1e 8e 34 b6 75 8b 5f 51 7e 6c 49 55 16 a4 f9 ed 2a 9e 7c c4 cd 12 a5 81 eb 02 85 10 ea 24 be Data Ascii: FE2>]Wxnm5QlWwy\v_Oc{W~V\ks6j]7df aA, g9isXF'ewwfqx,thihZw^K;)e/D4NvJ$SK()29)e\swa:SK]K_[(:9VU/^{igb4u_Q~lIU\|$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50075	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	392	OUT	GET /steam/apps/2208920/header.jpg?t=1697654233 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Tue, 15 Nov 2022 15:44:04 GMT ETag: "6373b3c4-adf3" Server: nginx Content-Type: image/jpeg Content-Length: 44531 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=184955 Expires: Sat, 18 May 2024 01:59:37 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 d7 01 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 04 06 07 08 02 03 09 01 00 ff c4 00 54 10 00 01 03 02 04 04 04 03 06 03 03 07 07 09 09 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 32 71 09 15 23 42 81 Data Ascii: JFIFCCT!1A"Qa2q#B
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: ee 48 2a 6e 2f b1 70 32 e5 70 d6 1c 8e d2 0a 1d 6d d4 85 05 24 dd 24 75 b8 3f 4c 57 17 65 72 d8 7c b7 15 86 89 28 6d 29 27 a9 03 7c 5a 67 b6 27 7e 93 1d f7 4a 94 34 dc dc db 6b e0 50 54 84 72 a1 30 c0 2a be a4 a4 58 12 6f 89 43 c5 80 be 36 24 17 d4 a5 0f 30 dc 1b f7 c0 1a 98 9e 56 6f 4a b5 24 28 5c 0e a3 0b a8 75 8d 82 5f aa 2d d4 d8 00 37 ea 4e f8 5b 7d 87 50 a3 52 79 f2 92 52 16 ab 0d 82 51 b9 c2 d3 63 7b 51 b9 aa 34 85 26 fc 9b ff 00 b6 bd f1 34 07 5a 2a e4 76 c3 08 74 b6 43 8d 1d cd 85 ec 2f df fb b1 ea 8f 20 88 e7 34 65 ef ba 9d 93 cb 8e d2 90 df f9 cc 50 ea 75 16 92 49 d5 a0 f5 0a 16 20 76 ba 53 71 8a da a1 e2 ec dd 48 d3 36 33 12 92 90 92 e2 4a 56 47 ca 55 ab cc 3e bd 0f eb 87 5b ee 09 6c 3c b8 4b 51 56 5a e2 75 2c eb d0 c4 e4 bd 09 db 9e 89 23 5a Data Ascii: Hn/p2pm$$u?LWer\|(m)'\|Zg'~J4kPTr0XoC6$0VoJ$(\u_-7N[}PRyRQc{Q4&4Z*vtC/ 4ePuI vSqH63JVGU>[l<KQVZu,#Z
2024-05-15 22:37:02 UTC	1936	IN	Data Raw: e6 42 9e 33 ab 15 3a 74 c8 d4 c8 91 a2 49 79 fa c8 7e 05 59 c6 d2 0a 10 cf e2 ae 3b ae 1b 94 3b cc d0 df 5b 16 c0 3b dc e3 83 96 31 5d 46 4a 7f 8f fc 1d ac 2a 5e 84 1b 5c ff 00 6f f2 37 9d ce 12 73 ee 73 5d 4e 6e 60 7a 99 0e 6d 3d 0b a4 33 12 09 90 4c 40 0a 4a 54 80 b0 03 88 70 ac 2d b4 ef b5 ed 6b 5f 3b 82 4b e4 3a 6e 2e 97 72 20 cd 15 3f bc 63 a2 9e dd 5d 19 84 c9 94 a4 be 22 b5 c9 72 42 af e4 43 e5 60 3a 96 f5 0b 94 79 92 48 06 e4 5a da 63 b7 62 bf d6 eb c9 93 f9 21 ca 85 4b 2f 41 a5 21 2f d5 e5 2b 95 28 9b 28 ba b5 2c 04 ef d8 5f 60 07 4c 3e 34 e6 eb c8 f9 f4 c2 36 bb 72 3a 33 c7 0b 2b 9c 19 cf 94 c8 35 e9 2c 3b 08 b4 89 8c cf 8d ab 95 25 00 90 51 a8 a4 12 41 16 50 3b 8d 49 3d 08 c6 8c f8 65 d3 cb 44 96 e6 3e 9b 24 7a 85 ad 3d 8b 17 e1 63 8d 5f 7f 71 Data Ascii: B3:tIy~Y;;[;1]FJ*^\o7ss]Nn`zm=3L@JTp-k_;K:n.r ?c]"rBC`:yHZcb!K/A!/+((,_`L>46r:3+5,;%QAP;I=eD>$z=c_q
2024-05-15 22:37:02 UTC	10168	IN	Data Raw: ca 4b 82 20 f0 b9 5a 7e 7a 73 55 1a 2c 99 31 a5 b2 b6 6a 21 c8 8e 06 5c 72 3a 81 69 c6 b9 8a 3a 6d 70 95 04 9f 45 5b a9 c7 03 3e b8 d6 48 76 3b dd 34 a1 ee 84 df 3f d8 6a 71 b1 9a 9d 6e a9 19 35 19 12 1e 7a 23 4a 61 c7 92 da 50 14 92 02 50 85 79 94 40 00 5b 4f 4d fb 61 31 64 6d b6 3e 68 c7 4a 8f 8b 7f 9e 03 91 32 cd 47 2b 70 9b 29 54 25 4a 52 d2 dc 83 36 3f 45 32 cb 4f 15 23 6b 74 52 96 d3 6a 55 cd fc c3 b5 b1 7c ae 12 d2 de cd 5a fa 94 42 a7 0d 49 5b ba 65 ab e3 ef 14 e8 fc 3c e0 d4 1a b6 60 28 7e 6d 45 a4 3d 48 cb ef a0 7c 4c 89 40 05 21 4b 42 b7 6d b6 97 a5 c7 16 7f f2 61 23 cc ad ba fd 43 59 22 a1 e6 af fa 9c 9e 9e f1 c9 cb c7 1f d2 ce 77 64 dc b3 53 9d 16 55 6a 1d 6a 4b 35 e8 72 43 b0 d0 d3 4a 53 0e 15 dc be e3 ae 12 12 c2 7c c0 0e a5 45 47 6d b1 ca Data Ascii: K Z~zsU,1j!\r:i:mpE[>Hv;4?jqn5z#JaPPy@[OMa1dm>hJ2G+p)T%JR6?E2O#ktRjU\|ZBI[e<`(~mE=H\|L@!KBma#CY"wdSUjjK5rCJS\|EGm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50076	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	399	OUT	GET /steam/apps/629730/header_292x136.jpg?t=1701774481 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Sun, 28 Jun 2020 06:24:56 GMT ETag: "5ef837b8-478e" Server: nginx Content-Type: image/jpeg Content-Length: 18318 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=500040 Expires: Tue, 21 May 2024 17:31:02 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 01 02 08 00 09 ff c4 00 41 10 00 01 03 02 04 04 04 05 02 04 04 05 03 05 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 08 22 51 61 14 32 71 81 91 15 23 09 Data Ascii: JFIFHHCC$A!1A"Qa2q#
2024-05-15 22:37:02 UTC	2275	IN	Data Raw: 99 81 86 db 75 c2 a2 1a 8d 20 93 72 95 24 ed 6d 89 d8 6c 45 ad 62 0e 16 2e 73 c5 48 2c 27 2a 36 3b fc 66 88 fa ae d7 93 c4 dc 91 02 86 65 c0 95 2b 34 be d0 22 5b d4 88 2b 0c 17 52 91 cc 25 d7 02 5b 4a 4a ae 2f a9 56 e9 bd ad 86 44 91 e9 e3 a1 d3 3f da cc ee e4 9e 5b 78 54 86 78 f1 00 fe 43 93 26 62 28 f4 b9 f9 86 79 2d c6 65 d9 6b 71 8a 6c 6d b4 b0 96 9b dd 4e 29 40 97 14 a5 02 48 4e d6 00 63 3b b3 7b 4f f5 e5 ef 6b 08 68 c0 27 17 ed e6 9b d7 e9 19 a5 0c 6b 5c 09 3c fa 20 b4 9c 93 c7 6e 3b 69 72 a0 89 94 6a 13 bb ea 94 91 4d 8a 47 f8 5b 00 2d 7f 85 7d 71 b2 4c b2 7f af d8 24 a2 6c 6d 37 27 dc ab 33 25 78 22 a1 d0 5a 4b 95 aa cb f5 49 6b 1e 76 60 03 19 ab fa 15 92 56 af ff 00 5c 10 69 03 b3 23 b1 e4 3e e9 a7 6a cd 54 4c a3 e6 7e df f6 a5 d9 a7 87 94 6c bd Data Ascii: u r$mlEb.sH,'*6;fe+4"[+R%[JJ/VD?[xTxC&b(y-ekqlmN)@HNc;{Okh'k\< n;irjMG[-}qL$lm7'3%x"ZKIkv`V\i#>jTL~l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50077	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	400	OUT	GET /steam/apps/1764400/header_292x136.jpg?t=1704285584 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Last-Modified: Mon, 17 Apr 2023 11:47:11 GMT ETag: "643d31bf-27ba" Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 10170 Accept-Ranges: bytes Cache-Control: public, max-age=513367 Expires: Tue, 21 May 2024 21:13:09 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	10170	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 07 08 00 05 09 ff c4 00 5c 10 00 01 02 04 03 04 05 02 0d 0d 0d 06 07 00 00 00 01 02 03 00 04 05 11 06 07 21 08 12 13 31 14 22 41 51 61 71 81 15 18 32 42 74 Data Ascii: JFIFCC$\!1"AQaq2Bt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50078	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	400	OUT	GET /steam/apps/1619350/header_292x136.jpg?t=1689933372 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Jun 2021 18:12:04 GMT ETag: "60b67874-4483" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 17539 Accept-Ranges: bytes Cache-Control: public, max-age=109022 Expires: Fri, 17 May 2024 04:54:04 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 00 01 09 ff c4 00 4d 10 00 01 03 02 04 03 05 05 04 07 05 05 05 09 00 00 01 02 03 04 05 11 00 06 12 21 07 31 41 13 22 51 61 71 08 14 32 81 91 42 52 a1 Data Ascii: JFIFCC$M!1A"Qaq2BR
2024-05-15 22:37:02 UTC	1496	IN	Data Raw: 00 2c 4b 8a d0 9e c4 de db e2 5c 5b 08 53 24 7d 92 70 09 61 25 81 7d ec 3d 4e 16 e0 b0 43 85 b1 6d 24 e9 f0 3f cf 18 99 b2 e1 11 18 0e 12 75 77 53 cc a4 5f 08 cb 51 22 df 70 94 87 55 61 d5 5d 30 1a 2e 8b b0 7b 0f 14 69 24 f3 ea 0e f8 af 29 7a 9b 24 5a 9d d8 ac 05 97 05 c6 d6 56 f8 46 91 72 a8 d0 5a 2b ba 01 d2 e3 84 03 b6 a3 cb 15 b8 97 aa cc 96 85 9a e4 30 2e 97 0d ad f7 ba e1 32 22 f8 e2 64 b6 25 63 71 0e 43 4a 07 b7 53 7e 64 e0 3a 7c cd 0b 1b 2e 65 82 97 c7 0a ed 19 c4 aa 25 62 53 24 72 53 2f 29 36 fc 71 57 43 1e 46 a5 f1 3a a9 5b 33 34 2a 3f b6 8f 11 a8 cd 04 23 35 4d 79 94 8f ee a4 af b5 47 a5 95 70 70 3a 1b 95 3c 5d 39 3c d2 a7 16 fb 12 7e 2b 50 b9 9e d9 8f 55 59 29 af e4 ec a5 98 54 a1 bb 92 69 28 42 cf f9 91 a4 e0 7c b2 24 b1 d0 eb ff 00 c9 db ce Data Ascii: ,K\[S$}pa%}=NCm$?uwS_Q"pUa]0.{i$)z$ZVFrZ+0.2"d%cqCJS~d:\|.e%bS$rS/)6qWCF:[34*?#5MyGpp:<]9<~+PUY)Ti(B\|$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50079	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	655	OUT	GET /steam/apps/1128860/ss_ccbcb9f7680336d745fdc7db036961f312073710.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 23 Apr 2024 13:38:38 GMT ETag: "6627b9de-163e4" Server: nginx Content-Type: image/jpeg Content-Length: 91108 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305431 Expires: Sun, 19 May 2024 11:27:33 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 01 00 08 ff c4 00 51 10 00 02 01 02 04 04 04 03 05 04 06 08 03 07 02 07 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 71 14 32 81 07 23 91 a1 b1 15 42 Data Ascii: JFIFCCQXQ!1A"Qaq2#B
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 40 93 51 4b 03 1e 60 d3 ab 7d cf 9e 2a 9a 7c 0a 52 22 f2 03 57 eb 82 6a c1 64 21 c5 ec 01 3d c5 b1 8c 5b f0 c2 a5 59 64 36 07 ae 9b 6f 8c 0a 02 19 7b 53 af 84 11 67 b5 ec 48 3f 4c 65 c8 28 94 51 00 ae 9a 49 bf 9f f9 e1 d0 51 72 c4 42 d8 5c 10 76 b5 b6 fe 6d 83 c9 82 e0 0c 25 74 26 e7 49 16 3d f6 ff 00 2e f8 14 12 75 7c a7 a6 82 24 5b b6 80 4b 28 ea c4 fe b6 18 44 aa d1 84 f5 31 4f 1d 53 16 2f b1 b0 0d 6d bd c7 9e f8 65 4b 08 02 ba 98 79 65 bb 95 36 b8 ef ea 30 3b 14 a4 c4 34 9d 4c ca 3f ae a7 a8 c0 68 20 d2 41 10 8c 30 26 fe 40 5f eb 6c 0a 66 04 aa a4 e5 80 51 82 87 51 a9 12 e0 12 36 07 19 78 01 18 23 7d 57 37 25 86 a2 75 12 7e b8 d4 a8 08 6f 94 c1 f0 d3 33 3c 3a 99 42 94 50 2e 77 fd 71 19 e5 61 8c 82 e6 56 82 5e 6f 25 0c aa d7 74 3b 69 b7 40 41 fe 6f 85 Data Ascii: @QK`}*\|R"Wjd!=[Yd6o{SgH?Le(QIQrB\vm%t&I=.u\|$[K(D1OS/meKye60;4L?h A0&@_lfQQ6x#}W7%u~o3<:BP.wqaV^o%t;i@Ao
2024-05-15 22:37:02 UTC	1674	IN	Data Raw: 4c 4f 50 8d 35 3a b2 99 11 76 67 50 6e c0 1f 3b 02 30 ad 61 d0 0d be 4f c7 d9 6b 64 dc 51 99 7e d8 ce 66 8e a2 09 ea 29 23 9b 28 8d d2 19 ca 9e 5c 6b a6 4b aa db 6b 90 40 b5 ce 38 5c 15 a8 e3 fa 97 84 95 36 cc de 5f 98 d5 55 e4 14 75 b9 84 15 34 ca ec 29 9a ae 62 0a 54 4c 16 ed 67 bf 88 db 7c 74 c5 24 dc 53 27 b6 5b 77 56 09 ad 42 c2 da 56 a5 49 da e3 c8 79 61 b6 d9 30 9f 8d 91 d6 46 d8 90 40 b1 1e f8 45 1a 1a c5 d9 a3 a5 5d 24 b1 48 88 4e 92 17 98 a1 82 9b 1e c4 1f d3 05 26 2b ca 38 cd 0d 45 5d 5d 7c f4 59 77 17 d4 64 93 86 d2 90 ca ee 9c c6 20 d8 f8 8d 80 f4 00 7b 61 94 ed 64 e2 8b 72 75 19 51 7f 1a 64 bc 49 94 65 15 55 59 87 16 35 45 14 e3 96 61 a9 94 92 ed 71 6d 22 c6 f7 df db d3 03 77 49 0d a9 19 a5 6e 46 47 84 4e 69 2c 93 bd 35 15 75 5c 49 4e 11 5a Data Ascii: LOP5:vgPn;0aOkdQ~f)#(\kKk@8\6_Uu4)bTLg\|t$S'[wVBVIya0F@E]$HN&+8E]]\|Ywd {adruQdIeUY5Eaqm"wInFGNi,5u\INZ
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 83 7d 8d f7 b5 f7 bf b6 3c ed 4d 0d 49 6a a5 1f a7 1f 82 72 86 53 10 53 34 f1 e6 70 42 95 4c b0 16 46 4a 57 72 c0 28 b8 b9 b9 b0 b1 2a 48 c7 64 b4 a1 26 e6 97 e4 ac 60 ac d0 c1 98 3d 0e 51 f1 22 aa b2 0a 9a d6 70 27 a1 ab 74 72 44 9a 48 90 13 7d c5 ac d7 b8 16 fa f3 7c 99 39 d4 94 5c 57 95 c7 d8 0e f9 02 cf 2a 2a b3 6a cd 72 d5 d4 d5 49 4a 8d a9 e4 95 a5 37 60 00 dd b6 16 0a 0d fd 7e 87 bb 46 31 8a 7b 55 2f e8 17 84 37 ca 20 58 a9 9a 1e 58 9c 05 01 b4 1b 73 05 ac 2e 56 de 1d c6 c3 fc f0 5e 45 e8 78 00 6a b8 e7 8e 36 a7 9d 62 17 f1 fe fe f7 62 a3 71 70 6d 63 89 aa a6 b9 30 d6 86 20 b3 23 2d 88 55 d1 a4 82 7c 5d 81 07 6b 6f bf f0 c0 6e d0 50 ca 9d 4c 4b aa 58 74 91 e1 d5 1e e5 ad 7e 83 d2 db ef 85 fb 31 93 a0 94 1c d4 42 97 21 ce db 5b f9 ef 8c 9d 14 dc 45 Data Ascii: }<MIjrSS4pBLFJWr(Hd&`=Q"p'trDH}\|9\W*jrIJ7`~F1{U/7 XXs.V^Exj6bbqpmc0 #-U\|]konPLKXt~1B![E
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 36 c1 8e ac 74 e2 b7 72 c9 bf 87 9e bc e4 a0 f0 b3 fd ca b2 fa e6 c9 b3 77 89 c4 b1 54 40 e5 58 0d b4 90 71 65 ab 19 2b 44 9f c3 4e 32 71 6f 26 bf 38 e2 24 ce a9 20 59 aa 4b 4c 5c 97 13 0b b3 0b 6e 56 dd 48 db 6f 5c 73 cd a9 ac 74 09 69 4b 4d fa fb 33 34 d2 47 4f 04 80 0f 88 e6 80 0c 47 50 7b ee 6e 18 7d 7f 0c 73 7d 4d 31 0b b2 38 5e 0c d2 6f bb 49 94 2b 84 47 05 48 de f7 b7 73 b1 db db d3 1b 51 d4 56 4d 5c 96 c9 9e 54 cf 46 b4 12 2a bd 28 b9 89 d8 a8 01 c9 be ab db a6 e3 6f cf 0c 95 bb b0 a6 d9 2a 9c bb e3 2a a3 8e 06 49 29 e8 e0 62 9f 78 4a bb 83 76 60 7c d8 8b d8 f6 07 07 e6 7a 5d a0 b7 d1 2d 31 55 e6 c9 cf a5 34 f2 54 f2 d5 83 8d 95 48 1f 28 b7 43 60 41 f5 c4 e5 27 14 e8 5e 59 28 a4 3f 11 34 32 47 3a ab 80 ce 53 e6 8e 36 04 32 95 d8 01 d0 6d d3 7c 33 Data Ascii: 6trwT@Xqe+DN2qo&8$ YKL\nVHo\stiKM34GOGP{n}s}M18^oI+GHsQVM\TF(o*I)bxJv`\|z]-1U4TH(C`A'^Y(?42G:S62m\|3
2024-05-15 22:37:02 UTC	7952	IN	Data Raw: c0 3b 74 17 fd 71 d1 8c 59 0c e6 81 f3 6a d6 96 59 19 08 59 0a 33 80 b7 dd 88 17 23 cf ad f0 74 e3 48 12 76 c7 19 f6 44 78 6f 88 6a b2 b5 9b 5b 53 69 8c b9 1d 0b 46 ad bf a8 b9 04 76 23 13 8c b7 45 48 76 b6 b6 84 30 d9 6b a4 e6 aa 47 0b 30 da 40 41 07 b1 fc 6d d3 16 7c 60 9a 59 a3 5b c5 f5 4c 92 d2 53 51 91 24 51 c6 11 02 b5 d4 02 4b 6c 7b 78 98 91 d6 d7 db 1c da 51 59 6c 13 4b 72 68 5d 56 8d 50 4c 72 20 49 51 79 85 b6 b3 5b 63 fe 78 29 d1 64 af 0c bb 86 1b f6 06 6d 97 d7 8e 54 86 1a 98 e4 2b 52 9a 96 ca e0 d8 fa 1d f7 18 13 7b 93 48 1a 70 a7 6f c9 ae fb 4f fb 27 a3 83 89 e6 ac a1 a9 93 f6 45 6b 19 a8 db ad e3 27 e5 0c 40 b8 56 25 76 1d 00 3d f1 0d 0f 8b 6a 14 d6 51 d1 a9 f0 e9 3b 8f 02 b8 b8 01 f2 c6 49 a0 a5 bd 44 4d a4 ac 8b 7d c6 f7 00 fc bf 88 ef 8d Data Ascii: ;tqYjYY3#tHvDxoj[SiFv#EHv0kG0@Am\|`Y[LSQ$QKl{xQYlKrh]VPLr IQy[cx)dmT+R{HpoO'Ek'@V%v=jQ;IDM}
2024-05-15 22:37:02 UTC	16288	IN	Data Raw: 37 db e9 da f7 ef 89 a6 96 57 01 8a 75 4f 92 b9 07 c4 d7 c7 48 53 97 a6 e8 da 23 bb 2f 7b 91 de c4 1f cf 0c bb 66 bb 95 1f 25 4c f5 75 89 25 4a b2 34 9a 54 22 9d cf 50 3a f6 eb e9 85 a5 4d 23 29 3b c8 2f 25 24 a5 9c e8 58 50 28 ea b6 d3 be e7 cf b6 0d bc 01 ba 56 8a 63 a6 86 69 62 56 6d 0b 21 1e 32 2f 75 e9 b7 e3 86 dc d2 66 e5 a1 83 65 c6 aa 64 d6 a0 c0 d7 26 45 60 74 82 6c 4b 03 d4 ed 85 52 ac f6 33 56 3c cd 7f f6 86 43 14 e2 5f 1e 58 8d 16 85 b7 8a 06 70 75 81 e5 7b 83 6f 31 eb 89 27 4f 6f 92 d5 b9 5f 80 24 cc 24 19 b2 55 b3 6b 31 28 33 6a ef a1 4d 81 f3 b8 23 f0 c3 a7 8a 07 ff 00 a4 3b e1 5e 5e 5f 2e 63 42 8d b5 6d 34 b7 75 1b 80 4d d4 7b 82 b7 fa e2 3a ab 76 7c 51 7d 24 93 6b ca 07 ca e6 8e ab 85 e9 e1 9c 92 88 a5 24 75 dd e2 3a 8d 9e dd c0 25 6f e8 Data Ascii: 7WuOHS#/{f%Lu%J4T"P:M#);/%$XP(VcibVm!2/ufed&E`tlKR3V<C_Xpu{o1'Oo_$$Uk1(3jM#;^^_.cBm4uM{:v\|Q}$k$u:%o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50080	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	655	OUT	GET /steam/apps/1128860/ss_3466316c3a6e2ba97aacd4aec717f277c29f8430.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 23 Apr 2024 13:43:01 GMT ETag: "6627bae5-142aa" Server: nginx Content-Type: image/jpeg Content-Length: 82602 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305861 Expires: Sun, 19 May 2024 11:34:43 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 ff c4 00 53 10 00 02 01 02 04 04 03 05 05 04 05 0a 03 06 05 05 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 07 14 32 71 81 23 42 91 a1 b1 Data Ascii: JFIFCCQXS!1A"Qa2q#B
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 04 42 68 f2 9a c9 23 a6 80 06 95 00 d4 c4 92 47 fd f0 02 4f 93 d7 1a a6 96 3a 8a 51 a1 c9 05 a5 17 07 d3 cf 1b 83 0e bc 01 c2 8c 73 31 2c b2 98 cc 6f f6 57 01 ac bd ee 6d 84 93 e8 64 8d 5b 8c 7d a6 e9 cb 6a f2 ec aa 9d ea ea c4 3a 1e 47 91 ad 6e fa 00 dc f6 b5 8f 7b 75 c7 95 ab ad 2b 70 8a 19 19 8c 79 ed 57 f9 4b 90 d5 52 cc 8b 5f 4b 3a ea 34 f0 95 8c ad ae b1 8f 3b 32 de e7 a5 c9 bf 5c 73 c2 4a 1a 89 4f fc 19 fd 8c f3 da 4d 55 3e 6d c6 b9 a4 8b 31 85 62 22 1e 7c b7 d2 e4 0d c9 3b 95 dc 91 bf 7e f8 f5 34 f5 54 95 76 4d e0 52 5a 49 2b 63 66 0e b2 ac 27 aa 3a b0 17 f9 1f 5c 5e 2c 9b 6d 81 a2 cb 7d c8 4a 89 32 88 d8 dc 89 48 04 1d fa 7a f4 c3 a9 02 ca 70 e4 e9 0d 4f 30 55 2b da e5 88 3d f1 b7 1a c8 ea e3 78 ea 04 88 4a 26 da d4 0b 02 7d 30 63 c5 06 ed 84 92 Data Ascii: Bh#GO:Qs1,oWmd[}j:Gn{u+pyWKR_K:4;2\sJOMU>m1b"\|;~4TvMRZI+cf':\^,m}J2HzpO0U+=xJ&}0c
2024-05-15 22:37:02 UTC	3360	IN	Data Raw: 4f 35 3e 67 50 a8 14 c8 10 02 15 ac 58 1b dc 28 37 be d7 c4 b5 5a f6 fe 43 56 06 78 9a a2 2c 8a 18 ee ab 18 e6 20 44 17 08 b7 f0 df 7f 2d bf f4 18 de 95 41 eb 4d d6 71 9f f8 0a e4 b1 95 52 49 52 ca 00 b6 9d af d2 f7 f3 f3 c7 b1 78 30 c3 97 55 1c be b5 e2 7a 4a 6a 94 95 0a 2a ce a7 52 1b 6c c8 43 0b 11 63 d8 8c 6f c9 83 19 74 41 a5 0c 3a 7a e0 19 17 6a b3 21 42 f1 02 ba 83 ee 08 61 d2 e4 7e b8 9b 92 45 14 5b 1b b8 63 33 92 9e a9 24 8b 5f 3b 4f d9 69 50 c4 93 b0 d8 f5 c1 4d 30 53 5c 9b 46 59 96 3e 47 4f 1e 67 9d c4 3d e6 a2 d0 d3 d3 55 39 90 22 0b 1b 3a dc 5f bd 94 1b 0b e1 27 3f 05 21 13 55 cb 2b ef 97 41 34 8a 91 16 8d 4f 2d 17 65 db a0 f4 c4 47 21 ab 99 67 61 1a 49 a5 18 78 c1 1b a8 fe 76 c4 d8 f1 22 a9 9e 18 ae da 57 4a 0d 2a 00 1f 5f e7 d3 09 c0 c0 82 Data Ascii: O5>gPX(7ZCVx, D-AMqRIRx0UzJjRlCcotA:zj!Ba~E[c3$_;OiPM0S\FY>GOg=U9":_'?!U+A4O-eG!gaIxv"WJ_
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: 1c 47 51 9c 19 77 78 b2 90 79 31 b5 ad e2 6f 87 a7 cb 05 3a e0 ce e4 f2 34 70 d1 e0 c8 a8 5a 2a 18 28 b2 6a f8 19 82 55 ba 9a 9a 99 7f b2 13 a5 ee 3e 2d 47 e5 89 b9 49 72 3a 84 6b 18 1b 22 c8 aa ab 23 5a dc a2 8e b2 63 19 2e 2a 78 84 18 e1 1b 5c da 1b 0b 8e fb ad bd 71 3d ce f2 59 25 58 18 b2 7e 1c a9 e3 2a 58 62 9d b3 0c dc b0 d0 69 e9 d0 d3 d1 8b 1d ec c4 8d 43 a6 c1 8f 4e 98 47 87 81 f3 25 5d 00 b8 97 2f c9 78 6a be 0c 92 4a 6a 69 59 18 b1 a6 e1 d5 f7 9a af 22 ae ea 0d ac 7d 2f b8 f1 62 d1 4d ab 67 3c aa 2e 81 5f b6 ab f2 79 8d 65 15 25 2f 08 e5 87 ff 00 cf d7 85 ac a8 5e b6 3a 35 78 6f d3 76 ef b8 c3 47 4b 73 ce 47 7a db 55 25 41 68 72 ea 2e 2e a4 5c d3 34 7c c7 8a 6a 22 bb 2d 7e 69 58 b4 b4 28 3c d5 5f 4a f6 df 4a bf 4e f8 d5 b7 0b fc 02 f7 bb e4 07 Data Ascii: GQwxy1o:4pZ(jU>-GIr:k"#Zc.x\q=Y%X~*XbiCNG%]/xjJjiY"}/bMg<._ye%/^:5xovGKsGzU%Ahr..\4\|j"-~iX(<_JJN
2024-05-15 22:37:02 UTC	16384	IN	Data Raw: f8 63 a5 2c 12 2d 55 04 ae 76 81 e4 31 54 29 d4 75 6c 25 5f e0 dd bc 8f 7b 60 34 14 f0 12 cc 28 19 e9 a9 a0 a3 48 d7 54 46 69 64 2c 6c 8b d0 1b 0b dc 75 ff 00 1c 4b 4e 2f 2d 15 d4 79 a1 56 b6 28 a9 65 74 9e 53 51 25 ac 23 55 d0 ac 7d 14 6e 7e 64 e1 d9 25 80 8e 5b 98 48 f4 2c 59 92 06 56 d2 a0 80 cd 6f 50 3b ed dc e1 e2 fb 03 5e 49 72 8c 8a ab 88 6a 25 e4 09 ea e7 43 e3 0a 35 58 13 d5 8e ca a3 a6 ec 46 26 e5 9f 23 c6 37 c0 d5 9b f0 f4 59 64 62 9f 3e cc e0 12 c2 00 58 68 e4 59 9c 0f 26 93 e1 51 e8 2f f3 c4 db 6c a6 da e4 8f 27 ad 9e 26 97 f6 46 57 1d 26 b0 14 66 13 3d 98 8d fa c8 c0 b3 7f c3 85 c7 21 56 b0 8e a4 c8 5c d4 2f ed 29 66 ae a8 98 ed 14 3a 97 98 77 e9 f7 df f2 fa e0 6e 0d 79 09 43 c3 59 a4 51 3d 21 cc 20 c8 e3 00 83 4d 33 04 27 be f1 a6 fa bd 5c Data Ascii: c,-Uv1T)ul%_{`4(HTFid,luKN/-yV(etSQ%#U}n~d%[H,YVoP;^Irj%C5XF&#7Ydb>XhY&Q/l'&FW&f=!V\/)f:wnyCYQ=! M3'\
2024-05-15 22:37:02 UTC	7952	IN	Data Raw: 54 9b c7 eb 0d d1 72 96 8a 61 16 ad 46 9c aa de 44 46 3c ce 5d b7 40 0d fc 5d 18 03 d0 60 39 ab c8 9c 90 86 39 2c ec 92 4d 2a 56 48 c0 31 b6 97 44 b0 04 74 b0 fc fa fa e1 31 35 85 63 72 45 2c 6f 03 42 e8 16 71 ab 9b ca 17 b0 1b 5a fb f5 b9 d3 fa 61 e3 25 6e 3c 18 e2 b6 a9 f3 09 c8 95 b5 88 e2 11 b1 20 dc 6e 6c 07 c8 e2 e9 2d 35 5e 4c 43 4e 1e 9a a4 fb b8 0a 51 48 67 37 00 8e bb 1c 5b 4a 58 b1 ba 20 99 92 7a 8d 64 32 48 46 f7 fb c3 6b 7d 76 38 ab 76 14 8f 66 d5 0c 64 91 e1 61 b9 be e3 d4 9c 0a ac b1 b9 c1 7f 84 38 7a a3 33 a6 cd eb cc 13 47 97 53 98 d2 6a 88 f4 f4 27 60 2f eb 6e 97 eb 8e 0f 51 ad b3 e3 1f a8 84 df 83 53 e1 9a b8 0e 5a 29 a8 df 4c 35 12 19 3d de 38 c4 91 cb 24 7b 05 7b ef a4 46 cc 43 91 d9 be 43 c6 d4 dd b9 c9 b6 2a bb c3 11 33 4a 9a ac d2 Data Ascii: TraFDF<]@]`99,MVH1Dt15crE,oBqZa%n< nl-5^LCNQHg7[JX zd2HFk}v8vfda8z3GSj'`/nQSZ)L5=8${{FCC3J
2024-05-15 22:37:02 UTC	6096	IN	Data Raw: 24 14 cd 31 56 cb e8 02 20 8d d4 90 75 39 bd f7 1d 00 18 84 fd 6c b4 fe 15 fc b1 e3 a0 a5 f2 b2 ef 17 ff 00 45 bc 91 a9 d8 64 59 c3 51 d6 95 ba 26 62 e5 96 4b 7f 6a c3 f0 00 e1 e1 eb 25 cc f2 84 96 82 e8 c9 72 ef 61 9c 43 98 ad 53 4e 16 96 a2 29 5e 36 86 70 48 b8 24 06 5b 1f 10 36 bd fc bc f1 dc fd 44 79 59 22 b4 a4 16 cb 7d 85 56 c3 5f 47 2d 66 61 4d 2d 1a ca 3d e0 46 da 6f a7 ee dc 82 45 ce d7 b6 17 fe a1 53 48 65 a5 e4 d6 a2 c9 e7 a3 a6 51 40 20 31 c6 1c aa cf 50 49 24 9d b4 91 6f 08 b2 8b db 7b f9 62 0a 59 b6 56 85 7c ff 00 85 27 e2 aa ba d3 9a c0 82 a4 47 11 01 2f 69 2e 46 cd f0 95 b5 ce ea 37 be 2d 1d 4a e0 47 0b 33 ef 66 fc 0f 4e 78 b2 7c b6 a2 79 61 ac a4 a8 32 47 1a 28 91 1a 30 2f 6d c6 dd 3a df a7 e7 6d 4d 4f 85 ae c9 42 39 69 9a 5f 11 41 ee 91 Data Ascii: $1V u9lEdYQ&bKj%raCSN)^6pH$[6DyY"}V_G-faM-=FoESHeQ@ 1PI$o{bYV\|'G/i.F7-JG3fNx\|ya2G(0/m:mMOB9i_A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50081	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	400	OUT	GET /steam/apps/1745170/header_292x136.jpg?t=1714383419 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 13336 Last-Modified: Tue, 30 Nov 2021 14:55:19 GMT ETag: "61a63b57-3418" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=512994 Expires: Tue, 21 May 2024 21:06:56 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	13336	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 ff c4 00 52 10 00 01 02 04 03 05 04 05 08 04 09 09 09 00 00 00 01 02 03 00 04 05 11 06 12 21 07 13 14 31 61 08 41 51 71 22 32 81 91 a1 15 42 Data Ascii: JFIFCC$R!1aAQq"2B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50082	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	400	OUT	GET /steam/apps/2421410/header_292x136.jpg?t=1715738345 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 25243 Last-Modified: Fri, 15 Mar 2024 02:40:11 GMT ETag: "65f3b50b-629b" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=530567 Expires: Wed, 22 May 2024 01:59:49 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 06 04 07 02 03 08 01 00 09 ff c4 00 46 10 00 02 01 03 02 04 04 04 03 05 05 05 08 02 03 00 01 02 03 04 05 11 00 06 07 12 21 31 13 22 41 51 08 14 61 71 32 81 91 15 23 42 Data Ascii: JFIFCC$F!1"AQaq2#B
2024-05-15 22:37:02 UTC	9200	IN	Data Raw: 1a 3b 9d 49 a9 ad ad 6a 85 35 13 b6 00 00 b1 7c 00 02 8e dd 7a 9c e9 57 61 21 7e 2d b8 c7 d9 73 45 01 c8 6f ca b9 aa 69 70 f1 19 5b 23 83 e9 a6 c0 ec dd 5d df db b2 af eb 6f 37 19 69 a8 e8 2e 97 5a 8a 8a 04 3f bb 85 2b 0c e9 0a f6 25 50 31 0b d3 3d 06 33 ab 38 c3 43 8b 98 df 68 f7 55 f8 94 56 46 d9 0b 9d 03 69 db 59 69 1f 30 2d 5e 1f 11 df 16 96 fe 25 ec eb 46 ca da 96 89 ed 9b 6a d5 1c 30 c5 2d 59 c4 d2 ac 51 f2 26 54 74 51 8e b8 eb df be b3 5c 17 82 bb 87 cd 26 2f 10 fc d2 3e ee b6 16 6f 7d d4 1b 83 7b b1 3f b8 94 7b a2 80 f2 dc f7 f8 79 ae 6d a5 b9 4d 49 20 78 a6 92 26 f7 8d d9 4f ea 0e b5 e5 ed 22 9d aa 74 c4 1d b8 44 a9 77 95 e2 85 2a 96 9e f1 70 a7 15 6b c9 50 b0 d6 ca be 32 75 f2 b8 07 cc 3a 9e 87 3a 1b 9b 13 eb 33 41 ad b4 1a 7d 94 3f 6b 1d 7b a3 Data Ascii: ;Ij5\|zWa!~-sEoip[#]o7i.Z?+%P1=38ChUVFiYi0-^%Fj0-YQ&TtQ\&/>o}{?{ymMI x&O"tDw*pkP2u::3A}?k{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50083	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	400	OUT	GET /steam/apps/2582650/header_292x136.jpg?t=1715400017 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:02 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 20473 Last-Modified: Tue, 23 Apr 2024 21:21:20 GMT ETag: "66282650-4ff9" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=192207 Expires: Sat, 18 May 2024 04:00:29 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:02 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 00 04 05 07 02 03 08 01 09 ff c4 00 47 10 00 01 03 03 03 02 04 04 03 05 04 08 05 04 03 00 01 02 03 04 05 06 11 00 12 21 07 31 13 22 41 51 08 14 61 71 32 81 a1 15 23 42 Data Ascii: JFIFCC$G!1"AQaq2#B
2024-05-15 22:37:02 UTC	4430	IN	Data Raw: 87 34 e7 ef aa 56 4d 26 cc b4 e4 ad d2 3e 31 7a d7 31 95 34 ff 00 52 ab 8e 34 4f e1 53 89 c0 c7 b7 97 8f cb 4a 64 75 29 1a 0b 34 fc 61 f5 a6 34 40 c2 7a 93 5a 4b 44 11 e0 85 a3 69 1f 51 b7 9c fd 74 57 34 b4 59 26 fd d5 8b 40 09 53 7e 31 ba cd 11 41 03 a9 35 d6 9a 27 2a d8 e2 72 7d 39 e3 9f cf 5c 8e 8b 87 78 4d 7b a8 c0 db f1 70 ba c6 cd 9d 0f a8 96 af 4d ad 2b e2 7f ed e8 57 24 69 17 53 b5 8a 94 94 b1 22 44 d0 97 5b 6a 9f 1a 41 1b 62 a1 6a 65 08 71 60 13 95 8c e3 ca 75 f4 fe c2 d2 4b 07 64 6a fb 5b b3 89 92 6b da 1b c8 00 55 b8 b7 97 38 02 48 f2 03 17 95 a5 1c 57 0b df 0e 4f 15 ed e9 e7 9f 92 1d b8 7a 15 06 25 89 5b ab d6 ac 3b a3 a6 55 e6 5c 8e c5 1a 91 3a b6 cd 59 35 b9 0e 39 b5 4c 32 c8 40 7b ca 9c ab 78 24 76 1c 93 ad 3f c3 3f 88 3b 4b b4 35 82 2d 43 Data Ascii: 4VM&>1z14R4OSJdu)4a4@zZKDiQtW4Y&@S~1A5'*r}9\xM{pM+W$iS"D[jAbjeq`uKdj[kU8HWOz%[;U\:Y59L2@{x$v??;K5-C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50084	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	400	OUT	GET /steam/apps/2239550/header_292x136.jpg?t=1692817793 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:03 UTC	340	IN	HTTP/1.1 200 OK Last-Modified: Mon, 12 Dec 2022 13:40:12 GMT ETag: "63972f3c-66bf" Server: nginx Content-Type: image/jpeg Content-Length: 26303 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=67020 Expires: Thu, 16 May 2024 17:14:02 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:03 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 03 02 01 00 09 ff c4 00 42 10 00 02 01 03 03 02 04 04 04 03 06 04 04 07 00 00 01 02 03 04 05 11 06 12 21 00 07 13 31 41 51 08 14 22 61 32 71 81 91 15 23 42 Data Ascii: JFIFCC$B!1AQ"a2q#B
2024-05-15 22:37:03 UTC	10259	IN	Data Raw: 59 3f 4b 3b 9d ce c8 df b9 7d 82 3d 93 b2 d8 6e 35 da de 3b d4 b5 c8 5e 5a 77 a6 42 aa 42 e4 f8 6f b8 31 00 9c 02 c3 ea 03 20 0f 2e b4 18 9f 89 67 c6 95 a4 fc 6c f3 3a fb 1a ff 00 0b 24 78 28 9e 37 17 1e 47 03 db 4f be f5 e8 bf 69 ca 4d 12 3b 7d 5c 6d f7 5b d5 da d7 53 5f 12 dc 2e 15 16 6f a2 da ef 95 f0 e9 e3 57 25 d8 8c 91 93 93 81 81 ce 3a 22 29 e4 e2 72 92 1b 4d 17 56 6e 87 df 45 96 e2 ec 18 11 78 6d 70 32 10 48 17 57 43 ad ec 3b 9e db a3 4e e5 f6 96 e1 6a a1 d3 f5 ba 21 eb 74 40 a5 da 29 ad 34 12 b9 bb d6 53 b3 e2 7a b9 a4 8b 76 d9 b0 e0 78 58 3b 46 72 7f a4 68 58 e8 b1 99 47 40 7e ab c8 31 33 25 cf 7c 90 4e df 1b 7b 35 f0 34 8d 9a 01 dd bf fb ba 9d 85 6a ab 6f 1d bf ed f5 3e 9c af bb ea 5b 0d c6 cf a6 e9 2a 7c 76 ae b8 9a ba db d5 5d 49 c8 06 69 80 Data Ascii: Y?K;}=n5;^ZwBBo1 .gl:$x(7GOiM;}\m[S_.oW%:")rMVnExmp2HWC;Nj!t@)4SzvxX;FrhXG@~13%\|N{54jo>[*\|v]Ii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50085	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	399	OUT	GET /steam/apps/447040/header_292x136.jpg?t=1692817739 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:03 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Wed, 08 Jun 2016 18:54:31 GMT ETag: "575869e7-46ec" Server: nginx Content-Type: image/jpeg Content-Length: 18156 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=580076 Expires: Wed, 22 May 2024 15:44:58 GMT Date: Wed, 15 May 2024 22:37:02 GMT Connection: close
2024-05-15 22:37:03 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 88 01 24 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 00 08 09 ff c4 00 43 10 00 01 03 02 04 04 03 06 04 03 07 03 03 05 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 14 51 61 08 15 22 32 71 81 42 52 91 Data Ascii: JFIFCC$C!1AQa"2qBR
2024-05-15 22:37:03 UTC	2113	IN	Data Raw: 96 c1 a2 50 d9 5d 68 fc 3f 91 99 df cc f4 15 a1 4b 0c d6 58 a8 b0 be 81 4c 1b a5 e0 3c fe 1b fd f1 07 b2 81 dc da f4 07 0d e6 56 b2 75 36 b1 41 a8 3e f4 c8 b9 7a a4 a8 31 64 73 14 34 c7 5a 49 68 29 5d 0e 93 a4 5e dd c0 b8 b6 3c f7 88 62 b0 b8 4e dd af 95 d2 c5 9d c0 18 cf 64 a6 49 8e dc bc fb 53 e2 25 2b 3f ce 87 4c cb 47 95 51 a3 b5 0f 9d cc 90 4a 9b 05 d4 a5 57 2d 58 6a d1 6d 46 da 80 17 be 39 50 35 8c d5 26 93 7f 7e a9 d9 12 59 0c 27 85 b3 4e f6 90 a7 e6 9e 1d ce 9b 02 bf 06 53 80 ba c2 5b 54 77 63 38 f3 89 48 57 29 21 42 da ca 48 da fd 08 f3 c6 f2 eb 70 63 7d e3 c0 59 34 9d 25 dd 82 c5 eb b5 f9 7c 3a e2 1b 54 37 e4 b8 ac b7 17 43 53 b7 b1 71 f7 1b fe f0 e1 ef a7 9a b5 6f 7b 6c 31 8b 39 cc 9e 4a 1d 85 0f 92 db 88 4c 0c a6 ed 66 d5 a2 a1 9c a7 29 6d b6 Data Ascii: P]h?KXL<Vu6A>z1ds4ZIh)]^<bNdIS%+?LGQJW-XjmF9P5&~Y'NS[Twc8HW)!BHpc}Y4%\|:T7CSqo{l19JLf)m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50086	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	424	OUT	GET /steam/apps/1128860/ss_96487c455abe12d84fa57c487e4d05807089eb5d.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:03 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 23 Apr 2024 13:41:12 GMT ETag: "6627ba78-1613e" Server: nginx Content-Type: image/jpeg Content-Length: 90430 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=439031 Expires: Tue, 21 May 2024 00:34:14 GMT Date: Wed, 15 May 2024 22:37:03 GMT Connection: close
2024-05-15 22:37:03 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 ff c4 00 56 10 00 02 01 03 03 02 05 02 03 04 05 06 0a 08 02 0b 01 02 03 04 05 11 00 12 21 06 31 07 13 22 41 51 14 61 32 71 81 15 23 42 91 08 Data Ascii: JFIFCCQXV!1"AQa2q#B
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: 57 f9 f1 49 5d 29 78 1c fd 44 75 d4 e7 1e 5b 3a b7 f5 52 82 33 bd 0e 7b e7 3c 12 ab 03 4e ec 6e 68 d3 d2 c1 45 4d 10 8e 05 3e 5a fe 15 76 2c 47 ea 49 3a b2 4d 0b 68 1f 5b 66 8c a1 c0 0a bf 9e 8a 00 bd 59 d3 ae 55 9a 30 a4 1f 8d 31 ad 01 e7 e9 ca a2 a4 94 63 f9 0d 15 2a 05 20 2d 6d 8e af 25 44 32 8c f0 38 e3 4c 98 b4 07 9b a7 2b 63 0c 8d 14 81 8f be 34 54 90 bc 58 06 e1 63 aa 9a 13 cb 6f 53 8c 63 41 cb 46 51 67 36 9b 45 7e 5e 32 a7 03 d5 9e fa d1 9a 33 83 39 ba da ea e0 91 ca 02 fc 67 2b 9d 3f 35 42 f1 00 55 5c 2a e2 a6 d8 ec 78 3d 8e a4 e4 a8 74 a8 31 d3 77 99 d2 95 f1 18 c1 6e 49 1a 78 55 01 e8 bc f7 a3 e7 05 11 a0 2f 93 9d bf 7d 52 c5 38 8a ba 6a 80 f1 fa 10 6d ec 17 24 9f b6 94 c1 96 aa fa 1a 59 27 91 ce 55 39 c0 3e c3 ed ce 89 8c 62 0e a7 9a 2b bc 75 Data Ascii: WI])xDu[:R3{<NnhEM>Zv,GI:Mh[fYU01c* -m%D28L+c4TXcoScAFQg6E~^239g+?5BU\*x=t1wnIxU/}R8jm$Y'U9>b+u
2024-05-15 22:37:03 UTC	3044	IN	Data Raw: 36 3b 8d bb b2 d3 6a 55 1a a2 bf f4 b1 e9 97 e8 cf e9 0b 59 70 a2 66 80 4f 1d 3d 6a 49 12 8c ae 62 01 99 73 c6 41 8d b1 9e 35 e5 fe c3 cc b2 7a 48 af a5 af e4 ce af da 30 6b 34 a4 fc 9f 48 f8 29 59 4f d0 3f d1 f6 95 e0 65 8e ae a6 51 70 46 a9 4c 99 fe a1 a3 71 24 80 77 20 4a a0 81 f1 c6 be 7b f6 84 17 ab f5 f2 f2 ba fe 57 ff 00 47 b9 e8 67 ec fa 65 7f e5 ff 00 f4 72 b2 f8 85 59 4d d7 91 f4 e3 d2 c1 25 20 ac 75 69 46 e0 cb 08 44 21 b8 38 dc 4b 13 f9 7c 6b ce 5e 93 1c bd 3f bd 6e eb fa ef fe 8f 47 26 69 a9 b8 57 d4 6e 7b f5 14 d1 d3 99 05 39 96 b2 33 3c 10 54 39 0e ec 01 25 46 47 21 7b 9f 8d 72 60 c2 e3 76 93 51 7d 9d f1 c9 4a 2a e9 bf f3 f9 99 37 8d 12 5e ae 10 5a c5 9d 61 4b 6d 1b 09 6a a7 8d 97 cf 05 89 46 8b 70 1b 99 58 91 9f 8e 35 f4 5e 96 58 76 97 6f Data Ascii: 6;jUYpfO=jIbsA5zH0k4H)YO?eQpFLq$w J{WGgerYM% uiFD!8K\|k^?nG&iWn{93<T9%FG!{r`vQ}J*7^ZaKmjFpX5^Xvo
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: 75 64 d4 6d 18 6f 2f f6 cc 8b ba 6d a5 9b 3b c1 24 6e ce 33 ce 4e 75 d5 2f 46 d3 52 82 49 fe 5e 04 c7 ea e2 ee 39 1b 6b f3 f2 69 7d 2d d3 fd 17 e2 6f 48 c9 60 a9 ab ea 4b 75 fa 2c cf 07 50 c9 5e af 30 56 5e 14 84 55 df 18 27 38 60 48 c8 cb 63 18 48 61 96 16 e5 34 b7 f6 ff 00 bb ef f9 0d 97 d5 73 69 63 6f f9 ff 00 d7 d0 c7 24 fe 8e 9e 23 78 7d d5 b0 d1 d8 e9 a9 ae 97 00 b2 d7 c7 5e 23 d9 44 ea 18 01 b2 56 fc 2e 43 16 64 27 81 cf 6d 76 73 f7 63 25 27 f1 eb 67 14 65 0c 32 8c e1 1f 97 76 bf f6 7d 07 6a 86 cd 6e e9 08 29 7a ca a2 d9 5d d4 b2 05 9a ba a3 d7 2c 46 58 c1 11 2c 4a ec 0f a0 60 f1 fc 59 6f 8d 4f 1e 1e 1f 83 48 3e a3 d5 bc ed cb 23 31 4e a2 b3 ad f2 ed 7a bc 5d ba 9d 67 a1 f2 04 50 c3 03 7e fa 7a 90 a7 68 68 83 1d df 84 06 6c e3 b9 ef af 56 14 a3 56 Data Ascii: udmo/m;$n3Nu/FRI^9ki}-oH`Ku,P^0V^U'8`HcHa4sico$#x}^#DV.Cd'mvsc%'ge2v}jn)z],FX,J`YoOH>#1Nz]gP~zhhlVV
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: ac b4 3a 7d 5d b6 79 8e c9 27 1e a8 c6 1b 12 94 ce e3 c8 21 88 ce 32 72 70 39 ed cb 15 92 0a 6b b3 8f 13 78 e6 e0 fa 3f a1 e7 a8 65 98 0d cb 31 42 32 24 84 c3 1e 47 db 68 3c 7e ba ed 51 64 f9 23 3d f1 57 a7 aa fa a2 cd 25 5f 4f 25 45 17 56 db e3 69 6d b5 8a c6 59 18 e4 16 85 c3 7a 5a 37 da 01 53 c0 38 3d c6 83 8a 4b 94 9f 41 8c df 51 5d 94 7a 1b c6 0b 45 fa 55 b6 d5 da 62 b1 f5 1c 71 a1 9e 86 a8 79 72 e5 b0 06 d4 6f 92 7b 77 1f 71 82 5a 0f 97 6c 12 b5 b4 8d 00 5f 5e 10 72 fb 49 1f 85 bb 8f d3 ff 00 0d 3f 12 6a 42 87 52 5b 69 2a 6f 36 fb bc 54 f1 54 4c 8e 60 ab 4d bb 4b c0 dc 6e ef c9 46 0a c3 ed bb 41 c7 c8 2c ca bc 58 aa 99 2a b6 d2 c3 fb 42 96 b6 b2 96 3a 48 d8 13 24 b5 11 a3 ef 8d 5f b9 8c 22 8d cd fc 24 80 09 ec 21 97 1f 34 d2 2d 8b 27 b6 ec c8 3a 9b Data Ascii: :}]y'!2rp9kx?e1B2$Gh<~Qd#=W%_O%EVimYzZ7S8=KAQ]zEUbqyro{wqZl_^rI?jBR[io6TTL`MKnFA,XB:H$_"$!4-':
2024-05-15 22:37:03 UTC	7952	IN	Data Raw: 9d 21 0e dc 64 ae 96 cf 99 ea 66 5a 74 f3 92 2d 9e a8 89 f5 36 d7 39 1f 9e e2 08 39 38 c1 3a 13 5c 62 99 93 e4 da 0a db fa 8a 6b 2b 54 f9 d5 d5 14 f0 53 38 10 e6 9d 4c 9c b3 12 ac ab e9 e3 18 3f 04 70 75 b1 54 5b de c3 3b a2 9d fe ed 74 ea 24 9c d4 c8 d5 94 30 3f d4 21 2a de 6c 6d 85 f4 12 d8 38 c7 20 67 dc fc 70 99 1b 6e d8 d8 fa 65 54 bb d3 7f 93 c2 df fb 2e 39 25 94 79 d1 aa ce cb 50 5c 38 0b c8 ce 00 05 d4 0c 02 49 07 3c 69 94 be 22 d5 1c 5b 0d be ba 9d 6d d5 2d e5 47 0c 4c 63 5a b6 65 64 65 3b f6 38 8d 72 d9 6d c4 16 38 1c 7b 0d 49 bd d8 e9 68 e9 ed b6 e7 6a 87 17 37 a5 28 56 18 c5 3c 6c e8 e0 2b 12 bc 2a 9c 79 9b 47 21 78 27 e3 47 b0 78 b4 3a 74 8f 80 a3 c5 4a 4b dd 64 77 1a 1b 3c 36 fa a9 56 96 ab e9 b0 6a 26 43 96 79 18 60 f9 63 3f 27 90 0e 30 bc Data Ascii: !dfZt-6998:\bk+TS8L?puT[;t$0?!lm8 gpneT.9%yP\8I<i"[m-GLcZede;8rm8{Ihj7(V<l+yG!x'Gx:tJKdw<6Vj&Cy`c?'0
2024-05-15 22:37:03 UTC	14240	IN	Data Raw: af 98 4b b8 46 3e a5 73 c6 58 31 dc 3d f9 c6 91 cb dd 8a 4b b4 1e 2f 1c 9d f4 cc e3 a7 3a ad 29 eb 98 4d 4d 1b d3 b8 65 21 a3 39 0a 46 30 73 df f5 ed a9 c9 36 86 83 49 86 fa db af ab 2e 91 d2 46 03 d2 a4 40 08 da 32 5e 26 01 70 55 86 06 33 8c 81 cf 6d 46 2a 4d 96 93 8d 51 ef 4c f5 db 9a b6 a5 a7 b5 44 97 50 5e 34 2a 8c 92 ca 84 81 8c 8f 6c e7 3e de a1 91 ae b8 cf 82 a7 13 9a b9 3d 33 61 f0 ee 69 2a 23 9a 5b 9d 6a 41 7c 8e ae 55 8a 00 ac 19 ca c9 82 a5 31 95 fc 40 82 4f 65 3c 1c 12 0c 27 b6 9f e8 19 c5 24 9a 3a f1 03 a1 2c 55 d7 3a 6b 8f ec c8 a4 58 60 95 6a 69 e2 04 29 77 ff 00 d7 1c 76 60 07 7f b6 ba 61 08 29 6c 8c a5 29 2d 19 15 45 2d 57 4e 5b 60 79 04 72 db ab a2 06 05 8d 8b 9a 72 c0 80 a4 f7 07 18 ef df 3c eb 8f 37 a7 6a a7 1f 25 b1 65 fe 16 0c bb 54 Data Ascii: KF>sX1=K/:)MMe!9F0s6I.F@2^&pU3mFMQLDP^4l>=3ai*#[jA\|U1@Oe<'$:,U:kX`ji)wv`a)l)-E-WN[`yrr<7j%eT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50087	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:02 UTC	424	OUT	GET /steam/apps/1128860/ss_6a6e8fb986c72dd4436566373debb93bfa9d5f57.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:03 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 23 Apr 2024 13:43:01 GMT ETag: "6627bae5-16179" Server: nginx Content-Type: image/jpeg Content-Length: 90489 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305692 Expires: Sun, 19 May 2024 11:31:55 GMT Date: Wed, 15 May 2024 22:37:03 GMT Connection: close
2024-05-15 22:37:03 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 01 00 08 ff c4 00 51 10 00 02 01 02 05 02 04 04 03 04 05 0a 05 02 02 0b 01 02 03 04 11 00 05 12 21 31 13 41 06 22 51 61 14 32 71 81 07 91 a1 15 23 42 b1 Data Ascii: JFIFCCQXQ!1A"Qa2q#B
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: a5 cf 56 b3 26 a8 69 e2 d5 3c 4e 17 4c 4d c0 1b 10 79 b9 1d fd 41 db 8c 3e da 90 b8 6a c5 5f 13 21 c9 a5 78 a3 97 e2 25 90 74 e5 92 32 54 2d ef df 60 6e 07 e4 70 e9 d3 c8 bc 2b a3 d8 33 06 92 96 a2 38 25 30 c7 2c 6a 63 91 56 ed 20 20 a9 d8 9e c2 f8 c9 c9 72 0b 62 68 6b 65 55 84 55 34 8f d1 1a 91 9f f8 a4 d5 72 01 e0 59 40 ed be 2e 9f 68 cf 26 af 22 8a 7c c9 04 dd 7a 85 89 d6 e5 d3 c8 a4 f6 00 5b 7e 39 c2 5d 72 15 1b c8 d9 b2 56 4f de 2d 5c cc eb 7f 9c 03 f9 ed 8d be f1 43 6d 32 f9 95 09 ac 92 4b f9 18 1b 80 0e d7 f5 c5 a2 da 05 18 ac d1 25 a7 99 d6 52 74 fb 8d b1 74 ec 02 c9 20 55 8b 58 1a 47 17 c3 d8 b4 57 19 8d 4b 02 75 28 dc 0e 2d 8c 13 ca 6a a8 a0 9b a8 09 0c 06 f6 c0 68 c8 e8 19 06 66 b5 90 c5 ab 74 40 12 fc da e6 e0 fd 31 ca f1 81 ae ce a5 93 56 ac Data Ascii: V&i<NLMyA>j_!x%t2T-`np+38%0,jcV rbhkeUU4rY@.h&"\|z[~9]rVO-\Cm2K%Rtt UXGWKu(-jhft@1V
2024-05-15 22:37:03 UTC	3103	IN	Data Raw: 8f c0 39 8f 8c 33 7c ca 1c e2 ab 2a cf 73 b9 42 ca 9e 27 4c db e1 db 44 7e 57 86 55 9f 4a dc 83 65 6b 6a b9 3b b0 1b 4b e7 28 61 31 5e 9c 9f 47 2a 7f 04 cd 15 34 c6 a6 9a 64 92 16 d0 ed 28 d1 13 5b 96 d5 6d ed c0 b7 3c e1 ff 00 dc c5 bc 31 3e 5c fb 42 2a 0f 0a d7 d7 d4 2f 4a b2 19 1f ac a1 99 49 b2 dd 49 bd cf 3c 7e 63 0d 2d 78 a5 94 52 3a 3a 92 c2 40 75 f4 74 f9 7e 7f 99 64 f3 d2 40 73 26 d0 ab 5a 4d df 4d af 65 3f c1 b8 24 91 cd ed 7e d8 31 72 9c 54 e2 f1 e0 e9 84 56 9d c2 4b 26 3e af c1 b5 55 f9 96 75 55 96 e6 5f 13 9b d3 9e a3 d2 c0 86 3e aa 1f 98 ab 13 b9 1b 6d 6d fb 63 a3 e6 a8 a4 a4 b0 c9 ed b6 dc 5e 40 bc 0b e1 e6 f1 2b cb 46 94 73 d6 d2 d8 a5 41 5b fe e4 b1 dc 1e 06 96 dc d8 ff 00 44 e2 d3 d4 50 57 26 4e 11 72 c2 37 79 6f e1 5f 88 eb a8 8b c3 93 Data Ascii: 93\|sB'LD~WUJekj;K(a1^G4d([m<1>\B*/JII<~c-xR::@ut~d@s&ZMMe?$~1rTVK&>UuU_>mmc^@+FsA[DPW&Nr7yo_
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: 24 af 04 46 73 66 b4 d5 d1 04 4a c4 75 56 32 07 0c 35 01 c1 1b f0 3c bf cb 13 51 6b a0 67 b2 73 d3 c3 d7 26 04 69 63 72 ae 35 1b 92 01 e0 db b1 da d8 d1 6e b2 6a c0 0c b9 6b c5 d5 57 53 04 61 88 06 45 bf ca 2e 7f ab 8f 51 8a 29 7e a3 71 c9 ee 5b 9d 34 73 46 ce 59 51 50 58 26 e4 13 7b db ef 7c 69 43 0e 80 99 44 b5 21 eb 1d e3 62 8a 2c 05 fb d8 73 f7 c3 d5 2a 33 3d 85 52 46 62 cd a9 d8 72 0f bd bf ab 04 c1 99 44 c9 40 43 ca 3a ac a0 aa ae ab 6c 46 f7 fa e2 52 8e ee 02 b0 1d 1e 69 76 13 08 48 20 f9 54 3b 02 3d af f4 ef 85 d8 f8 32 a0 a6 cd e9 a5 a8 59 b4 30 54 00 22 5e fd f7 b1 1c 0b 0e fb ef 80 b4 da 54 6a b0 c7 cc 68 1e 4f 2c c6 9d 4b 5d 56 42 6f 6e d7 3b 7b ef 8c a2 e8 65 45 f5 65 aa c8 91 62 59 64 52 62 22 32 74 ea 22 e7 cd ea 78 b7 af d7 1e 7c 52 8d a7 Data Ascii: $FsfJuV25<Qkgs&icr5njkWSaE.Q)~q[4sFYQPX&{\|iCD!b,s*3=RFbrD@C:lFRivH T;=2Y0T"^TjhO,K]VBon;{eEebYdRb"2t"x\|R
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: f7 db 14 a8 ae 03 96 13 41 46 cf 5a f4 b3 b7 c3 39 07 4c cc 4b 46 18 0b f9 88 e0 5b b8 bd af 7e 30 ae 58 b5 90 22 f5 a3 ad a2 7a 9a 69 63 26 58 81 67 a3 53 e6 2c 84 9d bd 6e 36 bf fa c0 8c 23 9c 79 0a cd a3 a3 66 1f 86 1e 12 a4 ca 20 cc a7 fc 4a a4 6a ba d8 3e 22 3a 2a 3c 96 a2 ad 63 27 f8 1e 50 ca 2e 18 e9 24 29 17 1b 72 2e 91 d4 5f 4d 70 04 ed d0 57 e1 92 7e 0e 1f 0c 49 37 89 69 33 ba ea e2 3a 73 bc 75 f1 d3 00 d7 05 1a 25 08 de 53 70 0e b2 4d ef b7 16 57 36 9d 31 79 22 72 7f 0d d1 e6 d5 93 53 7c 7d 7e 42 ce 0c 54 cd 5d 08 ac 3a 4f 95 c9 8d 4a ea 0b 72 cb 6b 7b e3 95 c9 bc 13 4a b1 d0 37 8d b2 2c bb 2b 9a 96 bb c2 b2 cd 9a e5 59 94 22 7a 6e b3 a0 aa a4 74 b8 96 36 d3 b1 75 71 70 c2 da 83 03 6b df 14 75 7e a6 1d dc d0 09 9e 3a ba ba 59 da 24 2b 2a 2c 8f Data Ascii: AFZ9LKF[~0X"zic&XgS,n6#yf Jj>":<c'P.$)r._MpW~I7i3:su%SpMW61y"rS\|}~BT]:OJrk{J7,+Y"znt6uqpku~:Y$+,
2024-05-15 22:37:03 UTC	7952	IN	Data Raw: 96 44 34 b2 b6 67 96 2b 4b 09 40 f2 39 67 66 00 33 12 5b 4b 05 f4 b8 3f 6f 7c 56 6b 68 b0 76 37 cb 4c f4 b9 49 98 d3 d3 a5 3a 31 85 cb 2e a2 7c ad a6 d6 f9 47 9b 8b 8b d8 1d ed 8e 45 2a 93 5f 66 55 aa 56 86 b9 35 13 4f 2d 25 4c 72 c6 c2 99 5a 69 63 06 d7 45 de e4 0e dc 6e 70 da 92 74 e3 e7 8f d4 45 1b 58 17 e7 b9 cc 7f 1e c6 46 57 f8 b8 d9 b4 b1 df 75 d3 62 7b 9f 95 b1 1d 38 62 bc 30 46 36 f2 67 f3 54 8e b1 61 9d 62 58 67 6d 0e c5 05 89 20 de ff 00 cf 8f af 38 ec 51 a4 ca ca 09 c5 50 2c 50 56 ad 64 48 56 46 58 25 8e 40 fb 05 60 1b 55 f7 3b ec 01 fc f0 8f 6e db f2 45 c6 b0 0f 9b cd 5b 9c e4 a3 30 ad 98 95 8e 73 48 ab 2b 96 2a 87 cc a0 7f cd 7b 7d 4e 1e 11 8c 3d 31 5e e5 14 7d 39 15 65 59 59 cd 68 cc b1 ca a9 a1 ba 4d d5 36 53 20 6b 81 ed e4 05 8d f6 01 4f Data Ascii: D4g+K@9gf3[K?o\|Vkhv7LI:1.\|GE_fUV5O-%LrZicEnptEXFWub{8b0F6gTabXgm 8QP,PVdHVFX%@`U;nE[0sH+{}N=1^}9eYYhM6S kO
2024-05-15 22:37:03 UTC	14240	IN	Data Raw: 8b 2c 10 ca 3a 95 33 48 a6 c5 ff 00 85 2f fe a8 de c2 fb 9d f0 da 72 b9 db cb eb f3 dc d1 ca 32 f0 b4 29 0d a3 61 50 8e 14 97 bd 8e 90 6d b5 fd 09 1b fb e2 f1 4c 31 58 09 9e 9a 8e ad 73 69 69 9e a5 0c 3a 4a 09 01 97 59 22 ef 7b 0d 8f a6 26 9c 95 58 6b 2e 88 4b 1c d1 65 74 72 f4 a6 20 6b 6e bb b1 3d ad a4 58 6d 6e 48 b9 3b e1 93 56 d3 1b a3 e8 64 9e 96 96 27 8a 5d 52 4b 2a b3 e9 d6 83 cb b8 26 c3 7c 36 1f 28 c9 8e ab 33 1a 1c c6 b2 aa b9 62 83 2d b4 57 10 d3 c4 4c 32 39 27 62 bc 8b fa 9b ef 89 28 b4 ab 91 9d 3c 99 ea 7a c0 f2 9a 99 50 ba 8d 40 a4 ea 76 b6 da 41 ee 2c 7f bb 14 71 e8 9e 39 29 c9 92 19 f2 e7 49 a1 1d 69 9e c6 36 60 81 b7 16 f3 76 17 db 7f 7f ae 0c f1 2f 60 46 2b b2 fa cc be 4a 9c da 0a 49 0c 34 61 18 2a c3 b1 17 3f 31 27 fa b0 89 d4 5b 03 8e Data Ascii: ,:3H/r2)aPmL1Xsii:JY"{&Xk.Ketr kn=XmnH;Vd']RK&\|6(3b-WL29'b(<zP@vA,q9)Ii6`v/`F+JI4a?1'[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50088	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:03 UTC	424	OUT	GET /steam/apps/1128860/ss_ccbcb9f7680336d745fdc7db036961f312073710.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:03 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 23 Apr 2024 13:38:38 GMT ETag: "6627b9de-163e4" Server: nginx Content-Type: image/jpeg Content-Length: 91108 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305488 Expires: Sun, 19 May 2024 11:28:31 GMT Date: Wed, 15 May 2024 22:37:03 GMT Connection: close
2024-05-15 22:37:03 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 01 00 08 ff c4 00 51 10 00 02 01 02 04 04 04 03 05 04 06 08 03 07 02 07 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 71 14 32 81 07 23 91 a1 b1 15 42 Data Ascii: JFIFCCQXQ!1A"Qaq2#B
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: 40 93 51 4b 03 1e 60 d3 ab 7d cf 9e 2a 9a 7c 0a 52 22 f2 03 57 eb 82 6a c1 64 21 c5 ec 01 3d c5 b1 8c 5b f0 c2 a5 59 64 36 07 ae 9b 6f 8c 0a 02 19 7b 53 af 84 11 67 b5 ec 48 3f 4c 65 c8 28 94 51 00 ae 9a 49 bf 9f f9 e1 d0 51 72 c4 42 d8 5c 10 76 b5 b6 fe 6d 83 c9 82 e0 0c 25 74 26 e7 49 16 3d f6 ff 00 2e f8 14 12 75 7c a7 a6 82 24 5b b6 80 4b 28 ea c4 fe b6 18 44 aa d1 84 f5 31 4f 1d 53 16 2f b1 b0 0d 6d bd c7 9e f8 65 4b 08 02 ba 98 79 65 bb 95 36 b8 ef ea 30 3b 14 a4 c4 34 9d 4c ca 3f ae a7 a8 c0 68 20 d2 41 10 8c 30 26 fe 40 5f eb 6c 0a 66 04 aa a4 e5 80 51 82 87 51 a9 12 e0 12 36 07 19 78 01 18 23 7d 57 37 25 86 a2 75 12 7e b8 d4 a8 08 6f 94 c1 f0 d3 33 3c 3a 99 42 94 50 2e 77 fd 71 19 e5 61 8c 82 e6 56 82 5e 6f 25 0c aa d7 74 3b 69 b7 40 41 fe 6f 85 Data Ascii: @QK`}*\|R"Wjd!=[Yd6o{SgH?Le(QIQrB\vm%t&I=.u\|$[K(D1OS/meKye60;4L?h A0&@_lfQQ6x#}W7%u~o3<:BP.wqaV^o%t;i@Ao
2024-05-15 22:37:03 UTC	1674	IN	Data Raw: 4c 4f 50 8d 35 3a b2 99 11 76 67 50 6e c0 1f 3b 02 30 ad 61 d0 0d be 4f c7 d9 6b 64 dc 51 99 7e d8 ce 66 8e a2 09 ea 29 23 9b 28 8d d2 19 ca 9e 5c 6b a6 4b aa db 6b 90 40 b5 ce 38 5c 15 a8 e3 fa 97 84 95 36 cc de 5f 98 d5 55 e4 14 75 b9 84 15 34 ca ec 29 9a ae 62 0a 54 4c 16 ed 67 bf 88 db 7c 74 c5 24 dc 53 27 b6 5b 77 56 09 ad 42 c2 da 56 a5 49 da e3 c8 79 61 b6 d9 30 9f 8d 91 d6 46 d8 90 40 b1 1e f8 45 1a 1a c5 d9 a3 a5 5d 24 b1 48 88 4e 92 17 98 a1 82 9b 1e c4 1f d3 05 26 2b ca 38 cd 0d 45 5d 5d 7c f4 59 77 17 d4 64 93 86 d2 90 ca ee 9c c6 20 d8 f8 8d 80 f4 00 7b 61 94 ed 64 e2 8b 72 75 19 51 7f 1a 64 bc 49 94 65 15 55 59 87 16 35 45 14 e3 96 61 a9 94 92 ed 71 6d 22 c6 f7 df db d3 03 77 49 0d a9 19 a5 6e 46 47 84 4e 69 2c 93 bd 35 15 75 5c 49 4e 11 5a Data Ascii: LOP5:vgPn;0aOkdQ~f)#(\kKk@8\6_Uu4)bTLg\|t$S'[wVBVIya0F@E]$HN&+8E]]\|Ywd {adruQdIeUY5Eaqm"wInFGNi,5u\INZ
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: 83 7d 8d f7 b5 f7 bf b6 3c ed 4d 0d 49 6a a5 1f a7 1f 82 72 86 53 10 53 34 f1 e6 70 42 95 4c b0 16 46 4a 57 72 c0 28 b8 b9 b9 b0 b1 2a 48 c7 64 b4 a1 26 e6 97 e4 ac 60 ac d0 c1 98 3d 0e 51 f1 22 aa b2 0a 9a d6 70 27 a1 ab 74 72 44 9a 48 90 13 7d c5 ac d7 b8 16 fa f3 7c 99 39 d4 94 5c 57 95 c7 d8 0e f9 02 cf 2a 2a b3 6a cd 72 d5 d4 d5 49 4a 8d a9 e4 95 a5 37 60 00 dd b6 16 0a 0d fd 7e 87 bb 46 31 8a 7b 55 2f e8 17 84 37 ca 20 58 a9 9a 1e 58 9c 05 01 b4 1b 73 05 ac 2e 56 de 1d c6 c3 fc f0 5e 45 e8 78 00 6a b8 e7 8e 36 a7 9d 62 17 f1 fe fe f7 62 a3 71 70 6d 63 89 aa a6 b9 30 d6 86 20 b3 23 2d 88 55 d1 a4 82 7c 5d 81 07 6b 6f bf f0 c0 6e d0 50 ca 9d 4c 4b aa 58 74 91 e1 d5 1e e5 ad 7e 83 d2 db ef 85 fb 31 93 a0 94 1c d4 42 97 21 ce db 5b f9 ef 8c 9d 14 dc 45 Data Ascii: }<MIjrSS4pBLFJWr(Hd&`=Q"p'trDH}\|9\W*jrIJ7`~F1{U/7 XXs.V^Exj6bbqpmc0 #-U\|]konPLKXt~1B![E
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: 36 c1 8e ac 74 e2 b7 72 c9 bf 87 9e bc e4 a0 f0 b3 fd ca b2 fa e6 c9 b3 77 89 c4 b1 54 40 e5 58 0d b4 90 71 65 ab 19 2b 44 9f c3 4e 32 71 6f 26 bf 38 e2 24 ce a9 20 59 aa 4b 4c 5c 97 13 0b b3 0b 6e 56 dd 48 db 6f 5c 73 cd a9 ac 74 09 69 4b 4d fa fb 33 34 d2 47 4f 04 80 0f 88 e6 80 0c 47 50 7b ee 6e 18 7d 7f 0c 73 7d 4d 31 0b b2 38 5e 0c d2 6f bb 49 94 2b 84 47 05 48 de f7 b7 73 b1 db db d3 1b 51 d4 56 4d 5c 96 c9 9e 54 cf 46 b4 12 2a bd 28 b9 89 d8 a8 01 c9 be ab db a6 e3 6f cf 0c 95 bb b0 a6 d9 2a 9c bb e3 2a a3 8e 06 49 29 e8 e0 62 9f 78 4a bb 83 76 60 7c d8 8b d8 f6 07 07 e6 7a 5d a0 b7 d1 2d 31 55 e6 c9 cf a5 34 f2 54 f2 d5 83 8d 95 48 1f 28 b7 43 60 41 f5 c4 e5 27 14 e8 5e 59 28 a4 3f 11 34 32 47 3a ab 80 ce 53 e6 8e 36 04 32 95 d8 01 d0 6d d3 7c 33 Data Ascii: 6trwT@Xqe+DN2qo&8$ YKL\nVHo\stiKM34GOGP{n}s}M18^oI+GHsQVM\TF(o*I)bxJv`\|z]-1U4TH(C`A'^Y(?42G:S62m\|3
2024-05-15 22:37:03 UTC	7952	IN	Data Raw: c0 3b 74 17 fd 71 d1 8c 59 0c e6 81 f3 6a d6 96 59 19 08 59 0a 33 80 b7 dd 88 17 23 cf ad f0 74 e3 48 12 76 c7 19 f6 44 78 6f 88 6a b2 b5 9b 5b 53 69 8c b9 1d 0b 46 ad bf a8 b9 04 76 23 13 8c b7 45 48 76 b6 b6 84 30 d9 6b a4 e6 aa 47 0b 30 da 40 41 07 b1 fc 6d d3 16 7c 60 9a 59 a3 5b c5 f5 4c 92 d2 53 51 91 24 51 c6 11 02 b5 d4 02 4b 6c 7b 78 98 91 d6 d7 db 1c da 51 59 6c 13 4b 72 68 5d 56 8d 50 4c 72 20 49 51 79 85 b6 b3 5b 63 fe 78 29 d1 64 af 0c bb 86 1b f6 06 6d 97 d7 8e 54 86 1a 98 e4 2b 52 9a 96 ca e0 d8 fa 1d f7 18 13 7b 93 48 1a 70 a7 6f c9 ae fb 4f fb 27 a3 83 89 e6 ac a1 a9 93 f6 45 6b 19 a8 db ad e3 27 e5 0c 40 b8 56 25 76 1d 00 3d f1 0d 0f 8b 6a 14 d6 51 d1 a9 f0 e9 3b 8f 02 b8 b8 01 f2 c6 49 a0 a5 bd 44 4d a4 ac 8b 7d c6 f7 00 fc bf 88 ef 8d Data Ascii: ;tqYjYY3#tHvDxoj[SiFv#EHv0kG0@Am\|`Y[LSQ$QKl{xQYlKrh]VPLr IQy[cx)dmT+R{HpoO'Ek'@V%v=jQ;IDM}
2024-05-15 22:37:03 UTC	16288	IN	Data Raw: 37 db e9 da f7 ef 89 a6 96 57 01 8a 75 4f 92 b9 07 c4 d7 c7 48 53 97 a6 e8 da 23 bb 2f 7b 91 de c4 1f cf 0c bb 66 bb 95 1f 25 4c f5 75 89 25 4a b2 34 9a 54 22 9d cf 50 3a f6 eb e9 85 a5 4d 23 29 3b c8 2f 25 24 a5 9c e8 58 50 28 ea b6 d3 be e7 cf b6 0d bc 01 ba 56 8a 63 a6 86 69 62 56 6d 0b 21 1e 32 2f 75 e9 b7 e3 86 dc d2 66 e5 a1 83 65 c6 aa 64 d6 a0 c0 d7 26 45 60 74 82 6c 4b 03 d4 ed 85 52 ac f6 33 56 3c cd 7f f6 86 43 14 e2 5f 1e 58 8d 16 85 b7 8a 06 70 75 81 e5 7b 83 6f 31 eb 89 27 4f 6f 92 d5 b9 5f 80 24 cc 24 19 b2 55 b3 6b 31 28 33 6a ef a1 4d 81 f3 b8 23 f0 c3 a7 8a 07 ff 00 a4 3b e1 5e 5e 5f 2e 63 42 8d b5 6d 34 b7 75 1b 80 4d d4 7b 82 b7 fa e2 3a ab 76 7c 51 7d 24 93 6b ca 07 ca e6 8e ab 85 e9 e1 9c 92 88 a5 24 75 dd e2 3a 8d 9e dd c0 25 6f e8 Data Ascii: 7WuOHS#/{f%Lu%J4T"P:M#);/%$XP(VcibVm!2/ufed&E`tlKR3V<C_Xpu{o1'Oo_$$Uk1(3jM#;^^_.cBm4uM{:v\|Q}$k$u:%o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50089	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:03 UTC	424	OUT	GET /steam/apps/1128860/ss_3466316c3a6e2ba97aacd4aec717f277c29f8430.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:03 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 23 Apr 2024 13:43:01 GMT ETag: "6627bae5-142aa" Server: nginx Content-Type: image/jpeg Content-Length: 82602 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305891 Expires: Sun, 19 May 2024 11:35:14 GMT Date: Wed, 15 May 2024 22:37:03 GMT Connection: close
2024-05-15 22:37:03 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 ff c4 00 53 10 00 02 01 02 04 04 03 05 05 04 05 0a 03 06 05 05 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 07 14 32 71 81 23 42 91 a1 b1 Data Ascii: JFIFCCQXS!1A"Qa2q#B
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: 04 42 68 f2 9a c9 23 a6 80 06 95 00 d4 c4 92 47 fd f0 02 4f 93 d7 1a a6 96 3a 8a 51 a1 c9 05 a5 17 07 d3 cf 1b 83 0e bc 01 c2 8c 73 31 2c b2 98 cc 6f f6 57 01 ac bd ee 6d 84 93 e8 64 8d 5b 8c 7d a6 e9 cb 6a f2 ec aa 9d ea ea c4 3a 1e 47 91 ad 6e fa 00 dc f6 b5 8f 7b 75 c7 95 ab ad 2b 70 8a 19 19 8c 79 ed 57 f9 4b 90 d5 52 cc 8b 5f 4b 3a ea 34 f0 95 8c ad ae b1 8f 3b 32 de e7 a5 c9 bf 5c 73 c2 4a 1a 89 4f fc 19 fd 8c f3 da 4d 55 3e 6d c6 b9 a4 8b 31 85 62 22 1e 7c b7 d2 e4 0d c9 3b 95 dc 91 bf 7e f8 f5 34 f5 54 95 76 4d e0 52 5a 49 2b 63 66 0e b2 ac 27 aa 3a b0 17 f9 1f 5c 5e 2c 9b 6d 81 a2 cb 7d c8 4a 89 32 88 d8 dc 89 48 04 1d fa 7a f4 c3 a9 02 ca 70 e4 e9 0d 4f 30 55 2b da e5 88 3d f1 b7 1a c8 ea e3 78 ea 04 88 4a 26 da d4 0b 02 7d 30 63 c5 06 ed 84 92 Data Ascii: Bh#GO:Qs1,oWmd[}j:Gn{u+pyWKR_K:4;2\sJOMU>m1b"\|;~4TvMRZI+cf':\^,m}J2HzpO0U+=xJ&}0c
2024-05-15 22:37:03 UTC	3360	IN	Data Raw: 4f 35 3e 67 50 a8 14 c8 10 02 15 ac 58 1b dc 28 37 be d7 c4 b5 5a f6 fe 43 56 06 78 9a a2 2c 8a 18 ee ab 18 e6 20 44 17 08 b7 f0 df 7f 2d bf f4 18 de 95 41 eb 4d d6 71 9f f8 0a e4 b1 95 52 49 52 ca 00 b6 9d af d2 f7 f3 f3 c7 b1 78 30 c3 97 55 1c be b5 e2 7a 4a 6a 94 95 0a 2a ce a7 52 1b 6c c8 43 0b 11 63 d8 8c 6f c9 83 19 74 41 a5 0c 3a 7a e0 19 17 6a b3 21 42 f1 02 ba 83 ee 08 61 d2 e4 7e b8 9b 92 45 14 5b 1b b8 63 33 92 9e a9 24 8b 5f 3b 4f d9 69 50 c4 93 b0 d8 f5 c1 4d 30 53 5c 9b 46 59 96 3e 47 4f 1e 67 9d c4 3d e6 a2 d0 d3 d3 55 39 90 22 0b 1b 3a dc 5f bd 94 1b 0b e1 27 3f 05 21 13 55 cb 2b ef 97 41 34 8a 91 16 8d 4f 2d 17 65 db a0 f4 c4 47 21 ab 99 67 61 1a 49 a5 18 78 c1 1b a8 fe 76 c4 d8 f1 22 a9 9e 18 ae da 57 4a 0d 2a 00 1f 5f e7 d3 09 c0 c0 82 Data Ascii: O5>gPX(7ZCVx, D-AMqRIRx0UzJjRlCcotA:zj!Ba~E[c3$_;OiPM0S\FY>GOg=U9":_'?!U+A4O-eG!gaIxv"WJ_
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: 1c 47 51 9c 19 77 78 b2 90 79 31 b5 ad e2 6f 87 a7 cb 05 3a e0 ce e4 f2 34 70 d1 e0 c8 a8 5a 2a 18 28 b2 6a f8 19 82 55 ba 9a 9a 99 7f b2 13 a5 ee 3e 2d 47 e5 89 b9 49 72 3a 84 6b 18 1b 22 c8 aa ab 23 5a dc a2 8e b2 63 19 2e 2a 78 84 18 e1 1b 5c da 1b 0b 8e fb ad bd 71 3d ce f2 59 25 58 18 b2 7e 1c a9 e3 2a 58 62 9d b3 0c dc b0 d0 69 e9 d0 d3 d1 8b 1d ec c4 8d 43 a6 c1 8f 4e 98 47 87 81 f3 25 5d 00 b8 97 2f c9 78 6a be 0c 92 4a 6a 69 59 18 b1 a6 e1 d5 f7 9a af 22 ae ea 0d ac 7d 2f b8 f1 62 d1 4d ab 67 3c aa 2e 81 5f b6 ab f2 79 8d 65 15 25 2f 08 e5 87 ff 00 cf d7 85 ac a8 5e b6 3a 35 78 6f d3 76 ef b8 c3 47 4b 73 ce 47 7a db 55 25 41 68 72 ea 2e 2e a4 5c d3 34 7c c7 8a 6a 22 bb 2d 7e 69 58 b4 b4 28 3c d5 5f 4a f6 df 4a bf 4e f8 d5 b7 0b fc 02 f7 bb e4 07 Data Ascii: GQwxy1o:4pZ(jU>-GIr:k"#Zc.x\q=Y%X~*XbiCNG%]/xjJjiY"}/bMg<._ye%/^:5xovGKsGzU%Ahr..\4\|j"-~iX(<_JJN
2024-05-15 22:37:03 UTC	16384	IN	Data Raw: f8 63 a5 2c 12 2d 55 04 ae 76 81 e4 31 54 29 d4 75 6c 25 5f e0 dd bc 8f 7b 60 34 14 f0 12 cc 28 19 e9 a9 a0 a3 48 d7 54 46 69 64 2c 6c 8b d0 1b 0b dc 75 ff 00 1c 4b 4e 2f 2d 15 d4 79 a1 56 b6 28 a9 65 74 9e 53 51 25 ac 23 55 d0 ac 7d 14 6e 7e 64 e1 d9 25 80 8e 5b 98 48 f4 2c 59 92 06 56 d2 a0 80 cd 6f 50 3b ed dc e1 e2 fb 03 5e 49 72 8c 8a ab 88 6a 25 e4 09 ea e7 43 e3 0a 35 58 13 d5 8e ca a3 a6 ec 46 26 e5 9f 23 c6 37 c0 d5 9b f0 f4 59 64 62 9f 3e cc e0 12 c2 00 58 68 e4 59 9c 0f 26 93 e1 51 e8 2f f3 c4 db 6c a6 da e4 8f 27 ad 9e 26 97 f6 46 57 1d 26 b0 14 66 13 3d 98 8d fa c8 c0 b3 7f c3 85 c7 21 56 b0 8e a4 c8 5c d4 2f ed 29 66 ae a8 98 ed 14 3a 97 98 77 e9 f7 df f2 fa e0 6e 0d 79 09 43 c3 59 a4 51 3d 21 cc 20 c8 e3 00 83 4d 33 04 27 be f1 a6 fa bd 5c Data Ascii: c,-Uv1T)ul%_{`4(HTFid,luKN/-yV(etSQ%#U}n~d%[H,YVoP;^Irj%C5XF&#7Ydb>XhY&Q/l'&FW&f=!V\/)f:wnyCYQ=! M3'\
2024-05-15 22:37:03 UTC	7952	IN	Data Raw: 54 9b c7 eb 0d d1 72 96 8a 61 16 ad 46 9c aa de 44 46 3c ce 5d b7 40 0d fc 5d 18 03 d0 60 39 ab c8 9c 90 86 39 2c ec 92 4d 2a 56 48 c0 31 b6 97 44 b0 04 74 b0 fc fa fa e1 31 35 85 63 72 45 2c 6f 03 42 e8 16 71 ab 9b ca 17 b0 1b 5a fb f5 b9 d3 fa 61 e3 25 6e 3c 18 e2 b6 a9 f3 09 c8 95 b5 88 e2 11 b1 20 dc 6e 6c 07 c8 e2 e9 2d 35 5e 4c 43 4e 1e 9a a4 fb b8 0a 51 48 67 37 00 8e bb 1c 5b 4a 58 b1 ba 20 99 92 7a 8d 64 32 48 46 f7 fb c3 6b 7d 76 38 ab 76 14 8f 66 d5 0c 64 91 e1 61 b9 be e3 d4 9c 0a ac b1 b9 c1 7f 84 38 7a a3 33 a6 cd eb cc 13 47 97 53 98 d2 6a 88 f4 f4 27 60 2f eb 6e 97 eb 8e 0f 51 ad b3 e3 1f a8 84 df 83 53 e1 9a b8 0e 5a 29 a8 df 4c 35 12 19 3d de 38 c4 91 cb 24 7b 05 7b ef a4 46 cc 43 91 d9 be 43 c6 d4 dd b9 c9 b6 2a bb c3 11 33 4a 9a ac d2 Data Ascii: TraFDF<]@]`99,MVH1Dt15crE,oBqZa%n< nl-5^LCNQHg7[JX zd2HFk}v8vfda8z3GSj'`/nQSZ)L5=8${{FCC3J
2024-05-15 22:37:03 UTC	6096	IN	Data Raw: 24 14 cd 31 56 cb e8 02 20 8d d4 90 75 39 bd f7 1d 00 18 84 fd 6c b4 fe 15 fc b1 e3 a0 a5 f2 b2 ef 17 ff 00 45 bc 91 a9 d8 64 59 c3 51 d6 95 ba 26 62 e5 96 4b 7f 6a c3 f0 00 e1 e1 eb 25 cc f2 84 96 82 e8 c9 72 ef 61 9c 43 98 ad 53 4e 16 96 a2 29 5e 36 86 70 48 b8 24 06 5b 1f 10 36 bd fc bc f1 dc fd 44 79 59 22 b4 a4 16 cb 7d 85 56 c3 5f 47 2d 66 61 4d 2d 1a ca 3d e0 46 da 6f a7 ee dc 82 45 ce d7 b6 17 fe a1 53 48 65 a5 e4 d6 a2 c9 e7 a3 a6 51 40 20 31 c6 1c aa cf 50 49 24 9d b4 91 6f 08 b2 8b db 7b f9 62 0a 59 b6 56 85 7c ff 00 85 27 e2 aa ba d3 9a c0 82 a4 47 11 01 2f 69 2e 46 cd f0 95 b5 ce ea 37 be 2d 1d 4a e0 47 0b 33 ef 66 fc 0f 4e 78 b2 7c b6 a2 79 61 ac a4 a8 32 47 1a 28 91 1a 30 2f 6d c6 dd 3a df a7 e7 6d 4d 4f 85 ae c9 42 39 69 9a 5f 11 41 ee 91 Data Ascii: $1V u9lEdYQ&bKj%raCSN)^6pH$[6DyY"}V_G-faM-=FoESHeQ@ 1PI$o{bYV\|'G/i.F7-JG3fNx\|ya2G(0/m:mMOB9i_A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	49824	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:05 UTC	821	OUT	GET / HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; steamCountry=HK%7C3f8832cf437838e2588db6607c6feae9; browserid=3526959438637945341
2024-05-15 22:37:06 UTC	1876	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Set-Cookie: steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add; Path=/; Secure; HttpOnly; SameSite=None
2024-05-15 22:37:06 UTC	14508	IN	Data Raw: 37 38 37 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 Data Ascii: 787b<!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"
2024-05-15 22:37:06 UTC	16343	IN	Data Raw: 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 5f 53 74 6f 72 65 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 20 64 61 74 61 2d 73 75 62 6d 65 6e 75 69 64 3d 22 53 74 6f 72 65 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 22 3e 0d 0a 09 09 09 09 09 09 09 48 6f 6d 65 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 Data Ascii: <div class="submenu_Store" style="display: none;" data-submenuid="Store"><a class="submenuitem" href="https://gtm.you1.cn/storesteam/">Home</a><a class="submenuitem" href="https://gtm.you1.cn/st
2024-05-15 22:37:06 UTC	12110	IN	Data Raw: 32 66 34 36 0d 0a 09 3c 73 70 61 6e 3e 53 69 67 6e 20 49 6e 3c 2f 73 70 61 6e 3e 0d 0a 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 0d 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6d 6d 75 6e 69 74 79 5f 61 63 74 69 76 69 74 79 5f 6f 72 22 3e 6f 72 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 6a 6f 69 6e 2f 22 20 63 6c 61 73 73 3d 22 62 74 6e 5f 67 72 65 65 6e 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 20 62 74 6e 5f 6d 65 64 69 75 6d 22 20 73 74 79 6c 65 3d 22 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 22 3e 0d 0a 09 09 09 09 09 09 09 09 3c 73 70 61 6e 3e 4a 6f 69 6e 20 53 74 65 61 6d 3c 2f 73 70 61 6e 3e 0d 0a 09 09 Data Ascii: 2f46<span>Sign In</span></a><div class="community_activity_or">or</div><a href="https://gtm.you1.cn/storesteam/join/" class="btn_green_white_innerfade btn_medium" style="float: left;"><span>Join Steam</span>
2024-05-15 22:37:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50091	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:06 UTC	782	OUT	GET /public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:06 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:06 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=14743448 Expires: Sat, 02 Nov 2024 14:01:14 GMT
2024-05-15 22:37:06 UTC	2725	IN	Data Raw: 61 39 65 0d 0a 2f 2a 0d 0a 20 46 6f 6e 74 3a 20 09 09 4d 6f 74 69 76 61 20 53 61 6e 73 0d 0a 20 55 52 4c 3a 20 09 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 2e 70 68 70 3f 73 6b 75 3d 54 32 39 38 32 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 4e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 64 65 73 69 67 6e 65 72 2f 32 39 33 2f 6e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 43 6f 70 79 72 69 67 68 74 3a 09 43 6f 70 79 72 69 67 68 74 20 20 32 30 31 31 20 62 79 20 52 6f 64 72 69 67 6f 20 53 61 69 61 6e 69 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 56 65 72 73 69 6f Data Ascii: a9e/* Font: Motiva Sans URL: http://www.youworkforthem.com/product.php?sku=T2982 Foundry: Niramekko Foundry: http://www.youworkforthem.com/designer/293/niramekko Copyright:Copyright 2011 by Rodrigo Saiani. All rights reserved. Versio
2024-05-15 22:37:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50093	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:06 UTC	778	OUT	GET /public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:07 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:07 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=14924209 Expires: Mon, 04 Nov 2024 16:13:56 GMT
2024-05-15 22:37:07 UTC	16120	IN	Data Raw: 33 65 66 30 0d 0a 2e 62 74 6e 5f 67 72 65 65 6e 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 44 32 45 38 38 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 61 34 64 30 30 37 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 Data Ascii: 3ef0.btn_green_white_innerfade {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decoration: none !important;color: #D2E885 !important;background: #a4d007;background: -webkit-linea
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 34 34 66 61 0d 0a 72 65 6e 74 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 3b 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 09 7d 0d 0a 0d 0a 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 3a 6e 6f 74 28 2e 62 74 6e 5f 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 62 74 6e 5f 61 63 74 69 76 65 29 3a 6e 6f 74 28 2e 61 63 74 69 76 65 29 3a 68 6f 76 65 72 Data Ascii: 44farent > span {border-radius: 2px;display: block;background: transparent;border: 1px solid rgba(255,255,255,0.4);border-radius: 2px;}.btnv6_white_transparent:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover
2024-05-15 22:37:08 UTC	1282	IN	Data Raw: 6c 79 20 69 63 6f 6e 73 20 49 27 76 65 20 6e 6f 74 20 66 75 6c 6c 79 20 72 65 70 6c 61 63 65 64 20 79 65 74 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 73 65 20 74 68 65 6d 2c 20 70 6c 65 61 73 65 20 63 6f 6e 76 65 72 74 20 74 6f 20 74 68 65 20 6e 65 77 20 69 63 6f 6e 20 63 6f 64 65 20 2a 2f 0d 0a 0d 0a 2e 62 74 6e 5f 64 65 74 61 69 6c 73 5f 61 72 72 6f 77 0d 0a 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 77 69 64 74 68 3a 20 31 35 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 Data Ascii: ly icons I've not fully replaced yet. If you need to use them, please convert to the new icon code */.btn_details_arrow{display: inline-block;width: 15px;height: 16px;background-image:url('https://community.cloudflare.steamstatic.com/pub
2024-05-15 22:37:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50096	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:06 UTC	784	OUT	GET /public/shared/css/shared_global.css?v=2VoZa2M8Wh3k&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:07 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:07 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=13603350 Expires: Sun, 20 Oct 2024 09:19:37 GMT
2024-05-15 22:37:07 UTC	16120	IN	Data Raw: 33 65 66 30 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 2f 2a 20 53 79 73 74 65 6d 20 67 72 65 79 73 20 2a 2f 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 73 74 47 72 65 79 3a 20 23 44 43 44 45 44 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 72 47 72 65 79 3a 20 23 42 38 42 43 42 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 47 72 65 79 3a 20 23 38 42 39 32 39 41 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 47 72 65 79 3a 20 23 36 37 37 30 37 42 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 47 72 65 79 3a 20 23 33 44 34 34 35 30 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 72 47 72 65 79 3a 20 23 32 33 32 36 32 45 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 73 74 47 72 65 79 3a 20 23 30 45 Data Ascii: 3ef0:root {/* System greys */--gpSystemLightestGrey: #DCDEDF;--gpSystemLighterGrey: #B8BCBF;--gpSystemLightGrey: #8B929A;--gpSystemGrey: #67707B;--gpSystemDarkGrey: #3D4450;--gpSystemDarkerGrey: #23262E;--gpSystemDarkestGrey: #0E
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 33 66 66 38 0d 0a 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 70 6f 70 75 70 73 2f 62 74 6e 5f 61 72 72 6f 77 5f 64 6f 77 6e 2e 70 6e 67 27 20 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 09 77 69 64 74 68 3a 20 39 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 23 61 64 6d 69 6e 5f 64 72 6f 70 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 Data Ascii: 3ff8ic.com/public/shared/images/popups/btn_arrow_down.png' );vertical-align: middle;width: 9px;height: 4px;}#admin_drop { border-radius: 2px; border: none; padding: 1px; display: inline-block; cursor: pointer;
2024-05-15 22:37:08 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 77 64 47 73 39 49 6b 46 6b 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4d 43 31 6a 4d 44 59 77 49 44 59 78 4c 6a 45 7a 4e 44 63 33 4e 79 77 67 4d 6a 41 78 4d 43 38 77 4d 69 38 78 4d 69 30 78 4e 7a 6f 7a 4d 6a 6f 77 4d 43 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 69 42 79 5a Data Ascii: 3ff0dGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMC1jMDYwIDYxLjEzNDc3NywgMjAxMC8wMi8xMi0xNzozMjowMCAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZ
2024-05-15 22:37:08 UTC	8	IN	Data Raw: 33 66 66 30 0d 0a 61 67 Data Ascii: 3ff0ag
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 65 73 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 69 63 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 36 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 74 68 65 73 65 20 61 72 65 20 73 68 6f 77 6e 20 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 20 73 6f 20 6e 6f 74 20 61 20 62 69 67 20 64 65 61 6c 20 74 68 61 74 20 74 68 65 79 20 61 72 65 6e 27 74 20 69 6e 20 74 68 65 20 73 70 72 69 74 65 20 2a 2f 0d 0a 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 74 72 61 64 65 6f 66 66 65 72 73 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 69 63 6f 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 2e 63 6c 6f 75 64 66 6c 61 72 Data Ascii: es .notification_icon {background-position: 0 -64px;}/* these are shown conditionally so not a big deal that they aren't in the sprite */.header_notification_tradeoffers .notification_icon {background-image: url( 'https://community.cloudflar
2024-05-15 22:37:08 UTC	16368	IN	Data Raw: 70 75 70 5f 62 6f 64 79 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 31 37 41 39 42 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 2e 73 74 6f 72 65 5f 6e 61 76 20 2e 70 6f 70 75 70 5f 6d 65 6e 75 5f 73 75 62 68 65 61 64 65 72 2c 0d 0a 62 6f 64 79 2e 76 36 20 23 66 6f 6f 74 65 72 5f 6e 61 76 20 2e 70 6f 70 75 70 5f 6d 65 6e 75 5f 73 75 62 68 65 61 64 65 72 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 33 32 34 32 65 3b 0d 0a 7d 0d 0a 62 6f 64 79 2e 76 36 20 2e 73 74 6f 72 65 5f 6e 61 76 20 2e 70 6f 70 75 70 5f 6d 65 6e 75 20 2e 68 72 2c 0d 0a 62 6f 64 79 2e 76 36 20 23 66 6f 6f 74 65 72 5f 6e 61 76 20 Data Ascii: pup_body { border: none; position: relative; background: #417A9B;}body.v6 .store_nav .popup_menu_subheader,body.v6 #footer_nav .popup_menu_subheader{ color: #13242e;}body.v6 .store_nav .popup_menu .hr,body.v6 #footer_nav
2024-05-15 22:37:08 UTC	5880	IN	Data Raw: 31 36 66 30 0d 0a 20 35 30 30 70 78 3b 0d 0a 09 7d 0d 0a 0d 0a 0d 0a 0d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 0d 0a 7b 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 20 2e 6e 65 77 6d 6f 64 61 6c 5f 63 6f 6e 74 65 6e 74 20 7b 0d 0a 09 09 70 61 64 64 69 6e 67 3a 20 31 35 70 78 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 0d 0a 2f 2a 20 43 68 69 6e 61 20 44 65 73 6b 74 6f 70 20 46 6f 6f 74 65 72 20 2a 2f 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 23 66 6f 6f 74 65 72 2e 63 68 69 6e 61 5f 66 6f 6f 74 65 72 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 36 70 78 20 31 36 70 78 20 36 30 70 78 20 31 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 23 66 6f 6f 74 65 72 5f 73 70 61 63 Data Ascii: 16f0 500px;}@media screen and (max-width: 910px){html.responsive .newmodal_content {padding: 15px;}}/* China Desktop Footer */body.v6 #footer.china_footer { padding: 16px 16px 60px 16px;}body.v6 #footer_spac
2024-05-15 22:37:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50095	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:06 UTC	772	OUT	GET /public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:07 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:07 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=13756351 Expires: Tue, 22 Oct 2024 03:49:38 GMT
2024-05-15 22:37:07 UTC	16139	IN	Data Raw: 37 65 65 30 0d 0a 0d 0a 68 74 6d 6c 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 20 23 31 62 32 38 33 38 3b 0d 0a 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 0d 0a 09 63 6f 6c 6f 72 3a 20 23 38 46 39 38 41 30 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 0d 0a 09 6d 61 72 67 69 6e 3a 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 66 6c 61 74 5f 70 61 67 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 66 6c 61 74 5f 70 61 67 65 2e 62 6c 61 63 6b 20 7b 0d 0a 09 62 61 63 Data Ascii: 7ee0html {height: 100%;}body {background: #1b2838;text-align: left;color: #8F98A0;font-size: 14px;margin:0;padding:0;}body.flat_page {position: relative;min-height: 100%;}body.flat_page.black {bac
2024-05-15 22:37:08 UTC	16349	IN	Data Raw: 61 64 5f 70 61 67 65 6c 69 6e 6b 20 7b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6d 6d 65 6e 74 74 68 72 65 61 64 5f 70 61 67 65 6c 69 6e 6b 73 5f 63 74 6e 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6d 6d 65 6e 74 74 68 72 65 61 64 5f 70 61 67 65 6c 69 6e 6b 73 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6d 6d 65 6e 74 74 68 72 65 61 64 5f 70 61 67 65 64 72 6f 70 64 6f 77 6e 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 66 69 78 20 73 6f 6d 65 20 Data Ascii: ad_pagelink {cursor: pointer;color: #ffffff;}.commentthread_pagelinks_ctn {height: fit-content;line-height: normal;}.commentthread_pagelinks {margin: 0 8px;}.commentthread_pagedropdown {display: none;}/* fix some
2024-05-15 22:37:08 UTC	7118	IN	Data Raw: 31 62 63 36 0d 0a 59 33 70 72 59 7a 6c 6b 49 6a 38 2b 49 44 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 77 64 47 73 39 49 6b 46 6b 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4d 43 31 6a 4d 44 59 77 49 44 59 78 4c 6a 45 7a 4e 44 63 33 4e 79 77 67 4d 6a 41 78 4d 43 38 77 4d 69 38 78 4d 69 30 78 4e 7a 6f 7a 4d 6a 6f 77 4d 43 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 Data Ascii: 1bc6Y3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMC1jMDYwIDYxLjEzNDc3NywgMjAxMC8wMi8xMi0xNzozMjowMCAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gP
2024-05-15 22:37:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50094	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:06 UTC	777	OUT	GET /public/shared/css/apphub.css?v=VZMHNMxv89Ym&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:07 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:07 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15002313 Expires: Tue, 05 Nov 2024 13:55:40 GMT
2024-05-15 22:37:07 UTC	16139	IN	Data Raw: 37 30 32 63 0d 0a 0d 0a 62 6f 64 79 0d 0a 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 62 32 38 33 38 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 61 63 62 32 62 38 3b 0d 0a 7d 0d 0a 0d 0a 63 65 6e 74 65 72 0d 0a 7b 0d 0a 0d 0a 7d 0d 0a 2f 2a 20 61 64 6d 69 6e 20 2a 2f 0d 0a 2e 61 70 70 68 75 62 5f 4e 6f 72 6d 61 6c 6c 79 48 69 64 64 65 6e 42 61 6e 6e 65 72 0d 0a 7b 0d 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 38 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 70 78 20 61 75 74 6f 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 35 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 Data Ascii: 702cbody{ background: #1b2838; color: #acb2b8;}center{}/* admin */.apphub_NormallyHiddenBanner{max-width: 918px;margin: 0px auto;margin-top: 10px;padding: 15px;background-color: #3a3a3a;border: 1px solid
2024-05-15 22:37:08 UTC	12585	IN	Data Raw: 6c 75 74 65 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 74 6f 70 3a 20 34 35 25 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 50 6c 61 79 56 69 64 65 6f 49 63 6f 6e 0d 0a 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 74 6f 70 3a 20 35 30 25 3b 0d 0a 09 6c 65 66 74 3a 20 35 30 25 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 32 37 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 70 78 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 32 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 41 75 74 68 6f 72 42 6c 6f 63 6b 0d 0a 7b 0d 0a 09 68 65 69 67 68 74 3a 20 31 39 70 78 Data Ascii: lute;text-align: center;width: 100%;top: 45%;}.apphub_CardContentPlayVideoIcon{position: absolute;top: 50%;left: 50%;margin-top: -27px;margin-left: -40px;z-index: 2;}.apphub_CardContentAuthorBlock{height: 19px
2024-05-15 22:37:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50097	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:07 UTC	774	OUT	GET /public/css/skin_1/modalContent.css?v=.TP5s6TzX6LLh&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:07 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:07 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=14799167 Expires: Sun, 03 Nov 2024 05:29:54 GMT
2024-05-15 22:37:07 UTC	2472	IN	Data Raw: 39 61 31 0d 0a 0d 0a 2e 6d 6f 64 61 6c 42 6f 64 79 0d 0a 7b 0d 0a 09 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 23 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 2e 6d 6f 64 61 6c 5f 66 72 61 6d 65 0d 0a 7b 0d 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 33 31 30 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 36 30 30 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 33 30 34 61 36 36 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 23 6d 6f 64 61 6c 43 6f 6e Data Ascii: 9a1.modalBody{overflow-y: scroll;overflow-x: auto;}#modalContent.modal_frame{min-width: 310px;height: 600px;border: 2px solid #304a66;border-radius: 2px;-moz-border-radius: 2px;background-color: black;}#modalCon
2024-05-15 22:37:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50098	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:07 UTC	778	OUT	GET /public/css/skin_1/apphubs.css?v=roMLV7kDn_sN&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:08 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:07 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15053678 Expires: Wed, 06 Nov 2024 04:11:45 GMT
2024-05-15 22:37:08 UTC	11070	IN	Data Raw: 32 62 33 36 0d 0a 0d 0a 2f 2a 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 66 6f 72 20 6e 6f 77 20 2a 2f 0d 0a 62 6f 64 79 0d 0a 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 62 32 38 33 38 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 31 30 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2e 61 70 70 48 75 62 73 48 65 61 64 65 72 42 47 0d 0a 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 69 6d 61 67 65 73 2f 61 70 70 68 75 62 73 2f 68 6f 6d 65 5f 62 61 6e 6e 65 72 5f 74 6f 70 2e 6a 70 67 27 29 3b 0d 0a 09 62 Data Ascii: 2b36/* override the background for now */body{background: #1b2838;background-position: 0 105px;}.appHubsHeaderBG{background-image:url('https://community.cloudflare.steamstatic.com/public/images/apphubs/home_banner_top.jpg');b
2024-05-15 22:37:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50099	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:07 UTC	645	OUT	GET /steam/apps/2344520/capsule_616x353_alt_assets_1.jpg?t=1715714373 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:07 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 107192 Last-Modified: Tue, 14 May 2024 19:11:50 GMT ETag: "6643b776-1a2b8" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=506569 Expires: Tue, 21 May 2024 19:19:56 GMT Date: Wed, 15 May 2024 22:37:07 GMT Connection: close
2024-05-15 22:37:07 UTC	16041	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 00 02 08 01 09 ff c4 00 4a 10 00 02 01 03 02 04 05 01 04 09 03 02 05 02 03 09 01 02 03 04 05 11 00 21 06 12 31 41 07 13 22 51 61 71 08 14 32 81 15 23 42 52 Data Ascii: JFIFCCahJ!1A"Qaq2#BR
2024-05-15 22:37:07 UTC	16384	IN	Data Raw: 6c c5 8a a9 c9 70 d8 08 7b 1c 7f 2d 1d 94 9a d1 25 06 ad 47 3d d0 3c 95 bf e1 7f 11 5b 38 77 83 78 92 4a 67 4a da ca aa 6f 20 ab 13 84 2c d8 cf 2f b8 5c 9c 9e bd 35 e8 f0 38 8a 74 30 d5 48 bb 88 8f 7d 05 d7 9f c6 d1 7d 5a f4 c1 b0 69 9f 7e 68 c3 83 ab 6a 69 24 a7 ab 13 08 69 1c 28 94 43 fa c0 ca 4f 5c f7 18 19 d6 9e 05 cf 6c 54 98 69 d6 2e 90 c4 b5 ae 05 91 2e da 6c 8e aa 2f 34 94 f4 1f 7d 96 41 14 51 86 32 4b 21 08 14 83 b1 39 e8 31 af 42 1e 0d c2 c8 ca 41 85 54 f1 f7 db 6f c2 ff 00 0f 68 24 86 bf 8a 28 eb ab 70 54 43 6b 1f 79 63 f0 0a 9e 5c f6 c6 73 9e da 20 7d 97 46 19 ce 32 05 97 2f 71 a7 da 7f c7 ae 30 bf 52 dd 7c 3e f0 eb 89 6c 7c 27 0b 08 e0 4a bb 4f 9b 25 ce 67 d9 5a 5e 64 3e 5c 58 c0 1c 84 00 49 66 93 a0 50 90 e9 f0 9d 53 f1 48 37 c6 24 fb f7 7f Data Ascii: lp{-%G=<[8wxJgJo ,/\58t0H}}Zi~hji$i(CO\lTi..l/4}AQ2K!91BAToh$(pTCkyc\s }F2/q0R\|>l\|'JO%gZ^d>\XIfPSH7$
2024-05-15 22:37:07 UTC	3519	IN	Data Raw: ae 23 e2 1b dd b2 d1 73 b8 51 44 f5 50 d7 56 45 0b 89 7f 09 f4 b3 0c 06 70 48 1d c1 18 d7 b5 05 85 c4 83 7e ab c9 55 a2 fa 6f 34 c0 30 37 85 64 30 77 a7 20 05 c8 00 87 ce 43 ff 00 81 8d 31 9d d0 78 a5 9a 00 70 bd 90 77 88 12 4d 43 c0 5c 49 53 0c 08 f3 ad be a1 a3 32 82 53 98 46 dd 71 d4 7c 6c 48 d6 43 c3 34 cb 79 5a d4 8c b8 78 97 cd cf 0f a9 85 9d ed 7c 4f 59 31 37 4b d3 b5 c0 b1 5c aa d3 99 08 85 57 3d 03 61 9f 07 a6 54 6b c6 f6 a5 53 5a a3 a9 8d 1b 6f 3d 49 f2 d1 7d 07 07 4e 28 df 79 f4 e0 ba c6 87 c6 3b 6f 0e d9 aa af b5 af 2d 5c 74 91 83 4b 44 9e 90 6a 19 79 55 39 86 ea 25 7c 2b 0e a4 1c 80 31 9d 1b b2 dc 47 88 8b 46 9c 7e fd 4a f3 d8 ca 47 36 50 6f 3a f0 ff 00 9b 2e 57 f1 86 cd 07 1e 4b 59 c5 5c 5b 4f 0c b7 aa f7 56 9e 4f 32 45 34 47 a2 43 08 ce d1 Data Ascii: #sQDPVEpH~Uo407d0w C1xpwMC\IS2SFq\|lHC4yZx\|OY17K\W=aTkSZo=I}N(y;o-\tKDjyU9%\|+1GF~JG6Po:.WKY\[OVO2E4GC
2024-05-15 22:37:07 UTC	16384	IN	Data Raw: dc f4 5e 8b b3 ea 45 33 48 ff 00 b5 bc d7 94 54 11 32 64 0c 02 00 dc 60 81 9d 6d 36 1c 3a af 3c 49 63 e3 81 52 31 d2 85 29 c9 9c e3 19 1b 1c e7 af d7 18 d2 d8 2f eb ab 52 97 98 e8 7f 6b 47 1e 3b ca 4c aa 3a 1e a3 45 0f 25 2b 47 78 9a 70 a0 00 71 95 d8 1f f7 d2 18 ea 43 39 a9 c1 6a f6 7d 79 a2 29 71 54 f7 8f de 2b 5c b8 63 f4 7f 08 f0 95 5d 35 3f 1a 5e 25 86 28 2a 2a 00 65 a6 49 24 e4 0d 8d f2 c4 e7 19 04 00 18 e0 9c 6b 5b b3 29 cd 33 5e b0 f0 83 eb ba 47 1c 03 aa 0a 4c d4 8b c7 be 4a b2 f1 e3 c3 ce 3d f0 4a aa 9a a2 97 c4 d9 f8 c6 e6 a9 e4 55 d2 56 49 32 10 e8 3d 4d 1f 24 9c a1 71 be 1b 0c 46 fb eb 53 0b da 0c af 54 d1 a8 d0 22 6e 20 8f 3b 24 ea f6 79 14 85 5a 5a 18 b1 b2 87 f0 53 c6 7f 12 f8 c4 dc a9 eb 29 97 8b 22 8a 14 92 1b 7d 5b c7 49 3a 29 7c 79 86 Data Ascii: ^E3HT2d`m6:<IcR1)/RkG;L:E%+GxpqC9j}y)qT+\c]5?^%(**eI$k[)3^GLJ=JUVI2=M$qFST"n ;$yZZS)"}[I:)\|y
2024-05-15 22:37:07 UTC	16384	IN	Data Raw: 0f a1 83 8b 20 a9 a5 34 32 45 58 19 58 cf 4a e5 a6 05 98 00 16 3e b2 c4 d8 51 8c 65 0e fb 0c e9 f0 4d 16 1e f6 00 1b fe 7d c2 cf 88 7f f5 49 04 dc 6e 3f 23 86 eb af fc 1f f0 56 8f c1 3e 1f 97 ee f2 a5 d6 b6 ba 4f bd 56 57 43 b2 ce db f9 71 83 da 14 04 81 9d c9 2c df b5 81 f3 2a bd b4 dc 5d 72 32 90 1a 6c 0e a7 af 3e 5c 17 ad 67 66 9a 54 b3 4c c8 b9 1b 7e be ea 56 eb 0d 4d 5d da 1a ba ba d7 69 a4 62 11 56 32 02 01 d0 01 db a7 41 a2 f7 84 99 76 a9 4e ec 68 dd 14 37 1e d3 5b 21 e1 0b d0 13 91 14 74 e6 59 52 a1 01 08 79 b6 3b 74 62 c4 6c 77 25 b1 d4 ea df 14 42 35 12 45 49 3e fd 84 4b 45 52 94 16 7a 39 29 a3 35 25 69 e1 85 23 0e 14 c9 29 4d 94 b1 d9 07 a7 25 8f 40 31 82 70 0e 26 35 94 7b ea 80 d9 a0 91 6d 48 05 6d e0 6a d5 34 c0 d4 90 0d f6 49 d4 71 35 ce 4a Data Ascii: 42EXXJ>QeM}In?#V>OVWCq,*]r2l>\gfTL~VM]ibV2AvNh7[!tYRy;tblw%B5EI>KERz9)5%i#)M%@1p&5{mHmj4Iq5J
2024-05-15 22:37:07 UTC	7952	IN	Data Raw: db 3a 35 6e d1 c3 33 16 d2 19 e0 74 92 08 92 4c 58 1b f9 db 4e 0b 3f 0f 86 ac 69 91 9f c4 2d 3a 44 1d be 89 c7 fe 72 a3 b6 a4 31 51 d0 44 aa 32 5a 9e 65 cb 96 3b 7a 33 d0 00 73 83 db 4c e3 3b 76 83 58 29 50 a2 04 49 f1 09 83 ca 74 1c 8e 9c 10 e9 f6 5d 6a 8e 2e a8 f2 79 83 02 39 c7 1e 21 45 de d2 4b dc 4d 04 71 3d 64 f5 32 2c 91 d5 2e 54 20 1b 08 f0 3a 8c 1c e0 ed af 08 e7 be b3 89 8c ce 71 d7 ed 65 b5 44 36 81 04 9c ad 68 82 38 f3 be fc f5 40 de 29 d6 a7 0f 58 d6 ca 83 ef b7 28 a5 49 64 ac 93 38 42 54 e5 40 ee 3a 1c ff 00 8d 1d 8d 0d 78 a6 eb c5 cf e1 6c 76 65 23 89 a9 df fc 2d 20 80 38 df 55 43 cf 5b 59 44 5c 79 ac 85 ff 00 01 90 86 ce fd 71 d8 67 e7 5b f4 83 75 68 ea bd 81 a7 4e b7 c4 01 8e 16 ff 00 a8 63 8a 78 9a b0 2f 90 d5 6c b2 38 2c d2 46 7d 41 7f Data Ascii: :5n3tLXN?i-:Dr1QD2Ze;z3sL;vX)PIt]j.y9!EKMq=d2,.T :qeD6h8@)X(Id8BT@:xlve#- 8UC[YD\yqg[uhNcx/l8,F}A
2024-05-15 22:37:07 UTC	16384	IN	Data Raw: 03 62 35 64 32 12 94 f9 0f 96 23 1f 5c eb 8e 16 b2 b3 04 14 43 4b 19 78 c1 03 03 6c 9c 6b 35 e6 0a d3 63 49 0a 62 8e 18 f9 98 01 ce 30 07 ab 6c 0d 24 f7 15 a3 4d 81 3d 8e 9e 5a 9a 95 60 49 d8 02 fc a7 00 76 fc f4 12 e0 d6 a2 06 39 ee 94 73 53 6c a5 a5 a5 a3 4a 39 96 49 76 66 e6 dc b1 fa 76 18 ef db 58 6c aa f7 b9 c6 a0 b7 bd d6 8b e9 35 80 06 99 56 af 80 0a 6f 9c 52 f5 b5 15 6d 03 53 7a 60 a2 80 02 0e 3f 7c 9e d8 c9 c8 fa 1d 79 9e db 8a 14 05 36 89 cd a9 3f 65 a3 81 9a 95 0b 8d a3 65 d6 36 4b a5 2d 1e 27 42 93 73 10 04 87 70 e0 9f 50 03 be f8 19 ed be be 7c 4b 9b 62 b6 dc cc e8 b5 b8 e2 8e da 1e 28 62 aa 9e 37 70 64 f2 80 1c a4 e7 7e b9 3a ab 1e 09 b8 81 ca d2 91 76 0e ad 4b 92 27 d7 f4 a6 64 b9 4d 5f 49 4d 15 2c 89 01 91 7c c3 cc 47 98 17 3e e3 f0 8c 0d Data Ascii: b5d2#\CKxlk5cIb0l$M=Z`Iv9sSlJ9IvfvXl5VoRmSz`?\|y6?ee6K-'BspP\|Kb(b7pd~:vK'dM_IM,\|G>
2024-05-15 22:37:07 UTC	14144	IN	Data Raw: 89 c7 60 06 8a d7 d4 ee c7 78 6e 6e 7e c3 ee 57 32 34 3e db 21 bb f5 44 fe 55 32 97 ff 00 ba 8e 3c d2 c0 1c e7 7c 7b 0d b1 ee 75 46 1d 51 88 98 0a aa b9 c7 32 54 cc 4b 12 71 8e 66 18 19 ff 00 1a d6 a6 e0 e0 16 3b da 5a 4a b2 fc 16 92 df c3 f4 ef c4 6d 4f 15 6d ed a4 68 a8 84 c3 2b 48 00 1c d2 60 fe d9 27 00 f6 19 23 73 90 9e 39 ee 04 52 6d 81 17 fc 2d 1c 05 36 39 ae aa eb 90 6c 3e e8 e2 e5 7c a6 e2 2b 87 9a 1d e9 a7 28 cf 3b 55 30 72 0e 77 0b dc e7 3d 3a e9 36 35 80 d8 42 6d ce 71 e6 a3 af 5c 13 4b 51 4c b5 14 95 51 49 3f 37 2c 6b cd ca 5f 3f bd 9f c3 ef 93 d7 5a 1d e0 00 13 71 c9 67 9a 66 f1 aa 8b a5 f0 ef 8b f8 75 84 f1 d2 52 bc 79 07 9b ef 48 b2 ca b9 fd 9c e0 90 77 d8 e3 3a 64 57 6b 08 20 d9 21 dc bc da 11 c5 83 87 6b 6b 2f cb 87 8a 2b 9d 53 19 7c ac Data Ascii: `xnn~W24>!DU2<\|{uFQ2TKqf;ZJmOmh+H`'#s9Rm-69l>\|+(;U0rw=:65Bmq\KQLQI?7,k_?ZqgfuRyHw:dWk !kk/+S\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50100	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:07 UTC	655	OUT	GET /steam/apps/2344520/ss_068ff4b736f39eb4a06721a28dbcb1014ec19336.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:07 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 81923 Last-Modified: Tue, 14 May 2024 17:48:04 GMT ETag: "6643a3d4-14003" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=505586 Expires: Tue, 21 May 2024 19:03:33 GMT Date: Wed, 15 May 2024 22:37:07 GMT Connection: close
2024-05-15 22:37:07 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 07 02 01 00 08 ff c4 00 49 10 00 02 01 02 04 03 06 04 03 05 05 07 03 04 02 03 01 02 03 04 11 00 05 12 21 06 31 41 07 13 22 51 61 71 14 32 81 91 42 a1 b1 15 23 Data Ascii: JFIFCCQXI!1A"Qaq2B#
2024-05-15 22:37:07 UTC	16384	IN	Data Raw: ea d8 b0 62 61 0e 8b 2c 88 87 4c 3a be 5d 76 e4 18 ec 0f 2b f5 c2 de 83 5b 1f 64 1c 22 64 13 96 59 25 a6 74 fd dc 8a a0 07 63 b5 b7 3c d4 f3 df a1 da db 80 e7 41 8c 1b 3e cc b8 6c d1 52 16 59 96 aa 10 a2 44 9d 01 d2 eb c8 2f 20 47 22 09 b5 ae a4 02 70 ca 5b 15 aa 17 49 9c 4d 53 93 ae 4b 55 24 b2 e4 f1 3b 54 88 fb bd 6a 97 1e 22 2d b8 f9 41 b6 27 96 1c 93 77 46 bf 4d 95 c7 d8 91 c4 79 fe 5e f5 49 05 1a d6 d4 c6 b0 ea 11 9a 72 8c c7 ca ed b0 04 d8 5f a6 31 43 13 7a a3 6c d2 4a dc 92 fd c9 f2 4a 49 32 7c 86 9e 29 c2 2c 97 27 ba 45 04 a8 6d c2 fd 2e 7e e7 1b 31 c5 ad 1e 76 7c aa 73 f6 f8 d0 ca 48 32 26 8d a3 a9 ac ac 4a c5 00 dd 61 53 4f ab f8 0e fa ef d2 e0 73 e9 89 bc fc 67 c6 b4 74 71 b7 1b f2 41 4c 52 55 a9 58 a1 66 65 5d 32 6c 0d c7 af f5 c6 fd 23 2d b6 Data Ascii: ba,L:]v+[d"dY%tc<A>lRYD/ G"p[IMSKU$;Tj"-A'wFMy^Ir_1CzlJJI2\|),'Em.~1v\|sH2&JaSOsgtqALRUXfe]2l#-
2024-05-15 22:37:07 UTC	2681	IN	Data Raw: 23 3d c8 fd 57 c1 1c 1b c3 dc 2d 0f 77 97 77 94 dd dd 8b da a0 80 4b 0d 99 c5 c7 84 d8 d8 6c 4e 93 e5 8f 99 c9 9f 36 49 7b fc fd 8d d1 e1 15 ed 29 7c 5b 9e e5 7c 33 c4 5d e2 d0 ad 6d 70 52 b0 99 89 56 42 cd 6d 76 3e 1b ef b5 f9 58 93 c8 03 e9 62 c5 71 db 33 cb 22 be 8a 4f 0e 71 36 7b c5 f3 66 f9 5e 63 99 54 cf 59 14 86 ad 6b 2a 08 13 47 a2 44 26 31 b5 bb a2 aa 49 5e 44 83 b6 1b 26 1c 78 5a 94 15 2e be de 7f 98 d8 e6 e7 76 ec ce 78 a7 8c 73 4a e0 a4 d7 c9 27 78 a4 ad 2d 3c 85 50 46 6f 66 37 3e 1b f4 1d 79 ec 2d 7d d8 f0 c7 e0 93 97 25 7e 0b 2f 60 52 2c 59 cc f1 53 e4 af 52 ec ac 43 2c ca e1 00 52 37 df 60 c7 99 bd f1 9f d6 63 7c 6f 97 40 c3 25 17 5f 25 b7 b5 9e 3f a8 a0 a0 14 63 20 6a 64 9d 2c e0 c1 7b f3 fc 5c b6 37 bf d0 f2 38 8f a7 f4 d1 e5 cd c8 a3 c8 Data Ascii: #=W-wwKlN6I{)\|[\|3]mpRVBmv>Xbq3"Oq6{f^cTYk*GD&1I^D&xZ.vxsJ'x-<PFof7>y-}%~/`R,YSRC,R7`c\|o@%_%?c jd,{\78
2024-05-15 22:37:07 UTC	16384	IN	Data Raw: d4 1e 67 1d c9 30 f0 6b a2 28 26 69 e2 76 81 96 d6 b6 a2 d7 fa d8 75 c1 ba 40 ab 7b 02 67 58 9d 96 e2 e0 8b 91 d4 e3 93 d1 cd 2b 04 98 80 84 93 84 1f c1 f5 04 c5 24 45 61 b1 17 1b f4 c3 08 e8 7d 13 09 61 d0 c6 ec bc 8f 9e 15 68 35 67 6a a2 55 ee c9 3e 2e 96 c7 72 61 e2 80 e2 a3 34 75 0f 1c 2e 1c c9 bd af c8 8e 56 c7 37 68 11 4d 76 58 38 4b 30 8f 85 b3 d8 2b a4 8c ce d0 07 90 20 16 3a f4 30 56 bf a3 10 7e 98 11 75 b4 19 26 ed 32 d9 da 0f 68 47 32 cb f2 dc b2 29 0b d0 35 1d 2d 44 aa fe 15 8e 40 25 0d a4 7f 09 24 10 39 0b 5b a6 31 fa 5c 73 87 29 64 ed b7 fc 2f 43 e6 9c 5b 8c 57 54 87 bc 11 c7 eb c3 74 1c 17 4f 98 a5 24 79 7c 31 d6 53 45 51 1d cb a6 b6 01 9a 4d fc f4 9f 6c 52 4e 39 1c b1 b5 f0 77 17 1a 9a 3e e3 0e d7 33 1a 3a 2c c0 e5 93 c6 a9 25 6c d0 40 ad Data Ascii: g0k(&ivu@{gX+$Ea}ah5gjU>.ra4u.V7hMvX8K0+ :0V~u&2hG2)5-D@%$9[1\s)d/C[WTtO$y\|1SEQMlRN9w>3:,%l@
2024-05-15 22:37:07 UTC	16384	IN	Data Raw: 37 f0 9f 50 46 1e 12 94 1e 9d 02 50 b5 b4 52 73 fc e2 4e 1e 87 e0 df 3b a8 78 34 69 10 71 02 85 b0 f2 8e 7b 15 7f 2b 38 3e a7 1a e1 8f ea 6e b7 f6 fe c6 79 3e 3a bf e3 fd cc 93 3d cb 1f 32 a9 79 b2 b9 28 52 6b f7 86 15 b4 06 4f 55 0a c6 27 ff 00 a4 83 e9 8d f0 7c 55 4e ff 00 cf e6 64 92 6d fb 7f cf e8 52 33 19 aa a8 a6 29 98 e5 fa 24 4e 7f ba d3 e9 6d 8d bf 2c 5a 2a 2f 71 64 5d ad 49 0b 9d 23 ab 8c c9 1c 86 95 c7 40 be 1f c8 ed f4 18 b2 4d 7d c5 d3 05 7c ae b1 c4 92 53 37 7f a0 78 a5 81 af 60 7c c0 df ee 31 dc a3 d3 39 45 f8 21 fd a1 2b 53 9a 7a 96 79 11 4f e1 65 1e 63 e9 85 70 dd a1 94 b5 4c fa 92 a4 53 19 7b d4 49 53 4e c5 8d ee 6e 36 36 3e 9c ff 00 2c 3b 8f c1 ca 55 d8 4d 7f 10 bc d4 ab 4c bd f2 10 c1 dd a5 b3 31 03 a5 ba 6f d0 e0 45 79 2b 2d 68 af a7 Data Ascii: 7PFPRsN;x4iq{+8>ny>:=2y(RkOU'\|UNdmR3)$Nm,Z*/qd]I#@M}\|S7x`\|19E!+SzyOecpLS{ISNn66>,;UML1oEy+-h
2024-05-15 22:37:07 UTC	7952	IN	Data Raw: 86 49 86 53 54 65 b2 58 ca d1 17 e4 02 93 19 fa 5f 03 7e 02 ab c8 ea 18 65 28 9d da 4b 14 76 fc 4f 7b 8f 32 56 f8 9b 74 3d 58 ca 8e 87 4c 6c cb 26 e3 73 68 c8 07 ea 6e 4e 05 b6 35 50 41 9c 2c 63 46 89 d3 ae 9d 89 fa 5f f5 c7 1c 79 4d 45 4d 24 8c f1 14 d5 cd 94 a8 4d 20 f9 5c 6f 8e 77 e4 16 8e ea 21 29 22 2a cc 84 0d 82 ab ec 3e 83 6f be 0a b1 5d 1f 4a 8d 0b ac 8c 8d 2b 74 67 23 6f 3e 67 6c 15 24 f4 0a 68 4b 5f 95 53 ce cb de 09 90 83 a8 18 c9 62 3d 87 43 ea 71 45 21 2a c6 d9 3c 31 52 c5 f0 ce c5 22 2b 61 19 36 b0 bf 98 fe 77 c2 37 7b 19 2d 0d 1a 9a 37 4d 02 40 10 1f 0a 5c 69 1e 5c f9 e3 90 f4 2d cd 59 e1 03 45 2b 2c 8b b5 ee 48 df 99 1f 4c 32 fc 88 ff 00 06 1f fd a6 72 a6 cc 78 4a 82 bd a2 d2 f4 55 26 23 61 f8 64 53 b5 ef e6 a3 ef 8d 3e 9a 55 26 8c f9 e3 Data Ascii: ISTeX_~e(KvO{2Vt=XLl&shnN5PA,cF_yMEM$M \ow!)">o]J+tg#o>gl$hK_Sb=CqE!<1R"+a6w7{-7M@\i\-YE+,HL2rxJU&#adS>U&
2024-05-15 22:37:07 UTC	6096	IN	Data Raw: 3f 80 8a 79 a3 91 83 82 59 fa 9b 5b 0b b0 d8 ca 9f 31 2d a4 2a af 9f 9d be d8 14 8e 4c fa 5a a6 86 32 da 50 48 4e d6 3b e0 2d 87 47 2f a2 7a 59 29 9e 16 09 22 94 66 8c ee 41 e7 ff 00 9c 3c 5d 31 64 ad 51 96 d6 76 3b 53 93 e6 7f b4 b8 76 bd 29 82 a9 bc 15 44 92 c0 f3 50 6d d7 1e 8a f5 2a 51 ac 88 f3 9f a6 e3 2b c6 c1 f8 83 b1 6f f6 82 9c 55 65 aa 32 bc c6 df bc a4 be b8 9c f9 a9 e6 2f 83 0f 55 c1 d4 b6 81 3f 4b c9 5c 74 c5 5c 35 d8 56 79 41 9c 53 4d 9a 54 d2 d0 41 03 09 19 92 50 ee 2d bd 80 1f cf 14 9f ac 83 8b 51 56 4b 1f a5 9a 77 27 47 e8 11 98 b3 42 91 15 50 ab b0 65 04 ea 1e d8 f2 bf 07 a8 be 18 af 89 72 da 4c db 87 73 2a 3a b4 92 68 27 81 96 48 c7 e2 16 e4 06 0c 2d 49 34 19 45 38 b4 7e 61 e0 fe 3a af ec fd 65 a6 a2 8c 4b 0e b6 b2 c8 c5 58 6f cb 6c 7b Data Ascii: ?yY[1-LZ2PHN;-G/zY)"fA<]1dQv;Sv)DPmQ+oUe2/U?K\t\5VyASMTAP-QVKw'GBPerLs*:h'H-I4E8~a:eKXol{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50101	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:07 UTC	655	OUT	GET /steam/apps/2344520/ss_9ba2c9634f88f684f069d42d4de6a42f63b07911.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:07 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 57867 Last-Modified: Tue, 14 May 2024 17:46:35 GMT ETag: "6643a37b-e20b" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=505619 Expires: Tue, 21 May 2024 19:04:06 GMT Date: Wed, 15 May 2024 22:37:07 GMT Connection: close
2024-05-15 22:37:07 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 00 07 08 ff c4 00 46 10 00 02 01 03 02 04 04 04 03 05 07 03 04 02 00 07 01 02 03 00 04 11 12 21 05 31 41 51 13 22 61 71 06 32 81 91 14 a1 b1 23 42 c1 d1 Data Ascii: JFIFCCQXF!1AQ"aq2#B
2024-05-15 22:37:07 UTC	16384	IN	Data Raw: a4 02 d2 9f 32 c7 29 78 97 cb 96 d8 a9 e7 9f e4 6a 91 93 f8 22 6e 5a 15 23 c4 d5 1e 4b 69 6e 54 e8 9b 68 a4 b5 bd da 12 ed a7 1b 0d 47 6f bd 19 41 86 72 38 d9 e4 c2 9c 1e ac 3c d8 03 3c e8 1a 2e 78 55 97 21 80 23 19 23 91 34 82 93 3d 63 20 f1 5d 48 3a c0 f9 76 fb 8a 64 a6 30 ba f0 6e 63 11 47 ad 1b 6d 59 50 02 ef df 97 fc d4 51 b2 69 aa 00 b9 86 32 44 b2 20 68 b2 01 c0 c6 47 2c ff 00 1c 55 2f 44 49 79 65 a4 95 75 54 6f 0e 36 f2 92 09 66 d3 9c ee 28 17 e0 be da cd 38 8d cc aa eb 06 75 69 44 0d 8d 7f 4c d2 d2 29 7d ee 84 93 71 57 b0 b9 9b 13 60 c6 74 85 04 8f 28 e5 cc 55 ac a3 26 fa bd 9e 1f 13 c5 f8 d3 14 af e1 80 c0 ae 83 a4 12 39 7c dc f2 3d 68 eb 80 ee ac 36 79 62 b8 b8 94 c1 2c 40 90 15 93 38 07 96 9f ad 4d 1a 29 26 f0 7d 16 15 24 9e 84 ed 91 40 d2 1a Data Ascii: 2)xj"nZ#KinThGoAr8<<.xU!##4=c ]H:vd0ncGmYPQi2D hG,U/DIyeuTo6f(8uiDL)}qW`t(U&9\|=h6yb,@8M)&}$@
2024-05-15 22:37:07 UTC	3056	IN	Data Raw: d2 a5 3b ba 13 8a 8d 27 85 ff 00 7f 81 e5 84 91 c9 c1 91 ae 18 32 b3 69 2c 8a ae 75 10 48 56 60 30 00 03 91 f5 a6 e4 a3 2e ab 64 2e 37 2e 37 39 6a ff 00 dd b2 88 b8 5d ac 53 b8 78 9d 95 88 f3 2b 90 06 7a ed 5b 5b 39 e9 2c 02 cb 61 6d 67 21 b8 50 62 58 ce ad 4e fb 0a 2d e8 2b 36 85 9c 43 e2 a8 63 57 10 82 e7 a3 36 c3 f9 d4 a4 57 83 27 6b 76 d2 de c9 3c d2 65 df cc 58 82 32 7e 9c aa 9e 88 4a d9 a4 e1 bf 15 3c 76 fa 61 53 1c b1 8c 6a 1b 91 bf cc 47 6e 59 fa 56 0e 19 3b 61 c9 8b 5b 1e 71 1b f1 c7 16 35 9e f2 46 28 aa 1f 4a 8c 3b 74 0b 8e 44 9e 78 ef 55 c6 a9 e8 cf 9a 57 1d 88 ae b8 4b 49 72 2d ee 23 96 da 17 c8 47 61 f3 30 e4 33 b8 cf 61 ca ba ae f4 71 24 97 ee d1 4f 05 b3 96 15 9a c5 23 91 ee a6 6f d8 cc 18 04 0a 01 c8 3e bf ca a5 04 fd 30 e9 6d 12 f9 9e fe Data Ascii: ;'2i,uHV`0.d.7.79j]Sx+z[[9,amg!PbXN-+6CcW6W'kv<eX2~J<vaSjGnYV;a[q5F(J;tDxUWKIr-#Ga03aq$O#o>0m
2024-05-15 22:37:07 UTC	16384	IN	Data Raw: a4 c8 f8 d4 06 53 d7 6f a5 22 d3 76 11 3c ea 91 cf 0b 62 20 83 29 a5 73 ab 7d b6 fb fd a9 15 9c a0 18 a7 37 13 3c 9a 70 5b e5 05 b1 b7 52 33 b7 6a 05 f2 03 7b 0f e1 98 e8 f3 03 fe 5d f3 8c e7 f3 ac cb 28 85 c4 9a de 36 c0 18 04 e7 71 53 ad 85 0d 61 e3 4d 6d a5 e4 05 e2 8c 6a 20 0f 35 3b 1a 2d be e2 d2 78 49 03 94 65 c6 bc 29 07 56 77 ce 47 5d e9 d8 ab 07 a3 f1 92 41 88 d9 50 a8 62 a4 10 48 a1 49 09 a6 3d b4 e2 b0 be a8 a5 65 44 52 01 62 d8 d2 3a 7b 53 b0 5f 21 57 ef 24 c7 08 e1 61 19 00 e7 6c 7a fd aa 2c d2 84 42 da 6b a9 96 7d 1a 5e 2f 29 1c a9 2b d0 52 d9 5f c4 1f 11 db 43 6d 7f 32 3a bb af ec d0 80 4a c8 e0 0e 47 ae fd a8 4b 23 62 de 09 c5 3f 17 e3 5c de cb 05 d4 6c 09 5d 2b e1 ba 8e ec c3 9d 0e ab 25 c6 52 8f ed 28 7e 27 c3 2e b8 81 b1 31 4b 13 3e e8 Data Ascii: So"v<b )s}7<p[R3j{](6qSaMmj 5;-xIe)VwG]APbHI=eDRb:{S_!W$alz,Bk}^/)+R_Cm2:JGK#b?\l]+%R(~'.1K>
2024-05-15 22:37:07 UTC	6000	IN	Data Raw: 30 52 a7 f7 8f 5a ec 52 4c f2 e5 c3 c9 1c 38 b2 30 71 27 b2 46 94 23 4a 10 12 aa 39 03 de a9 b4 b6 4f 1f 14 b9 1b 51 5a 1a 70 0b f6 bd 83 c2 93 52 ba 8d 7a 87 5f 7a 44 69 b4 14 ac 4d d4 a3 56 ac 8f 94 6d 50 ca 45 52 6b 59 7c 44 50 57 18 ce 33 8a 10 82 a2 7c 3a b3 21 c8 52 08 23 18 f5 ab da 24 aa d5 d2 29 e6 93 cd 86 39 04 a9 e7 d7 95 3a b1 27 41 d6 b0 c4 6e 51 8c 84 47 20 0a 4e fb 73 a3 20 38 b8 e2 42 c6 13 1a b8 0a 84 64 e3 9f a7 e8 2a 0d 13 a3 39 2c ef 70 c3 0e 63 12 1e 4b b7 7a 9d 31 ec 0c 2a da 69 68 d4 69 c8 2c d9 dc fb d5 5d 93 54 31 b8 96 25 44 50 d9 70 4e 4f 40 09 d8 7e b4 05 aa 18 c7 c4 4c d6 ef 21 98 47 30 5f 26 39 37 4e 7d f6 a7 41 60 36 1c 54 c6 65 49 14 b8 0f 91 8d f4 38 3b 30 fa 55 55 e8 94 eb 63 eb 74 81 38 74 6a 8e 1e 69 32 e0 3a f2 c9 dc Data Ascii: 0RZRL80q'F#J9OQZpRz_zDiMVmPERkY\|DPW3\|:!R#$)9:'AnQG Ns 8Bd9,pcKz1ihi,]T1%DPpNO@~L!G0_&97N}A`6TeI8;0UUct8tji2:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50102	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:08 UTC	655	OUT	GET /steam/apps/2344520/ss_2f6e682e3e72703728d2502efacefdababa03493.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:08 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 84340 Last-Modified: Tue, 14 May 2024 17:48:48 GMT ETag: "6643a400-14974" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=505576 Expires: Tue, 21 May 2024 19:03:24 GMT Date: Wed, 15 May 2024 22:37:08 GMT Connection: close
2024-05-15 22:37:08 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 02 07 08 01 00 09 ff c4 00 4d 10 00 02 01 02 04 04 03 05 05 05 05 06 04 06 01 05 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 07 14 32 71 81 23 42 91 a1 b1 Data Ascii: JFIFCCQXM!1A"Qa2q#B
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: a3 31 49 0e 4b 96 c6 5a 44 81 5d 82 58 1b b3 00 37 fc f1 39 2d b1 e2 fa 36 4c b9 63 cb c9 a4 8a 9e 49 27 11 05 54 45 be e5 8d 87 e0 41 fa e2 58 67 16 ae f4 1c b1 77 a5 b3 79 7b 2d e1 2a de 07 c9 82 55 44 e2 a6 a1 f9 85 56 c7 45 c0 f0 93 df 71 7b 63 cf f5 13 8e 69 36 99 e8 fa 78 4b 0c 52 68 d9 d9 6e 52 83 2a 8e 18 49 76 89 00 51 2a d8 b7 99 23 d4 e3 cd d4 7d a7 a1 1b 66 51 d1 44 a4 89 c8 8c 36 d6 08 7f 23 db 0a ef c1 4e cf 3f 66 b1 71 ca 48 d9 00 b6 a4 72 09 1d ba e0 59 dc 6c cd 72 46 68 cd 97 96 e7 ea 4f e3 b6 16 d7 91 8e 33 cb c7 ec fa aa 29 e3 72 91 92 46 a2 36 d3 dd 4f e3 f8 1c 7d 5b dd a3 e5 52 ad 97 aa dc d2 ae 97 20 99 72 da 95 49 d1 f9 12 a2 35 83 a3 dc 29 4f 2b ee 3e 66 dd ec 73 a8 a7 2f 72 2d c9 a8 da 65 46 a3 2d 46 a5 c9 ea a0 a9 67 6a 85 34 f5 Data Ascii: 1IKZD]X79-6LcI'TEAXgwy{-UDVEq{ci6xKRhnRIvQ*#}fQD6#N?fqHrYlrFhO3)rF6O}[R rI5)O+>fs/r-eF-Fgj4
2024-05-15 22:37:08 UTC	3050	IN	Data Raw: 1b 63 d9 8f b5 9a 4e 22 ae 7c 87 88 25 8e 1c ca e6 38 e7 9c 2a ad 57 dd 3a 97 a2 b9 ee 3a 1f 9e d8 cd 97 13 5b 5d 7f 43 5e 0c c9 da 7d ff 00 52 dd fb 1b 31 f6 61 50 6b f2 98 ea 2a f8 48 96 35 59 3f c5 25 19 24 5e 48 01 df 48 ea 50 74 be de 58 44 d4 ad 3e ff 00 be ca 71 70 da eb e3 e3 f4 1b d6 e4 14 19 8d 34 59 96 46 63 cc 72 ba 81 aa a3 2c 55 0c 24 46 ea f0 29 1d 7f 7a 23 60 6d e1 d2 76 31 53 77 4f 4c af 1d 5f 6b fb fe e8 a2 ba 67 d9 be 57 34 c8 99 94 dc 01 14 ec 8c f0 ed 5c 63 17 04 3a fc 7c 90 6e 3a 73 00 d8 82 05 f1 65 51 7e 39 7f 2f ff 00 4c ee e4 bc f0 fe 7f fe 16 ac a7 81 8e 4a 8b 9a f0 15 62 45 4f 52 45 52 e5 72 4e c6 82 b1 48 e9 13 75 85 bb 82 36 04 90 76 e9 17 91 4f db 95 6f e7 c9 55 8d c1 72 c4 f5 f0 47 98 71 55 1e 59 57 fb 57 2d cc d7 2c ac 47 Data Ascii: cN"\|%8W::[]C^}R1aPkH5Y?%$^HHPtXD>qp4YFcr,U$F)z#`mv1SwOL_kgW4\c:\|n:seQ~9/LJbEORERrNHu6vOoUrGqUYWW-,G
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 88 c4 f6 8e 18 d4 9b 93 76 25 8f d0 28 ff 00 dd 8a 49 a7 49 09 1b 56 da d0 bb 35 a3 92 0c be 9a 49 14 18 67 d4 57 fe 53 62 7f 1c 74 26 9c 9a 5e 3f e4 32 8d 41 5f 9f f8 0f 96 9d 61 a1 a6 8a 13 cd 86 9e 28 d1 dc 7c 21 d8 16 23 f1 27 f0 c2 b7 6d b1 95 24 a2 0e 5c 14 e9 db 4f f3 c7 24 31 e6 fa 16 e4 03 d3 61 d0 7c b1 c8 16 c8 e3 b1 d4 45 80 bd f7 c1 07 82 27 a9 12 5d 43 69 8f cf cf 0f 18 d6 c9 4a 6a f8 92 7b bc 72 43 7b 02 6e 00 c3 5b 15 c5 33 c8 e5 6d 65 14 b1 5b 7c 57 db 03 4d 58 17 25 ab 30 7b 97 36 2a 4f 72 70 53 a4 73 8b bb 4a cc 05 16 b0 64 2b e1 ee de 47 05 49 13 fa 72 ee 8f a2 84 82 4a b6 c3 6b db 6f 9e 0e 8e f7 2f 24 e1 82 dc dc 03 6d ce 26 68 5d 59 8c 68 d2 93 a7 c4 4d 94 01 de fb 6d eb 82 4d cb b4 8b 25 0d 02 53 88 a8 de 45 49 e7 91 56 69 89 d9 7f Data Ascii: v%(IIV5IgWSbt&^?2A_a(\|!#'m$\O$1a\|E']CiJj{rC{n[3me[\|WMX%0{6*OrpSsJd+GIrJko/$m&h]YhMmM%SEIVi
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: e6 08 fe 43 19 38 fc 9b 7b 7a 2d 34 b0 88 5a 12 90 cb a1 da fa 53 70 b7 f2 c0 7b 4d 1a 22 a9 db 1b 42 94 d4 d6 62 e5 58 6c 58 74 5f 3c 26 d7 45 bb 18 d3 32 b4 4c aa d7 2a db 82 d6 16 3e 98 56 9b d8 63 f0 35 a7 99 50 46 cd e0 b1 d2 48 17 fc 70 ad 0d 7a a0 7a c9 7d f2 71 a4 db 41 0b a9 45 89 be 02 4c 63 09 a3 51 1a 3c b2 29 d2 c0 8d ed de d8 7a d8 a8 e4 5f ed cf c3 f5 71 c9 c3 9c 45 14 65 b2 b8 c4 b4 35 12 2e fc 97 66 d6 87 fe 61 ac 7c c6 3d 6f 41 91 46 e3 e4 f2 fd 7e 37 2a 97 83 9d 7d 9c 66 34 99 0f 15 50 55 d2 c4 8c a9 31 78 e5 96 c1 5a dd 50 dc 58 82 0b ed df 1e 8e 7c 8d db 47 99 8b 13 69 2f 80 f8 6b aa 5d 0d 24 39 b4 d2 65 8a ed 22 65 ea e4 44 84 92 4d 96 fe bb 9c 52 11 a5 6d 6c 49 c9 bb 49 e8 dd fe c2 bd 8a 51 71 75 29 ce f8 85 64 7c b5 1c ad 35 10 05 Data Ascii: C8{z-4ZSp{M"BbXlXt_<&E2L>Vc5PFHpzz}qAELcQ<)z_qEe5.fa\|=oAF~7}f4PU1xZPX\|Gi/k]$9e"eDMRmlIIQqu)d\|5
2024-05-15 22:37:08 UTC	7952	IN	Data Raw: 7c f3 e4 a9 49 98 4f 42 95 35 6f 22 40 f5 08 c2 3f 01 20 1d 8b 58 0e 84 8b f5 f5 c1 8c 39 7b 7a 2f c9 47 dd 56 c8 ce 7a c5 1e a3 9d 14 0f cd e5 34 51 10 e4 b0 df 46 be 9a 48 3f 78 03 8b 2c 64 fe a5 f6 2a cc 33 69 e9 eb 58 a2 41 25 4c 41 83 cc b1 8e 69 5d 88 41 a4 7c 44 95 52 3b dc 1e d7 c6 98 c3 92 af 04 25 3e 3f a9 4e 87 85 f3 38 64 ca f2 89 f3 69 2b 5a 49 84 73 4c d0 68 6f 84 96 20 96 3a b4 aa f5 3d 48 be d7 c7 a9 04 a7 2f 6a 3c d7 ca 31 a9 32 c5 97 51 66 1c 3f 47 ee d2 54 3e 69 4e 83 93 1b d4 00 67 52 77 03 6e a0 28 36 ef d3 7d f0 ed 3e e5 fd fe c4 52 5d 22 cd 90 66 9f b1 28 f4 1a 72 d2 30 24 34 8b 61 73 7f d3 11 e1 72 e4 99 aa 32 e3 1e 2c 03 35 cd 1e a2 ae 9e 33 18 59 a7 36 d4 36 0b 61 e2 6d fe 96 f5 38 bc 62 df 5d 91 6f bb 24 a4 f7 b8 9e 4a 5a 23 1c Data Ascii: \|IOB5o"@? X9{z/GVz4QFH?x,d*3iXA%LAi]A\|DR;%>?N8di+ZIsLho :=H/j<12Qf?GT>iNgRwn(6}>R]"f(r0$4asr2,53Y66am8b]o$JZ#
2024-05-15 22:37:08 UTC	8144	IN	Data Raw: 95 aa bf e1 02 2c 48 23 7f 2d bc c0 c4 fe 9b 51 72 5d fc 0d 7e 18 56 45 95 cf 47 ae 9a 0c d6 1a cc ba a5 2c cd 34 86 cd d6 d6 e8 54 f4 f9 62 72 92 7b 71 a6 34 50 ce 3c ae 2c 96 81 63 a3 ab fb 49 01 12 80 e5 b7 ea 4a ad f7 b5 ad 7e bb f7 c1 fb f6 d1 5a 4a 3a 2e 3c 1b 5d 25 04 4b 11 99 aa b5 16 46 57 98 99 a2 6b ee 4f 98 b1 1d 06 24 d2 ec a6 37 45 f3 2d cc f9 d1 49 1c 85 26 94 9b 98 64 f0 b9 b6 de 13 b0 23 be 29 14 6c 52 b4 3c ca a1 87 32 4a 1a 88 27 14 b3 c0 24 2a 08 b3 ab ee 00 df b0 bf cb cb 1a 1d 57 17 b0 25 7b 5a 0f a7 ca 2b 7d f6 57 ab b7 36 45 d0 67 8a a5 89 07 b3 14 6e 86 d7 e9 f5 c6 98 38 a5 48 8b 8b bb 66 8e fe d2 7c 39 51 59 94 65 62 81 1e 64 a4 91 ea 0c a4 b0 69 e5 22 d2 11 73 6d c0 04 58 6c 41 03 1e c6 0c 6e 71 72 8f 6b c1 e4 7a 89 a8 35 1f 1f Data Ascii: ,H#-Qr]~VEG,4Tbr{q4P<,cIJ~ZJ:.<]%KFWkO$7E-I&d#)lR<2J'$*W%{Z+}W6Egn8Hf\|9QYebdi"smXlAnqrkz5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50103	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:08 UTC	424	OUT	GET /steam/apps/2344520/ss_9ba2c9634f88f684f069d42d4de6a42f63b07911.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:08 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 57867 Last-Modified: Tue, 14 May 2024 17:46:35 GMT ETag: "6643a37b-e20b" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=505619 Expires: Tue, 21 May 2024 19:04:07 GMT Date: Wed, 15 May 2024 22:37:08 GMT Connection: close
2024-05-15 22:37:08 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 00 07 08 ff c4 00 46 10 00 02 01 03 02 04 04 04 03 05 07 03 04 02 00 07 01 02 03 00 04 11 12 21 05 31 41 51 13 22 61 71 06 32 81 91 14 a1 b1 23 42 c1 d1 Data Ascii: JFIFCCQXF!1AQ"aq2#B
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: a4 02 d2 9f 32 c7 29 78 97 cb 96 d8 a9 e7 9f e4 6a 91 93 f8 22 6e 5a 15 23 c4 d5 1e 4b 69 6e 54 e8 9b 68 a4 b5 bd da 12 ed a7 1b 0d 47 6f bd 19 41 86 72 38 d9 e4 c2 9c 1e ac 3c d8 03 3c e8 1a 2e 78 55 97 21 80 23 19 23 91 34 82 93 3d 63 20 f1 5d 48 3a c0 f9 76 fb 8a 64 a6 30 ba f0 6e 63 11 47 ad 1b 6d 59 50 02 ef df 97 fc d4 51 b2 69 aa 00 b9 86 32 44 b2 20 68 b2 01 c0 c6 47 2c ff 00 1c 55 2f 44 49 79 65 a4 95 75 54 6f 0e 36 f2 92 09 66 d3 9c ee 28 17 e0 be da cd 38 8d cc aa eb 06 75 69 44 0d 8d 7f 4c d2 d2 29 7d ee 84 93 71 57 b0 b9 9b 13 60 c6 74 85 04 8f 28 e5 cc 55 ac a3 26 fa bd 9e 1f 13 c5 f8 d3 14 af e1 80 c0 ae 83 a4 12 39 7c dc f2 3d 68 eb 80 ee ac 36 79 62 b8 b8 94 c1 2c 40 90 15 93 38 07 96 9f ad 4d 1a 29 26 f0 7d 16 15 24 9e 84 ed 91 40 d2 1a Data Ascii: 2)xj"nZ#KinThGoAr8<<.xU!##4=c ]H:vd0ncGmYPQi2D hG,U/DIyeuTo6f(8uiDL)}qW`t(U&9\|=h6yb,@8M)&}$@
2024-05-15 22:37:08 UTC	3056	IN	Data Raw: d2 a5 3b ba 13 8a 8d 27 85 ff 00 7f 81 e5 84 91 c9 c1 91 ae 18 32 b3 69 2c 8a ae 75 10 48 56 60 30 00 03 91 f5 a6 e4 a3 2e ab 64 2e 37 2e 37 39 6a ff 00 dd b2 88 b8 5d ac 53 b8 78 9d 95 88 f3 2b 90 06 7a ed 5b 5b 39 e9 2c 02 cb 61 6d 67 21 b8 50 62 58 ce ad 4e fb 0a 2d e8 2b 36 85 9c 43 e2 a8 63 57 10 82 e7 a3 36 c3 f9 d4 a4 57 83 27 6b 76 d2 de c9 3c d2 65 df cc 58 82 32 7e 9c aa 9e 88 4a d9 a4 e1 bf 15 3c 76 fa 61 53 1c b1 8c 6a 1b 91 bf cc 47 6e 59 fa 56 0e 19 3b 61 c9 8b 5b 1e 71 1b f1 c7 16 35 9e f2 46 28 aa 1f 4a 8c 3b 74 0b 8e 44 9e 78 ef 55 c6 a9 e8 cf 9a 57 1d 88 ae b8 4b 49 72 2d ee 23 96 da 17 c8 47 61 f3 30 e4 33 b8 cf 61 ca ba ae f4 71 24 97 ee d1 4f 05 b3 96 15 9a c5 23 91 ee a6 6f d8 cc 18 04 0a 01 c8 3e bf ca a5 04 fd 30 e9 6d 12 f9 9e fe Data Ascii: ;'2i,uHV`0.d.7.79j]Sx+z[[9,amg!PbXN-+6CcW6W'kv<eX2~J<vaSjGnYV;a[q5F(J;tDxUWKIr-#Ga03aq$O#o>0m
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: a4 c8 f8 d4 06 53 d7 6f a5 22 d3 76 11 3c ea 91 cf 0b 62 20 83 29 a5 73 ab 7d b6 fb fd a9 15 9c a0 18 a7 37 13 3c 9a 70 5b e5 05 b1 b7 52 33 b7 6a 05 f2 03 7b 0f e1 98 e8 f3 03 fe 5d f3 8c e7 f3 ac cb 28 85 c4 9a de 36 c0 18 04 e7 71 53 ad 85 0d 61 e3 4d 6d a5 e4 05 e2 8c 6a 20 0f 35 3b 1a 2d be e2 d2 78 49 03 94 65 c6 bc 29 07 56 77 ce 47 5d e9 d8 ab 07 a3 f1 92 41 88 d9 50 a8 62 a4 10 48 a1 49 09 a6 3d b4 e2 b0 be a8 a5 65 44 52 01 62 d8 d2 3a 7b 53 b0 5f 21 57 ef 24 c7 08 e1 61 19 00 e7 6c 7a fd aa 2c d2 84 42 da 6b a9 96 7d 1a 5e 2f 29 1c a9 2b d0 52 d9 5f c4 1f 11 db 43 6d 7f 32 3a bb af ec d0 80 4a c8 e0 0e 47 ae fd a8 4b 23 62 de 09 c5 3f 17 e3 5c de cb 05 d4 6c 09 5d 2b e1 ba 8e ec c3 9d 0e ab 25 c6 52 8f ed 28 7e 27 c3 2e b8 81 b1 31 4b 13 3e e8 Data Ascii: So"v<b )s}7<p[R3j{](6qSaMmj 5;-xIe)VwG]APbHI=eDRb:{S_!W$alz,Bk}^/)+R_Cm2:JGK#b?\l]+%R(~'.1K>
2024-05-15 22:37:08 UTC	6000	IN	Data Raw: 30 52 a7 f7 8f 5a ec 52 4c f2 e5 c3 c9 1c 38 b2 30 71 27 b2 46 94 23 4a 10 12 aa 39 03 de a9 b4 b6 4f 1f 14 b9 1b 51 5a 1a 70 0b f6 bd 83 c2 93 52 ba 8d 7a 87 5f 7a 44 69 b4 14 ac 4d d4 a3 56 ac 8f 94 6d 50 ca 45 52 6b 59 7c 44 50 57 18 ce 33 8a 10 82 a2 7c 3a b3 21 c8 52 08 23 18 f5 ab da 24 aa d5 d2 29 e6 93 cd 86 39 04 a9 e7 d7 95 3a b1 27 41 d6 b0 c4 6e 51 8c 84 47 20 0a 4e fb 73 a3 20 38 b8 e2 42 c6 13 1a b8 0a 84 64 e3 9f a7 e8 2a 0d 13 a3 39 2c ef 70 c3 0e 63 12 1e 4b b7 7a 9d 31 ec 0c 2a da 69 68 d4 69 c8 2c d9 dc fb d5 5d 93 54 31 b8 96 25 44 50 d9 70 4e 4f 40 09 d8 7e b4 05 aa 18 c7 c4 4c d6 ef 21 98 47 30 5f 26 39 37 4e 7d f6 a7 41 60 36 1c 54 c6 65 49 14 b8 0f 91 8d f4 38 3b 30 fa 55 55 e8 94 eb 63 eb 74 81 38 74 6a 8e 1e 69 32 e0 3a f2 c9 dc Data Ascii: 0RZRL80q'F#J9OQZpRz_zDiMVmPERkY\|DPW3\|:!R#$)9:'AnQG Ns 8Bd9,pcKz1ihi,]T1%DPpNO@~L!G0_&97N}A`6TeI8;0UUct8tji2:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50104	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:08 UTC	655	OUT	GET /steam/apps/2344520/ss_eb1f3f7fb6ed95feb162011fbbe24b24d6ed5e41.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:08 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 61474 Last-Modified: Tue, 14 May 2024 17:49:26 GMT ETag: "6643a426-f022" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=505579 Expires: Tue, 21 May 2024 19:03:27 GMT Date: Wed, 15 May 2024 22:37:08 GMT Connection: close
2024-05-15 22:37:08 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 07 00 08 ff c4 00 4c 10 00 02 01 02 04 04 04 03 06 05 02 03 06 04 04 07 01 02 03 04 11 00 05 12 21 13 31 41 51 06 22 61 71 32 81 91 14 23 42 a1 b1 f0 07 Data Ascii: JFIFCCQXL!1AQ"aq2#B
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 31 44 a1 83 0e 64 fd 3f be 29 21 36 8e 2c 53 d4 46 f2 85 8a 12 df 11 d8 ea 22 f8 6a 12 d3 f0 c2 f8 96 ba 39 1d ec 75 48 c3 a2 5b 56 92 79 7a 0b 7b ee 7a 63 55 d1 86 5d 8a e9 26 69 15 18 b7 16 29 c2 b4 87 fa 09 b8 1f 9d f0 86 9d 1c 10 8f 47 1c 11 40 ce d3 33 08 c8 d8 b0 b0 ea 7a 5e ff 00 96 0a 09 1c cb ea 2b 0b 53 e9 1c 42 8e 03 a8 bf 98 0d f7 f7 eb 80 29 ba 86 2a 7a b8 4c 72 46 61 91 58 92 ca 3c bc f6 b7 6c 45 68 d6 26 82 e9 33 0d 54 4c 4a b8 d0 4a 10 e3 4d ed d4 60 68 31 7a 03 35 08 e4 82 46 e6 fb 9f d3 0a 15 40 73 3d 00 2a a5 82 b1 d8 a8 1f 96 04 19 2d c1 44 f5 32 c7 a7 4b 5d 94 f5 fd 31 68 cd d0 59 ea 64 95 23 7e 12 16 0d bb 13 6b 74 c3 27 f6 c0 1a 24 e2 c9 33 8f 3c 7b 79 36 27 fc fc b0 50 58 fa 05 25 62 d5 3b 42 91 80 ec 2c ac cb b8 3e 98 68 5d e8 26 Data Ascii: 1Dd?)!6,SF"j9uH[Vyz{zcU]&i)G@3z^+SB)zLrFaX<lEh&3TLJJM`h1z5F@s=-D2K]1hYd#~kt'$3<{y6'PX%b;B,>h]&
2024-05-15 22:37:08 UTC	2591	IN	Data Raw: a3 3e 7c ae 9d 88 4a ba 64 ab 65 3e 55 95 43 11 fe 30 50 81 2d 04 14 fa 9a 2a 28 62 d2 37 d1 18 1a 47 a6 d8 45 1e 1d fc 56 fe 20 48 3c 43 5b 97 e5 94 f4 ab 05 11 55 ac 73 10 66 96 42 03 02 4f 40 2f 6f 7b e2 d5 c4 49 63 f2 5b e0 d3 f8 73 fc 42 a5 ab 64 ca ea 69 7e c5 53 2c 7a a0 74 f8 25 03 98 0b cc 1f 4e 5d ad cb 0a be d8 de 18 e2 a6 26 f6 0c bd 6b 23 0e b3 32 82 2e ab 8a e4 65 c0 ba 8b 26 5c b2 39 27 5d 7c 43 72 6c 76 b8 ff 00 6c 27 97 2e c7 87 c6 b0 da 08 a5 ae 8e 47 01 b7 8a 53 b9 22 e4 7b 1c 43 36 c5 d2 13 43 1d 1c 92 08 a5 d0 e7 73 a5 7d 36 df 02 74 24 b1 92 a2 cd 92 a0 98 6b 15 55 ba 6f cf 12 f1 fa 34 c3 e4 f3 22 9a fc a5 66 7e 2c 0e 09 ec 7b 5f 7c 25 93 5d 94 f1 4f 68 0a 45 65 2d 0c c0 94 ee 70 ff 00 62 da d3 00 a8 a5 43 53 18 68 f5 25 c0 0c 0e 1a Data Ascii: >\|Jde>UC0P-*(b7GEV H<C[UsfBO@/o{Ic[sBdi~S,zt%N]&k#2.e&\9']\|Crlvl'.GS"{C6Cs}6t$kUo4"f~,{_\|%]OhEe-pbCSh%
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 2b 5a fb 0f 6c 46 cd 94 f0 3a 88 50 4a 0b aa 84 50 7c bb 73 b7 32 3d 30 f6 90 aa 65 b9 89 49 95 4c 47 ce 2f 63 a6 f6 c0 a8 dc 16 d3 4f 1e 5b 32 06 66 65 e5 a9 89 b9 3f e3 15 2a 33 59 46 68 b2 dc c2 27 0f 61 76 6e 61 b1 0d 1a e3 92 61 06 65 b1 d3 61 e5 22 c4 d8 62 61 74 5e 73 57 86 10 67 2b c4 3b 9d 27 cb 7e 9c f0 2c 45 74 79 d7 f1 17 c7 d9 8d 0c ed 97 d1 28 82 53 18 2f 3b a8 66 00 f4 51 d3 dc e3 a3 e3 f8 d3 55 9c 9f 37 cc f1 7c 51 f9 f7 c4 b0 cb 0e 66 66 9c f9 2a 0d c4 ac 77 2d d6 e7 b9 3b e3 a3 a6 72 a7 51 4b 65 f5 c1 41 14 d2 11 d0 a5 88 fc b1 44 87 d3 65 b5 33 53 da bd 2a 68 a9 cc 8a 82 6e 11 d3 1b 1b dc 90 07 60 76 ff 00 df 18 e5 92 5d 1d 5f 1f c6 f2 a9 f4 7a 9f 86 f2 6f 0b f8 4a 9a 93 30 86 aa b6 b7 84 c5 92 ba ae 99 a9 e1 2d 7b 79 5c 29 bb 6e 79 11 Data Ascii: +ZlF:PJP\|s2=0eILG/cO[2fe?3YFh'avnaaea"bat^sWg+;'~,Ety(S/;fQU7\|Qffw-;rQKeADe3S*hn`v]_zoJ0-{y\)ny
2024-05-15 22:37:08 UTC	10072	IN	Data Raw: f2 2a 34 cb 26 8e 48 10 41 2d 95 c0 00 5c 7f 9e 98 9a e9 a2 c5 24 56 fe 1f cb 28 c8 78 a8 a3 02 fc f7 3a 4f 6b 1e 58 39 3f b0 58 e2 b7 06 14 94 a1 16 c2 da 3d 31 25 20 da 65 40 8d 6f 89 45 ad 85 06 82 22 90 2d db 61 ec 70 0d 14 34 e2 26 66 67 dc 9e 83 7c 02 08 8e a8 a8 2c 50 b0 1d 07 5f 6c 22 8b 82 35 44 6c 64 7b 76 8d 46 c3 d3 d7 12 52 22 2a 56 89 09 61 ab 6e 67 6c 34 85 61 65 2e 61 1d 6e a1 70 14 74 38 1a 83 59 26 75 a3 8d 15 9e fa c0 da d7 db 09 14 28 f2 ac a6 96 47 28 b3 5c db 48 00 5f 96 e7 a7 e8 71 72 98 2c a6 89 45 46 56 a5 56 0d 45 e2 3e 76 1b df 7b fb 62 5a 34 c7 2a 1e b4 01 0c 69 53 30 93 8a c5 51 08 dd 18 df 6f 9e 23 74 dd 25 c1 ff 00 7f fe 93 30 c6 d1 3c 1c 55 3f 78 b1 b1 5e 60 96 16 fc ed 8a 33 d0 3e 6f 5e b9 6e 5a 65 8e a3 8d 21 21 d1 e4 7f Data Ascii: 4&HA-\$V(x:OkX9?X=1% e@oE"-ap4&fg\|,P_l"5Dld{vFR"Vangl4ae.anpt8Y&u(G(\H_qr,EFVVE>v{bZ4*iS0Qo#t%0<U?x^`3>o^nZe!!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50105	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:08 UTC	424	OUT	GET /steam/apps/2344520/ss_068ff4b736f39eb4a06721a28dbcb1014ec19336.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:08 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 81923 Last-Modified: Tue, 14 May 2024 17:48:04 GMT ETag: "6643a3d4-14003" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=505546 Expires: Tue, 21 May 2024 19:02:54 GMT Date: Wed, 15 May 2024 22:37:08 GMT Connection: close
2024-05-15 22:37:08 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 07 02 01 00 08 ff c4 00 49 10 00 02 01 02 04 03 06 04 03 05 05 07 03 04 02 03 01 02 03 04 11 00 05 12 21 06 31 41 07 13 22 51 61 71 14 32 81 91 42 a1 b1 15 23 Data Ascii: JFIFCCQXI!1A"Qaq2B#
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: ea d8 b0 62 61 0e 8b 2c 88 87 4c 3a be 5d 76 e4 18 ec 0f 2b f5 c2 de 83 5b 1f 64 1c 22 64 13 96 59 25 a6 74 fd dc 8a a0 07 63 b5 b7 3c d4 f3 df a1 da db 80 e7 41 8c 1b 3e cc b8 6c d1 52 16 59 96 aa 10 a2 44 9d 01 d2 eb c8 2f 20 47 22 09 b5 ae a4 02 70 ca 5b 15 aa 17 49 9c 4d 53 93 ae 4b 55 24 b2 e4 f1 3b 54 88 fb bd 6a 97 1e 22 2d b8 f9 41 b6 27 96 1c 93 77 46 bf 4d 95 c7 d8 91 c4 79 fe 5e f5 49 05 1a d6 d4 c6 b0 ea 11 9a 72 8c c7 ca ed b0 04 d8 5f a6 31 43 13 7a a3 6c d2 4a dc 92 fd c9 f2 4a 49 32 7c 86 9e 29 c2 2c 97 27 ba 45 04 a8 6d c2 fd 2e 7e e7 1b 31 c5 ad 1e 76 7c aa 73 f6 f8 d0 ca 48 32 26 8d a3 a9 ac ac 4a c5 00 dd 61 53 4f ab f8 0e fa ef d2 e0 73 e9 89 bc fc 67 c6 b4 74 71 b7 1b f2 41 4c 52 55 a9 58 a1 66 65 5d 32 6c 0d c7 af f5 c6 fd 23 2d b6 Data Ascii: ba,L:]v+[d"dY%tc<A>lRYD/ G"p[IMSKU$;Tj"-A'wFMy^Ir_1CzlJJI2\|),'Em.~1v\|sH2&JaSOsgtqALRUXfe]2l#-
2024-05-15 22:37:08 UTC	2681	IN	Data Raw: 23 3d c8 fd 57 c1 1c 1b c3 dc 2d 0f 77 97 77 94 dd dd 8b da a0 80 4b 0d 99 c5 c7 84 d8 d8 6c 4e 93 e5 8f 99 c9 9f 36 49 7b fc fd 8d d1 e1 15 ed 29 7c 5b 9e e5 7c 33 c4 5d e2 d0 ad 6d 70 52 b0 99 89 56 42 cd 6d 76 3e 1b ef b5 f9 58 93 c8 03 e9 62 c5 71 db 33 cb 22 be 8a 4f 0e 71 36 7b c5 f3 66 f9 5e 63 99 54 cf 59 14 86 ad 6b 2a 08 13 47 a2 44 26 31 b5 bb a2 aa 49 5e 44 83 b6 1b 26 1c 78 5a 94 15 2e be de 7f 98 d8 e6 e7 76 ec ce 78 a7 8c 73 4a e0 a4 d7 c9 27 78 a4 ad 2d 3c 85 50 46 6f 66 37 3e 1b f4 1d 79 ec 2d 7d d8 f0 c7 e0 93 97 25 7e 0b 2f 60 52 2c 59 cc f1 53 e4 af 52 ec ac 43 2c ca e1 00 52 37 df 60 c7 99 bd f1 9f d6 63 7c 6f 97 40 c3 25 17 5f 25 b7 b5 9e 3f a8 a0 a0 14 63 20 6a 64 9d 2c e0 c1 7b f3 fc 5c b6 37 bf d0 f2 38 8f a7 f4 d1 e5 cd c8 a3 c8 Data Ascii: #=W-wwKlN6I{)\|[\|3]mpRVBmv>Xbq3"Oq6{f^cTYk*GD&1I^D&xZ.vxsJ'x-<PFof7>y-}%~/`R,YSRC,R7`c\|o@%_%?c jd,{\78
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: d4 1e 67 1d c9 30 f0 6b a2 28 26 69 e2 76 81 96 d6 b6 a2 d7 fa d8 75 c1 ba 40 ab 7b 02 67 58 9d 96 e2 e0 8b 91 d4 e3 93 d1 cd 2b 04 98 80 84 93 84 1f c1 f5 04 c5 24 45 61 b1 17 1b f4 c3 08 e8 7d 13 09 61 d0 c6 ec bc 8f 9e 15 68 35 67 6a a2 55 ee c9 3e 2e 96 c7 72 61 e2 80 e2 a3 34 75 0f 1c 2e 1c c9 bd af c8 8e 56 c7 37 68 11 4d 76 58 38 4b 30 8f 85 b3 d8 2b a4 8c ce d0 07 90 20 16 3a f4 30 56 bf a3 10 7e 98 11 75 b4 19 26 ed 32 d9 da 0f 68 47 32 cb f2 dc b2 29 0b d0 35 1d 2d 44 aa fe 15 8e 40 25 0d a4 7f 09 24 10 39 0b 5b a6 31 fa 5c 73 87 29 64 ed b7 fc 2f 43 e6 9c 5b 8c 57 54 87 bc 11 c7 eb c3 74 1c 17 4f 98 a5 24 79 7c 31 d6 53 45 51 1d cb a6 b6 01 9a 4d fc f4 9f 6c 52 4e 39 1c b1 b5 f0 77 17 1a 9a 3e e3 0e d7 33 1a 3a 2c c0 e5 93 c6 a9 25 6c d0 40 ad Data Ascii: g0k(&ivu@{gX+$Ea}ah5gjU>.ra4u.V7hMvX8K0+ :0V~u&2hG2)5-D@%$9[1\s)d/C[WTtO$y\|1SEQMlRN9w>3:,%l@
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 37 f0 9f 50 46 1e 12 94 1e 9d 02 50 b5 b4 52 73 fc e2 4e 1e 87 e0 df 3b a8 78 34 69 10 71 02 85 b0 f2 8e 7b 15 7f 2b 38 3e a7 1a e1 8f ea 6e b7 f6 fe c6 79 3e 3a bf e3 fd cc 93 3d cb 1f 32 a9 79 b2 b9 28 52 6b f7 86 15 b4 06 4f 55 0a c6 27 ff 00 a4 83 e9 8d f0 7c 55 4e ff 00 cf e6 64 92 6d fb 7f cf e8 52 33 19 aa a8 a6 29 98 e5 fa 24 4e 7f ba d3 e9 6d 8d bf 2c 5a 2a 2f 71 64 5d ad 49 0b 9d 23 ab 8c c9 1c 86 95 c7 40 be 1f c8 ed f4 18 b2 4d 7d c5 d3 05 7c ae b1 c4 92 53 37 7f a0 78 a5 81 af 60 7c c0 df ee 31 dc a3 d3 39 45 f8 21 fd a1 2b 53 9a 7a 96 79 11 4f e1 65 1e 63 e9 85 70 dd a1 94 b5 4c fa 92 a4 53 19 7b d4 49 53 4e c5 8d ee 6e 36 36 3e 9c ff 00 2c 3b 8f c1 ca 55 d8 4d 7f 10 bc d4 ab 4c bd f2 10 c1 dd a5 b3 31 03 a5 ba 6f d0 e0 45 79 2b 2d 68 af a7 Data Ascii: 7PFPRsN;x4iq{+8>ny>:=2y(RkOU'\|UNdmR3)$Nm,Z*/qd]I#@M}\|S7x`\|19E!+SzyOecpLS{ISNn66>,;UML1oEy+-h
2024-05-15 22:37:08 UTC	7952	IN	Data Raw: 86 49 86 53 54 65 b2 58 ca d1 17 e4 02 93 19 fa 5f 03 7e 02 ab c8 ea 18 65 28 9d da 4b 14 76 fc 4f 7b 8f 32 56 f8 9b 74 3d 58 ca 8e 87 4c 6c cb 26 e3 73 68 c8 07 ea 6e 4e 05 b6 35 50 41 9c 2c 63 46 89 d3 ae 9d 89 fa 5f f5 c7 1c 79 4d 45 4d 24 8c f1 14 d5 cd 94 a8 4d 20 f9 5c 6f 8e 77 e4 16 8e ea 21 29 22 2a cc 84 0d 82 ab ec 3e 83 6f be 0a b1 5d 1f 4a 8d 0b ac 8c 8d 2b 74 67 23 6f 3e 67 6c 15 24 f4 0a 68 4b 5f 95 53 ce cb de 09 90 83 a8 18 c9 62 3d 87 43 ea 71 45 21 2a c6 d9 3c 31 52 c5 f0 ce c5 22 2b 61 19 36 b0 bf 98 fe 77 c2 37 7b 19 2d 0d 1a 9a 37 4d 02 40 10 1f 0a 5c 69 1e 5c f9 e3 90 f4 2d cd 59 e1 03 45 2b 2c 8b b5 ee 48 df 99 1f 4c 32 fc 88 ff 00 06 1f fd a6 72 a6 cc 78 4a 82 bd a2 d2 f4 55 26 23 61 f8 64 53 b5 ef e6 a3 ef 8d 3e 9a 55 26 8c f9 e3 Data Ascii: ISTeX_~e(KvO{2Vt=XLl&shnN5PA,cF_yMEM$M \ow!)">o]J+tg#o>gl$hK_Sb=CqE!<1R"+a6w7{-7M@\i\-YE+,HL2rxJU&#adS>U&
2024-05-15 22:37:08 UTC	6096	IN	Data Raw: 3f 80 8a 79 a3 91 83 82 59 fa 9b 5b 0b b0 d8 ca 9f 31 2d a4 2a af 9f 9d be d8 14 8e 4c fa 5a a6 86 32 da 50 48 4e d6 3b e0 2d 87 47 2f a2 7a 59 29 9e 16 09 22 94 66 8c ee 41 e7 ff 00 9c 3c 5d 31 64 ad 51 96 d6 76 3b 53 93 e6 7f b4 b8 76 bd 29 82 a9 bc 15 44 92 c0 f3 50 6d d7 1e 8a f5 2a 51 ac 88 f3 9f a6 e3 2b c6 c1 f8 83 b1 6f f6 82 9c 55 65 aa 32 bc c6 df bc a4 be b8 9c f9 a9 e6 2f 83 0f 55 c1 d4 b6 81 3f 4b c9 5c 74 c5 5c 35 d8 56 79 41 9c 53 4d 9a 54 d2 d0 41 03 09 19 92 50 ee 2d bd 80 1f cf 14 9f ac 83 8b 51 56 4b 1f a5 9a 77 27 47 e8 11 98 b3 42 91 15 50 ab b0 65 04 ea 1e d8 f2 bf 07 a8 be 18 af 89 72 da 4c db 87 73 2a 3a b4 92 68 27 81 96 48 c7 e2 16 e4 06 0c 2d 49 34 19 45 38 b4 7e 61 e0 fe 3a af ec fd 65 a6 a2 8c 4b 0e b6 b2 c8 c5 58 6f cb 6c 7b Data Ascii: ?yY[1-LZ2PHN;-G/zY)"fA<]1dQv;Sv)DPmQ+oUe2/U?K\t\5VyASMTAP-QVKw'GBPerLs*:h'H-I4E8~a:eKXol{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50106	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:08 UTC	414	OUT	GET /steam/apps/2344520/capsule_616x353_alt_assets_1.jpg?t=1715714373 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:08 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 107192 Last-Modified: Tue, 14 May 2024 19:11:50 GMT ETag: "6643b776-1a2b8" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=506542 Expires: Tue, 21 May 2024 19:19:30 GMT Date: Wed, 15 May 2024 22:37:08 GMT Connection: close
2024-05-15 22:37:08 UTC	16041	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 00 02 08 01 09 ff c4 00 4a 10 00 02 01 03 02 04 05 01 04 09 03 02 05 02 03 09 01 02 03 04 05 11 00 21 06 12 31 41 07 13 22 51 61 71 08 14 32 81 15 23 42 52 Data Ascii: JFIFCCahJ!1A"Qaq2#BR
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 6c c5 8a a9 c9 70 d8 08 7b 1c 7f 2d 1d 94 9a d1 25 06 ad 47 3d d0 3c 95 bf e1 7f 11 5b 38 77 83 78 92 4a 67 4a da ca aa 6f 20 ab 13 84 2c d8 cf 2f b8 5c 9c 9e bd 35 e8 f0 38 8a 74 30 d5 48 bb 88 8f 7d 05 d7 9f c6 d1 7d 5a f4 c1 b0 69 9f 7e 68 c3 83 ab 6a 69 24 a7 ab 13 08 69 1c 28 94 43 fa c0 ca 4f 5c f7 18 19 d6 9e 05 cf 6c 54 98 69 d6 2e 90 c4 b5 ae 05 91 2e da 6c 8e aa 2f 34 94 f4 1f 7d 96 41 14 51 86 32 4b 21 08 14 83 b1 39 e8 31 af 42 1e 0d c2 c8 ca 41 85 54 f1 f7 db 6f c2 ff 00 0f 68 24 86 bf 8a 28 eb ab 70 54 43 6b 1f 79 63 f0 0a 9e 5c f6 c6 73 9e da 20 7d 97 46 19 ce 32 05 97 2f 71 a7 da 7f c7 ae 30 bf 52 dd 7c 3e f0 eb 89 6c 7c 27 0b 08 e0 4a bb 4f 9b 25 ce 67 d9 5a 5e 64 3e 5c 58 c0 1c 84 00 49 66 93 a0 50 90 e9 f0 9d 53 f1 48 37 c6 24 fb f7 7f Data Ascii: lp{-%G=<[8wxJgJo ,/\58t0H}}Zi~hji$i(CO\lTi..l/4}AQ2K!91BAToh$(pTCkyc\s }F2/q0R\|>l\|'JO%gZ^d>\XIfPSH7$
2024-05-15 22:37:08 UTC	3519	IN	Data Raw: ae 23 e2 1b dd b2 d1 73 b8 51 44 f5 50 d7 56 45 0b 89 7f 09 f4 b3 0c 06 70 48 1d c1 18 d7 b5 05 85 c4 83 7e ab c9 55 a2 fa 6f 34 c0 30 37 85 64 30 77 a7 20 05 c8 00 87 ce 43 ff 00 81 8d 31 9d d0 78 a5 9a 00 70 bd 90 77 88 12 4d 43 c0 5c 49 53 0c 08 f3 ad be a1 a3 32 82 53 98 46 dd 71 d4 7c 6c 48 d6 43 c3 34 cb 79 5a d4 8c b8 78 97 cd cf 0f a9 85 9d ed 7c 4f 59 31 37 4b d3 b5 c0 b1 5c aa d3 99 08 85 57 3d 03 61 9f 07 a6 54 6b c6 f6 a5 53 5a a3 a9 8d 1b 6f 3d 49 f2 d1 7d 07 07 4e 28 df 79 f4 e0 ba c6 87 c6 3b 6f 0e d9 aa af b5 af 2d 5c 74 91 83 4b 44 9e 90 6a 19 79 55 39 86 ea 25 7c 2b 0e a4 1c 80 31 9d 1b b2 dc 47 88 8b 46 9c 7e fd 4a f3 d8 ca 47 36 50 6f 3a f0 ff 00 9b 2e 57 f1 86 cd 07 1e 4b 59 c5 5c 5b 4f 0c b7 aa f7 56 9e 4f 32 45 34 47 a2 43 08 ce d1 Data Ascii: #sQDPVEpH~Uo407d0w C1xpwMC\IS2SFq\|lHC4yZx\|OY17K\W=aTkSZo=I}N(y;o-\tKDjyU9%\|+1GF~JG6Po:.WKY\[OVO2E4GC
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: dc f4 5e 8b b3 ea 45 33 48 ff 00 b5 bc d7 94 54 11 32 64 0c 02 00 dc 60 81 9d 6d 36 1c 3a af 3c 49 63 e3 81 52 31 d2 85 29 c9 9c e3 19 1b 1c e7 af d7 18 d2 d8 2f eb ab 52 97 98 e8 7f 6b 47 1e 3b ca 4c aa 3a 1e a3 45 0f 25 2b 47 78 9a 70 a0 00 71 95 d8 1f f7 d2 18 ea 43 39 a9 c1 6a f6 7d 79 a2 29 71 54 f7 8f de 2b 5c b8 63 f4 7f 08 f0 95 5d 35 3f 1a 5e 25 86 28 2a 2a 00 65 a6 49 24 e4 0d 8d f2 c4 e7 19 04 00 18 e0 9c 6b 5b b3 29 cd 33 5e b0 f0 83 eb ba 47 1c 03 aa 0a 4c d4 8b c7 be 4a b2 f1 e3 c3 ce 3d f0 4a aa 9a a2 97 c4 d9 f8 c6 e6 a9 e4 55 d2 56 49 32 10 e8 3d 4d 1f 24 9c a1 71 be 1b 0c 46 fb eb 53 0b da 0c af 54 d1 a8 d0 22 6e 20 8f 3b 24 ea f6 79 14 85 5a 5a 18 b1 b2 87 f0 53 c6 7f 12 f8 c4 dc a9 eb 29 97 8b 22 8a 14 92 1b 7d 5b c7 49 3a 29 7c 79 86 Data Ascii: ^E3HT2d`m6:<IcR1)/RkG;L:E%+GxpqC9j}y)qT+\c]5?^%(**eI$k[)3^GLJ=JUVI2=M$qFST"n ;$yZZS)"}[I:)\|y
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 0f a1 83 8b 20 a9 a5 34 32 45 58 19 58 cf 4a e5 a6 05 98 00 16 3e b2 c4 d8 51 8c 65 0e fb 0c e9 f0 4d 16 1e f6 00 1b fe 7d c2 cf 88 7f f5 49 04 dc 6e 3f 23 86 eb af fc 1f f0 56 8f c1 3e 1f 97 ee f2 a5 d6 b6 ba 4f bd 56 57 43 b2 ce db f9 71 83 da 14 04 81 9d c9 2c df b5 81 f3 2a bd b4 dc 5d 72 32 90 1a 6c 0e a7 af 3e 5c 17 ad 67 66 9a 54 b3 4c c8 b9 1b 7e be ea 56 eb 0d 4d 5d da 1a ba ba d7 69 a4 62 11 56 32 02 01 d0 01 db a7 41 a2 f7 84 99 76 a9 4e ec 68 dd 14 37 1e d3 5b 21 e1 0b d0 13 91 14 74 e6 59 52 a1 01 08 79 b6 3b 74 62 c4 6c 77 25 b1 d4 ea df 14 42 35 12 45 49 3e fd 84 4b 45 52 94 16 7a 39 29 a3 35 25 69 e1 85 23 0e 14 c9 29 4d 94 b1 d9 07 a7 25 8f 40 31 82 70 0e 26 35 94 7b ea 80 d9 a0 91 6d 48 05 6d e0 6a d5 34 c0 d4 90 0d f6 49 d4 71 35 ce 4a Data Ascii: 42EXXJ>QeM}In?#V>OVWCq,*]r2l>\gfTL~VM]ibV2AvNh7[!tYRy;tblw%B5EI>KERz9)5%i#)M%@1p&5{mHmj4Iq5J
2024-05-15 22:37:08 UTC	7952	IN	Data Raw: db 3a 35 6e d1 c3 33 16 d2 19 e0 74 92 08 92 4c 58 1b f9 db 4e 0b 3f 0f 86 ac 69 91 9f c4 2d 3a 44 1d be 89 c7 fe 72 a3 b6 a4 31 51 d0 44 aa 32 5a 9e 65 cb 96 3b 7a 33 d0 00 73 83 db 4c e3 3b 76 83 58 29 50 a2 04 49 f1 09 83 ca 74 1c 8e 9c 10 e9 f6 5d 6a 8e 2e a8 f2 79 83 02 39 c7 1e 21 45 de d2 4b dc 4d 04 71 3d 64 f5 32 2c 91 d5 2e 54 20 1b 08 f0 3a 8c 1c e0 ed af 08 e7 be b3 89 8c ce 71 d7 ed 65 b5 44 36 81 04 9c ad 68 82 38 f3 be fc f5 40 de 29 d6 a7 0f 58 d6 ca 83 ef b7 28 a5 49 64 ac 93 38 42 54 e5 40 ee 3a 1c ff 00 8d 1d 8d 0d 78 a6 eb c5 cf e1 6c 76 65 23 89 a9 df fc 2d 20 80 38 df 55 43 cf 5b 59 44 5c 79 ac 85 ff 00 01 90 86 ce fd 71 d8 67 e7 5b f4 83 75 68 ea bd 81 a7 4e b7 c4 01 8e 16 ff 00 a8 63 8a 78 9a b0 2f 90 d5 6c b2 38 2c d2 46 7d 41 7f Data Ascii: :5n3tLXN?i-:Dr1QD2Ze;z3sL;vX)PIt]j.y9!EKMq=d2,.T :qeD6h8@)X(Id8BT@:xlve#- 8UC[YD\yqg[uhNcx/l8,F}A
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 03 62 35 64 32 12 94 f9 0f 96 23 1f 5c eb 8e 16 b2 b3 04 14 43 4b 19 78 c1 03 03 6c 9c 6b 35 e6 0a d3 63 49 0a 62 8e 18 f9 98 01 ce 30 07 ab 6c 0d 24 f7 15 a3 4d 81 3d 8e 9e 5a 9a 95 60 49 d8 02 fc a7 00 76 fc f4 12 e0 d6 a2 06 39 ee 94 73 53 6c a5 a5 a5 a3 4a 39 96 49 76 66 e6 dc b1 fa 76 18 ef db 58 6c aa f7 b9 c6 a0 b7 bd d6 8b e9 35 80 06 99 56 af 80 0a 6f 9c 52 f5 b5 15 6d 03 53 7a 60 a2 80 02 0e 3f 7c 9e d8 c9 c8 fa 1d 79 9e db 8a 14 05 36 89 cd a9 3f 65 a3 81 9a 95 0b 8d a3 65 d6 36 4b a5 2d 1e 27 42 93 73 10 04 87 70 e0 9f 50 03 be f8 19 ed be be 7c 4b 9b 62 b6 dc cc e8 b5 b8 e2 8e da 1e 28 62 aa 9e 37 70 64 f2 80 1c a4 e7 7e b9 3a ab 1e 09 b8 81 ca d2 91 76 0e ad 4b 92 27 d7 f4 a6 64 b9 4d 5f 49 4d 15 2c 89 01 91 7c c3 cc 47 98 17 3e e3 f0 8c 0d Data Ascii: b5d2#\CKxlk5cIb0l$M=Z`Iv9sSlJ9IvfvXl5VoRmSz`?\|y6?ee6K-'BspP\|Kb(b7pd~:vK'dM_IM,\|G>
2024-05-15 22:37:08 UTC	14144	IN	Data Raw: 89 c7 60 06 8a d7 d4 ee c7 78 6e 6e 7e c3 ee 57 32 34 3e db 21 bb f5 44 fe 55 32 97 ff 00 ba 8e 3c d2 c0 1c e7 7c 7b 0d b1 ee 75 46 1d 51 88 98 0a aa b9 c7 32 54 cc 4b 12 71 8e 66 18 19 ff 00 1a d6 a6 e0 e0 16 3b da 5a 4a b2 fc 16 92 df c3 f4 ef c4 6d 4f 15 6d ed a4 68 a8 84 c3 2b 48 00 1c d2 60 fe d9 27 00 f6 19 23 73 90 9e 39 ee 04 52 6d 81 17 fc 2d 1c 05 36 39 ae aa eb 90 6c 3e e8 e2 e5 7c a6 e2 2b 87 9a 1d e9 a7 28 cf 3b 55 30 72 0e 77 0b dc e7 3d 3a e9 36 35 80 d8 42 6d ce 71 e6 a3 af 5c 13 4b 51 4c b5 14 95 51 49 3f 37 2c 6b cd ca 5f 3f bd 9f c3 ef 93 d7 5a 1d e0 00 13 71 c9 67 9a 66 f1 aa 8b a5 f0 ef 8b f8 75 84 f1 d2 52 bc 79 07 9b ef 48 b2 ca b9 fd 9c e0 90 77 d8 e3 3a 64 57 6b 08 20 d9 21 dc bc da 11 c5 83 87 6b 6b 2f cb 87 8a 2b 9d 53 19 7c ac Data Ascii: `xnn~W24>!DU2<\|{uFQ2TKqf;ZJmOmh+H`'#s9Rm-69l>\|+(;U0rw=:65Bmq\KQLQI?7,k_?ZqgfuRyHw:dWk !kk/+S\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50108	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:08 UTC	424	OUT	GET /steam/apps/2344520/ss_2f6e682e3e72703728d2502efacefdababa03493.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:08 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 84340 Last-Modified: Tue, 14 May 2024 17:48:48 GMT ETag: "6643a400-14974" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=505549 Expires: Tue, 21 May 2024 19:02:57 GMT Date: Wed, 15 May 2024 22:37:08 GMT Connection: close
2024-05-15 22:37:08 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 02 07 08 01 00 09 ff c4 00 4d 10 00 02 01 02 04 04 03 05 05 05 05 06 04 06 01 05 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 07 14 32 71 81 23 42 91 a1 b1 Data Ascii: JFIFCCQXM!1A"Qa2q#B
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: a3 31 49 0e 4b 96 c6 5a 44 81 5d 82 58 1b b3 00 37 fc f1 39 2d b1 e2 fa 36 4c b9 63 cb c9 a4 8a 9e 49 27 11 05 54 45 be e5 8d 87 e0 41 fa e2 58 67 16 ae f4 1c b1 77 a5 b3 79 7b 2d e1 2a de 07 c9 82 55 44 e2 a6 a1 f9 85 56 c7 45 c0 f0 93 df 71 7b 63 cf f5 13 8e 69 36 99 e8 fa 78 4b 0c 52 68 d9 d9 6e 52 83 2a 8e 18 49 76 89 00 51 2a d8 b7 99 23 d4 e3 cd d4 7d a7 a1 1b 66 51 d1 44 a4 89 c8 8c 36 d6 08 7f 23 db 0a ef c1 4e cf 3f 66 b1 71 ca 48 d9 00 b6 a4 72 09 1d ba e0 59 dc 6c cd 72 46 68 cd 97 96 e7 ea 4f e3 b6 16 d7 91 8e 33 cb c7 ec fa aa 29 e3 72 91 92 46 a2 36 d3 dd 4f e3 f8 1c 7d 5b dd a3 e5 52 ad 97 aa dc d2 ae 97 20 99 72 da 95 49 d1 f9 12 a2 35 83 a3 dc 29 4f 2b ee 3e 66 dd ec 73 a8 a7 2f 72 2d c9 a8 da 65 46 a3 2d 46 a5 c9 ea a0 a9 67 6a 85 34 f5 Data Ascii: 1IKZD]X79-6LcI'TEAXgwy{-UDVEq{ci6xKRhnRIvQ*#}fQD6#N?fqHrYlrFhO3)rF6O}[R rI5)O+>fs/r-eF-Fgj4
2024-05-15 22:37:08 UTC	3050	IN	Data Raw: 1b 63 d9 8f b5 9a 4e 22 ae 7c 87 88 25 8e 1c ca e6 38 e7 9c 2a ad 57 dd 3a 97 a2 b9 ee 3a 1f 9e d8 cd 97 13 5b 5d 7f 43 5e 0c c9 da 7d ff 00 52 dd fb 1b 31 f6 61 50 6b f2 98 ea 2a f8 48 96 35 59 3f c5 25 19 24 5e 48 01 df 48 ea 50 74 be de 58 44 d4 ad 3e ff 00 be ca 71 70 da eb e3 e3 f4 1b d6 e4 14 19 8d 34 59 96 46 63 cc 72 ba 81 aa a3 2c 55 0c 24 46 ea f0 29 1d 7f 7a 23 60 6d e1 d2 76 31 53 77 4f 4c af 1d 5f 6b fb fe e8 a2 ba 67 d9 be 57 34 c8 99 94 dc 01 14 ec 8c f0 ed 5c 63 17 04 3a fc 7c 90 6e 3a 73 00 d8 82 05 f1 65 51 7e 39 7f 2f ff 00 4c ee e4 bc f0 fe 7f fe 16 ac a7 81 8e 4a 8b 9a f0 15 62 45 4f 52 45 52 e5 72 4e c6 82 b1 48 e9 13 75 85 bb 82 36 04 90 76 e9 17 91 4f db 95 6f e7 c9 55 8d c1 72 c4 f5 f0 47 98 71 55 1e 59 57 fb 57 2d cc d7 2c ac 47 Data Ascii: cN"\|%8W::[]C^}R1aPkH5Y?%$^HHPtXD>qp4YFcr,U$F)z#`mv1SwOL_kgW4\c:\|n:seQ~9/LJbEORERrNHu6vOoUrGqUYWW-,G
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 88 c4 f6 8e 18 d4 9b 93 76 25 8f d0 28 ff 00 dd 8a 49 a7 49 09 1b 56 da d0 bb 35 a3 92 0c be 9a 49 14 18 67 d4 57 fe 53 62 7f 1c 74 26 9c 9a 5e 3f e4 32 8d 41 5f 9f f8 0f 96 9d 61 a1 a6 8a 13 cd 86 9e 28 d1 dc 7c 21 d8 16 23 f1 27 f0 c2 b7 6d b1 95 24 a2 0e 5c 14 e9 db 4f f3 c7 24 31 e6 fa 16 e4 03 d3 61 d0 7c b1 c8 16 c8 e3 b1 d4 45 80 bd f7 c1 07 82 27 a9 12 5d 43 69 8f cf cf 0f 18 d6 c9 4a 6a f8 92 7b bc 72 43 7b 02 6e 00 c3 5b 15 c5 33 c8 e5 6d 65 14 b1 5b 7c 57 db 03 4d 58 17 25 ab 30 7b 97 36 2a 4f 72 70 53 a4 73 8b bb 4a cc 05 16 b0 64 2b e1 ee de 47 05 49 13 fa 72 ee 8f a2 84 82 4a b6 c3 6b db 6f 9e 0e 8e f7 2f 24 e1 82 dc dc 03 6d ce 26 68 5d 59 8c 68 d2 93 a7 c4 4d 94 01 de fb 6d eb 82 4d cb b4 8b 25 0d 02 53 88 a8 de 45 49 e7 91 56 69 89 d9 7f Data Ascii: v%(IIV5IgWSbt&^?2A_a(\|!#'m$\O$1a\|E']CiJj{rC{n[3me[\|WMX%0{6*OrpSsJd+GIrJko/$m&h]YhMmM%SEIVi
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: e6 08 fe 43 19 38 fc 9b 7b 7a 2d 34 b0 88 5a 12 90 cb a1 da fa 53 70 b7 f2 c0 7b 4d 1a 22 a9 db 1b 42 94 d4 d6 62 e5 58 6c 58 74 5f 3c 26 d7 45 bb 18 d3 32 b4 4c aa d7 2a db 82 d6 16 3e 98 56 9b d8 63 f0 35 a7 99 50 46 cd e0 b1 d2 48 17 fc 70 ad 0d 7a a0 7a c9 7d f2 71 a4 db 41 0b a9 45 89 be 02 4c 63 09 a3 51 1a 3c b2 29 d2 c0 8d ed de d8 7a d8 a8 e4 5f ed cf c3 f5 71 c9 c3 9c 45 14 65 b2 b8 c4 b4 35 12 2e fc 97 66 d6 87 fe 61 ac 7c c6 3d 6f 41 91 46 e3 e4 f2 fd 7e 37 2a 97 83 9d 7d 9c 66 34 99 0f 15 50 55 d2 c4 8c a9 31 78 e5 96 c1 5a dd 50 dc 58 82 0b ed df 1e 8e 7c 8d db 47 99 8b 13 69 2f 80 f8 6b aa 5d 0d 24 39 b4 d2 65 8a ed 22 65 ea e4 44 84 92 4d 96 fe bb 9c 52 11 a5 6d 6c 49 c9 bb 49 e8 dd fe c2 bd 8a 51 71 75 29 ce f8 85 64 7c b5 1c ad 35 10 05 Data Ascii: C8{z-4ZSp{M"BbXlXt_<&E2L>Vc5PFHpzz}qAELcQ<)z_qEe5.fa\|=oAF~7}f4PU1xZPX\|Gi/k]$9e"eDMRmlIIQqu)d\|5
2024-05-15 22:37:08 UTC	7952	IN	Data Raw: 7c f3 e4 a9 49 98 4f 42 95 35 6f 22 40 f5 08 c2 3f 01 20 1d 8b 58 0e 84 8b f5 f5 c1 8c 39 7b 7a 2f c9 47 dd 56 c8 ce 7a c5 1e a3 9d 14 0f cd e5 34 51 10 e4 b0 df 46 be 9a 48 3f 78 03 8b 2c 64 fe a5 f6 2a cc 33 69 e9 eb 58 a2 41 25 4c 41 83 cc b1 8e 69 5d 88 41 a4 7c 44 95 52 3b dc 1e d7 c6 98 c3 92 af 04 25 3e 3f a9 4e 87 85 f3 38 64 ca f2 89 f3 69 2b 5a 49 84 73 4c d0 68 6f 84 96 20 96 3a b4 aa f5 3d 48 be d7 c7 a9 04 a7 2f 6a 3c d7 ca 31 a9 32 c5 97 51 66 1c 3f 47 ee d2 54 3e 69 4e 83 93 1b d4 00 67 52 77 03 6e a0 28 36 ef d3 7d f0 ed 3e e5 fd fe c4 52 5d 22 cd 90 66 9f b1 28 f4 1a 72 d2 30 24 34 8b 61 73 7f d3 11 e1 72 e4 99 aa 32 e3 1e 2c 03 35 cd 1e a2 ae 9e 33 18 59 a7 36 d4 36 0b 61 e2 6d fe 96 f5 38 bc 62 df 5d 91 6f bb 24 a4 f7 b8 9e 4a 5a 23 1c Data Ascii: \|IOB5o"@? X9{z/GVz4QFH?x,d*3iXA%LAi]A\|DR;%>?N8di+ZIsLho :=H/j<12Qf?GT>iNgRwn(6}>R]"f(r0$4asr2,53Y66am8b]o$JZ#
2024-05-15 22:37:08 UTC	8144	IN	Data Raw: 95 aa bf e1 02 2c 48 23 7f 2d bc c0 c4 fe 9b 51 72 5d fc 0d 7e 18 56 45 95 cf 47 ae 9a 0c d6 1a cc ba a5 2c cd 34 86 cd d6 d6 e8 54 f4 f9 62 72 92 7b 71 a6 34 50 ce 3c ae 2c 96 81 63 a3 ab fb 49 01 12 80 e5 b7 ea 4a ad f7 b5 ad 7e bb f7 c1 fb f6 d1 5a 4a 3a 2e 3c 1b 5d 25 04 4b 11 99 aa b5 16 46 57 98 99 a2 6b ee 4f 98 b1 1d 06 24 d2 ec a6 37 45 f3 2d cc f9 d1 49 1c 85 26 94 9b 98 64 f0 b9 b6 de 13 b0 23 be 29 14 6c 52 b4 3c ca a1 87 32 4a 1a 88 27 14 b3 c0 24 2a 08 b3 ab ee 00 df b0 bf cb cb 1a 1d 57 17 b0 25 7b 5a 0f a7 ca 2b 7d f6 57 ab b7 36 45 d0 67 8a a5 89 07 b3 14 6e 86 d7 e9 f5 c6 98 38 a5 48 8b 8b bb 66 8e fe d2 7c 39 51 59 94 65 62 81 1e 64 a4 91 ea 0c a4 b0 69 e5 22 d2 11 73 6d c0 04 58 6c 41 03 1e c6 0c 6e 71 72 8f 6b c1 e4 7a 89 a8 35 1f 1f Data Ascii: ,H#-Qr]~VEG,4Tbr{q4P<,cIJ~ZJ:.<]%KFWkO$7E-I&d#)lR<2J'$*W%{Z+}W6Egn8Hf\|9QYebdi"smXlAnqrkz5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50109	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:08 UTC	424	OUT	GET /steam/apps/2344520/ss_eb1f3f7fb6ed95feb162011fbbe24b24d6ed5e41.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:08 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 61474 Last-Modified: Tue, 14 May 2024 17:49:26 GMT ETag: "6643a426-f022" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=505604 Expires: Tue, 21 May 2024 19:03:52 GMT Date: Wed, 15 May 2024 22:37:08 GMT Connection: close
2024-05-15 22:37:08 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 07 00 08 ff c4 00 4c 10 00 02 01 02 04 04 04 03 06 05 02 03 06 04 04 07 01 02 03 04 11 00 05 12 21 13 31 41 51 06 22 61 71 32 81 91 14 23 42 a1 b1 f0 07 Data Ascii: JFIFCCQXL!1AQ"aq2#B
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 31 44 a1 83 0e 64 fd 3f be 29 21 36 8e 2c 53 d4 46 f2 85 8a 12 df 11 d8 ea 22 f8 6a 12 d3 f0 c2 f8 96 ba 39 1d ec 75 48 c3 a2 5b 56 92 79 7a 0b 7b ee 7a 63 55 d1 86 5d 8a e9 26 69 15 18 b7 16 29 c2 b4 87 fa 09 b8 1f 9d f0 86 9d 1c 10 8f 47 1c 11 40 ce d3 33 08 c8 d8 b0 b0 ea 7a 5e ff 00 96 0a 09 1c cb ea 2b 0b 53 e9 1c 42 8e 03 a8 bf 98 0d f7 f7 eb 80 29 ba 86 2a 7a b8 4c 72 46 61 91 58 92 ca 3c bc f6 b7 6c 45 68 d6 26 82 e9 33 0d 54 4c 4a b8 d0 4a 10 e3 4d ed d4 60 68 31 7a 03 35 08 e4 82 46 e6 fb 9f d3 0a 15 40 73 3d 00 2a a5 82 b1 d8 a8 1f 96 04 19 2d c1 44 f5 32 c7 a7 4b 5d 94 f5 fd 31 68 cd d0 59 ea 64 95 23 7e 12 16 0d bb 13 6b 74 c3 27 f6 c0 1a 24 e2 c9 33 8f 3c 7b 79 36 27 fc fc b0 50 58 fa 05 25 62 d5 3b 42 91 80 ec 2c ac cb b8 3e 98 68 5d e8 26 Data Ascii: 1Dd?)!6,SF"j9uH[Vyz{zcU]&i)G@3z^+SB)zLrFaX<lEh&3TLJJM`h1z5F@s=-D2K]1hYd#~kt'$3<{y6'PX%b;B,>h]&
2024-05-15 22:37:08 UTC	2591	IN	Data Raw: a3 3e 7c ae 9d 88 4a ba 64 ab 65 3e 55 95 43 11 fe 30 50 81 2d 04 14 fa 9a 2a 28 62 d2 37 d1 18 1a 47 a6 d8 45 1e 1d fc 56 fe 20 48 3c 43 5b 97 e5 94 f4 ab 05 11 55 ac 73 10 66 96 42 03 02 4f 40 2f 6f 7b e2 d5 c4 49 63 f2 5b e0 d3 f8 73 fc 42 a5 ab 64 ca ea 69 7e c5 53 2c 7a a0 74 f8 25 03 98 0b cc 1f 4e 5d ad cb 0a be d8 de 18 e2 a6 26 f6 0c bd 6b 23 0e b3 32 82 2e ab 8a e4 65 c0 ba 8b 26 5c b2 39 27 5d 7c 43 72 6c 76 b8 ff 00 6c 27 97 2e c7 87 c6 b0 da 08 a5 ae 8e 47 01 b7 8a 53 b9 22 e4 7b 1c 43 36 c5 d2 13 43 1d 1c 92 08 a5 d0 e7 73 a5 7d 36 df 02 74 24 b1 92 a2 cd 92 a0 98 6b 15 55 ba 6f cf 12 f1 fa 34 c3 e4 f3 22 9a fc a5 66 7e 2c 0e 09 ec 7b 5f 7c 25 93 5d 94 f1 4f 68 0a 45 65 2d 0c c0 94 ee 70 ff 00 62 da d3 00 a8 a5 43 53 18 68 f5 25 c0 0c 0e 1a Data Ascii: >\|Jde>UC0P-*(b7GEV H<C[UsfBO@/o{Ic[sBdi~S,zt%N]&k#2.e&\9']\|Crlvl'.GS"{C6Cs}6t$kUo4"f~,{_\|%]OhEe-pbCSh%
2024-05-15 22:37:08 UTC	16384	IN	Data Raw: 2b 5a fb 0f 6c 46 cd 94 f0 3a 88 50 4a 0b aa 84 50 7c bb 73 b7 32 3d 30 f6 90 aa 65 b9 89 49 95 4c 47 ce 2f 63 a6 f6 c0 a8 dc 16 d3 4f 1e 5b 32 06 66 65 e5 a9 89 b9 3f e3 15 2a 33 59 46 68 b2 dc c2 27 0f 61 76 6e 61 b1 0d 1a e3 92 61 06 65 b1 d3 61 e5 22 c4 d8 62 61 74 5e 73 57 86 10 67 2b c4 3b 9d 27 cb 7e 9c f0 2c 45 74 79 d7 f1 17 c7 d9 8d 0c ed 97 d1 28 82 53 18 2f 3b a8 66 00 f4 51 d3 dc e3 a3 e3 f8 d3 55 9c 9f 37 cc f1 7c 51 f9 f7 c4 b0 cb 0e 66 66 9c f9 2a 0d c4 ac 77 2d d6 e7 b9 3b e3 a3 a6 72 a7 51 4b 65 f5 c1 41 14 d2 11 d0 a5 88 fc b1 44 87 d3 65 b5 33 53 da bd 2a 68 a9 cc 8a 82 6e 11 d3 1b 1b dc 90 07 60 76 ff 00 df 18 e5 92 5d 1d 5f 1f c6 f2 a9 f4 7a 9f 86 f2 6f 0b f8 4a 9a 93 30 86 aa b6 b7 84 c5 92 ba ae 99 a9 e1 2d 7b 79 5c 29 bb 6e 79 11 Data Ascii: +ZlF:PJP\|s2=0eILG/cO[2fe?3YFh'avnaaea"bat^sWg+;'~,Ety(S/;fQU7\|Qffw-;rQKeADe3S*hn`v]_zoJ0-{y\)ny
2024-05-15 22:37:09 UTC	10072	IN	Data Raw: f2 2a 34 cb 26 8e 48 10 41 2d 95 c0 00 5c 7f 9e 98 9a e9 a2 c5 24 56 fe 1f cb 28 c8 78 a8 a3 02 fc f7 3a 4f 6b 1e 58 39 3f b0 58 e2 b7 06 14 94 a1 16 c2 da 3d 31 25 20 da 65 40 8d 6f 89 45 ad 85 06 82 22 90 2d db 61 ec 70 0d 14 34 e2 26 66 67 dc 9e 83 7c 02 08 8e a8 a8 2c 50 b0 1d 07 5f 6c 22 8b 82 35 44 6c 64 7b 76 8d 46 c3 d3 d7 12 52 22 2a 56 89 09 61 ab 6e 67 6c 34 85 61 65 2e 61 1d 6e a1 70 14 74 38 1a 83 59 26 75 a3 8d 15 9e fa c0 da d7 db 09 14 28 f2 ac a6 96 47 28 b3 5c db 48 00 5f 96 e7 a7 e8 71 72 98 2c a6 89 45 46 56 a5 56 0d 45 e2 3e 76 1b df 7b fb 62 5a 34 c7 2a 1e b4 01 0c 69 53 30 93 8a c5 51 08 dd 18 df 6f 9e 23 74 dd 25 c1 ff 00 7f fe 93 30 c6 d1 3c 1c 55 3f 78 b1 b1 5e 60 96 16 fc ed 8a 33 d0 3e 6f 5e b9 6e 5a 65 8e a3 8d 21 21 d1 e4 7f Data Ascii: 4&HA-\$V(x:OkX9?X=1% e@oE"-ap4&fg\|,P_l"5Dld{vFR"Vangl4ae.anpt8Y&u(G(\H_qr,EFVVE>v{bZ4*iS0Qo#t%0<U?x^`3>o^nZe!!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50113	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:09 UTC	782	OUT	GET /public/css/skin_1/apphub_home.css?v=XOa7G-BGp2xZ&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:10 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:09 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15515484 Expires: Mon, 11 Nov 2024 12:28:33 GMT
2024-05-15 22:37:10 UTC	16139	IN	Data Raw: 34 30 66 37 0d 0a 0d 0a 2f 2a 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 66 6f 72 20 6e 6f 77 20 2a 2f 0d 0a 0d 0a 2e 61 70 70 68 75 62 5f 48 6f 6d 65 48 65 61 64 65 72 0d 0a 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 20 38 70 78 20 61 75 74 6f 3b 0d 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 39 34 38 70 78 3b 0d 0a 7d 0d 0a 2e 61 70 70 68 75 62 5f 48 6f 6d 65 48 65 61 64 65 72 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 74 61 62 5f 63 74 6e 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 2e 61 70 70 68 75 62 5f 48 6f 6d 65 48 65 61 64 65 72 43 6f 6e 74 65 6e 74 0d 0a 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 20 30 20 30 3b 0d 0a 7d 0d 0a 62 6f 64 79 2e 61 70 70 68 75 62 5f 62 Data Ascii: 40f7/* override the background for now */.apphub_HomeHeader{margin: 0 auto 8px auto;max-width: 948px;}.apphub_HomeHeader .responsive_tab_ctn {margin-top: 8px;}.apphub_HomeHeaderContent{padding: 10px 0 0 0;}body.apphub_b
2024-05-15 22:37:10 UTC	500	IN	Data Raw: 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 20 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 30 30 31 62 31 62 31 62 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 31 62 31 62 31 62 27 2c 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 20 29 3b 20 2f 2a 20 49 45 36 2d 39 20 2a 2f 0d 0a 09 68 65 69 67 68 74 3a 20 35 30 70 78 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 70 6f 72 74 65 64 5f 69 74 65 6d 5f 63 68 65 63 6b 62 6f 78 0d 0a 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 77 69 64 74 68 3a 20 32 30 70 78 3b 0d 0a 09 Data Ascii: XImageTransform.Microsoft.gradient( startColorstr='#001b1b1b', endColorstr='#1b1b1b',GradientType=0 ); /* IE6-9 */height: 50px;width: 100%;position: absolute;bottom: 0px;}.reported_item_checkbox{position: absolute;width: 20px;
2024-05-15 22:37:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50111	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:09 UTC	784	OUT	GET /public/css/skin_1/communityhome.css?v=EC98biDaoKUh&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:10 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:09 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15552000 Expires: Mon, 11 Nov 2024 22:37:09 GMT
2024-05-15 22:37:10 UTC	6832	IN	Data Raw: 31 61 61 38 0d 0a 0d 0a 62 6f 64 79 0d 0a 7b 0d 0a 20 20 20 20 2f 2a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 36 32 36 32 37 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 69 6d 61 67 65 73 2f 73 6b 69 6e 5f 31 2f 63 6f 6d 6d 75 6e 69 74 79 5f 32 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 67 72 61 64 69 65 6e 74 2e 70 6e 67 27 29 20 74 6f 70 20 72 65 70 65 61 74 2d 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 31 30 35 70 78 3b 20 2a 2f 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 62 32 38 33 38 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 33 36 33 36 33 3b Data Ascii: 1aa8body{ /background: #262627 url('https://community.cloudflare.steamstatic.com/public/images/skin_1/community_2_background_gradient.png') top repeat-x; background-position: 0 105px; / background: #1b2838; color: #636363;
2024-05-15 22:37:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50112	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:09 UTC	787	OUT	GET /public/css/skin_1/apphub_broadcast.css?v=Szj_0XBV602A&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:09 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:09 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=13877757 Expires: Wed, 23 Oct 2024 13:33:06 GMT
2024-05-15 22:37:09 UTC	1128	IN	Data Raw: 34 36 31 0d 0a 0d 0a 2e 42 72 6f 61 64 63 61 73 74 5f 43 61 72 64 20 2e 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 41 70 70 4e 61 6d 65 0d 0a 7b 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 35 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 42 72 6f 61 64 63 61 73 74 5f 43 61 72 64 20 61 0d 0a 7b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 42 72 6f 61 64 63 61 73 74 5f 43 61 72 64 2e 61 70 70 68 75 62 5f 43 61 72 64 2e 69 6e 74 65 72 61 63 74 61 62 6c 65 3a 68 6f 76 65 72 20 2e 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 41 70 70 4e 61 6d 65 20 61 2c 0d 0a 2e 42 72 6f 61 64 63 61 73 74 5f 43 61 72 64 2e 61 70 70 68 Data Ascii: 461.Broadcast_Card .apphub_CardContentAppName{margin-left: 0px;margin-right: 5px;padding: 0px;}.Broadcast_Card a{outline: 0;}.Broadcast_Card.apphub_Card.interactable:hover .apphub_CardContentAppName a,.Broadcast_Card.apph
2024-05-15 22:37:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50110	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:09 UTC	791	OUT	GET /public/css/applications/community/main.css?v=5CgcHEsWGAFt&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:10 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:09 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15467783 Expires: Sun, 10 Nov 2024 23:13:32 GMT
2024-05-15 22:37:10 UTC	16139	IN	Data Raw: 37 65 65 30 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 70 75 39 63 4f 70 55 4d 4e 30 51 34 6d 6d 49 58 32 57 5a 50 6c 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 35 39 39 7d 2e 5f 32 71 79 42 5a 56 38 59 76 78 73 74 58 75 53 4b 69 59 44 46 31 39 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 47 72 65 65 6e 45 6e 76 65 6c 6f 70 65 4d 65 6e 75 2c 2e 4c 51 6b 72 62 62 61 79 5a 50 59 31 31 71 48 6d 30 31 74 37 46 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 65 6c 6c 69 70 73 65 20 66 61 72 74 68 65 73 74 Data Ascii: 7ee0.pu9cOpUMN0Q4mmIX2WZPl{position:fixed;top:0;bottom:0;right:0;left:0;z-index:1599}._2qyBZV8YvxstXuSKiYDF19:focus{outline:none}.GreenEnvelopeMenu,.LQkrbbayZPY11qHm01t7F{position:absolute;opacity:1;background:radial-gradient(ellipse farthest
2024-05-15 22:37:10 UTC	16349	IN	Data Raw: 3a 6e 74 68 2d 63 68 69 6c 64 28 37 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 30 2e 34 37 35 73 7d 2e 5f 32 48 63 34 66 54 73 75 65 72 4e 68 6d 35 7a 6e 71 4f 38 6f 45 55 3e 70 61 74 68 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 30 2e 34 73 7d 2e 55 43 56 4b 74 74 7a 6f 70 5f 65 70 59 78 53 78 44 38 54 61 69 3e 70 61 74 68 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 7d 2e 55 43 56 4b 74 74 7a 6f 70 5f 65 70 59 78 53 78 44 38 54 61 69 20 2e 5f 32 35 67 34 53 34 78 42 69 Data Ascii: :nth-child(7){animation-delay:-0.475s}._2Hc4fTsuerNhm5znqO8oEU>path:nth-child(8){animation-delay:-0.4s}.UCVKttzop_epYxSxD8Tai>path{animation-duration:1s;animation-timing-function:linear;animation-iteration-count:infinite}.UCVKttzop_epYxSxD8Tai ._25g4S4xBi
2024-05-15 22:37:10 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 51 47 35 65 45 4f 4d 32 48 57 5a 2d 67 65 4a 49 2e 77 45 34 56 36 45 69 32 53 79 32 71 57 44 6f 5f 58 4e 63 77 6e 2e 67 70 66 6f 63 75 73 2c 2e 53 2d 5f 4c 61 51 47 35 65 45 4f 4d 32 48 57 5a 2d 67 65 4a 49 2e 5f 31 6c 55 5a 78 67 4c 30 36 4d 36 34 50 64 30 64 54 4b 53 54 79 6b 2b 2e 53 2d 5f 4c 61 51 47 35 65 45 4f 4d 32 48 57 5a 2d 67 65 4a 49 2e 77 45 34 56 36 45 69 32 53 79 32 71 57 44 6f 5f 58 4e 63 77 6e 2e 67 70 66 6f 63 75 73 77 69 74 68 69 6e 2c 2e 5f 32 33 6b 4e 62 54 67 39 5f 54 59 38 54 56 5f 75 4c 4e 38 4d 4a 79 2b 2e 53 2d 5f 4c 61 51 47 35 65 45 4f 4d 32 48 57 5a 2d 67 65 4a 49 2e 77 45 34 56 36 45 69 32 53 79 32 71 57 44 6f 5f 58 4e 63 77 6e 2e 67 70 66 6f 63 75 73 77 69 74 68 69 6e 2c 2e 5f 33 6a 6f 4e 6b 59 36 6b 52 79 Data Ascii: 3ff0QG5eEOM2HWZ-geJI.wE4V6Ei2Sy2qWDo_XNcwn.gpfocus,.S-_LaQG5eEOM2HWZ-geJI._1lUZxgL06M64Pd0dTKSTyk+.S-_LaQG5eEOM2HWZ-geJI.wE4V6Ei2Sy2qWDo_XNcwn.gpfocuswithin,._23kNbTg9_TY8TV_uLN8MJy+.S-_LaQG5eEOM2HWZ-geJI.wE4V6Ei2Sy2qWDo_XNcwn.gpfocuswithin,._3joNkY6kRy
2024-05-15 22:37:10 UTC	8	IN	Data Raw: 33 66 65 39 0d 0a 66 6f Data Ascii: 3fe9fo
2024-05-15 22:37:10 UTC	16384	IN	Data Raw: 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 76 61 72 28 2d 2d 64 65 66 61 75 6c 74 2d 76 61 6c 75 65 2d 74 72 61 63 6b 2d 63 6f 6c 6f 72 29 20 30 25 20 76 61 72 28 2d 2d 67 72 61 64 69 65 6e 74 2d 73 70 6c 69 74 2d 70 63 74 29 2c 20 76 61 72 28 2d 2d 6c 65 66 74 2d 74 72 61 63 6b 2d 63 6f 6c 6f 72 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 67 72 61 64 69 65 6e 74 2d 73 70 6c 69 74 2d 70 63 74 29 29 29 7d 2e 5f 33 61 46 4b 59 61 6c 71 69 73 31 69 36 50 38 4f 4c 54 79 57 58 37 20 2e 4d 71 32 35 4e 61 70 32 32 34 68 56 64 54 64 74 58 53 73 6e 71 3a 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 76 61 72 28 2d 2d 6c 65 Data Ascii: re{background:linear-gradient(90deg, var(--default-value-track-color) 0% var(--gradient-split-pct), var(--left-track-color) calc(var(--gradient-split-pct)))}._3aFKYalqis1i6P8OLTyWX7 .Mq25Nap224hVdTdtXSsnq::before{background:linear-gradient(90deg, var(--le
2024-05-15 22:37:10 UTC	16353	IN	Data Raw: 6c 75 6d 6e 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 7d 0d 0a 2e 5f 31 37 36 4f 57 37 62 6d 32 44 6c 70 69 61 48 70 69 55 47 73 43 4b 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 5f 32 36 78 34 39 4d 34 68 73 33 71 39 4c 39 49 4a 6d 36 77 43 65 66 2c 2e 5f 33 43 58 30 70 6a 68 36 41 51 54 41 45 43 58 55 75 35 39 59 71 36 7b 77 69 64 74 68 3a 37 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 5f 33 56 62 72 32 64 58 68 2d 5a 52 65 44 4c 50 51 55 44 50 54 57 Data Ascii: lumn;min-height:0}._176OW7bm2DlpiaHpiUGsCK{display:flex;flex-direction:column;align-items:center;padding-top:20px;padding-bottom:20px}._26x49M4hs3q9L9IJm6wCef,._3CX0pjh6AQTAECXUu59Yq6{width:70%;display:flex;justify-content:center}._3Vbr2dXh-ZReDLPQUDPTW
2024-05-15 22:37:11 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 69 76 65 2e 67 70 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 20 23 38 61 63 33 32 39 20 30 25 2c 20 23 34 61 37 61 31 36 20 36 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 34 30 25 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 30 34 73 7d 62 75 74 74 6f 6e 2e 44 69 61 6c 6f 67 42 75 74 74 6f 6e 2e 53 65 63 6f 6e 64 61 72 79 2e 4f 66 66 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 31 70 78 20 31 70 78 20 34 70 78 20 23 30 30 30 33 7d 62 75 74 74 6f 6e 2e 44 69 61 6c 6f 67 42 75 74 74 6f 6e 3a 65 6e 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 2e 44 69 61 6c 6f 67 42 75 74 74 6f 6e 3a 65 6e Data Ascii: 7fe0ive.gpfocus{background:linear-gradient(to right, #8ac329 0%, #4a7a16 60%);background-position:40%;transition-duration:.04s}button.DialogButton.Secondary.Off{box-shadow:inset 1px 1px 4px #0003}button.DialogButton:enabled:active,button.DialogButton:en
2024-05-15 22:37:11 UTC	16360	IN	Data Raw: 49 20 2e 74 69 74 6c 65 2d 61 72 65 61 2d 69 63 6f 6e 2d 69 6e 6e 65 72 2c 2e 66 72 69 65 6e 64 73 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 69 74 6c 65 2d 61 72 65 61 2d 69 63 6f 6e 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 31 35 73 20 65 61 73 65 2d 6f 75 74 7d 2e 44 65 73 6b 74 6f 70 55 49 20 2e 74 69 74 6c 65 2d 62 61 72 2d 61 63 74 69 6f 6e 73 2c 2e 66 72 69 65 6e 64 73 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 69 74 6c 65 2d 62 61 72 2d 61 63 74 69 6f 6e 73 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 72 69 67 68 74 3a 30 3b 63 75 72 73 6f Data Ascii: I .title-area-icon-inner,.friendsui-container .title-area-icon-inner{display:flex;align-items:center;justify-content:center;transition:stroke .15s ease-out}.DesktopUI .title-bar-actions,.friendsui-container .title-bar-actions{max-height:32px;right:0;curso
2024-05-15 22:37:11 UTC	7616	IN	Data Raw: 31 64 62 38 0d 0a 45 48 41 41 41 44 32 30 6c 45 51 56 52 59 43 65 31 57 53 30 39 54 51 52 51 2b 30 31 74 75 53 32 6d 68 68 52 71 4d 43 78 4e 38 4a 52 4b 4a 37 70 51 6f 4f 31 63 47 44 66 45 66 47 42 50 64 75 6c 4c 52 77 45 4a 55 6f 6b 74 78 5a 65 49 66 63 47 46 4d 4a 45 61 58 69 4b 37 56 61 4e 77 6f 49 55 47 6a 4b 52 5a 4b 48 2f 52 64 78 6e 4e 6d 35 74 37 4f 66 62 54 55 68 52 76 6c 68 48 4c 50 6e 54 6e 6e 2b 37 34 35 4d 33 64 6d 41 48 62 73 66 36 38 41 2b 36 4d 43 54 4d 57 50 41 6d 4e 6e 4d 4f 63 6b 41 4e 73 50 77 4a 4d 79 6e 36 58 52 58 30 4c 2f 4c 58 44 2b 41 6d 59 32 50 6e 53 4b 32 35 6d 41 47 34 6b 6a 30 41 58 58 67 4c 4f 4a 33 72 36 2b 61 44 67 55 68 6d 41 77 43 49 46 41 51 50 42 73 62 57 31 42 76 56 36 48 63 71 55 4d 75 57 79 32 41 49 77 2f 67 78 72 Data Ascii: 1db8EHAAAD20lEQVRYCe1WS09TQRQ+01tuS2mhhRqMCxN8JRKJ7pQoO1cGDfEfGBPdulLRwEJUoktxZeIfcGFMJEaXiK7VaNwoIUGjKRZKH/RdxnNm5t7OfbTUhRvlhHLPnTnn+745M3dmAHbsf68A+6MCTMWPAmNnMOckANsPwJMyn6XRX0L/LXD+AmY2PnSK25mAG4kj0AXXgLOJ3r6+aDgUhmAwCIFAQPBsbW1BvV6HcqUMuWy2AIw/gxr
2024-05-15 22:37:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50114	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:09 UTC	788	OUT	GET /public/shared/css/shared_responsive.css?v=eghn9DNyCY67&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:10 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:09 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=13656261 Expires: Mon, 21 Oct 2024 00:01:30 GMT
2024-05-15 22:37:10 UTC	16139	IN	Data Raw: 34 61 39 63 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6d 6f 76 65 73 63 72 6f 6c 6c 74 6f 63 6f 6e 74 65 6e 74 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 72 69 67 68 74 3a 20 30 3b 0d 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 2c 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 20 2e 72 65 73 70 6f 6e 73 69 76 65 Data Ascii: 4a9c.responsive_page_frame {position: relative;}body.movescrolltocontent .responsive_page_frame {position: fixed;top: 0;right: 0;bottom: 0;left: 0;overflow: auto;}body.overflow_hidden,body.overflow_hidden .responsive
2024-05-15 22:37:10 UTC	2969	IN	Data Raw: 73 6d 61 6c 6c 65 72 20 73 63 72 65 65 6e 73 20 61 6e 64 20 65 61 73 69 65 72 20 74 6f 20 74 61 70 20 77 68 65 6e 20 7a 6f 6f 6d 65 64 20 6f 75 74 20 2a 2f 0d 0a 0d 0a 68 74 6d 6c 2e 66 6f 72 63 65 5f 64 65 73 6b 74 6f 70 20 62 6f 64 79 20 23 66 6f 6f 74 65 72 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 30 3b 0d 0a 7d 0d 0a 0d 0a 68 74 6d 6c 2e 66 6f 72 63 65 5f 64 65 73 6b 74 6f 70 20 62 6f 64 79 20 23 66 6f 6f 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 73 70 61 63 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 36 34 70 78 3b 0d 0a 7d 0d Data Ascii: smaller screens and easier to tap when zoomed out */html.force_desktop body #footer .responsive_optin_link {display: block;text-align: center;padding: 20px 0;}html.force_desktop body #footer_responsive_optin_spacer {height: 64px;}
2024-05-15 22:37:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50115	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:09 UTC	784	OUT	GET /public/shared/css/apphub_images.css?v=_0CllnFpmuY6&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:10 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:09 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15323488 Expires: Sat, 09 Nov 2024 07:08:37 GMT
2024-05-15 22:37:10 UTC	3713	IN	Data Raw: 65 37 61 0d 0a 0d 0a 0d 0a 0d 0a 2e 61 70 70 48 75 62 4e 65 77 73 49 63 6f 6e 48 6f 6c 64 65 72 2e 65 75 72 6f 67 61 6d 65 72 0d 0a 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 6e 65 77 73 2f 69 6d 67 5f 65 75 72 6f 67 61 6d 65 72 2e 67 69 66 27 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 70 70 48 75 62 4e 65 77 73 49 63 6f 6e 48 6f 6c 64 65 72 2e 6b 6f 74 61 6b 75 0d 0a 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 Data Ascii: e7a.appHubNewsIconHolder.eurogamer{background-image:url('https://community.cloudflare.steamstatic.com/public/shared/images/news/img_eurogamer.gif');}.appHubNewsIconHolder.kotaku{background-image:url('https://community.cloudflare.st
2024-05-15 22:37:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50116	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:10 UTC	777	OUT	GET /public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:11 UTC	245	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:11 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15404494 Expires: Sun, 10 Nov 2024 05:38:45 GMT
2024-05-15 22:37:11 UTC	12812	IN	Data Raw: 33 32 30 34 0d 0a 0d 0a 0d 0a 2e 61 3a 66 6f 63 75 73 20 7b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 68 65 61 64 65 72 42 61 72 20 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0d 0a 09 6d 61 72 67 69 6e 3a 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 31 31 31 31 3b 0d 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 35 34 35 34 35 34 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 68 65 61 64 65 72 4c 69 6e 6b 2c 61 2e 68 65 61 64 65 72 4c 69 6e 6b 3a 61 63 74 69 76 65 2c 61 2e 68 65 61 64 65 72 4c 69 6e 6b 3a 76 69 73 69 Data Ascii: 3204.a:focus {outline: 0 none;}#headerBar {text-align:left;margin:0;padding:0;background-color:#111111;width:100%;color:#545454;font-size:10px;margin-bottom:0;}a.headerLink,a.headerLink:active,a.headerLink:visi
2024-05-15 22:37:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50117	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:10 UTC	760	OUT	GET /public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:11 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:11 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=13661810 Expires: Mon, 21 Oct 2024 01:34:01 GMT
2024-05-15 22:37:11 UTC	16113	IN	Data Raw: 33 65 65 39 0d 0a 0d 0a 2f 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 4a 61 76 61 53 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 2c 20 76 65 72 73 69 6f 6e 20 31 2e 37 0d 0a 20 2a 20 20 28 63 29 20 32 30 30 35 2d 32 30 31 30 20 53 61 6d 20 53 74 65 70 68 65 6e 73 6f 6e 0d 0a 20 2a 0d 0a 20 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 69 73 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 20 46 6f 72 20 64 65 74 61 69 6c 73 2c 20 73 65 65 20 74 68 65 20 50 72 6f 74 6f 74 79 70 65 20 77 65 62 20 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 6f 74 6f 74 79 70 65 6a 73 2e 6f 72 67 2f 0d 0a 20 2a 0d 0a 20 2a Data Ascii: 3ee9/* Prototype JavaScript framework, version 1.7 * (c) 2005-2010 Sam Stephenson * * Prototype is freely distributable under the terms of an MIT-style license. * For details, see the Prototype web site: http://www.prototypejs.org/ * *
2024-05-15 22:37:11 UTC	16384	IN	Data Raw: 33 66 66 38 0d 0a 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 67 27 29 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 72 61 63 74 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 61 74 63 68 41 6c 6c 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 67 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 6d 61 74 63 68 4f 6e 65 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 27 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 28 74 68 69 73 2e 6d 61 74 63 68 28 6d 61 74 63 68 41 6c 6c 29 20 7c 7c 20 5b Data Ascii: 3ff8gExp(Prototype.ScriptFragment, 'img'), ''); } function extractScripts() { var matchAll = new RegExp(Prototype.ScriptFragment, 'img'), matchOne = new RegExp(Prototype.ScriptFragment, 'im'); return (this.match(matchAll) \|\| [
2024-05-15 22:37:12 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 6f 6e 20 24 48 28 6f 62 6a 65 63 74 29 20 7b 0d 0a 20 20 72 65 74 75 72 6e 20 6e 65 77 20 48 61 73 68 28 6f 62 6a 65 63 74 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 76 61 72 20 48 61 73 68 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 45 6e 75 6d 65 72 61 62 6c 65 2c 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 69 61 6c 69 7a 65 28 6f 62 6a 65 63 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 5f 6f 62 6a 65 63 74 20 3d 20 4f 62 6a 65 63 74 2e 69 73 48 61 73 68 28 6f 62 6a 65 63 74 29 20 3f 20 6f 62 6a 65 63 74 2e 74 6f 4f 62 6a 65 63 74 28 29 20 3a 20 4f 62 6a 65 63 74 2e 63 6c 6f 6e 65 28 6f 62 6a 65 63 74 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 5f 65 61 63 68 28 69 74 Data Ascii: 3ff0on $H(object) { return new Hash(object);};var Hash = Class.create(Enumerable, (function() { function initialize(object) { this._object = Object.isHash(object) ? object.toObject() : Object.clone(object); } function _each(it
2024-05-15 22:37:12 UTC	8	IN	Data Raw: 33 66 65 38 0d 0a 61 72 Data Ascii: 3fe8ar
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 20 69 20 3d 20 30 2c 20 65 6c 65 6d 65 6e 74 73 20 3d 20 5b 5d 2c 20 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0d 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 73 2e 70 75 73 68 28 24 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 73 3b 0d 0a 20 20 7d 0d 0a 20 20 69 66 20 28 4f 62 6a 65 63 74 2e 69 73 53 74 72 69 6e 67 28 65 6c 65 6d 65 6e 74 29 29 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 65 78 74 65 6e 64 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 7d 0d 0a 0d Data Ascii: i = 0, elements = [], length = arguments.length; i < length; i++) elements.push($(arguments[i])); return elements; } if (Object.isString(element)) element = document.getElementById(element); return Element.extend(element);}
2024-05-15 22:37:12 UTC	16352	IN	Data Raw: 63 65 73 74 6f 72 2e 63 6f 6e 74 61 69 6e 73 29 0d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 6e 63 65 73 74 6f 72 2e 63 6f 6e 74 61 69 6e 73 28 65 6c 65 6d 65 6e 74 29 20 26 26 20 61 6e 63 65 73 74 6f 72 20 21 3d 3d 20 65 6c 65 6d 65 6e 74 3b 0d 0a 0d 0a 20 20 20 20 77 68 69 6c 65 20 28 65 6c 65 6d 65 6e 74 20 3d 20 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 0d 0a 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 20 3d 3d 20 61 6e 63 65 73 74 6f 72 29 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 73 63 72 6f 6c 6c 54 6f 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d Data Ascii: cestor.contains) return ancestor.contains(element) && ancestor !== element; while (element = element.parentNode) if (element == ancestor) return true; return false; }, scrollTo: function(element) { element = $(elem
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 37 66 64 39 0d 0a 3b 0d 0a 0d 0a 7d 29 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 29 3b 0d 0a 0d 0a 45 6c 65 6d 65 6e 74 2e 65 78 74 65 6e 64 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 44 65 66 69 63 69 65 6e 63 79 28 74 61 67 4e 61 6d 65 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 45 6c 65 6d 65 6e 74 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 70 72 6f 74 6f 20 3d 20 77 69 6e 64 6f 77 2e 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 70 72 6f 74 6f 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 64 20 3d 20 27 5f Data Ascii: 7fd9;})(document.createElement('div'));Element.extend = (function() { function checkDeficiency(tagName) { if (typeof window.Element != 'undefined') { var proto = window.Element.prototype; if (proto) { var id = '_
2024-05-15 22:37:12 UTC	16353	IN	Data Raw: 67 29 20 74 68 69 73 2e 5f 65 6e 64 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 54 6f 70 20 3d 20 74 68 69 73 2e 67 65 74 28 27 62 6f 72 64 65 72 2d 74 6f 70 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 62 42 6f 74 74 6f 6d 20 3d 20 74 68 69 73 2e 67 65 74 28 27 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 27 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 54 6f 70 20 3d 20 74 68 69 73 2e 67 65 74 28 27 70 61 64 64 69 6e 67 2d 74 6f 70 27 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 70 42 6f 74 74 6f 6d 20 3d 20 74 68 69 73 2e 67 65 74 28 27 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 27 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 Data Ascii: g) this._end(); return 0; } var bTop = this.get('border-top'), bBottom = this.get('border-bottom'); var pTop = this.get('padding-top'), pBottom = this.get('padding-bottom'); if (!thi
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 09 69 66 20 28 20 45 78 70 72 2e 72 65 6c 61 74 69 76 65 5b 20 73 65 6c 65 63 74 6f 72 20 5d 20 29 0d 0a 09 09 09 09 09 73 65 6c 65 63 74 6f 72 20 2b 3d 20 70 61 72 74 73 2e 73 68 69 66 74 28 29 3b 0d 0a 0d 0a 09 09 09 09 73 65 74 20 3d 20 70 6f 73 50 72 6f 63 65 73 73 28 20 73 65 6c 65 63 74 6f 72 2c 20 73 65 74 20 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 69 66 20 28 20 21 73 65 65 64 20 26 26 20 70 61 72 74 73 2e 6c 65 6e 67 74 68 20 3e 20 31 20 26 26 20 63 6f 6e 74 65 78 74 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 39 20 26 26 20 21 63 6f 6e 74 65 78 74 58 4d 4c 20 26 26 0d 0a 09 09 09 09 45 78 70 72 2e 6d 61 74 63 68 2e 49 44 2e 74 65 73 74 28 70 61 72 74 73 5b 30 5d 29 20 26 26 20 21 45 78 Data Ascii: 7fe0if ( Expr.relative[ selector ] )selector += parts.shift();set = posProcess( selector, set );}}} else {if ( !seed && parts.length > 1 && context.nodeType === 9 && !contextXML &&Expr.match.ID.test(parts[0]) && !Ex
2024-05-15 22:37:12 UTC	16360	IN	Data Raw: 6e 20 7c 7c 20 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 20 29 20 7b 0d 0a 09 09 09 69 66 20 28 20 61 20 3d 3d 20 62 20 29 20 7b 0d 0a 09 09 09 09 68 61 73 44 75 70 6c 69 63 61 74 65 20 3d 20 74 72 75 65 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 72 65 74 75 72 6e 20 30 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 76 61 72 20 72 65 74 20 3d 20 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 20 26 20 34 20 3f 20 2d 31 20 3a 20 61 20 3d 3d 3d 20 62 20 3f 20 30 20 3a 20 31 3b 0d 0a 09 09 69 66 20 28 20 72 65 74 20 3d 3d 3d 20 30 20 29 20 7b 0d 0a 09 09 09 68 61 73 44 75 70 6c 69 63 61 74 65 20 3d 20 74 72 75 65 3b 0d 0a 09 09 7d 0d 0a 09 09 72 65 74 75 72 6e 20 72 65 74 3b 0d 0a 09 7d 3b 0d 0a 7d 20 65 Data Ascii: n \|\| !b.compareDocumentPosition ) {if ( a == b ) {hasDuplicate = true;}return 0;}var ret = a.compareDocumentPosition(b) & 4 ? -1 : a === b ? 0 : 1;if ( ret === 0 ) {hasDuplicate = true;}return ret;};} e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50118	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:10 UTC	817	OUT	GET /public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=english&_cdn=cloudflare&load=effects,controls,slider,dragdrop HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:12 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:11 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=14789003 Expires: Sun, 03 Nov 2024 02:40:34 GMT
2024-05-15 22:37:12 UTC	16113	IN	Data Raw: 33 65 65 39 0d 0a 2f 2f 20 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 20 73 63 72 69 70 74 61 63 75 6c 6f 75 73 2e 6a 73 20 76 31 2e 38 2e 31 2c 20 54 68 75 20 4a 61 6e 20 30 33 20 32 32 3a 30 37 3a 31 32 20 2d 30 35 30 30 20 32 30 30 38 0d 0a 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 2d 32 30 30 37 20 54 68 6f 6d 61 73 20 46 75 63 68 73 20 28 68 74 74 70 3a 2f 2f 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 2c 20 68 74 74 70 3a 2f 2f 6d 69 72 2e 61 63 75 6c 6f 2e 75 73 29 0d 0a 2f 2f 20 0d 0a 2f 2f 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 0d 0a 2f 2f 20 61 20 Data Ascii: 3ee9// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)// // Permission is hereby granted, free of charge, to any person obtaining// a
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 33 66 66 38 0d 0a 65 6d 65 6e 74 2c 20 0d 0a 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 78 3a 20 74 6f 4c 65 66 74 2c 20 79 3a 20 74 6f 54 6f 70 20 7d 2c 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 7c 7c 20 7b 20 7d 29 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 45 66 66 65 63 74 2e 53 63 61 6c 65 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 45 66 66 65 63 74 2e 42 61 73 65 2c 20 7b 0d 0a 20 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 70 65 72 63 65 6e 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 20 74 68 72 6f 77 28 45 66 66 65 63 74 2e 5f 65 6c 65 6d 65 6e 74 44 6f 65 Data Ascii: 3ff8ement, Object.extend({ x: toLeft, y: toTop }, arguments[3] \|\| { }));};Effect.Scale = Class.create(Effect.Base, { initialize: function(element, percent) { this.element = $(element); if (!this.element) throw(Effect._elementDoe
2024-05-15 22:37:12 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 79 6c 65 2e 68 65 69 67 68 74 2c 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 77 69 64 74 68 2c 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 65 6c 65 6d 65 6e 74 2e 67 65 74 49 6e 6c 69 6e 65 4f 70 61 63 69 74 79 28 29 20 7d 3b 0d 0a 0d 0a 20 20 76 61 72 20 64 69 6d 73 20 3d 20 65 6c 65 6d 65 6e 74 2e 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 29 3b 0d 0a 20 20 76 61 72 20 6d 6f 76 65 58 2c 20 6d 6f 76 65 59 3b 0d 0a 20 20 0d 0a 20 20 73 77 69 74 63 68 20 28 6f 70 74 69 6f 6e 73 2e 64 69 72 65 63 74 69 6f 6e 29 20 7b 0d 0a 20 20 20 20 63 61 73 65 20 27 74 6f 70 2d 6c 65 66 74 27 3a 0d 0a 20 20 20 20 20 20 6d 6f 76 65 58 20 3d 20 6d 6f 76 65 59 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 62 72 65 61 6b 3b 0d Data Ascii: 3ff0yle.height, width: element.style.width, opacity: element.getInlineOpacity() }; var dims = element.getDimensions(); var moveX, moveY; switch (options.direction) { case 'top-left': moveX = moveY = 0; break;
2024-05-15 22:37:12 UTC	8	IN	Data Raw: 33 66 65 39 0d 0a 74 75 Data Ascii: 3fe9tu
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 72 6e 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 65 6c 73 65 20 0d 0a 20 20 20 20 20 20 20 69 66 28 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 3d 3d 45 76 65 6e 74 2e 4b 45 59 5f 54 41 42 20 7c 7c 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 3d 3d 45 76 65 6e 74 2e 4b 45 59 5f 52 45 54 55 52 4e 20 7c 7c 20 0d 0a 20 20 20 20 20 20 20 20 20 28 50 72 6f 74 6f 74 79 70 65 2e 42 72 6f 77 73 65 72 2e 57 65 62 4b 69 74 20 3e 20 30 20 26 26 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3d 3d 20 30 29 29 20 72 65 74 75 72 6e 3b 0d 0a 0d 0a 20 20 20 20 74 68 69 73 2e 63 68 61 6e 67 65 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 68 61 73 46 6f 63 75 73 20 3d 20 74 72 75 65 3b 0d 0a 0d 0a 20 20 20 20 69 66 28 74 68 69 73 2e 6f 62 73 65 72 76 65 72 29 Data Ascii: rn; } else if(event.keyCode==Event.KEY_TAB \|\| event.keyCode==Event.KEY_RETURN \|\| (Prototype.Browser.WebKit > 0 && event.keyCode == 0)) return; this.changed = true; this.hasFocus = true; if(this.observer)
2024-05-15 22:37:12 UTC	16353	IN	Data Raw: 6e 73 2e 6c 6f 61 64 54 65 78 74 55 52 4c 29 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 70 6f 73 74 50 72 6f 63 65 73 73 45 64 69 74 46 69 65 6c 64 28 29 3b 0d 0a 20 20 20 20 69 66 20 28 65 29 20 45 76 65 6e 74 2e 73 74 6f 70 28 65 29 3b 0d 0a 20 20 7d 2c 0d 0a 20 20 65 6e 74 65 72 48 6f 76 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 6f 76 65 72 43 6c 61 73 73 4e 61 6d 65 29 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 4e 61 6d 65 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 6f 76 65 72 43 6c 61 73 73 4e 61 6d 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 73 61 76 69 6e 67 29 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 74 68 69 73 Data Ascii: ns.loadTextURL) this.postProcessEditField(); if (e) Event.stop(e); }, enterHover: function(e) { if (this.options.hoverClassName) this.element.addClassName(this.options.hoverClassName); if (this._saving) return; this
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 68 69 73 2e 75 70 64 61 74 65 2e 62 69 6e 64 41 73 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 68 69 73 29 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 49 6e 69 74 69 61 6c 69 7a 65 20 68 61 6e 64 6c 65 73 20 69 6e 20 72 65 76 65 72 73 65 20 28 6d 61 6b 65 20 73 75 72 65 20 66 69 72 73 74 20 68 61 6e 64 6c 65 20 69 73 20 61 63 74 69 76 65 29 0d 0a 20 20 20 20 74 68 69 73 2e 68 61 6e 64 6c 65 73 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 20 7b 0d 0a 20 20 20 20 20 20 69 20 3d 20 73 6c 69 64 65 72 2e 68 61 6e 64 6c 65 73 2e 6c 65 6e 67 74 68 2d 31 2d 69 3b 0d 0a 20 20 20 20 20 20 73 6c 69 64 65 72 2e 73 65 74 56 61 6c 75 65 28 70 61 72 73 65 46 6c 6f 61 74 28 0d 0a 20 20 20 20 20 20 20 20 28 4f 62 6a 65 63 74 2e 69 73 41 72 72 61 Data Ascii: 7fd8his.update.bindAsEventListener(this); // Initialize handles in reverse (make sure first handle is active) this.handles.each( function(h,i) { i = slider.handles.length-1-i; slider.setValue(parseFloat( (Object.isArra
2024-05-15 22:37:12 UTC	16352	IN	Data Raw: 3a 20 30 0d 0a 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 69 66 28 21 61 72 67 75 6d 65 6e 74 73 5b 31 5d 20 7c 7c 20 4f 62 6a 65 63 74 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2e 65 6e 64 65 66 66 65 63 74 29 29 0d 0a 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 64 65 66 61 75 6c 74 73 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 61 72 74 65 66 66 65 63 74 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 5f 6f 70 61 63 69 74 79 20 3d 20 45 6c 65 6d 65 6e 74 2e 67 65 74 4f 70 61 63 69 74 79 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 44 72 61 67 67 61 62 6c 65 2e 5f 64 72 61 67 67 69 6e 67 5b 65 6c 65 6d 65 6e 74 Data Ascii: : 0 }; if(!arguments[1] \|\| Object.isUndefined(arguments[1].endeffect)) Object.extend(defaults, { starteffect: function(element) { element._opacity = Element.getOpacity(element); Draggable._dragging[element
2024-05-15 22:37:12 UTC	7873	IN	Data Raw: 31 65 62 39 0d 0a 20 20 20 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 2e 6f 6e 6c 79 2c 20 6f 70 74 69 6f 6e 73 2e 74 72 65 65 20 3f 20 74 72 75 65 20 3a 20 66 61 6c 73 65 2c 20 6f 70 74 69 6f 6e 73 2e 74 61 67 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 66 69 6e 64 54 72 65 65 45 6c 65 6d 65 6e 74 73 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 66 69 6e 64 43 68 69 6c 64 72 65 6e 28 0d 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 2e 6f 6e 6c 79 2c 20 6f 70 74 69 6f 6e 73 2e 74 72 65 65 20 3f 20 74 72 75 65 20 3a 20 66 61 6c 73 65 2c 20 6f 70 74 69 6f 6e 73 2e 74 72 65 65 54 61 67 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 Data Ascii: 1eb9 element, options.only, options.tree ? true : false, options.tag); }, findTreeElements: function(element, options) { return Element.findChildren( element, options.only, options.tree ? true : false, options.treeTag); },
2024-05-15 22:37:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50119	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:10 UTC	762	OUT	GET /public/javascript/global.js?v=PyuRtGtUpR0t&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:12 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:11 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=14539645 Expires: Thu, 31 Oct 2024 05:24:36 GMT
2024-05-15 22:37:12 UTC	16113	IN	Data Raw: 33 65 65 39 0d 0a 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 67 69 73 74 65 72 53 74 65 61 6d 4f 6e 57 65 62 50 61 6e 65 6c 53 68 6f 77 6e 48 61 6e 64 6c 65 72 28 20 66 20 29 0d 0a 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 69 66 20 28 20 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 20 3d 3d 3d 20 22 76 69 73 69 62 6c 65 22 20 29 0d 0a 09 09 09 66 28 29 3b 0d 0a 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 67 69 73 74 65 72 53 74 65 61 6d 4f 6e 57 65 62 50 61 6e 65 6c 48 69 64 64 65 6e 48 61 6e 64 6c 65 72 28 20 66 20 29 0d 0a 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 Data Ascii: 3ee9function RegisterSteamOnWebPanelShownHandler( f ){$J(document).on( 'visibilitychange', function() {if ( document.visibilityState === "visible" )f();});}function RegisterSteamOnWebPanelHiddenHandler( f ){$J(document)
2024-05-15 22:37:12 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 2c 22 62 57 68 6f 6c 65 55 6e 69 74 73 4f 6e 6c 79 22 3a 74 72 75 65 2c 22 73 74 72 44 65 63 69 6d 61 6c 53 79 6d 62 6f 6c 22 3a 22 2c 22 2c 22 73 74 72 54 68 6f 75 73 61 6e 64 73 53 65 70 61 72 61 74 6f 72 22 3a 22 2e 22 2c 22 73 74 72 53 79 6d 62 6f 6c 41 6e 64 4e 75 6d 62 65 72 53 65 70 61 72 61 74 6f 72 22 3a 22 22 7d 2c 22 55 59 55 22 3a 7b 22 73 74 72 43 6f 64 65 22 3a 22 55 59 55 22 2c 22 65 43 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 34 31 2c 22 73 74 72 53 79 6d 62 6f 6c 22 3a 22 24 55 22 2c 22 62 53 79 6d 62 6f 6c 49 73 50 72 65 66 69 78 22 3a 74 72 75 65 2c 22 62 57 68 6f 6c 65 55 6e 69 74 73 4f 6e 6c 79 22 3a 74 72 75 65 2c 22 73 74 72 44 65 63 69 6d 61 6c 53 79 6d 62 6f 6c 22 3a 22 2c 22 2c 22 73 74 72 54 68 6f 75 73 61 6e 64 Data Ascii: 3ff0,"bWholeUnitsOnly":true,"strDecimalSymbol":",","strThousandsSeparator":".","strSymbolAndNumberSeparator":""},"UYU":{"strCode":"UYU","eCurrencyCode":41,"strSymbol":"$U","bSymbolIsPrefix":true,"bWholeUnitsOnly":true,"strDecimalSymbol":",","strThousand
2024-05-15 22:37:12 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 48 65 69 67 68 74 20 2b 20 27 2c 77 69 64 74 68 3d 31 30 32 38 2c 72 65 73 69 7a 65 3d 79 65 73 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 27 20 29 3b 0d 0a 0d 0a 09 09 77 69 6e 4f 66 66 65 72 2e 66 6f 63 75 73 28 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 4c 6f 67 6f 75 74 28 29 0d 0a 7b 0d 0a 09 50 6f 73 74 54 6f 55 52 4c 57 69 74 68 53 65 73 73 69 6f 6e 28 20 27 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 6c 6f 67 69 6e 2f 6c 6f 67 6f 75 74 2f 27 20 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 73 74 72 54 61 72 67 65 74 4c 61 6e 67 75 61 67 65 2c 20 62 53 74 61 79 4f 6e 50 61 67 65 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 4d 6f 64 61 6c 20 3d Data Ascii: 3ff0Height + ',width=1028,resize=yes,scrollbars=yes' );winOffer.focus();}}function Logout(){PostToURLWithSession( 'https://gtm.you1.cn/login/logout/' );}function ChangeLanguage( strTargetLanguage, bStayOnPage ){var Modal =
2024-05-15 22:37:12 UTC	8	IN	Data Raw: 33 66 65 39 0d 0a 65 75 Data Ascii: 3fe9eu
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 70 69 64 27 5d 3b 0d 0a 09 09 74 68 69 73 2e 6d 5f 63 6f 6d 6d 65 6e 74 63 6f 75 6e 74 49 44 20 3d 20 72 67 43 6f 6d 6d 65 6e 74 44 61 74 61 5b 27 63 6f 6d 6d 65 6e 74 63 6f 75 6e 74 69 64 27 5d 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 6d 5f 62 53 75 62 73 63 72 69 62 65 64 20 3d 20 72 67 43 6f 6d 6d 65 6e 74 44 61 74 61 5b 27 73 75 62 73 63 72 69 62 65 64 27 5d 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 6d 5f 62 48 61 73 50 61 67 69 6e 67 20 3d 20 21 72 67 43 6f 6d 6d 65 6e 74 44 61 74 61 5b 27 6e 6f 5f 70 61 67 69 6e 67 27 5d 3b 0d 0a 09 09 74 68 69 73 2e 6d 5f 62 54 72 61 63 6b 4e 61 76 69 67 61 74 69 6f 6e 20 3d 20 21 21 72 67 43 6f 6d 6d 65 6e 74 44 61 74 61 5b 27 74 72 61 63 6b 5f 6e 61 76 69 67 61 74 69 6f 6e 27 5d 3b 0d 0a 0d 0a 0d 0a 09 09 76 61 72 20 73 74 Data Ascii: pid'];this.m_commentcountID = rgCommentData['commentcountid'];this.m_bSubscribed = rgCommentData['subscribed'];this.m_bHasPaging = !rgCommentData['no_paging'];this.m_bTrackNavigation = !!rgCommentData['track_navigation'];var st
2024-05-15 22:37:12 UTC	16353	IN	Data Raw: 74 68 69 73 2e 6d 5f 6e 52 65 6e 64 65 72 41 6a 61 78 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 20 29 2c 0d 0a 09 09 09 6f 6e 43 6f 6d 70 6c 65 74 65 3a 20 74 68 69 73 2e 4f 6e 41 4a 41 58 43 6f 6d 70 6c 65 74 65 2e 62 69 6e 64 28 20 74 68 69 73 20 29 0d 0a 09 09 7d 29 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 47 6f 54 6f 50 61 67 65 57 69 74 68 43 6f 6d 6d 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 67 69 64 43 6f 6d 6d 65 6e 74 2c 20 65 52 65 6e 64 65 72 52 65 61 73 6f 6e 20 29 0d 0a 09 7b 0d 0a 09 09 2f 2f 20 73 65 65 20 69 66 20 69 74 27 73 20 6f 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 70 61 67 65 0d 0a 09 09 69 66 20 28 20 74 68 69 73 2e 6d 5f 62 4c 6f 61 64 69 6e 67 20 7c 7c 20 24 28 27 63 6f 6d 6d 65 6e 74 5f 27 20 2b 20 67 69 64 43 6f 6d 6d 65 6e 74 20 Data Ascii: this.m_nRenderAjaxSequenceNumber ),onComplete: this.OnAJAXComplete.bind( this )});},GoToPageWithComment: function( gidComment, eRenderReason ){// see if it's on the current pageif ( this.m_bLoading \|\| $('comment_' + gidComment
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 35 35 62 37 0d 0a 6e 74 54 68 72 65 61 64 73 5b 69 64 5d 2e 44 65 6c 65 74 65 43 6f 6d 6d 65 6e 74 28 20 67 69 64 63 6f 6d 6d 65 6e 74 20 29 3b 0d 0a 7d 3b 0d 0a 43 43 6f 6d 6d 65 6e 74 54 68 72 65 61 64 2e 55 6e 44 65 6c 65 74 65 43 6f 6d 6d 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 2c 20 67 69 64 63 6f 6d 6d 65 6e 74 20 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 67 5f 72 67 43 6f 6d 6d 65 6e 74 54 68 72 65 61 64 73 5b 69 64 5d 20 29 0d 0a 09 09 67 5f 72 67 43 6f 6d 6d 65 6e 74 54 68 72 65 61 64 73 5b 69 64 5d 2e 44 65 6c 65 74 65 43 6f 6d 6d 65 6e 74 28 20 67 69 64 63 6f 6d 6d 65 6e 74 2c 20 74 72 75 65 20 29 3b 0d 0a 7d 3b 0d 0a 43 43 6f 6d 6d 65 6e 74 54 68 72 65 61 64 2e 4d 61 72 6b 53 70 61 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 2c 20 Data Ascii: 55b7ntThreads[id].DeleteComment( gidcomment );};CCommentThread.UnDeleteComment = function( id, gidcomment ){if ( g_rgCommentThreads[id] )g_rgCommentThreads[id].DeleteComment( gidcomment, true );};CCommentThread.MarkSpam = function( id,
2024-05-15 22:37:12 UTC	5567	IN	Data Raw: 69 6e 44 69 6d 28 27 68 27 2c 27 76 27 29 3b 0d 0a 09 76 61 72 20 73 6c 20 3d 20 77 69 6e 44 69 6d 28 27 77 27 2c 27 73 27 29 3b 0d 0a 09 76 61 72 20 73 74 20 3d 20 77 69 6e 44 69 6d 28 27 68 27 2c 27 73 27 29 3b 0d 0a 09 2f 2f 20 6d 6f 75 73 65 20 78 2f 79 20 77 69 74 68 69 6e 20 76 69 65 77 70 6f 72 74 0d 0a 09 76 61 72 20 76 6d 58 20 3d 20 65 2e 63 6c 69 65 6e 74 58 3b 0d 0a 09 76 61 72 20 76 6d 59 20 3d 20 65 2e 63 6c 69 65 6e 74 59 3b 0d 0a 09 2f 2f 20 6d 6f 75 73 65 20 78 2f 79 20 77 69 74 68 69 6e 20 64 6f 63 75 6d 65 6e 74 0d 0a 09 76 61 72 20 73 6d 58 20 3d 20 76 6d 58 20 2b 20 73 6c 3b 0d 0a 09 76 61 72 20 73 6d 59 20 3d 20 76 6d 59 20 2b 20 73 74 3b 0d 0a 09 76 61 72 20 6c 20 3d 20 28 70 77 20 3e 20 76 6d 58 29 20 3f 20 28 73 6d 58 20 2b 20 6f Data Ascii: inDim('h','v');var sl = winDim('w','s');var st = winDim('h','s');// mouse x/y within viewportvar vmX = e.clientX;var vmY = e.clientY;// mouse x/y within documentvar smX = vmX + sl;var smY = vmY + st;var l = (pw > vmX) ? (smX + o
2024-05-15 22:37:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50120	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:11 UTC	764	OUT	GET /public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:12 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:11 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=14656838 Expires: Fri, 01 Nov 2024 13:57:49 GMT
2024-05-15 22:37:12 UTC	16132	IN	Data Raw: 37 65 65 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 Data Ascii: 7ee1/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery require
2024-05-15 22:37:12 UTC	16357	IN	Data Raw: 21 28 62 5b 68 5d 3d 66 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 62 5b 30 5d 3d 61 2c 64 28 62 2c 6e 75 6c 6c 2c 66 2c 63 29 2c 21 63 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 66 62 28 61 2c 62 29 2e 6c 65 6e 67 74 68 3e 30 7d 7d 29 2c 63 6f 6e 74 61 69 6e 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 62 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 65 28 62 29 29 2e 69 6e 64 65 78 4f 66 28 61 29 3e 2d 31 7d 7d 29 2c 6c 61 6e 67 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: !(b[h]=f))}):function(a,e,f){return b[0]=a,d(b,null,f,c),!c.pop()}}),has:hb(function(a){return function(b){return fb(a,b).length>0}}),contains:hb(function(a){return function(b){return(b.textContent\|\|b.innerText\|\|e(b)).indexOf(a)>-1}}),lang:hb(function(a){
2024-05-15 22:37:12 UTC	16368	IN	Data Raw: 33 66 65 38 0d 0a 64 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 3f 28 66 3d 67 5b 62 5d 2c 6e 75 6c 6c 3d 3d 66 26 26 28 66 3d 67 5b 6d 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 5d 29 29 3a 66 3d 67 2c 66 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 2c 63 29 7b 69 66 28 6d 2e 61 63 63 65 70 74 44 61 74 61 28 61 29 29 7b 76 61 72 20 64 2c 65 2c 66 3d 61 2e 6e 6f 64 65 54 79 70 65 2c 67 3d 66 3f 6d 2e 63 61 63 68 65 3a 61 2c 68 3d 66 3f 61 5b 6d 2e 65 78 70 61 6e 64 6f 5d 3a 6d 2e 65 78 70 61 6e 64 6f 3b 69 66 28 67 5b 68 5d 29 7b 69 66 28 62 26 26 28 64 3d 63 3f 67 5b 68 5d 3a 67 5b 68 5d 2e 64 61 74 61 29 29 7b 6d 2e 69 73 41 72 72 61 79 28 62 29 3f 62 3d 62 2e 63 6f 6e 63 61 74 28 6d 2e 6d 61 70 28 62 2c 6d 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: 3fe8d),"string"==typeof b?(f=g[b],null==f&&(f=g[m.camelCase(b)])):f=g,f}}function R(a,b,c){if(m.acceptData(a)){var d,e,f=a.nodeType,g=f?m.cache:a,h=f?a[m.expando]:m.expando;if(g[h]){if(b&&(d=c?g[h]:g[h].data)){m.isArray(b)?b=b.concat(m.map(b,m.camelCase
2024-05-15 22:37:12 UTC	16	IN	Data Raw: 33 66 66 30 0d 0a 62 2e 63 6f 6c 67 72 6f 75 70 Data Ascii: 3ff0b.colgroup
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 3d 72 62 2e 63 61 70 74 69 6f 6e 3d 72 62 2e 74 68 65 61 64 2c 72 62 2e 74 68 3d 72 62 2e 74 64 3b 66 75 6e 63 74 69 6f 6e 20 75 62 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 30 2c 66 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 3d 4b 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 7c 7c 22 2a 22 29 3a 74 79 70 65 6f 66 20 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 21 3d 3d 4b 3f 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 7c 7c 22 2a 22 29 3a 76 6f 69 64 20 30 3b 69 66 28 21 66 29 66 6f 72 28 66 3d 5b 5d 2c 63 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 61 3b 6e 75 6c 6c 21 3d 28 64 3d 63 5b 65 5d 29 3b 65 2b 2b 29 21 62 7c 7c 6d 2e 6e 6f 64 65 Data Ascii: =rb.caption=rb.thead,rb.th=rb.td;function ub(a,b){var c,d,e=0,f=typeof a.getElementsByTagName!==K?a.getElementsByTagName(b\|\|""):typeof a.querySelectorAll!==K?a.querySelectorAll(b\|\|""):void 0;if(!f)for(f=[],c=a.childNodes\|\|a;null!=(d=c[e]);e++)!b\|\|m.node
2024-05-15 22:37:12 UTC	16360	IN	Data Raw: 6c 69 6e 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2e 35 2d 4d 61 74 68 2e 63 6f 73 28 61 2a 4d 61 74 68 2e 50 49 29 2f 32 7d 7d 2c 6d 2e 66 78 3d 5a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2c 6d 2e 66 78 2e 73 74 65 70 3d 7b 7d 3b 76 61 72 20 24 62 2c 5f 62 2c 61 63 3d 2f 5e 28 3f 3a 74 6f 67 67 6c 65 7c 73 68 6f 77 7c 68 69 64 65 29 24 2f 2c 62 63 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 2b 2d 5d 29 3d 7c 29 28 22 2b 53 2b 22 29 28 5b 61 2d 7a 25 5d 2a 29 24 22 2c 22 69 22 29 2c 63 63 3d 2f 71 75 65 75 65 48 6f 6f 6b 73 24 2f 2c 64 63 3d 5b 69 63 5d 2c 65 63 3d 7b 22 2a 22 3a 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 Data Ascii: linear:function(a){return a},swing:function(a){return.5-Math.cos(aMath.PI)/2}},m.fx=Zb.prototype.init,m.fx.step={};var $b,_b,ac=/^(?:toggle\|show\|hide)$/,bc=new RegExp("^(?:([+-])=\|)("+S+")([a-z%])$","i"),cc=/queueHooks$/,dc=[ic],ec={"*":[function(a,b){v
2024-05-15 22:37:12 UTC	14213	IN	Data Raw: 33 37 37 64 0d 0a 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 61 2e 6d 69 6d 65 54 79 70 65 7c 7c 62 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 29 3b 69 66 28 65 29 66 6f 72 28 67 20 69 6e 20 68 29 69 66 28 68 5b 67 5d 26 26 68 5b 67 5d 2e 74 65 73 74 28 65 29 29 7b 69 2e 75 6e 73 68 69 66 74 28 67 29 3b 62 72 65 61 6b 7d 69 66 28 69 5b 30 5d 69 6e 20 63 29 66 3d 69 5b 30 5d 3b 65 6c 73 65 7b 66 6f 72 28 67 20 69 6e 20 63 29 7b 69 66 28 21 69 5b 30 5d 7c 7c 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 67 2b 22 20 22 2b 69 5b 30 5d 5d 29 7b 66 3d 67 3b 62 72 65 61 6b 7d 64 7c 7c 28 64 3d 67 29 7d 66 3d 66 7c 7c 64 7d 72 65 74 75 72 6e 20 66 3f 28 66 21 3d 3d 69 5b 30 5d 26 26 69 2e 75 6e 73 68 69 66 74 28 66 Data Ascii: 377did 0===e&&(e=a.mimeType\|\|b.getResponseHeader("Content-Type"));if(e)for(g in h)if(h[g]&&h[g].test(e)){i.unshift(g);break}if(i[0]in c)f=i[0];else{for(g in c){if(!i[0]\|\|a.converters[g+" "+i[0]]){f=g;break}d\|\|(d=g)}f=f\|\|d}return f?(f!==i[0]&&i.unshift(f
2024-05-15 22:37:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50121	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:11 UTC	761	OUT	GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:12 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:12 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=13661963 Expires: Mon, 21 Oct 2024 01:36:35 GMT
2024-05-15 22:37:12 UTC	16095	IN	Data Raw: 33 65 64 37 0d 0a 2f 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 54 68 69 73 20 70 6c 75 67 69 6e 20 77 69 6c 6c 20 63 72 65 61 74 65 20 64 69 76 2e 6a 73 54 6f 6f 6c 74 69 70 20 65 6c 65 6d 65 6e 74 73 20 28 6f 72 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6f 77 6e 21 29 20 69 6e 20 62 6f 64 79 20 66 6f 72 20 65 76 65 72 79 20 74 6f 6f 6c 74 69 70 20 6f 6e 20 74 68 65 20 70 61 67 65 2e 20 53 6f 6d 65 0d 0a 20 2a 20 62 61 73 69 63 20 43 53 53 20 69 73 20 61 70 70 6c 69 65 64 20 61 75 74 6f 6d 61 67 69 63 61 6c 6c 79 2c 20 62 75 74 20 79 6f 75 27 6c 6c 20 77 61 6e 74 20 74 6f 20 73 74 79 6c 65 20 69 74 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 66 72 6f 6d 20 74 68 65 72 65 2e 20 54 68 69 73 20 63 6f 64 65 20 77 69 6c 6c Data Ascii: 3ed7/* Requires jQuery * * This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will
2024-05-15 22:37:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50122	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:12 UTC	776	OUT	GET /public/shared/javascript/shared_global.js?v=wJD9maDpDcVL&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:13 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:12 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15253681 Expires: Fri, 08 Nov 2024 11:45:13 GMT
2024-05-15 22:37:13 UTC	16132	IN	Data Raw: 37 65 64 39 0d 0a 0d 0a 53 74 65 61 6d 20 3d 20 7b 0d 0a 09 73 6d 5f 62 49 6e 69 74 69 61 6c 69 7a 65 64 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 43 6c 69 65 6e 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 47 61 6d 65 4f 76 65 72 6c 61 79 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 54 65 6e 66 6f 6f 74 42 72 6f 77 73 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 43 68 61 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 41 70 70 3a 20 66 61 6c 73 65 2c 0d 0a 0d 0a 09 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 65 61 6d 2e Data Ascii: 7ed9Steam = {sm_bInitialized: false,sm_bUserInClient: false,sm_bUserInGameOverlay: false,sm_bUserInTenfootBrowser: false,sm_bUserInMobileChat: false,sm_bUserInMobileApp: false,BIsUserInSteamClient: function(){if ( !Steam.
2024-05-15 22:37:13 UTC	16349	IN	Data Raw: 6f 64 61 6c 5f 68 65 61 64 65 72 27 20 7d 29 20 29 3b 0d 0a 09 76 61 72 20 24 54 6f 70 42 61 72 20 3d 20 28 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6d 6f 64 61 6c 5f 74 6f 70 5f 62 61 72 27 20 7d 29 20 29 3b 0d 0a 09 69 66 20 28 20 73 74 72 54 69 74 6c 65 20 29 0d 0a 09 09 24 48 65 61 64 65 72 2e 61 70 70 65 6e 64 28 20 24 43 6c 6f 73 65 42 75 74 74 6f 6e 20 29 2e 61 70 70 65 6e 64 28 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 74 69 74 6c 65 5f 74 65 78 74 27 20 7d 20 29 2e 74 65 78 74 28 20 73 74 72 54 69 74 6c 65 20 29 20 29 3b 0d 0a 20 20 20 20 69 66 20 28 20 72 67 4d 6f 64 61 6c 50 61 72 61 6d 73 20 26 26 20 72 67 4d 6f 64 61 6c 50 61 72 61 6d 73 2e 73 74 72 53 75 62 54 69 74 6c 65 20 Data Ascii: odal_header' }) );var $TopBar = ( $J('<div/>', {'class': 'modal_top_bar' }) );if ( strTitle )$Header.append( $CloseButton ).append( $J('<div/>', {'class': 'title_text' } ).text( strTitle ) ); if ( rgModalParams && rgModalParams.strSubTitle
2024-05-15 22:37:13 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 78 20 31 30 70 78 20 23 30 30 30 30 30 30 3b 5c 72 5c 6e 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 30 30 43 43 46 46 3b 5c 72 5c 6e 7d 5c 72 5c 6e 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 20 7b 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f 70 6f 70 75 70 5f 63 6f 6e 74 65 6e 74 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e Data Ascii: 3ff0x 10px #000000;\r\n border-left: 2px solid #00CCFF;\r\n}\r\n@media all and (max-width: 910px) {\r\n body.responsive_page .cookiepreferences_popup_content {\r\n flex-direction: column;\r\n }\r\n body.responsive_page .cookiepreferen
2024-05-15 22:37:13 UTC	8	IN	Data Raw: 33 66 66 30 0d 0a 73 20 Data Ascii: 3ff0s
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: 29 3b 0d 0a 09 09 73 74 72 44 61 74 65 20 3d 20 27 3b 20 65 78 70 69 72 65 73 3d 27 20 2b 20 64 61 74 65 45 78 70 69 72 65 73 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 73 74 72 43 6f 6f 6b 69 65 4e 61 6d 65 20 2b 20 27 3d 27 20 2b 20 73 74 72 56 61 6c 75 65 20 2b 20 73 74 72 44 61 74 65 20 2b 20 27 3b 70 61 74 68 3d 27 20 2b 20 70 61 74 68 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 47 65 74 53 74 6f 72 61 67 65 46 72 6f 6d 43 6f 6f 6b 69 65 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 6f 53 74 6f 72 61 67 65 20 3d 20 7b 7d 3b 0d 0a 0d 0a 09 76 61 72 20 73 74 72 53 74 6f 72 61 67 65 4a 53 4f 4e 20 3d 20 56 5f 47 65 74 43 6f 6f 6b 69 65 28 20 27 73 74 6f 72 61 67 65 27 20 Data Ascii: );strDate = '; expires=' + dateExpires.toGMTString();}document.cookie = strCookieName + '=' + strValue + strDate + ';path=' + path;}function _GetStorageFromCookie(){var oStorage = {};var strStorageJSON = V_GetCookie( 'storage'
2024-05-15 22:37:13 UTC	16360	IN	Data Raw: 6e 20 6d 73 29 20 62 65 74 77 65 65 6e 20 75 70 64 61 74 65 73 0d 0a 0d 0a 09 69 66 20 28 20 72 67 53 65 61 72 63 68 44 61 74 61 5b 27 70 72 65 66 69 78 27 5d 20 29 0d 0a 09 09 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 3d 20 72 67 53 65 61 72 63 68 44 61 74 61 5b 27 70 72 65 66 69 78 27 5d 3b 0d 0a 0d 0a 09 2f 2f 20 52 6f 77 73 20 65 6c 65 6d 65 6e 74 20 6e 61 6d 65 20 74 68 61 74 27 73 20 75 70 64 61 74 65 64 20 77 68 65 6e 20 77 65 20 73 63 72 6f 6c 6c 2e 0d 0a 09 74 68 69 73 2e 6d 5f 53 74 72 52 6f 77 73 49 64 20 3d 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 52 6f 77 73 27 3b 0d 0a 0d 0a 09 69 66 20 28 20 72 67 53 65 61 72 63 68 44 61 74 61 5b 27 63 6c 61 73 73 5f 70 72 65 66 69 78 Data Ascii: n ms) between updatesif ( rgSearchData['prefix'] )this.m_strElementPrefix = rgSearchData['prefix'];// Rows element name that's updated when we scroll.this.m_StrRowsId = this.m_strElementPrefix + 'Rows';if ( rgSearchData['class_prefix
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: 37 66 65 31 0d 0a 6b 20 2d 20 74 68 69 73 2e 6d 5f 69 43 75 72 72 65 6e 74 50 61 67 65 20 29 2c 20 31 20 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 41 64 64 50 61 67 65 4c 69 6e 6b 28 20 65 6c 50 61 67 65 4c 69 6e 6b 73 2c 20 30 20 29 3b 0d 0a 09 09 69 66 20 28 20 66 69 72 73 74 50 61 67 65 4c 69 6e 6b 20 21 3d 20 31 20 29 0d 0a 09 09 09 65 6c 50 61 67 65 4c 69 6e 6b 73 2e 69 6e 73 65 72 74 28 20 27 20 2e 2e 2e 20 27 20 29 3b 0d 0a 0d 0a 09 09 66 6f 72 20 28 20 76 61 72 20 69 50 61 67 65 20 3d 20 66 69 72 73 74 50 61 67 65 4c 69 6e 6b 3b 20 69 50 61 67 65 20 3c 3d 20 6c 61 73 74 50 61 67 65 4c 69 6e 6b 3b 20 69 50 61 67 65 2b 2b 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 74 68 69 73 2e 41 64 64 50 61 67 65 4c 69 6e 6b 28 20 65 6c 50 61 67 65 4c 69 6e 6b 73 2c 20 69 Data Ascii: 7fe1k - this.m_iCurrentPage ), 1 );this.AddPageLink( elPageLinks, 0 );if ( firstPageLink != 1 )elPageLinks.insert( ' ... ' );for ( var iPage = firstPageLink; iPage <= lastPageLink; iPage++ ){this.AddPageLink( elPageLinks, i
2024-05-15 22:37:13 UTC	16361	IN	Data Raw: 49 66 20 77 65 20 75 73 65 20 74 68 69 73 20 63 6f 6e 74 72 6f 6c 20 6f 6e 20 67 61 6d 65 70 61 64 20 28 68 61 76 65 6e 27 74 20 66 6f 75 6e 64 20 61 6e 20 65 78 61 6d 70 6c 65 20 79 65 74 20 77 65 27 72 65 20 67 6f 69 6e 67 20 74 6f 20 6b 65 65 70 29 20 74 68 65 6e 20 77 65 27 6c 6c 20 6e 65 65 64 20 74 6f 0d 0a 09 2f 2f 20 61 64 64 20 63 61 6c 6c 69 6e 67 3a 20 47 50 4f 6e 53 68 6f 77 69 6e 67 4d 6f 64 61 6c 57 69 6e 64 6f 77 28 20 24 50 6f 70 75 70 5b 30 5d 20 29 2e 20 20 53 65 65 20 73 68 61 72 65 64 5f 72 65 73 70 6f 6e 73 69 76 65 5f 61 64 61 70 74 65 72 2e 6a 73 20 66 6f 72 20 65 78 61 6d 70 6c 65 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 48 69 64 65 4d 65 6e 75 28 20 65 6c 65 6d 4c 69 6e 6b 2c 20 65 6c 65 6d 50 6f 70 75 70 20 29 0d 0a 7b 0d Data Ascii: If we use this control on gamepad (haven't found an example yet we're going to keep) then we'll need to// add calling: GPOnShowingModalWindow( $Popup[0] ). See shared_responsive_adapter.js for example}function HideMenu( elemLink, elemPopup ){
2024-05-15 22:37:14 UTC	16384	IN	Data Raw: 37 66 64 38 0d 0a 20 65 6c 73 65 20 69 66 28 20 64 69 72 65 63 74 69 6f 6e 20 3d 3d 20 6b 5f 45 53 63 72 6f 6c 6c 62 61 72 44 69 72 65 63 74 69 6f 6e 48 6f 72 69 7a 6f 6e 74 61 6c 20 29 0d 0a 09 7b 0d 0a 09 09 70 72 6f 70 4f 66 66 73 65 74 20 3d 20 27 6c 65 66 74 27 3b 0d 0a 09 09 70 72 6f 70 53 69 7a 65 20 3d 20 27 77 69 64 74 68 27 3b 0d 0a 09 09 70 72 6f 70 4f 75 74 65 72 53 69 7a 65 20 3d 20 27 6f 75 74 65 72 57 69 64 74 68 27 3b 0d 0a 09 09 70 72 6f 70 44 69 6d 65 6e 73 69 6f 6e 20 3d 20 27 78 27 3b 0d 0a 09 09 70 72 6f 70 50 61 67 65 20 3d 20 27 70 61 67 65 58 27 3b 0d 0a 09 09 70 72 6f 70 4f 66 66 73 65 74 45 76 65 6e 74 20 3d 20 27 6f 66 66 73 65 74 58 27 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 6d 5f 65 6c 65 54 61 72 67 65 74 2e 66 69 72 73 74 28 29 Data Ascii: 7fd8 else if( direction == k_EScrollbarDirectionHorizontal ){propOffset = 'left';propSize = 'width';propOuterSize = 'outerWidth';propDimension = 'x';propPage = 'pageX';propOffsetEvent = 'offsetX';this.m_eleTarget.first()
2024-05-15 22:37:14 UTC	16352	IN	Data Raw: 48 69 64 65 53 75 67 67 65 73 74 69 6f 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 74 68 69 73 2e 6d 5f 62 48 61 76 65 53 75 67 67 65 73 74 69 6f 6e 73 20 29 0d 0a 09 09 74 68 69 73 2e 6d 5f 24 53 75 67 67 65 73 74 69 6f 6e 73 43 74 6e 2e 66 61 64 65 4f 75 74 28 20 27 66 61 73 74 27 20 29 3b 0d 0a 09 65 6c 73 65 0d 0a 09 09 74 68 69 73 2e 6d 5f 24 53 75 67 67 65 73 74 69 6f 6e 73 43 74 6e 2e 68 69 64 65 28 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 43 54 65 78 74 49 6e 70 75 74 53 75 67 67 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 6e 53 75 67 67 65 73 74 69 6f 6e 53 65 6c 65 63 74 65 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 24 53 75 67 67 65 73 74 69 6f 6e 20 29 0d 0a 7b 0d 0a 09 74 68 69 73 2e 6d 5f 24 49 6e 70 75 74 2e 76 61 6c Data Ascii: HideSuggestions = function(){if ( this.m_bHaveSuggestions )this.m_$SuggestionsCtn.fadeOut( 'fast' );elsethis.m_$SuggestionsCtn.hide();};CTextInputSuggest.prototype.OnSuggestionSelected = function( $Suggestion ){this.m_$Input.val

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50123	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:12 UTC	654	OUT	GET /steam/apps/553850/ss_33e684e9cb2517af1599f0ca2b57d65ee82c2e51.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:12 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 77479 Last-Modified: Fri, 05 Jan 2024 18:50:01 GMT ETag: "65984f59-12ea7" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=101428 Expires: Fri, 17 May 2024 02:47:40 GMT Date: Wed, 15 May 2024 22:37:12 GMT Connection: close
2024-05-15 22:37:12 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 08 00 09 ff c4 00 4e 10 00 02 01 02 04 04 04 04 02 07 06 03 06 04 05 05 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 71 07 14 32 81 91 a1 08 15 23 Data Ascii: JFIFHHCCQXN!1A"Qaq2#
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 3f 13 a9 5b 30 e1 3c f7 2e cf 90 ad d9 a8 e4 0d 2a 8b fe f2 fd 6b bf 98 c6 69 46 9d 77 1d 3d 85 dc 71 96 f0 47 0e 64 d9 ee 6d c4 b4 39 75 3d 05 7a 25 36 69 51 2d 28 6f 98 46 3a 14 4a 14 12 c2 e4 0b 9e 9e 7b 62 12 d3 1d d8 e9 be c7 9f 78 6e b3 e1 c6 7f c2 93 70 85 3e 78 ed 5d 98 54 4b 4b 94 66 b1 c5 a2 a6 9a 09 1e c9 4f 2d 85 d9 41 b8 d1 2e a0 c0 df be 20 b2 57 28 be 94 f7 4c f3 f7 c5 4f 83 9c 5f f0 6a 9a 6a 4e 29 e1 ea 6a ee 0e ad 99 01 ad 86 8e 3a 85 a6 61 66 3f 2d 29 d3 24 26 c6 da 75 5b c2 c3 71 6c 7a 91 9b 6b 67 52 fd ff 00 83 23 49 37 b5 c7 f6 38 2d 45 33 e7 79 ac e9 96 c2 fc a0 0b a4 03 72 14 01 a9 89 3e c4 fd f6 c6 c4 fd 9c 2e 46 67 e2 9b d2 2a 7c bd 96 5a 95 74 21 91 ac 40 f2 ef 7f 51 87 53 e0 6d 2d a6 c8 61 89 5e 48 c3 b2 aa 25 d8 5f 63 7b ff 00 Data Ascii: ?[0<.kiFw=qGdm9u=z%6iQ-(oF:J{bxnp>x]TKKfO-A. W(LO_jjN)j:af?-)$&u[qlzkgR#I78-E3yr>.Fg\|Zt!@QSm-a^H%_c{
2024-05-15 22:37:12 UTC	2309	IN	Data Raw: dc dc f5 38 da 9a 33 6e 42 58 aa 69 54 20 03 7d ba 9f 5c 15 e6 c5 ba 46 bc e9 14 16 f1 02 7a 9e e7 0d 48 16 cd 25 95 d8 92 4b 1b 76 38 e4 90 2d 98 89 04 a8 d6 2c cf e4 40 23 f1 c7 70 15 b9 87 4e 50 24 0b 76 d5 fe d8 e5 b8 78 21 8a 25 92 91 a1 72 ca 23 bb 46 45 ca df c8 af 6b f9 8c 37 0e c4 47 d4 b4 3c f5 d0 64 94 ab 38 0c a8 36 3d 77 b9 da fe fe 67 01 ca b7 19 2d 4e 89 a2 80 c4 a1 63 e6 22 db 66 52 00 3e a7 0b 77 c8 cd f6 44 b4 d4 ce 24 79 75 a9 a9 8d 83 86 95 81 56 b7 6b 11 b9 f7 db 1c da aa 15 58 db 2f 59 e5 96 6a e5 d4 94 e6 a6 21 51 05 3b 72 55 d6 fb 6c 17 40 f4 3d 8e f6 c4 9d 2f 0f a1 45 bb b0 bc e3 25 a3 5c ef 38 4a 25 9a 64 19 81 58 2e 55 d9 a1 0c 4d d8 df a9 16 df a1 c2 c6 4d c5 5f 91 cd 2d 4e 82 e9 b8 68 cf 51 35 55 53 9d 4e e1 f4 46 6d 6e c0 13 Data Ascii: 83nBXiT }\FzH%Kv8-,@#pNP$vx!%r#FEk7G<d86=wg-Nc"fR>wD$yuVkX/Yj!Q;rUl@=/E%\8J%dX.UMM_-NhQ5USNFmn
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 72 f7 62 c4 f5 62 4e e7 7b ee 7b 5b 02 31 97 70 37 64 2d 9e a7 2d 51 95 dc ad ca ae db 1b ef b7 e1 86 d0 ee d1 da 9d 51 25 36 63 3b 80 d0 d1 96 04 13 fb 46 b0 e8 70 1a 5d d8 f1 b2 19 ab 6b f5 c8 d7 d0 a9 62 79 43 50 1e b7 ef 80 a3 16 81 c3 25 93 3b af ae a9 e7 cb 58 6e f6 d4 f2 31 01 ed e7 e7 85 58 e1 15 49 0f a9 c9 db 61 d4 1c ec ce ad 20 a9 a8 de e1 56 e3 c2 bd 94 df 11 9b 50 8b 92 46 8c 29 ca 5a 5b 0a a7 45 cb e9 6a 2a 1d 56 40 84 c7 f5 58 87 be c6 dd 7d 7c bb 60 7b f2 48 b5 28 45 d8 1a e7 b5 b3 6a 0d 55 26 92 43 69 27 6b 83 b6 dd 31 a7 44 52 d9 19 13 7e 67 d5 35 d2 d6 c6 a9 2b f3 18 6c 19 fd ce 27 18 a8 bb 43 3b 60 cb 1d c9 be e7 b5 ba 62 96 2d 0c 32 eb 46 c4 10 c2 fd 59 45 ec 3d b1 29 6e 52 3b 0c 62 99 48 60 cd a4 11 d0 a9 16 c4 e8 28 2a 39 2f cb 3c Data Ascii: rbbN{{[1p7d--QQ%6c;Fp]kbyCP%;Xn1XIa VPF)Z[EjV@X}\|`{H(EjU&Ci'k1DR~g5+l'C;`b-2FYE=)nR;bH`(9/<
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 13 d0 cf 0a 10 d7 42 08 71 b7 9d c5 b1 d6 ce a2 97 c3 ab 25 3b 55 5e e6 32 07 7d 81 c3 ba 60 46 99 be 6f 4d 41 e0 60 d2 d4 11 e1 45 e9 f8 ff 00 a6 15 db e0 e1 7a 4d 21 86 69 6a a9 d0 3b 8b 47 1d b6 5f f1 1e fe c3 13 d3 39 49 54 b6 1b 64 b8 2b f5 30 8d f5 13 ef 8d aa c8 f0 2d 95 59 77 8d ac 7a 61 f9 e4 e0 56 e7 22 97 69 4b dc db 73 7f cb 0c ab 83 b7 07 f1 31 b9 00 81 d8 e0 80 19 e2 06 e7 0d 60 16 d5 d2 ea 43 b6 de b8 68 ba 67 08 aa a8 2f a8 e9 3e b6 ef 8d 11 90 b4 2a ac a4 28 ac 05 c0 f4 c3 a7 6c 56 85 ae 60 4e b0 eb 61 6e 82 e7 14 44 b6 04 ac 2f 22 5f 90 22 40 6e 18 6e 47 e1 82 8e a6 2b 24 39 d5 7b 91 86 e1 13 a3 4b 69 52 be 23 73 73 a4 63 b9 67 2d c8 9a 75 16 01 6d 6e e5 ae 70 d4 0d bb 1a 9b 5c 30 e9 d0 e3 bb 1c 42 e0 22 bb 77 23 48 c1 5b 80 15 e0 d4 6e Data Ascii: Bq%;U^2}`FoMA`EzM!ij;G_9ITd+0-YwzaV"iKs1`Chg/>*(lV`NanD/"_"@nnG+$9{KiR#sscg-umnp\0B"w#H[n
2024-05-15 22:37:12 UTC	7952	IN	Data Raw: bc 0f db a6 2b 38 e4 ba 6a ff 00 72 70 94 39 4e 88 38 97 89 e0 5a 06 a2 cb 6a 15 e1 99 bf 68 d1 93 76 03 fb d7 ee 4d be c3 0f 87 0b d5 aa 6b 81 72 e4 5a 74 c5 95 05 9b 73 be 37 d1 8e cd 84 a3 cf 6f 3c 75 00 96 09 8d 88 b5 f7 c2 b4 34 42 a3 9e c0 d9 ac 7c 8e 12 86 b3 75 a8 dc 92 db fe 18 ea 60 d8 93 e6 c3 0f a8 15 f3 38 ed 20 0b 85 a0 5a 59 1d ea 34 54 29 01 22 d1 70 e3 bd cf 6c 4d dd d5 6c 3a 4a b9 23 69 ad 1b 1e 62 d8 7e e8 eb 82 ab 81 7e 66 8b 52 b1 ca 40 03 96 52 c5 41 bd cf 9e 02 4d ad ce 4f 70 57 f0 f5 21 af bd d7 16 42 34 6a 95 3c be f7 1e 58 0d 0a 9d 13 49 58 1a 3b 9d 24 79 b0 b1 18 5d 1e 43 6c c8 79 bc cd 5e 31 76 37 37 d8 7d bb 60 55 02 8d e5 8d a0 04 b3 46 c1 c0 b0 49 03 58 9f 30 30 ba b5 ec 93 fa 05 c6 81 ec ba 7a 96 61 d8 62 94 c5 a0 57 90 22 Data Ascii: +8jrp9N8ZjhvMkrZts7o<u4B\|u`8 ZY4T)"plMl:J#ib~~fR@RAMOpW!B4j<XIX;$y]Cly^1v77}`UFIX00zabW"
2024-05-15 22:37:12 UTC	2024	IN	Data Raw: 50 51 18 b5 c5 bc 40 fa 9c 5b 4e 27 ef 4b ec ef f7 25 fe e2 f7 57 dc 2b 33 cd 32 cc e2 91 64 c8 f3 16 46 76 58 e4 f9 e5 d4 44 b6 be 86 2e 48 20 5b a8 03 bd ba 61 23 09 41 d4 e3 f4 ff 00 03 5a 92 b8 bf a9 49 19 f6 79 9e 03 97 0c ea a6 92 48 64 74 e5 c3 b0 7b 75 08 e2 da 80 f4 ff 00 7c 6e d1 8f 1f 8f 4d d9 99 39 cf c2 a5 43 3a 4c da 6a 6a 62 9c 49 c4 19 e1 55 40 1a 1a ba 46 20 81 d0 6a d2 fa 85 ad bd c7 97 6c 4d c5 49 de 28 2f 93 ff 00 c1 94 b4 af f7 24 fe 82 2f d7 f5 95 95 59 80 cb e8 16 7c 9e 22 47 3d e0 d0 02 db f7 86 bb 02 6f d0 1d 5b fd b1 7f 65 18 a5 ae 5e 2f cf 42 2b 24 9b 7a 56 df 9e a6 f9 5e 6b 5b 0e 5d 24 f5 3c 44 28 72 ea 7d 25 63 8d 41 aa 70 c6 df b3 56 b1 20 1d 8d ce c3 cc 61 25 8e 2e 54 a1 6f ec 52 39 1a 56 e5 4b ee 30 ca f8 c6 6c ea 79 84 b4 Data Ascii: PQ@[N'K%W+32dFvXD.H [a#AZIyHdt{u\|nM9C:LjjbIU@F jlMI(/$/Y\|"G=o[e^/B+$zV^k[]$<D(r}%cApV a%.ToR9VK0ly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50124	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:12 UTC	654	OUT	GET /steam/apps/553850/ss_8949ed7dd24a02d5ea13b08fc5c04fab400dc4bd.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:12 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Fri, 05 Jan 2024 18:50:01 GMT ETag: "65984f59-d63c" Server: nginx Content-Type: image/jpeg Content-Length: 54844 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=198777 Expires: Sat, 18 May 2024 05:50:09 GMT Date: Wed, 15 May 2024 22:37:12 GMT Connection: close
2024-05-15 22:37:12 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 00 08 09 ff c4 00 50 10 00 02 01 03 03 02 04 03 04 06 05 0a 05 03 01 09 01 02 03 00 04 11 05 12 21 06 31 13 41 51 61 07 22 71 14 32 81 91 15 23 42 a1 Data Ascii: JFIFHHCCQXP!1AQa"q2#B
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: b7 b2 4a e8 a0 da e3 9d ed bb 80 4f 95 58 d3 1a ce 63 5e 4e e3 9c 00 7c e9 99 a4 0e f1 33 18 e3 38 20 71 e9 4c 98 90 64 b7 6c e1 1b 68 f3 dd df fe b5 45 a6 24 83 e5 f1 03 12 49 20 63 b1 ff 00 1e 94 93 f0 48 38 a7 92 df 24 c6 4c 87 05 43 79 e0 f1 55 d8 51 f5 e7 c3 2f 8a 1a 5f 5a 8b 2d 33 46 b0 b8 6f b1 69 f1 bd dc b3 26 c5 b6 71 b5 16 3c fe d1 24 31 c8 e3 02 bc e9 e3 94 13 e4 ce b5 24 df ca ac df a4 9e 22 e6 45 20 92 42 fa 63 d6 b0 aa e8 d1 4b 96 d8 d9 b6 60 46 01 11 f6 62 47 39 aa 8d f7 e4 89 d3 f9 7c 16 7a 1d aa 3d da 94 43 b8 b0 00 b0 ed ef 55 c9 f4 c8 50 8a b9 23 7b 63 74 b3 5d dd 42 c7 22 33 10 42 07 7d e8 5b f9 1a e9 4c f1 9a f2 5a 22 05 ab 44 d0 4a a1 51 ec 50 21 08 a6 80 f6 df 7a 68 04 23 14 c0 1c 8a 48 c5 22 e3 a1 89 0a e3 91 45 0d c9 f8 11 82 90 Data Ascii: JOXc^N\|38 qLdlhE$I cH8$LCyUQ/_Z-3Foi&q<$1$"E BcK`FbG9\|z=CUP#{ct]B"3B}[LZ"DJQP!zh#H"E
2024-05-15 22:37:12 UTC	2057	IN	Data Raw: d8 a3 d5 7e 21 6b 57 b1 8b 6b 1d 76 4b 5b 30 31 b3 c5 d8 71 e8 08 19 00 0c 71 4a 13 9a fa d7 f0 34 78 a1 ff 00 47 fc 4e 89 d0 3f 14 e0 96 c8 5a 6a f7 c9 3c f1 60 7d a4 7d e2 bd be 71 ea 0f 9f e7 56 a6 ef 6a 8c 27 8d 2d a7 66 bf 51 eb 0d 3f 48 8d 27 21 e7 8e 66 fb f0 80 71 c7 9e 4d 5a 76 da 32 6a 95 91 75 8e b5 8a da d2 3b 9b 39 12 e5 1c 80 a9 9c 1f 72 7c ea a8 92 b6 df af 24 bc d5 21 5f 01 6d ed e5 ca 13 bb 9c f9 1c f6 a7 40 6a 60 d5 01 b7 45 f1 97 78 3f 7b 20 e4 50 24 15 b5 d8 2d c0 f1 98 2a 93 80 cb c8 a1 01 1e f7 aa ec ed 63 66 8f 75 c1 04 0c 20 c0 e7 de 98 15 f2 75 b0 13 c6 23 b7 cc 3c 78 99 6e 47 b8 f5 a0 64 dd 53 aa 6c f4 ec 28 66 92 57 5c ae d1 95 f6 c9 a0 56 8c ec fd 77 2d cc 22 36 b6 45 19 fd 67 9e e1 ed e8 7c e9 01 56 3a 86 78 25 9b c3 91 cc 67 Data Ascii: ~!kWkvK[01qqJ4xGN?Zj<`}}qVj'-fQ?H'!fqMZv2ju;9r\|$!_m@j`Ex?{ P$-*cfu u#<xnGdSl(fW\Vw-"6Eg\|V:x%g
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: f1 38 ed 92 b5 00 82 46 85 6d b1 2a 90 4a ef 07 60 23 81 91 fe 33 9a 71 7e 6c 24 bc 12 2c ee af 56 d2 48 83 12 21 c2 b6 08 18 19 ed 55 68 ce 9e c1 ac cd 34 98 59 5c b0 3d 89 39 1f 85 55 09 07 92 f2 78 d4 af 8a cf ec c0 51 40 34 5c dc 2c 4c 1b 97 66 50 89 8e 09 ee 73 f8 52 1a 40 6e 6e 89 8e 56 81 8f ca 00 00 8f db 2d fb b1 da a5 5a ec ae 29 f4 57 de 6a 2e 96 68 db 82 4e 25 da 50 72 78 1c e7 d8 9a 15 b9 57 80 71 5c 49 b6 d7 4b 76 10 22 9d cf 81 8f 20 68 6a 8c ea c7 5e 16 b4 76 50 03 24 64 6f 63 db cf fb aa 56 fa 2d c6 81 25 ec 2e cc be 22 82 b8 dc 0b 0c 8f ad 55 11 54 14 1d d8 21 b2 3d 8d 14 c4 46 9e fa de 2b a4 85 a5 0b 2b fd d5 f5 a0 74 c6 a6 a5 6c f7 42 05 94 19 0a e5 58 7d d3 ec 0f af b5 25 6c 6e 2d 13 64 9b ec 11 b4 92 c0 d2 67 84 19 e0 93 c6 7d 70 29 Data Ascii: 8Fm*J`#3q~l$,VH!Uh4Y\=9UxQ@4\,LfPsR@nnV-Z)Wj.hN%PrxWq\IKv" hj^vP$docV-%."UT!=F++tlBX}%ln-dg}p)
2024-05-15 22:37:12 UTC	3976	IN	Data Raw: 56 c9 18 04 60 7a 77 ef 59 b8 d9 ac 5f 12 fb 56 92 39 9a 27 b5 d6 e1 4b b4 dd 84 5b 57 85 d0 83 82 76 ed 20 af be 4f 6f 2a 88 aa f0 39 3b f2 67 f5 09 d6 e7 4b 78 22 12 4d 77 6f 9e 24 40 41 e4 ee 24 f6 1d c6 47 d2 b4 5a 76 c8 ed 10 6d ec d6 2d 22 40 a0 bd d3 ba 9d ab 19 c3 af 9e 49 fc f0 2a 65 96 29 ed 8e 38 e4 d6 8a cd 7e 1b 6d 2a f9 8d 8c af 14 72 ae 76 a1 60 17 d5 48 35 ae 39 29 ab 22 51 71 63 74 2d 51 56 65 b7 bc 0b 24 0e 30 92 10 32 8d eb 4e 4b 56 88 45 a5 d5 ba 59 5d 4f 09 90 21 ce e5 32 2e 76 ff 00 77 d6 a5 6d 59 64 bd 02 59 2c 8f 86 59 05 b3 12 79 38 2e a4 7f 54 f7 1e e3 9f 6a 86 d3 75 7b 29 46 4b e6 ad 0b a8 69 16 57 05 67 85 9b 03 82 51 f2 47 07 03 8a 71 93 e9 8e 97 83 3f 6b a8 5d 59 5e 89 a0 b9 62 c9 c8 24 e4 10 3f c7 9d 6b 49 a3 23 4f f6 c8 3a Data Ascii: V`zwY_V9'K[Wv Oo9;gKx"Mwo$@A$GZvm-"@Ie)8~m*rv`H59)"Qqct-QVe$02NKVEY]O!2.vwmYdY,Yy8.Tju{)FKiWgQGq?k]Y^b$?kI#O:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50125	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:12 UTC	631	OUT	GET /steam/apps/553850/capsule_616x353.jpg?t=1709666906 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:12 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 106484 Last-Modified: Mon, 11 Sep 2023 20:20:34 GMT ETag: "64ff7692-19ff4" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=172354 Expires: Fri, 17 May 2024 22:29:46 GMT Date: Wed, 15 May 2024 22:37:12 GMT Connection: close
2024-05-15 22:37:12 UTC	16041	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 01 00 09 ff c4 00 65 10 00 02 01 02 05 02 04 03 04 05 06 08 04 11 08 0b 01 02 03 04 11 00 05 06 12 21 31 41 07 13 22 51 14 61 71 08 32 81 91 15 23 42 Data Ascii: JFIFCCahe!1A"Qaq2#B
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: f8 e7 9a cb a9 b5 8e 69 99 d6 e6 34 b5 39 85 4d 1c 3e 7b c1 3a c8 4c b1 48 17 6b 6d 63 b5 f6 8b da ff 00 31 8d d6 31 a0 49 11 88 58 69 f8 2a be 1a f9 5d 0c bf 69 3e 27 51 f5 e5 e7 aa d5 ff 00 c6 4a 78 af ad b2 bd 55 24 34 d9 45 55 2d 1c 90 d6 52 bd 52 cd 25 53 3c 60 2b c6 02 82 14 6c b9 06 e4 58 db ad f0 b1 c6 d6 c4 03 74 cb 63 e0 4a ad c4 b9 ed 91 fd e5 bb 35 3a eb 4d ab 7f c3 60 76 5d 31 e1 8e 53 97 65 54 79 65 26 73 a7 e3 d5 5a 8a b2 36 d4 19 26 4b 97 4c b2 49 2d 28 45 dc f5 56 16 54 0d 62 b1 9d c4 bf b7 38 a1 c5 10 f7 66 69 db 4f af ad 96 b3 86 46 21 8c 32 46 02 4f 88 0f 2d 37 fc 06 ba ad d7 2e d1 99 c6 bf 82 8a bb c4 32 f1 c5 4d 51 2c b4 ba 6a 9a 5f 2e 33 11 b0 8c 57 98 db 6c cc a0 1f d5 03 e5 8d de ad e4 62 3b 5c d8 b4 67 d7 a2 ba 2c 93 11 e2 9f 6b Data Ascii: i49M>{:LHkmc11IXi*]i>'QJxU$4EU-RR%S<`+lXtcJ5:M`v]1SeTye&sZ6&KLI-(EVTb8fiOF!2FO-7.2MQ,j_.3Wlb;\g,k
2024-05-15 22:37:12 UTC	2811	IN	Data Raw: 45 c6 70 b0 47 86 cd 1b 00 36 36 00 75 46 89 c4 bb 52 b8 f1 73 b9 84 65 77 75 e3 72 9c 62 44 23 75 2f 32 5d 26 6f f0 6e af 18 de 8f c1 52 6d 6b 7f 5e 10 b2 d7 5a 9e cb b3 a1 52 89 bd 94 34 84 d9 54 df 68 f9 e0 25 a5 bb 2e 52 f1 23 31 26 e2 d8 56 48 1a 17 6f cd 14 6a 4c 30 90 01 07 0d 70 0f b3 68 80 d2 f6 9d 9e 1a 5d cb 20 30 48 77 11 fb 4a d6 e4 7d 2f 88 4f 1a d5 23 34 82 93 0b ac 85 06 ed c2 c3 d3 7b 0f a5 f0 2d 5a 9d 9a ca 91 86 a9 a3 31 15 52 cd c0 27 db 9b df 03 cb cd 71 72 9e 28 5d ae 30 e6 90 d1 4a 3b 81 25 48 d1 53 2b 80 59 ac 6f 88 53 49 95 11 8d 52 71 c0 17 82 c6 d8 af 32 9d d1 69 18 8a 00 e3 a6 02 64 b4 40 d4 e2 71 7c 47 79 b4 66 a7 4c 8a a0 fb db 10 4b 4e e8 e0 a6 e2 76 69 81 dd 60 7a 8f 7b 63 85 55 27 f2 47 44 f7 e8 7f 1c 05 ed 4a d2 84 a3 c8 Data Ascii: EpG66uFRsewurbD#u/2]&onRmk^ZR4Th%.R#1&VHojL0ph] 0HwJ}/O#4{-Z1R'qr(]0J;%HS+YoSIRq2id@q\|GyfLKNvi`z{cU'GDJ
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: e6 a1 aa c4 9f 74 30 23 6e d1 fb dd 71 59 8e e2 a3 19 17 74 19 5a de e9 ec 8f 21 bb 5c f5 e6 01 26 d6 2a ca 9d fd ce 29 46 c9 e9 e9 66 10 a0 2b 60 58 f4 eb 85 cb 69 2e 92 68 eb 0c 73 5d 49 50 3a d8 f2 70 f1 15 e8 52 66 57 5c b3 54 ab 51 a1 9d 54 48 8c a9 25 8d bf 1f e8 38 88 fc 21 ce 43 7d 57 07 e8 a6 6a 6b 23 9d 63 44 70 db 98 02 2f 88 60 16 d9 28 c0 da 36 aa 24 30 da 2d bc f1 b7 70 b0 f9 e2 13 5c 49 f1 23 f2 4e d2 52 c4 b6 57 94 37 b0 43 81 3c 9d d3 81 52 50 ba c7 e7 72 0d 80 1c 60 37 69 14 84 75 6a 58 58 81 7c 08 db 42 78 d5 49 53 55 05 1f 7b 9c 40 90 97 14 50 3a 22 56 a8 00 7d 64 0c 47 16 9c 01 46 d1 d4 99 e2 0c c7 9b d8 e0 4e 14 69 3d 1c a7 8b 8e 71 1e d3 c2 6d 64 2d f5 1c 7d 70 c3 48 c1 10 82 e4 f1 c6 23 12 88 14 8d 1a 79 91 8e 2e 6f 88 8f 79 4e 44 Data Ascii: t0#nqYtZ!\&*)Ff+`Xi.hs]IP:pRfW\TQTH%8!C}Wjk#cDp/`(6$0-p\I#NRW7C<RPr`7iujXX\|BxISU{@P:"V}dGFNi=qmd-}pH#y.oyND
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: f1 a3 c6 b3 ae e0 8f 2a c9 c4 d4 d9 38 b3 ce 65 01 5e 77 ec 08 04 fa 47 b7 73 f4 18 c5 76 8b b5 03 8a b4 61 f0 b6 d8 b7 37 a1 27 f2 1f 33 e8 ae 78 7f 0b fb 2d c9 2e ae fb 95 97 c2 cf 1d 34 e6 8b d0 39 66 51 5f 15 73 55 53 79 bb cc 30 ab 2f aa 57 61 62 58 76 61 8b ce 03 da 9c 07 0f e1 f1 e1 26 cd 99 b7 74 05 6a e2 7a f9 a8 18 ee 19 3c f3 ba 56 55 1a fb a9 65 df 68 9d 71 95 78 a3 9d 65 b5 59 54 75 0b 0d 3d 37 92 e6 a2 30 ad 7d ec 78 b1 3c 72 31 5d c6 f8 ce 1f 88 e2 19 2e 1e e8 0a d7 4e 67 cc a2 e1 30 72 40 c2 c9 39 9e 4a 87 a0 96 b3 48 6a 9c b3 3c a0 43 e7 d0 ce b2 00 0d b7 0e 8c a7 e4 cb 70 7e b8 a3 83 8b 9c 1c cd 98 1d 5a 6f f4 f7 a9 4f c2 77 ad 2d ea bb 06 2f b4 66 96 90 0f f2 7c c9 6f ef 02 ff 00 7f 1e 8c ee dd f0 96 ef 9b e0 3f 35 45 fb 1b 13 e5 f1 fd Data Ascii: *8e^wGsva7'3x-.49fQ_sUSy0/WabXva&tjz<VUehqxeYTu=70}x<r1].Ng0r@9JHj<Cp~ZoOw-/f\|o?5E
2024-05-15 22:37:12 UTC	7952	IN	Data Raw: c9 6b 61 e6 5a 43 ee b3 29 94 82 06 82 4f 3f cd 05 53 74 00 28 2a 5a e3 a9 3d 16 d7 e9 f2 c5 6b de f2 e0 63 ad f5 eb 5a ed e7 7d 54 a6 b1 a1 a4 3e fc bd 7c fc bd 13 d4 d4 8d 55 4f 50 29 89 15 1b 48 68 81 23 cc 8f b8 1e fd ae 3b e0 0f 94 44 e1 de 0d 3a f4 3c bf 43 c9 11 91 17 83 93 7e 9d 42 06 9f 3b cc aa b3 45 35 15 72 54 05 8c 44 cb 37 a8 3a 0e 81 bb b5 bb 13 c8 e3 9e 30 47 e1 f0 f1 42 44 6c 02 cd e9 a5 1e a3 a7 bb 4f 24 c8 65 98 cb e2 75 f2 d7 98 f3 eb f7 ab 66 9a 7f d1 91 e6 3f af aa 88 d6 d0 98 53 e1 99 7c b9 03 30 3b 25 bd ee 9e 93 c0 f5 06 00 f1 6c 67 31 ae 74 d9 68 03 95 d6 6e ec 50 dd b5 cf 6d f4 21 5f e1 63 11 93 77 a8 d3 df d7 ea c2 be 69 9a 19 2b b6 c1 43 13 4e e9 19 75 8a 3e 5b 6a f2 c4 0e e7 bf 1c e3 23 8e 9c 45 e2 90 d0 27 7f 3f c3 ee 5a 6c Data Ascii: kaZC)O?St(*Z=kcZ}T>\|UOP)Hh#;D:<C~B;E5rTD7:0GBDlO$euf?S\|0;%lg1thnPm!_cwi+CNu>[j#E'?Zl
2024-05-15 22:37:12 UTC	16384	IN	Data Raw: 11 cb df db e9 85 a2 da 68 1e f4 b9 af 54 80 c4 1b e0 80 52 62 2e 9e 7b 3a 3a 9f d6 29 b8 c2 90 1e d2 d7 73 5d 55 a8 56 18 dc 48 81 87 46 17 c6 7d cc 2c 71 69 dc 23 03 69 d4 37 be 18 95 7a dc 0c 28 09 a9 ad c4 1c 15 35 38 92 f1 f4 c7 00 9b 49 ca 64 90 cc cc fb 48 3c a2 f6 1f 3f 99 c5 c4 0d 25 a0 9d b9 7e 68 2e d3 44 55 68 49 c0 49 14 3f 1f 7c 9f 50 fa 7b 62 43 d8 d7 8a 72 60 24 6c a3 27 a5 6a 44 2c 58 3c 7e e0 58 af d4 7f 5e 2b 64 84 c7 a8 36 11 9a ec ca 3e 72 14 93 d4 62 2a 3b 50 db 43 5c 8e b8 6a 28 4d bc f4 74 ec eb 5d 57 35 1a 32 10 b2 c1 18 76 56 23 d2 4d c1 00 7c c8 3f 4c 58 60 e0 64 87 bc 98 12 c1 c8 6e 7c 85 fc fe 01 23 83 c8 a8 ea fc f6 5c d5 e3 46 49 9d 64 f3 54 cc f5 cf 27 c6 85 fd 4d 7d 43 4c cb 32 f2 b2 c6 cd c3 23 d9 94 74 b1 b5 c0 ed e9 1c Data Ascii: hTRb.{::)s]UVHF},qi#i7z(58IdH<?%~h.DUhII?\|P{bCr`$l'jD,X<~X^+d6>rb*;PC\j(Mt]W52vV#M\|?LX`dn\|#\FIdT'M}CL2#t
2024-05-15 22:37:12 UTC	14144	IN	Data Raw: ee 2c 4b 73 df 93 87 62 30 cc 7b 5e 0f 33 67 dc 86 d2 5b a8 5b ff 00 d9 6f 31 cc a0 8e b7 2e a7 aa 69 b2 b9 a7 12 9a 79 4b 30 89 55 4f 98 ea 7a 29 24 af d4 fb e3 ce bb 57 14 2e 2d 9d c2 9e 05 58 e7 67 40 7a d6 be e5 7d c2 5c f0 ec a0 e8 b7 b7 42 e7 62 dc 96 20 71 d7 1e 7c 34 16 56 ac 27 e6 d3 ac b1 4d 30 95 5d d4 0b c6 05 8d bf 0e f8 13 71 20 90 da f7 a2 e4 dc a8 da 45 2b 54 aa ec 57 69 2c 5c fe cd 81 e7 12 5f ec 92 10 da 69 c8 9a 7c c3 2e a4 a6 a6 8c 46 3e 25 40 69 2b 2a 89 61 10 fd ad 80 7e d7 61 f5 c0 5d 1c af 73 8d e9 c8 0e 7d 2f cb 99 47 8c e5 70 7d a9 b4 cd 05 5e 79 95 d5 54 d2 fa 8c 5e 6c 9c dd ba 11 19 23 f2 27 e7 88 a2 2c b0 c8 c6 bb 9d 7e 68 ae 6b 5c e0 1a b8 ea ab 34 86 38 1a 38 e2 79 27 e6 ec e9 be c2 ff 00 c0 5b af 53 8f a6 b3 10 74 d9 79 5b Data Ascii: ,Ksb0{^3g[[o1.iyK0UOz)$W.-Xg@z}\Bb q\|4V'M0]q E+TWi,\_i\|.F>%@i+*a~a]s}/Gp}^yT^l#',~hk\488y'[Sty[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50127	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	423	OUT	GET /steam/apps/553850/ss_8949ed7dd24a02d5ea13b08fc5c04fab400dc4bd.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:13 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Fri, 05 Jan 2024 18:50:01 GMT ETag: "65984f59-d63c" Server: nginx Content-Type: image/jpeg Content-Length: 54844 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=198829 Expires: Sat, 18 May 2024 05:51:02 GMT Date: Wed, 15 May 2024 22:37:13 GMT Connection: close
2024-05-15 22:37:13 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 00 08 09 ff c4 00 50 10 00 02 01 03 03 02 04 03 04 06 05 0a 05 03 01 09 01 02 03 00 04 11 05 12 21 06 31 13 41 51 61 07 22 71 14 32 81 91 15 23 42 a1 Data Ascii: JFIFHHCCQXP!1AQa"q2#B
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: b7 b2 4a e8 a0 da e3 9d ed bb 80 4f 95 58 d3 1a ce 63 5e 4e e3 9c 00 7c e9 99 a4 0e f1 33 18 e3 38 20 71 e9 4c 98 90 64 b7 6c e1 1b 68 f3 dd df fe b5 45 a6 24 83 e5 f1 03 12 49 20 63 b1 ff 00 1e 94 93 f0 48 38 a7 92 df 24 c6 4c 87 05 43 79 e0 f1 55 d8 51 f5 e7 c3 2f 8a 1a 5f 5a 8b 2d 33 46 b0 b8 6f b1 69 f1 bd dc b3 26 c5 b6 71 b5 16 3c fe d1 24 31 c8 e3 02 bc e9 e3 94 13 e4 ce b5 24 df ca ac df a4 9e 22 e6 45 20 92 42 fa 63 d6 b0 aa e8 d1 4b 96 d8 d9 b6 60 46 01 11 f6 62 47 39 aa 8d f7 e4 89 d3 f9 7c 16 7a 1d aa 3d da 94 43 b8 b0 00 b0 ed ef 55 c9 f4 c8 50 8a b9 23 7b 63 74 b3 5d dd 42 c7 22 33 10 42 07 7d e8 5b f9 1a e9 4c f1 9a f2 5a 22 05 ab 44 d0 4a a1 51 ec 50 21 08 a6 80 f6 df 7a 68 04 23 14 c0 1c 8a 48 c5 22 e3 a1 89 0a e3 91 45 0d c9 f8 11 82 90 Data Ascii: JOXc^N\|38 qLdlhE$I cH8$LCyUQ/_Z-3Foi&q<$1$"E BcK`FbG9\|z=CUP#{ct]B"3B}[LZ"DJQP!zh#H"E
2024-05-15 22:37:13 UTC	2057	IN	Data Raw: d8 a3 d5 7e 21 6b 57 b1 8b 6b 1d 76 4b 5b 30 31 b3 c5 d8 71 e8 08 19 00 0c 71 4a 13 9a fa d7 f0 34 78 a1 ff 00 47 fc 4e 89 d0 3f 14 e0 96 c8 5a 6a f7 c9 3c f1 60 7d a4 7d e2 bd be 71 ea 0f 9f e7 56 a6 ef 6a 8c 27 8d 2d a7 66 bf 51 eb 0d 3f 48 8d 27 21 e7 8e 66 fb f0 80 71 c7 9e 4d 5a 76 da 32 6a 95 91 75 8e b5 8a da d2 3b 9b 39 12 e5 1c 80 a9 9c 1f 72 7c ea a8 92 b6 df af 24 bc d5 21 5f 01 6d ed e5 ca 13 bb 9c f9 1c f6 a7 40 6a 60 d5 01 b7 45 f1 97 78 3f 7b 20 e4 50 24 15 b5 d8 2d c0 f1 98 2a 93 80 cb c8 a1 01 1e f7 aa ec ed 63 66 8f 75 c1 04 0c 20 c0 e7 de 98 15 f2 75 b0 13 c6 23 b7 cc 3c 78 99 6e 47 b8 f5 a0 64 dd 53 aa 6c f4 ec 28 66 92 57 5c ae d1 95 f6 c9 a0 56 8c ec fd 77 2d cc 22 36 b6 45 19 fd 67 9e e1 ed e8 7c e9 01 56 3a 86 78 25 9b c3 91 cc 67 Data Ascii: ~!kWkvK[01qqJ4xGN?Zj<`}}qVj'-fQ?H'!fqMZv2ju;9r\|$!_m@j`Ex?{ P$-*cfu u#<xnGdSl(fW\Vw-"6Eg\|V:x%g
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: f1 38 ed 92 b5 00 82 46 85 6d b1 2a 90 4a ef 07 60 23 81 91 fe 33 9a 71 7e 6c 24 bc 12 2c ee af 56 d2 48 83 12 21 c2 b6 08 18 19 ed 55 68 ce 9e c1 ac cd 34 98 59 5c b0 3d 89 39 1f 85 55 09 07 92 f2 78 d4 af 8a cf ec c0 51 40 34 5c dc 2c 4c 1b 97 66 50 89 8e 09 ee 73 f8 52 1a 40 6e 6e 89 8e 56 81 8f ca 00 00 8f db 2d fb b1 da a5 5a ec ae 29 f4 57 de 6a 2e 96 68 db 82 4e 25 da 50 72 78 1c e7 d8 9a 15 b9 57 80 71 5c 49 b6 d7 4b 76 10 22 9d cf 81 8f 20 68 6a 8c ea c7 5e 16 b4 76 50 03 24 64 6f 63 db cf fb aa 56 fa 2d c6 81 25 ec 2e cc be 22 82 b8 dc 0b 0c 8f ad 55 11 54 14 1d d8 21 b2 3d 8d 14 c4 46 9e fa de 2b a4 85 a5 0b 2b fd d5 f5 a0 74 c6 a6 a5 6c f7 42 05 94 19 0a e5 58 7d d3 ec 0f af b5 25 6c 6e 2d 13 64 9b ec 11 b4 92 c0 d2 67 84 19 e0 93 c6 7d 70 29 Data Ascii: 8Fm*J`#3q~l$,VH!Uh4Y\=9UxQ@4\,LfPsR@nnV-Z)Wj.hN%PrxWq\IKv" hj^vP$docV-%."UT!=F++tlBX}%ln-dg}p)
2024-05-15 22:37:13 UTC	3976	IN	Data Raw: 56 c9 18 04 60 7a 77 ef 59 b8 d9 ac 5f 12 fb 56 92 39 9a 27 b5 d6 e1 4b b4 dd 84 5b 57 85 d0 83 82 76 ed 20 af be 4f 6f 2a 88 aa f0 39 3b f2 67 f5 09 d6 e7 4b 78 22 12 4d 77 6f 9e 24 40 41 e4 ee 24 f6 1d c6 47 d2 b4 5a 76 c8 ed 10 6d ec d6 2d 22 40 a0 bd d3 ba 9d ab 19 c3 af 9e 49 fc f0 2a 65 96 29 ed 8e 38 e4 d6 8a cd 7e 1b 6d 2a f9 8d 8c af 14 72 ae 76 a1 60 17 d5 48 35 ae 39 29 ab 22 51 71 63 74 2d 51 56 65 b7 bc 0b 24 0e 30 92 10 32 8d eb 4e 4b 56 88 45 a5 d5 ba 59 5d 4f 09 90 21 ce e5 32 2e 76 ff 00 77 d6 a5 6d 59 64 bd 02 59 2c 8f 86 59 05 b3 12 79 38 2e a4 7f 54 f7 1e e3 9f 6a 86 d3 75 7b 29 46 4b e6 ad 0b a8 69 16 57 05 67 85 9b 03 82 51 f2 47 07 03 8a 71 93 e9 8e 97 83 3f 6b a8 5d 59 5e 89 a0 b9 62 c9 c8 24 e4 10 3f c7 9d 6b 49 a3 23 4f f6 c8 3a Data Ascii: V`zwY_V9'K[Wv Oo9;gKx"Mwo$@A$GZvm-"@Ie)8~m*rv`H59)"Qqct-QVe$02NKVEY]O!2.vwmYdY,Yy8.Tju{)FKiWgQGq?k]Y^b$?kI#O:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50126	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	654	OUT	GET /steam/apps/553850/ss_50afbbc4d811c38fe9f64c1fc8d7eb9d9da6d24c.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:13 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Fri, 05 Jan 2024 18:50:01 GMT ETag: "65984f59-1240b" Server: nginx Content-Type: image/jpeg Content-Length: 74763 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=401982 Expires: Mon, 20 May 2024 14:16:55 GMT Date: Wed, 15 May 2024 22:37:13 GMT Connection: close
2024-05-15 22:37:13 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 00 01 02 07 08 09 ff c4 00 51 10 00 02 01 02 04 04 04 03 05 04 05 0a 05 03 01 09 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 71 14 81 91 07 32 42 a1 b1 15 Data Ascii: JFIFHHCCQXQ!1A"Qaq2B
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: e3 2c e4 da f8 0e 84 51 e5 39 aa cd 55 24 d4 aa d4 da a3 8c 55 4b 37 20 48 45 d6 de 10 47 df 37 3b 9e 96 c6 76 d4 2a 4b e0 69 4b 5b a6 07 4d 91 ca 21 89 b2 b3 52 b4 f2 20 2a 95 ae a1 75 00 6e c1 6d f9 ed f3 eb 82 d4 9d b9 76 18 95 6c 86 99 16 59 34 f4 19 8d 1c b9 d5 4e 5c 8a 9c d9 45 15 2c 5c da b6 5f 10 8c 3e c5 56 e3 a9 27 af 4c 6a 8d 21 2d ab a5 bb fd 0f 2a cf 28 29 79 8f 53 00 90 c4 d3 36 8e 6d 81 2b 72 41 6b 74 db af ae 19 19 35 71 1f a1 c9 26 85 06 37 59 12 3e 59 68 dc 1d 4d 7f ba 7a 0f cf 05 7d c9 08 aa 76 5c f8 3f 8a 2b 68 a9 2b f2 ea 49 82 50 ca c8 ef 4b 19 3b e9 3b f2 cf 50 49 3a 88 b8 bd bc c0 c2 9a 5c 89 c9 8e 96 fc 9f 51 fd 97 d4 d5 e6 9c 3d 49 53 0e 6f 57 35 32 b1 d1 44 6e da 50 6c 3c 5b 5a d6 b5 97 ee 8b 0b de f8 f2 ff 00 89 f5 d3 c5 fd 3c Data Ascii: ,Q9U$UK7 HEG7;vKiK[M!R unmvlY4N\E,\_>V'Lj!-*()yS6m+rAkt5q&7Y>YhMz}v\?+h+IPK;;PI:\Q=ISoW52DnPl<[Z<
2024-05-15 22:37:13 UTC	1617	IN	Data Raw: fb dd 00 36 e8 41 18 f6 f1 55 d8 c2 9d 89 b8 db 20 9f 28 29 45 25 63 66 53 c0 a8 93 68 a6 64 5a 7d ee 00 72 a0 0e bd fc ed 8b 5c b1 6b 7d 8a d6 5d 45 57 3d 52 a4 74 e6 aa da 6e c3 a5 8f 4b 93 d0 58 fa 62 dd 02 dd 1e b7 94 d5 66 39 6f 0e 0c d2 2a 2a b9 ae 5a 49 24 12 16 a7 8e c6 c0 92 f7 24 00 2d e1 36 1e 78 9f 10 d5 89 ab 6b aa b3 74 90 56 50 b5 4b cc aa 28 e5 76 e4 91 bd d9 b7 fb de d7 ef 7c 52 a0 a4 c1 72 ec b7 c4 20 40 b4 93 53 ca 25 13 a8 5b aa f7 3a af b5 ad d0 7d eb 8c 5b 62 a2 ef 63 d5 e8 f3 3a 4c 9a 8d 69 29 e5 d1 22 03 20 91 54 59 c1 26 c7 6e bb 58 6f 7e 83 cb 08 52 d8 65 56 c8 0a 4e 26 a9 99 05 43 ec ce 1a 19 a3 bf 84 ef be de c6 f8 a7 2a 64 5b 81 4b 98 33 b3 4a 09 52 de 12 01 e9 d3 fb b1 49 b6 15 81 2c 8c eb 18 22 cc 9b 5c f6 b5 c6 0d 48 58 ce Data Ascii: 6AU ()E%cfShdZ}r\k}]EW=RtnKXbf9o*ZI$$-6xktVPK(v\|Rr @S%[:}[bc:Li)" TY&nXo~ReVN&Cd[K3JRI,"\HX
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: 38 4b 4d bd 35 dc 7c 52 51 bf 91 95 f5 f3 3c 4f 00 91 79 4f a0 ba 91 dd 6e 45 fd 37 fc 86 2f 17 96 e0 03 b7 07 36 24 8b 32 31 e5 ab 0f 8c aa 4c 59 94 f4 b9 d9 bd f6 b7 d3 1a 26 ed 55 92 08 87 30 12 b4 b0 29 12 06 59 2d 62 6e 15 fc 21 88 f4 20 0e b8 08 ef 1f 71 51 4e a9 fa 07 e5 99 fc b1 65 3c 4f 24 cc 5a b6 a6 14 82 17 3d fa 27 4f ec 91 f4 c6 e8 d2 10 d7 60 6a 3c dd aa 69 b5 be 90 25 eb 61 6b 46 a6 d7 3f fa 30 89 2a 4d 06 96 c0 51 d6 f2 a0 9e 67 53 21 90 05 d1 d4 8b 82 0d 87 73 ba af cb 15 cb d8 63 5f e2 81 1a ae 64 79 a3 95 84 73 c4 46 92 09 1a 35 03 df b9 b9 22 de 67 0f f0 b4 f1 c1 72 77 37 5c 23 be 6c d2 c0 d1 14 6d 68 84 88 c1 20 29 3b 9b 0e e7 fb b0 9d 95 7a 59 2a dd 85 d2 56 33 cf 0a b0 50 74 5f c4 3a 15 20 01 f2 24 6d ef 84 b8 d5 b4 1c 1d ca 8f 79 Data Ascii: 8KM5\|RQ<OyOnE7/6$21LY&U0)Y-bn! qQNe<O$Z='O`j<i%akF?0MQgS!sc_dysF5"grw7\#lmh );zYV3Pt_: $my
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: 25 b5 c6 c9 18 36 b8 27 fa db fb 63 66 18 46 50 8b 97 7b 61 e4 b5 26 90 54 14 15 55 c9 57 98 40 81 e9 a2 24 b3 bb 5b 51 d4 4d 85 fa 9d 81 c6 8c 6b fa 7b 8b d2 ff 00 c4 c8 27 48 5a 51 3c c1 1d 6e f2 00 2e 49 b6 e3 f8 7c b1 97 1d 4a 32 cd f9 7c 3b 05 3b 55 8d 7c cf 50 a6 91 a8 e4 76 5f 14 32 29 51 6e dd bf 22 1b e9 8d 3e d5 ae e0 ad ad f6 01 ae 2d 1d 0d 41 55 65 96 16 0f 74 5d 44 59 85 f6 f6 fc b1 24 ad 7c 41 8f 24 b3 55 81 34 6b cc 54 72 c3 c3 7b 5c 0e fe 9d 30 c8 f1 bf 70 6b 76 0f 36 66 b0 b3 4a cd e1 4b b6 de 7d 3f 80 c5 e8 5c b2 93 de 8c c8 dd 32 c8 99 60 65 44 6b 96 7b 9f 1b ef b8 3e 5b 9d b0 b8 c5 3d d7 72 4d de cf b1 69 19 82 c5 13 ba 15 22 45 d3 2c 77 db d0 8f 41 61 be 22 5a be 40 27 d9 92 cd 52 cc 86 45 b8 5d 36 36 1b 9d fa fd 70 09 76 2e ec 47 9a Data Ascii: %6'cfFP{a&TUW@$[QMk{'HZQ<n.I\|J2\|;;U\|Pv_2)Qn">-AUet]DY$\|A$U4kTr{\0pkv6fJK}?\2`eDk{>[=rMi"E,wAa"Z@'RE]66pv.G
2024-05-15 22:37:13 UTC	7952	IN	Data Raw: a1 c4 cb a3 95 75 73 ba b0 24 06 b7 9d 8d fe 44 61 29 29 41 46 81 c8 ad 6a 40 b0 c6 66 85 e1 60 34 89 34 da dd 0f a7 a6 db 60 24 d4 18 30 dd 51 ba 7e 74 2b 11 35 0a 4a 02 a0 10 37 ed 71 ee 2c 7d ef e7 85 ce a4 a4 92 22 7e fe 0e b8 b2 aa 2c c6 a2 07 81 95 89 54 b3 fd db 81 6d 5e c0 11 d3 15 d1 a9 45 38 c8 6e 59 6a f3 77 11 35 40 11 fc 05 40 66 8e 06 63 13 f4 3c b3 63 d7 cc 1d c7 b9 c6 bd 3e 67 38 f7 fa 99 53 da 99 86 be 9e 5c c4 4b a8 8e 5c 62 52 ea 6e 2e 5a c4 db 03 52 8c 52 7f 01 a9 5a d8 33 2f 97 43 47 2d 80 e7 ce bb 0e e1 83 29 fd 7f 4c 66 69 b6 e2 bb 21 98 fc ad 37 dc 55 9d c6 23 cd d4 87 bc 12 49 66 23 a1 ba 93 71 e8 71 b7 0c b5 62 ae eb f6 60 25 52 d3 f2 25 8e 64 a5 94 d4 4c ba a1 91 0c 45 ce c0 36 d6 3f 31 bf bd f0 b6 b5 2d 2b 94 1f f8 b9 7c 88 e5 Data Ascii: us$Da))AFj@f`44`$0Q~t+5J7q,}"~,Tm^E8nYjw5@@fc<c>g8S\K\bRn.ZRRZ3/CG-)Lfi!7U#If#qqb`%R%dLE6?1-+\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50133	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	654	OUT	GET /steam/apps/553850/ss_0c79f56fc7be1bd0102f2ca1c92c8f0900daf4fb.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:13 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Fri, 05 Jan 2024 18:50:01 GMT ETag: "65984f59-13b10" Server: nginx Content-Type: image/jpeg Content-Length: 80656 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=118889 Expires: Fri, 17 May 2024 07:38:42 GMT Date: Wed, 15 May 2024 22:37:13 GMT Connection: close
2024-05-15 22:37:13 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 00 08 09 ff c4 00 4a 10 00 02 01 02 04 04 04 04 03 06 05 01 06 05 03 05 01 02 03 04 11 00 05 12 21 06 13 31 41 07 22 51 61 14 32 71 81 91 a1 b1 08 15 Data Ascii: JFIFHHCCQXJ!1A"Qa2q
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: 32 34 b2 3b cb 72 da ac 09 66 3d 6f 83 55 d1 36 f9 76 1d 47 94 49 39 8a c0 00 48 b7 7f a5 86 11 ce 93 39 43 dc 44 b9 63 47 56 e9 4f 13 cd 22 00 08 50 5c 8d f7 dc 74 c0 52 b5 b1 5c 76 e8 2f 2b ca a6 a9 af 78 2f 1c 73 c7 71 a4 dc ac 7b d8 6b 3f 2a 82 4f 52 6d 73 85 95 7e 67 28 ef 67 2a 69 1b 2b 13 c3 2c e0 55 c1 21 56 82 37 1a 6e b6 bf 4d c1 ea 3f ae 19 3e 5e 34 73 5c 74 c8 b9 12 29 fe 25 80 2e e5 c7 28 36 a2 4a 9b df ef b0 c5 76 a8 14 9d 82 bc 48 36 2a c1 63 02 fd 0e fd 86 19 58 b5 44 9e 5d c1 99 86 65 97 7e f3 8a 9c 49 0b 54 08 01 69 94 33 b9 05 88 d1 7d 44 01 b9 6b 58 5c 6f be 12 59 14 74 74 62 e5 b2 77 28 f0 a7 33 9e 31 52 61 82 1a 75 a8 e4 3b 3c ea a9 0c c6 e5 03 2e ab a0 36 23 53 0d 37 3d 46 25 f1 79 26 15 8b 7b 34 af 0b 33 88 b2 ca aa 63 98 f1 25 16 Data Ascii: 24;rf=oU6vGI9H9CDcGVO"P\tR\v/+x/sq{k?ORms~g(gi+,U!V7nM?>^4s\t)%.(6JvH6*cXD]e~ITi3}DkX\oYttbw(31Rau;<.6#S7=F%y&{43c%
2024-05-15 22:37:13 UTC	3438	IN	Data Raw: 92 ec 0f 1f 28 b4 cc c3 c5 6e 26 19 a6 79 5d 98 b8 5a 47 13 85 8a 18 b7 0e 9d 0b 0b 6d 63 7b fb ee 30 53 73 97 e6 56 15 8e 34 64 95 b9 b4 93 4c ba 55 49 4d 81 d3 6d 81 db f2 b6 f8 d4 a2 92 25 29 b6 31 4b 0c 93 25 53 73 8a 05 0a c3 fe ae e7 ef 6c 36 89 b0 bc b7 29 cb fe 22 bb f7 e5 7d 4d 14 30 d3 49 34 0a 90 92 d5 2e 0e 95 8d 76 f2 f7 24 b6 c0 29 1d 70 89 b6 be 50 d5 76 55 f3 b9 a1 5c ca 61 47 cc 6a 31 23 08 4b 8d 2e e9 73 a6 e3 b6 dd 6d ef 8d 50 4f 8e c4 93 de 86 e6 cc 6a a4 89 60 69 81 84 35 c4 4c c4 85 24 01 7f a8 00 0b fa 0f 61 81 49 05 36 c0 b3 d9 d2 8d ac 24 45 36 d2 d1 a9 fe 61 df da f8 ec 69 c8 59 69 91 c2 b2 39 a2 8e 48 25 61 38 23 ca 9b 15 20 f5 bf e7 71 87 69 c5 ef a1 a1 f3 74 5a 78 47 81 a2 e3 0a 3c ef 36 a8 ce 32 fc bc 65 a6 32 52 b9 dd a5 ac Data Ascii: (n&y]ZGmc{0SsV4dLUIMm%)1K%Ssl6)"}M0I4.v$)pPvU\aGj1#K.smPOj`i5L$aI6$E6aiYi9H%a8# qitZxG<62e2R
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: 3e a7 f2 18 11 4d 1c e8 fc 89 a3 ae 95 75 2c 90 d9 48 55 66 bb 79 0e ae a4 75 e9 b5 8f b1 18 f6 9c 57 83 c6 8c 9f 91 fa fa 21 1a 48 12 41 34 3a ca 89 94 10 2d d8 d8 f4 3b 1f cf 09 19 58 f2 54 88 c8 11 69 df 76 60 43 75 fe c6 2f da 24 b4 1e cc d5 10 12 c0 b8 03 4d f5 6c 09 e8 77 fa 1f 6f c3 08 95 0d 27 64 9d 34 74 90 98 86 86 f8 88 ed a8 bf cb f3 6d 7f c8 6d 6e 9d fa 95 d9 da 12 d5 f2 79 56 28 d5 14 26 9b 95 37 eb 7b f5 f5 27 f0 c1 a4 72 56 e9 11 b2 2e 93 b8 3b 1d 85 b6 3f 6e d8 75 f4 0b be c3 f2 aa f7 a4 78 b5 d4 3c 10 6b d6 44 02 ee ac 06 c4 5e dd 7a 1d fa 5f ef 29 46 ef 5b 2b 19 35 a6 cb 2c fc 5b 5e f0 a5 25 19 8a a2 ba 42 6f a0 16 68 81 3b 00 2d e6 36 ea 7b 62 14 af e8 74 56 ad 92 79 5f 08 c6 64 4a ca c5 15 95 ac 41 95 66 37 1d 77 52 2e 45 c7 5f 51 d3 Data Ascii: >Mu,HUfyuW!HA4:-;XTiv`Cu/$Mlwo'd4tmmnyV(&7{'rV.;?nux<kD^z_)F[+5,[^%Boh;-6{btVy_dJAf7wR.E_Q
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: a9 b3 f1 5f 56 c2 38 02 21 d9 54 02 7a 77 f6 27 eb 81 c5 a5 b6 1e cf 47 99 c5 5b 50 51 47 29 e3 3e 75 2d b3 2f af db 1d 54 2d 58 fc f5 54 90 c2 1e 79 04 65 be 45 b6 ec 3a 03 e9 db 1c 93 f0 75 25 d8 81 34 51 27 32 47 8e 38 cd 85 f5 96 26 fd bc a0 e0 82 89 03 4d 65 d5 cb 01 41 bf 99 89 b0 c0 4c 34 2f e0 d1 d4 92 02 fb 01 8e b0 50 91 94 f3 0d 95 2e 3b 5b 7c 77 20 a5 7a 46 77 e2 77 88 f5 1e 1f e6 ad 95 65 94 c0 66 b1 11 cf 35 29 70 80 ef 60 2f f4 c6 8f 4f 8f e3 7c ed fc a3 e5 8a c4 a9 f6 4c f8 59 e2 42 71 c9 6c ba ab e1 e8 f3 85 5d 6b a2 e6 39 57 b9 0b 7b 82 3b 8b fb e3 b2 e3 78 f6 ba 23 1f 99 7d 4b be 71 91 38 30 bc 66 5b a3 10 ce 23 65 0a 6f fc a4 fc c3 be 33 a9 0e 90 99 28 96 35 6e 65 cc 96 b8 1a 77 23 05 48 14 32 90 9a 84 31 98 9d 90 0b 02 a3 71 8e b3 a8 Data Ascii: _V8!Tzw'G[PQG)>u-/T-XTyeE:u%4Q'2G8&MeAL4/P.;[\|w zFwwef5)p`/O\|LYBql]k9W{;x#}Kq80f[#eo3(5new#H21q
2024-05-15 22:37:13 UTC	7952	IN	Data Raw: 4f df 0e a5 5a 60 6a f6 87 e8 e1 46 84 8b 5e 41 b8 48 ee 97 fa 9f 4f ae 27 26 ee 86 8a 54 2e aa 8c dc 16 51 11 17 d2 0d ca b1 b6 fe df 7c 4d 4d f4 86 71 bd b1 74 59 4c 75 ad 1c 7f 11 1c 53 48 a3 45 8d d5 6f d0 35 b7 fb ef 85 9f a8 f8 76 e9 d2 17 82 f2 c0 27 a6 6a 59 da 22 75 84 62 19 00 bf 7e d8 d5 19 a9 47 92 27 43 02 24 47 ba bf 98 9d 95 bd 3b e3 bf 17 e4 0a a1 62 38 04 72 b3 12 b2 de c8 14 6d ee 49 fc 36 c4 aa 5c a9 75 e4 a2 e3 c5 b7 d8 0b d2 b0 7b 12 1e e2 f6 07 a6 2a b4 a8 9f e6 21 45 98 b3 0b 8f 7f 5c 70 16 ce 92 1b bd ce 15 58 5b 4b 48 e7 71 6b fa 13 eb 82 27 d4 b3 70 87 09 1e 22 5a fa a9 eb 23 a2 cb 68 53 99 3c cc ca 5f d9 55 49 b9 e9 f3 74 1e e4 81 8c 99 f3 fc 2a 8c 55 c9 9a fd 3e 0f 89 72 93 a8 af 24 0c ec ab 34 a6 9d 9b 97 a8 ac 5a fe 6d 17 36 Data Ascii: OZ`jF^AHO'&T.Q\|MMqtYLuSHEo5v'jY"ub~G'C$G;b8rmI6\u{!E\pX[KHqk'p"Z#hS<_UItU>r$4Zm6
2024-05-15 22:37:13 UTC	4072	IN	Data Raw: 8c da 5d 24 75 46 de ff 00 7c 28 69 09 e5 b2 91 ac 9b 8e e3 cc 31 c7 25 42 64 9a dd 89 3e ac c0 60 a4 06 36 b2 ab ec 40 20 76 3d f1 cd 0a 24 4b 2c 0f e4 93 a1 d8 1d ff 00 5c 76 a4 b6 0d ae 84 3d 4c ee 7c c8 6f dc a9 18 e5 14 81 6c 42 3f 30 e9 61 a4 fa 9e d8 6e ba 07 67 14 13 e6 59 6e 3a 75 b1 fb e0 d8 2a c7 79 92 05 3a 80 95 06 d6 be f8 e8 d7 40 a6 39 1c 88 40 b3 58 7a ef 71 86 a1 0e b3 85 62 24 8c 38 b7 cd 7b 1b 7a df 1d f9 04 6e 9e 4f e2 3a a1 3b 0b ef e9 d8 9c 2c d5 c4 29 84 46 cb 01 37 f3 4b e9 8c df 8b a1 fa 0f 56 44 46 d6 ea 08 5d ec 7a ee 3a 7e 38 85 36 e8 a7 5d 82 09 75 b9 08 36 1d cf a7 7c 5e ab b2 7d 95 a8 10 4b 4e ae c1 56 21 e4 02 fd 6e a7 7f c4 5b ed 85 6e 9d 2e ce 82 4e 36 cb 6e 4d 17 0c e6 79 3c 70 d6 d6 51 d2 d7 cd 52 e2 ba 6a b9 67 13 43 Data Ascii: ]$uF\|(i1%Bd>`6@ v=$K,\v=L\|olB?0angYn:u*y:@9@Xzqb$8{znO:;,)F7KVDF]z:~86]u6\|^}KNV!n[n.N6nMy<pQRjgC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50134	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	423	OUT	GET /steam/apps/553850/ss_33e684e9cb2517af1599f0ca2b57d65ee82c2e51.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:13 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 77479 Last-Modified: Fri, 05 Jan 2024 18:50:01 GMT ETag: "65984f59-12ea7" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=101425 Expires: Fri, 17 May 2024 02:47:38 GMT Date: Wed, 15 May 2024 22:37:13 GMT Connection: close
2024-05-15 22:37:13 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 08 00 09 ff c4 00 4e 10 00 02 01 02 04 04 04 04 02 07 06 03 06 04 05 05 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 71 07 14 32 81 91 a1 08 15 23 Data Ascii: JFIFHHCCQXN!1A"Qaq2#
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: 3f 13 a9 5b 30 e1 3c f7 2e cf 90 ad d9 a8 e4 0d 2a 8b fe f2 fd 6b bf 98 c6 69 46 9d 77 1d 3d 85 dc 71 96 f0 47 0e 64 d9 ee 6d c4 b4 39 75 3d 05 7a 25 36 69 51 2d 28 6f 98 46 3a 14 4a 14 12 c2 e4 0b 9e 9e 7b 62 12 d3 1d d8 e9 be c7 9f 78 6e b3 e1 c6 7f c2 93 70 85 3e 78 ed 5d 98 54 4b 4b 94 66 b1 c5 a2 a6 9a 09 1e c9 4f 2d 85 d9 41 b8 d1 2e a0 c0 df be 20 b2 57 28 be 94 f7 4c f3 f7 c5 4f 83 9c 5f f0 6a 9a 6a 4e 29 e1 ea 6a ee 0e ad 99 01 ad 86 8e 3a 85 a6 61 66 3f 2d 29 d3 24 26 c6 da 75 5b c2 c3 71 6c 7a 91 9b 6b 67 52 fd ff 00 83 23 49 37 b5 c7 f6 38 2d 45 33 e7 79 ac e9 96 c2 fc a0 0b a4 03 72 14 01 a9 89 3e c4 fd f6 c6 c4 fd 9c 2e 46 67 e2 9b d2 2a 7c bd 96 5a 95 74 21 91 ac 40 f2 ef 7f 51 87 53 e0 6d 2d a6 c8 61 89 5e 48 c3 b2 aa 25 d8 5f 63 7b ff 00 Data Ascii: ?[0<.kiFw=qGdm9u=z%6iQ-(oF:J{bxnp>x]TKKfO-A. W(LO_jjN)j:af?-)$&u[qlzkgR#I78-E3yr>.Fg\|Zt!@QSm-a^H%_c{
2024-05-15 22:37:13 UTC	2309	IN	Data Raw: dc dc f5 38 da 9a 33 6e 42 58 aa 69 54 20 03 7d ba 9f 5c 15 e6 c5 ba 46 bc e9 14 16 f1 02 7a 9e e7 0d 48 16 cd 25 95 d8 92 4b 1b 76 38 e4 90 2d 98 89 04 a8 d6 2c cf e4 40 23 f1 c7 70 15 b9 87 4e 50 24 0b 76 d5 fe d8 e5 b8 78 21 8a 25 92 91 a1 72 ca 23 bb 46 45 ca df c8 af 6b f9 8c 37 0e c4 47 d4 b4 3c f5 d0 64 94 ab 38 0c a8 36 3d 77 b9 da fe fe 67 01 ca b7 19 2d 4e 89 a2 80 c4 a1 63 e6 22 db 66 52 00 3e a7 0b 77 c8 cd f6 44 b4 d4 ce 24 79 75 a9 a9 8d 83 86 95 81 56 b7 6b 11 b9 f7 db 1c da aa 15 58 db 2f 59 e5 96 6a e5 d4 94 e6 a6 21 51 05 3b 72 55 d6 fb 6c 17 40 f4 3d 8e f6 c4 9d 2f 0f a1 45 bb b0 bc e3 25 a3 5c ef 38 4a 25 9a 64 19 81 58 2e 55 d9 a1 0c 4d d8 df a9 16 df a1 c2 c6 4d c5 5f 91 cd 2d 4e 82 e9 b8 68 cf 51 35 55 53 9d 4e e1 f4 46 6d 6e c0 13 Data Ascii: 83nBXiT }\FzH%Kv8-,@#pNP$vx!%r#FEk7G<d86=wg-Nc"fR>wD$yuVkX/Yj!Q;rUl@=/E%\8J%dX.UMM_-NhQ5USNFmn
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: 72 f7 62 c4 f5 62 4e e7 7b ee 7b 5b 02 31 97 70 37 64 2d 9e a7 2d 51 95 dc ad ca ae db 1b ef b7 e1 86 d0 ee d1 da 9d 51 25 36 63 3b 80 d0 d1 96 04 13 fb 46 b0 e8 70 1a 5d d8 f1 b2 19 ab 6b f5 c8 d7 d0 a9 62 79 43 50 1e b7 ef 80 a3 16 81 c3 25 93 3b af ae a9 e7 cb 58 6e f6 d4 f2 31 01 ed e7 e7 85 58 e1 15 49 0f a9 c9 db 61 d4 1c ec ce ad 20 a9 a8 de e1 56 e3 c2 bd 94 df 11 9b 50 8b 92 46 8c 29 ca 5a 5b 0a a7 45 cb e9 6a 2a 1d 56 40 84 c7 f5 58 87 be c6 dd 7d 7c bb 60 7b f2 48 b5 28 45 d8 1a e7 b5 b3 6a 0d 55 26 92 43 69 27 6b 83 b6 dd 31 a7 44 52 d9 19 13 7e 67 d5 35 d2 d6 c6 a9 2b f3 18 6c 19 fd ce 27 18 a8 bb 43 3b 60 cb 1d c9 be e7 b5 ba 62 96 2d 0c 32 eb 46 c4 10 c2 fd 59 45 ec 3d b1 29 6e 52 3b 0c 62 99 48 60 cd a4 11 d0 a9 16 c4 e8 28 2a 39 2f cb 3c Data Ascii: rbbN{{[1p7d--QQ%6c;Fp]kbyCP%;Xn1XIa VPF)Z[EjV@X}\|`{H(EjU&Ci'k1DR~g5+l'C;`b-2FYE=)nR;bH`(9/<
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: 13 d0 cf 0a 10 d7 42 08 71 b7 9d c5 b1 d6 ce a2 97 c3 ab 25 3b 55 5e e6 32 07 7d 81 c3 ba 60 46 99 be 6f 4d 41 e0 60 d2 d4 11 e1 45 e9 f8 ff 00 a6 15 db e0 e1 7a 4d 21 86 69 6a a9 d0 3b 8b 47 1d b6 5f f1 1e fe c3 13 d3 39 49 54 b6 1b 64 b8 2b f5 30 8d f5 13 ef 8d aa c8 f0 2d 95 59 77 8d ac 7a 61 f9 e4 e0 56 e7 22 97 69 4b dc db 73 7f cb 0c ab 83 b7 07 f1 31 b9 00 81 d8 e0 80 19 e2 06 e7 0d 60 16 d5 d2 ea 43 b6 de b8 68 ba 67 08 aa a8 2f a8 e9 3e b6 ef 8d 11 90 b4 2a ac a4 28 ac 05 c0 f4 c3 a7 6c 56 85 ae 60 4e b0 eb 61 6e 82 e7 14 44 b6 04 ac 2f 22 5f 90 22 40 6e 18 6e 47 e1 82 8e a6 2b 24 39 d5 7b 91 86 e1 13 a3 4b 69 52 be 23 73 73 a4 63 b9 67 2d c8 9a 75 16 01 6d 6e e5 ae 70 d4 0d bb 1a 9b 5c 30 e9 d0 e3 bb 1c 42 e0 22 bb 77 23 48 c1 5b 80 15 e0 d4 6e Data Ascii: Bq%;U^2}`FoMA`EzM!ij;G_9ITd+0-YwzaV"iKs1`Chg/>*(lV`NanD/"_"@nnG+$9{KiR#sscg-umnp\0B"w#H[n
2024-05-15 22:37:13 UTC	7952	IN	Data Raw: bc 0f db a6 2b 38 e4 ba 6a ff 00 72 70 94 39 4e 88 38 97 89 e0 5a 06 a2 cb 6a 15 e1 99 bf 68 d1 93 76 03 fb d7 ee 4d be c3 0f 87 0b d5 aa 6b 81 72 e4 5a 74 c5 95 05 9b 73 be 37 d1 8e cd 84 a3 cf 6f 3c 75 00 96 09 8d 88 b5 f7 c2 b4 34 42 a3 9e c0 d9 ac 7c 8e 12 86 b3 75 a8 dc 92 db fe 18 ea 60 d8 93 e6 c3 0f a8 15 f3 38 ed 20 0b 85 a0 5a 59 1d ea 34 54 29 01 22 d1 70 e3 bd cf 6c 4d dd d5 6c 3a 4a b9 23 69 ad 1b 1e 62 d8 7e e8 eb 82 ab 81 7e 66 8b 52 b1 ca 40 03 96 52 c5 41 bd cf 9e 02 4d ad ce 4f 70 57 f0 f5 21 af bd d7 16 42 34 6a 95 3c be f7 1e 58 0d 0a 9d 13 49 58 1a 3b 9d 24 79 b0 b1 18 5d 1e 43 6c c8 79 bc cd 5e 31 76 37 37 d8 7d bb 60 55 02 8d e5 8d a0 04 b3 46 c1 c0 b0 49 03 58 9f 30 30 ba b5 ec 93 fa 05 c6 81 ec ba 7a 96 61 d8 62 94 c5 a0 57 90 22 Data Ascii: +8jrp9N8ZjhvMkrZts7o<u4B\|u`8 ZY4T)"plMl:J#ib~~fR@RAMOpW!B4j<XIX;$y]Cly^1v77}`UFIX00zabW"
2024-05-15 22:37:13 UTC	2024	IN	Data Raw: 50 51 18 b5 c5 bc 40 fa 9c 5b 4e 27 ef 4b ec ef f7 25 fe e2 f7 57 dc 2b 33 cd 32 cc e2 91 64 c8 f3 16 46 76 58 e4 f9 e5 d4 44 b6 be 86 2e 48 20 5b a8 03 bd ba 61 23 09 41 d4 e3 f4 ff 00 03 5a 92 b8 bf a9 49 19 f6 79 9e 03 97 0c ea a6 92 48 64 74 e5 c3 b0 7b 75 08 e2 da 80 f4 ff 00 7c 6e d1 8f 1f 8f 4d d9 99 39 cf c2 a5 43 3a 4c da 6a 6a 62 9c 49 c4 19 e1 55 40 1a 1a ba 46 20 81 d0 6a d2 fa 85 ad bd c7 97 6c 4d c5 49 de 28 2f 93 ff 00 c1 94 b4 af f7 24 fe 82 2f d7 f5 95 95 59 80 cb e8 16 7c 9e 22 47 3d e0 d0 02 db f7 86 bb 02 6f d0 1d 5b fd b1 7f 65 18 a5 ae 5e 2f cf 42 2b 24 9b 7a 56 df 9e a6 f9 5e 6b 5b 0e 5d 24 f5 3c 44 28 72 ea 7d 25 63 8d 41 aa 70 c6 df b3 56 b1 20 1d 8d ce c3 cc 61 25 8e 2e 54 a1 6f ec 52 39 1a 56 e5 4b ee 30 ca f8 c6 6c ea 79 84 b4 Data Ascii: PQ@[N'K%W+32dFvXD.H [a#AZIyHdt{u\|nM9C:LjjbIU@F jlMI(/$/Y\|"G=o[e^/B+$zV^k[]$<D(r}%cApV a%.ToR9VK0ly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50135	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	400	OUT	GET /steam/apps/553850/capsule_616x353.jpg?t=1709666906 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:13 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 106484 Last-Modified: Mon, 11 Sep 2023 20:20:34 GMT ETag: "64ff7692-19ff4" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=172282 Expires: Fri, 17 May 2024 22:28:35 GMT Date: Wed, 15 May 2024 22:37:13 GMT Connection: close
2024-05-15 22:37:13 UTC	16041	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 01 00 09 ff c4 00 65 10 00 02 01 02 05 02 04 03 04 05 06 08 04 11 08 0b 01 02 03 04 11 00 05 06 12 21 31 41 07 13 22 51 14 61 71 08 32 81 91 15 23 42 Data Ascii: JFIFCCahe!1A"Qaq2#B
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: f8 e7 9a cb a9 b5 8e 69 99 d6 e6 34 b5 39 85 4d 1c 3e 7b c1 3a c8 4c b1 48 17 6b 6d 63 b5 f6 8b da ff 00 31 8d d6 31 a0 49 11 88 58 69 f8 2a be 1a f9 5d 0c bf 69 3e 27 51 f5 e5 e7 aa d5 ff 00 c6 4a 78 af ad b2 bd 55 24 34 d9 45 55 2d 1c 90 d6 52 bd 52 cd 25 53 3c 60 2b c6 02 82 14 6c b9 06 e4 58 db ad f0 b1 c6 d6 c4 03 74 cb 63 e0 4a ad c4 b9 ed 91 fd e5 bb 35 3a eb 4d ab 7f c3 60 76 5d 31 e1 8e 53 97 65 54 79 65 26 73 a7 e3 d5 5a 8a b2 36 d4 19 26 4b 97 4c b2 49 2d 28 45 dc f5 56 16 54 0d 62 b1 9d c4 bf b7 38 a1 c5 10 f7 66 69 db 4f af ad 96 b3 86 46 21 8c 32 46 02 4f 88 0f 2d 37 fc 06 ba ad d7 2e d1 99 c6 bf 82 8a bb c4 32 f1 c5 4d 51 2c b4 ba 6a 9a 5f 2e 33 11 b0 8c 57 98 db 6c cc a0 1f d5 03 e5 8d de ad e4 62 3b 5c d8 b4 67 d7 a2 ba 2c 93 11 e2 9f 6b Data Ascii: i49M>{:LHkmc11IXi*]i>'QJxU$4EU-RR%S<`+lXtcJ5:M`v]1SeTye&sZ6&KLI-(EVTb8fiOF!2FO-7.2MQ,j_.3Wlb;\g,k
2024-05-15 22:37:13 UTC	2811	IN	Data Raw: 45 c6 70 b0 47 86 cd 1b 00 36 36 00 75 46 89 c4 bb 52 b8 f1 73 b9 84 65 77 75 e3 72 9c 62 44 23 75 2f 32 5d 26 6f f0 6e af 18 de 8f c1 52 6d 6b 7f 5e 10 b2 d7 5a 9e cb b3 a1 52 89 bd 94 34 84 d9 54 df 68 f9 e0 25 a5 bb 2e 52 f1 23 31 26 e2 d8 56 48 1a 17 6f cd 14 6a 4c 30 90 01 07 0d 70 0f b3 68 80 d2 f6 9d 9e 1a 5d cb 20 30 48 77 11 fb 4a d6 e4 7d 2f 88 4f 1a d5 23 34 82 93 0b ac 85 06 ed c2 c3 d3 7b 0f a5 f0 2d 5a 9d 9a ca 91 86 a9 a3 31 15 52 cd c0 27 db 9b df 03 cb cd 71 72 9e 28 5d ae 30 e6 90 d1 4a 3b 81 25 48 d1 53 2b 80 59 ac 6f 88 53 49 95 11 8d 52 71 c0 17 82 c6 d8 af 32 9d d1 69 18 8a 00 e3 a6 02 64 b4 40 d4 e2 71 7c 47 79 b4 66 a7 4c 8a a0 fb db 10 4b 4e e8 e0 a6 e2 76 69 81 dd 60 7a 8f 7b 63 85 55 27 f2 47 44 f7 e8 7f 1c 05 ed 4a d2 84 a3 c8 Data Ascii: EpG66uFRsewurbD#u/2]&onRmk^ZR4Th%.R#1&VHojL0ph] 0HwJ}/O#4{-Z1R'qr(]0J;%HS+YoSIRq2id@q\|GyfLKNvi`z{cU'GDJ
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: e6 a1 aa c4 9f 74 30 23 6e d1 fb dd 71 59 8e e2 a3 19 17 74 19 5a de e9 ec 8f 21 bb 5c f5 e6 01 26 d6 2a ca 9d fd ce 29 46 c9 e9 e9 66 10 a0 2b 60 58 f4 eb 85 cb 69 2e 92 68 eb 0c 73 5d 49 50 3a d8 f2 70 f1 15 e8 52 66 57 5c b3 54 ab 51 a1 9d 54 48 8c a9 25 8d bf 1f e8 38 88 fc 21 ce 43 7d 57 07 e8 a6 6a 6b 23 9d 63 44 70 db 98 02 2f 88 60 16 d9 28 c0 da 36 aa 24 30 da 2d bc f1 b7 70 b0 f9 e2 13 5c 49 f1 23 f2 4e d2 52 c4 b6 57 94 37 b0 43 81 3c 9d d3 81 52 50 ba c7 e7 72 0d 80 1c 60 37 69 14 84 75 6a 58 58 81 7c 08 db 42 78 d5 49 53 55 05 1f 7b 9c 40 90 97 14 50 3a 22 56 a8 00 7d 64 0c 47 16 9c 01 46 d1 d4 99 e2 0c c7 9b d8 e0 4e 14 69 3d 1c a7 8b 8e 71 1e d3 c2 6d 64 2d f5 1c 7d 70 c3 48 c1 10 82 e4 f1 c6 23 12 88 14 8d 1a 79 91 8e 2e 6f 88 8f 79 4e 44 Data Ascii: t0#nqYtZ!\&*)Ff+`Xi.hs]IP:pRfW\TQTH%8!C}Wjk#cDp/`(6$0-p\I#NRW7C<RPr`7iujXX\|BxISU{@P:"V}dGFNi=qmd-}pH#y.oyND
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: f1 a3 c6 b3 ae e0 8f 2a c9 c4 d4 d9 38 b3 ce 65 01 5e 77 ec 08 04 fa 47 b7 73 f4 18 c5 76 8b b5 03 8a b4 61 f0 b6 d8 b7 37 a1 27 f2 1f 33 e8 ae 78 7f 0b fb 2d c9 2e ae fb 95 97 c2 cf 1d 34 e6 8b d0 39 66 51 5f 15 73 55 53 79 bb cc 30 ab 2f aa 57 61 62 58 76 61 8b ce 03 da 9c 07 0f e1 f1 e1 26 cd 99 b7 74 05 6a e2 7a f9 a8 18 ee 19 3c f3 ba 56 55 1a fb a9 65 df 68 9d 71 95 78 a3 9d 65 b5 59 54 75 0b 0d 3d 37 92 e6 a2 30 ad 7d ec 78 b1 3c 72 31 5d c6 f8 ce 1f 88 e2 19 2e 1e e8 0a d7 4e 67 cc a2 e1 30 72 40 c2 c9 39 9e 4a 87 a0 96 b3 48 6a 9c b3 3c a0 43 e7 d0 ce b2 00 0d b7 0e 8c a7 e4 cb 70 7e b8 a3 83 8b 9c 1c cd 98 1d 5a 6f f4 f7 a9 4f c2 77 ad 2d ea bb 06 2f b4 66 96 90 0f f2 7c c9 6f ef 02 ff 00 7f 1e 8c ee dd f0 96 ef 9b e0 3f 35 45 fb 1b 13 e5 f1 fd Data Ascii: *8e^wGsva7'3x-.49fQ_sUSy0/WabXva&tjz<VUehqxeYTu=70}x<r1].Ng0r@9JHj<Cp~ZoOw-/f\|o?5E
2024-05-15 22:37:13 UTC	7952	IN	Data Raw: c9 6b 61 e6 5a 43 ee b3 29 94 82 06 82 4f 3f cd 05 53 74 00 28 2a 5a e3 a9 3d 16 d7 e9 f2 c5 6b de f2 e0 63 ad f5 eb 5a ed e7 7d 54 a6 b1 a1 a4 3e fc bd 7c fc bd 13 d4 d4 8d 55 4f 50 29 89 15 1b 48 68 81 23 cc 8f b8 1e fd ae 3b e0 0f 94 44 e1 de 0d 3a f4 3c bf 43 c9 11 91 17 83 93 7e 9d 42 06 9f 3b cc aa b3 45 35 15 72 54 05 8c 44 cb 37 a8 3a 0e 81 bb b5 bb 13 c8 e3 9e 30 47 e1 f0 f1 42 44 6c 02 cd e9 a5 1e a3 a7 bb 4f 24 c8 65 98 cb e2 75 f2 d7 98 f3 eb f7 ab 66 9a 7f d1 91 e6 3f af aa 88 d6 d0 98 53 e1 99 7c b9 03 30 3b 25 bd ee 9e 93 c0 f5 06 00 f1 6c 67 31 ae 74 d9 68 03 95 d6 6e ec 50 dd b5 cf 6d f4 21 5f e1 63 11 93 77 a8 d3 df d7 ea c2 be 69 9a 19 2b b6 c1 43 13 4e e9 19 75 8a 3e 5b 6a f2 c4 0e e7 bf 1c e3 23 8e 9c 45 e2 90 d0 27 7f 3f c3 ee 5a 6c Data Ascii: kaZC)O?St(*Z=kcZ}T>\|UOP)Hh#;D:<C~B;E5rTD7:0GBDlO$euf?S\|0;%lg1thnPm!_cwi+CNu>[j#E'?Zl
2024-05-15 22:37:13 UTC	16384	IN	Data Raw: 11 cb df db e9 85 a2 da 68 1e f4 b9 af 54 80 c4 1b e0 80 52 62 2e 9e 7b 3a 3a 9f d6 29 b8 c2 90 1e d2 d7 73 5d 55 a8 56 18 dc 48 81 87 46 17 c6 7d cc 2c 71 69 dc 23 03 69 d4 37 be 18 95 7a dc 0c 28 09 a9 ad c4 1c 15 35 38 92 f1 f4 c7 00 9b 49 ca 64 90 cc cc fb 48 3c a2 f6 1f 3f 99 c5 c4 0d 25 a0 9d b9 7e 68 2e d3 44 55 68 49 c0 49 14 3f 1f 7c 9f 50 fa 7b 62 43 d8 d7 8a 72 60 24 6c a3 27 a5 6a 44 2c 58 3c 7e e0 58 af d4 7f 5e 2b 64 84 c7 a8 36 11 9a ec ca 3e 72 14 93 d4 62 2a 3b 50 db 43 5c 8e b8 6a 28 4d bc f4 74 ec eb 5d 57 35 1a 32 10 b2 c1 18 76 56 23 d2 4d c1 00 7c c8 3f 4c 58 60 e0 64 87 bc 98 12 c1 c8 6e 7c 85 fc fe 01 23 83 c8 a8 ea fc f6 5c d5 e3 46 49 9d 64 f3 54 cc f5 cf 27 c6 85 fd 4d 7d 43 4c cb 32 f2 b2 c6 cd c3 23 d9 94 74 b1 b5 c0 ed e9 1c Data Ascii: hTRb.{::)s]UVHF},qi#i7z(58IdH<?%~h.DUhII?\|P{bCr`$l'jD,X<~X^+d6>rb*;PC\j(Mt]W52vV#M\|?LX`dn\|#\FIdT'M}CL2#t
2024-05-15 22:37:13 UTC	14144	IN	Data Raw: ee 2c 4b 73 df 93 87 62 30 cc 7b 5e 0f 33 67 dc 86 d2 5b a8 5b ff 00 d9 6f 31 cc a0 8e b7 2e a7 aa 69 b2 b9 a7 12 9a 79 4b 30 89 55 4f 98 ea 7a 29 24 af d4 fb e3 ce bb 57 14 2e 2d 9d c2 9e 05 58 e7 67 40 7a d6 be e5 7d c2 5c f0 ec a0 e8 b7 b7 42 e7 62 dc 96 20 71 d7 1e 7c 34 16 56 ac 27 e6 d3 ac b1 4d 30 95 5d d4 0b c6 05 8d bf 0e f8 13 71 20 90 da f7 a2 e4 dc a8 da 45 2b 54 aa ec 57 69 2c 5c fe cd 81 e7 12 5f ec 92 10 da 69 c8 9a 7c c3 2e a4 a6 a6 8c 46 3e 25 40 69 2b 2a 89 61 10 fd ad 80 7e d7 61 f5 c0 5d 1c af 73 8d e9 c8 0e 7d 2f cb 99 47 8c e5 70 7d a9 b4 cd 05 5e 79 95 d5 54 d2 fa 8c 5e 6c 9c dd ba 11 19 23 f2 27 e7 88 a2 2c b0 c8 c6 bb 9d 7e 68 ae 6b 5c e0 1a b8 ea ab 34 86 38 1a 38 e2 79 27 e6 ec e9 be c2 ff 00 c0 5b af 53 8f a6 b3 10 74 d9 79 5b Data Ascii: ,Ksb0{^3g[[o1.iyK0UOz)$W.-Xg@z}\Bb q\|4V'M0]q E+TWi,\_i\|.F>%@i+*a~a]s}/Gp}^yT^l#',~hk\488y'[Sty[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50129	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	763	OUT	GET /public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:14 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:14 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15477477 Expires: Mon, 11 Nov 2024 01:55:11 GMT
2024-05-15 22:37:14 UTC	3876	IN	Data Raw: 66 31 64 0d 0a 76 61 72 20 67 5f 66 6e 4d 6f 64 61 6c 44 69 73 6d 69 73 73 48 61 6e 64 6c 65 72 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 67 5f 62 49 73 4d 6f 62 69 6c 65 43 6f 6e 74 72 6f 6c 6c 65 72 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 47 6f 74 53 74 65 61 6d 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 2c 20 73 74 65 61 6d 55 52 4c 2c 20 61 70 70 4e 61 6d 65 20 29 0d 0a 7b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 53 74 65 61 6d 55 52 4c 27 29 2e 68 72 65 66 20 3d 20 73 74 65 61 6d 55 52 4c 3b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 41 70 70 4e 61 6d 65 27 29 2e 75 70 64 61 74 65 28 20 61 70 70 4e 61 6d 65 20 29 3b 0d 0a 09 73 68 6f 77 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 20 29 3b 0d 0a Data Ascii: f1dvar g_fnModalDismissHandler = false;var g_bIsMobileController = false;function showGotSteamModal( contentEl, steamURL, appName ){$('gotSteam_SteamURL').href = steamURL;$('gotSteam_AppName').update( appName );showModal( contentEl );
2024-05-15 22:37:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50130	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	768	OUT	GET /public/javascript/modalContent.js?v=Wd0kCESeJquW&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:14 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:14 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15490201 Expires: Mon, 11 Nov 2024 05:27:15 GMT
2024-05-15 22:37:14 UTC	13930	IN	Data Raw: 33 36 36 32 0d 0a 0d 0a 2f 2a 20 68 61 6e 64 6c 65 20 6d 6f 64 61 6c 20 63 6f 6e 74 65 6e 74 20 2a 2f 0d 0a 76 61 72 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 20 3d 20 7b 7d 3b 0d 0a 76 61 72 20 61 63 74 69 76 65 43 6f 6e 74 65 6e 74 3b 0d 0a 76 61 72 20 62 6f 64 79 43 6c 61 73 73 4e 61 6d 65 20 3d 20 22 22 3b 0d 0a 76 61 72 20 72 65 73 69 7a 65 41 63 74 69 76 65 43 6f 6e 74 65 6e 74 54 69 6d 65 72 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 67 5f 62 4d 6f 64 61 6c 4d 6f 64 69 66 79 41 6e 63 68 6f 72 54 61 72 67 65 74 73 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 67 5f 62 4d 6f 64 61 6c 43 61 63 68 65 43 6f 6e 74 65 6e 74 20 3d 20 74 72 75 65 3b 20 2f 2f 20 77 68 65 74 68 65 72 20 6f 72 20 6e 6f 74 20 74 6f 20 72 65 75 73 65 20 6f 6c 64 20 69 66 72 61 6d 65 73 Data Ascii: 3662/* handle modal content */var modalContent = {};var activeContent;var bodyClassName = "";var resizeActiveContentTimer = null;var g_bModalModifyAnchorTargets = true;var g_bModalCacheContent = true; // whether or not to reuse old iframes
2024-05-15 22:37:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50128	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	769	OUT	GET /public/shared/javascript/apphub.js?v=JSwdk0x7aW5O&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:14 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:14 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=13735456 Expires: Mon, 21 Oct 2024 22:01:30 GMT
2024-05-15 22:37:14 UTC	16132	IN	Data Raw: 34 35 32 66 0d 0a 0d 0a 76 61 72 20 53 4d 41 4c 4c 20 3d 20 31 3b 0d 0a 76 61 72 20 4d 45 44 49 55 4d 20 3d 20 32 3b 0d 0a 76 61 72 20 4c 41 52 47 45 20 3d 20 34 3b 0d 0a 76 61 72 20 57 49 44 45 20 3d 20 38 3b 0d 0a 76 61 72 20 54 41 4c 4c 20 3d 20 31 36 3b 0d 0a 76 61 72 20 4d 45 44 49 55 4d 5f 52 45 53 49 5a 41 42 4c 45 20 3d 20 33 32 3b 0d 0a 76 61 72 20 4c 41 52 47 45 5f 52 45 53 49 5a 41 42 4c 45 20 3d 20 36 34 3b 0d 0a 76 61 72 20 54 41 4c 4c 5f 52 45 53 49 5a 41 42 4c 45 20 3d 20 31 32 38 3b 0d 0a 0d 0a 76 61 72 20 67 44 65 62 75 67 67 69 6e 67 20 3d 20 30 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 74 43 61 72 64 43 61 74 65 67 6f 72 79 53 74 72 69 6e 67 28 20 63 61 74 65 67 6f 72 79 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 63 61 74 65 67 6f 72 79 Data Ascii: 452fvar SMALL = 1;var MEDIUM = 2;var LARGE = 4;var WIDE = 8;var TALL = 16;var MEDIUM_RESIZABLE = 32;var LARGE_RESIZABLE = 64;var TALL_RESIZABLE = 128;var gDebugging = 0;function GetCardCategoryString( category ){var category
2024-05-15 22:37:14 UTC	1587	IN	Data Raw: 3b 0d 0a 09 09 76 61 72 20 74 65 6d 70 6c 61 74 65 43 61 72 64 48 65 69 67 68 74 20 3d 20 63 61 72 64 2e 74 72 79 46 6f 72 48 65 69 67 68 74 3b 0d 0a 09 09 76 61 72 20 63 6f 6e 74 65 6e 74 41 72 65 61 20 3d 20 63 61 72 64 2e 64 6f 77 6e 28 20 27 64 69 76 2e 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 4d 61 69 6e 27 20 29 3b 0d 0a 09 09 76 61 72 20 69 6d 61 67 65 20 3d 20 63 61 72 64 2e 64 6f 77 6e 28 27 69 6d 67 2e 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 50 72 65 76 69 65 77 49 6d 61 67 65 27 29 3b 0d 0a 0d 0a 09 09 2f 2f 20 69 66 20 66 69 78 65 64 20 68 65 69 67 68 74 2c 20 74 68 65 6e 20 73 65 74 20 74 68 65 20 63 61 72 64 20 68 65 69 67 68 74 73 20 61 6e 64 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 63 6f 6e 74 65 6e 74 73 20 Data Ascii: ;var templateCardHeight = card.tryForHeight;var contentArea = card.down( 'div.apphub_CardContentMain' );var image = card.down('img.apphub_CardContentPreviewImage');// if fixed height, then set the card heights and make sure the contents
2024-05-15 22:37:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50132	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	767	OUT	GET /public/javascript/apphub_home.js?v=8OrLYcA-XZ3m&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:14 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:14 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15496714 Expires: Mon, 11 Nov 2024 07:15:48 GMT
2024-05-15 22:37:14 UTC	11520	IN	Data Raw: 32 63 66 38 0d 0a 0d 0a 76 61 72 20 63 75 72 72 65 6e 74 50 61 67 65 20 3d 20 31 3b 0d 0a 76 61 72 20 64 6f 6e 65 53 63 72 6f 6c 6c 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 6d 6f 64 61 6c 44 69 61 6c 6f 67 56 69 73 69 62 6c 65 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 77 61 69 74 69 6e 67 46 6f 72 43 6f 6e 74 65 6e 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 68 61 73 41 64 6d 69 6e 50 72 69 76 69 6c 65 67 65 73 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 67 5f 41 70 70 49 44 20 3d 20 30 3b 0d 0a 0d 0a 77 69 6e 64 6f 77 2e 6f 6e 62 65 66 6f 72 65 75 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 Data Ascii: 2cf8var currentPage = 1;var doneScrolling = false;var modalDialogVisible = false;var waitingForContent = false;var hasAdminPrivileges = false;var g_AppID = 0;window.onbeforeunload = function(){if ( window.history && window.history.r
2024-05-15 22:37:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50131	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	775	OUT	GET /public/shared/javascript/user_reviews.js?v=LRs2cUK5D3j7&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:14 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:14 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15176179 Expires: Thu, 07 Nov 2024 14:13:33 GMT
2024-05-15 22:37:14 UTC	14779	IN	Data Raw: 33 39 62 33 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 55 73 65 72 52 65 76 69 65 77 5f 41 77 61 72 64 28 20 62 4c 6f 67 67 65 64 49 6e 2c 20 6c 6f 67 69 6e 55 52 4c 2c 20 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 49 44 2c 20 63 61 6c 6c 62 61 63 6b 46 75 6e 63 2c 20 73 65 6c 65 63 74 65 64 41 77 61 72 64 20 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 62 4c 6f 67 67 65 64 49 6e 20 29 0d 0a 09 7b 0d 0a 09 09 66 6e 4c 6f 79 61 6c 74 79 5f 53 68 6f 77 41 77 61 72 64 4d 6f 64 61 6c 28 20 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 49 44 2c 20 31 2c 20 63 61 6c 6c 62 61 63 6b 46 75 6e 63 2c 20 75 6e 64 65 66 69 6e 65 64 2c 20 73 65 6c 65 63 74 65 64 41 77 61 72 64 20 29 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 64 69 61 6c 6f 67 20 3d 20 53 68 Data Ascii: 39b3function UserReview_Award( bLoggedIn, loginURL, recommendationID, callbackFunc, selectedAward ){if ( bLoggedIn ){fnLoyalty_ShowAwardModal( recommendationID, 1, callbackFunc, undefined, selectedAward );}else{var dialog = Sh
2024-05-15 22:37:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50136	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	423	OUT	GET /steam/apps/553850/ss_50afbbc4d811c38fe9f64c1fc8d7eb9d9da6d24c.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:14 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Fri, 05 Jan 2024 18:50:01 GMT ETag: "65984f59-1240b" Server: nginx Content-Type: image/jpeg Content-Length: 74763 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=401899 Expires: Mon, 20 May 2024 14:15:33 GMT Date: Wed, 15 May 2024 22:37:14 GMT Connection: close
2024-05-15 22:37:14 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 00 01 02 07 08 09 ff c4 00 51 10 00 02 01 02 04 04 04 03 05 04 05 0a 05 03 01 09 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 71 14 81 91 07 32 42 a1 b1 15 Data Ascii: JFIFHHCCQXQ!1A"Qaq2B
2024-05-15 22:37:14 UTC	16384	IN	Data Raw: e3 2c e4 da f8 0e 84 51 e5 39 aa cd 55 24 d4 aa d4 da a3 8c 55 4b 37 20 48 45 d6 de 10 47 df 37 3b 9e 96 c6 76 d4 2a 4b e0 69 4b 5b a6 07 4d 91 ca 21 89 b2 b3 52 b4 f2 20 2a 95 ae a1 75 00 6e c1 6d f9 ed f3 eb 82 d4 9d b9 76 18 95 6c 86 99 16 59 34 f4 19 8d 1c b9 d5 4e 5c 8a 9c d9 45 15 2c 5c da b6 5f 10 8c 3e c5 56 e3 a9 27 af 4c 6a 8d 21 2d ab a5 bb fd 0f 2a cf 28 29 79 8f 53 00 90 c4 d3 36 8e 6d 81 2b 72 41 6b 74 db af ae 19 19 35 71 1f a1 c9 26 85 06 37 59 12 3e 59 68 dc 1d 4d 7f ba 7a 0f cf 05 7d c9 08 aa 76 5c f8 3f 8a 2b 68 a9 2b f2 ea 49 82 50 ca c8 ef 4b 19 3b e9 3b f2 cf 50 49 3a 88 b8 bd bc c0 c2 9a 5c 89 c9 8e 96 fc 9f 51 fd 97 d4 d5 e6 9c 3d 49 53 0e 6f 57 35 32 b1 d1 44 6e da 50 6c 3c 5b 5a d6 b5 97 ee 8b 0b de f8 f2 ff 00 89 f5 d3 c5 fd 3c Data Ascii: ,Q9U$UK7 HEG7;vKiK[M!R unmvlY4N\E,\_>V'Lj!-*()yS6m+rAkt5q&7Y>YhMz}v\?+h+IPK;;PI:\Q=ISoW52DnPl<[Z<
2024-05-15 22:37:14 UTC	1617	IN	Data Raw: fb dd 00 36 e8 41 18 f6 f1 55 d8 c2 9d 89 b8 db 20 9f 28 29 45 25 63 66 53 c0 a8 93 68 a6 64 5a 7d ee 00 72 a0 0e bd fc ed 8b 5c b1 6b 7d 8a d6 5d 45 57 3d 52 a4 74 e6 aa da 6e c3 a5 8f 4b 93 d0 58 fa 62 dd 02 dd 1e b7 94 d5 66 39 6f 0e 0c d2 2a 2a b9 ae 5a 49 24 12 16 a7 8e c6 c0 92 f7 24 00 2d e1 36 1e 78 9f 10 d5 89 ab 6b aa b3 74 90 56 50 b5 4b cc aa 28 e5 76 e4 91 bd d9 b7 fb de d7 ef 7c 52 a0 a4 c1 72 ec b7 c4 20 40 b4 93 53 ca 25 13 a8 5b aa f7 3a af b5 ad d0 7d eb 8c 5b 62 a2 ef 63 d5 e8 f3 3a 4c 9a 8d 69 29 e5 d1 22 03 20 91 54 59 c1 26 c7 6e bb 58 6f 7e 83 cb 08 52 d8 65 56 c8 0a 4e 26 a9 99 05 43 ec ce 1a 19 a3 bf 84 ef be de c6 f8 a7 2a 64 5b 81 4b 98 33 b3 4a 09 52 de 12 01 e9 d3 fb b1 49 b6 15 81 2c 8c eb 18 22 cc 9b 5c f6 b5 c6 0d 48 58 ce Data Ascii: 6AU ()E%cfShdZ}r\k}]EW=RtnKXbf9o*ZI$$-6xktVPK(v\|Rr @S%[:}[bc:Li)" TY&nXo~ReVN&Cd[K3JRI,"\HX
2024-05-15 22:37:14 UTC	16384	IN	Data Raw: 38 4b 4d bd 35 dc 7c 52 51 bf 91 95 f5 f3 3c 4f 00 91 79 4f a0 ba 91 dd 6e 45 fd 37 fc 86 2f 17 96 e0 03 b7 07 36 24 8b 32 31 e5 ab 0f 8c aa 4c 59 94 f4 b9 d9 bd f6 b7 d3 1a 26 ed 55 92 08 87 30 12 b4 b0 29 12 06 59 2d 62 6e 15 fc 21 88 f4 20 0e b8 08 ef 1f 71 51 4e a9 fa 07 e5 99 fc b1 65 3c 4f 24 cc 5a b6 a6 14 82 17 3d fa 27 4f ec 91 f4 c6 e8 d2 10 d7 60 6a 3c dd aa 69 b5 be 90 25 eb 61 6b 46 a6 d7 3f fa 30 89 2a 4d 06 96 c0 51 d6 f2 a0 9e 67 53 21 90 05 d1 d4 8b 82 0d 87 73 ba af cb 15 cb d8 63 5f e2 81 1a ae 64 79 a3 95 84 73 c4 46 92 09 1a 35 03 df b9 b9 22 de 67 0f f0 b4 f1 c1 72 77 37 5c 23 be 6c d2 c0 d1 14 6d 68 84 88 c1 20 29 3b 9b 0e e7 fb b0 9d 95 7a 59 2a dd 85 d2 56 33 cf 0a b0 50 74 5f c4 3a 15 20 01 f2 24 6d ef 84 b8 d5 b4 1c 1d ca 8f 79 Data Ascii: 8KM5\|RQ<OyOnE7/6$21LY&U0)Y-bn! qQNe<O$Z='O`j<i%akF?0MQgS!sc_dysF5"grw7\#lmh );zYV3Pt_: $my
2024-05-15 22:37:14 UTC	16384	IN	Data Raw: 25 b5 c6 c9 18 36 b8 27 fa db fb 63 66 18 46 50 8b 97 7b 61 e4 b5 26 90 54 14 15 55 c9 57 98 40 81 e9 a2 24 b3 bb 5b 51 d4 4d 85 fa 9d 81 c6 8c 6b fa 7b 8b d2 ff 00 c4 c8 27 48 5a 51 3c c1 1d 6e f2 00 2e 49 b6 e3 f8 7c b1 97 1d 4a 32 cd f9 7c 3b 05 3b 55 8d 7c cf 50 a6 91 a8 e4 76 5f 14 32 29 51 6e dd bf 22 1b e9 8d 3e d5 ae e0 ad ad f6 01 ae 2d 1d 0d 41 55 65 96 16 0f 74 5d 44 59 85 f6 f6 fc b1 24 ad 7c 41 8f 24 b3 55 81 34 6b cc 54 72 c3 c3 7b 5c 0e fe 9d 30 c8 f1 bf 70 6b 76 0f 36 66 b0 b3 4a cd e1 4b b6 de 7d 3f 80 c5 e8 5c b2 93 de 8c c8 dd 32 c8 99 60 65 44 6b 96 7b 9f 1b ef b8 3e 5b 9d b0 b8 c5 3d d7 72 4d de cf b1 69 19 82 c5 13 ba 15 22 45 d3 2c 77 db d0 8f 41 61 be 22 5a be 40 27 d9 92 cd 52 cc 86 45 b8 5d 36 36 1b 9d fa fd 70 09 76 2e ec 47 9a Data Ascii: %6'cfFP{a&TUW@$[QMk{'HZQ<n.I\|J2\|;;U\|Pv_2)Qn">-AUet]DY$\|A$U4kTr{\0pkv6fJK}?\2`eDk{>[=rMi"E,wAa"Z@'RE]66pv.G
2024-05-15 22:37:14 UTC	7952	IN	Data Raw: a1 c4 cb a3 95 75 73 ba b0 24 06 b7 9d 8d fe 44 61 29 29 41 46 81 c8 ad 6a 40 b0 c6 66 85 e1 60 34 89 34 da dd 0f a7 a6 db 60 24 d4 18 30 dd 51 ba 7e 74 2b 11 35 0a 4a 02 a0 10 37 ed 71 ee 2c 7d ef e7 85 ce a4 a4 92 22 7e fe 0e b8 b2 aa 2c c6 a2 07 81 95 89 54 b3 fd db 81 6d 5e c0 11 d3 15 d1 a9 45 38 c8 6e 59 6a f3 77 11 35 40 11 fc 05 40 66 8e 06 63 13 f4 3c b3 63 d7 cc 1d c7 b9 c6 bd 3e 67 38 f7 fa 99 53 da 99 86 be 9e 5c c4 4b a8 8e 5c 62 52 ea 6e 2e 5a c4 db 03 52 8c 52 7f 01 a9 5a d8 33 2f 97 43 47 2d 80 e7 ce bb 0e e1 83 29 fd 7f 4c 66 69 b6 e2 bb 21 98 fc ad 37 dc 55 9d c6 23 cd d4 87 bc 12 49 66 23 a1 ba 93 71 e8 71 b7 0c b5 62 ae eb f6 60 25 52 d3 f2 25 8e 64 a5 94 d4 4c ba a1 91 0c 45 ce c0 36 d6 3f 31 bf bd f0 b6 b5 2d 2b 94 1f f8 b9 7c 88 e5 Data Ascii: us$Da))AFj@f`44`$0Q~t+5J7q,}"~,Tm^E8nYjw5@@fc<c>g8S\K\bRn.ZRRZ3/CG-)Lfi!7U#If#qqb`%R%dLE6?1-+\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50137	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:13 UTC	423	OUT	GET /steam/apps/553850/ss_0c79f56fc7be1bd0102f2ca1c92c8f0900daf4fb.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:14 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Fri, 05 Jan 2024 18:50:01 GMT ETag: "65984f59-13b10" Server: nginx Content-Type: image/jpeg Content-Length: 80656 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=118774 Expires: Fri, 17 May 2024 07:36:48 GMT Date: Wed, 15 May 2024 22:37:14 GMT Connection: close
2024-05-15 22:37:14 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 01 00 08 09 ff c4 00 4a 10 00 02 01 02 04 04 04 04 03 06 05 01 06 05 03 05 01 02 03 04 11 00 05 12 21 06 13 31 41 07 22 51 61 14 32 71 81 91 a1 b1 08 15 Data Ascii: JFIFHHCCQXJ!1A"Qa2q
2024-05-15 22:37:14 UTC	16384	IN	Data Raw: 32 34 b2 3b cb 72 da ac 09 66 3d 6f 83 55 d1 36 f9 76 1d 47 94 49 39 8a c0 00 48 b7 7f a5 86 11 ce 93 39 43 dc 44 b9 63 47 56 e9 4f 13 cd 22 00 08 50 5c 8d f7 dc 74 c0 52 b5 b1 5c 76 e8 2f 2b ca a6 a9 af 78 2f 1c 73 c7 71 a4 dc ac 7b d8 6b 3f 2a 82 4f 52 6d 73 85 95 7e 67 28 ef 67 2a 69 1b 2b 13 c3 2c e0 55 c1 21 56 82 37 1a 6e b6 bf 4d c1 ea 3f ae 19 3e 5e 34 73 5c 74 c8 b9 12 29 fe 25 80 2e e5 c7 28 36 a2 4a 9b df ef b0 c5 76 a8 14 9d 82 bc 48 36 2a c1 63 02 fd 0e fd 86 19 58 b5 44 9e 5d c1 99 86 65 97 7e f3 8a 9c 49 0b 54 08 01 69 94 33 b9 05 88 d1 7d 44 01 b9 6b 58 5c 6f be 12 59 14 74 74 62 e5 b2 77 28 f0 a7 33 9e 31 52 61 82 1a 75 a8 e4 3b 3c ea a9 0c c6 e5 03 2e ab a0 36 23 53 0d 37 3d 46 25 f1 79 26 15 8b 7b 34 af 0b 33 88 b2 ca aa 63 98 f1 25 16 Data Ascii: 24;rf=oU6vGI9H9CDcGVO"P\tR\v/+x/sq{k?ORms~g(gi+,U!V7nM?>^4s\t)%.(6JvH6*cXD]e~ITi3}DkX\oYttbw(31Rau;<.6#S7=F%y&{43c%
2024-05-15 22:37:14 UTC	3438	IN	Data Raw: 92 ec 0f 1f 28 b4 cc c3 c5 6e 26 19 a6 79 5d 98 b8 5a 47 13 85 8a 18 b7 0e 9d 0b 0b 6d 63 7b fb ee 30 53 73 97 e6 56 15 8e 34 64 95 b9 b4 93 4c ba 55 49 4d 81 d3 6d 81 db f2 b6 f8 d4 a2 92 25 29 b6 31 4b 0c 93 25 53 73 8a 05 0a c3 fe ae e7 ef 6c 36 89 b0 bc b7 29 cb fe 22 bb f7 e5 7d 4d 14 30 d3 49 34 0a 90 92 d5 2e 0e 95 8d 76 f2 f7 24 b6 c0 29 1d 70 89 b6 be 50 d5 76 55 f3 b9 a1 5c ca 61 47 cc 6a 31 23 08 4b 8d 2e e9 73 a6 e3 b6 dd 6d ef 8d 50 4f 8e c4 93 de 86 e6 cc 6a a4 89 60 69 81 84 35 c4 4c c4 85 24 01 7f a8 00 0b fa 0f 61 81 49 05 36 c0 b3 d9 d2 8d ac 24 45 36 d2 d1 a9 fe 61 df da f8 ec 69 c8 59 69 91 c2 b2 39 a2 8e 48 25 61 38 23 ca 9b 15 20 f5 bf e7 71 87 69 c5 ef a1 a1 f3 74 5a 78 47 81 a2 e3 0a 3c ef 36 a8 ce 32 fc bc 65 a6 32 52 b9 dd a5 ac Data Ascii: (n&y]ZGmc{0SsV4dLUIMm%)1K%Ssl6)"}M0I4.v$)pPvU\aGj1#K.smPOj`i5L$aI6$E6aiYi9H%a8# qitZxG<62e2R
2024-05-15 22:37:14 UTC	16384	IN	Data Raw: 3e a7 f2 18 11 4d 1c e8 fc 89 a3 ae 95 75 2c 90 d9 48 55 66 bb 79 0e ae a4 75 e9 b5 8f b1 18 f6 9c 57 83 c6 8c 9f 91 fa fa 21 1a 48 12 41 34 3a ca 89 94 10 2d d8 d8 f4 3b 1f cf 09 19 58 f2 54 88 c8 11 69 df 76 60 43 75 fe c6 2f da 24 b4 1e cc d5 10 12 c0 b8 03 4d f5 6c 09 e8 77 fa 1f 6f c3 08 95 0d 27 64 9d 34 74 90 98 86 86 f8 88 ed a8 bf cb f3 6d 7f c8 6d 6e 9d fa 95 d9 da 12 d5 f2 79 56 28 d5 14 26 9b 95 37 eb 7b f5 f5 27 f0 c1 a4 72 56 e9 11 b2 2e 93 b8 3b 1d 85 b6 3f 6e d8 75 f4 0b be c3 f2 aa f7 a4 78 b5 d4 3c 10 6b d6 44 02 ee ac 06 c4 5e dd 7a 1d fa 5f ef 29 46 ef 5b 2b 19 35 a6 cb 2c fc 5b 5e f0 a5 25 19 8a a2 ba 42 6f a0 16 68 81 3b 00 2d e6 36 ea 7b 62 14 af e8 74 56 ad 92 79 5f 08 c6 64 4a ca c5 15 95 ac 41 95 66 37 1d 77 52 2e 45 c7 5f 51 d3 Data Ascii: >Mu,HUfyuW!HA4:-;XTiv`Cu/$Mlwo'd4tmmnyV(&7{'rV.;?nux<kD^z_)F[+5,[^%Boh;-6{btVy_dJAf7wR.E_Q
2024-05-15 22:37:14 UTC	16384	IN	Data Raw: a9 b3 f1 5f 56 c2 38 02 21 d9 54 02 7a 77 f6 27 eb 81 c5 a5 b6 1e cf 47 99 c5 5b 50 51 47 29 e3 3e 75 2d b3 2f af db 1d 54 2d 58 fc f5 54 90 c2 1e 79 04 65 be 45 b6 ec 3a 03 e9 db 1c 93 f0 75 25 d8 81 34 51 27 32 47 8e 38 cd 85 f5 96 26 fd bc a0 e0 82 89 03 4d 65 d5 cb 01 41 bf 99 89 b0 c0 4c 34 2f e0 d1 d4 92 02 fb 01 8e b0 50 91 94 f3 0d 95 2e 3b 5b 7c 77 20 a5 7a 46 77 e2 77 88 f5 1e 1f e6 ad 95 65 94 c0 66 b1 11 cf 35 29 70 80 ef 60 2f f4 c6 8f 4f 8f e3 7c ed fc a3 e5 8a c4 a9 f6 4c f8 59 e2 42 71 c9 6c ba ab e1 e8 f3 85 5d 6b a2 e6 39 57 b9 0b 7b 82 3b 8b fb e3 b2 e3 78 f6 ba 23 1f 99 7d 4b be 71 91 38 30 bc 66 5b a3 10 ce 23 65 0a 6f fc a4 fc c3 be 33 a9 0e 90 99 28 96 35 6e 65 cc 96 b8 1a 77 23 05 48 14 32 90 9a 84 31 98 9d 90 0b 02 a3 71 8e b3 a8 Data Ascii: _V8!Tzw'G[PQG)>u-/T-XTyeE:u%4Q'2G8&MeAL4/P.;[\|w zFwwef5)p`/O\|LYBql]k9W{;x#}Kq80f[#eo3(5new#H21q
2024-05-15 22:37:14 UTC	7952	IN	Data Raw: 4f df 0e a5 5a 60 6a f6 87 e8 e1 46 84 8b 5e 41 b8 48 ee 97 fa 9f 4f ae 27 26 ee 86 8a 54 2e aa 8c dc 16 51 11 17 d2 0d ca b1 b6 fe df 7c 4d 4d f4 86 71 bd b1 74 59 4c 75 ad 1c 7f 11 1c 53 48 a3 45 8d d5 6f d0 35 b7 fb ef 85 9f a8 f8 76 e9 d2 17 82 f2 c0 27 a6 6a 59 da 22 75 84 62 19 00 bf 7e d8 d5 19 a9 47 92 27 43 02 24 47 ba bf 98 9d 95 bd 3b e3 bf 17 e4 0a a1 62 38 04 72 b3 12 b2 de c8 14 6d ee 49 fc 36 c4 aa 5c a9 75 e4 a2 e3 c5 b7 d8 0b d2 b0 7b 12 1e e2 f6 07 a6 2a b4 a8 9f e6 21 45 98 b3 0b 8f 7f 5c 70 16 ce 92 1b bd ce 15 58 5b 4b 48 e7 71 6b fa 13 eb 82 27 d4 b3 70 87 09 1e 22 5a fa a9 eb 23 a2 cb 68 53 99 3c cc ca 5f d9 55 49 b9 e9 f3 74 1e e4 81 8c 99 f3 fc 2a 8c 55 c9 9a fd 3e 0f 89 72 93 a8 af 24 0c ec ab 34 a6 9d 9b 97 a8 ac 5a fe 6d 17 36 Data Ascii: OZ`jF^AHO'&T.Q\|MMqtYLuSHEo5v'jY"ub~G'C$G;b8rmI6\u{!E\pX[KHqk'p"Z#hS<_UItU>r$4Zm6
2024-05-15 22:37:14 UTC	4072	IN	Data Raw: 8c da 5d 24 75 46 de ff 00 7c 28 69 09 e5 b2 91 ac 9b 8e e3 cc 31 c7 25 42 64 9a dd 89 3e ac c0 60 a4 06 36 b2 ab ec 40 20 76 3d f1 cd 0a 24 4b 2c 0f e4 93 a1 d8 1d ff 00 5c 76 a4 b6 0d ae 84 3d 4c ee 7c c8 6f dc a9 18 e5 14 81 6c 42 3f 30 e9 61 a4 fa 9e d8 6e ba 07 67 14 13 e6 59 6e 3a 75 b1 fb e0 d8 2a c7 79 92 05 3a 80 95 06 d6 be f8 e8 d7 40 a6 39 1c 88 40 b3 58 7a ef 71 86 a1 0e b3 85 62 24 8c 38 b7 cd 7b 1b 7a df 1d f9 04 6e 9e 4f e2 3a a1 3b 0b ef e9 d8 9c 2c d5 c4 29 84 46 cb 01 37 f3 4b e9 8c df 8b a1 fa 0f 56 44 46 d6 ea 08 5d ec 7a ee 3a 7e 38 85 36 e8 a7 5d 82 09 75 b9 08 36 1d cf a7 7c 5e ab b2 7d 95 a8 10 4b 4e ae c1 56 21 e4 02 fd 6e a7 7f c4 5b ed 85 6e 9d 2e ce 82 4e 36 cb 6e 4d 17 0c e6 79 3c 70 d6 d6 51 d2 d7 cd 52 e2 ba 6a b9 67 13 43 Data Ascii: ]$uF\|(i1%Bd>`6@ v=$K,\v=L\|olB?0angYn:u*y:@9@Xzqb$8{znO:;,)F7KVDF]z:~86]u6\|^}KNV!n[n.N6nMy<pQRjgC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50138	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:14 UTC	778	OUT	GET /public/javascript/user_reviews_community.js?v=st0tzXwxiGks&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:15 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:15 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15168569 Expires: Thu, 07 Nov 2024 12:06:44 GMT
2024-05-15 22:37:15 UTC	2829	IN	Data Raw: 62 30 36 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 71 75 65 73 74 43 75 72 72 65 6e 74 55 73 65 72 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 56 6f 74 65 73 28 20 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 49 44 73 20 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 21 67 5f 73 74 65 61 6d 49 44 20 29 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 0d 0a 09 24 4a 2e 70 6f 73 74 28 20 27 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 75 73 65 72 72 65 76 69 65 77 73 2f 61 6a 61 78 67 65 74 76 6f 74 65 73 2f 27 2c 20 7b 0d 0a 09 09 09 27 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 69 64 73 27 20 3a 20 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 49 44 73 0d 0a 09 09 7d 0d 0a 09 29 2e 64 6f 6e 65 28 20 66 75 6e 63 74 69 6f 6e 28 20 72 65 73 70 6f 6e 73 65 20 29 20 7b 0d Data Ascii: b06function RequestCurrentUserRecommendationVotes( recommendationIDs ){if ( !g_steamID )return;$J.post( 'https://gtm.you1.cn/userreviews/ajaxgetvotes/', {'recommendationids' : recommendationIDs}).done( function( response ) {
2024-05-15 22:37:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50139	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:15 UTC	769	OUT	GET /public/javascript/communityhome.js?v=8-RwlLlPLHOa&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:15 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:15 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=13735787 Expires: Mon, 21 Oct 2024 22:07:02 GMT
2024-05-15 22:37:15 UTC	1061	IN	Data Raw: 34 31 65 0d 0a 0d 0a 76 61 72 20 62 53 65 61 72 63 68 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 67 53 65 61 72 63 68 46 69 65 6c 64 5f 41 70 70 73 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 67 53 65 61 72 63 68 46 69 65 6c 64 5f 50 6c 61 79 65 72 73 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 67 47 61 6d 65 53 65 6c 65 63 74 6f 72 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 74 69 6d 65 6f 75 74 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 49 6e 69 74 47 61 6d 65 48 75 62 53 65 61 72 63 68 28 29 0d 0a 7b 0d 0a 09 67 47 61 6d 65 53 65 6c 65 63 74 6f 72 20 3d 20 6e 65 77 20 43 47 61 6d 65 53 65 6c 65 63 74 6f 72 28 20 24 28 27 61 70 70 48 75 62 73 53 65 61 72 63 68 54 65 78 74 27 29 2c 20 24 28 27 67 61 6d 65 5f 73 65 6c 65 63 74 5f Data Ascii: 41evar bSearching = false;var gSearchField_Apps = null;var gSearchField_Players = null;var gGameSelector = null;var timeout = null;function InitGameHubSearch(){gGameSelector = new CGameSelector( $('appHubsSearchText'), $('game_select_
2024-05-15 22:37:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50140	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:15 UTC	787	OUT	GET /public/javascript/applications/community/manifest.js?v=6MtRkzKwK42K&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:16 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:15 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15545409 Expires: Mon, 11 Nov 2024 20:47:24 GMT
2024-05-15 22:37:16 UTC	15805	IN	Data Raw: 33 64 62 35 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 76 61 72 20 43 4c 53 54 41 4d 50 3d 22 38 38 39 36 31 32 32 22 3b 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 65 2c 6e 2c 63 2c 69 2c 6f 3d 7b 7d 2c 64 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 76 61 72 20 65 Data Ascii: 3db5/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/var CLSTAMP="8896122";(()=>{"use strict";var a,e,n,c,i,o={},d={};function f(a){var e
2024-05-15 22:37:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50141	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:15 UTC	798	OUT	GET /public/javascript/applications/community/libraries~b28b7af69.js?v=hOyTweQkD3Cx&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:16 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:15 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15467176 Expires: Sun, 10 Nov 2024 23:03:31 GMT
2024-05-15 22:37:16 UTC	16132	IN	Data Raw: 37 65 65 31 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 32 35 30 5d 2c 7b 35 38 36 32 37 3a 65 3d 3e 7b Data Ascii: 7ee1/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[3250],{58627:e=>{
2024-05-15 22:37:16 UTC	16357	IN	Data Raw: 68 28 69 28 74 29 2b 22 3d 22 2b 69 28 65 29 29 7d 29 29 29 7d 29 29 2c 6f 3d 61 2e 6a 6f 69 6e 28 22 26 22 29 7d 69 66 28 6f 29 7b 76 61 72 20 73 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 73 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 30 2c 73 29 29 2c 65 2b 3d 28 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3f 22 3f 22 3a 22 26 22 29 2b 6f 7d 72 65 74 75 72 6e 20 65 7d 7d 2c 31 38 30 38 38 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 65 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 2b 24 2f 2c 22 22 29 2b 22 2f 22 2b 74 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 2b 2f 2c 22 22 29 3a 65 7d 7d 2c 35 37 36 37 35 3a 28 65 2c 74 2c 72 29 Data Ascii: h(i(t)+"="+i(e))})))})),o=a.join("&")}if(o){var s=e.indexOf("#");-1!==s&&(e=e.slice(0,s)),e+=(-1===e.indexOf("?")?"?":"&")+o}return e}},18088:e=>{"use strict";e.exports=function(e,t){return t?e.replace(/\/+$/,"")+"/"+t.replace(/^\/+/,""):e}},57675:(e,t,r)
2024-05-15 22:37:16 UTC	16368	IN	Data Raw: 33 66 65 38 0d 0a 45 5f 4d 41 50 3d 21 31 2c 24 6a 73 63 6f 6d 70 2e 41 53 53 55 4d 45 5f 4e 4f 5f 4e 41 54 49 56 45 5f 53 45 54 3d 21 31 2c 24 6a 73 63 6f 6d 70 2e 53 49 4d 50 4c 45 5f 46 52 4f 55 4e 44 5f 50 4f 4c 59 46 49 4c 4c 3d 21 31 2c 24 6a 73 63 6f 6d 70 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3d 24 6a 73 63 6f 6d 70 2e 41 53 53 55 4d 45 5f 45 53 35 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 21 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 26 26 65 21 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 28 65 5b 74 5d 3d 72 2e 76 Data Ascii: 3fe8E_MAP=!1,$jscomp.ASSUME_NO_NATIVE_SET=!1,$jscomp.SIMPLE_FROUND_POLYFILL=!1,$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(e,t,r){e!=Array.prototype&&e!=Object.prototype&&(e[t]=r.v
2024-05-15 22:37:16 UTC	16	IN	Data Raw: 33 66 66 30 0d 0a 72 28 76 61 72 20 72 20 69 6e Data Ascii: 3ff0r(var r in
2024-05-15 22:37:16 UTC	16384	IN	Data Raw: 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 4f 42 4a 45 43 54 5f 50 52 4f 54 4f 54 59 50 45 5f 46 49 45 4c 44 53 5f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 72 3d 67 6f 6f 67 2e 64 65 66 69 6e 65 43 6c 61 73 73 2e 4f 42 4a 45 43 54 5f 50 52 4f 54 4f 54 59 50 45 5f 46 49 45 4c 44 53 5f 5b 6e 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 7d 2c 67 6f 6f 67 2e 74 61 67 55 6e 73 65 61 6c 61 62 6c 65 43 6c 61 73 73 3d 66 75 6e Data Ascii: t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);for(var n=0;n<goog.defineClass.OBJECT_PROTOTYPE_FIELDS_.length;n++)r=goog.defineClass.OBJECT_PROTOTYPE_FIELDS_[n],Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},goog.tagUnsealableClass=fun
2024-05-15 22:37:16 UTC	16360	IN	Data Raw: 67 6f 6f 67 2e 64 65 62 75 67 4c 6f 61 64 65 72 5f 2e 6c 6f 61 64 43 6c 6f 73 75 72 65 44 65 70 73 28 29 2c 67 6f 6f 67 2e 62 6f 6f 74 73 74 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 67 6f 6f 67 2e 64 65 62 75 67 4c 6f 61 64 65 72 5f 2e 62 6f 6f 74 73 74 72 61 70 28 65 2c 74 29 7d 29 2c 67 6f 6f 67 2e 54 52 55 53 54 45 44 5f 54 59 50 45 53 5f 50 4f 4c 49 43 59 5f 4e 41 4d 45 3d 22 22 2c 67 6f 6f 67 2e 69 64 65 6e 74 69 74 79 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 67 6f 6f 67 2e 63 72 65 61 74 65 54 72 75 73 74 65 64 54 79 70 65 73 50 6f 6c 69 63 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 2c 72 3d 67 6f 6f 67 2e 67 6c 6f 62 61 6c 2e 74 72 75 73 74 65 64 54 79 70 65 73 7c 7c 67 6f 6f Data Ascii: goog.debugLoader_.loadClosureDeps(),goog.bootstrap=function(e,t){goog.debugLoader_.bootstrap(e,t)}),goog.TRUSTED_TYPES_POLICY_NAME="",goog.identity_=function(e){return e},goog.createTrustedTypesPolicy=function(e){var t=null,r=goog.global.trustedTypes\|\|goo
2024-05-15 22:37:16 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 67 2e 61 72 72 61 79 2e 69 73 45 6d 70 74 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 65 2e 6c 65 6e 67 74 68 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 66 6f 72 28 76 61 72 20 74 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 74 3b 74 2d 2d 29 64 65 6c 65 74 65 20 65 5b 74 5d 3b 65 2e 6c 65 6e 67 74 68 3d 30 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 69 6e 73 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 67 6f 6f 67 2e 61 72 72 61 79 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 74 29 7c 7c 65 2e 70 75 73 68 28 74 29 7d 2c 67 6f 6f 67 2e 61 72 72 61 79 2e 69 6e 73 65 72 74 41 74 3d 66 75 6e 63 74 69 6f 6e Data Ascii: 7fe0g.array.isEmpty=function(e){return 0==e.length},goog.array.clear=function(e){if(!Array.isArray(e))for(var t=e.length-1;0<=t;t--)delete e[t];e.length=0},goog.array.insert=function(e,t){goog.array.contains(e,t)\|\|e.push(t)},goog.array.insertAt=function
2024-05-15 22:37:16 UTC	16360	IN	Data Raw: 52 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 48 54 4d 4c 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 48 54 4d 4c 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 49 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 49 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 49 46 52 41 4d 45 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 49 46 52 41 4d 45 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 49 4d 47 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 49 4d 47 22 29 2c 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 2e 49 4e 50 55 54 3d 6e 65 77 20 67 6f 6f 67 2e 64 6f 6d 2e 54 61 67 4e 61 6d 65 28 22 49 4e 50 55 54 22 Data Ascii: R"),goog.dom.TagName.HTML=new goog.dom.TagName("HTML"),goog.dom.TagName.I=new goog.dom.TagName("I"),goog.dom.TagName.IFRAME=new goog.dom.TagName("IFRAME"),goog.dom.TagName.IMG=new goog.dom.TagName("IMG"),goog.dom.TagName.INPUT=new goog.dom.TagName("INPUT"
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: 37 66 64 39 0d 0a 65 74 75 72 6e 20 30 3d 3d 6e 3f 69 3f 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 44 69 72 2e 4c 54 52 3a 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 44 69 72 2e 4e 45 55 54 52 41 4c 3a 72 2f 6e 3e 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 72 74 6c 44 65 74 65 63 74 69 6f 6e 54 68 72 65 73 68 6f 6c 64 5f 3f 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 44 69 72 2e 52 54 4c 3a 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 44 69 72 2e 4c 54 52 7d 2c 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 64 65 74 65 63 74 52 74 6c 44 69 72 65 63 74 69 6f 6e 61 6c 69 74 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 67 6f 6f 67 2e 69 31 38 6e 2e 62 69 64 69 2e 65 73 74 69 6d 61 74 65 44 69 72 65 63 74 69 6f 6e 28 65 2c 74 29 Data Ascii: 7fd9eturn 0==n?i?goog.i18n.bidi.Dir.LTR:goog.i18n.bidi.Dir.NEUTRAL:r/n>goog.i18n.bidi.rtlDetectionThreshold_?goog.i18n.bidi.Dir.RTL:goog.i18n.bidi.Dir.LTR},goog.i18n.bidi.detectRtlDirectionality=function(e,t){return goog.i18n.bidi.estimateDirection(e,t)
2024-05-15 22:37:17 UTC	16353	IN	Data Raw: 29 29 2c 22 74 79 70 65 5f 65 72 72 6f 72 3a 53 61 66 65 53 74 79 6c 65 22 29 7d 2c 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 53 74 79 6c 65 2e 63 72 65 61 74 65 53 61 66 65 53 74 79 6c 65 53 65 63 75 72 69 74 79 50 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 65 73 73 4f 72 45 6c 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 53 74 79 6c 65 29 2e 69 6e 69 74 53 65 63 75 72 69 74 79 50 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 65 73 73 4f 72 45 6c 73 65 5f 28 65 29 7d 2c 67 6f 6f 67 2e 68 74 6d 6c 2e 53 61 66 65 53 74 79 6c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 53 65 63 75 72 69 74 79 50 72 69 76 61 74 65 44 6f 4e 6f 74 41 63 63 65 73 73 4f 72 45 6c 73 65 5f 3d 66 75 6e 63 74 Data Ascii: )),"type_error:SafeStyle")},goog.html.SafeStyle.createSafeStyleSecurityPrivateDoNotAccessOrElse=function(e){return(new goog.html.SafeStyle).initSecurityPrivateDoNotAccessOrElse_(e)},goog.html.SafeStyle.prototype.initSecurityPrivateDoNotAccessOrElse_=funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50142	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:15 UTC	783	OUT	GET /public/javascript/applications/community/main.js?v=soQOTmUzl-9y&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:16 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:15 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15545103 Expires: Mon, 11 Nov 2024 20:42:18 GMT
2024-05-15 22:37:16 UTC	16132	IN	Data Raw: 37 65 65 31 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 37 36 34 33 30 3a 28 65 2c 74 2c Data Ascii: 7ee1/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[179],{76430:(e,t,
2024-05-15 22:37:16 UTC	16357	IN	Data Raw: 44 68 32 71 31 6e 58 44 61 48 62 57 4f 4c 43 49 4c 48 22 2c 53 6c 69 64 65 72 48 61 6e 64 6c 65 43 6f 6e 74 61 69 6e 65 72 3a 22 5f 31 70 51 5a 69 6b 6c 44 6c 32 78 58 69 4e 73 5a 36 55 76 79 5f 61 22 2c 56 65 72 74 69 63 61 6c 4c 69 6e 65 53 6c 69 64 65 72 48 61 6e 64 6c 65 43 6f 6e 74 61 69 6e 65 72 3a 22 5f 31 6c 51 7a 32 6a 61 70 58 4c 52 48 6c 64 74 52 37 2d 5a 44 5a 6c 22 2c 50 61 72 65 6e 53 6c 69 64 65 72 48 61 6e 64 6c 65 43 6f 6e 74 61 69 6e 65 72 3a 22 5f 33 75 62 61 4d 75 49 4e 62 33 42 32 53 6f 6d 44 36 68 38 66 65 36 22 2c 53 6c 69 64 65 72 48 61 6e 64 6c 65 3a 22 5f 32 79 56 4b 6a 6c 41 56 57 33 74 78 6b 47 6d 56 70 58 39 47 38 69 22 2c 53 6c 69 64 65 72 48 61 6e 64 6c 65 46 6f 63 75 73 50 6f 70 3a 22 5f 32 6c 4e 78 4c 36 55 36 64 49 69 32 Data Ascii: Dh2q1nXDaHbWOLCILH",SliderHandleContainer:"_1pQZiklDl2xXiNsZ6Uvy_a",VerticalLineSliderHandleContainer:"_1lQz2japXLRHldtR7-ZDZl",ParenSliderHandleContainer:"_3ubaMuINb3B2SomD6h8fe6",SliderHandle:"_2yVKjlAVW3txkGmVpX9G8i",SliderHandleFocusPop:"_2lNxL6U6dIi2
2024-05-15 22:37:16 UTC	16369	IN	Data Raw: 33 66 65 39 0d 0a 6e 43 6c 6f 73 65 48 61 6e 64 6c 65 72 28 7b 63 6f 6e 6e 65 63 74 69 6f 6e 3a 74 68 69 73 2c 62 45 72 72 6f 72 3a 21 30 2c 62 49 73 45 78 70 65 63 74 65 64 54 6f 52 65 63 6f 6e 6e 65 63 74 3a 21 31 7d 29 3b 74 68 69 73 2e 4c 6f 67 2e 49 6e 66 6f 28 22 72 65 63 6f 6e 6e 65 63 74 20 73 75 63 63 65 73 73 66 75 6c 22 29 2c 74 68 69 73 2e 6d 5f 66 6e 4f 6e 52 65 63 6f 6e 6e 65 63 74 46 69 6e 69 73 68 48 61 6e 64 6c 65 72 28 7b 63 6f 6e 6e 65 63 74 69 6f 6e 3a 74 68 69 73 2c 65 52 65 73 75 6c 74 3a 31 7d 29 7d 29 29 7d 43 6f 6e 6e 65 63 74 54 6f 53 6f 63 6b 65 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 69 66 28 6e 75 6c 6c 21 Data Ascii: 3fe9nCloseHandler({connection:this,bError:!0,bIsExpectedToReconnect:!1});this.Log.Info("reconnect successful"),this.m_fnOnReconnectFinishHandler({connection:this,eResult:1})}))}ConnectToSocket(e,t){return(0,o.mG)(this,void 0,void 0,(function*(){if(null!
2024-05-15 22:37:16 UTC	15	IN	Data Raw: 33 66 66 30 0d 0a 7d 42 53 68 6f 75 6c 64 52 Data Ascii: 3ff0}BShouldR
2024-05-15 22:37:16 UTC	16384	IN	Data Raw: 65 6e 64 65 72 4d 6f 75 73 65 4f 76 65 72 6c 61 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 4d 65 6e 75 26 26 21 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 4d 65 6e 75 2e 6f 70 74 69 6f 6e 73 2e 62 44 69 73 61 62 6c 65 4d 6f 75 73 65 4f 76 65 72 6c 61 79 7d 53 68 6f 77 4d 65 6e 75 28 65 29 7b 69 66 28 65 2e 42 49 73 53 75 62 4d 65 6e 75 28 29 29 74 68 69 73 2e 6d 5f 72 67 41 63 74 69 76 65 53 75 62 6d 65 6e 75 73 2e 70 75 73 68 28 65 29 3b 65 6c 73 65 7b 69 66 28 65 3d 3d 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 4d 65 6e 75 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 4d 65 6e 75 26 26 28 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 4d 65 6e 75 2e 6f 70 74 69 6f 6e 73 2e 62 52 65 74 61 69 6e 4f 6e 48 69 64 65 26 26 74 68 Data Ascii: enderMouseOverlay(){return this.m_ActiveMenu&&!this.m_ActiveMenu.options.bDisableMouseOverlay}ShowMenu(e){if(e.BIsSubMenu())this.m_rgActiveSubmenus.push(e);else{if(e==this.m_ActiveMenu)return;this.m_ActiveMenu&&(this.m_ActiveMenu.options.bRetainOnHide&&th
2024-05-15 22:37:16 UTC	16361	IN	Data Raw: 6d 5f 6d 61 70 50 6f 70 75 70 73 2e 76 61 6c 75 65 73 28 29 7d 47 65 74 50 6f 70 75 70 46 6f 72 57 69 6e 64 6f 77 28 65 29 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 74 68 69 73 2e 6d 5f 6d 61 70 50 6f 70 75 70 73 2e 76 61 6c 75 65 73 28 29 29 69 66 28 74 2e 77 69 6e 64 6f 77 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 7d 43 6c 6f 73 65 50 6f 70 75 70 73 4f 77 6e 65 64 42 79 42 72 6f 77 73 65 72 28 65 29 7b 74 68 69 73 2e 6d 5f 6d 61 70 50 6f 70 75 70 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 2e 62 72 6f 77 73 65 72 5f 69 6e 66 6f 26 26 74 2e 62 72 6f 77 73 65 72 5f 69 6e 66 6f 2e 6d 5f 6e 42 72 6f 77 73 65 72 49 44 3d 3d 65 2e 6d 5f 6e 42 72 6f 77 73 65 72 49 44 26 26 74 2e 62 72 6f 77 73 65 72 5f 69 6e 66 6f 2e 6d 5f 75 6e 50 49 44 3d 3d 65 2e 6d Data Ascii: m_mapPopups.values()}GetPopupForWindow(e){for(const t of this.m_mapPopups.values())if(t.window===e)return t}ClosePopupsOwnedByBrowser(e){this.m_mapPopups.forEach((t=>{t.browser_info&&t.browser_info.m_nBrowserID==e.m_nBrowserID&&t.browser_info.m_unPID==e.m
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 29 3b 6c 65 74 20 53 3d 73 2c 4d 3d 70 7c 7c 7b 7d 3b 61 26 26 63 2e 63 75 72 72 65 6e 74 26 26 28 61 2e 42 57 61 6e 74 73 46 6f 63 75 73 52 69 6e 67 28 29 7c 7c 28 53 3d 21 31 29 29 2c 61 21 3d 64 26 26 28 6d 28 61 29 2c 77 2e 63 75 72 72 65 6e 74 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2c 45 28 29 2c 66 26 26 43 28 21 31 29 29 2c 6f 2e 75 73 65 45 66 66 65 63 74 28 28 28 29 3d 3e 7b 69 66 28 21 53 7c 7c 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 77 2e 63 75 72 72 65 6e 74 3e 35 30 30 29 72 65 74 75 72 6e 3b 6c 65 74 20 65 3b 63 6f 6e 73 74 20 74 3d 28 29 3d 3e 7b 65 3d 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 28 29 3d 3e 7b 45 28 29 3f 43 28 21 30 29 3a 70 65 72 66 6f 72 6d 61 6e 63 Data Ascii: 7fe0);let S=s,M=p\|\|{};a&&c.current&&(a.BWantsFocusRing()\|\|(S=!1)),a!=d&&(m(a),w.current=performance.now(),E(),f&&C(!1)),o.useEffect((()=>{if(!S\|\|performance.now()-w.current>500)return;let e;const t=()=>{e=requestAnimationFrame((()=>{E()?C(!0):performanc
2024-05-15 22:37:17 UTC	16360	IN	Data Raw: 75 72 6e 20 6e 7d 7d 44 65 73 74 72 6f 79 28 65 29 7b 65 3d 3d 74 68 69 73 2e 6d 5f 72 6f 6f 74 57 69 6e 64 6f 77 3f 28 70 28 60 24 7b 74 68 69 73 2e 4c 6f 67 4e 61 6d 65 28 65 29 7d 20 44 65 73 74 72 6f 79 69 6e 67 20 63 6f 6e 74 65 78 74 20 66 6f 72 20 77 69 6e 64 6f 77 60 29 2c 74 68 69 73 2e 6d 5f 62 4d 6f 75 6e 74 65 64 3d 21 31 2c 74 68 69 73 2e 6d 5f 73 63 68 44 65 66 65 72 72 65 64 41 63 74 69 76 61 74 65 2e 43 61 6e 63 65 6c 28 29 2c 74 68 69 73 2e 53 65 74 41 63 74 69 76 65 28 21 31 2c 65 29 29 3a 70 28 60 24 7b 74 68 69 73 2e 4c 6f 67 4e 61 6d 65 28 65 29 7d 20 43 68 69 6c 64 20 77 69 6e 64 6f 77 20 64 65 73 74 72 6f 79 65 64 60 29 7d 53 65 74 41 63 74 69 76 65 28 65 2c 74 2c 6e 3d 76 6f 69 64 20 30 29 7b 74 68 69 73 2e 6d 5f 63 6f 6e 74 72 6f Data Ascii: urn n}}Destroy(e){e==this.m_rootWindow?(p(`${this.LogName(e)} Destroying context for window`),this.m_bMounted=!1,this.m_schDeferredActivate.Cancel(),this.SetActive(!1,e)):p(`${this.LogName(e)} Child window destroyed`)}SetActive(e,t,n=void 0){this.m_contro
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: 37 66 64 30 0d 0a 21 31 2c 60 49 6e 76 61 6c 69 64 20 61 78 69 73 20 24 7b 65 7d 60 29 2c 6f 3d 30 29 2c 6f 3c 30 3f 30 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 20 6f 3d 74 5b 65 5d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 78 22 3d 3d 65 3f 7b 6d 69 6e 3a 74 2e 78 2c 6d 61 78 3a 74 2e 78 2b 74 2e 77 69 64 74 68 7d 3a 7b 6d 69 6e 3a 74 2e 79 2c 6d 61 78 3a 74 2e 79 2b 74 2e 68 65 69 67 68 74 7d 7d 28 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6f 3c 69 2e 6d 69 6e 3f 69 2e 6d 69 6e 2d 6f 3a 6f 3e 69 2e 6d 61 78 3f 6f 2d 69 2e 6d 61 78 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 7b 78 3a 65 2e 78 2c 79 3a 65 2e 79 7d 7d 63 6f 6e 73 74 20 76 3d 7b 4f 6e 42 6c 75 72 3a 28 29 Data Ascii: 7fd0!1,`Invalid axis ${e}`),o=0),o<0?0:o}function p(e,t,n){const o=t[e],i=function(e,t){return"x"==e?{min:t.x,max:t.x+t.width}:{min:t.y,max:t.y+t.height}}(e,n);return o<i.min?i.min-o:o>i.max?o-i.max:0}function g(e){return{x:e.x,y:e.y}}const v={OnBlur:()
2024-05-15 22:37:17 UTC	16344	IN	Data Raw: 2e 69 6e 64 65 78 4f 66 28 65 29 3b 28 30 2c 73 2e 58 29 28 2d 31 21 3d 3d 74 2c 22 43 68 69 6c 64 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 74 6f 20 72 65 6d 6f 76 65 22 29 2c 2d 31 21 3d 3d 74 26 26 28 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 43 68 69 6c 64 3d 3d 65 26 26 28 74 68 69 73 2e 6d 5f 41 63 74 69 76 65 43 68 69 6c 64 3d 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 6d 5f 72 67 43 68 69 6c 64 72 65 6e 2e 73 70 6c 69 63 65 28 74 2c 31 29 29 7d 55 6e 72 65 67 69 73 74 65 72 44 4f 4d 45 76 65 6e 74 73 28 29 7b 74 68 69 73 2e 6d 5f 72 67 4e 61 76 69 67 61 74 69 6f 6e 48 61 6e 64 6c 65 72 73 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 65 28 29 29 29 2c 74 68 69 73 2e 6d 5f 72 67 4e 61 76 69 67 61 74 69 6f 6e 48 61 6e 64 6c 65 72 73 3d 5b 5d 2c 74 68 69 73 2e Data Ascii: .indexOf(e);(0,s.X)(-1!==t,"Child was not found to remove"),-1!==t&&(this.m_ActiveChild==e&&(this.m_ActiveChild=void 0),this.m_rgChildren.splice(t,1))}UnregisterDOMEvents(){this.m_rgNavigationHandlers.forEach((e=>e())),this.m_rgNavigationHandlers=[],this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50143	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:15 UTC	815	OUT	GET /public/javascript/applications/community/localization/loyaltyrewards_manifest.js?v=H8DiZuDDXyS_&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:16 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:15 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=15382401 Expires: Sat, 09 Nov 2024 23:30:36 GMT
2024-05-15 22:37:16 UTC	464	IN	Data Raw: 31 63 39 0d 0a 28 74 79 70 65 6f 66 20 4c 6f 63 61 6c 69 7a 61 74 69 6f 6e 4d 61 6e 69 66 65 73 74 52 65 61 64 79 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 4c 6f 63 61 6c 69 7a 61 74 69 6f 6e 4d 61 6e 69 66 65 73 74 52 65 61 64 79 20 3a 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 69 66 20 28 20 21 77 69 6e 64 6f 77 2e 67 5f 72 67 50 65 6e 64 69 6e 67 4c 6f 63 4d 61 6e 69 66 65 73 74 73 20 29 20 77 69 6e 64 6f 77 2e 67 5f 72 67 50 65 6e 64 69 6e 67 4c 6f 63 4d 61 6e 69 66 65 73 74 73 20 3d 20 5b 5d 3b 20 77 69 6e 64 6f 77 2e 67 5f 72 67 50 65 6e 64 69 6e 67 4c 6f 63 4d 61 6e 69 66 65 73 74 73 2e 70 75 73 68 28 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 20 7d 29 29 28 20 27 6c 6f 79 61 6c 74 79 72 65 77 61 72 64 73 27 2c 20 27 6d 61 6e 69 66 65 73 74 Data Ascii: 1c9(typeof LocalizationManifestReady != 'undefined' ? LocalizationManifestReady : (function(){ if ( !window.g_rgPendingLocManifests ) window.g_rgPendingLocManifests = []; window.g_rgPendingLocManifests.push( arguments ); }))( 'loyaltyrewards', 'manifest
2024-05-15 22:37:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50144	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:16 UTC	788	OUT	GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:17 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:16 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=14824394 Expires: Sun, 03 Nov 2024 12:30:30 GMT
2024-05-15 22:37:17 UTC	16113	IN	Data Raw: 33 65 65 39 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2f 20 62 75 69 6c 64 20 6f 75 72 20 6d 65 6e 75 20 6f 6e 20 69 6e 69 74 0d 0a 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 09 76 61 72 20 6d 71 51 75 65 72 79 4d 65 6e 75 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 22 29 20 3a 20 7b 6d 61 74 63 68 65 73 3a 20 66 61 6c 73 65 7d 3b 0d 0a 09 76 61 72 20 6d 71 4d 6f 62 69 6c 65 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 22 Data Ascii: 3ee9"use strict";// build our menu on initjQuery( function($) {var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)"
2024-05-15 22:37:17 UTC	8560	IN	Data Raw: 32 31 36 38 0d 0a 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 63 7a 65 63 68 22 7d 20 29 2e 74 65 78 74 28 20 27 c4 8c 65 c5 a1 74 69 6e 61 20 28 43 7a 65 63 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 64 61 6e 69 73 68 22 7d 20 29 2e 74 65 78 74 28 20 27 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 67 65 72 6d 61 6e 22 7d 20 29 2e 74 65 78 74 28 20 27 44 65 75 74 73 63 68 20 28 47 65 72 Data Ascii: 2168<option/>', {value: "czech"} ).text( 'etina (Czech)' ));$SelectBox.append($J('<option/>', {value: "danish"} ).text( 'Dansk (Danish)' ));$SelectBox.append($J('<option/>', {value: "german"} ).text( 'Deutsch (Ger
2024-05-15 22:37:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50145	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:16 UTC	807	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:17 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:17 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:17 UTC	1853	IN	Data Raw: 37 33 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 Data Ascii: 736PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56
2024-05-15 22:37:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50146	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:16 UTC	811	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:17 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:17 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:17 UTC	3784	IN	Data Raw: 65 63 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 Data Ascii: ec1PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@
2024-05-15 22:37:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50148	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:17 UTC	632	OUT	GET /steam/apps/1145350/capsule_616x353.jpg?t=1715727000 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:17 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 110095 Last-Modified: Wed, 01 May 2024 05:08:01 GMT ETag: "6631ce31-1ae0f" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=519159 Expires: Tue, 21 May 2024 22:49:56 GMT Date: Wed, 15 May 2024 22:37:17 GMT Connection: close
2024-05-15 22:37:17 UTC	16041	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 00 09 0a ff c4 00 60 10 00 01 03 02 04 03 05 04 07 04 06 04 09 06 0c 07 01 02 03 04 05 11 00 06 12 21 07 31 41 08 13 22 51 61 14 32 71 81 09 15 23 Data Ascii: JFIFCCah`!1A"Qa2q#
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: 33 01 54 32 bc b5 c4 4c 4c 91 de 36 3c 8a e5 1a 97 13 24 b3 ec f4 4a 05 3b 2d 37 6f 76 9f 4f 6e 39 3e a5 41 20 93 ea 4d f1 95 d8 cc 40 ec e6 cb dc 23 f7 54 d6 c5 d7 c4 9f e3 55 2e ef 29 5b b5 ba 83 fe fc e7 d5 fe f9 c6 77 56 aa f1 0e 79 3e 25 65 22 75 49 56 eb 8e 1b ad c5 ac ff 00 79 44 e2 88 0a 00 06 81 02 c3 cb 05 15 ec 45 11 ac b2 97 10 f3 ae bc d4 58 ac 36 a7 a4 4a 90 b0 86 98 6d 20 95 2d 6a 3b 25 20 02 49 3e 58 b2 95 37 56 76 46 6b ee e7 92 66 b5 d5 1c 18 c1 2e 3a 05 5d e5 4e d0 f9 1b 30 e5 6a be 6d 99 9b a8 79 7b 26 22 6b b4 da 5a aa 2f 86 e5 4d 2c 90 1d 94 a4 1f 19 0b 27 ec db 48 24 24 6a 57 89 5a 51 d5 7e 0d 86 98 ea c8 ef 26 3d f2 1c 35 ba f4 f8 9f c3 b8 aa 4e a7 87 a3 4c be ac 4b 88 d0 4e 83 ee 78 d8 69 26 9c e2 e7 6f 4e 12 1c 91 9c 28 19 69 15 Data Ascii: 3T2LL6<$J;-7ovOn9>A M@#TU.)[wVy>%e"uIVyDEX6Jm -j;% I>X7VvFkf.:]N0jmy{&"kZ/M,'H$$jWZQ~&=5NLKNxi&oN(i
2024-05-15 22:37:17 UTC	2350	IN	Data Raw: 1e d4 db cd 2e ca 6d c4 2b 9a 56 9d 89 4a 86 ca 49 23 16 16 87 02 08 b1 55 12 08 3b 83 ee eb 59 42 ad 43 ed 87 c2 29 94 29 a1 96 38 89 40 40 9b 15 e4 a4 24 3c af 74 2c 0f ba 97 3f b3 5a 79 05 14 91 b6 9b 79 37 d3 3d 13 88 15 01 fe 1b ad dd af ca e4 6f 12 35 82 7c fb 99 ff 00 0e ae 2a 37 f9 6e b1 e5 fb 8d 47 1f 35 56 f6 5a 69 32 aa dc 42 c8 b2 92 a8 f2 b3 45 05 e8 70 d4 b4 94 9f 6b 6b 5f d9 1b f2 57 88 9b 1e ad 91 8d fd 24 72 0a 78 89 b3 1c 09 ee b8 3e 53 e5 2b a3 8d 63 da d6 57 6d f2 19 f0 30 41 f4 f5 0a 8b 5c 79 92 a1 86 e6 53 9d 0f 01 a5 d6 ec 12 02 86 c7 99 d8 83 7c 74 cb db 17 5e 99 94 dc 4d 82 8d c9 ca 13 1c 75 5d da 12 db 7d 3b c5 8b fe 58 c8 e7 35 6c 6e 1d e5 16 de 47 7c 6e e4 86 d3 e8 90 4f f2 c5 59 d6 81 86 74 5c a5 90 f2 c2 23 2d 2e 7b 4b a1 43 Data Ascii: .m+VJI#U;YBC))8@@$<t,?Zyy7=o5\|*7nG5VZi2BEpkk_W$rx>S+cWm0A\yS\|t^Mu]};X5lnG\|nOYt\#-.{KC
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: 6a 60 81 1c 47 43 34 09 31 74 fb 19 4a 06 ad 4b 04 a0 28 6e 49 4e ea 52 88 3c af 86 a2 d2 04 b8 09 e2 96 88 36 71 17 bd e7 5b f0 41 cc 0d 8c 83 c3 94 53 8a 74 57 f3 23 29 97 37 50 f1 c6 80 0d d9 67 d0 b8 af 1a 87 90 00 e3 33 49 c4 56 2f fd 2c b0 e6 77 3e 1a 77 e6 e0 9e 99 eb 6a 97 7e 96 d8 73 3c 7c 3e ca 99 52 ae e2 4a b7 00 8e 9c f1 a9 6f 1a 59 48 58 6e e8 dc dc ab 72 31 60 09 89 85 33 e1 4e 5b 6a bf c4 9c b0 c3 e5 29 89 1a 60 9d 24 ab 6b 32 c2 54 f2 cf e0 dd be 78 ab 10 4b 29 12 dd 74 1d e6 c3 d6 17 3b 17 54 d3 a0 f7 0d 7e f6 48 b2 86 5a ae e7 14 25 ea 65 12 a5 53 54 d9 0e 16 7d 8e 1b 8e 87 14 a5 15 29 09 52 41 04 8b ef be dd 71 ba 9d c4 a5 73 db 4f b0 e2 2d cf e8 ac 4a 2e 52 c9 99 22 50 91 9f a5 3f 5d 9a d2 af fd 15 cb 92 12 4d ff 00 66 54 c1 74 35 ea Data Ascii: j`GC41tJK(nINR<6q[AStW#)7Pg3IV/,w>wj~s<\|>RJoYHXnr1`3N[j)`$k2TxK)t;T~HZ%eST})RAqsO-J.R"P?]MfTt5
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: 13 25 53 78 7d 95 29 94 1a 5b 41 11 a1 46 6a 3f 78 47 8d dd 0d a5 01 6b 57 35 28 84 a6 e4 ef b6 11 ad 0d 10 17 53 03 83 66 0a 83 68 b3 5d cc 44 93 72 7c 4a cb 9f 49 f3 13 28 bc 0f a0 e7 ca 65 15 35 aa 9e 4c cc 30 ea ed 21 e4 ad c6 19 48 5d 96 b7 5a 04 05 a7 90 b9 f7 6f a8 10 45 f0 af 68 70 1e fd de 3e 4b 99 d2 d4 3a e7 d2 61 76 50 ec cc 27 fc c2 c2 fc 48 1d ff 00 0d e6 15 67 da 13 20 b5 f4 90 76 69 c9 7c 4c e1 ac 38 e9 cf 34 97 94 da e0 48 7c 21 49 07 c3 26 2a 96 76 d9 41 0b 4a 88 17 00 5a c1 58 70 4b 5d 9a 2e 2c 7d fc bb f8 ac cd 7d 57 3f af cb 2f 6f 62 a0 1b ee d7 01 37 d6 c2 66 1c 46 ad 58 fe 8b f4 79 76 8a ae 1a a2 1d c8 82 8a 88 71 9c 74 39 3a 73 0a f6 85 a5 25 49 6d a0 85 28 a9 4a 36 02 f6 1b ee 46 2d eb e6 72 b4 ab ce 30 44 b2 9b dd 1a f6 48 81 bf Data Ascii: %Sx})[AFj?xGkW5(Sfh]Dr\|JI(e5L0!H]ZoEhp>K:avP'Hg vi\|L84H\|!I&*vAJZXpK].,}}W?/ob7fFXyvqt9:s%Im(J6F-r0DH
2024-05-15 22:37:17 UTC	7952	IN	Data Raw: 23 7c 05 12 67 aa 8c 46 6e ea 75 29 00 5d 40 11 b9 c4 98 4c 04 ad 87 f4 79 f0 62 52 eb 35 1e 30 57 a0 bd 15 88 ad 2a 06 5a 6e 4b 45 05 e7 1c 45 9e 94 9b 81 74 a5 b5 68 4a 85 c1 2e 2b aa 31 5d 4a 9d 55 32 fd cd 87 d4 fd b9 af 9b fe 31 e9 46 d2 a2 3a 3a 93 a5 ce bb a3 60 34 1f 5e 22 cb 68 d8 7c 71 c4 5f 23 5e 09 03 96 df 0c 45 15 1b da e3 b3 90 e3 8e 55 19 92 80 84 35 c4 1c bf 19 5d d6 a5 69 4d 56 1a 35 29 51 d4 7a 38 9f 12 9b 51 f3 29 3b 28 14 f5 b0 b5 7a d1 d5 1f 88 69 cc 70 f0 db c9 7b 8f c3 1d 39 ff 00 0f ab f9 4a e7 f8 4e 36 ff 00 09 fb 71 fd a0 fc dc a6 55 da ab b4 a5 00 a4 db 99 50 eb 8d 20 87 5d 7d b4 b4 b6 c9 52 10 52 48 d7 74 93 b1 e4 6f e7 6c 45 10 80 f0 90 00 24 8d f0 54 41 22 c9 26 e2 dd 3d 3d 71 14 40 50 b1 55 ae 40 e9 d3 01 45 d4 a6 c4 90 2e Data Ascii: #\|gFnu)]@LybR50W*ZnKEEthJ.+1]JU21F::`4^"h\|q_#^EU5]iMV5)Qz8Q);(zip{9JN6qUP ]}RRHtolE$TA"&==q@PU@E.
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: b7 c3 0c 38 21 cd 72 44 72 83 e1 f1 ef bf 43 88 80 d1 12 85 05 10 08 18 02 e8 e8 bd ab 63 e1 06 fe bf cb 11 44 24 94 a7 6b 6c 2d b9 eb 83 a2 17 2b dd e6 c0 2a c4 6d bd be 38 8a 00 b9 7b 78 82 8e e0 5b 6b e2 28 10 96 e1 d3 7d f7 e5 88 80 09 4c 54 b8 a4 5c d9 07 a2 ad bf cb f9 9c 10 89 40 54 81 62 94 1b 0d ee a1 cd 5e 9f e7 89 28 a2 00 04 ea b6 e3 90 f9 e0 73 43 92 ea 51 ac 12 0e f7 b9 18 88 a1 a5 f0 95 00 4f 21 cf 11 11 c1 1e 76 4d cf 20 3a 9e 98 2a 04 15 11 63 61 b0 18 08 85 c2 07 96 af 3d bf 57 c4 d1 44 59 8c c2 89 05 b0 7e 58 2a 5d 27 7a 9b 1a 42 4a 56 ca 57 7e 46 dd 70 b0 9a 61 26 8f 4b 5c 45 5d b7 ae d2 4f ba 4e e3 e7 f2 c4 02 34 40 dd 2c 4a 9d 40 dc aa c7 af 4c 10 92 e9 54 49 8f 32 f3 4f a1 5a 96 da c2 82 79 5e db d8 7c 70 ca b2 24 16 f1 4b e4 d3 dc Data Ascii: 8!rDrCcD$kl-+m8{x[k(}LT\@Tb^(sCQO!vM :ca=WDY~X*]'zBJVW~Fpa&K\E]ON4@,J@LTI2OZy^\|p$K
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: b9 00 6a 41 b9 20 0a 55 a7 f8 75 2c 56 0c 46 0c d4 a9 d6 d0 6f 6c 5c b7 ea de fe 1e 4a b7 ab d0 f3 1f 0a 6a ce 50 2a 2e 2d 70 f4 95 35 0e 57 db c2 94 df 47 18 2a b9 09 ea 40 26 c7 62 06 18 b2 16 ba 38 d7 3c 48 bf 7e a3 91 4e b4 fc f5 c3 68 74 86 51 99 b8 2b 97 eb 95 26 c1 4f d6 51 a2 43 2a 52 b7 d2 54 1d 68 1f 2b 8d 44 63 40 7d 30 c0 1c db f1 fd 96 b6 f5 18 89 04 bd 8e ff 00 0b 8c 79 68 96 53 3b 55 47 c9 51 d0 32 d7 08 69 d4 d7 12 39 d1 1c 89 10 df ca e9 d2 71 47 5c e0 34 58 cf 45 b2 a1 fe 25 67 1e f4 d9 52 ed 99 c5 3a 9b 6e b5 47 c9 54 9a 10 70 1b 48 a8 d5 52 b5 a4 f9 94 b4 09 3e 76 be 14 d5 79 57 33 a3 70 94 f5 92 a9 9c e3 06 b5 c4 ea 9a 67 71 07 33 4c cc ef a1 57 66 9d 12 f1 a0 b2 7f ba d8 dc 9f 8e f8 ac de e5 74 a9 e5 a6 dc b4 da 00 55 e5 47 83 8c 71 Data Ascii: jA Uu,VFol\JjP.-p5WG@&b8<H~NhtQ+&OQC*RTh+Dc@}0yhS;UGQ2i9qG\4XE%gR:nGTpHR>vyW3pgq3LWftUGq
2024-05-15 22:37:17 UTC	1832	IN	Data Raw: be 20 0a 27 08 b4 b6 5a 3a 97 f6 ab f5 e5 87 01 04 e4 85 78 6d e4 36 b7 2c 3a 54 62 1c 28 23 49 37 16 37 1c c6 f8 69 4b 12 88 ac d7 4b 92 1d 79 76 76 5b 87 52 d4 39 15 75 51 f5 3c cf ae 14 94 1a d0 d1 03 45 19 90 e2 df 71 4b 5a 8a 96 79 93 8a 95 a1 76 9f 20 45 94 16 a1 74 11 a4 ed d0 f5 c4 06 0a 29 f8 14 3a 83 65 25 69 56 d7 07 9e 2c 0a 2b 63 8b f5 97 45 7f 86 dc 64 65 65 f6 eb ad 34 8a ca 4d 96 0d 4e 11 43 32 82 d2 36 fb 66 83 2f 58 f3 ef 95 e5 8d b8 92 5f 97 11 fd 5a f7 8b 1f 35 e7 3a 2d bd 50 af d1 87 ff 00 96 7b 3f e4 7c 96 f9 19 6f 80 57 c5 7a 81 4d cd 53 32 fe 57 5a 15 2e 86 e0 54 f9 08 69 c2 de a8 9a 74 b2 0a 93 6d 9c 5a d2 2d d4 36 7a 0c 52 44 d9 06 38 b0 3a a6 fa 78 fe cb 24 3e da b3 c6 60 ab a0 e5 fa 5d 2d 9a 73 8e f7 48 a7 c5 0c 23 50 55 92 ca Data Ascii: 'Z:xm6,:Tb(#I77iKKyvv[R9uQ<EqKZyv Et):e%iV,+cEdee4MNC26f/X_Z5:-P{?\|oWzMS2WZ.TitmZ-6zRD8:x$>`]-sH#PU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50149	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:17 UTC	655	OUT	GET /steam/apps/1145350/ss_c8d2b18451a2cc4d5b4fdd78ed84a5e64e051eac.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:17 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 87263 Last-Modified: Wed, 01 May 2024 05:14:57 GMT ETag: "6631cfd1-154df" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=350614 Expires: Mon, 20 May 2024 00:00:51 GMT Date: Wed, 15 May 2024 22:37:17 GMT Connection: close
2024-05-15 22:37:17 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 09 ff c4 00 51 10 00 02 01 02 04 03 05 05 05 05 06 04 03 06 04 07 01 02 03 04 11 00 05 12 21 06 31 41 13 22 51 61 71 07 14 32 81 91 23 42 52 a1 Data Ascii: JFIFCCQXQ!1A"Qaq2#BR
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: 68 ec 00 16 50 9d d1 b0 1b 0b 6d 87 96 59 26 79 92 53 6e 3d 4a 05 a1 b8 09 64 90 23 d4 d4 f6 9b 9e ce 35 0a 45 c1 dd ef 7c 23 55 ac 34 16 94 54 12 d5 e6 d4 94 54 92 88 4c a8 c4 ac 97 65 b8 b9 1e 62 f6 e9 f4 c4 38 4c e7 06 b4 b8 a2 ea f2 4c d2 07 09 25 0c b3 3d f4 8e c5 95 c7 ad ee 2c 3d 6d 89 b8 24 12 b0 8b b5 05 45 1b e5 5a a8 a7 55 72 cb 79 d4 0d a4 d5 b9 fc b6 f9 62 0c 84 c1 db fe 20 aa 79 f6 7d 51 43 1c b9 6f 67 f6 8a 3b 36 a8 26 fa d0 fc 24 0f 12 2d 7c 29 35 85 a9 8c 0e f8 92 8e 1d aa 58 33 00 24 02 d2 8d 3a 9b a1 e9 be 14 2b 24 16 15 b5 87 d7 ae 19 65 b4 34 ec 63 03 4a 19 24 63 65 45 3b 93 88 9c 20 1a 57 99 99 25 72 ad ff 00 93 6d 3f f7 fd 30 42 71 8e 14 5d 98 88 93 13 18 9b f7 79 1f 51 cb 12 82 20 da 26 9a 5f 79 46 0c 02 ba ec 40 e4 7c c6 05 25 e1 Data Ascii: hPmY&ySn=Jd#5E\|#U4TTLeb8LL%=,=m$EZUryb y}QCog;6&$-\|)5X3$:+$e4cJ$ceE; W%rm?0Bq]yQ &_yF@\|%
2024-05-15 22:37:17 UTC	1901	IN	Data Raw: cf 48 6b ff 00 f5 62 1e 56 37 38 6d 01 3d 92 88 de 27 5b 8b 06 0d e6 0a ff 00 db 11 62 dd c8 43 c3 4f da d6 45 a4 e9 e7 62 7c b1 59 29 5c ea 69 5f 36 a1 d4 a0 f8 ef 85 5e ad 4b 05 4c b4 b2 2c d0 48 f1 ce 86 e9 24 4c 55 90 f8 82 39 60 25 2d 0e 14 78 5d 03 86 bd b0 57 d1 95 8b 3a 8c 66 31 6c 0c f1 80 b2 8f 33 d1 bf 23 e7 81 4b 91 3f 87 31 d9 87 07 ed fe 17 56 c8 73 fc bf 89 a8 9c e5 95 b1 cc 36 2e 80 01 2c 67 a5 c1 dc 7e 98 a8 e1 79 d9 a2 92 07 7f b8 3f 65 06 69 c0 94 99 fd 5c 3a 22 9a 1c d2 56 58 a0 aa a1 63 1c e5 d8 85 00 30 e6 49 20 58 f8 e2 b9 1e d6 30 ba 4e 07 29 e2 d5 be 21 57 6d ec 72 12 1a bc d6 af d8 25 3e 45 2a e4 b1 66 84 56 55 52 66 87 35 a5 2b 24 35 10 cc 56 4a 73 bf 72 5d 24 31 26 ff 00 1a db 61 8e 31 8d ba f7 c8 c0 f2 30 2a ba 82 30 7d ba 2e Data Ascii: HkbV78m='[bCOEb\|Y)\i_6^KL,H$LU9`%-x]W:f1l3#K?1Vs6.,g~y?ei\:"VXc0I X0N)!Wmr%>EfVURf5+$5VJsr]$1&a100}.
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: b2 cc d9 b2 5a 8a 2c ae bd 03 d0 56 d3 55 4b 4d 0d 40 b7 c5 1d 9b 43 ec 6f c8 f3 bf 5c 73 26 8f 59 11 a7 d8 bc e5 a0 e0 f1 eb f7 5c 56 ca f7 d8 bd d4 68 f5 a2 9a d0 56 51 14 ab 79 21 cc e6 1e ee cb 03 44 b4 b2 2a 4b 6e eb 39 6a 73 a9 47 50 2c 4f 88 c2 42 ed a4 f9 c2 fd 89 1f a9 50 0f fe d1 f7 54 5a cc b7 39 cc 62 76 9b 88 4c 70 0d a4 6a 3a 0a 7a 75 5f e2 7d ed f5 18 d6 d9 9a d3 86 67 d4 92 b4 0d a3 1b 3f 35 25 47 1f 70 3d 3d 35 54 47 30 c8 32 a8 c2 08 6a 29 52 74 3a ae b6 6b 92 4b 38 6d fa 9e 76 3c b1 ed 20 94 49 18 7b 5b b7 d1 71 4e 8f 54 1f 44 39 dd 41 fe 60 2a 66 6f c7 c9 9d 52 d6 d2 e5 5f b6 33 38 8a 2a 52 66 30 2f b9 c1 10 20 a9 43 2b c6 49 2b 61 a7 b3 5b 91 7b ee 2e 79 32 68 1a c9 37 b2 83 7a dd 9f a7 f9 5d f8 1a 7f fe ea dd db 92 7d 6a f0 aa 9c 3d Data Ascii: Z,VUKM@Co\s&Y\VhVQy!DKn9jsGP,OBPTZ9bvLpj:zu_}g?5%Gp==5TG02j)Rt:kK8mv< I{[qNTD9A`foR_38*Rf0/ C+I+a[{.y2h7z]}j=
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: dd 5f c8 e2 ba d9 e1 7c 07 0f 01 e6 79 a9 96 3a c8 92 8a 96 52 58 c7 3f 79 99 6f 70 0a f3 f0 f0 f5 c7 bc f3 47 45 c1 0d 54 bc c6 8f 2a e0 9f 68 f9 7c 36 0c 13 b2 9e 14 a8 60 15 b5 5d 58 02 76 1b 82 41 26 c2 d8 ec 78 7c db 24 6c 8e cd 15 8b 56 d7 49 13 98 3a a9 f8 b6 3a 25 e2 5a f6 a6 8d e0 82 10 ab 76 3d d4 71 bc 96 23 61 63 60 7d 39 db 1e 86 59 23 92 42 5b c7 f2 d7 0e 26 4a d8 c6 ee 7f 94 ab d1 76 75 19 b8 cc 5e 78 ab 3b 55 ec a3 d0 8b 63 de dc 0b 6c c4 9b 73 fa e3 24 96 e7 07 83 76 b4 30 6d 61 61 15 4b a0 65 9c 25 95 e6 39 2f 14 e7 f9 ac 2b 55 4d c3 34 94 d3 d4 65 b9 54 68 6a ea 5a 59 74 47 13 4a 6e b1 00 15 d9 d8 07 2a a2 c0 5d 81 17 bd a2 30 2c e7 a8 1d 3d d6 36 39 cf 34 dc 03 c1 3f a7 5f f2 ad 71 cb 9f f1 64 b0 71 76 55 94 42 d5 71 25 0e 5d 91 f0 fd Data Ascii: _\|y:RX?yopGETh\|6`]XvA&x\|$lVI::%Zv=q#ac`}9Y#B[&Jvu^x;Ucls$v0maaKe%9/+UM4eThjZYtGJn]0,=694?_qdqvUBq%]
2024-05-15 22:37:17 UTC	7952	IN	Data Raw: 69 bc ab 3f dc aa fd 91 b5 fc 27 96 f0 b5 75 43 d6 9a 68 f3 38 25 2a e9 34 c6 69 51 c1 df e1 d4 05 b7 de f8 d1 36 99 da 62 1b 25 59 00 e0 83 cf b1 34 7d 39 48 1c e7 7c 29 37 12 71 26 5b 9b 56 a5 3d 14 d5 1f b3 16 c2 69 aa 13 79 1a da 8e cb 7b 0b 72 04 9f 12 71 8e 47 80 29 aa c8 e3 23 27 94 5c 19 cd 2e 64 fa 60 aa a7 6f 21 2a 96 fa 5f 18 29 5a 1a 5b ca 35 27 2b dc 89 0c 8d e2 39 7d 70 b4 a5 75 28 59 78 86 38 25 30 c2 8d 98 55 8f fa 50 6e ab ea dc 87 cb eb 89 b7 ba 70 30 b2 52 ae b5 0b 66 53 01 11 ff 00 c2 41 b2 fa 31 e6 71 30 38 53 77 40 8c 86 ef 18 48 82 c5 10 d8 2a 8d 86 2b 28 70 88 49 d2 1e e8 dd ba 8f eb 85 a5 05 95 a6 61 9e 52 65 60 7b d4 b7 90 8d a1 41 76 fa 62 06 13 c2 2d 04 a0 de 0a fe 20 4d 59 84 86 83 2e 1b 8a 58 cd 99 c7 8b 9c 38 a6 e0 72 9a c3 Data Ascii: i?'uCh8%4iQ6b%Y4}9H\|)7q&[V=iy{rqG)#'\.d`o!_)Z[5'+9}pu(Yx8%0UPnp0RfSA1q08Sw@H*+(pIaRe`{Avb- MY.X8r
2024-05-15 22:37:17 UTC	12216	IN	Data Raw: 71 b6 c3 10 95 16 23 f7 9a da 81 24 24 35 cd cd 44 80 b0 27 c8 7d ef d3 d7 15 a6 e3 94 e5 5d 68 e1 0b 24 8d 34 be 04 dd 98 f8 93 d3 0c 1a 92 fb 20 aa 27 76 03 56 de 02 fc b0 6a 94 14 a3 59 76 c0 51 65 ea 56 20 35 5c 93 c9 54 5c 9c 4a 52 96 d1 4a ef f1 80 a3 a2 0d cf cc e0 13 d9 4b ec b1 3c eb 4b 16 a2 03 33 10 a8 a4 d8 16 37 b0 be 2a 4c 05 9a 55 ba be 22 af af 9e 4a 70 c1 a7 8c e9 76 91 b5 22 db 96 85 d8 01 f2 27 0a b4 86 80 12 b5 15 d4 9a bb 69 fe cf f1 af c2 37 f2 b5 b1 2d 3e 14 72 52 19 60 63 32 a5 62 31 2c 41 50 d7 f4 3b 1f cc e0 da 18 52 53 d5 c9 95 65 d1 96 99 52 92 ab e0 12 36 a6 5b 6f a4 92 3f 3f 91 c0 a4 e0 f4 5a 47 2f bd 30 8e 9c a3 b3 90 35 0f 85 6f d4 91 85 aa 16 a6 02 1f 35 92 5a da a6 a5 42 65 23 e1 54 16 0d e2 4e fc bd 71 63 00 ab 29 4b 96 Data Ascii: q#$$5D'}]h$4 'vVjYvQeV 5\T\JRJK<K37*LU"Jpv"'i7->rR`c2b1,AP;RSeR6[o??ZG/05o5ZBe#TNqc)K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50150	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:17 UTC	655	OUT	GET /steam/apps/1145350/ss_b88cb7b48a86f07a7288bf37141f6558279f9bfc.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:17 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 114090 Last-Modified: Wed, 01 May 2024 04:26:38 GMT ETag: "6631c47e-1bdaa" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=350542 Expires: Sun, 19 May 2024 23:59:39 GMT Date: Wed, 15 May 2024 22:37:17 GMT Connection: close
2024-05-15 22:37:17 UTC	16041	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 01 02 08 00 09 ff c4 00 51 10 00 02 01 03 03 02 04 04 03 05 03 08 07 06 04 07 01 02 03 04 05 11 00 12 21 06 31 07 13 41 51 14 22 61 71 08 32 81 15 23 42 91 Data Ascii: JFIFCCQXQ!1AQ"aq2#B
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: 58 6d ab ae 29 78 ce 32 d6 c0 1d bd 3e fd 50 1b b5 b2 1b f5 5c f3 5d a0 64 af 91 83 cd f0 e7 72 c8 db 39 23 ea 40 c9 f7 e7 59 97 35 45 7a 86 a6 98 26 27 9e 63 27 df 74 c1 48 64 bc c9 5a c7 63 b4 5d 62 12 40 13 0a 42 f9 6a 0a af 1d 94 af d7 db 23 be 74 81 05 1f 86 c7 e5 1a b2 f5 74 dd 21 d5 d6 fb ad ba a6 1a 1b 85 a2 a6 1a ba 79 d8 95 0b 22 30 61 9c 0e dc 15 f6 c1 3a 63 5e 58 e0 42 7b 2a 78 75 03 87 2f bf f0 9b 75 77 c7 75 a5 6d ca ab cb 9a e9 76 b9 d7 cb 5b b6 08 9a 46 92 69 25 32 10 80 72 7f 33 63 03 b0 d4 39 da 89 55 ab e9 d2 e7 6d cd 59 b6 ff 00 c2 3f 59 c5 d2 96 f6 b9 51 c9 4d d5 d5 d2 6f b4 f4 c2 05 6a f9 20 01 98 c8 fb 5b 31 64 80 ab 1b 61 8e f0 71 81 8d 13 9a 18 3c c7 3d 3b 75 51 46 93 2b db 97 93 30 a6 b6 7b 85 5f 82 be 1a f5 3d c6 65 99 fa fa e7 Data Ascii: Xm)x2>P\]dr9#@Y5Ez&'c'tHdZc]b@Bj#tt!y"0a:c^XB{*xu/uwumv[Fi%2r3c9UmY?YQMoj [1daq<=;uQF+0{_=e
2024-05-15 22:37:17 UTC	2273	IN	Data Raw: 27 2c 73 b7 3e bd b5 79 a1 9a 22 4c ae 1c 22 c2 b5 10 f3 4c 13 dd 03 e8 3f c1 2f 49 f5 af 4c df 69 a5 b9 d7 47 72 aa 93 75 55 e8 a6 fa a9 24 69 bc d6 ff 00 48 48 1d b0 38 07 18 ef eb 91 59 82 96 23 75 52 8f 06 a7 74 e2 67 4b 5b b0 01 75 ad 93 a6 ad bd 21 66 a2 b3 58 e8 a9 e9 29 29 63 58 62 8d 22 50 00 03 e9 8e 4e 32 4f be 81 99 cb 97 a2 65 b5 2a 2d d1 40 01 ec 11 78 63 95 17 e6 9c ae 0e ed a1 40 18 f5 18 d0 92 d3 b0 4f 68 78 6e 5d 1e df b6 52 b5 55 b0 5b a9 9a 7a 99 04 48 38 c9 f5 3e c3 42 c6 3a a3 b4 b0 49 53 73 77 46 c6 89 af 72 ed 20 7d c0 51 4b 77 53 2d 65 fb ca 40 eb 23 30 ca e7 23 04 ff 00 bb 57 df 4c 35 85 87 90 5e 06 cf 8c 1b 9b f0 e6 c8 2e 76 d3 23 3f e3 9a 84 f8 dd 54 8f 74 a6 a7 2f 6c ad 81 46 fa 8a 2b 82 46 e1 53 d5 be 6e 40 fa 8e da 8b 76 d3 Data Ascii: ',s>y"L"L?/ILiGruU$iHH8Y#uRtgK[u!fX))cXb"PN2Oe*-@xc@Ohxn]RU[zH8>B:ISswFr }QKwS-e@#0#WL5^.v#?Tt/lF+FSn@v
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: a4 23 03 0b c1 00 67 2d 91 8e 7d c7 d7 58 15 68 b8 e5 5d 65 cd 30 60 29 15 9f c4 ba 0e a7 b6 54 c9 45 14 91 42 91 c4 04 b5 91 34 51 ca 49 22 45 89 9b 87 20 13 92 3e 53 cf 3a bd 6b c0 ae ee 5b ac 0d 2c ea 7f 8d fe 5d 92 6e 78 bd a5 ad 37 55 a8 ec 37 27 ef 9f b2 8a 5f ff 00 1a 7e 18 f4 25 35 5c 12 f5 15 3d 7d 64 24 22 53 d0 83 22 f0 e4 77 50 70 38 03 27 df 4d ff 00 82 be dd c1 b5 6b 31 a3 d6 4f c0 49 ed 09 35 b8 ad b7 f6 4b bd 01 e7 ca 4c 7b aa 53 aa 7f 11 d6 8b e4 b7 3b f5 ae d7 d4 f4 77 7a aa a5 12 43 05 1c c1 65 8b cb f9 5f 69 5c 70 c3 04 f1 9c 83 cf 3a f6 3c 32 ad 0b 76 36 8b 1c e7 06 b7 25 ad 27 32 73 07 61 1e cb 16 bf 10 aa d9 7b 5b a4 93 b1 e9 1f ca 4f a7 fc 60 af f1 6c 54 f4 e2 d3 5d a9 44 54 8d 25 4b 5c 8c b4 6a 61 2d b4 80 ca 09 c1 3c 6d 52 3d 73 Data Ascii: #g-}Xh]e0`)TEB4QI"E >S:k[,]nx7U7'_~%5\=}d$"S"wPp8'Mk1OI5KL{S;wzCe_i\p:<2v6%'2sa{[O`lT]DT%K\ja-<mR=s
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: 80 e4 d3 c8 c8 a1 4b 1e 5a 3c 00 4f ef 06 38 1a 5d 56 36 c6 a6 a7 3a 58 fe 67 b6 e3 f8 f5 2a e5 6b aa b5 74 d3 ac e9 0c c0 9e 41 72 c5 f3 a6 ba 8e 3a d5 a7 9a cd 58 d3 4d 86 84 24 26 42 e8 49 db f9 41 00 e3 d3 df 3a f9 eb 88 d4 4c e1 53 73 5c 71 09 cd be d1 d6 1e 1f ec be 8e 9e b8 d0 88 d8 08 eb 64 a4 91 36 f3 f3 05 7e 36 ee 5d cb 9f 62 74 74 2e 3c 2a 81 ec 39 08 0d 37 b4 64 2b e2 f9 7e 49 2d bd 3b 37 4e d4 d7 5d 29 6e f5 82 aa 82 69 2a 0c df 0e e1 58 4d 06 5f 25 07 96 cf c3 1e 36 91 dc 0d 7a ce 27 56 9b ac f5 03 20 90 41 99 f6 f8 2e 6b 72 21 5d fe 1e d8 64 7b 4d 35 75 64 3e 75 44 d1 24 8f 06 dc 46 ae 39 c8 c9 39 e4 7b e3 5e 3a 8d 40 e9 20 e1 6b 31 90 25 2d d4 14 f0 dc 2a e4 96 aa 52 27 19 0e 33 b9 7e a0 a9 e3 56 35 29 7d 3d 5b a8 3f 50 50 43 e5 ac d4 68 Data Ascii: KZ<O8]V6:XgktAr:XM$&BIA:LSs\qd6~6]btt.<97d+~I-;7N])niXM_%6z'V A.kr!]d{M5ud>uD$F99{^:@ k1%-R'3~V5)}=[?PPCh
2024-05-15 22:37:17 UTC	7952	IN	Data Raw: b8 c0 c6 b9 48 d9 6d e7 15 3f 9c 8e 07 d7 51 0a 75 c7 34 bd 3d 4f 96 ad b9 77 1f 75 f5 d0 c2 73 1f 00 ca 75 05 56 7e 68 d8 a3 0f 41 dc 68 48 4f 6d 40 44 b7 0b 30 54 96 94 ba 92 18 77 3e ff 00 7d 74 61 43 5d 26 42 59 52 27 59 63 62 76 48 41 f9 fb 02 0e 46 7d c6 87 21 10 6b 4c 83 b1 5a bc 65 78 38 20 fa 83 90 75 c8 a1 7a 02 c9 32 1f 35 b6 64 6e 57 f9 97 1e bd f9 d7 72 42 d1 06 41 4b 54 4a aa f2 24 0c 44 4d c9 1e fa 80 3a a6 38 89 21 bb 24 77 68 92 e1 67 d7 5c a1 7b b0 d7 29 52 1e 8d 19 9a ab b7 e4 1c 7a f7 3a 12 84 ec ad fb 05 59 a2 9a 08 d9 d4 3b 53 a1 50 d8 e4 f3 9f bf a6 a8 54 ca d1 bc 05 a2 8c 7f d2 3f 74 52 b2 ae 38 cf 92 b4 4a b1 ca 32 40 ec c7 dd 48 ed f6 d2 80 9e 6b 38 93 09 b2 c4 c9 09 54 f9 b2 41 19 fc c3 4c d3 26 54 08 52 6a 2a b3 fb 3a 23 2b 31 Data Ascii: Hm?Qu4=OwusuV~hAhHOm@D0Tw>}taC]&BYR'YcbvHAF}!kLZex8 uz25dnWrBAKTJ$DM:8!$whg\{)Rz:Y;SPT?tR8J2@Hk8TAL&TRj*:#+1
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: 0e 7b 1c 60 f7 e2 01 99 0a 4b 36 32 8f 74 e5 0d 96 a2 79 1a 4a 86 a8 ba b8 24 52 55 48 be 77 3e a1 7b 91 c9 e7 b6 a1 c4 a3 6e 99 ee 98 75 87 4c 53 da d6 19 a2 42 1a 57 2a cb 19 f9 41 c6 75 c1 c5 73 9a 37 51 9a 6a 4f 88 ac 8e 18 d0 6f 91 95 37 7a 0c 9c 02 7e 83 3a 20 ec 28 03 92 3d 43 e1 c5 44 d2 48 d7 49 5a d9 4d 14 bb 59 88 c9 72 09 0c a3 db 18 3c e8 4d 48 db 2a 3c 3f fa b0 9c da fc 3b a5 b8 5c 1d 69 a9 ee 2f 42 1b 22 be ad c4 49 8e 7f 22 63 2f e9 cf 03 be 87 c5 21 43 59 27 0a 63 6a f0 0b a5 ea a4 15 b5 26 7a e7 d8 ca 04 d2 fc 88 1d 71 b9 47 60 c0 9c 8f d3 db 50 2b be 30 ad b2 d5 8e f3 1c a8 4f 59 7e 1e ba 76 eb 77 96 d9 1e 2c 8b 15 5a 83 59 4e 16 46 06 48 54 85 71 9c ed dc 8c 47 b1 6f 6d 31 b5 9d 1a b7 55 6a 5a b1 ee d3 b2 15 76 f0 9a a3 c2 e5 a7 b4 c1 Data Ascii: {`K62tyJ$RUHw>{nuLSBWAus7QjOo7z~: (=CDHIZMYr<MH<?;\i/B"I"c/!CY'cj&zqG`P+0OY~vw,ZYNFHTqGom1UjZv
2024-05-15 22:37:17 UTC	16384	IN	Data Raw: 34 c8 52 32 08 0c bc 01 a1 6d 9d 5a b4 c3 da c1 9f bf 8a 45 5b c7 da 55 7c 57 2f 1c 83 72 04 72 f3 6e 3d 0a bc 3c 0f eb 5a b6 b6 c3 64 ea 6e ad 86 fb 7e 97 32 d3 9a 86 86 3a a9 23 c6 76 94 45 4c e0 76 25 41 23 be ab dc 50 f0 b3 0a ef 02 e2 d5 38 8b aa 07 19 03 6f dc 1e 87 dd 4f af d7 2f d8 14 75 57 0a 9a b9 3e 16 35 c9 4f 6f a0 c0 c9 d1 5b 52 fc cb 9b 49 8d 12 56 ad ed 77 db 34 d4 73 bc bf 05 18 a6 ea ca 1b 94 c8 16 b6 37 69 79 00 c8 8f e5 e3 fb 40 1e ff 00 af 1f 7d 6a ba ce a5 20 65 bb 76 39 5e 56 b5 5a 4e 89 ad 2e 3c 8c 63 d8 90 49 f4 db d5 73 9f 8f 1e 17 f5 4d c7 c5 6b c5 ef a5 ee 74 a6 ba b2 9e 9a e1 45 f1 13 bc 4f 1c d1 01 19 a6 55 da 54 ee 2a 24 57 38 03 69 53 df 3a 45 2a 35 bc 3d 6d 18 18 58 7c 53 83 d2 be b9 fc cb 5d 2e 30 47 af 41 8e d8 f8 2b 9f Data Ascii: 4R2mZE[U\|W/rrn=<Zdn~2:#vELv%A#P8oO/uW>5Oo[RIVw4s7iy@}j ev9^VZN.<cIsMktEOUT$W8iS:E5=mX\|S].0GA+
2024-05-15 22:37:17 UTC	5904	IN	Data Raw: 13 db 77 6d 37 49 68 1a 92 9c f6 17 38 b3 62 a1 d7 09 cd c8 bb c8 ca 24 6c 48 1b cd df b0 05 e4 01 e9 93 ce ac b0 e9 38 f4 55 4c 14 1a 2b 89 5e 09 72 01 e0 07 20 6a e6 84 80 e0 b6 4a de 5b e7 18 03 3c 9e ff 00 41 a2 d9 4c ad e3 ae 2f ea a8 00 e7 27 44 14 02 ac 6b 75 0d b3 a6 6d cb 7a 82 fd 4f 73 ad 54 46 86 2a 69 c4 4f 0b 9f e2 2a 4e 5f 1c 02 bc 7a ea 9e b7 54 76 82 d8 0b 44 32 9d 16 78 ad 7c 9e c6 23 f9 46 64 ea 1e 99 ba 5c 2d 97 9b eb d4 f5 03 54 4e b1 35 a4 cc 69 96 9a 0c e1 8b ce 00 e4 92 19 70 08 0a 0e 4e 70 34 88 ac d0 e6 53 f2 c0 df 79 3d 82 5d 5a ad aa e0 f7 49 9e 5d 11 bf 13 bc 17 bb 5b 65 aa ae e9 0a cb 27 50 74 dd 48 03 e0 7a 72 ee 2b a4 a3 f9 41 db 3c 85 63 2f 9c fc bc 13 c7 a9 e7 59 76 1c 5a 9d 73 a6 e5 8e a6 e1 cd ed d3 3e 99 3e e8 0d 0a 8f Data Ascii: wm7Ih8b$lH8UL+^r jJ[<AL/'DkumzOsTFiON_zTvD2x\|#Fd\-TN5ipNp4Sy=]ZI][e'PtHzr+A<c/YvZs>>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50147	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:18 UTC	801	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:18 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:18 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:18 UTC	10871	IN	Data Raw: 32 61 36 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af Data Ascii: 2a6fPNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj
2024-05-15 22:37:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50151	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:18 UTC	671	OUT	GET /steamcommunity/public/images/apps/1938090/8eaf32220060344996cbf11f697a4f4be943e5f3.jpg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:18 GMT Content-Type: image/jpeg Content-Length: 620 Connection: close Cache-Control: max-age=315360000 Cache-Control: public, max-age=315360000 Cf-Bgj: h2pri ETag: "654e6e3a-26c" Edge-Control: !no-store,!bypass-cache,cache-maxage=315360000 Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 10 Nov 2023 17:54:02 GMT CF-Cache-Status: HIT Age: 2932163 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469c9c1e504984-MIA
2024-05-15 22:37:18 UTC	620	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff c0 00 0b 08 00 20 00 20 01 01 11 00 ff c4 00 19 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 05 08 04 06 07 03 ff c4 00 27 10 00 01 04 01 03 03 04 03 01 00 00 00 00 00 00 00 02 01 03 04 05 11 00 06 12 07 21 31 13 14 22 71 41 51 61 52 ff da 00 08 01 01 00 00 3f 00 c1 a4 74 c3 7a c6 81 16 6b db 66 c8 63 49 26 c1 a2 f4 b2 a4 4e 2a 20 26 13 ba 65 55 13 ba 79 54 d7 59 5d 28 df 31 64 23 32 36 d4 f0 71 59 72 46 15 13 1e 98 28 a1 ae 73 8e dc 87 fb df 55 db 0d bd 6b 5f 4b 5d 6f 36 0b ac d6 d8 Data Ascii: JFIF%%C%# , #&'))-0-(0%()( '!1"qAQaR?tzkfcI&N &eUyTY](1d#26qYrF(sUk_K]o6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50152	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:18 UTC	575	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:19 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:19 UTC	1853	IN	Data Raw: 37 33 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 Data Ascii: 736PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56
2024-05-15 22:37:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50153	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:18 UTC	579	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:19 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:19 UTC	3784	IN	Data Raw: 65 63 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 Data Ascii: ec1PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@
2024-05-15 22:37:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50155	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:18 UTC	667	OUT	GET /steamcommunity/public/images/apps/730/8dbc71957312bbd3baea65848b545be9eae2a355.jpg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:18 GMT Content-Type: image/jpeg Content-Length: 702 Connection: close Cache-Control: max-age=315360000 Cache-Control: public, max-age=315360000 Cf-Bgj: h2pri ETag: "6526ee92-2be" Edge-Control: !no-store,!bypass-cache,cache-maxage=315360000 Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 11 Oct 2023 18:50:58 GMT CF-Cache-Status: HIT Age: 6760838 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469ca08b056dd4-MIA
2024-05-15 22:37:18 UTC	702	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 18 00 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 04 06 07 08 05 ff c4 00 2d 10 00 01 03 03 02 05 02 05 05 00 00 00 00 00 00 00 01 02 03 04 00 05 11 06 31 07 12 21 41 61 14 23 13 15 22 81 91 24 32 51 71 d1 ff c4 00 15 01 Data Ascii: JFIF%%C%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((( "-1!Aa#"$2Qq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50154	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:18 UTC	667	OUT	GET /steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0f7d37e8661a410075.jpg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:18 UTC	492	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:18 GMT Content-Type: image/jpeg Content-Length: 1210 Connection: close Cache-Control: max-age=315360000 Cache-Control: public, max-age=315360000 Cf-Bgj: h2pri ETag: "654d7e53-4ba" Edge-Control: !no-store,!bypass-cache,cache-maxage=315360000 Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 10 Nov 2023 00:50:27 GMT CF-Cache-Status: HIT Age: 6756533 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469ca09c545c63-MIA
2024-05-15 22:37:18 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC "
2024-05-15 22:37:18 UTC	333	IN	Data Raw: a1 38 92 33 fd d6 1f d0 fe 1e b5 17 c5 69 1e df c2 8c a9 11 91 65 95 11 db 38 d8 33 9c fb f2 00 fc 6a 29 d5 a9 ed 23 17 27 7b ea 99 b6 37 2d c2 2c 25 7a d0 a3 1e 45 1b c6 51 d6 f7 bf 96 96 2a 78 47 c4 03 c3 ff 00 0c ce a5 34 45 85 be f5 45 27 fd 61 32 10 bf 41 93 8f c0 d7 4d a6 de e9 1f 10 b4 06 c2 ac f6 d2 8d b2 c2 ff 00 7e 36 f4 3e 84 75 04 57 1d e1 6f 1c e9 7e 19 d0 17 45 d5 ed 6e 3e d1 13 49 14 d0 bc 00 8e 5c 9c 10 4f bd 6d 68 bf 11 fc 27 68 8f 0d ac 3f d9 b1 fd ee 2d c2 2b 1f f8 0e 73 53 5a 94 f9 a5 28 c1 de fa 33 b3 2c cc 30 de ca 85 2a b8 88 7b 3f 66 a3 28 b5 ad ed df 6f 27 73 ce 75 dd 23 55 f8 5b e2 31 3d a4 ae 2d dc 93 0c c7 ee c8 bf dd 71 dc 8f 4f c6 bb 6f 15 5f 4d af 7c 2d 86 fe f2 05 82 e2 5d 92 6c 42 71 f7 f0 0f e2 39 c7 bd 6d 6a 1f 10 bc 2b Data Ascii: 83ie83j)#'{7-,%zEQxG4EE'a2AM~6>uWo~En>I\Omh'h?-+sSZ(3,0{?f(o'su#U[1=-qOo_M\|-]lBq9mj+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50161	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:18 UTC	659	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:19 UTC	308	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:18 GMT Content-Type: image/png Content-Length: 291 Connection: close Last-Modified: Wed, 21 Mar 2018 00:07:17 GMT ETag: "5ab1a235-123" X-Cache: MISS CF-Cache-Status: HIT Age: 370 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469ca1899921f9-MIA
2024-05-15 22:37:19 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50159	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	805	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:19 UTC	187	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-05-15 22:37:19 UTC	3691	IN	Data Raw: 65 36 34 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 Data Ascii: e64<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="
2024-05-15 22:37:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50160	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	885	OUT	GET /apps/allcontenthome?l=english&browsefilter=trend&appHubSubSection=11&forceanon=1 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/javascript, text/html, application/xml, text/xml, / X-Prototype-Version: 1.7 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:20 UTC	1780	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Cache-Control: public,max-age=60 Expires: Wed, 15 May 2024 22:38:15 GMT
2024-05-15 22:37:20 UTC	14579	IN	Data Raw: 33 38 65 62 0d 0a 3c 64 69 76 20 69 64 3d 22 70 61 67 65 31 22 3e 0d 0a 09 3c 64 69 76 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 4c 69 6e 6b 20 69 6e 74 65 72 61 63 74 61 62 6c 65 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 20 64 61 74 61 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 2d 75 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 70 72 6f 66 69 6c 65 73 2f 37 36 35 36 31 31 39 38 33 38 39 32 33 31 32 30 39 2f 72 65 63 6f 6d 6d 65 Data Ascii: 38eb<div id="page1"><div data-panel="{"focusable":true,"clickOnActivate":true}" class="apphub_Card modalContentLink interactable" style="display: none" data-modal-content-url="https://gtm.you1.cn/profiles/76561198389231209/recomme
2024-05-15 22:37:21 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 79 2f 72 65 61 63 74 69 6f 6e 73 2f 73 74 69 6c 6c 2f 31 36 2e 70 6e 67 3f 76 3d 35 26 71 75 6f 74 3b 2f 26 67 74 3b 0d 0a 09 09 09 09 09 26 6c 74 3b 73 70 61 6e 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 72 65 76 69 65 77 5f 61 77 61 72 64 5f 63 6f 75 6e 74 20 68 69 64 64 65 6e 26 71 75 6f 74 3b 26 67 74 3b 31 26 6c 74 3b 2f 73 70 61 6e 26 67 74 3b 0d 0a 09 09 09 09 26 6c 74 3b 2f 64 69 76 26 67 74 3b 0d 0a 09 09 09 09 09 09 09 09 26 6c 74 3b 64 69 76 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 72 65 76 69 65 77 5f 61 77 61 72 64 26 71 75 6f 74 3b 20 64 61 74 61 2d 72 65 61 63 74 69 6f 6e 3d 26 71 75 6f 74 3b 31 39 26 71 75 6f 74 3b 20 64 61 74 61 2d 72 65 61 63 74 69 6f 6e 63 6f 75 6e 74 3d 26 71 75 6f 74 3b 31 26 71 75 6f 74 3b 26 67 74 3b 0d Data Ascii: 3ff0y/reactions/still/16.png?v=5"/><span class="review_award_count hidden">1</span></div><div class="review_award" data-reaction="19" data-reactioncount="1">
2024-05-15 22:37:21 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 63 74 69 6f 6e 3d 26 71 75 6f 74 3b 31 35 26 71 75 6f 74 3b 20 64 61 74 61 2d 72 65 61 63 74 69 6f 6e 63 6f 75 6e 74 3d 26 71 75 6f 74 3b 31 26 71 75 6f 74 3b 26 67 74 3b 0d 0a 09 09 09 09 09 26 6c 74 3b 69 6d 67 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 72 65 76 69 65 77 5f 61 77 61 72 64 5f 69 63 6f 6e 20 74 6f 6f 6c 74 69 70 26 71 75 6f 74 3b 20 73 72 63 3d 26 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 69 6d 61 67 65 73 2f 6c 6f 79 61 6c 74 79 2f 72 65 61 63 74 69 6f 6e 73 2f 73 74 69 6c 6c 2f 31 35 2e 70 6e 67 3f 76 3d 35 26 71 75 6f 74 3b 2f 26 67 74 3b 0d 0a 09 09 09 09 09 26 6c 74 3b 73 70 61 6e 20 63 6c 61 73 73 3d 26 Data Ascii: 3ff0ction="15" data-reactioncount="1"><img class="review_award_icon tooltip" src="https://store.cloudflare.steamstatic.com/public/images/loyalty/reactions/still/15.png?v=5"/><span class=&
2024-05-15 22:37:21 UTC	8	IN	Data Raw: 33 66 66 30 0d 0a 74 22 Data Ascii: 3ff0t"
2024-05-15 22:37:21 UTC	16384	IN	Data Raw: 3e 34 38 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 54 69 74 6c 65 20 65 6c 6c 69 70 73 69 73 22 3e d0 9e d0 b1 d1 8b d1 87 d0 bd d1 8b d0 b9 20 d0 b4 d0 b5 d0 bd d1 8c 20 d0 b2 20 48 65 6c 6c 64 69 76 65 72 73 20 32 26 6e 62 73 70 3b 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 41 75 74 68 6f 72 42 6c 6f 63 6b 20 74 61 6c 6c 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 41 70 70 4e 61 6d 65 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 74 6d Data Ascii: >48</div></div></div><div class="apphub_CardContentTitle ellipsis"> Helldivers 2 </div></div><div class="apphub_CardContentAuthorBlock tall"><div class="apphub_CardContentAppName"><a href="https://gtm
2024-05-15 22:37:21 UTC	16360	IN	Data Raw: 5f 43 61 72 64 43 6f 6e 74 65 6e 74 41 75 74 68 6f 72 42 6c 6f 63 6b 20 74 61 6c 6c 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 41 70 70 4e 61 6d 65 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 61 70 70 2f 32 33 31 35 36 39 30 22 3e 57 57 45 20 32 4b 32 34 3c 2f 61 3e 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 20 6d 6f 64 Data Ascii: _CardContentAuthorBlock tall"><div class="apphub_CardContentAppName"><a href="https://gtm.you1.cn/app/2315690">WWE 2K24</a></div></div></div><div data-panel="{"focusable":true,"clickOnActivate":true}" class="apphub_Card mod
2024-05-15 22:37:21 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 65 74 2f 75 67 63 2f 32 34 38 36 36 32 37 38 34 30 32 30 34 32 39 34 36 31 31 2f 43 42 31 43 39 39 38 46 46 32 37 42 42 37 30 43 41 34 33 36 32 37 30 41 34 45 36 42 46 45 33 38 33 31 32 46 31 42 31 36 2f 3f 69 6d 77 3d 31 30 32 34 26 26 69 6d 61 3d 66 69 74 26 69 6d 70 6f 6c 69 63 79 3d 4c 65 74 74 65 72 62 6f 78 26 69 6d 63 6f 6c 6f 72 3d 25 32 33 30 30 30 30 30 30 26 6c 65 74 74 65 72 62 6f 78 3d 66 61 6c 73 65 20 31 30 32 34 77 2c 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 75 73 65 72 69 6d 61 67 65 73 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 75 67 63 2f 32 34 38 36 36 32 37 38 34 30 32 30 34 32 39 34 36 31 31 2f 43 42 31 43 39 39 38 46 46 32 37 42 42 37 30 43 41 34 33 36 32 37 30 41 34 45 36 42 46 45 33 38 33 31 32 46 31 42 31 Data Ascii: 7fe0et/ugc/2486627840204294611/CB1C998FF27BB70CA436270A4E6BFE38312F1B16/?imw=1024&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false 1024w, https://steamuserimages-a.akamaihd.net/ugc/2486627840204294611/CB1C998FF27BB70CA436270A4E6BFE38312F1B1
2024-05-15 22:37:21 UTC	16360	IN	Data Raw: 55 70 28 33 32 34 37 32 34 39 30 30 32 29 3b 22 20 63 6c 61 73 73 3d 22 62 74 6e 5f 67 72 65 79 5f 67 72 65 79 20 62 74 6e 5f 73 6d 61 6c 6c 5f 74 68 69 6e 20 69 63 6f 5f 68 6f 76 65 72 22 20 69 64 3d 22 76 6f 74 65 5f 75 70 5f 33 32 34 37 32 34 39 30 30 32 22 3e 3c 73 70 61 6e 3e 3c 69 20 63 6c 61 73 73 3d 22 69 63 6f 31 36 20 74 68 75 6d 62 5f 75 70 22 3e 3c 2f 69 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0d 0a 09 09 09 09 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 20 6f 6e 63 6c 69 63 6b 3d 22 50 75 62 6c 69 73 68 65 64 46 69 6c 65 56 6f 74 65 44 6f 77 6e 28 33 32 34 37 32 34 39 30 30 32 29 3b 22 20 63 6c 61 73 73 3d 22 62 74 6e 5f 67 72 65 79 5f 67 72 65 79 20 62 74 6e 5f 73 6d 61 6c 6c 5f 74 68 69 6e 20 69 63 6f 5f Data Ascii: Up(3247249002);" class="btn_grey_grey btn_small_thin ico_hover" id="vote_up_3247249002"><span><i class="ico16 thumb_up"></i></span></a><a href="javascript:void(0)" onclick="PublishedFileVoteDown(3247249002);" class="btn_grey_grey btn_small_thin ico_
2024-05-15 22:37:21 UTC	16384	IN	Data Raw: 35 34 38 31 0d 0a 22 35 37 36 22 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 75 73 65 72 69 6d 61 67 65 73 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 75 67 63 2f 32 34 39 34 35 30 39 32 32 36 36 39 33 36 33 36 31 39 32 2f 34 46 38 31 34 37 39 36 46 43 33 39 39 45 43 33 38 44 43 35 32 32 38 35 46 44 39 42 36 37 33 31 36 46 39 46 39 46 38 32 2f 3f 69 6d 77 3d 33 32 30 26 26 69 6d 61 3d 66 69 74 26 69 6d 70 6f 6c 69 63 79 3d 4c 65 74 74 65 72 62 6f 78 26 69 6d 63 6f 6c 6f 72 3d 25 32 33 30 30 30 30 30 30 26 6c 65 74 74 65 72 62 6f 78 3d 66 61 6c 73 65 20 33 32 30 77 2c 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 75 73 65 72 69 6d 61 67 65 73 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 75 67 63 2f 32 34 39 34 35 30 39 32 32 36 36 Data Ascii: 5481"576" srcset="https://steamuserimages-a.akamaihd.net/ugc/2494509226693636192/4F814796FC399EC38DC52285FD9B67316F9F9F82/?imw=320&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false 320w, https://steamuserimages-a.akamaihd.net/ugc/24945092266
2024-05-15 22:37:21 UTC	5257	IN	Data Raw: 74 61 69 6c 73 2f 3f 69 64 3d 33 32 34 37 33 33 36 34 31 34 22 09 20 69 64 3d 22 61 70 70 68 75 62 5f 43 61 72 64 5f 33 32 34 37 33 33 36 34 31 34 22 0d 0a 20 20 20 09 20 64 61 74 61 2d 61 70 70 69 64 3d 22 35 35 33 38 35 30 22 20 64 61 74 61 2d 70 75 62 6c 69 73 68 65 64 66 69 6c 65 69 64 3d 22 33 32 34 37 33 33 36 34 31 34 22 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 43 6c 69 63 6b 61 62 6c 65 22 3e 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 54 79 70 65 43 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 54 79 70 65 22 3e 48 45 4c 4c 44 49 56 45 Data Ascii: tails/?id=3247336414" id="apphub_Card_3247336414" data-appid="553850" data-publishedfileid="3247336414"><div class="apphub_CardContentClickable"><div class="apphub_CardContentTypeContainer"><div class="apphub_CardContentType">HELLDIVE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50156	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	810	OUT	GET /public/images//sharedfiles/searchbox_workshop_submit.gif HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:19 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:19 UTC	1425	IN	Data Raw: 35 38 61 0d 0a 47 49 46 38 39 61 17 00 12 00 d5 21 00 2c 2c 2c 55 55 56 4d 4d 4d b6 b7 b8 9b 9c 9d b6 b7 b7 54 54 55 71 71 72 3f 3f 40 4b 4b 4b a1 a1 a2 55 55 55 4b 4c 4c 60 60 60 96 96 97 b9 b9 ba 61 61 61 96 97 97 2e 2e 2e 38 38 38 31 31 31 4a 4a 4b 35 35 35 2d 2d 2d 4f 50 50 3e 3f 3f 43 43 43 64 64 65 57 57 57 cc cd ce 2b 2b 2b cb cc cd d6 d7 d8 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d Data Ascii: 58aGIF89a!,,,UUVMMMTTUqqr??@KKKUUUKLL```aaa...888111JJK555---OPP>??CCCddeWWW+++!XMP DataXMP<?xpacket begin="" id="W5M0M
2024-05-15 22:37:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50158	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	786	OUT	GET /public/images/login/throbber.gif HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:19 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:19 UTC	3215	IN	Data Raw: 63 38 38 0d 0a 47 49 46 38 39 61 20 00 20 00 f3 00 00 00 00 00 cc cc cc 2c 2c 2c 61 61 61 39 39 39 50 50 50 a0 a0 a0 86 86 86 1e 1e 1e 14 14 14 35 35 35 b3 b3 b3 c8 c8 c8 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 04 e7 10 c8 49 69 61 a5 ea cd e7 62 4b 85 24 9d 46 0c 15 a3 52 02 41 94 54 b2 2c 07 a5 32 53 e2 2a 30 35 2f 2f c9 6d a2 70 21 7a 93 c1 cc 30 19 02 10 3b 24 c5 30 43 01 9c 2e 02 49 2a 21 fc 48 43 28 41 40 11 6f 01 04 83 21 33 39 54 35 ba 5c d1 38 29 a8 0d 87 a0 60 c1 ee b4 b2 64 14 07 77 78 47 3d 59 04 0a 67 14 04 83 77 48 62 86 1d 76 06 41 3d 92 30 09 56 5c 9c 5c Data Ascii: c88GIF89a ,,,aaa999PPP555!NETSCAPE2.0!Created with ajaxload.info!, IiabK$FRAT,2S05//mp!z0;$0C.I!HC(A@o!39T5\8)`dwxG=YgwHbvA=0V\\
2024-05-15 22:37:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50157	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	796	OUT	GET /public/images/skin_1/ico_external_link.gif HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:19 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:19 UTC	69	IN	Data Raw: 33 66 0d 0a 47 49 46 38 39 61 08 00 08 00 91 02 00 4d 4d 4c c4 c2 c1 26 26 26 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 08 00 08 00 00 02 10 94 15 19 77 9a b6 1e 04 68 21 66 a1 6e d0 d9 02 00 3b 0d 0a Data Ascii: 3fGIF89aMML&&&!,wh!fn;
2024-05-15 22:37:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50162	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	638	OUT	GET /steam/apps/570/page_bg_generated_v6b.jpg?t=1714502360 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:19 UTC	441	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: image/jpeg Content-Length: 53312 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "66313ad6-d040" Expires: Tue, 21 May 2024 18:39:32 GMT Last-Modified: Tue, 30 Apr 2024 18:39:18 GMT CF-Cache-Status: HIT Age: 100436 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469ca3d88ba4be-MIA
2024-05-15 22:37:19 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 03 2a 05 9e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 08 ff c4 00 3d 10 00 02 02 01 03 04 01 03 03 02 05 02 05 04 02 03 00 01 02 11 03 12 21 31 04 41 51 61 71 13 22 81 05 32 91 42 a1 14 23 52 b1 c1 62 d1 Data Ascii: JFIFHHCC*=!1AQaq"2B#Rb
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 54 25 02 08 d0 10 2a d0 31 28 8a 84 11 fc 81 19 04 d8 2a 32 52 27 3c 11 51 81 18 56 59 04 64 54 64 56 58 54 03 0f 76 4a 0d 57 04 54 ae fd 88 31 26 15 09 40 51 08 32 f9 0a 8c 2a 56 fc 11 03 22 15 42 28 00 0c b3 35 a8 11 40 00 09 46 58 82 14 09 40 80 00 0b 10 34 00 d3 34 08 d0 1b 5c 06 5a 5c 1a 88 a5 46 90 47 44 12 b4 69 96 a2 19 ae 91 2a 3a 20 cb 49 15 2b a4 4a cb a2 41 2b 49 06 5b 48 d4 4a da b4 19 6d 2b 2a 56 92 08 a8 25 6d 20 cb 49 14 5a 11 14 a2 a5 e8 22 d7 60 ab 40 12 08 b5 fd 80 b4 05 57 c0 0a 00 51 68 0a 97 70 15 60 10 04 00 05 00 f6 02 80 70 03 8d 80 00 00 04 02 81 00 00 f8 01 c8 0d b6 40 4a f6 14 7c 04 38 0a 80 c0 00 0a b0 25 00 f6 04 01 d8 68 85 02 2a 14 00 94 01 f0 04 a0 23 45 13 d0 04 04 00 15 12 01 40 28 2a a4 01 ae e5 54 f2 04 7c 01 9f 60 10 Data Ascii: T%1(2R'<QVYdTdVXTvJWT1&@Q2V"B(5@FX@44\Z\FGDi: I+JA+I[HJm+V%m IZ"`@WQhp`p@J\|8%h#E@(*T\|`
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 24 aa 10 40 00 65 90 65 86 91 91 59 64 19 60 00 84 a2 34 99 96 98 7c 01 00 8f 82 08 97 72 50 61 58 90 10 34 96 4a 88 48 04 aa 80 00 8c 08 61 b0 00 00 04 a3 0c a0 00 94 08 00 00 b1 03 40 0d 33 45 c8 46 d0 1a 0c b6 8a 8d 1a 4a d4 42 37 10 8e 86 99 69 7b 03 a4 4a c3 ac 42 56 d0 46 e2 8b 19 ae 89 15 1d 10 66 b4 96 c1 1d 11 a8 95 a4 54 74 88 66 b4 11 a4 05 4b d0 66 aa 4c 23 54 05 48 0a 80 a9 01 aa 00 97 90 2d 00 a6 05 a0 14 05 a0 15 d8 02 00 05 ad 80 50 00 00 3e 00 01 1a dc a2 30 0c 07 e0 08 04 a2 85 00 ed 60 4a f2 02 80 55 22 88 ec 05 01 1a 01 5d c0 01 29 85 1a 01 40 00 9a 7d 01 74 81 28 05 6e 14 ae c0 28 05 00 68 ba a8 d5 3e 00 9b 01 1a 02 50 11 80 02 0d 0a ee 55 4f c8 30 02 35 e8 29 54 04 68 2a 50 04 b6 02 d1 42 a8 0c b2 89 ec 80 fe 46 89 40 4a 28 a1 52 8a Data Ascii: $@eeYd`4\|rPaX4JHa@3EFJB7i{JBVFfTtfKfL#TH-P>0`JU"])@}t(n(h>PUO05)Th*PBF@J(R
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: d8 83 34 02 ac 82 30 20 19 61 51 91 59 64 56 5a 20 81 51 81 0c d2 32 c8 ac b0 32 04 96 cb 71 47 37 b9 00 83 01 a8 05 18 48 9f 26 44 61 50 80 00 0c b2 55 81 96 80 00 00 8f 82 7d 19 28 00 25 02 00 00 2a e4 bf 06 88 06 a3 34 5c 84 6e 3c 81 b8 84 ad c4 b1 96 d7 06 86 a2 19 74 88 47 48 96 32 da 45 1d 22 83 35 d6 28 a8 eb 14 12 b6 90 47 48 a3 51 9a e9 14 11 d1 20 cd 6d 04 69 22 c4 ae 89 15 1a 4b 62 8d a4 11 aa 0c ad 00 d2 05 a0 14 05 a0 2d 00 a0 2d 6c 02 80 b4 03 b8 0a 7e 00 00 48 0b 40 29 00 af 40 1a 01 40 00 a0 42 85 78 02 50 0d 20 29 a0 25 0d 04 80 24 05 a6 01 20 14 04 a0 0d 00 d3 e0 68 94 34 1a 1a 14 04 a2 85 5e c0 4a 01 40 4a a0 23 5e 8a 14 15 2b c0 06 82 e2 00 a0 14 c0 8d 05 4a 01 40 2b c8 0d 3d 8a 1a 40 57 90 1d c0 50 d5 4a 02 50 19 68 2a 53 28 9c 2d 80 Data Ascii: 40 aQYdVZ Q22qG7H&DaPU}(%4\n<tGH2E"5(GHQ mi"Kb--l~H@)@@BxP )%$ h4^J@J#^+J@+=@WPJPhS(-
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 09 4c 2a 34 51 1a 20 94 50 a0 14 02 80 94 04 a0 a9 40 4a 01 40 28 2a 52 01 40 4a 01 54 02 8a 14 04 a0 1f 82 81 00 0c b4 34 40 15 b9 04 02 34 14 00 00 8a 84 54 64 10 09 40 46 06 40 d5 10 4a 20 8c 2b 2f 6e c0 65 a0 ac 90 46 b6 22 b2 fe 00 8c 83 2c 2d 42 51 96 45 65 90 62 72 d2 bd 81 c1 ef b8 00 23 20 9c 92 8d 69 d9 58 54 96 db 83 1c db b0 d4 09 44 66 44 60 40 00 18 19 33 5a 81 14 00 00 08 c9 06 4a 00 09 40 80 00 0b 10 34 58 0b 92 b3 1a 05 69 20 8d ae c1 1d 23 c9 59 74 5c 16 15 b4 54 ae 91 41 1d 62 11 d6 28 d3 2e 91 40 75 82 0c bb 41 15 1d 62 bb 06 6b aa 45 1b 8a 0c ba c5 15 1d 12 09 5b 48 22 a4 11 a4 8b 12 b6 91 51 54 7b 94 6a 82 2d 01 6a 81 85 01 52 02 d0 16 bd 00 a0 09 20 61 f8 20 a9 14 28 00 0a 01 5b 00 a0 2d 01 28 05 78 01 40 2b d0 00 0d 00 a0 23 dc 05 Data Ascii: L4Q P@J@(R@JT4@4Td@F@J +/neF",-BQEebr# iXTDfD`@3ZJ@4Xi #Yt\TAb(.@uAbkE[H"QT{j-jR a ([-(x@+#
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 69 47 c8 17 f0 04 68 0c be 00 50 16 82 80 36 00 00 08 02 80 94 01 a0 25 50 00 26 c0 28 09 45 11 80 f9 0a 94 02 8b a2 55 85 28 0b 41 4a 28 8d 00 a0 25 5a 02 a5 b6 c0 1a 02 50 16 80 cb 40 4a 02 24 17 04 90 0a 0a 94 06 6b 70 14 04 a2 83 45 11 a0 14 15 28 08 d1 04 a2 89 40 4a 02 50 52 bc 03 0a 02 d0 54 6b b8 11 a0 15 e4 a2 52 02 35 45 11 af 40 65 a0 23 45 12 82 94 80 9a 68 08 d0 12 80 34 04 a0 25 05 1a 08 94 14 a0 23 02 57 90 25 05 4a 64 11 ad c8 14 06 92 f0 05 d2 41 28 08 c0 cb 03 0d 01 96 80 94 45 66 88 34 90 17 80 ac 30 32 c8 ac 90 66 88 23 03 2d 05 58 e2 72 df 84 15 a9 a8 e3 8e cb 92 74 78 f2 cd a5 49 72 4a 38 28 b9 3a 20 99 76 96 9b d9 2a 03 50 c7 16 b5 73 60 6a 80 84 c1 c2 79 1c be 08 ac 01 96 04 0a 22 28 4a 21 06 40 00 02 32 55 88 65 a0 00 00 04 a2 31 Data Ascii: iGhP6%P&(EU(AJ(%ZP@J$kpE(@JPRTkR5E@e#Eh4%#W%JdA(Ef402f#-XrtxIrJ8(: v*Ps`jy"(J!@2Ue1
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: ac 08 c0 00 14 46 d7 04 83 25 00 06 68 00 00 06 a2 05 03 49 da 2a 2a e4 ac b7 1e 40 e9 1e c0 75 88 66 ba c4 a8 eb 13 43 ac 43 2e b0 03 bc 02 57 68 1a 65 d6 20 75 81 47 68 06 5d 62 11 d6 25 47 58 84 6d 01 b4 9c 82 37 18 3e e5 d4 c7 54 a9 70 11 76 a0 24 92 5c 06 58 08 50 0a 01 40 28 02 40 54 02 80 00 00 05 00 00 08 51 52 6c 83 6a 1b 2d c0 ba 23 e0 06 94 01 45 26 05 28 72 00 05 81 2f d8 54 b2 89 60 46 c0 00 28 81 40 8b 41 4a 60 c2 bc 83 0a 0a cd 80 02 84 40 a5 01 a0 14 80 70 00 05 00 01 40 40 2d 7b 02 00 0b 80 31 3e 00 57 80 14 15 52 be c0 6b 80 a5 7a 01 45 10 0c be 2c a3 0c 08 90 02 85 00 a0 ac b0 25 01 2a d8 30 02 50 11 81 1a f4 04 a0 25 05 3d 80 28 94 50 a0 08 0b 40 4e 42 a0 0a 0a cd 01 28 00 52 80 94 06 68 00 12 80 94 02 bd 01 28 05 00 a0 25 01 1a 03 34 Data Ascii: F%hI*@ufCC.Whe uGh]b%GXm7>Tpv$\XP@(@TQRlj-#E&(r/T`F(@AJ`@p@@-{1>WRkzE,%0P%=(P@NB(Rh(%4
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 08 42 53 74 95 2f 20 75 58 a2 96 db 01 25 96 50 5f 6a ba ef e8 2b cf 97 ab cb 2f d9 2d 2b d1 15 e4 9e 49 c9 dc a6 db 28 d2 c9 35 1f b6 56 07 4c 5d 64 db 6a 73 4a 80 b3 cf 39 3d 12 96 9e da 90 1d 17 4b 05 bc b7 7f 26 87 9f 37 47 28 7d f8 d5 af 00 62 19 f2 43 78 bd fb a6 41 ea c5 d5 63 ca aa e9 f8 60 76 02 51 44 df 92 83 02 55 f6 02 50 00 23 01 40 00 05 40 00 41 aa 81 4a 00 04 a1 a1 c1 7a 27 c8 11 90 46 51 00 9f 01 50 20 ca ac 80 02 01 96 04 f8 00 06 40 88 0a 01 81 96 80 cb e4 2a 32 08 04 20 01 18 19 61 40 35 c2 b2 0c 4d f9 32 b8 e6 e7 6a 96 cb b8 57 93 a8 c8 a4 b4 ab 49 7f 70 3c d2 7f 6e cd 7c 04 65 b6 f9 61 58 60 46 40 20 8c 83 2f 60 32 04 a0 00 42 08 d7 71 46 5e c4 18 61 50 2a 00 68 85 64 42 04 aa d7 d3 93 44 0f a5 b7 20 45 04 98 14 0c 99 69 97 c8 10 8a Data Ascii: BSt/ uX%P_j+/-+I(5VL]djsJ9=K&7G(}bCxAc`vQDUP#@@AJz'FQP @2 a@5M2jWIp<n\|eaX`F@ /`2BqF^aPhdBD Ei
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 06 75 64 71 ff 00 13 d4 ff 00 ea 4b f9 0a 2c b9 75 6b 9c 9b 75 4a fb 01 35 64 ff 00 54 bf 90 23 72 ba 93 6c 09 4c 0d 24 fb b0 23 28 cb 03 a6 27 52 d5 e3 70 37 1d 5b b5 b3 ae 48 3c f2 d5 bc ad d1 46 25 96 4e 35 41 5c de 47 55 d8 a0 9c 93 b5 7b 00 9e 47 39 6a 7c b0 34 f7 6d df 01 04 a2 c0 ba 13 e0 08 e1 5f d4 55 4d 1b f2 05 fa 6f c8 15 46 6b 89 35 f9 2a 8e 12 7d ec 23 3a 72 7f a9 ff 00 25 55 51 c9 7b 49 ff 00 20 7d 68 af b5 5f 84 45 50 25 00 01 45 0a 20 80 0a 23 e0 08 04 00 04 03 2c 08 d0 10 2b 2f 90 23 02 7c 15 50 09 e8 21 f8 02 00 65 56 40 72 11 96 40 00 15 00 10 4a f0 04 a0 00 65 85 65 81 18 02 09 49 7d d2 7c ae 0c ac 8c 4e 7a 62 fd 85 79 25 26 f7 03 9f ee 4f 7d 98 1c 32 49 7e c8 f0 80 e4 ec 02 25 06 d1 04 60 64 82 30 32 00 08 d0 02 08 4a 32 c2 a0 56 18 Data Ascii: udqK,ukuJ5dT#rlL$#('Rp7[H<F%N5A\GU{G9j\|4m_UMoFk5*}#:r%UQ{I }h_EP%E #,+/#\|P!eV@r@JeeI}\|Nzby%&O}2I~%`d02J2V
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 40 16 05 40 37 28 d0 13 e4 00 12 c8 25 80 4c 0a 80 85 15 3a 02 ea 00 93 60 69 24 00 00 14 28 04 00 40 0a 01 18 14 01 40 00 00 20 17 b8 15 a5 28 d3 a6 9f 25 1f 2b f5 1e 8b e9 af a9 0f db fe c4 1e 1c 69 a9 6a 46 95 ea e8 65 fe 6b ff 00 da c1 5d 3a ca fb e4 bb a0 8e 1f a4 bf f3 a4 bd 30 ac fe a7 ff 00 de 7f fe 28 2c 6b a2 8d f5 11 7e 13 60 af 3f ea 32 5f e2 df c2 09 1e 7c eb 53 52 ef a5 05 8e bd 0f 4f 3c f3 50 87 2f bf 84 07 de e9 fa 78 74 d0 d1 0f cb f2 c0 d4 80 80 02 80 00 80 00 80 10 06 01 a0 23 41 50 08 c0 85 11 81 96 b7 28 8f 92 88 04 08 9d c2 94 02 80 50 12 80 9f 01 51 a0 25 01 36 02 76 00 d2 03 2c 08 c0 94 80 05 40 88 c0 9d c0 80 46 15 00 80 4a 26 89 df e0 cd 58 e5 3c d0 d7 f4 ef 7e e1 5e 6e af 36 a6 b1 c7 64 b9 03 ce 93 7c 2b 60 75 86 35 15 bf 24 d1 Data Ascii: @@7(%L:`i$(@@ (%+ijFek]:0(,k~`?2_\|SRO<P/xt#AP(PQ%6v,@FJ&X<~^n6d\|+`u5$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50163	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	655	OUT	GET /steam/apps/1145350/ss_ef0f63061d0a0a9a7e46f3b84f125d25330e8f19.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:19 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 73693 Last-Modified: Tue, 30 Apr 2024 04:30:35 GMT ETag: "663073eb-11fdd" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=350563 Expires: Mon, 20 May 2024 00:00:02 GMT Date: Wed, 15 May 2024 22:37:19 GMT Connection: close
2024-05-15 22:37:19 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 21 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 04 05 02 03 06 01 00 07 08 09 ff c4 00 4a 10 00 02 01 02 04 04 04 04 03 05 06 05 02 04 06 03 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 71 07 14 32 81 23 91 a1 08 15 Data Ascii: JFIF``CCQX!J!1A"Qaq2#
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 56 fe 67 7e b8 63 5b 2c 94 9a 92 44 31 21 8b 52 4b a9 4f d8 0f 3f 7c 4b cb 85 ce b6 4c 3b 2c dd 56 76 f4 fc d8 74 1b 9b f8 98 03 7b f7 b5 b6 be 16 3b 4f 14 23 54 65 22 71 71 71 75 3f 7e f8 17 d6 73 fc 12 1c e2 eb 81 a2 1a 7c c6 49 dc c5 cb 37 89 6c 65 04 d9 bc 87 4f e5 8a e0 96 30 e5 59 5d 43 b7 f6 9a 76 5f 53 fe 5d 71 50 bf 31 92 13 24 4d ca 9d 49 86 95 ac d3 a4 e0 ed e0 04 fe 78 1a 2a 08 b9 81 20 59 16 2d 24 7c be a2 e9 ff 00 68 3b af d8 e0 1e 18 eb 70 50 21 80 81 79 51 aa 8a 14 89 04 8c ae 9b 59 49 b9 16 38 5c f3 42 26 63 a1 74 8e 8c a3 08 76 50 65 40 91 65 ed 61 ef a4 93 bd ad e9 8b 20 a0 96 b7 9c 62 4b a4 29 ae 56 6d 82 2d fa 9f f7 7c 2c 0c d6 08 9b 25 0b 5f 97 bd 11 52 cb ae 37 fa 26 5f a1 fd bb fe 78 f6 14 e6 96 98 28 f4 4b 92 a8 48 ac 45 d2 35 b7 Data Ascii: Vg~c[,D1!RKO?\|KL;,Vvt{;O#Te"qqqu?~s\|I7leO0Y]Cv_S]qP1$MIx* Y-$\|h;pP!yQYI8\B&ctvPe@ea bK)Vm-\|,%_R7&_x(KHE5
2024-05-15 22:37:19 UTC	2595	IN	Data Raw: b0 04 f4 3d 3a 7a e0 33 5b 96 2e 5e ae 95 57 9d 3c 2d 0c c7 c7 ab ff 00 3d f0 a9 02 e8 89 2e 8c 97 41 b6 75 2c 12 ba 8a 27 9e 99 86 a4 93 60 c0 5b a6 d7 07 7c 46 9e 1a da c8 5e 78 0b a4 85 88 58 2a 3a 01 e4 a7 b0 c2 c1 29 8c a6 d9 26 65 53 15 4e 65 4b 33 99 69 16 34 03 a3 c2 59 7d ee 30 75 3a 09 54 36 b2 2f d5 50 90 9f 61 89 0e 26 c9 a2 93 66 50 55 f0 98 ab 21 97 f8 2c 47 dc 1b ff 00 99 fb 60 4a c8 24 96 4b 47 60 ce 6e be a4 5f 6f eb ff 00 8c 2c a7 77 a1 a2 d1 21 d2 a6 fa 75 28 b0 d9 ba 7f 51 fa e3 d8 51 2b b3 01 aa 57 4f 98 31 a6 24 e9 2c 97 4b f7 bd f6 3f 96 27 06 59 51 11 d6 da 08 b1 b2 86 bb 63 54 02 f8 85 60 58 28 47 57 3c 6d a5 65 60 97 b1 52 76 b6 3a d3 38 95 5a 05 32 b2 36 ad 40 5d 7d 45 fc f7 c7 17 90 39 ae 21 1b f3 d5 74 54 d1 93 03 55 4a cc 4b Data Ascii: =:z3[.^W<-=.Au,'`[\|F^xX*:)&eSNeK3i4Y}0u:T6/Pa&fPU!,G`J$KG`n_o,w!u(QQ+WO1$,K?'YQcT`X(GW<me`Rv:8Z26@]}E9!tTUJK
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 0c c7 90 8b 9f 54 7e 47 c1 75 99 6c 73 b5 7d 5a fc d5 43 92 90 a3 6a 25 48 17 04 f7 37 b9 fb e0 2a 1a 19 32 f9 aa 4d 6d 65 4c ed 23 6a 11 d4 c6 10 c2 07 63 6b fb e1 4c 8a ce 23 48 d6 de fc ee 13 03 32 00 5d b8 11 dd 24 7e 92 2c e7 e2 1e 59 94 bc e9 f3 74 8e 1b 68 96 33 cd 61 e7 a8 03 63 fa 62 3c 21 97 66 1f 12 1f 95 91 f0 5e 69 9a c1 a8 5e 78 a2 11 41 ee 65 fa 54 0f 7c 55 15 98 ca 82 9b 06 63 c9 66 62 f1 94 30 d4 9e ea c7 b3 a1 5f 4d 8b f6 4b e3 35 12 08 26 c8 b9 4f 60 c2 0a aa a9 d9 6f d8 98 a0 b1 f7 07 1a e8 7f 61 de 32 9e 18 24 aa ce b8 7a 3b 01 70 63 aa 76 3e e5 80 37 c6 db eb 3e 9b 46 76 00 4e d3 7f 11 b2 f8 a6 2b f9 56 1a 9d 47 32 98 71 68 de 2c b4 99 4f ec 4f 34 2c 25 af ce b2 7a 8a 81 fd 9b 25 14 cd a4 fb 9e 9d b1 ca 5f d8 cf 3d a1 a9 a8 a8 83 3c Data Ascii: T~Guls}ZCj%H7*2MmeL#jckL#H2]$~,Yth3acb<!f^i^xAeT\|Ucfb0_MK5&O`oa2$z;pcv>7>FvN+VG2qh,OO4,%z%_=<
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: de d8 87 40 b9 0a 45 c2 5f c4 06 5e 39 a8 4e 1f ca 21 8a 79 4d e6 7a b9 e4 48 e2 8d 55 4b 1d 2c c4 78 ac 0e dd 4f 40 0d f0 96 6e 16 a4 4c bd 32 f8 2a 1e 30 1b 5c d2 c8 9f 53 0e c0 76 c2 8b c6 72 d1 f3 e4 20 2e 00 29 41 49 ca e5 d3 53 a2 cd 3b 59 62 86 15 25 9f ed d7 ee 76 c1 f5 f4 af 0e 54 99 6b 48 03 cf 27 32 a4 a1 d9 b4 ff 00 00 3e 43 61 7f 73 86 2a e3 ff 00 65 44 65 54 90 10 2f f8 b1 7d 2c 91 06 6d 61 09 b8 2a 5b a6 c7 a1 f4 38 e0 46 ea 9b 81 3a 27 df 3f 52 f1 4c b4 f9 83 51 d3 cb 18 8d 94 12 84 ae d7 56 23 66 5d 81 eb f6 c7 69 f3 fa 7c b6 94 f3 6b 26 cc 24 b8 b0 42 da 14 8f 33 fe fb e1 f6 2e cc 55 37 07 d4 68 a7 1a 71 db 8c 2c c9 af 9a a9 11 25 45 11 c2 39 71 11 7d 4c b7 bd cd fd 6f 6f 4c 52 cf b1 c5 72 6f 2a e0 6c 58 2a 58 5c 92 ac d1 bd b6 74 36 23 Data Ascii: @E_^9N!yMzHUK,xO@nL20\Svr .)AIS;Yb%vTkH'2>CaseDeT/},ma[8F:'?RLQV#f]i\|k&$B3.U7hq,%E9q}LooLRrolX*X\t6#
2024-05-15 22:37:19 UTC	5904	IN	Data Raw: a3 15 61 62 0d 88 c4 2b 14 8d a1 4e 0a 89 29 db 54 6e 54 ff 00 3c 7b 1c 98 5a 0e ab 54 8e 8e b6 6e 9d 37 c1 11 2c 68 ba 2d a9 7a 91 7e b8 d2 05 26 04 59 5d 0c ba 65 66 67 1a 2d 61 18 16 c7 62 8d 23 5b 2f 7f 3e b8 73 38 a5 3b 82 e8 a5 58 c3 bc a7 46 9f a5 1b f8 b1 6c 73 ca 91 f3 21 8c 46 a4 10 6e 01 07 da f8 30 63 45 d0 bc 2a 75 46 1b 59 d7 7f a0 0b 0b 7b e2 f5 ac bf 5b 8f b6 0d ae 50 ba 6a 49 e9 b0 f2 18 2a 9e a9 2e 2f f5 13 6b f9 61 ac 70 9b a5 b8 5a ca e7 66 99 8e 90 4a ff 00 3c 78 d1 cb cb 69 02 90 aa 2e 49 c5 80 0b ae 15 7b 0b 15 d1 4d 32 c6 cc 7c 00 10 37 3d 6f 8a ea 60 6a 9a 79 62 65 52 24 42 bb 1e 97 be 38 b4 c4 15 20 89 b2 cb a4 5a e1 a5 ab 24 89 24 71 a9 94 02 6e 0a 83 fd 71 0a e4 91 f3 26 44 90 c6 ac 9a 5e 43 fc 20 91 70 3e df cf 19 4e 6f 66 db Data Ascii: ab+N)TnT<{ZTn7,h-z~&Y]efg-ab#[/>s8;XFls!Fn0cEuFY{[PjI./kapZfJ<xi.I{M2\|7=o`jybeR$B8 Z$$qnq&D^C p>Nof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50166	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	604	OUT	GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gtm.you1.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:19 UTC	350	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: application/octet-stream Content-Length: 124048 Connection: close Last-Modified: Tue, 28 Jul 2020 23:16:28 GMT ETag: "5f20b1cc-1e490" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469ca3fe716da3-MIA
2024-05-15 22:37:19 UTC	1019	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 e4 88 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 89 ce b2 88 00 00 01 6c 00 00 75 9a 47 53 55 42 e1 64 c1 db 00 00 77 08 00 00 1b a4 4f 53 2f 32 75 9a 9f 11 00 00 92 ac 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 93 0c 00 00 05 8e 63 76 74 20 47 bc 0a 74 00 01 d4 d0 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d5 98 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 d4 c8 00 00 00 08 67 6c 79 66 35 8e 7d 32 00 00 98 9c 00 01 06 e4 68 65 61 64 17 e9 fb 57 00 01 9f 80 00 00 00 36 68 68 65 61 06 f4 06 76 00 01 9f b8 00 00 00 24 68 6d 74 78 a2 5f 58 e0 00 01 9f dc 00 00 0c e6 6c 6f 63 61 ba 3a 79 56 00 01 ac c4 00 00 06 a6 6d 61 78 70 04 a0 0f 0c 00 01 b3 6c 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSluGSUBdwOS/2u`cmapdcvt Gtfpgm6!gaspglyf5}2headW6hheav$hmtx_Xloca:yVmaxpl nam
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 02 00 01 00 02 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 07 00 10 00 18 00 26 00 3a 00 42 00 4a 00 52 00 01 00 00 00 01 00 4a 00 02 00 08 00 04 00 4c 00 76 00 9c 01 96 00 02 00 08 00 07 01 fc 26 2e 30 7c 36 90 3c d0 3c fe 3f 7e 00 04 00 00 00 01 3f 82 00 06 00 00 00 01 5f 18 Data Ascii: &:BJRJLv&.0\|6<<?~?_
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 06 01 00 00 00 01 08 00 05 01 09 00 36 01 0a 00 36 01 0b 00 36 01 0c 00 36 00 02 01 00 00 00 01 08 00 05 00 06 00 ff 00 05 01 00 00 0f 01 08 00 19 01 bc ff fb 01 bd 00 05 01 c5 00 14 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 Data Ascii: 6666GJNGJNGJN
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 0e 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 0d 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 09 00 0e 01 0a 00 0e 01 0b 00 0e 01 0c 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 06 00 fe 00 0e 01 00 00 0e 01 03 00 13 01 08 00 0e 01 c0 00 0e 01 c5 00 0e 00 06 00 fe 00 0e 01 00 00 0e 01 03 00 13 01 08 00 0e 01 c0 00 0e Data Ascii: GJNGJNGJNGJNGJN
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 0e 01 03 00 13 01 09 00 63 01 0a 00 63 01 0b 00 63 01 0c 00 63 01 67 ff fb 01 68 ff fb 01 69 ff fb 01 6a ff fb 01 6b ff fb 01 6c ff fb 01 6d ff fb 01 6e ff fb 01 6f ff fb 00 01 01 03 00 13 00 01 01 03 00 13 00 02 01 00 00 0e 01 03 00 25 00 01 01 03 00 0e 00 01 01 03 00 0e 00 01 01 03 00 0e 00 05 01 03 00 0e 01 09 00 0e 01 0a 00 0e 01 0b 00 0e 01 0c 00 0e 00 01 01 03 00 0e 00 01 01 03 00 0e 00 07 00 f8 00 0e 00 ff 00 13 01 00 00 09 01 03 00 0e 01 06 00 09 01 08 00 18 01 14 00 1d 00 14 00 bd 00 0e 00 Data Ascii: ccccghijklmno%
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 01 00 2b 01 02 00 2b 01 03 00 0b 01 04 00 2b 01 05 00 2b 01 06 00 1d 01 07 00 2b 01 08 00 36 00 0b 00 f8 00 09 00 fe 00 39 00 ff 00 0b 01 00 00 1f 01 03 00 0b 01 06 00 1d 01 08 00 10 01 09 00 35 01 0a 00 35 01 0b 00 35 01 0c 00 35 00 20 00 d2 00 0e 00 f7 00 0e 00 f8 00 09 00 f9 00 0e 00 fa 00 48 00 fb 00 48 00 fc 00 48 00 fd 00 48 00 fe 00 39 00 ff 00 1e 01 00 00 1f 01 01 00 48 01 02 00 48 01 03 00 43 01 04 00 48 01 05 00 48 01 06 00 2c 01 07 00 48 01 08 00 3f 01 0d 00 0e 01 0e 00 0e 01 0f 00 0e 01 10 00 0e 01 11 00 0e 01 12 00 0e 01 13 00 0e 01 14 00 0e 01 36 00 0e 01 42 00 0e 02 a6 00 17 02 aa 00 0e 02 ae 00 13 00 01 01 08 00 0e 00 01 01 08 00 0e 00 01 01 08 00 0e 00 01 01 08 00 0e 00 01 01 1c ff d9 00 01 01 1c ff d9 00 07 00 f8 00 0e 00 ff 00 13 01 00 Data Ascii: +++++695555 HHHH9HHCHH,H?6B
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 01 c0 00 09 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 40 01 76 00 00 01 8f 00 00 01 96 00 00 01 97 00 00 01 98 00 00 01 99 00 00 01 9a 00 00 01 9b 00 00 01 9c 00 00 01 9d 00 00 01 9e 00 00 01 9f 00 00 01 a0 00 00 01 a1 00 00 01 a2 00 00 01 a3 00 00 01 a4 00 00 01 a5 00 00 01 a6 00 00 01 a7 00 00 01 a8 00 00 01 a9 00 00 01 aa 00 00 01 ab 00 00 01 ad 00 00 01 b4 00 00 01 b5 00 00 01 b6 00 00 01 b7 00 00 01 b8 00 00 01 b9 00 00 01 ba 00 00 01 bb 00 17 01 bc 00 Data Ascii: !!!!!@v
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: c4 00 00 01 c5 00 13 01 ca 00 00 01 cb 00 00 01 cc 00 00 01 cd 00 00 01 ce 00 00 01 cf 00 00 01 d0 00 00 01 d1 00 00 01 d2 00 00 01 d3 00 00 01 d4 00 00 01 d5 00 00 01 d6 00 00 01 d7 00 00 01 d8 00 00 01 f2 00 00 01 f3 00 00 01 f5 00 00 01 f6 00 00 01 f7 00 00 01 f8 00 00 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 40 01 76 00 17 01 8f 00 17 01 96 00 17 01 97 00 17 01 98 00 17 01 99 00 17 01 9a 00 17 01 9b 00 17 01 9c 00 17 01 9d 00 17 01 9e 00 17 01 9f 00 17 01 a0 00 17 01 a1 00 17 01 a2 00 17 01 a3 00 17 01 a4 00 17 01 a5 00 17 01 a6 00 17 01 a7 00 17 01 a8 00 17 01 a9 00 17 01 aa 00 17 01 ab 00 17 01 ad 00 17 01 b4 00 17 01 b5 00 17 01 b6 00 17 01 b7 00 17 01 b8 00 17 01 b9 00 17 01 ba 00 17 01 bb 00 22 01 bc 00 0e Data Ascii: %@v"
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 05 01 bc 00 39 01 bd 00 2f 01 c0 00 Data Ascii: %%%%%%!9/
2024-05-15 22:37:19 UTC	1369	IN	Data Raw: ed ff cb ff e3 ff d4 ff e2 00 0b 00 0e ff f6 ff f7 00 00 00 0e ff f5 ff ed 00 00 00 00 ff fb 00 09 00 00 00 00 00 05 00 09 00 00 00 09 00 00 ff f6 ff b9 ff fb 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e0 ff 91 ff f0 ff ba ff ca ff 9c 00 00 00 00 00 00 00 1f 00 00 ff c4 ff f2 ff be ff f5 ff c4 ff c9 ff d9 ff c4 00 14 00 0f 00 05 ff fb 00 00 00 00 00 00 ff f0 00 00 ff b5 00 00 00 05 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c0 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fe ff dd 00 00 ff e1 ff f7 ff d3 ff fb 00 00 00 17 ff e7 ff fc ff eb 00 05 00 00 00 00 00 00 00 00 00 00 00 00 ff db ff dd ff fb 00 05 00 00 ff fb 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50167	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	605	OUT	GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gtm.you1.cn sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:20 UTC	350	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: application/octet-stream Content-Length: 122684 Connection: close Last-Modified: Tue, 28 Jul 2020 23:16:28 GMT ETag: "5f20b1cc-1df3c" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469ca40ef00351-MIA
2024-05-15 22:37:20 UTC	1019	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 df 34 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 3a 3e 7d 8f 00 00 01 6c 00 00 75 7a 47 53 55 42 e1 64 c1 db 00 00 76 e8 00 00 1b a4 4f 53 2f 32 75 36 9e 08 00 00 92 8c 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 92 ec 00 00 05 8e 63 76 74 20 46 bf 09 94 00 01 cf 7c 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d0 44 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 cf 74 00 00 00 08 67 6c 79 66 8a 5f 6d c2 00 00 98 7c 00 01 01 ee 68 65 61 64 17 b4 fb 48 00 01 9a 6c 00 00 00 36 68 68 65 61 06 bf 06 47 00 01 9a a4 00 00 00 24 68 6d 74 78 86 e3 6c 96 00 01 9a c8 00 00 0c e6 6c 6f 63 61 43 48 02 9a 00 01 a7 b0 00 00 06 a6 6d 61 78 70 04 a0 0f 13 00 01 ae 58 00 00 00 20 6e 61 6d Data Ascii: DSIG4GDEF4,@GPOS:>}luzGSUBdvOS/2u6`cmapdcvt F\|fpgm6!Dgasptglyf_m\|headHl6hheaG$hmtxllocaCHmaxpX nam
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 02 00 01 00 02 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 07 00 10 00 18 00 26 00 3a 00 42 00 4a 00 52 00 01 00 00 00 01 00 4a 00 02 00 08 00 04 00 4c 00 76 00 9a 01 94 00 02 00 08 00 07 01 fa 26 2c 30 7a 36 8e 3c ce 3c fc 3f 7c 00 04 00 00 00 01 3f 80 00 06 00 00 00 01 5f 10 Data Ascii: &:BJRJLv&,0z6<<?\|?_
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 06 01 00 00 00 01 08 00 02 01 09 00 2f 01 0a 00 2f 01 0b 00 2f 01 0c 00 2f 00 02 01 00 00 00 01 08 00 02 00 06 00 ff 00 02 01 00 00 12 01 08 00 16 01 bc ff fe 01 bd 00 02 01 c5 00 14 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 Data Ascii: ////GJNGJNGJN
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 0d 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 09 00 07 01 0a 00 07 01 0b 00 07 01 0c 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 06 00 fe 00 07 01 00 00 07 01 03 00 09 01 08 00 07 01 c0 00 07 01 c5 00 07 00 06 00 fe 00 07 01 00 00 07 01 03 00 09 01 08 00 07 01 c0 00 07 01 c5 Data Ascii: GJNGJNGJNGJNGJN
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 0e 01 03 00 09 01 09 00 59 01 0a 00 59 01 0b 00 59 01 0c 00 59 01 67 ff f8 01 68 ff f8 01 69 ff f8 01 6a ff f8 01 6b ff f8 01 6c ff f8 01 6d ff f8 01 6e ff f8 01 6f ff f8 00 01 01 03 00 09 00 01 01 03 00 09 00 02 01 00 00 07 01 03 00 13 00 01 01 03 00 07 00 01 01 03 00 07 00 01 01 03 00 07 00 05 01 03 00 07 01 09 00 07 01 0a 00 07 01 0b 00 07 01 0c 00 07 00 01 01 03 00 07 00 01 01 03 00 07 00 07 00 f8 00 07 00 ff 00 09 01 00 00 05 01 03 00 07 01 06 00 05 01 08 00 11 01 14 00 19 00 14 00 bd 00 07 00 be 00 Data Ascii: YYYYghijklmno
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 20 01 02 00 20 01 03 00 0f 01 04 00 20 01 05 00 20 01 06 00 19 01 07 00 20 01 08 00 2f 00 0b 00 f8 00 05 00 fe 00 27 00 ff 00 0f 01 00 00 23 01 03 00 0f 01 06 00 19 01 08 00 17 01 09 00 2a 01 0a 00 2a 01 0b 00 2a 01 0c 00 2a 00 20 00 d2 00 07 00 f7 00 07 00 f8 00 05 00 f9 00 07 00 fa 00 33 00 fb 00 33 00 fc 00 33 00 fd 00 33 00 fe 00 27 00 ff 00 1e 01 00 00 23 01 01 00 33 01 02 00 33 01 03 00 31 01 04 00 33 01 05 00 33 01 06 00 25 01 07 00 33 01 08 00 34 01 0d 00 07 01 0e 00 07 01 0f 00 07 01 10 00 07 01 11 00 07 01 12 00 07 01 13 00 07 01 14 00 07 01 36 00 07 01 42 00 07 02 a6 00 0c 02 aa 00 07 02 ae 00 09 00 01 01 08 00 07 00 01 01 08 00 07 00 01 01 08 00 07 00 01 01 08 00 07 00 01 01 1c ff e3 00 01 01 1c ff e3 00 07 00 f8 00 07 00 ff 00 09 01 00 00 05 Data Ascii: /'#**** 3333'#33133%346B
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 00 05 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 40 01 76 00 00 01 8f 00 00 01 96 00 00 01 97 00 00 01 98 00 00 01 99 00 00 01 9a 00 00 01 9b 00 00 01 9c 00 00 01 9d 00 00 01 9e 00 00 01 9f 00 00 01 a0 00 00 01 a1 00 00 01 a2 00 00 01 a3 00 00 01 a4 00 00 01 a5 00 00 01 a6 00 00 01 a7 00 00 01 a8 00 00 01 a9 00 00 01 aa 00 00 01 ab 00 00 01 ad 00 00 01 b4 00 00 01 b5 00 00 01 b6 00 00 01 b7 00 00 01 b8 00 00 01 b9 00 00 01 ba 00 00 01 bb 00 0c 01 bc 00 00 01 Data Ascii: @v
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 00 01 c5 00 09 01 ca 00 00 01 cb 00 00 01 cc 00 00 01 cd 00 00 01 ce 00 00 01 cf 00 00 01 d0 00 00 01 d1 00 00 01 d2 00 00 01 d3 00 00 01 d4 00 00 01 d5 00 00 01 d6 00 00 01 d7 00 00 01 d8 00 00 01 f2 00 00 01 f3 00 00 01 f5 00 00 01 f6 00 00 01 f7 00 00 01 f8 00 00 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 40 01 76 00 0c 01 8f 00 0c 01 96 00 0c 01 97 00 0c 01 98 00 0c 01 99 00 0c 01 9a 00 0c 01 9b 00 0c 01 9c 00 0c 01 9d 00 0c 01 9e 00 0c 01 9f 00 0c 01 a0 00 0c 01 a1 00 0c 01 a2 00 0c 01 a3 00 0c 01 a4 00 0c 01 a5 00 0c 01 a6 00 0c 01 a7 00 0c 01 a8 00 0c 01 a9 00 0c 01 aa 00 0c 01 ab 00 0c 01 ad 00 0c 01 b4 00 0c 01 b5 00 0c 01 b6 00 0c 01 b7 00 0c 01 b8 00 0c 01 b9 00 0c 01 ba 00 0c 01 bb 00 1b 01 bc 00 07 01 bd Data Ascii: @v
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 05 01 bc 00 27 01 bd 00 18 01 c0 00 09 01 Data Ascii: '
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: d6 ff e7 ff db ff e2 00 0f 00 07 ff f6 ff fb 00 00 00 07 ff f1 ff f1 00 00 00 00 ff fe 00 05 00 00 00 00 00 02 00 05 00 00 00 05 00 00 ff f6 ff b5 ff f8 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff d2 ff 8d ff e9 ff ba ff cc ff 9c 00 00 00 00 00 00 00 23 00 00 ff c4 ff f9 ff b7 ff f1 ff c4 ff cc ff dd ff c4 00 14 00 0c 00 02 ff fe 00 00 00 00 00 00 ff e9 00 00 ff b8 00 00 00 02 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c7 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff da 00 00 ff e0 ff fb ff d0 ff f8 00 00 00 0c ff ea ff fe ff e1 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ff de ff da ff fe 00 02 00 00 ff fe 00 00 00 00 00 00 00 00 Data Ascii: #

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50165	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	655	OUT	GET /steam/apps/1145350/ss_f28befd916e59b8bf0a8a801b8a498b8adaa01eb.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:19 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 83704 Last-Modified: Tue, 30 Apr 2024 04:31:30 GMT ETag: "66307422-146f8" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=350515 Expires: Sun, 19 May 2024 23:59:14 GMT Date: Wed, 15 May 2024 22:37:19 GMT Connection: close
2024-05-15 22:37:19 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 00 02 07 01 08 09 ff c4 00 56 10 00 02 01 03 03 02 04 03 04 07 04 06 06 08 01 0d 01 02 03 04 05 11 00 12 21 06 31 07 13 41 51 22 61 71 14 32 81 91 08 15 23 42 Data Ascii: JFIFCCQXV!1AQ"aq2#B
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 24 20 8f 23 19 29 dc 85 04 87 ce 33 9f 8b d3 42 d8 2a c9 61 94 d3 d4 f9 d2 12 db 4f c7 b1 48 1c 1e 09 f9 f7 e7 52 4d 6c 39 52 59 e9 62 91 2a 62 2c 77 9c a9 0d c1 07 fe 07 56 a5 6c 42 e8 b3 1b 84 2c ce a4 4c 80 b0 94 e3 e2 5c fa 8f 5e fc 63 4d b3 2a 6f 48 87 78 b6 c8 d7 2a 96 8e 4a 77 5d d8 f8 65 1e 9c 72 3d 35 5e 96 c7 4f 60 af 4b 51 32 54 42 b3 4b 1c 63 cd 0c 70 77 1c 71 e8 3e 9a 94 ab 91 25 c0 e5 7f 9a 22 09 24 e1 9b 3d bb 0e 7b ea f9 49 2e 4c c9 00 fe c3 4f 51 5f 01 78 84 af e7 46 b1 3f 98 47 94 e1 81 df c7 7c 73 c1 d5 12 7e 6b b0 b7 d9 d0 ec dd 12 f5 aa 8d 1f 96 86 60 cc 42 b6 3d 4f 38 e7 1f 86 b4 69 b7 42 eb 13 1f a7 a3 6a 59 29 d8 6d f2 ea a4 75 65 24 f3 9e ff 00 3f 5c 8d 2a 8a 94 68 67 26 9d 8b 31 52 4f 0f 31 fc 69 21 07 91 dc 7c bd bf 1f 6d 62 57 Data Ascii: $ #)3BaOHRMl9RYbb,wVlB,L\^cMoHxJw]er=5^O`KQ2TBKcpwq>%"$={I.LOQ_xF?G\|s~k`B=O8iBjY)mue$?\*hg&1RO1i!\|mbW
2024-05-15 22:37:19 UTC	2414	IN	Data Raw: ad 01 bc 45 a9 b4 8b ac 2f 6c 49 e9 aa 62 d9 e6 c7 e5 f9 51 30 1c a9 03 df b0 ed 83 a6 4f d4 cf a3 54 5c 5f 70 bd 92 bd ba e2 b5 6a a9 a9 16 b2 9a 91 08 29 56 a1 12 32 df 74 64 12 72 02 fa 03 9c 9e da 49 ba e4 a3 a7 c1 2c 32 72 72 dd ed b1 7a e7 d2 d6 fa d9 49 9a 99 12 4f ef 42 4a 7f 2d 66 d4 76 61 39 25 b3 16 ee 7e 1b d2 32 9f 26 ae 68 cb 1c e2 45 0f 8f e5 a5 bb 2c f1 65 5b 83 2a 3c 39 ae 58 1d 63 ad 8e 70 c3 1b 1c b2 67 e5 eb aa 35 45 12 9b 6b 74 73 8a fe 9e 9a 8a 8d ea be cd 37 90 af e5 97 74 f8 01 c9 18 dd f5 1a b1 4a f6 33 ce 30 4a e2 05 56 87 ed 31 13 f0 10 ea 73 e9 df 56 2b b1 60 92 69 8c 35 51 94 91 2a 93 e2 11 90 1b 6f 3f 0f af e5 c1 d6 88 4a 9d 9b f2 2b 88 8d 51 00 96 a6 77 40 0a 34 8c 46 3d b2 75 5b 7b b3 12 dc 74 e8 26 b7 2d fe c7 2d d9 52 4a Data Ascii: E/lIbQ0OT\_pj)V2tdrI,2rrzIOBJ-fva9%~2&hE,e[<9Xcpg5Ekts7tJ30JV1sV+`i5Qo?J+Qw@4F=u[{t&--RJ
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 86 aa 90 45 e4 34 4a 30 cb 20 c2 f2 49 ca 7e 7d f5 96 b6 2a 9b 46 35 25 4c 54 fb 1c 70 cd c4 40 fc 59 fa 7e 1a 12 28 b4 0d a7 a8 79 16 58 dc 7d d7 24 1c 7c cf 1f c3 42 b7 c9 7c 78 32 eb 12 cb 6e 92 22 5c 19 00 00 c6 70 c0 e7 39 ce 9e 5c 16 26 d1 b5 0d 43 4a af 1c 84 19 62 da 0b 0e ce 08 c8 61 f5 1e 9e f9 d6 56 a8 d9 09 6a 56 5b 8c 65 c6 a0 b1 16 7c b2 d3 44 d8 fb bb bf 88 d2 96 ad cc 79 02 02 73 a1 12 dd 15 49 dc 49 f7 d3 14 dd 96 6d d6 f6 ea 04 af 43 70 a7 b4 db 68 d3 fd 72 e1 50 fb 42 93 da 34 f5 2e 40 3d bb 0f 9e 97 b9 3a b6 39 8d 2d 05 24 54 2f 57 22 13 0b 33 b8 1c e4 28 63 8f e1 aa 33 4a 69 a5 17 c8 62 d2 ed c9 70 41 4f 5e f4 e6 45 88 ae c1 23 ed c8 f4 dc 71 ad 58 d5 c1 59 8b 2a 5a dd 1b 1b b5 50 56 45 94 a2 b7 7d a3 19 d5 94 8a ca a2 a6 55 42 82 46 Data Ascii: E4J0 I~}F5%LTp@Y~(yX}$\|B\|x2n"\p9\&CJbaVjV[e\|DysIImCphrPB4.@=:9-$T/W"3(c3JibpAO^E#qXYZPVE}UBF
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: e3 24 70 0f 3e fc f3 a4 8a d5 2a 2b 93 71 4d fa 06 ba 9f a0 2f 36 eb 2d 5a c2 bf ac 27 ca 32 35 3e 77 aa 73 bb 8e fe dc 73 ab 5e 27 19 57 22 c3 32 71 b7 b0 1b a1 2e 70 dd 6e 74 d6 eb 8b 18 67 dd b5 5f 18 2e 47 60 73 eb a4 69 5d b3 4f 89 2d 0d 23 a8 43 e1 b5 2d 3d ce 9a e7 47 59 3c 15 91 c9 e6 11 26 1d 1b 24 ee 53 d8 e0 82 46 b5 e3 c4 a2 93 39 d2 ce dd c5 f0 13 bd 58 92 39 84 b0 40 1c 54 65 64 8d 7f 79 80 c8 c7 cc 8c f1 eb 8d 4c f1 de e8 9c 39 f4 f9 64 28 d0 5a e5 6a 99 a9 a9 a2 6a 88 70 1d 5b b0 50 73 dc 9e dd 8f e4 75 95 63 6d b4 8e 94 b3 46 31 d4 d8 89 e2 65 3d 4d ae f9 63 49 82 ae d7 f3 40 8d f7 7e f8 1e df 2d 12 83 87 22 2c ab 2e e8 e7 95 15 7f 60 b9 d4 4d 4e 4f da 04 af 87 c7 08 77 1e 47 b9 c7 ae ab 1c 6e f0 d2 d7 26 2a ae 32 e7 f6 9f b3 8c 9e ed ce Data Ascii: $p>+qM/6-Z'25>wss^'W"2q.pntg_.G`si]O-#C-=GY<&$SF9X9@TedyL9d(Zjjp[PsucmF1e=McI@~-",.`MNOwGn&2
2024-05-15 22:37:19 UTC	7952	IN	Data Raw: 6e 1f 26 18 23 e4 46 ba f2 8d 3a 3a 78 ba a8 e7 c5 1c b0 e1 ab 24 8e be 2b 74 8d 14 10 23 a8 f8 5a 49 c6 4b 9f e8 35 1c 0c a3 af 76 cb 94 d7 2a 76 93 0d 46 aa 4f 23 ca 90 8f ae a0 6d 32 5d ce 3d 76 0a 97 6a e0 a0 85 13 be 01 f4 f8 8e b4 2e 0e 5c 95 49 9d 47 c0 fb 45 f2 ad aa 63 a4 a7 99 a8 ef 0e 2d 50 b7 db 45 2c 66 a1 be 30 c4 94 72 ca 81 0b 30 00 70 3b eb 46 38 cb 4b 92 e3 8f c4 c7 9a 50 4d 27 ca dc 58 96 b6 b2 f3 14 75 15 0c 58 ed 2e 81 98 92 40 0a 49 c6 3b e1 87 e4 75 51 7a 49 1a 29 f8 07 d3 50 39 a3 3c 88 8e d1 33 24 9b 4e d6 46 2a 41 c1 ec 46 99 01 f4 bd ef c6 6b 02 75 57 89 77 0a 7b 95 be ed 0d ca 83 a7 a9 e8 62 b8 d2 9a a8 27 30 b5 30 a9 02 39 14 ae 50 24 87 24 7a 64 64 e3 50 48 5e a7 a8 bc 11 a7 a8 a7 82 db 49 d3 92 59 85 e5 be d3 f6 c1 20 a9 0b Data Ascii: n&#F::x$+t#ZIK5vvFO#m2]=vj.\IGEc-PE,f0r0p;F8KPM'XuX.@I;uQzI)P9<3$NFAFkuWw{b'009P$$zddPH^IY
2024-05-15 22:37:19 UTC	8144	IN	Data Raw: 40 80 3b e1 b8 e3 23 9d 53 38 c7 22 a6 2e a4 76 5b 5f 58 dd 7a d1 43 dc e9 2a 29 a4 08 0f c6 36 22 67 f7 40 e0 83 f3 c7 e3 ac fa 14 36 40 9d 80 fa a7 c3 78 3a 96 eb 0d 73 5c ae 34 75 51 a0 8c 34 12 e3 09 fd d1 9e de fa 75 3a 54 48 b5 d5 fe 18 df 6e f6 e3 4e 9d 42 f7 24 89 b7 c7 0d c2 30 18 10 31 81 20 ed c7 e0 74 f0 c9 15 d8 8a 00 9b 14 cd 6c 86 e2 88 56 96 69 1a 15 76 23 05 d4 02 cb ef c0 65 f4 f5 d7 49 49 37 a7 b9 9f 4b 51 d4 f8 07 b4 4c ae ea 3e 22 bd f1 a7 20 89 d1 64 46 46 01 95 86 08 3c 83 a8 24 19 6f b0 d2 d1 d5 4b 20 3e 63 06 f8 15 bf 73 48 a2 93 1b 55 a0 8b 44 8d 20 dc 14 b2 fd dc 8e 7e 7a 71 77 37 f3 3c a3 b8 1c 11 ed a8 94 e9 5b 1e 18 de 47 48 86 1a a5 ae ae 78 4b 31 72 77 14 45 cf f1 ec 38 d6 45 79 1e ec d6 eb 04 7c a5 f8 4d 5c c8 e9 43 4c c1 Data Ascii: @;#S8".v[_XzC*)6"g@6@x:s\4uQ4u:THnNB$01 tlViv#eII7KQL>" dFF<$oK >csHUD ~zqw7<[GHxK1rwE8Ey\|M\CL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50168	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	424	OUT	GET /steam/apps/1145350/ss_b88cb7b48a86f07a7288bf37141f6558279f9bfc.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:19 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 114090 Last-Modified: Wed, 01 May 2024 04:26:38 GMT ETag: "6631c47e-1bdaa" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=350539 Expires: Sun, 19 May 2024 23:59:38 GMT Date: Wed, 15 May 2024 22:37:19 GMT Connection: close
2024-05-15 22:37:19 UTC	16041	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 01 02 08 00 09 ff c4 00 51 10 00 02 01 03 03 02 04 04 03 05 03 08 07 06 04 07 01 02 03 04 05 11 00 12 21 06 31 07 13 41 51 14 22 61 71 08 32 81 15 23 42 91 Data Ascii: JFIFCCQXQ!1AQ"aq2#B
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 58 6d ab ae 29 78 ce 32 d6 c0 1d bd 3e fd 50 1b b5 b2 1b f5 5c f3 5d a0 64 af 91 83 cd f0 e7 72 c8 db 39 23 ea 40 c9 f7 e7 59 97 35 45 7a 86 a6 98 26 27 9e 63 27 df 74 c1 48 64 bc c9 5a c7 63 b4 5d 62 12 40 13 0a 42 f9 6a 0a af 1d 94 af d7 db 23 be 74 81 05 1f 86 c7 e5 1a b2 f5 74 dd 21 d5 d6 fb ad ba a6 1a 1b 85 a2 a6 1a ba 79 d8 95 0b 22 30 61 9c 0e dc 15 f6 c1 3a 63 5e 58 e0 42 7b 2a 78 75 03 87 2f bf f0 9b 75 77 c7 75 a5 6d ca ab cb 9a e9 76 b9 d7 cb 5b b6 08 9a 46 92 69 25 32 10 80 72 7f 33 63 03 b0 d4 39 da 89 55 ab e9 d2 e7 6d cd 59 b6 ff 00 c2 3f 59 c5 d2 96 f6 b9 51 c9 4d d5 d5 d2 6f b4 f4 c2 05 6a f9 20 01 98 c8 fb 5b 31 64 80 ab 1b 61 8e f0 71 81 8d 13 9a 18 3c c7 3d 3b 75 51 46 93 2b db 97 93 30 a6 b6 7b 85 5f 82 be 1a f5 3d c6 65 99 fa fa e7 Data Ascii: Xm)x2>P\]dr9#@Y5Ez&'c'tHdZc]b@Bj#tt!y"0a:c^XB{*xu/uwumv[Fi%2r3c9UmY?YQMoj [1daq<=;uQF+0{_=e
2024-05-15 22:37:19 UTC	2273	IN	Data Raw: 27 2c 73 b7 3e bd b5 79 a1 9a 22 4c ae 1c 22 c2 b5 10 f3 4c 13 dd 03 e8 3f c1 2f 49 f5 af 4c df 69 a5 b9 d7 47 72 aa 93 75 55 e8 a6 fa a9 24 69 bc d6 ff 00 48 48 1d b0 38 07 18 ef eb 91 59 82 96 23 75 52 8f 06 a7 74 e2 67 4b 5b b0 01 75 ad 93 a6 ad bd 21 66 a2 b3 58 e8 a9 e9 29 29 63 58 62 8d 22 50 00 03 e9 8e 4e 32 4f be 81 99 cb 97 a2 65 b5 2a 2d d1 40 01 ec 11 78 63 95 17 e6 9c ae 0e ed a1 40 18 f5 18 d0 92 d3 b0 4f 68 78 6e 5d 1e df b6 52 b5 55 b0 5b a9 9a 7a 99 04 48 38 c9 f5 3e c3 42 c6 3a a3 b4 b0 49 53 73 77 46 c6 89 af 72 ed 20 7d c0 51 4b 77 53 2d 65 fb ca 40 eb 23 30 ca e7 23 04 ff 00 bb 57 df 4c 35 85 87 90 5e 06 cf 8c 1b 9b f0 e6 c8 2e 76 d3 23 3f e3 9a 84 f8 dd 54 8f 74 a6 a7 2f 6c ad 81 46 fa 8a 2b 82 46 e1 53 d5 be 6e 40 fa 8e da 8b 76 d3 Data Ascii: ',s>y"L"L?/ILiGruU$iHH8Y#uRtgK[u!fX))cXb"PN2Oe*-@xc@Ohxn]RU[zH8>B:ISswFr }QKwS-e@#0#WL5^.v#?Tt/lF+FSn@v
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: a4 23 03 0b c1 00 67 2d 91 8e 7d c7 d7 58 15 68 b8 e5 5d 65 cd 30 60 29 15 9f c4 ba 0e a7 b6 54 c9 45 14 91 42 91 c4 04 b5 91 34 51 ca 49 22 45 89 9b 87 20 13 92 3e 53 cf 3a bd 6b c0 ae ee 5b ac 0d 2c ea 7f 8d fe 5d 92 6e 78 bd a5 ad 37 55 a8 ec 37 27 ef 9f b2 8a 5f ff 00 1a 7e 18 f4 25 35 5c 12 f5 15 3d 7d 64 24 22 53 d0 83 22 f0 e4 77 50 70 38 03 27 df 4d ff 00 82 be dd c1 b5 6b 31 a3 d6 4f c0 49 ed 09 35 b8 ad b7 f6 4b bd 01 e7 ca 4c 7b aa 53 aa 7f 11 d6 8b e4 b7 3b f5 ae d7 d4 f4 77 7a aa a5 12 43 05 1c c1 65 8b cb f9 5f 69 5c 70 c3 04 f1 9c 83 cf 3a f6 3c 32 ad 0b 76 36 8b 1c e7 06 b7 25 ad 27 32 73 07 61 1e cb 16 bf 10 aa d9 7b 5b a4 93 b1 e9 1f ca 4f a7 fc 60 af f1 6c 54 f4 e2 d3 5d a9 44 54 8d 25 4b 5c 8c b4 6a 61 2d b4 80 ca 09 c1 3c 6d 52 3d 73 Data Ascii: #g-}Xh]e0`)TEB4QI"E >S:k[,]nx7U7'_~%5\=}d$"S"wPp8'Mk1OI5KL{S;wzCe_i\p:<2v6%'2sa{[O`lT]DT%K\ja-<mR=s
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 80 e4 d3 c8 c8 a1 4b 1e 5a 3c 00 4f ef 06 38 1a 5d 56 36 c6 a6 a7 3a 58 fe 67 b6 e3 f8 f5 2a e5 6b aa b5 74 d3 ac e9 0c c0 9e 41 72 c5 f3 a6 ba 8e 3a d5 a7 9a cd 58 d3 4d 86 84 24 26 42 e8 49 db f9 41 00 e3 d3 df 3a f9 eb 88 d4 4c e1 53 73 5c 71 09 cd be d1 d6 1e 1f ec be 8e 9e b8 d0 88 d8 08 eb 64 a4 91 36 f3 f3 05 7e 36 ee 5d cb 9f 62 74 74 2e 3c 2a 81 ec 39 08 0d 37 b4 64 2b e2 f9 7e 49 2d bd 3b 37 4e d4 d7 5d 29 6e f5 82 aa 82 69 2a 0c df 0e e1 58 4d 06 5f 25 07 96 cf c3 1e 36 91 dc 0d 7a ce 27 56 9b ac f5 03 20 90 41 99 f6 f8 2e 6b 72 21 5d fe 1e d8 64 7b 4d 35 75 64 3e 75 44 d1 24 8f 06 dc 46 ae 39 c8 c9 39 e4 7b e3 5e 3a 8d 40 e9 20 e1 6b 31 90 25 2d d4 14 f0 dc 2a e4 96 aa 52 27 19 0e 33 b9 7e a0 a9 e3 56 35 29 7d 3d 5b a8 3f 50 50 43 e5 ac d4 68 Data Ascii: KZ<O8]V6:XgktAr:XM$&BIA:LSs\qd6~6]btt.<97d+~I-;7N])niXM_%6z'V A.kr!]d{M5ud>uD$F99{^:@ k1%-R'3~V5)}=[?PPCh
2024-05-15 22:37:19 UTC	7952	IN	Data Raw: b8 c0 c6 b9 48 d9 6d e7 15 3f 9c 8e 07 d7 51 0a 75 c7 34 bd 3d 4f 96 ad b9 77 1f 75 f5 d0 c2 73 1f 00 ca 75 05 56 7e 68 d8 a3 0f 41 dc 68 48 4f 6d 40 44 b7 0b 30 54 96 94 ba 92 18 77 3e ff 00 7d 74 61 43 5d 26 42 59 52 27 59 63 62 76 48 41 f9 fb 02 0e 46 7d c6 87 21 10 6b 4c 83 b1 5a bc 65 78 38 20 fa 83 90 75 c8 a1 7a 02 c9 32 1f 35 b6 64 6e 57 f9 97 1e bd f9 d7 72 42 d1 06 41 4b 54 4a aa f2 24 0c 44 4d c9 1e fa 80 3a a6 38 89 21 bb 24 77 68 92 e1 67 d7 5c a1 7b b0 d7 29 52 1e 8d 19 9a ab b7 e4 1c 7a f7 3a 12 84 ec ad fb 05 59 a2 9a 08 d9 d4 3b 53 a1 50 d8 e4 f3 9f bf a6 a8 54 ca d1 bc 05 a2 8c 7f d2 3f 74 52 b2 ae 38 cf 92 b4 4a b1 ca 32 40 ec c7 dd 48 ed f6 d2 80 9e 6b 38 93 09 b2 c4 c9 09 54 f9 b2 41 19 fc c3 4c d3 26 54 08 52 6a 2a b3 fb 3a 23 2b 31 Data Ascii: Hm?Qu4=OwusuV~hAhHOm@D0Tw>}taC]&BYR'YcbvHAF}!kLZex8 uz25dnWrBAKTJ$DM:8!$whg\{)Rz:Y;SPT?tR8J2@Hk8TAL&TRj*:#+1
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 0e 7b 1c 60 f7 e2 01 99 0a 4b 36 32 8f 74 e5 0d 96 a2 79 1a 4a 86 a8 ba b8 24 52 55 48 be 77 3e a1 7b 91 c9 e7 b6 a1 c4 a3 6e 99 ee 98 75 87 4c 53 da d6 19 a2 42 1a 57 2a cb 19 f9 41 c6 75 c1 c5 73 9a 37 51 9a 6a 4f 88 ac 8e 18 d0 6f 91 95 37 7a 0c 9c 02 7e 83 3a 20 ec 28 03 92 3d 43 e1 c5 44 d2 48 d7 49 5a d9 4d 14 bb 59 88 c9 72 09 0c a3 db 18 3c e8 4d 48 db 2a 3c 3f fa b0 9c da fc 3b a5 b8 5c 1d 69 a9 ee 2f 42 1b 22 be ad c4 49 8e 7f 22 63 2f e9 cf 03 be 87 c5 21 43 59 27 0a 63 6a f0 0b a5 ea a4 15 b5 26 7a e7 d8 ca 04 d2 fc 88 1d 71 b9 47 60 c0 9c 8f d3 db 50 2b be 30 ad b2 d5 8e f3 1c a8 4f 59 7e 1e ba 76 eb 77 96 d9 1e 2c 8b 15 5a 83 59 4e 16 46 06 48 54 85 71 9c ed dc 8c 47 b1 6f 6d 31 b5 9d 1a b7 55 6a 5a b1 ee d3 b2 15 76 f0 9a a3 c2 e5 a7 b4 c1 Data Ascii: {`K62tyJ$RUHw>{nuLSBWAus7QjOo7z~: (=CDHIZMYr<MH<?;\i/B"I"c/!CY'cj&zqG`P+0OY~vw,ZYNFHTqGom1UjZv
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 34 c8 52 32 08 0c bc 01 a1 6d 9d 5a b4 c3 da c1 9f bf 8a 45 5b c7 da 55 7c 57 2f 1c 83 72 04 72 f3 6e 3d 0a bc 3c 0f eb 5a b6 b6 c3 64 ea 6e ad 86 fb 7e 97 32 d3 9a 86 86 3a a9 23 c6 76 94 45 4c e0 76 25 41 23 be ab dc 50 f0 b3 0a ef 02 e2 d5 38 8b aa 07 19 03 6f dc 1e 87 dd 4f af d7 2f d8 14 75 57 0a 9a b9 3e 16 35 c9 4f 6f a0 c0 c9 d1 5b 52 fc cb 9b 49 8d 12 56 ad ed 77 db 34 d4 73 bc bf 05 18 a6 ea ca 1b 94 c8 16 b6 37 69 79 00 c8 8f e5 e3 fb 40 1e ff 00 af 1f 7d 6a ba ce a5 20 65 bb 76 39 5e 56 b5 5a 4e 89 ad 2e 3c 8c 63 d8 90 49 f4 db d5 73 9f 8f 1e 17 f5 4d c7 c5 6b c5 ef a5 ee 74 a6 ba b2 9e 9a e1 45 f1 13 bc 4f 1c d1 01 19 a6 55 da 54 ee 2a 24 57 38 03 69 53 df 3a 45 2a 35 bc 3d 6d 18 18 58 7c 53 83 d2 be b9 fc cb 5d 2e 30 47 af 41 8e d8 f8 2b 9f Data Ascii: 4R2mZE[U\|W/rrn=<Zdn~2:#vELv%A#P8oO/uW>5Oo[RIVw4s7iy@}j ev9^VZN.<cIsMktEOUT$W8iS:E5=mX\|S].0GA+
2024-05-15 22:37:19 UTC	5904	IN	Data Raw: 13 db 77 6d 37 49 68 1a 92 9c f6 17 38 b3 62 a1 d7 09 cd c8 bb c8 ca 24 6c 48 1b cd df b0 05 e4 01 e9 93 ce ac b0 e9 38 f4 55 4c 14 1a 2b 89 5e 09 72 01 e0 07 20 6a e6 84 80 e0 b6 4a de 5b e7 18 03 3c 9e ff 00 41 a2 d9 4c ad e3 ae 2f ea a8 00 e7 27 44 14 02 ac 6b 75 0d b3 a6 6d cb 7a 82 fd 4f 73 ad 54 46 86 2a 69 c4 4f 0b 9f e2 2a 4e 5f 1c 02 bc 7a ea 9e b7 54 76 82 d8 0b 44 32 9d 16 78 ad 7c 9e c6 23 f9 46 64 ea 1e 99 ba 5c 2d 97 9b eb d4 f5 03 54 4e b1 35 a4 cc 69 96 9a 0c e1 8b ce 00 e4 92 19 70 08 0a 0e 4e 70 34 88 ac d0 e6 53 f2 c0 df 79 3d 82 5d 5a ad aa e0 f7 49 9e 5d 11 bf 13 bc 17 bb 5b 65 aa ae e9 0a cb 27 50 74 dd 48 03 e0 7a 72 ee 2b a4 a3 f9 41 db 3c 85 63 2f 9c fc bc 13 c7 a9 e7 59 76 1c 5a 9d 73 a6 e5 8e a6 e1 cd ed d3 3e 99 3e e8 0d 0a 8f Data Ascii: wm7Ih8b$lH8UL+^r jJ[<AL/'DkumzOsTFiON_zTvD2x\|#Fd\-TN5ipNp4Sy=]ZI][e'PtHzr+A<c/YvZs>>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50169	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	424	OUT	GET /steam/apps/1145350/ss_c8d2b18451a2cc4d5b4fdd78ed84a5e64e051eac.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:19 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 87263 Last-Modified: Wed, 01 May 2024 05:14:57 GMT ETag: "6631cfd1-154df" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=350630 Expires: Mon, 20 May 2024 00:01:09 GMT Date: Wed, 15 May 2024 22:37:19 GMT Connection: close
2024-05-15 22:37:19 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 09 ff c4 00 51 10 00 02 01 02 04 03 05 05 05 05 06 04 03 06 04 07 01 02 03 04 11 00 05 12 21 06 31 41 13 22 51 61 71 07 14 32 81 91 23 42 52 a1 Data Ascii: JFIFCCQXQ!1A"Qaq2#BR
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 68 ec 00 16 50 9d d1 b0 1b 0b 6d 87 96 59 26 79 92 53 6e 3d 4a 05 a1 b8 09 64 90 23 d4 d4 f6 9b 9e ce 35 0a 45 c1 dd ef 7c 23 55 ac 34 16 94 54 12 d5 e6 d4 94 54 92 88 4c a8 c4 ac 97 65 b8 b9 1e 62 f6 e9 f4 c4 38 4c e7 06 b4 b8 a2 ea f2 4c d2 07 09 25 0c b3 3d f4 8e c5 95 c7 ad ee 2c 3d 6d 89 b8 24 12 b0 8b b5 05 45 1b e5 5a a8 a7 55 72 cb 79 d4 0d a4 d5 b9 fc b6 f9 62 0c 84 c1 db fe 20 aa 79 f6 7d 51 43 1c b9 6f 67 f6 8a 3b 36 a8 26 fa d0 fc 24 0f 12 2d 7c 29 35 85 a9 8c 0e f8 92 8e 1d aa 58 33 00 24 02 d2 8d 3a 9b a1 e9 be 14 2b 24 16 15 b5 87 d7 ae 19 65 b4 34 ec 63 03 4a 19 24 63 65 45 3b 93 88 9c 20 1a 57 99 99 25 72 ad ff 00 93 6d 3f f7 fd 30 42 71 8e 14 5d 98 88 93 13 18 9b f7 79 1f 51 cb 12 82 20 da 26 9a 5f 79 46 0c 02 ba ec 40 e4 7c c6 05 25 e1 Data Ascii: hPmY&ySn=Jd#5E\|#U4TTLeb8LL%=,=m$EZUryb y}QCog;6&$-\|)5X3$:+$e4cJ$ceE; W%rm?0Bq]yQ &_yF@\|%
2024-05-15 22:37:19 UTC	1901	IN	Data Raw: cf 48 6b ff 00 f5 62 1e 56 37 38 6d 01 3d 92 88 de 27 5b 8b 06 0d e6 0a ff 00 db 11 62 dd c8 43 c3 4f da d6 45 a4 e9 e7 62 7c b1 59 29 5c ea 69 5f 36 a1 d4 a0 f8 ef 85 5e ad 4b 05 4c b4 b2 2c d0 48 f1 ce 86 e9 24 4c 55 90 f8 82 39 60 25 2d 0e 14 78 5d 03 86 bd b0 57 d1 95 8b 3a 8c 66 31 6c 0c f1 80 b2 8f 33 d1 bf 23 e7 81 4b 91 3f 87 31 d9 87 07 ed fe 17 56 c8 73 fc bf 89 a8 9c e5 95 b1 cc 36 2e 80 01 2c 67 a5 c1 dc 7e 98 a8 e1 79 d9 a2 92 07 7f b8 3f 65 06 69 c0 94 99 fd 5c 3a 22 9a 1c d2 56 58 a0 aa a1 63 1c e5 d8 85 00 30 e6 49 20 58 f8 e2 b9 1e d6 30 ba 4e 07 29 e2 d5 be 21 57 6d ec 72 12 1a bc d6 af d8 25 3e 45 2a e4 b1 66 84 56 55 52 66 87 35 a5 2b 24 35 10 cc 56 4a 73 bf 72 5d 24 31 26 ff 00 1a db 61 8e 31 8d ba f7 c8 c0 f2 30 2a ba 82 30 7d ba 2e Data Ascii: HkbV78m='[bCOEb\|Y)\i_6^KL,H$LU9`%-x]W:f1l3#K?1Vs6.,g~y?ei\:"VXc0I X0N)!Wmr%>EfVURf5+$5VJsr]$1&a100}.
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: b2 cc d9 b2 5a 8a 2c ae bd 03 d0 56 d3 55 4b 4d 0d 40 b7 c5 1d 9b 43 ec 6f c8 f3 bf 5c 73 26 8f 59 11 a7 d8 bc e5 a0 e0 f1 eb f7 5c 56 ca f7 d8 bd d4 68 f5 a2 9a d0 56 51 14 ab 79 21 cc e6 1e ee cb 03 44 b4 b2 2a 4b 6e eb 39 6a 73 a9 47 50 2c 4f 88 c2 42 ed a4 f9 c2 fd 89 1f a9 50 0f fe d1 f7 54 5a cc b7 39 cc 62 76 9b 88 4c 70 0d a4 6a 3a 0a 7a 75 5f e2 7d ed f5 18 d6 d9 9a d3 86 67 d4 92 b4 0d a3 1b 3f 35 25 47 1f 70 3d 3d 35 54 47 30 c8 32 a8 c2 08 6a 29 52 74 3a ae b6 6b 92 4b 38 6d fa 9e 76 3c b1 ed 20 94 49 18 7b 5b b7 d1 71 4e 8f 54 1f 44 39 dd 41 fe 60 2a 66 6f c7 c9 9d 52 d6 d2 e5 5f b6 33 38 8a 2a 52 66 30 2f b9 c1 10 20 a9 43 2b c6 49 2b 61 a7 b3 5b 91 7b ee 2e 79 32 68 1a c9 37 b2 83 7a dd 9f a7 f9 5d f8 1a 7f fe ea dd db 92 7d 6a f0 aa 9c 3d Data Ascii: Z,VUKM@Co\s&Y\VhVQy!DKn9jsGP,OBPTZ9bvLpj:zu_}g?5%Gp==5TG02j)Rt:kK8mv< I{[qNTD9A`foR_38*Rf0/ C+I+a[{.y2h7z]}j=
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: dd 5f c8 e2 ba d9 e1 7c 07 0f 01 e6 79 a9 96 3a c8 92 8a 96 52 58 c7 3f 79 99 6f 70 0a f3 f0 f0 f5 c7 bc f3 47 45 c1 0d 54 bc c6 8f 2a e0 9f 68 f9 7c 36 0c 13 b2 9e 14 a8 60 15 b5 5d 58 02 76 1b 82 41 26 c2 d8 ec 78 7c db 24 6c 8e cd 15 8b 56 d7 49 13 98 3a a9 f8 b6 3a 25 e2 5a f6 a6 8d e0 82 10 ab 76 3d d4 71 bc 96 23 61 63 60 7d 39 db 1e 86 59 23 92 42 5b c7 f2 d7 0e 26 4a d8 c6 ee 7f 94 ab d1 76 75 19 b8 cc 5e 78 ab 3b 55 ec a3 d0 8b 63 de dc 0b 6c c4 9b 73 fa e3 24 96 e7 07 83 76 b4 30 6d 61 61 15 4b a0 65 9c 25 95 e6 39 2f 14 e7 f9 ac 2b 55 4d c3 34 94 d3 d4 65 b9 54 68 6a ea 5a 59 74 47 13 4a 6e b1 00 15 d9 d8 07 2a a2 c0 5d 81 17 bd a2 30 2c e7 a8 1d 3d d6 36 39 cf 34 dc 03 c1 3f a7 5f f2 ad 71 cb 9f f1 64 b0 71 76 55 94 42 d5 71 25 0e 5d 91 f0 fd Data Ascii: _\|y:RX?yopGETh\|6`]XvA&x\|$lVI::%Zv=q#ac`}9Y#B[&Jvu^x;Ucls$v0maaKe%9/+UM4eThjZYtGJn]0,=694?_qdqvUBq%]
2024-05-15 22:37:19 UTC	7952	IN	Data Raw: 69 bc ab 3f dc aa fd 91 b5 fc 27 96 f0 b5 75 43 d6 9a 68 f3 38 25 2a e9 34 c6 69 51 c1 df e1 d4 05 b7 de f8 d1 36 99 da 62 1b 25 59 00 e0 83 cf b1 34 7d 39 48 1c e7 7c 29 37 12 71 26 5b 9b 56 a5 3d 14 d5 1f b3 16 c2 69 aa 13 79 1a da 8e cb 7b 0b 72 04 9f 12 71 8e 47 80 29 aa c8 e3 23 27 94 5c 19 cd 2e 64 fa 60 aa a7 6f 21 2a 96 fa 5f 18 29 5a 1a 5b ca 35 27 2b dc 89 0c 8d e2 39 7d 70 b4 a5 75 28 59 78 86 38 25 30 c2 8d 98 55 8f fa 50 6e ab ea dc 87 cb eb 89 b7 ba 70 30 b2 52 ae b5 0b 66 53 01 11 ff 00 c2 41 b2 fa 31 e6 71 30 38 53 77 40 8c 86 ef 18 48 82 c5 10 d8 2a 8d 86 2b 28 70 88 49 d2 1e e8 dd ba 8f eb 85 a5 05 95 a6 61 9e 52 65 60 7b d4 b7 90 8d a1 41 76 fa 62 06 13 c2 2d 04 a0 de 0a fe 20 4d 59 84 86 83 2e 1b 8a 58 cd 99 c7 8b 9c 38 a6 e0 72 9a c3 Data Ascii: i?'uCh8%4iQ6b%Y4}9H\|)7q&[V=iy{rqG)#'\.d`o!_)Z[5'+9}pu(Yx8%0UPnp0RfSA1q08Sw@H*+(pIaRe`{Avb- MY.X8r
2024-05-15 22:37:19 UTC	12216	IN	Data Raw: 71 b6 c3 10 95 16 23 f7 9a da 81 24 24 35 cd cd 44 80 b0 27 c8 7d ef d3 d7 15 a6 e3 94 e5 5d 68 e1 0b 24 8d 34 be 04 dd 98 f8 93 d3 0c 1a 92 fb 20 aa 27 76 03 56 de 02 fc b0 6a 94 14 a3 59 76 c0 51 65 ea 56 20 35 5c 93 c9 54 5c 9c 4a 52 96 d1 4a ef f1 80 a3 a2 0d cf cc e0 13 d9 4b ec b1 3c eb 4b 16 a2 03 33 10 a8 a4 d8 16 37 b0 be 2a 4c 05 9a 55 ba be 22 af af 9e 4a 70 c1 a7 8c e9 76 91 b5 22 db 96 85 d8 01 f2 27 0a b4 86 80 12 b5 15 d4 9a bb 69 fe cf f1 af c2 37 f2 b5 b1 2d 3e 14 72 52 19 60 63 32 a5 62 31 2c 41 50 d7 f4 3b 1f cc e0 da 18 52 53 d5 c9 95 65 d1 96 99 52 92 ab e0 12 36 a6 5b 6f a4 92 3f 3f 91 c0 a4 e0 f4 5a 47 2f bd 30 8e 9c a3 b3 90 35 0f 85 6f d4 91 85 aa 16 a6 02 1f 35 92 5a da a6 a5 42 65 23 e1 54 16 0d e2 4e fc bd 71 63 00 ab 29 4b 96 Data Ascii: q#$$5D'}]h$4 'vVjYvQeV 5\T\JRJK<K37*LU"Jpv"'i7->rR`c2b1,AP;RSeR6[o??ZG/05o5ZBe#TNqc)K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50170	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	401	OUT	GET /steam/apps/1145350/capsule_616x353.jpg?t=1715727000 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:19 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 110095 Last-Modified: Wed, 01 May 2024 05:08:01 GMT ETag: "6631ce31-1ae0f" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=519142 Expires: Tue, 21 May 2024 22:49:41 GMT Date: Wed, 15 May 2024 22:37:19 GMT Connection: close
2024-05-15 22:37:19 UTC	16041	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 00 09 0a ff c4 00 60 10 00 01 03 02 04 03 05 04 07 04 06 04 09 06 0c 07 01 02 03 04 05 11 00 06 12 21 07 31 41 08 13 22 51 61 14 32 71 81 09 15 23 Data Ascii: JFIFCCah`!1A"Qa2q#
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 33 01 54 32 bc b5 c4 4c 4c 91 de 36 3c 8a e5 1a 97 13 24 b3 ec f4 4a 05 3b 2d 37 6f 76 9f 4f 6e 39 3e a5 41 20 93 ea 4d f1 95 d8 cc 40 ec e6 cb dc 23 f7 54 d6 c5 d7 c4 9f e3 55 2e ef 29 5b b5 ba 83 fe fc e7 d5 fe f9 c6 77 56 aa f1 0e 79 3e 25 65 22 75 49 56 eb 8e 1b ad c5 ac ff 00 79 44 e2 88 0a 00 06 81 02 c3 cb 05 15 ec 45 11 ac b2 97 10 f3 ae bc d4 58 ac 36 a7 a4 4a 90 b0 86 98 6d 20 95 2d 6a 3b 25 20 02 49 3e 58 b2 95 37 56 76 46 6b ee e7 92 66 b5 d5 1c 18 c1 2e 3a 05 5d e5 4e d0 f9 1b 30 e5 6a be 6d 99 9b a8 79 7b 26 22 6b b4 da 5a aa 2f 86 e5 4d 2c 90 1d 94 a4 1f 19 0b 27 ec db 48 24 24 6a 57 89 5a 51 d5 7e 0d 86 98 ea c8 ef 26 3d f2 1c 35 ba f4 f8 9f c3 b8 aa 4e a7 87 a3 4c be ac 4b 88 d0 4e 83 ee 78 d8 69 26 9c e2 e7 6f 4e 12 1c 91 9c 28 19 69 15 Data Ascii: 3T2LL6<$J;-7ovOn9>A M@#TU.)[wVy>%e"uIVyDEX6Jm -j;% I>X7VvFkf.:]N0jmy{&"kZ/M,'H$$jWZQ~&=5NLKNxi&oN(i
2024-05-15 22:37:19 UTC	2350	IN	Data Raw: 1e d4 db cd 2e ca 6d c4 2b 9a 56 9d 89 4a 86 ca 49 23 16 16 87 02 08 b1 55 12 08 3b 83 ee eb 59 42 ad 43 ed 87 c2 29 94 29 a1 96 38 89 40 40 9b 15 e4 a4 24 3c af 74 2c 0f ba 97 3f b3 5a 79 05 14 91 b6 9b 79 37 d3 3d 13 88 15 01 fe 1b ad dd af ca e4 6f 12 35 82 7c fb 99 ff 00 0e ae 2a 37 f9 6e b1 e5 fb 8d 47 1f 35 56 f6 5a 69 32 aa dc 42 c8 b2 92 a8 f2 b3 45 05 e8 70 d4 b4 94 9f 6b 6b 5f d9 1b f2 57 88 9b 1e ad 91 8d fd 24 72 0a 78 89 b3 1c 09 ee b8 3e 53 e5 2b a3 8d 63 da d6 57 6d f2 19 f0 30 41 f4 f5 0a 8b 5c 79 92 a1 86 e6 53 9d 0f 01 a5 d6 ec 12 02 86 c7 99 d8 83 7c 74 cb db 17 5e 99 94 dc 4d 82 8d c9 ca 13 1c 75 5d da 12 db 7d 3b c5 8b fe 58 c8 e7 35 6c 6e 1d e5 16 de 47 7c 6e e4 86 d3 e8 90 4f f2 c5 59 d6 81 86 74 5c a5 90 f2 c2 23 2d 2e 7b 4b a1 43 Data Ascii: .m+VJI#U;YBC))8@@$<t,?Zyy7=o5\|*7nG5VZi2BEpkk_W$rx>S+cWm0A\yS\|t^Mu]};X5lnG\|nOYt\#-.{KC
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 6a 60 81 1c 47 43 34 09 31 74 fb 19 4a 06 ad 4b 04 a0 28 6e 49 4e ea 52 88 3c af 86 a2 d2 04 b8 09 e2 96 88 36 71 17 bd e7 5b f0 41 cc 0d 8c 83 c3 94 53 8a 74 57 f3 23 29 97 37 50 f1 c6 80 0d d9 67 d0 b8 af 1a 87 90 00 e3 33 49 c4 56 2f fd 2c b0 e6 77 3e 1a 77 e6 e0 9e 99 eb 6a 97 7e 96 d8 73 3c 7c 3e ca 99 52 ae e2 4a b7 00 8e 9c f1 a9 6f 1a 59 48 58 6e e8 dc dc ab 72 31 60 09 89 85 33 e1 4e 5b 6a bf c4 9c b0 c3 e5 29 89 1a 60 9d 24 ab 6b 32 c2 54 f2 cf e0 dd be 78 ab 10 4b 29 12 dd 74 1d e6 c3 d6 17 3b 17 54 d3 a0 f7 0d 7e f6 48 b2 86 5a ae e7 14 25 ea 65 12 a5 53 54 d9 0e 16 7d 8e 1b 8e 87 14 a5 15 29 09 52 41 04 8b ef be dd 71 ba 9d c4 a5 73 db 4f b0 e2 2d cf e8 ac 4a 2e 52 c9 99 22 50 91 9f a5 3f 5d 9a d2 af fd 15 cb 92 12 4d ff 00 66 54 c1 74 35 ea Data Ascii: j`GC41tJK(nINR<6q[AStW#)7Pg3IV/,w>wj~s<\|>RJoYHXnr1`3N[j)`$k2TxK)t;T~HZ%eST})RAqsO-J.R"P?]MfTt5
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: 13 25 53 78 7d 95 29 94 1a 5b 41 11 a1 46 6a 3f 78 47 8d dd 0d a5 01 6b 57 35 28 84 a6 e4 ef b6 11 ad 0d 10 17 53 03 83 66 0a 83 68 b3 5d cc 44 93 72 7c 4a cb 9f 49 f3 13 28 bc 0f a0 e7 ca 65 15 35 aa 9e 4c cc 30 ea ed 21 e4 ad c6 19 48 5d 96 b7 5a 04 05 a7 90 b9 f7 6f a8 10 45 f0 af 68 70 1e fd de 3e 4b 99 d2 d4 3a e7 d2 61 76 50 ec cc 27 fc c2 c2 fc 48 1d ff 00 0d e6 15 67 da 13 20 b5 f4 90 76 69 c9 7c 4c e1 ac 38 e9 cf 34 97 94 da e0 48 7c 21 49 07 c3 26 2a 96 76 d9 41 0b 4a 88 17 00 5a c1 58 70 4b 5d 9a 2e 2c 7d fc bb f8 ac cd 7d 57 3f af cb 2f 6f 62 a0 1b ee d7 01 37 d6 c2 66 1c 46 ad 58 fe 8b f4 79 76 8a ae 1a a2 1d c8 82 8a 88 71 9c 74 39 3a 73 0a f6 85 a5 25 49 6d a0 85 28 a9 4a 36 02 f6 1b ee 46 2d eb e6 72 b4 ab ce 30 44 b2 9b dd 1a f6 48 81 bf Data Ascii: %Sx})[AFj?xGkW5(Sfh]Dr\|JI(e5L0!H]ZoEhp>K:avP'Hg vi\|L84H\|!I&*vAJZXpK].,}}W?/ob7fFXyvqt9:s%Im(J6F-r0DH
2024-05-15 22:37:19 UTC	7952	IN	Data Raw: 23 7c 05 12 67 aa 8c 46 6e ea 75 29 00 5d 40 11 b9 c4 98 4c 04 ad 87 f4 79 f0 62 52 eb 35 1e 30 57 a0 bd 15 88 ad 2a 06 5a 6e 4b 45 05 e7 1c 45 9e 94 9b 81 74 a5 b5 68 4a 85 c1 2e 2b aa 31 5d 4a 9d 55 32 fd cd 87 d4 fd b9 af 9b fe 31 e9 46 d2 a2 3a 3a 93 a5 ce bb a3 60 34 1f 5e 22 cb 68 d8 7c 71 c4 5f 23 5e 09 03 96 df 0c 45 15 1b da e3 b3 90 e3 8e 55 19 92 80 84 35 c4 1c bf 19 5d d6 a5 69 4d 56 1a 35 29 51 d4 7a 38 9f 12 9b 51 f3 29 3b 28 14 f5 b0 b5 7a d1 d5 1f 88 69 cc 70 f0 db c9 7b 8f c3 1d 39 ff 00 0f ab f9 4a e7 f8 4e 36 ff 00 09 fb 71 fd a0 fc dc a6 55 da ab b4 a5 00 a4 db 99 50 eb 8d 20 87 5d 7d b4 b4 b6 c9 52 10 52 48 d7 74 93 b1 e4 6f e7 6c 45 10 80 f0 90 00 24 8d f0 54 41 22 c9 26 e2 dd 3d 3d 71 14 40 50 b1 55 ae 40 e9 d3 01 45 d4 a6 c4 90 2e Data Ascii: #\|gFnu)]@LybR50W*ZnKEEthJ.+1]JU21F::`4^"h\|q_#^EU5]iMV5)Qz8Q);(zip{9JN6qUP ]}RRHtolE$TA"&==q@PU@E.
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: b7 c3 0c 38 21 cd 72 44 72 83 e1 f1 ef bf 43 88 80 d1 12 85 05 10 08 18 02 e8 e8 bd ab 63 e1 06 fe bf cb 11 44 24 94 a7 6b 6c 2d b9 eb 83 a2 17 2b dd e6 c0 2a c4 6d bd be 38 8a 00 b9 7b 78 82 8e e0 5b 6b e2 28 10 96 e1 d3 7d f7 e5 88 80 09 4c 54 b8 a4 5c d9 07 a2 ad bf cb f9 9c 10 89 40 54 81 62 94 1b 0d ee a1 cd 5e 9f e7 89 28 a2 00 04 ea b6 e3 90 f9 e0 73 43 92 ea 51 ac 12 0e f7 b9 18 88 a1 a5 f0 95 00 4f 21 cf 11 11 c1 1e 76 4d cf 20 3a 9e 98 2a 04 15 11 63 61 b0 18 08 85 c2 07 96 af 3d bf 57 c4 d1 44 59 8c c2 89 05 b0 7e 58 2a 5d 27 7a 9b 1a 42 4a 56 ca 57 7e 46 dd 70 b0 9a 61 26 8f 4b 5c 45 5d b7 ae d2 4f ba 4e e3 e7 f2 c4 02 34 40 dd 2c 4a 9d 40 dc aa c7 af 4c 10 92 e9 54 49 8f 32 f3 4f a1 5a 96 da c2 82 79 5e db d8 7c 70 ca b2 24 16 f1 4b e4 d3 dc Data Ascii: 8!rDrCcD$kl-+m8{x[k(}LT\@Tb^(sCQO!vM :ca=WDY~X*]'zBJVW~Fpa&K\E]ON4@,J@LTI2OZy^\|p$K
2024-05-15 22:37:19 UTC	16384	IN	Data Raw: b9 00 6a 41 b9 20 0a 55 a7 f8 75 2c 56 0c 46 0c d4 a9 d6 d0 6f 6c 5c b7 ea de fe 1e 4a b7 ab d0 f3 1f 0a 6a ce 50 2a 2e 2d 70 f4 95 35 0e 57 db c2 94 df 47 18 2a b9 09 ea 40 26 c7 62 06 18 b2 16 ba 38 d7 3c 48 bf 7e a3 91 4e b4 fc f5 c3 68 74 86 51 99 b8 2b 97 eb 95 26 c1 4f d6 51 a2 43 2a 52 b7 d2 54 1d 68 1f 2b 8d 44 63 40 7d 30 c0 1c db f1 fd 96 b6 f5 18 89 04 bd 8e ff 00 0b 8c 79 68 96 53 3b 55 47 c9 51 d0 32 d7 08 69 d4 d7 12 39 d1 1c 89 10 df ca e9 d2 71 47 5c e0 34 58 cf 45 b2 a1 fe 25 67 1e f4 d9 52 ed 99 c5 3a 9b 6e b5 47 c9 54 9a 10 70 1b 48 a8 d5 52 b5 a4 f9 94 b4 09 3e 76 be 14 d5 79 57 33 a3 70 94 f5 92 a9 9c e3 06 b5 c4 ea 9a 67 71 07 33 4c cc ef a1 57 66 9d 12 f1 a0 b2 7f ba d8 dc 9f 8e f8 ac de e5 74 a9 e5 a6 dc b4 da 00 55 e5 47 83 8c 71 Data Ascii: jA Uu,VFol\JjP.-p5WG@&b8<H~NhtQ+&OQC*RTh+Dc@}0yhS;UGQ2i9qG\4XE%gR:nGTpHR>vyW3pgq3LWftUGq
2024-05-15 22:37:19 UTC	1832	IN	Data Raw: be 20 0a 27 08 b4 b6 5a 3a 97 f6 ab f5 e5 87 01 04 e4 85 78 6d e4 36 b7 2c 3a 54 62 1c 28 23 49 37 16 37 1c c6 f8 69 4b 12 88 ac d7 4b 92 1d 79 76 76 5b 87 52 d4 39 15 75 51 f5 3c cf ae 14 94 1a d0 d1 03 45 19 90 e2 df 71 4b 5a 8a 96 79 93 8a 95 a1 76 9f 20 45 94 16 a1 74 11 a4 ed d0 f5 c4 06 0a 29 f8 14 3a 83 65 25 69 56 d7 07 9e 2c 0a 2b 63 8b f5 97 45 7f 86 dc 64 65 65 f6 eb ad 34 8a ca 4d 96 0d 4e 11 43 32 82 d2 36 fb 66 83 2f 58 f3 ef 95 e5 8d b8 92 5f 97 11 fd 5a f7 8b 1f 35 e7 3a 2d bd 50 af d1 87 ff 00 96 7b 3f e4 7c 96 f9 19 6f 80 57 c5 7a 81 4d cd 53 32 fe 57 5a 15 2e 86 e0 54 f9 08 69 c2 de a8 9a 74 b2 0a 93 6d 9c 5a d2 2d d4 36 7a 0c 52 44 d9 06 38 b0 3a a6 fa 78 fe cb 24 3e da b3 c6 60 ab a0 e5 fa 5d 2d 9a 73 8e f7 48 a7 c5 0c 23 50 55 92 ca Data Ascii: 'Z:xm6,:Tb(#I77iKKyvv[R9uQ<EqKZyv Et):e%iV,+cEdee4MNC26f/X_Z5:-P{?\|oWzMS2WZ.TitmZ-6zRD8:x$>`]-sH#PU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50173	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	440	OUT	GET /steamcommunity/public/images/apps/1938090/8eaf32220060344996cbf11f697a4f4be943e5f3.jpg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: image/jpeg Content-Length: 620 Connection: close Cache-Control: max-age=315360000 Cache-Control: public, max-age=315360000 Cf-Bgj: h2pri ETag: "654e6e3a-26c" Edge-Control: !no-store,!bypass-cache,cache-maxage=315360000 Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 10 Nov 2023 17:54:02 GMT CF-Cache-Status: HIT Age: 2932164 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469ca52bf33712-MIA
2024-05-15 22:37:19 UTC	620	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff c0 00 0b 08 00 20 00 20 01 01 11 00 ff c4 00 19 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 05 08 04 06 07 03 ff c4 00 27 10 00 01 04 01 03 03 04 03 01 00 00 00 00 00 00 00 02 01 03 04 05 11 00 06 12 07 21 31 13 14 22 71 41 51 61 52 ff da 00 08 01 01 00 00 3f 00 c1 a4 74 c3 7a c6 81 16 6b db 66 c8 63 49 26 c1 a2 f4 b2 a4 4e 2a 20 26 13 ba 65 55 13 ba 79 54 d7 59 5d 28 df 31 64 23 32 36 d4 f0 71 59 72 46 15 13 1e 98 28 a1 ae 73 8e dc 87 fb df 55 db 0d bd 6b 5f 4b 5d 6f 36 0b ac d6 d8 Data Ascii: JFIF%%C%# , #&'))-0-(0%()( '!1"qAQaR?tzkfcI&N &eUyTY](1d#26qYrF(sUk_K]o6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50174	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	436	OUT	GET /steamcommunity/public/images/apps/730/8dbc71957312bbd3baea65848b545be9eae2a355.jpg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: image/jpeg Content-Length: 702 Connection: close Cache-Control: max-age=315360000 Cache-Control: public, max-age=315360000 Cf-Bgj: h2pri ETag: "6526ee92-2be" Edge-Control: !no-store,!bypass-cache,cache-maxage=315360000 Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 11 Oct 2023 18:50:58 GMT CF-Cache-Status: HIT Age: 6760839 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469ca52e565c64-MIA
2024-05-15 22:37:19 UTC	702	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 18 00 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 04 06 07 08 05 ff c4 00 2d 10 00 01 03 03 02 05 02 05 05 00 00 00 00 00 00 00 01 02 03 04 00 05 11 06 31 07 12 21 41 61 14 23 13 15 22 81 91 24 32 51 71 d1 ff c4 00 15 01 Data Ascii: JFIF%%C%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((( "-1!Aa#"$2Qq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50175	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	436	OUT	GET /steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0f7d37e8661a410075.jpg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:19 UTC	492	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:19 GMT Content-Type: image/jpeg Content-Length: 1210 Connection: close Cache-Control: max-age=315360000 Cache-Control: public, max-age=315360000 Cf-Bgj: h2pri ETag: "654d7e53-4ba" Edge-Control: !no-store,!bypass-cache,cache-maxage=315360000 Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 10 Nov 2023 00:50:27 GMT CF-Cache-Status: HIT Age: 6756534 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469ca52d3da4cd-MIA
2024-05-15 22:37:19 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC "
2024-05-15 22:37:19 UTC	333	IN	Data Raw: a1 38 92 33 fd d6 1f d0 fe 1e b5 17 c5 69 1e df c2 8c a9 11 91 65 95 11 db 38 d8 33 9c fb f2 00 fc 6a 29 d5 a9 ed 23 17 27 7b ea 99 b6 37 2d c2 2c 25 7a d0 a3 1e 45 1b c6 51 d6 f7 bf 96 96 2a 78 47 c4 03 c3 ff 00 0c ce a5 34 45 85 be f5 45 27 fd 61 32 10 bf 41 93 8f c0 d7 4d a6 de e9 1f 10 b4 06 c2 ac f6 d2 8d b2 c2 ff 00 7e 36 f4 3e 84 75 04 57 1d e1 6f 1c e9 7e 19 d0 17 45 d5 ed 6e 3e d1 13 49 14 d0 bc 00 8e 5c 9c 10 4f bd 6d 68 bf 11 fc 27 68 8f 0d ac 3f d9 b1 fd ee 2d c2 2b 1f f8 0e 73 53 5a 94 f9 a5 28 c1 de fa 33 b3 2c cc 30 de ca 85 2a b8 88 7b 3f 66 a3 28 b5 ad ed df 6f 27 73 ce 75 dd 23 55 f8 5b e2 31 3d a4 ae 2d dc 93 0c c7 ee c8 bf dd 71 dc 8f 4f c6 bb 6f 15 5f 4d af 7c 2d 86 fe f2 05 82 e2 5d 92 6c 42 71 f7 f0 0f e2 39 c7 bd 6d 6a 1f 10 bc 2b Data Ascii: 83ie83j)#'{7-,%zEQxG4EE'a2AM~6>uWo~En>I\Omh'h?-+sSZ(3,0{?f(o'su#U[1=-qOo_M\|-]lBq9mj+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50164	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	776	OUT	GET /public/images/x9x9.gif HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:20 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:20 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:20 UTC	64	IN	Data Raw: 33 61 0d 0a 47 49 46 38 39 61 09 00 09 00 80 01 00 cd ca c1 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 09 00 09 00 00 02 11 04 82 68 9b ec d6 d6 49 81 51 39 2b 7c 19 53 5d 00 00 3b 0d 0a Data Ascii: 3aGIF89a!,hIQ9+\|S];
2024-05-15 22:37:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50171	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	569	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:20 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:20 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:20 UTC	10871	IN	Data Raw: 32 61 36 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af Data Ascii: 2a6fPNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj
2024-05-15 22:37:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50178	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	407	OUT	GET /steam/apps/570/page_bg_generated_v6b.jpg?t=1714502360 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:20 UTC	441	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:20 GMT Content-Type: image/jpeg Content-Length: 53312 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "66313ad6-d040" Expires: Tue, 21 May 2024 18:39:32 GMT Last-Modified: Tue, 30 Apr 2024 18:39:18 GMT CF-Cache-Status: HIT Age: 100437 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469ca8bcc1571e-MIA
2024-05-15 22:37:20 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 03 2a 05 9e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 08 ff c4 00 3d 10 00 02 02 01 03 04 01 03 03 02 05 02 05 04 02 03 00 01 02 11 03 12 21 31 04 41 51 61 71 13 22 81 05 32 91 42 a1 14 23 52 b1 c1 62 d1 Data Ascii: JFIFHHCC*=!1AQaq"2B#Rb
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 54 25 02 08 d0 10 2a d0 31 28 8a 84 11 fc 81 19 04 d8 2a 32 52 27 3c 11 51 81 18 56 59 04 64 54 64 56 58 54 03 0f 76 4a 0d 57 04 54 ae fd 88 31 26 15 09 40 51 08 32 f9 0a 8c 2a 56 fc 11 03 22 15 42 28 00 0c b3 35 a8 11 40 00 09 46 58 82 14 09 40 80 00 0b 10 34 00 d3 34 08 d0 1b 5c 06 5a 5c 1a 88 a5 46 90 47 44 12 b4 69 96 a2 19 ae 91 2a 3a 20 cb 49 15 2b a4 4a cb a2 41 2b 49 06 5b 48 d4 4a da b4 19 6d 2b 2a 56 92 08 a8 25 6d 20 cb 49 14 5a 11 14 a2 a5 e8 22 d7 60 ab 40 12 08 b5 fd 80 b4 05 57 c0 0a 00 51 68 0a 97 70 15 60 10 04 00 05 00 f6 02 80 70 03 8d 80 00 00 04 02 81 00 00 f8 01 c8 0d b6 40 4a f6 14 7c 04 38 0a 80 c0 00 0a b0 25 00 f6 04 01 d8 68 85 02 2a 14 00 94 01 f0 04 a0 23 45 13 d0 04 04 00 15 12 01 40 28 2a a4 01 ae e5 54 f2 04 7c 01 9f 60 10 Data Ascii: T%1(2R'<QVYdTdVXTvJWT1&@Q2V"B(5@FX@44\Z\FGDi: I+JA+I[HJm+V%m IZ"`@WQhp`p@J\|8%h#E@(*T\|`
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 24 aa 10 40 00 65 90 65 86 91 91 59 64 19 60 00 84 a2 34 99 96 98 7c 01 00 8f 82 08 97 72 50 61 58 90 10 34 96 4a 88 48 04 aa 80 00 8c 08 61 b0 00 00 04 a3 0c a0 00 94 08 00 00 b1 03 40 0d 33 45 c8 46 d0 1a 0c b6 8a 8d 1a 4a d4 42 37 10 8e 86 99 69 7b 03 a4 4a c3 ac 42 56 d0 46 e2 8b 19 ae 89 15 1d 10 66 b4 96 c1 1d 11 a8 95 a4 54 74 88 66 b4 11 a4 05 4b d0 66 aa 4c 23 54 05 48 0a 80 a9 01 aa 00 97 90 2d 00 a6 05 a0 14 05 a0 15 d8 02 00 05 ad 80 50 00 00 3e 00 01 1a dc a2 30 0c 07 e0 08 04 a2 85 00 ed 60 4a f2 02 80 55 22 88 ec 05 01 1a 01 5d c0 01 29 85 1a 01 40 00 9a 7d 01 74 81 28 05 6e 14 ae c0 28 05 00 68 ba a8 d5 3e 00 9b 01 1a 02 50 11 80 02 0d 0a ee 55 4f c8 30 02 35 e8 29 54 04 68 2a 50 04 b6 02 d1 42 a8 0c b2 89 ec 80 fe 46 89 40 4a 28 a1 52 8a Data Ascii: $@eeYd`4\|rPaX4JHa@3EFJB7i{JBVFfTtfKfL#TH-P>0`JU"])@}t(n(h>PUO05)Th*PBF@J(R
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: d8 83 34 02 ac 82 30 20 19 61 51 91 59 64 56 5a 20 81 51 81 0c d2 32 c8 ac b0 32 04 96 cb 71 47 37 b9 00 83 01 a8 05 18 48 9f 26 44 61 50 80 00 0c b2 55 81 96 80 00 00 8f 82 7d 19 28 00 25 02 00 00 2a e4 bf 06 88 06 a3 34 5c 84 6e 3c 81 b8 84 ad c4 b1 96 d7 06 86 a2 19 74 88 47 48 96 32 da 45 1d 22 83 35 d6 28 a8 eb 14 12 b6 90 47 48 a3 51 9a e9 14 11 d1 20 cd 6d 04 69 22 c4 ae 89 15 1a 4b 62 8d a4 11 aa 0c ad 00 d2 05 a0 14 05 a0 2d 00 a0 2d 6c 02 80 b4 03 b8 0a 7e 00 00 48 0b 40 29 00 af 40 1a 01 40 00 a0 42 85 78 02 50 0d 20 29 a0 25 0d 04 80 24 05 a6 01 20 14 04 a0 0d 00 d3 e0 68 94 34 1a 1a 14 04 a2 85 5e c0 4a 01 40 4a a0 23 5e 8a 14 15 2b c0 06 82 e2 00 a0 14 c0 8d 05 4a 01 40 2b c8 0d 3d 8a 1a 40 57 90 1d c0 50 d5 4a 02 50 19 68 2a 53 28 9c 2d 80 Data Ascii: 40 aQYdVZ Q22qG7H&DaPU}(%4\n<tGH2E"5(GHQ mi"Kb--l~H@)@@BxP )%$ h4^J@J#^+J@+=@WPJPhS(-
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 09 4c 2a 34 51 1a 20 94 50 a0 14 02 80 94 04 a0 a9 40 4a 01 40 28 2a 52 01 40 4a 01 54 02 8a 14 04 a0 1f 82 81 00 0c b4 34 40 15 b9 04 02 34 14 00 00 8a 84 54 64 10 09 40 46 06 40 d5 10 4a 20 8c 2b 2f 6e c0 65 a0 ac 90 46 b6 22 b2 fe 00 8c 83 2c 2d 42 51 96 45 65 90 62 72 d2 bd 81 c1 ef b8 00 23 20 9c 92 8d 69 d9 58 54 96 db 83 1c db b0 d4 09 44 66 44 60 40 00 18 19 33 5a 81 14 00 00 08 c9 06 4a 00 09 40 80 00 0b 10 34 58 0b 92 b3 1a 05 69 20 8d ae c1 1d 23 c9 59 74 5c 16 15 b4 54 ae 91 41 1d 62 11 d6 28 d3 2e 91 40 75 82 0c bb 41 15 1d 62 bb 06 6b aa 45 1b 8a 0c ba c5 15 1d 12 09 5b 48 22 a4 11 a4 8b 12 b6 91 51 54 7b 94 6a 82 2d 01 6a 81 85 01 52 02 d0 16 bd 00 a0 09 20 61 f8 20 a9 14 28 00 0a 01 5b 00 a0 2d 01 28 05 78 01 40 2b d0 00 0d 00 a0 23 dc 05 Data Ascii: L4Q P@J@(R@JT4@4Td@F@J +/neF",-BQEebr# iXTDfD`@3ZJ@4Xi #Yt\TAb(.@uAbkE[H"QT{j-jR a ([-(x@+#
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 69 47 c8 17 f0 04 68 0c be 00 50 16 82 80 36 00 00 08 02 80 94 01 a0 25 50 00 26 c0 28 09 45 11 80 f9 0a 94 02 8b a2 55 85 28 0b 41 4a 28 8d 00 a0 25 5a 02 a5 b6 c0 1a 02 50 16 80 cb 40 4a 02 24 17 04 90 0a 0a 94 06 6b 70 14 04 a2 83 45 11 a0 14 15 28 08 d1 04 a2 89 40 4a 02 50 52 bc 03 0a 02 d0 54 6b b8 11 a0 15 e4 a2 52 02 35 45 11 af 40 65 a0 23 45 12 82 94 80 9a 68 08 d0 12 80 34 04 a0 25 05 1a 08 94 14 a0 23 02 57 90 25 05 4a 64 11 ad c8 14 06 92 f0 05 d2 41 28 08 c0 cb 03 0d 01 96 80 94 45 66 88 34 90 17 80 ac 30 32 c8 ac 90 66 88 23 03 2d 05 58 e2 72 df 84 15 a9 a8 e3 8e cb 92 74 78 f2 cd a5 49 72 4a 38 28 b9 3a 20 99 76 96 9b d9 2a 03 50 c7 16 b5 73 60 6a 80 84 c1 c2 79 1c be 08 ac 01 96 04 0a 22 28 4a 21 06 40 00 02 32 55 88 65 a0 00 00 04 a2 31 Data Ascii: iGhP6%P&(EU(AJ(%ZP@J$kpE(@JPRTkR5E@e#Eh4%#W%JdA(Ef402f#-XrtxIrJ8(: v*Ps`jy"(J!@2Ue1
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: ac 08 c0 00 14 46 d7 04 83 25 00 06 68 00 00 06 a2 05 03 49 da 2a 2a e4 ac b7 1e 40 e9 1e c0 75 88 66 ba c4 a8 eb 13 43 ac 43 2e b0 03 bc 02 57 68 1a 65 d6 20 75 81 47 68 06 5d 62 11 d6 25 47 58 84 6d 01 b4 9c 82 37 18 3e e5 d4 c7 54 a9 70 11 76 a0 24 92 5c 06 58 08 50 0a 01 40 28 02 40 54 02 80 00 00 05 00 00 08 51 52 6c 83 6a 1b 2d c0 ba 23 e0 06 94 01 45 26 05 28 72 00 05 81 2f d8 54 b2 89 60 46 c0 00 28 81 40 8b 41 4a 60 c2 bc 83 0a 0a cd 80 02 84 40 a5 01 a0 14 80 70 00 05 00 01 40 40 2d 7b 02 00 0b 80 31 3e 00 57 80 14 15 52 be c0 6b 80 a5 7a 01 45 10 0c be 2c a3 0c 08 90 02 85 00 a0 ac b0 25 01 2a d8 30 02 50 11 81 1a f4 04 a0 25 05 3d 80 28 94 50 a0 08 0b 40 4e 42 a0 0a 0a cd 01 28 00 52 80 94 06 68 00 12 80 94 02 bd 01 28 05 00 a0 25 01 1a 03 34 Data Ascii: F%hI*@ufCC.Whe uGh]b%GXm7>Tpv$\XP@(@TQRlj-#E&(r/T`F(@AJ`@p@@-{1>WRkzE,%0P%=(P@NB(Rh(%4
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 08 42 53 74 95 2f 20 75 58 a2 96 db 01 25 96 50 5f 6a ba ef e8 2b cf 97 ab cb 2f d9 2d 2b d1 15 e4 9e 49 c9 dc a6 db 28 d2 c9 35 1f b6 56 07 4c 5d 64 db 6a 73 4a 80 b3 cf 39 3d 12 96 9e da 90 1d 17 4b 05 bc b7 7f 26 87 9f 37 47 28 7d f8 d5 af 00 62 19 f2 43 78 bd fb a6 41 ea c5 d5 63 ca aa e9 f8 60 76 02 51 44 df 92 83 02 55 f6 02 50 00 23 01 40 00 05 40 00 41 aa 81 4a 00 04 a1 a1 c1 7a 27 c8 11 90 46 51 00 9f 01 50 20 ca ac 80 02 01 96 04 f8 00 06 40 88 0a 01 81 96 80 cb e4 2a 32 08 04 20 01 18 19 61 40 35 c2 b2 0c 4d f9 32 b8 e6 e7 6a 96 cb b8 57 93 a8 c8 a4 b4 ab 49 7f 70 3c d2 7f 6e cd 7c 04 65 b6 f9 61 58 60 46 40 20 8c 83 2f 60 32 04 a0 00 42 08 d7 71 46 5e c4 18 61 50 2a 00 68 85 64 42 04 aa d7 d3 93 44 0f a5 b7 20 45 04 98 14 0c 99 69 97 c8 10 8a Data Ascii: BSt/ uX%P_j+/-+I(5VL]djsJ9=K&7G(}bCxAc`vQDUP#@@AJz'FQP @2 a@5M2jWIp<n\|eaX`F@ /`2BqF^aPhdBD Ei
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 06 75 64 71 ff 00 13 d4 ff 00 ea 4b f9 0a 2c b9 75 6b 9c 9b 75 4a fb 01 35 64 ff 00 54 bf 90 23 72 ba 93 6c 09 4c 0d 24 fb b0 23 28 cb 03 a6 27 52 d5 e3 70 37 1d 5b b5 b3 ae 48 3c f2 d5 bc ad d1 46 25 96 4e 35 41 5c de 47 55 d8 a0 9c 93 b5 7b 00 9e 47 39 6a 7c b0 34 f7 6d df 01 04 a2 c0 ba 13 e0 08 e1 5f d4 55 4d 1b f2 05 fa 6f c8 15 46 6b 89 35 f9 2a 8e 12 7d ec 23 3a 72 7f a9 ff 00 25 55 51 c9 7b 49 ff 00 20 7d 68 af b5 5f 84 45 50 25 00 01 45 0a 20 80 0a 23 e0 08 04 00 04 03 2c 08 d0 10 2b 2f 90 23 02 7c 15 50 09 e8 21 f8 02 00 65 56 40 72 11 96 40 00 15 00 10 4a f0 04 a0 00 65 85 65 81 18 02 09 49 7d d2 7c ae 0c ac 8c 4e 7a 62 fd 85 79 25 26 f7 03 9f ee 4f 7d 98 1c 32 49 7e c8 f0 80 e4 ec 02 25 06 d1 04 60 64 82 30 32 00 08 d0 02 08 4a 32 c2 a0 56 18 Data Ascii: udqK,ukuJ5dT#rlL$#('Rp7[H<F%N5A\GU{G9j\|4m_UMoFk5*}#:r%UQ{I }h_EP%E #,+/#\|P!eV@r@JeeI}\|Nzby%&O}2I~%`d02J2V
2024-05-15 22:37:20 UTC	1369	IN	Data Raw: 40 16 05 40 37 28 d0 13 e4 00 12 c8 25 80 4c 0a 80 85 15 3a 02 ea 00 93 60 69 24 00 00 14 28 04 00 40 0a 01 18 14 01 40 00 00 20 17 b8 15 a5 28 d3 a6 9f 25 1f 2b f5 1e 8b e9 af a9 0f db fe c4 1e 1c 69 a9 6a 46 95 ea e8 65 fe 6b ff 00 da c1 5d 3a ca fb e4 bb a0 8e 1f a4 bf f3 a4 bd 30 ac fe a7 ff 00 de 7f fe 28 2c 6b a2 8d f5 11 7e 13 60 af 3f ea 32 5f e2 df c2 09 1e 7c eb 53 52 ef a5 05 8e bd 0f 4f 3c f3 50 87 2f bf 84 07 de e9 fa 78 74 d0 d1 0f cb f2 c0 d4 80 80 02 80 00 80 00 80 10 06 01 a0 23 41 50 08 c0 85 11 81 96 b7 28 8f 92 88 04 08 9d c2 94 02 80 50 12 80 9f 01 51 a0 25 01 36 02 76 00 d2 03 2c 08 c0 94 80 05 40 88 c0 9d c0 80 46 15 00 80 4a 26 89 df e0 cd 58 e5 3c d0 d7 f4 ef 7e e1 5e 6e af 36 a6 b1 c7 64 b9 03 ce 93 7c 2b 60 75 86 35 15 bf 24 d1 Data Ascii: @@7(%L:`i$(@@ (%+ijFek]:0(,k~`?2_\|SRO<P/xt#AP(PQ%6v,@FJ&X<~^n6d\|+`u5$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50177	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	424	OUT	GET /steam/apps/1145350/ss_ef0f63061d0a0a9a7e46f3b84f125d25330e8f19.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:20 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 73693 Last-Modified: Tue, 30 Apr 2024 04:30:35 GMT ETag: "663073eb-11fdd" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=350586 Expires: Mon, 20 May 2024 00:00:26 GMT Date: Wed, 15 May 2024 22:37:20 GMT Connection: close
2024-05-15 22:37:20 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 21 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 04 05 02 03 06 01 00 07 08 09 ff c4 00 4a 10 00 02 01 02 04 04 04 04 03 05 06 05 02 04 06 03 01 02 03 04 11 00 05 12 21 06 13 31 41 22 51 61 71 07 14 32 81 23 91 a1 08 15 Data Ascii: JFIF``CCQX!J!1A"Qaq2#
2024-05-15 22:37:20 UTC	16384	IN	Data Raw: 56 fe 67 7e b8 63 5b 2c 94 9a 92 44 31 21 8b 52 4b a9 4f d8 0f 3f 7c 4b cb 85 ce b6 4c 3b 2c dd 56 76 f4 fc d8 74 1b 9b f8 98 03 7b f7 b5 b6 be 16 3b 4f 14 23 54 65 22 71 71 71 75 3f 7e f8 17 d6 73 fc 12 1c e2 eb 81 a2 1a 7c c6 49 dc c5 cb 37 89 6c 65 04 d9 bc 87 4f e5 8a e0 96 30 e5 59 5d 43 b7 f6 9a 76 5f 53 fe 5d 71 50 bf 31 92 13 24 4d ca 9d 49 86 95 ac d3 a4 e0 ed e0 04 fe 78 1a 2a 08 b9 81 20 59 16 2d 24 7c be a2 e9 ff 00 68 3b af d8 e0 1e 18 eb 70 50 21 80 81 79 51 aa 8a 14 89 04 8c ae 9b 59 49 b9 16 38 5c f3 42 26 63 a1 74 8e 8c a3 08 76 50 65 40 91 65 ed 61 ef a4 93 bd ad e9 8b 20 a0 96 b7 9c 62 4b a4 29 ae 56 6d 82 2d fa 9f f7 7c 2c 0c d6 08 9b 25 0b 5f 97 bd 11 52 cb ae 37 fa 26 5f a1 fd bb fe 78 f6 14 e6 96 98 28 f4 4b 92 a8 48 ac 45 d2 35 b7 Data Ascii: Vg~c[,D1!RKO?\|KL;,Vvt{;O#Te"qqqu?~s\|I7leO0Y]Cv_S]qP1$MIx* Y-$\|h;pP!yQYI8\B&ctvPe@ea bK)Vm-\|,%_R7&_x(KHE5
2024-05-15 22:37:20 UTC	2595	IN	Data Raw: b0 04 f4 3d 3a 7a e0 33 5b 96 2e 5e ae 95 57 9d 3c 2d 0c c7 c7 ab ff 00 3d f0 a9 02 e8 89 2e 8c 97 41 b6 75 2c 12 ba 8a 27 9e 99 86 a4 93 60 c0 5b a6 d7 07 7c 46 9e 1a da c8 5e 78 0b a4 85 88 58 2a 3a 01 e4 a7 b0 c2 c1 29 8c a6 d9 26 65 53 15 4e 65 4b 33 99 69 16 34 03 a3 c2 59 7d ee 30 75 3a 09 54 36 b2 2f d5 50 90 9f 61 89 0e 26 c9 a2 93 66 50 55 f0 98 ab 21 97 f8 2c 47 dc 1b ff 00 99 fb 60 4a c8 24 96 4b 47 60 ce 6e be a4 5f 6f eb ff 00 8c 2c a7 77 a1 a2 d1 21 d2 a6 fa 75 28 b0 d9 ba 7f 51 fa e3 d8 51 2b b3 01 aa 57 4f 98 31 a6 24 e9 2c 97 4b f7 bd f6 3f 96 27 06 59 51 11 d6 da 08 b1 b2 86 bb 63 54 02 f8 85 60 58 28 47 57 3c 6d a5 65 60 97 b1 52 76 b6 3a d3 38 95 5a 05 32 b2 36 ad 40 5d 7d 45 fc f7 c7 17 90 39 ae 21 1b f3 d5 74 54 d1 93 03 55 4a cc 4b Data Ascii: =:z3[.^W<-=.Au,'`[\|F^xX*:)&eSNeK3i4Y}0u:T6/Pa&fPU!,G`J$KG`n_o,w!u(QQ+WO1$,K?'YQcT`X(GW<me`Rv:8Z26@]}E9!tTUJK
2024-05-15 22:37:20 UTC	16384	IN	Data Raw: 0c c7 90 8b 9f 54 7e 47 c1 75 99 6c 73 b5 7d 5a fc d5 43 92 90 a3 6a 25 48 17 04 f7 37 b9 fb e0 2a 1a 19 32 f9 aa 4d 6d 65 4c ed 23 6a 11 d4 c6 10 c2 07 63 6b fb e1 4c 8a ce 23 48 d6 de fc ee 13 03 32 00 5d b8 11 dd 24 7e 92 2c e7 e2 1e 59 94 bc e9 f3 74 8e 1b 68 96 33 cd 61 e7 a8 03 63 fa 62 3c 21 97 66 1f 12 1f 95 91 f0 5e 69 9a c1 a8 5e 78 a2 11 41 ee 65 fa 54 0f 7c 55 15 98 ca 82 9b 06 63 c9 66 62 f1 94 30 d4 9e ea c7 b3 a1 5f 4d 8b f6 4b e3 35 12 08 26 c8 b9 4f 60 c2 0a aa a9 d9 6f d8 98 a0 b1 f7 07 1a e8 7f 61 de 32 9e 18 24 aa ce b8 7a 3b 01 70 63 aa 76 3e e5 80 37 c6 db eb 3e 9b 46 76 00 4e d3 7f 11 b2 f8 a6 2b f9 56 1a 9d 47 32 98 71 68 de 2c b4 99 4f ec 4f 34 2c 25 af ce b2 7a 8a 81 fd 9b 25 14 cd a4 fb 9e 9d b1 ca 5f d8 cf 3d a1 a9 a8 a8 83 3c Data Ascii: T~Guls}ZCj%H7*2MmeL#jckL#H2]$~,Yth3acb<!f^i^xAeT\|Ucfb0_MK5&O`oa2$z;pcv>7>FvN+VG2qh,OO4,%z%_=<
2024-05-15 22:37:20 UTC	16384	IN	Data Raw: de d8 87 40 b9 0a 45 c2 5f c4 06 5e 39 a8 4e 1f ca 21 8a 79 4d e6 7a b9 e4 48 e2 8d 55 4b 1d 2c c4 78 ac 0e dd 4f 40 0d f0 96 6e 16 a4 4c bd 32 f8 2a 1e 30 1b 5c d2 c8 9f 53 0e c0 76 c2 8b c6 72 d1 f3 e4 20 2e 00 29 41 49 ca e5 d3 53 a2 cd 3b 59 62 86 15 25 9f ed d7 ee 76 c1 f5 f4 af 0e 54 99 6b 48 03 cf 27 32 a4 a1 d9 b4 ff 00 00 3e 43 61 7f 73 86 2a e3 ff 00 65 44 65 54 90 10 2f f8 b1 7d 2c 91 06 6d 61 09 b8 2a 5b a6 c7 a1 f4 38 e0 46 ea 9b 81 3a 27 df 3f 52 f1 4c b4 f9 83 51 d3 cb 18 8d 94 12 84 ae d7 56 23 66 5d 81 eb f6 c7 69 f3 fa 7c b6 94 f3 6b 26 cc 24 b8 b0 42 da 14 8f 33 fe fb e1 f6 2e cc 55 37 07 d4 68 a7 1a 71 db 8c 2c c9 af 9a a9 11 25 45 11 c2 39 71 11 7d 4c b7 bd cd fd 6f 6f 4c 52 cf b1 c5 72 6f 2a e0 6c 58 2a 58 5c 92 ac d1 bd b6 74 36 23 Data Ascii: @E_^9N!yMzHUK,xO@nL20\Svr .)AIS;Yb%vTkH'2>CaseDeT/},ma[8F:'?RLQV#f]i\|k&$B3.U7hq,%E9q}LooLRrolX*X\t6#
2024-05-15 22:37:20 UTC	5904	IN	Data Raw: a3 15 61 62 0d 88 c4 2b 14 8d a1 4e 0a 89 29 db 54 6e 54 ff 00 3c 7b 1c 98 5a 0e ab 54 8e 8e b6 6e 9d 37 c1 11 2c 68 ba 2d a9 7a 91 7e b8 d2 05 26 04 59 5d 0c ba 65 66 67 1a 2d 61 18 16 c7 62 8d 23 5b 2f 7f 3e b8 73 38 a5 3b 82 e8 a5 58 c3 bc a7 46 9f a5 1b f8 b1 6c 73 ca 91 f3 21 8c 46 a4 10 6e 01 07 da f8 30 63 45 d0 bc 2a 75 46 1b 59 d7 7f a0 0b 0b 7b e2 f5 ac bf 5b 8f b6 0d ae 50 ba 6a 49 e9 b0 f2 18 2a 9e a9 2e 2f f5 13 6b f9 61 ac 70 9b a5 b8 5a ca e7 66 99 8e 90 4a ff 00 3c 78 d1 cb cb 69 02 90 aa 2e 49 c5 80 0b ae 15 7b 0b 15 d1 4d 32 c6 cc 7c 00 10 37 3d 6f 8a ea 60 6a 9a 79 62 65 52 24 42 bb 1e 97 be 38 b4 c4 15 20 89 b2 cb a4 5a e1 a5 ab 24 89 24 71 a9 94 02 6e 0a 83 fd 71 0a e4 91 f3 26 44 90 c6 ac 9a 5e 43 fc 20 91 70 3e df cf 19 4e 6f 66 db Data Ascii: ab+N)TnT<{ZTn7,h-z~&Y]efg-ab#[/>s8;XFls!Fn0cEuFY{[PjI./kapZfJ<xi.I{M2\|7=o`jybeR$B8 Z$$qnq&D^C p>Nof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50176	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:19 UTC	424	OUT	GET /steam/apps/1145350/ss_f28befd916e59b8bf0a8a801b8a498b8adaa01eb.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:20 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 83704 Last-Modified: Tue, 30 Apr 2024 04:31:30 GMT ETag: "66307422-146f8" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=350575 Expires: Mon, 20 May 2024 00:00:15 GMT Date: Wed, 15 May 2024 22:37:20 GMT Connection: close
2024-05-15 22:37:20 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 00 02 07 01 08 09 ff c4 00 56 10 00 02 01 03 03 02 04 03 04 07 04 06 06 08 01 0d 01 02 03 04 05 11 00 12 21 06 31 07 13 41 51 22 61 71 14 32 81 91 08 15 23 42 Data Ascii: JFIFCCQXV!1AQ"aq2#B
2024-05-15 22:37:20 UTC	16384	IN	Data Raw: 24 20 8f 23 19 29 dc 85 04 87 ce 33 9f 8b d3 42 d8 2a c9 61 94 d3 d4 f9 d2 12 db 4f c7 b1 48 1c 1e 09 f9 f7 e7 52 4d 6c 39 52 59 e9 62 91 2a 62 2c 77 9c a9 0d c1 07 fe 07 56 a5 6c 42 e8 b3 1b 84 2c ce a4 4c 80 b0 94 e3 e2 5c fa 8f 5e fc 63 4d b3 2a 6f 48 87 78 b6 c8 d7 2a 96 8e 4a 77 5d d8 f8 65 1e 9c 72 3d 35 5e 96 c7 4f 60 af 4b 51 32 54 42 b3 4b 1c 63 cd 0c 70 77 1c 71 e8 3e 9a 94 ab 91 25 c0 e5 7f 9a 22 09 24 e1 9b 3d bb 0e 7b ea f9 49 2e 4c c9 00 fe c3 4f 51 5f 01 78 84 af e7 46 b1 3f 98 47 94 e1 81 df c7 7c 73 c1 d5 12 7e 6b b0 b7 d9 d0 ec dd 12 f5 aa 8d 1f 96 86 60 cc 42 b6 3d 4f 38 e7 1f 86 b4 69 b7 42 eb 13 1f a7 a3 6a 59 29 d8 6d f2 ea a4 75 65 24 f3 9e ff 00 3f 5c 8d 2a 8a 94 68 67 26 9d 8b 31 52 4f 0f 31 fc 69 21 07 91 dc 7c bd bf 1f 6d 62 57 Data Ascii: $ #)3BaOHRMl9RYbb,wVlB,L\^cMoHxJw]er=5^O`KQ2TBKcpwq>%"$={I.LOQ_xF?G\|s~k`B=O8iBjY)mue$?\*hg&1RO1i!\|mbW
2024-05-15 22:37:20 UTC	2414	IN	Data Raw: ad 01 bc 45 a9 b4 8b ac 2f 6c 49 e9 aa 62 d9 e6 c7 e5 f9 51 30 1c a9 03 df b0 ed 83 a6 4f d4 cf a3 54 5c 5f 70 bd 92 bd ba e2 b5 6a a9 a9 16 b2 9a 91 08 29 56 a1 12 32 df 74 64 12 72 02 fa 03 9c 9e da 49 ba e4 a3 a7 c1 2c 32 72 72 dd ed b1 7a e7 d2 d6 fa d9 49 9a 99 12 4f ef 42 4a 7f 2d 66 d4 76 61 39 25 b3 16 ee 7e 1b d2 32 9f 26 ae 68 cb 1c e2 45 0f 8f e5 a5 bb 2c f1 65 5b 83 2a 3c 39 ae 58 1d 63 ad 8e 70 c3 1b 1c b2 67 e5 eb aa 35 45 12 9b 6b 74 73 8a fe 9e 9a 8a 8d ea be cd 37 90 af e5 97 74 f8 01 c9 18 dd f5 1a b1 4a f6 33 ce 30 4a e2 05 56 87 ed 31 13 f0 10 ea 73 e9 df 56 2b b1 60 92 69 8c 35 51 94 91 2a 93 e2 11 90 1b 6f 3f 0f af e5 c1 d6 88 4a 9d 9b f2 2b 88 8d 51 00 96 a6 77 40 0a 34 8c 46 3d b2 75 5b 7b b3 12 dc 74 e8 26 b7 2d fe c7 2d d9 52 4a Data Ascii: E/lIbQ0OT\_pj)V2tdrI,2rrzIOBJ-fva9%~2&hE,e[<9Xcpg5Ekts7tJ30JV1sV+`i5Qo?J+Qw@4F=u[{t&--RJ
2024-05-15 22:37:20 UTC	16384	IN	Data Raw: 86 aa 90 45 e4 34 4a 30 cb 20 c2 f2 49 ca 7e 7d f5 96 b6 2a 9b 46 35 25 4c 54 fb 1c 70 cd c4 40 fc 59 fa 7e 1a 12 28 b4 0d a7 a8 79 16 58 dc 7d d7 24 1c 7c cf 1f c3 42 b7 c9 7c 78 32 eb 12 cb 6e 92 22 5c 19 00 00 c6 70 c0 e7 39 ce 9e 5c 16 26 d1 b5 0d 43 4a af 1c 84 19 62 da 0b 0e ce 08 c8 61 f5 1e 9e f9 d6 56 a8 d9 09 6a 56 5b 8c 65 c6 a0 b1 16 7c b2 d3 44 d8 fb bb bf 88 d2 96 ad cc 79 02 02 73 a1 12 dd 15 49 dc 49 f7 d3 14 dd 96 6d d6 f6 ea 04 af 43 70 a7 b4 db 68 d3 fd 72 e1 50 fb 42 93 da 34 f5 2e 40 3d bb 0f 9e 97 b9 3a b6 39 8d 2d 05 24 54 2f 57 22 13 0b 33 b8 1c e4 28 63 8f e1 aa 33 4a 69 a5 17 c8 62 d2 ed c9 70 41 4f 5e f4 e6 45 88 ae c1 23 ed c8 f4 dc 71 ad 58 d5 c1 59 8b 2a 5a dd 1b 1b b5 50 56 45 94 a2 b7 7d a3 19 d5 94 8a ca a2 a6 55 42 82 46 Data Ascii: E4J0 I~}F5%LTp@Y~(yX}$\|B\|x2n"\p9\&CJbaVjV[e\|DysIImCphrPB4.@=:9-$T/W"3(c3JibpAO^E#qXYZPVE}UBF
2024-05-15 22:37:20 UTC	16384	IN	Data Raw: e3 24 70 0f 3e fc f3 a4 8a d5 2a 2b 93 71 4d fa 06 ba 9f a0 2f 36 eb 2d 5a c2 bf ac 27 ca 32 35 3e 77 aa 73 bb 8e fe dc 73 ab 5e 27 19 57 22 c3 32 71 b7 b0 1b a1 2e 70 dd 6e 74 d6 eb 8b 18 67 dd b5 5f 18 2e 47 60 73 eb a4 69 5d b3 4f 89 2d 0d 23 a8 43 e1 b5 2d 3d ce 9a e7 47 59 3c 15 91 c9 e6 11 26 1d 1b 24 ee 53 d8 e0 82 46 b5 e3 c4 a2 93 39 d2 ce dd c5 f0 13 bd 58 92 39 84 b0 40 1c 54 65 64 8d 7f 79 80 c8 c7 cc 8c f1 eb 8d 4c f1 de e8 9c 39 f4 f9 64 28 d0 5a e5 6a 99 a9 a9 a2 6a 88 70 1d 5b b0 50 73 dc 9e dd 8f e4 75 95 63 6d b4 8e 94 b3 46 31 d4 d8 89 e2 65 3d 4d ae f9 63 49 82 ae d7 f3 40 8d f7 7e f8 1e df 2d 12 83 87 22 2c ab 2e e8 e7 95 15 7f 60 b9 d4 4d 4e 4f da 04 af 87 c7 08 77 1e 47 b9 c7 ae ab 1c 6e f0 d2 d7 26 2a ae 32 e7 f6 9f b3 8c 9e ed ce Data Ascii: $p>+qM/6-Z'25>wss^'W"2q.pntg_.G`si]O-#C-=GY<&$SF9X9@TedyL9d(Zjjp[PsucmF1e=McI@~-",.`MNOwGn&2
2024-05-15 22:37:20 UTC	7952	IN	Data Raw: 6e 1f 26 18 23 e4 46 ba f2 8d 3a 3a 78 ba a8 e7 c5 1c b0 e1 ab 24 8e be 2b 74 8d 14 10 23 a8 f8 5a 49 c6 4b 9f e8 35 1c 0c a3 af 76 cb 94 d7 2a 76 93 0d 46 aa 4f 23 ca 90 8f ae a0 6d 32 5d ce 3d 76 0a 97 6a e0 a0 85 13 be 01 f4 f8 8e b4 2e 0e 5c 95 49 9d 47 c0 fb 45 f2 ad aa 63 a4 a7 99 a8 ef 0e 2d 50 b7 db 45 2c 66 a1 be 30 c4 94 72 ca 81 0b 30 00 70 3b eb 46 38 cb 4b 92 e3 8f c4 c7 9a 50 4d 27 ca dc 58 96 b6 b2 f3 14 75 15 0c 58 ed 2e 81 98 92 40 0a 49 c6 3b e1 87 e4 75 51 7a 49 1a 29 f8 07 d3 50 39 a3 3c 88 8e d1 33 24 9b 4e d6 46 2a 41 c1 ec 46 99 01 f4 bd ef c6 6b 02 75 57 89 77 0a 7b 95 be ed 0d ca 83 a7 a9 e8 62 b8 d2 9a a8 27 30 b5 30 a9 02 39 14 ae 50 24 87 24 7a 64 64 e3 50 48 5e a7 a8 bc 11 a7 a8 a7 82 db 49 d3 92 59 85 e5 be d3 f6 c1 20 a9 0b Data Ascii: n&#F::x$+t#ZIK5vvFO#m2]=vj.\IGEc-PE,f0r0p;F8KPM'XuX.@I;uQzI)P9<3$NFAFkuWw{b'009P$$zddPH^IY
2024-05-15 22:37:20 UTC	8144	IN	Data Raw: 40 80 3b e1 b8 e3 23 9d 53 38 c7 22 a6 2e a4 76 5b 5f 58 dd 7a d1 43 dc e9 2a 29 a4 08 0f c6 36 22 67 f7 40 e0 83 f3 c7 e3 ac fa 14 36 40 9d 80 fa a7 c3 78 3a 96 eb 0d 73 5c ae 34 75 51 a0 8c 34 12 e3 09 fd d1 9e de fa 75 3a 54 48 b5 d5 fe 18 df 6e f6 e3 4e 9d 42 f7 24 89 b7 c7 0d c2 30 18 10 31 81 20 ed c7 e0 74 f0 c9 15 d8 8a 00 9b 14 cd 6c 86 e2 88 56 96 69 1a 15 76 23 05 d4 02 cb ef c0 65 f4 f5 d7 49 49 37 a7 b9 9f 4b 51 d4 f8 07 b4 4c ae ea 3e 22 bd f1 a7 20 89 d1 64 46 46 01 95 86 08 3c 83 a8 24 19 6f b0 d2 d1 d5 4b 20 3e 63 06 f8 15 bf 73 48 a2 93 1b 55 a0 8b 44 8d 20 dc 14 b2 fd dc 8e 7e 7a 71 77 37 f3 3c a3 b8 1c 11 ed a8 94 e9 5b 1e 18 de 47 48 86 1a a5 ae ae 78 4b 31 72 77 14 45 cf f1 ec 38 d6 45 79 1e ec d6 eb 04 7c a5 f8 4d 5c c8 e9 43 4c c1 Data Ascii: @;#S8".v[_XzC*)6"g@6@x:s\4uQ4u:THnNB$01 tlViv#eII7KQL>" dFF<$oK >csHUD ~zqw7<[GHxK1rwE8Ey\|M\CL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50180	172.64.145.151	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:20 UTC	428	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:20 UTC	308	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:20 GMT Content-Type: image/png Content-Length: 291 Connection: close Last-Modified: Wed, 21 Mar 2018 00:07:17 GMT ETag: "5ab1a235-123" X-Cache: MISS CF-Cache-Status: HIT Age: 372 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cad0f8d6dc8-MIA
2024-05-15 22:37:20 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50195	142.250.189.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	687	OUT	GET /vi/zlEfE7wtvBQ/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:23 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 16538 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:33:19 GMT Expires: Thu, 16 May 2024 00:33:19 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 244 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:23 UTC	607	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1b 1a 19 1a 1e 1d 1b 1f 22 27 25 22 22 22 22 27 2d 28 25 25 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2d 1b 1b 2f 57 36 35 36 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 5d 57 57 57 57 57 57 57 57 57 57 57 57 59 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 01 06 07 ff c4 00 49 10 00 01 03 02 03 04 06 06 08 03 07 03 04 03 01 00 01 00 02 11 03 21 04 12 31 05 41 51 61 13 22 71 81 91 d1 15 32 52 a1 b1 c1 06 14 42 62 92 a2 e1 Data Ascii: JFIF"'%""""'-(%%.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W-/W656WWWWWWWWWWWWWWWWWWWWWWWWWWW]WWWWWWWWWWWWYWWWWWWWWWh"I!1AQa"q2RBb
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 25 5e 2c f1 3e 48 6b 35 0b 4b d0 95 78 b3 c4 f9 23 d0 95 78 b3 c4 f9 21 ac d4 2d 1f 42 d5 e2 cf 13 e4 b9 e8 7a bc 59 e2 7c 90 d6 7a 13 fe 88 a9 c5 9e 27 c9 1e 89 a9 ed 33 c4 f9 21 a4 10 9e f4 5b fd a6 78 9f 25 1f 46 bb da 67 bf c9 0d 26 84 d9 d9 ee f6 d9 f9 bc 91 f5 03 ed b3 f3 79 21 a5 10 9b fa 81 f6 d9 f9 bc 97 3e a2 7d b6 7e 6f 24 34 aa 13 5f 51 3e db 3f 37 92 3e a2 7d b6 7e 6f 24 34 aa 13 5f 51 3e d3 7f 37 92 3e a2 7d b6 fe 6f 24 34 aa 13 5f 51 3e db 7f 37 92 83 f0 c0 18 35 18 3f 17 92 2a 84 2b 7a 11 fc c6 7e 6f 24 74 23 f9 8c fc de 48 2a 42 bb a1 1f cc 67 e6 f2 47 42 3f 98 cf cd e4 82 94 2b ba 01 fc d6 7e 6f 24 74 03 f9 ac fc de 48 29 42 bb a0 1f cd 67 e6 f2 47 40 3f 9a cf cd e4 82 94 26 19 86 04 c0 a8 c3 f8 bc 94 fe a0 7d b6 7e 6f 24 0a 21 37 f5 03 Data Ascii: %^,>Hk5Kx#x!-BzY\|z'3![x%Fg&y!>}~o$4_Q>?7>}~o$4_Q>7>}o$4_Q>75?+z~o$t#HBgGB?+~o$tH)BgG@?&}~o$!7
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 7d 51 7d 07 25 b7 49 f4 c5 26 30 e1 5e 5c d6 4c 9a 02 4d 40 64 02 e1 72 d3 11 de 75 dc 6d 27 d3 a9 43 25 2c 2d 46 d4 96 f5 ba 06 b6 60 00 4d b4 ec d3 7a 0a 7e 8c d6 67 4e ca 4e a3 4d e5 ee f5 9c 24 81 94 d8 0e e4 c6 06 a5 37 33 17 4b a0 a6 0b 29 55 76 78 97 13 26 23 84 03 ee 59 fb 29 b5 28 62 29 d5 34 6a 10 d2 4c 06 99 d0 85 6e 12 a5 4a 6e c4 93 42 a9 e9 a9 bd a3 aa 6c 5c 75 2b a7 1e 5e 9c b9 71 db 7f e1 0c 0f af dc b6 3a 06 08 69 79 0f 21 a7 d5 ea f5 a0 81 33 33 06 7d cb 3f 01 84 a8 1f 26 9b c0 83 ab 4a d6 0f aa 00 01 a6 c2 27 27 5b 28 33 13 13 0b 31 ae 5f e8 0c 13 09 21 ae 75 9c e6 99 0d 13 0c 73 ad 7f bb bf 8a a6 ae 1f 28 26 e3 ac d6 c1 cb bc 38 cd 89 1b 95 b3 55 b2 4b 4d c9 71 96 58 92 08 33 23 83 8a 94 d4 00 81 4c 41 83 1d 10 89 13 06 23 99 5a f4 ce Data Ascii: }Q}%I&0^\LM@drum'C%,-F`Mz~gNNM$73K)Uvx&#Y)(b)4jLnJnBl\u+^q:iy!33}?&J''[(31_!us(&8UKMqX3#LA#Z
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 82 d7 d9 4c eb 58 f2 23 91 fd 40 53 34 75 d4 d9 1b d4 1b 4c 75 e0 47 55 df 05 b1 d1 aa eb b3 a8 ff 00 e9 3f 05 59 78 8f a6 56 c4 d0 ff 00 fc ec 3f 99 c9 4f ac 8e a4 8f 5f 9e 9d aa 5f 48 2b ba ae 22 8f 49 06 29 b1 b6 11 23 31 f3 56 55 c2 d3 74 0c b0 06 82 4d 94 d5 b1 9b 8f c4 07 3a 1b a3 77 8d e9 42 79 eb aa d5 a3 b3 8b 1c 1d 9f 4f bb fa aa 6a e3 a0 b8 65 93 3a cf 8a a2 78 87 90 1a 58 e8 24 88 2a 38 46 b9 b5 c8 a9 39 80 36 9d e9 bc 35 52 d6 87 c0 91 0e 16 d0 8b d9 2d 5f 6c 3d ee 2e 2d 12 7b 77 59 54 f7 a5 31 4f 3d 2b ee 75 3b d3 3b 39 e4 e6 92 4d 86 a7 b5 70 6c fa 95 4b 9f 2c 6c f5 a0 93 bf 82 b7 07 86 75 32 64 8b f0 95 16 aa da 35 ff 00 bb ef 5f 47 c0 d0 06 85 13 a1 e8 d9 71 63 ea 8f 1e f5 f3 0c 7f f6 ae ee f8 2f aa 6c ef fb 7a 3f fc 6c ff 00 68 55 2f c2 Data Ascii: LX#@S4uLuGU?YxV?O__H+"I)#1VUtM:wByOje:xX$*8F965R-_l=.-{wYT1O=+u;;9MplK,lu2d5_Gqc/lz?lhU/
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 8d 70 3a 10 57 50 08 44 22 10 c6 56 d8 1d 66 f6 7c d6 7b 85 93 db 52 9c 55 9f 68 7b c5 bc 92 44 ac 57 59 f0 ac b6 eb 8d d5 4c 2e 34 5d 65 74 34 5d 75 ad b1 5d 1a ae ca a2 b2 d4 a5 5c f9 cc 4f 21 16 36 e2 9c 21 70 ea 90 2d 40 38 ce 62 ed da 88 fd 85 7b d4 9c a3 50 a2 12 a8 25 d1 c4 a7 f6 5d 42 e0 41 11 11 e3 bd 22 4f 5c 76 ad 8a 3a 2d 44 ab d4 5e e2 1a 48 13 03 45 d5 c7 dc 70 5a 65 41 32 27 44 a5 63 d6 ec 1f 1f fc 26 dc 52 75 0f 58 f6 0f 9a 0a 9b eb 27 69 88 09 6a 21 34 c0 62 ea 45 45 ee b4 f2 58 a6 25 6c d6 69 20 81 c0 ac ea b8 42 37 81 2a a2 ad 96 24 8f e9 07 c5 68 9c c1 53 82 c2 9a 7a 90 6c 05 b9 26 2a 09 08 32 9e 5a ea d7 13 24 f8 0d 53 2c 70 24 43 5b af 00 93 73 5c 2a 92 00 25 b3 ac ef 56 61 8b dc f8 01 82 00 33 0e b4 cf 3e 4a 2b 5d 85 58 aa a6 15 a1 Data Ascii: p:WPD"Vf\|{RUh{DWYL.4]et4]u]\O!6!p-@8b{P%]BA"O\v:-D^HEpZeA2'Dc&RuX'ij!4bEEX%li B7$hSzl&2Z$S,p$C[s\*%Va3>J+]X
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 72 d0 a3 f4 5d af ff 00 dc 55 f0 1e 6b 73 07 95 8c a6 dc c4 16 33 20 23 35 a1 ad 00 c6 e3 63 a2 62 88 eb b8 8b 02 49 03 91 2b 9f 2e 5f 8d f1 e3 3e d8 d4 be 88 06 e9 89 7d f8 b4 79 a4 76 c7 d1 c1 4d ad 71 ac e7 02 48 f5 40 85 ed 1a 90 db 8c 9c 39 e4 e0 7e 23 e6 b3 39 dd 6a f0 98 f2 5b 3b e8 d3 2b b8 8e 95 c2 04 d9 a0 a6 2b 7d 10 6b 1d 06 b1 20 82 47 54 6e 23 9f 35 a1 f4 7a a1 fa c4 4e a0 ad cd a5 46 1b 98 38 c8 dd ba f0 ba 5b 75 99 26 3c 6f fd 30 cf e6 bb f0 85 b9 4d a1 8c 6b 66 c0 01 3d 81 4d b3 17 d5 53 89 12 c2 b4 c2 42 a0 e2 ba f1 69 b7 7a c9 a4 eb b7 f7 b9 6a d4 1d 52 a0 a2 b1 01 a0 c8 b3 82 b3 7a ca 2b 4c 19 84 16 82 ac 06 ea a0 ac 0a 87 69 03 d1 d5 87 39 a7 a3 20 65 d4 98 77 cc a5 e9 e3 69 3d 8c 90 73 8c bd 62 49 ed 37 5a 7b 29 b2 d2 77 cc 77 2a eb Data Ascii: r]Uks3 #5cbI+._>}yvMqH@9~#9j[;++}k GTn#5zNF8[u&<o0Mkf=MSBizjRz+Li9 ewi=sbI7Z{)ww*
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: ba 9b a0 d9 c1 6c d2 c4 34 bd cd 06 e0 f0 b7 8a ee 2b 0c da ad 83 63 b8 f0 4d 1d d9 db 50 18 6b e0 1d c5 6c 03 2b c8 37 0a e0 e2 d2 40 70 e7 af 7a 7f 67 ed 27 53 39 1f a7 03 a8 45 c7 a0 52 51 a5 51 af 12 d3 21 4d 56 48 6d 7c 59 a5 48 c7 ac ee ab 7c d7 9e a1 4b 34 92 60 0d 4a d5 fa 4b a5 2e d7 7c 92 38 68 34 83 49 80 e2 5a 4f 02 74 9e 56 57 d4 f7 5d 3c 7c 65 be de 8f 63 53 60 6b 48 68 16 d4 dc a6 b6 a6 cc c3 e2 1b 99 f5 b2 3d a2 ce cb 36 9d 08 de b2 ea 39 f8 6a 6d 6d 30 5f 78 76 a4 e9 32 3b e5 27 89 c6 d5 14 9d 9d c3 36 a4 40 ea de c0 c6 f9 f8 2f 99 c7 c1 e4 e7 cf bf 0e 59 ed f4 bc 97 87 5c a9 56 d9 59 06 7a 55 d9 50 0b fd a6 38 7e 2b 7b d3 5b 3f 19 d2 36 1d eb 0f 78 e2 bc db f1 0e 79 97 38 9e d2 af a3 58 82 08 30 42 fa 12 59 ea dd 7c bb 67 d3 76 ab 84 1b Data Ascii: l4+cMPkl+7@pzg'S9ERQQ!MVHm\|YH\|K4`JK.\|8h4IZOtVW]<\|ecS`kHh=69jmm0_xv2;'6@/Y\VYzUP8~+{[?6xy8X0BY\|gv
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 34 29 c6 ed 2a 8d a9 04 02 0e 80 53 a6 7d f1 a2 79 9b 54 8d 69 d3 ff 00 35 2f 22 a6 1a f3 01 da 8d ea 60 15 ea 7d 2d 4e 2f 42 81 3d 81 bf 10 57 47 d2 1c 38 99 c2 b6 dc 03 0f ff 00 a8 4c 1e 5e 0a 32 95 eb 29 7d 21 c3 38 c0 c2 8f c0 cf 35 2a fb 7b 0e c6 97 1c 18 20 72 62 0f 2d 40 75 82 ba ad 41 04 4a f5 0c da f8 48 b6 13 f2 53 f3 5c 7e d0 c1 3b d6 c1 83 db 4e 9f 9a a3 c9 10 7d 92 3b 95 6e 5e c7 eb d8 19 ff 00 b5 3f 81 9e 6a 2f c4 ec f3 ae 19 dd cd 1f 22 b3 8b af 1e 10 f3 63 d8 57 ab 7f a3 4e b4 2a 78 1f f9 24 f1 7e 8b 0d 70 e8 ea 87 41 8b bf 58 ed 53 17 48 53 fa 53 0c a7 ff 00 a5 71 0e 6d 88 78 83 94 c1 dd 6d 3d e1 59 4f e9 46 6d 70 ce 03 33 58 49 78 b3 88 90 34 bd 82 f3 fb 13 15 d1 06 b6 a3 da 29 3d f2 1a e0 08 d0 b1 ce 20 e8 20 c1 b8 90 bb 8f c6 ba ad 4a Data Ascii: 4)S}yTi5/"`}-N/B=WG8L^2)}!85{ rb-@uAJHS\~;N};n^?j/"cWN*x$~pAXSHSSqmxm=YOFmp3XIx4)= J
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 86 fa b9 44 e9 2a bc f5 da 5c d6 d5 80 1e 59 20 40 91 bf bf 44 fe db 9a f6 fd 69 df 45 53 36 34 ea 5b 77 49 ca 78 70 2a 03 67 61 fd 87 7f a8 7c 92 55 f1 d8 86 41 75 52 73 4f ba d7 95 4f a4 ea fb 43 c0 2c de 3e 4f aa 4b 1b 0d d9 b8 7f 61 ff 00 ea 1f 25 31 b2 f0 fe c3 ff 00 d4 3e 4b 10 ed 6a c3 ed 0f c2 14 7d 39 88 f6 9b f8 5a a7 4f 2f ea ef 16 f7 a2 30 e7 ec 3b f1 9f 25 da 9b 1e 8b e4 bb a4 71 3b cd 42 4a c6 a3 b5 31 6f 6d 47 34 b6 29 b7 33 ba a3 4f 0e df 04 c6 37 1b 5e 8b 65 d8 a6 74 85 a1 c2 9f 43 7b 89 00 de dd e9 d3 cd fa 76 e2 d7 76 d3 91 00 1b 2a 2a 3c bc 6b 97 9e f5 4d 4c 5d 1a 14 c0 e8 da f7 ea 73 7c 49 85 0a 7b 7a 1b 4c 34 d2 9b 97 fd 91 a9 ea 8e ed eb d3 27 eb 17 57 0c 1b 75 2f 71 3d a1 5c ca 2c 1b c9 ef 09 2d ab b5 2a d3 70 73 2b b3 a2 78 cc c8 Data Ascii: D\Y @DiES64[wIxpga\|UAuRsOOC,>OKa%1>Kj}9ZO/0;%q;BJ1omG4)3O7^etC{vv*<kML]s\|I{zL4'Wu/q=\,-ps+x
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 13 16 bf 35 4b ab d2 26 4e 1c 1e 33 56 ad cf 1d 54 f6 96 1c 52 2d 8a 99 cb e4 9b 47 0f 35 45 1c 3e 76 83 9a 25 d9 6e 3b 39 f3 fd ca e3 97 ed ee ef e3 cf 71 31 5e 97 f8 76 fe 3a 9e 6b a7 11 4b fc 33 7f d4 a9 e6 a8 c4 d2 e8 e3 ad 32 5c 34 e0 61 51 d2 26 2c e7 e3 fc 38 fa d4 c8 fe c1 a3 98 7d 4f 99 55 8e 8f f9 2d fc 75 3c d2 fd 22 b0 14 ca 77 f1 fe 18 15 18 01 02 88 00 88 20 54 aa 24 70 3d 65 0a cf a6 41 3d 08 9e 25 f5 09 f7 b9 4e 86 19 d5 19 55 e3 4a 4c cc ef 2f 8f 82 bb 1d 82 a7 49 b0 6a bb a5 2c 07 26 4d 09 13 0e 33 65 72 a7 7f 1f e3 5d fb 05 ce b9 a9 32 38 28 52 fa 26 d3 f6 8c f2 68 85 e8 a9 ed 06 8a 6d 6b 29 07 90 3d 67 01 fb f7 ab d9 8f aa 03 03 40 11 77 08 10 7e e8 8d 07 cd 35 c7 1e 62 b7 d1 ba 74 cc 11 55 c7 ee b4 9f 80 85 0a 7b 3d a3 d4 a0 07 02 f1 Data Ascii: 5K&N3VTR-G5E>v%n;9q1^v:kK32\4aQ&,8}OU-u<"w T$p=eA=%NUJL/Ij,&M3er]28(R&hmk)=g@w~5btU{=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50196	142.250.189.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	687	OUT	GET /vi/N12y2V1VbyA/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:23 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 13186 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:34:01 GMT Expires: Thu, 16 May 2024 00:34:01 GMT Cache-Control: public, max-age=7200 ETag: "1715255551" Content-Type: image/jpeg Vary: Origin Age: 202 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:23 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 19 1a 1e 1d 1b 1f 1f 1f 25 1f 20 20 1f 25 25 1f 25 25 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2b 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 65 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1b 1b 2f 57 3f 35 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 04 01 03 05 06 07 ff c4 00 44 10 00 02 01 02 02 06 07 07 02 03 07 03 04 03 00 00 00 01 02 03 11 04 12 05 21 31 41 51 91 13 52 61 71 81 a1 d1 14 15 16 22 32 42 b1 06 c1 33 62 72 Data Ascii: JFIF% %%%%.'10-'--5=PB58K9+-EaEKSV[\[2AemeXlPY[W//W?5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"D!1AQRaq"2B3br
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 99 f8 fa b1 e6 aa 00 bf ee 9a 9c 61 cd fa 0f 74 d4 e3 0e 6f d0 74 ba df 99 38 35 3d 28 02 ff 00 ba 6a 75 a1 cd fa 0f 74 d4 e3 0e 6f d0 74 ba df 93 83 53 d2 80 2f fb a6 a7 18 73 7e 83 dd 35 38 c3 9b f4 1d 2e b7 e6 4e 0d 4f 4a 00 bf ee 9a 9c 61 cd fa 0f 74 d4 e3 0e 6f d0 74 ba df 99 38 35 3d 28 02 ff 00 ba 6a 71 87 37 e8 65 68 7a 9d 68 73 7e 83 a5 d6 fc c9 c1 a9 e9 cf 07 47 dc d5 3a f4 f9 bf 42 2f 44 54 eb 43 9b f4 1d 2e b7 e6 56 7e 3e a4 7d 28 02 ff 00 ba 6a 71 87 37 e8 3d d3 53 8c 39 bf 41 d2 eb 7e 65 38 35 3d 28 02 ff 00 ba 6a 75 a1 cd fa 05 a2 2a 75 a1 cd fa 0e 97 5b f3 27 06 a7 a5 00 74 7d cf 53 af 4f 9b f4 30 f4 44 d7 df 4f 9b f4 1d 2e b7 e6 57 a7 d4 f4 e7 82 eb d1 b3 5f 74 1f 8b f4 31 ee e9 f1 8f 37 e8 5e 93 5b f3 2c 71 5f d2 98 2e 7b ba 7c 63 cd fa Data Ascii: atot85=(jutotS/s~58.NOJatot85=(jq7ehzhs~G:B/DTC.V~>}(jq7=S9A~e85=(ju*u['t}SO0DO.W_t17^[,q_.{\|c
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: b3 1d 3c 7b 79 15 89 46 94 9e c4 df 80 c4 26 f9 96 ee 9e 3d a6 3d a1 70 62 38 39 bd c9 77 b2 6b 02 f7 c9 13 30 d7 f2 6b 78 8e cf 33 1e d0 fb 0d fe c2 ba fe 46 56 0a 3d 67 e4 37 42 e2 ea de d1 2e 26 1d 69 3f b9 97 16 16 9f 6b f1 24 a8 53 5f 68 dd 0d 6d bf b7 39 26 de ab b6 6e 86 0e 6f 6d 97 79 7d 34 b6 2b 19 cc 49 bc b5 1a 7e d5 63 81 5b db 7d da 88 57 e8 a9 d9 65 72 9b fa 60 ae e4 fc 0d 8e b5 4a b5 3a 1a 0a f3 fb a5 f6 c3 d5 f6 1e 87 44 68 2a 78 75 9a 5f 3d 57 f5 4a 5a db 67 ce f9 1f 3b 67 f1 a7 79 72 d4 d5 ad 7b 56 1c 6c 17 e9 ea d5 fe 6a ad 51 83 fb 21 6c ef be 5e 85 8a da 1b 0c a6 a8 d2 82 6a 2d 74 af 6c 9c ad 75 0b f0 d7 77 e1 c5 9d ad 2f 8e 74 28 b7 1d 75 24 d4 29 47 8c de cf 05 b5 f7 1a f4 46 0b a3 82 6d dd eb 77 7b 5b 6e f2 93 ed 6e e7 c9 be a5 af Data Ascii: <{yF&==pb89wk0kx3FV=g7B.&i?k$S_hm9&nomy}4+I~c[}Wer`J:Dh*xu_=WJZg;gyr{VljQ!l^j-tluw/t(u$)GFmw{[nn
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 68 5e 55 39 60 21 7d 4d ae c2 71 c3 d3 8f db 7e fd 66 f7 4f 83 31 d1 32 e5 39 65 15 33 2a 46 7a 26 3a 36 3b 27 2c b2 2c 61 41 8c ac 8b ca cd 8c 4a 09 ed 57 ef 19 58 cc d6 d4 f9 30 bc ad 33 c1 41 ee 6b b8 d6 f4 7a dd 27 c8 b0 eb a5 ff 00 86 41 e2 e3 d6 45 cc 9c 8a ef 47 be b2 e4 61 e8 f9 71 8f 99 63 db 23 c7 c9 98 f6 e8 f6 f2 19 93 7b 54 34 7f 5a 5c 8b 10 c2 41 7d b7 ef d6 6a 7a 41 75 5f 32 0f 1f 27 b2 29 77 eb 13 32 bb f0 ba a3 6d 8a c6 ac 5e 21 52 83 9c b7 6c 5b db dc 91 5f db a5 bd 23 66 89 a2 f1 98 95 29 2f ec a9 3d 5b d3 9e f7 e1 f9 3c ff 00 23 57 8e 99 fb 5a df 3e 1d 7f d3 7a 2d d3 8b af 57 f8 d5 35 bf e5 5b a2 8e e1 84 8c 9f 06 67 33 99 6c 38 1a 61 ba d8 dc 3d 05 b2 9a 75 65 c3 33 f9 61 cb 5b 3b e7 07 42 ae 97 15 8a af c6 a3 8c 7f a6 0b 2a fd c4 0e Data Ascii: h^U9`!}Mq~fO129e3Fz&:6;',,aAJWX03Akz'AEGaqc#{T4Z\A}jzAu_2')w2m^!Rl[_#f)/=[<#WZ>z-W5[g3l8a=ue3a[;B
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 66 63 0d f9 45 8b 4f 07 24 b5 a7 7f 02 3e ce f8 4b 90 df 0e 5b d5 ec 56 a9 52 71 da bc 51 72 aa c9 b6 fc 99 ad c9 4b 52 9d bb 8c da 73 e2 52 6c a7 88 92 73 93 5c 46 64 a3 6c 9a de c9 36 fc 8e 7c 71 05 c8 56 8e 57 29 4b 35 a3 f2 47 5e b6 de ce e5 b4 f1 ee 27 4e d9 c2 74 a1 99 ec 93 5b f2 ab b2 f5 3c 05 9d d4 e4 97 0b 5a 45 1a 18 a6 a3 1c 91 b4 d5 ef 37 ad be c4 b7 22 e6 02 53 95 4b 4d c9 5f 6c b2 a7 2d 5b b5 ec f0 35 5b e1 99 89 af 65 c8 53 4b 8b ef 66 ce 85 3d dc ae 5e a7 8a c3 c1 28 e6 8e cd ef 5b ed 36 fb 6d 0e b4 4b cb 3e 99 c4 b9 53 d1 b5 25 f4 b9 2e f4 9a 35 bd 11 89 dd 52 3e 3a 8e ac f1 b8 7d f2 7e 0e 5f b1 53 13 88 a2 d7 c9 52 b5 fb 1e af 32 c6 a5 fd 3a 56 25 ca 9d 0a d1 94 a3 29 a5 25 7d 4d d9 b5 c5 5f 6f 81 a2 4a 79 b2 b9 bb f7 b2 58 ab ca ce 52 Data Ascii: fcEO$>K[VRqQrKRsRls\Fdl6\|qVW)K5G^'Nt[<ZE7"SKM_l-[5[eSKf=^([6mK>S%.5R>:}~_SR2:V%)%}M_oJyXR
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 92 6d e7 4f 55 b6 35 bc 92 6f a2 92 d4 92 92 6f ad c3 fe 77 9c 22 f8 76 e3 8c ac 61 ea 36 d7 e4 bd 39 c2 3a a2 93 6b 7b 47 1e 9b 94 56 64 f7 d9 71 bf fc fc 9d 0a 34 5d 34 a5 26 9b 7f 6d fe 64 fb 4d d2 ce 77 a6 3b ac c6 4f 6c 9f ca f8 32 c4 75 a2 9d 0a 91 cf f3 76 9b 5e 29 ba 99 52 f9 6f ad f1 3a d6 cc 56 25 66 c6 2c 68 c4 63 14 1b 8a 57 96 ad 46 b9 62 53 4a 39 9d fe ed 4e f7 e1 64 6b 7c 37 b6 71 92 a5 67 7d 57 5c 8d 35 b1 72 84 5b da f6 25 6d ad ec 45 d5 85 56 5e 77 db dc 34 6e 15 55 c6 a8 da f0 a3 f3 cb b6 6f 62 f0 5f 93 8e ad a6 95 cb 3a 74 9b 5b bb b9 a0 74 77 b3 d1 f9 b5 d5 a9 f3 55 7f cc f7 77 22 be 97 59 b1 98 68 f0 85 69 78 b7 18 fe ec ed 9c 3c 7a ff 00 f2 54 78 3a 12 5f ff 00 48 9f 2f 39 97 d1 76 d1 90 0c a8 00 00 51 d2 35 13 8c 52 77 bb 7b 3b 0b Data Ascii: mOU5oow"va69:k{GVdq4]4&mdMw;Ol2uv^)Ro:V%f,hcWFbSJ9Ndk\|7qg}W\5r[%mEV^w4nUob_:t[twUw"Yhix<zTx:_H/9vQ5Rw{;
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 7b 49 16 76 9a 76 7a 0a 35 54 95 ee b5 6d b6 c4 5c fd 27 4b fb 09 56 6b 5d 59 ca 5e 17 d5 e5 63 ca cf 13 38 d2 9a 4e c9 a7 f8 3d be 81 86 5c 1d 15 c2 11 fc 1c 7e 4d f3 11 0b a5 4d b3 2b e7 13 4e ac b8 8c 2d 4d cd d4 a6 ff 00 cc b3 47 ce 27 6c e7 e9 ec 23 ad 85 9a 87 f1 21 6a 94 ff 00 aa 2e eb 9e b5 e2 78 e1 d9 6b 0b 5b 3c 7b 56 df 53 79 c0 c0 e3 33 46 15 60 f5 49 27 ea 99 da a1 59 4d 5d 78 ad e8 4c 0d a0 02 01 cd d2 5f 5a fe 9f dc e9 14 74 94 35 46 5c 35 32 c0 f2 73 d2 f3 a3 53 11 4e 49 ca d2 93 a6 f8 5d 5d 27 d9 ac dd a3 74 cc 5c 72 d7 92 8c d7 dc f5 46 4b 8f 63 28 e9 ca 59 71 2d f5 e2 9f 8a d4 ff 00 08 a0 66 6f 31 2f 76 97 c6 ae a6 9e 73 dd d1 d3 3a 41 56 6a 14 dd e1 17 76 f7 4a 5b ad d8 8a d8 3c 75 4a 0d e4 69 c5 bb b8 cb 67 7a e0 57 06 26 f3 9c bd 55 Data Ascii: {Ivvz5Tm\'KVk]Y^c8N=\~MM+N-MG'l#!j.xk[<{VSy3F`I'YM]xL_Zt5F\52sSNI]]'t\rFKc(Yq-fo1/vs:AVjvJ[<uJigzW&U
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 1f 3e c7 e0 4c 2b 8b fa 8b 03 27 0c d6 f9 a9 b6 fb e2 f6 fe cf c0 f3 88 f7 75 b1 2e 6a d2 8a ef d6 79 9d 21 a1 65 16 e7 41 5e 2f 6d 3d 8d 7f 4f 67 61 9b d7 2f 5f c6 d7 8a 7f 1b 78 72 81 19 cf 2b b4 93 8b e1 24 d3 10 96 67 68 27 27 c2 29 b6 72 db 2f a3 cb 4f 39 87 a0 fd 25 18 ba 95 db fa 94 60 97 f4 bb df cd 23 d2 9e 3b 05 82 c4 51 6f 10 ad 07 08 b7 93 6b 9a da e2 ed b3 52 3d 75 2a 8a 70 8c e3 f4 c9 26 bb 9a ba 3a 63 10 f3 57 52 b6 99 c2 d6 0d da 7d e8 e5 62 2b 2a 3a 46 32 4a ea a5 2a 91 6a fa be 59 26 9f 9b e6 5e 39 18 fd 78 ca 0b ab 4e ac 9f 73 71 48 b5 72 f9 11 fc 66 5d 29 e3 e6 f6 5a 3f 92 b4 a4 db bb 6d f7 98 07 4c 3c 01 46 bc 65 8a ab ec 94 db 4b 6d 79 af b6 1d 5e f6 66 a6 22 75 aa 74 18 5b 3a 9f 7d 4f b2 92 e2 f8 be 08 ef 68 cd 1d 4f 0d 49 53 86 bd Data Ascii: >L+'u.jy!eA^/m=Oga/_xr+$gh'')r/O9%`#;QokR=up&:cWR}b+:F2J*jY&^9xNsqHrf])Z?mL<FeKmy^f"ut[:}OhOIS
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: c4 97 e3 91 e5 f9 55 ce 9f f8 77 d0 9c 5d e8 ab d6 54 e8 d6 9b d9 1a 73 7c 93 3c 6e 84 c3 aa 98 69 c1 ed 56 69 f3 b1 dc fd 55 8b e8 f0 92 82 fa aa b5 05 dd b5 fe 2d e2 79 fd 19 8b 54 1b d5 74 d5 ac b5 17 fe 32 9b 77 5a 7e d8 f9 b9 9e d5 f2 d0 83 76 5d a6 fc 6d 78 4e 79 a1 1c b7 5f 32 ed 2a b3 e9 4b 8c 77 8e e9 c0 54 d4 8c d1 57 b9 8a db 51 8f b5 41 00 0a a0 30 d8 b8 16 3d 8f f9 bc 8c fb 1b eb 79 16 6c 66 cc eb b6 1c f7 4a af b1 be b7 90 f6 47 d6 f2 2d 82 ed 83 74 aa 7b 27 f3 79 07 85 b6 d9 79 16 ca f8 bf a7 6a ee b9 26 22 08 99 56 92 5b 9d fc 02 9b 4a d7 21 98 cd ce 6e 8c b0 9b 44 6e 2e 06 d8 d6 6b b4 b7 4e 4a 4a e8 a0 89 46 6d 6c 76 26 05 ec 83 21 5a 38 a6 b6 eb fc 96 e2 ee 93 5b ce b1 89 73 9c c3 45 4a 0e 4f 69 0f 63 7d 6f 22 d8 2e d8 4d d2 ab ec 8f 8f Data Ascii: Uw]Ts\|<niViU-yTt2wZ~v]mxNy_2*KwTWQA0=ylfJG-t{'yyj&"V[J!nDn.kNJJFmlv&!Z8[sEJOic}o".M
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 24 c1 b6 59 30 00 00 0d 75 6b 28 ea db 27 b1 2d a0 4e 73 51 57 7a 91 0a 34 5d 46 a5 35 68 2f a6 3c 7b 59 2a 58 57 27 9a a6 be 11 dc bb cb 65 88 19 30 01 a4 09 d3 9e 57 73 5b 92 56 bb db b0 c8 1b a5 88 93 df 6e e2 19 e4 f7 be 66 1a b2 bc 9a 8a e3 2d 48 d6 b1 4d fc b4 23 99 ef 9c b5 45 0f 23 6c d6 58 e6 9c 94 57 69 a6 55 29 d5 c3 55 b3 76 8d f6 ea 77 5a d3 ee 27 4f 03 f3 67 ab 27 52 7d bf 4a ee 44 eb 68 fa 53 96 67 1d 7d 8e d7 3a f1 4a 66 0c 14 52 a5 0b 2b 7c b1 e7 6d a6 eb 12 51 b6 a0 7a 22 31 0c 4b 16 16 02 e5 42 c2 c0 c8 18 b0 b0 b8 b8 30 90 64 ac 2c 1a c2 17 32 4a c2 c0 c2 20 95 85 81 84 6c 63 29 3b 0b 03 08 65 19 49 d8 58 08 34 60 d9 61 60 20 8c e5 25 61 60 20 d0 b9 3b 0c a0 c2 17 32 4a c6 6c 0c 35 ca 37 4d 71 27 a3 a5 7a 14 fb 22 93 ef 5a bf 60 6b c0 Data Ascii: $Y0uk('-NsQWz4]F5h/<{Y*XW'e0Ws[Vnf-HM#E#lXWiU)UvwZ'Og'R}JDhSg}:JfR+\|mQz"1KB0d,2J lc);eIX4`a` %a` ;2Jl57Mq'z"Z`k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50198	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	655	OUT	GET /steam/apps/2668080/ss_a2e873c749f7303529b471ba9e9ed793abd409f6.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:23 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 76195 Last-Modified: Thu, 14 Dec 2023 07:16:26 GMT ETag: "657aabca-129a3" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=310579 Expires: Sun, 19 May 2024 12:53:42 GMT Date: Wed, 15 May 2024 22:37:23 GMT Connection: close
2024-05-15 22:37:23 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 04 03 05 06 07 01 02 08 00 09 ff c4 00 60 10 00 01 03 03 03 02 03 05 04 06 04 08 09 09 02 0f 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 14 22 61 71 81 08 32 91 a1 15 23 Data Ascii: JFIFCCQX`!1AQ"aq2#
2024-05-15 22:37:23 UTC	16384	IN	Data Raw: c2 8c a5 19 a4 31 54 a7 15 24 21 66 d3 c5 16 21 54 b5 9a 04 28 96 a8 01 66 d2 53 da 98 05 34 e2 85 17 41 41 6d 2d c0 8d f8 3b 33 b7 76 38 cf a5 3b 15 07 42 79 4e b8 94 78 89 6f 27 1b 96 70 07 ce 8b 22 10 cc f2 09 04 e6 a4 24 28 a9 09 5e 7e 34 12 34 05 3c f1 9a 00 4d 4c 83 9e 29 01 b3 68 09 3e 79 a0 03 23 3f 83 de 81 04 38 a0 b4 9c 1a 60 29 09 cd 9e e9 a4 03 9a 10 1d 1c 1c 50 2a 35 72 12 88 3c e6 9a 0a 00 79 c7 61 b7 21 08 da 12 f2 3c 35 e5 20 e4 67 3c 67 b7 6e e2 a2 08 67 28 4e 55 bd 25 43 07 80 71 cf 95 2b 25 42 08 65 5b c1 56 55 d8 72 68 01 c5 b8 0b f0 54 e8 db b5 24 0c 13 c9 cf a0 a7 62 30 13 85 27 79 28 41 20 29 40 64 81 eb 8f 3a 2c 60 e1 af 11 5e b4 93 dc 5d 81 fd 90 9f 2a 43 17 8d 0b 72 80 23 03 d6 84 c0 3b f4 3e 50 36 f7 cf 95 4c 46 89 b2 c9 8c fd Data Ascii: 1T$!f!T(fS4AAm-;3v8;ByNxo'p"$(^~44<ML)h>y#?8`)P5r<ya!<5 g<gng(NU%Cq+%Be[VUrhT$b0'y(A )@d:,`^]Cr#;>P6LF
2024-05-15 22:37:23 UTC	3049	IN	Data Raw: 21 6f 60 2d 67 d7 6b 64 fe 35 cc cb 1f eb 3a 51 de d3 49 ac 3d 72 e4 92 e9 9d 79 ac f4 62 d9 b0 de 2c f6 3f d1 30 23 a5 96 a7 5b e4 29 29 09 48 da 84 f8 67 9d d8 03 83 db d7 d6 32 c6 e3 c9 28 4d 4c ae fa a3 ae 64 ea 59 ad 25 6b ca 51 92 4f c4 9e c3 d0 71 53 c6 88 cd 90 63 21 49 1f 7b 1f 33 57 14 50 e3 a6 74 cd df 5b 5e e3 5a ac d1 97 2e 73 e7 dd 42 4e 12 91 e6 a5 2b b2 52 3c c9 a8 b6 92 1a 4c ee 6e 94 74 e5 1d 32 d2 28 b5 99 86 e1 39 d5 07 65 cb e4 25 6a f2 4a 01 ec 84 f9 79 93 92 7b e0 66 94 ba 99 6a d9 51 2b 52 7b d2 01 87 59 69 38 1a cf 4a dd ec 37 06 50 ec 3b 94 67 23 38 0a 46 46 e0 76 a8 7c 52 ac 28 7c 40 a7 c9 24 e8 e1 dd 23 d2 6d 47 d0 9e af c3 b0 de 8b 32 fd b6 29 79 99 51 73 e0 c8 49 6d 5b b6 95 00 72 95 a3 04 11 e9 e4 45 4b 0e d3 41 9b 7c 6c ba Data Ascii: !o`-gkd5:QI=ryb,?0#[))Hg2(MLdY%kQOqSc!I{3WPt[^Z.sBN+R<Lnt2(9e%jJy{fjQ+R{Yi8J7P;g#8FFv\|R(\|@$#mG2)yQsIm[rEKA\|l
2024-05-15 22:37:23 UTC	16384	IN	Data Raw: 00 96 d1 80 70 01 38 c8 2f df f6 63 c1 35 1e 8f 6a 5c 90 99 7d 65 be c1 6e ee 23 bc 81 0a 79 da e4 67 10 16 96 d1 93 f7 3b 60 e0 e3 38 fc ea 52 8a 6a d8 a1 39 26 3c 69 b4 de 6e 8e b9 63 d2 33 d9 b7 df 1f 69 92 99 4b 21 42 33 04 29 d5 28 f7 c9 42 88 da 13 93 ef 63 8e e3 16 28 fb 4d 1b 72 c9 28 db 3a 3a c5 64 16 1b 34 2b 7a 5c 5b c9 8c ca 5b 2f 38 72 b7 08 1e f2 d4 7c d4 a3 92 4f a9 ad 69 52 a3 99 2f 69 db 0e 6c 6f 24 00 7e a2 81 74 8a 08 a4 9a 28 28 50 46 ca 4a 7c aa 49 6c c2 8f 7b 1a 40 1d f3 51 25 54 56 fd 68 d4 e8 b0 46 b4 c2 52 b6 7b 53 aa 70 ab 19 c6 cc 6d e3 e6 ac ff 00 a3 5c 3f 15 9b 58 94 17 7f c8 f6 ff 00 64 f4 9e 7e ae 59 3f ba bf 79 58 c9 d4 10 ed 56 c4 98 6a 49 f6 b5 29 c0 b2 72 54 84 93 95 73 ea a0 47 e3 5e 3d ad da 5d 8f ac f4 6f 4f b1 56 eb Data Ascii: p8/c5j\}en#yg;`8Rj9&<inc3iK!B3)(Bc(Mr(::d4+z\[[/8r\|OiR/ilo$~t((PFJ\|Il{@Q%TVhFR{Spm\?Xd~Y?yXVjI)rTsG^=]oOV
2024-05-15 22:37:23 UTC	16384	IN	Data Raw: 69 5b 7a 52 fa d2 50 ac 13 ec 8e 00 7d 70 40 ed 50 6a 4d 96 45 c5 2e 47 db 7f 47 f5 8a 64 67 f4 1d c8 93 c8 4f b2 ba 76 9f 2f ba 9f e3 56 a5 45 56 9a 24 57 0e 86 f5 3b 53 a1 01 76 59 6f bc af 74 bd 31 41 a0 12 3b 02 55 8c 0a 25 6d 51 18 46 10 7b 16 cf 4e ba 05 aa b4 6d b4 36 cb de cb 32 40 47 b6 2d 97 da 21 69 19 3e 18 56 77 6d 07 1e 99 24 93 d8 54 1c 5b 2d 53 8a dd 8e 57 ce 89 4c d4 8c be c5 e1 31 d4 0a 49 69 5e d9 92 df 7f 74 f9 fd 68 e8 75 41 e6 25 ba 64 26 4f d9 51 a6 8b 6f 33 35 b8 ee 76 71 a6 96 cb 83 e6 16 e3 6a 3f 4f ce 85 85 13 fd 23 e0 5d 5d 2c d0 36 fb 0a e1 44 69 b6 64 98 ac 84 2a 4b ad 37 e2 b8 72 4e 54 52 90 0f 7c 56 ab 8c 63 48 c7 92 6e 56 58 73 27 c2 d3 53 d0 a4 46 71 6a 29 50 29 8e 30 39 c7 97 6f 2a 94 32 6d 4c aa 3b d8 44 5d 6c c3 aa e2 Data Ascii: i[zRP}p@PjME.GGdgOv/VEV$W;SvYot1A;U%mQF{Nm62@G-!i>Vwm$T[-SWL1Ii^thuA%d&OQo35vqj?O#]],6DidK7rNTR\|VcHnVXs'SFqj)P)09o2mL;D]l
2024-05-15 22:37:23 UTC	7952	IN	Data Raw: 99 55 70 bd 3e 2f e2 ff 00 0e 08 cb d1 d2 a5 ed 0a 71 27 f6 54 16 70 6b 9b 2b 67 a8 c4 94 51 e6 93 25 93 84 ca 5e 3f be 01 14 a2 ab 72 e9 3b 26 fd 3a ea 13 ba 32 e4 e8 97 1d bb 85 ba 4e 10 fa 53 94 ab 00 f0 52 7c 8f fb fc 2b d0 78 7e b5 69 a5 53 57 16 79 ff 00 11 d0 cb 53 0b c6 ea 4b 82 f6 b2 4d b0 6a 90 97 2d 37 f8 8d 05 0c f8 53 55 e1 38 93 e8 7c 8f cf f2 af 69 86 58 35 0a f0 e4 5f 27 b3 3c 46 57 9f 4d b6 a3 13 f9 ad d0 fc fd 91 f7 50 ca 66 6a 0b 6a 98 8e df 84 d2 dc b8 05 a5 b4 64 9d a9 4f ec 8c 92 70 38 e4 d6 85 a7 71 b7 d5 15 f7 a3 33 d6 c1 d2 51 93 fb 98 e5 60 d6 fd 36 d0 0c 48 b9 5e ef 46 e9 31 83 88 f1 63 36 55 e2 ab 04 9d a0 7c b1 b9 47 cf 8a cb 97 55 a7 d3 2d a7 d5 2f c0 97 93 ad d5 2a 8e 37 14 fe a2 1a 4b ed 6d 67 d5 7a c9 31 b5 3c 24 59 b4 d3 Data Ascii: Up>/q'Tpk+gQ%^?r;&:2NSR\|+x~iSWySKMj-7SU8\|iX5_'<FWMPfjjdOp8q3Q`6H^F1c6U\|GU-/*7Kmgz1<$Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50199	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	632	OUT	GET /steam/apps/2668080/capsule_616x353.jpg?t=1714968679 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:23 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 79227 Last-Modified: Wed, 06 Dec 2023 03:39:52 GMT ETag: "656fed08-1357b" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305047 Expires: Sun, 19 May 2024 11:21:30 GMT Date: Wed, 15 May 2024 22:37:23 GMT Connection: close
2024-05-15 22:37:23 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 00 01 07 08 09 ff c4 00 4f 10 00 02 01 02 04 04 04 04 02 08 04 03 06 04 03 09 01 02 03 04 11 00 05 12 21 06 13 31 41 07 22 51 61 14 32 71 81 08 91 15 23 33 Data Ascii: JFIFCCahO!1A"Qa2q#3
2024-05-15 22:37:23 UTC	16384	IN	Data Raw: ea a3 b0 fa e1 d8 0c 54 b4 70 4b 21 59 5c 4a 5b f5 f5 4d b9 53 fe 1f 7e d8 91 a3 25 ab a8 c9 34 53 4b 4b 24 c8 80 10 04 66 29 c2 9d c5 d1 b6 3f 63 f6 c2 4d a5 e6 8a d2 9f a0 f6 7b 9e e5 f9 b6 55 91 ac 35 48 6a 29 e9 de 09 a9 e4 04 48 8c 24 66 00 ad af ba 9b 83 d3 11 a9 5b 1e 89 02 32 fa a8 73 14 85 a1 2a f4 f2 3b 0d 40 f9 76 27 7c 5c 24 9a b2 25 1a 74 4e a1 92 82 a2 64 54 30 4e e4 d8 44 b2 58 b7 d3 1a 5c 64 a9 3a 64 ef 17 6e 36 11 8b 2f 81 50 33 c3 a4 5e c6 d7 b8 f7 b7 a6 29 f9 44 85 c6 ff 00 5f 00 94 b9 2d 34 34 bc f6 8d 81 60 ad 61 70 45 f7 b0 ed 6d c6 e7 11 1b 7d f8 2a 49 25 ba dc c8 e0 a6 56 d2 e6 54 60 37 ef 6c 56 fd 88 d8 2f 43 56 b4 b4 95 50 a2 96 52 37 95 fe 60 0f 5b 5f fa e3 19 e3 73 69 df 1d bb 1d 10 c9 a1 3d b9 ef dc 79 51 80 16 b0 05 75 00 c3 Data Ascii: TpK!Y\J[MS~%4SKK$f)?cM{U5Hj)H$f[2s;@v'\|\$%tNdT0NDX\d:dn6/P3^)D_-44`apEm}I%VT`7lV/CVPR7`[_si=yQu
2024-05-15 22:37:23 UTC	2009	IN	Data Raw: 0a e8 02 fd 1b 51 1b 83 d8 8e be d8 ca 59 5f 63 48 c1 77 08 7c 06 63 ae 2a 1a 4c be 0c be 95 8d 8d 66 bb 95 16 f9 ae 2c 75 5f a0 e9 8c b5 2e 5b b3 45 17 c2 08 e4 19 8e 6b 58 d5 52 66 74 a9 44 bc cd 14 da 9b 54 86 35 f2 92 6d d4 9b 5e fe f8 ce 5a 57 05 c6 fb 93 9d 55 d9 40 96 57 55 2c 4a 85 d3 bf b9 bf 9b 6f 6f cb 09 14 33 9a d5 d4 d1 e5 32 4f 0f 9e 50 3f 56 b2 02 75 1e b6 b7 6e 87 7b 80 3b e2 a3 4d d0 bb 1c c3 3a 08 2a 99 92 49 26 59 ad 3c 72 c8 da b5 ab 0d 43 eb dc 7f e9 c7 54 78 39 d8 cd 31 50 cd 25 b4 b9 00 6a b9 dd 47 6c 58 8e 8f c1 d9 ca c1 93 44 91 40 8f 98 8a 85 a4 e6 15 36 30 1b b5 9c 8e 80 0d 60 13 df 1c 99 23 ed 7a 1d 18 de c1 a9 7f f9 6d 44 f1 2d d8 2d d0 16 16 fa 7f 2b 62 a2 f5 c6 c8 6b 4b 74 53 38 92 2b 66 82 45 46 f3 a0 2c dd 98 f4 c7 4c 1e Data Ascii: QY_cHw\|cLf,u_.[EkXRftDT5m^ZWU@WU,Joo32OP?Vun{;M:I&Y<rCTx91P%jGlXD@60`#zmD--+bkKtS8+fEF,L
2024-05-15 22:37:23 UTC	16384	IN	Data Raw: 23 c3 25 55 12 48 69 c9 31 14 65 28 09 04 5c 2d 86 f6 36 c7 86 a5 e4 7a ee 1e 64 28 b2 45 82 79 dd a6 9a 29 24 d2 6f 32 b4 6a b6 1f bb 6d 87 5d f0 f5 13 a4 8b 91 70 3d 6d 14 55 b3 d7 71 01 cc 8d 63 6b 11 81 cb d3 60 40 b1 df 6b 75 16 df 0d cd 3d 92 a0 50 6b 76 c8 8f 93 d5 65 72 c3 3c 93 a4 d9 8c a0 43 25 43 29 44 44 ef a0 5e c2 f6 1b 7d f1 49 a7 b7 62 6a 8a 17 14 71 36 6b 51 59 99 64 c8 ab 96 2e eb 1c ca da e5 94 a8 d4 55 6d fc 4b 7b 5b f3 eb 8d a3 15 5a 8c 9b 7c 17 0e 0e cd e4 ad c8 22 7a 94 8a a5 e0 41 15 41 73 71 22 ed 61 a7 b1 dc 1b 63 29 2a 96 c6 91 7b 6e 40 e2 4c 9e 9a 97 87 e7 a8 10 45 20 40 74 a1 63 18 8c 33 5c a2 91 e8 77 1f 53 8b 84 9b 74 4c 92 ab 28 b4 c4 c5 a5 19 95 c1 5b f9 0d c0 f6 fa e3 a8 c4 b9 70 26 69 35 06 65 34 50 44 25 92 aa 06 85 11 Data Ascii: #%UHi1e(\-6zd(Ey)$o2jm]p=mUqck`@ku=Pkver<C%C)DD^}Ibjq6kQYd.UmK{[Z\|"zAAsq"ac)*{n@LE @tc3\wStL([p&i5e4PD%
2024-05-15 22:37:23 UTC	16384	IN	Data Raw: fa 64 2a da bd 6c 0e 2b 72 4e cb e1 3c b5 b5 fc 1a ff 00 15 53 25 43 49 3c 9c 96 94 ea 64 40 46 d7 3b 9b 9b 9d f1 cf 92 4a 2e d9 d9 82 0e 68 7f 38 57 a2 cc c3 42 dc b1 57 19 56 3b 6c 4f 51 f9 8f e7 8e 5d 76 bd c7 6f 87 a5 d7 98 4a 5e 19 ab a6 a1 5d 22 ee ca a0 03 b8 b5 ef fe 58 e7 59 53 96 e7 43 c5 ec d2 25 49 48 19 20 68 60 31 c0 80 6a 7b ea 60 2d d0 0f 6c 74 bc ca 5c 0a 38 5c 17 a8 d3 34 a5 64 2b 16 a9 74 f5 d5 64 51 ea 7d c1 fb 63 68 35 c9 c9 97 6d 90 34 d3 c8 8e 0b b6 ae ec 71 b1 cc 4f 8a 6d 07 52 1f d6 5b a9 dc 0f f3 38 75 7c 8a ea e8 91 45 5b 49 99 d6 d4 50 ff 00 cd ae 68 21 33 c3 14 76 bd 50 1f b4 11 b1 ff 00 c4 5e b6 3f e7 8a b7 1f 71 8b 69 ec b9 fc cb 4e 5f c2 99 65 7d 0d 2d 2b 1c ca ad 05 b5 49 52 fa 98 11 b9 0e 41 b8 63 fc b7 18 8d 72 88 d4 13 Data Ascii: d*l+rN<S%CI<d@F;J.h8WBWV;lOQ]voJ^]"XYSC%IH h`1j{`-lt\8\4d+tdQ}ch5m4qOmR[8u\|E[IPh!3vP^?qiN_e}-+IRAcr
2024-05-15 22:37:23 UTC	7952	IN	Data Raw: 52 49 8d a0 78 c8 d9 6d 7b 8f ae 0e 00 6e 15 81 0c 88 88 1e ea 55 e2 bd ed 7f ea 0e 1d b1 23 85 d0 c4 0c ca 1d 95 77 dd 9f a6 37 b3 9c 36 25 bf 4e 9e dd 31 b1 99 be 65 87 be 00 1c a7 a9 e4 ca b2 6c 4a f6 61 70 70 86 b6 35 cd d4 4f 61 e8 30 05 19 25 5a d3 c6 5d ba 0e 80 77 c2 04 33 4b 21 79 1a 79 4d dd be 50 3a 01 84 bc c7 e8 38 cc 19 c9 56 b9 3d af d3 14 21 5f 16 68 01 a8 2e bb 02 bb 8b ff 00 2c 27 43 40 b8 a3 ab cd a7 96 45 8d e4 8d 07 31 d5 18 5d 56 fb da fd 58 ef 61 dc e3 36 cb 48 81 c4 4f 4f 1e 75 7c be 35 8a 9c c4 80 2f 5d 7b 7c c7 dc ff 00 6c 38 83 21 4f 24 b5 31 1d 46 da 45 b5 6a bd b1 44 2d 87 69 ab 5e 0a 7d 32 12 6d d0 8e c3 00 04 32 1e 22 a9 ca 33 28 67 40 b2 0b 10 ca 05 8b 29 ff 00 63 09 ab 54 38 ec c7 33 7c d2 4a da 89 6a 1e 40 f3 3b 0f f6 3d Data Ascii: RIxm{nU#w76%N1elJapp5Oa0%Z]w3K!yyMP:8V=!_h.,'C@E1]VXa6HOOu\|5/]{\|l8!O$1FEjD-i^}2m2"3(g@)cT83\|Jj@;=
2024-05-15 22:37:23 UTC	4072	IN	Data Raw: 3d 59 89 37 27 14 49 1e 92 52 68 6a 45 fa 83 87 d8 55 b8 e7 0c d4 a8 ce e8 2c d6 3a 8a ed f4 38 cd f0 69 15 b8 4e b4 e5 a2 ae a1 18 14 60 e4 12 2e 37 be 29 55 10 ee c1 95 72 45 03 05 a6 95 8c 4c 37 01 bf ae 1b 04 46 59 09 07 a6 24 61 7c ab 32 14 85 c9 51 22 ba e9 2a 4e 00 44 98 eb 69 83 ea 45 9e 11 fc 2a c0 af f3 c3 dc 7b 04 a8 f3 2a 7a 80 69 a3 59 3c e8 c9 a6 d7 26 e0 ee 4e 21 a6 52 7d 80 f3 73 2b e8 e8 21 df 96 08 33 3f fd 3b 5b f9 62 fb 10 b9 64 fc d3 32 68 68 e6 70 7c e4 69 50 3d 4e d8 43 00 66 73 f2 f4 53 8b e8 a7 41 10 07 f8 8e ec 7f 3c 20 17 91 53 c1 54 2a ea 2a 46 a8 21 4d 88 36 37 ff 00 63 f9 e0 02 1d 7c d0 a5 51 48 dc 4c 14 0b 3a 8d 20 13 d4 5b db 00 c6 69 7c 92 c8 e3 a2 8b 06 38 04 22 a2 a1 94 b1 ea 7a 0c 20 46 a1 07 52 ad ef 7d ce 1a 01 74 f2 Data Ascii: =Y7'IRhjEU,:8iN`.7)UrEL7FY$a\|2Q"NDiE{ziY<&N!R}s+!3?;[bd2hhp\|iP=NCfsSA< ST*F!M67c\|QHL: [i\|8"z FR}t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50200	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	655	OUT	GET /steam/apps/2668080/ss_fe0f704abb30337d15a509b7a8a5a6f0e6bc9c46.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:23 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Thu, 14 Dec 2023 07:19:44 GMT ETag: "657aac90-c3d5" Server: nginx Content-Type: image/jpeg Content-Length: 50133 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=582768 Expires: Wed, 22 May 2024 16:30:11 GMT Date: Wed, 15 May 2024 22:37:23 GMT Connection: close
2024-05-15 22:37:23 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 02 04 05 06 07 01 00 08 09 ff c4 00 55 10 00 01 02 04 04 03 04 06 07 02 09 09 07 03 05 00 01 02 03 00 04 05 11 06 12 21 31 13 41 51 07 22 61 71 14 32 81 91 a1 b1 08 15 Data Ascii: JFIFCCQXU!1AQ"aq2
2024-05-15 22:37:23 UTC	16384	IN	Data Raw: f2 ae a6 3a 72 49 7b b3 f5 f8 9d c5 3f 62 4b b4 86 ef 4c 92 5f e1 7d 42 fe 69 ff 00 08 f2 a3 6c a5 51 9c 2d 55 25 94 0d be d0 45 21 f4 0b 36 62 54 29 09 b9 20 18 f3 9a 0e d9 0e a1 2a 52 6c 77 17 81 44 29 4e f1 ac 07 73 e1 02 04 52 c2 82 d2 15 65 40 01 6d 46 5d b5 15 ab 4e 90 00 dc c9 34 90 42 b6 80 10 e4 d2 58 21 16 80 14 12 8c dc 40 35 8a 40 28 99 71 4f 29 25 36 1e 3c a0 0e b8 a3 95 41 bb 05 40 83 66 0b 88 4a 8b 86 c3 a1 8a 80 37 ad 34 d9 c8 bb 40 70 04 a8 4a b5 de 24 93 ca 00 ae e2 67 03 8f 4a b8 9f c0 a4 9f 78 8d c4 a0 28 2e e5 ab 33 d0 92 3d e8 57 e9 18 cd f4 33 78 fe a4 5d a6 5f 1c 26 95 fb 22 3e 5c 8f 6c 7b 8d cc c8 cd 19 46 8e fa 60 00 8b c5 4c 9b 1f 32 a3 09 49 c9 f6 e5 4c c6 f4 d4 29 8c 3c fc 94 ce 20 41 55 c1 61 c6 db 3c 46 d5 b5 88 71 43 4f 18 Data Ascii: :rI{?bKL_}BilQ-U%E!6bT) *RlwD)NsRe@mF]N4BX!@5@(qO)%6<A@fJ74@pJ$gJx(.3=W3x]_&">\l{F`L2IL)< AUa<FqCO
2024-05-15 22:37:23 UTC	3466	IN	Data Raw: 98 f7 8a 1b 62 f6 42 a4 0f 91 8c 43 93 52 e0 f9 f6 a9 49 9a 9f c5 74 c6 24 a5 9d 9a 9a 72 64 25 b6 58 41 5a d6 7a 00 35 e5 1f 7f 0e 48 c3 1c a5 37 4a 8f 89 9b 1c a7 34 a2 ad d9 aa e1 fe cd 7b 67 69 d9 a6 64 28 8f 48 4a 2d f2 b0 a7 d4 c3 57 1b 5f bc 49 d8 08 f9 19 3a df 86 ba 72 9d bf cd 9f 73 07 4f 9d 26 a5 12 f3 47 ec 17 b4 5a 99 9a 35 f9 a9 04 a5 68 48 6b 89 36 16 52 6e 6f ea a6 3e 76 6f 89 74 71 4b d2 bf d0 f5 3e 9b 24 b9 a1 dd 03 e8 91 3b 25 89 e9 95 99 bc 4d 2a d2 a4 a6 51 31 c1 96 95 5a ca b2 9f 57 32 8a 6d 7e b6 8e 7f f9 c8 c5 35 18 37 f9 9c 7f f1 cd cb 53 91 a0 55 fb 02 a7 d4 9e 79 e6 f1 35 6a 4d 6b 5e 70 d3 0a 42 5a 07 31 51 ba 6d ad ef 6d e3 e7 cf e2 b2 9c f5 68 47 b6 1d 24 63 1d 36 65 d8 c7 b2 3c 53 52 9c 9b 97 97 a7 25 fc 8e 10 97 9b 75 29 6d Data Ascii: bBCRIt$rd%XAZz5H7J4{gid(HJ-W_I:rsO&GZ5hHk6Rno>votqK>$;%M*Q1ZW2m~57SUy5jMk^pBZ1QmmhG$c6e<SR%u)m
2024-05-15 22:37:23 UTC	14240	IN	Data Raw: 7b cd e9 a0 d7 51 1f d4 3e 11 d5 be af a7 f9 df cd 1d 9f ec cf 99 99 2c 52 f6 64 dc 8f 6d d4 d6 59 52 d7 34 8c a8 4d ce 50 49 b0 e8 39 c7 db 69 2d cf 33 cb 14 9b 63 d1 f4 8b c3 89 40 22 65 f7 0f 31 e8 ea 00 47 1f 51 78 3c 6f ab 87 64 26 bb f4 8c a3 cc d2 d1 27 4c 9a e1 b8 b5 12 b7 e6 a5 5c 50 6c 5b 92 52 46 62 7c c5 a2 3c 9e 11 ca 5d 4c 6e e0 53 f0 f7 67 38 12 bd 87 e6 6a 93 d5 99 cf 48 99 7d d1 c2 90 a6 80 9b 93 75 0e fa ec 91 de e4 23 51 cf 96 2a 95 7e 88 f1 bc 96 f8 20 ab 38 0f 0d 61 ca 4b c9 c3 0c d4 4b c8 40 cb e9 ce a5 c5 2c 24 1b 25 21 00 0d 74 de e7 c6 37 d3 67 96 19 b6 f8 66 23 25 1e 0a fb d5 7c 4b 55 c3 32 72 92 d2 b3 5f 58 19 46 12 f1 20 a3 84 ea 1d fb 4b f4 cc 90 34 11 af c6 64 70 94 24 ee ff 00 a0 d5 26 89 29 b9 0a dd 47 11 09 d5 99 79 69 34 Data Ascii: {Q>,RdmYR4MPI9i-3c@"e1GQx<od&'L\Pl[RFb\|<]LnSg8jH}u#Q*~ 8aKK@,$%!t7gf#%\|KU2r_XF K4dp$&)Gyi4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50181	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	797	OUT	GET /public/css/applications/community/communityawardsapp.css?contenthash=9697f81cbeeb8cd9b3dc HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:24 UTC	260	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:24 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177508 Expires: Fri, 17 May 2024 23:55:52 GMT
2024-05-15 22:37:24 UTC	16124	IN	Data Raw: 34 36 36 34 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 5f 33 5a 33 36 68 4d 6c 43 30 67 35 72 68 41 44 63 38 36 4a 65 56 38 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 3a 30 7d 2e 5f 33 5a 33 36 68 4d 6c 43 30 67 35 72 68 41 44 63 38 36 4a 65 56 38 2e 6b 77 7a 52 4a 4e 68 74 50 69 51 4f 30 44 34 57 6e 30 50 4c 55 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 5f 32 69 54 35 6c 54 44 4b 68 62 78 6c 6c 55 6e 63 46 6e 4a 68 53 30 7d 2e 5f 33 5a 33 36 68 4d 6c 43 30 67 35 72 68 41 44 63 38 36 4a 65 56 38 2e 6b 77 7a 52 4a 4e 68 74 50 69 51 4f 30 44 34 57 6e 30 50 4c 55 20 2a 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 5f 32 69 54 35 6c 54 44 4b 68 62 78 6c 6c 55 6e 63 46 6e Data Ascii: 4664._3Z36hMlC0g5rhADc86JeV8{display:flex;flex-direction:column;margin:0}._3Z36hMlC0g5rhADc86JeV8.kwzRJNhtPiQO0D4Wn0PLU{animation-name:_2iT5lTDKhbxllUncFnJhS0}._3Z36hMlC0g5rhADc86JeV8.kwzRJNhtPiQO0D4Wn0PLU *{animation-name:_2iT5lTDKhbxllUncFn
2024-05-15 22:37:24 UTC	1904	IN	Data Raw: 73 69 63 55 49 20 2e 5f 32 53 6c 43 7a 58 2d 79 54 4e 67 68 4e 37 46 4a 69 49 51 6f 45 61 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 5f 32 53 6c 43 7a 58 2d 79 54 4e 67 68 4e 37 46 4a 69 49 51 6f 45 61 20 2e 5f 31 6a 43 67 6d 56 51 50 43 5f 56 32 75 48 4a 39 34 70 50 56 37 68 7b 68 65 69 67 68 74 3a 32 30 30 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 7b 2e 5f 32 53 6c 43 7a 58 2d 79 54 4e 67 68 4e 37 46 4a 69 49 51 6f 45 61 20 2e 5f 31 6a 43 67 6d 56 51 50 43 5f 56 32 75 48 4a 39 34 70 50 56 37 68 7b 68 65 69 67 68 74 3a 32 30 30 70 78 7d 7d 2e 5f 32 53 6c 43 7a 58 2d 79 54 4e 67 68 4e 37 46 4a 69 49 51 6f 45 61 20 2e 5f 32 76 70 4d 70 5a 5f 61 38 42 74 35 5a 4f Data Ascii: sicUI ._2SlCzX-yTNghN7FJiIQoEa{flex-direction:row}._2SlCzX-yTNghN7FJiIQoEa ._1jCgmVQPC_V2uHJ94pPV7h{height:200px}@media screen and (max-width: 910px){._2SlCzX-yTNghN7FJiIQoEa ._1jCgmVQPC_V2uHJ94pPV7h{height:200px}}._2SlCzX-yTNghN7FJiIQoEa ._2vpMpZ_a8Bt5ZO
2024-05-15 22:37:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50182	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	795	OUT	GET /public/shared/images//award_icon_blue.svg HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:24 UTC	187	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:24 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-05-15 22:37:24 UTC	2393	IN	Data Raw: 39 35 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 35 2e 38 30 38 31 34 20 30 2e 31 39 37 34 39 32 4c 35 2e 31 39 33 32 34 20 30 2e 36 32 30 38 36 43 34 2e 39 36 32 36 35 20 30 2e 37 37 34 38 31 32 20 34 2e 36 39 33 36 33 20 30 2e 38 35 31 37 38 38 20 34 2e 33 38 36 31 39 20 30 2e 38 31 33 33 4c 33 2e 39 32 35 30 31 20 30 2e 37 33 36 33 32 34 43 33 2e 34 32 Data Ascii: 952<svg width="13" height="21" viewBox="0 0 13 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.80814 0.197492L5.19324 0.62086C4.96265 0.774812 4.69363 0.851788 4.38619 0.8133L3.92501 0.736324C3.42
2024-05-15 22:37:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50183	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	808	OUT	GET /public/shared/images/userreviews/icon_thumbsUp.png?v=1 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:24 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:24 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:24 UTC	2110	IN	Data Raw: 38 33 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 Data Ascii: 837PNGIHDR((mtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56
2024-05-15 22:37:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50184	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	790	OUT	GET /public/shared/images//award_icon.svg HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:24 UTC	187	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:24 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-05-15 22:37:24 UTC	2393	IN	Data Raw: 39 35 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 35 2e 38 30 38 31 34 20 30 2e 31 39 37 34 39 32 4c 35 2e 31 39 33 32 34 20 30 2e 36 32 30 38 36 43 34 2e 39 36 32 36 35 20 30 2e 37 37 34 38 31 32 20 34 2e 36 39 33 36 33 20 30 2e 38 35 31 37 38 38 20 34 2e 33 38 36 31 39 20 30 2e 38 31 33 33 4c 33 2e 39 32 35 30 31 20 30 2e 37 33 36 33 32 34 43 33 2e 34 32 Data Ascii: 952<svg width="13" height="21" viewBox="0 0 13 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.80814 0.197492L5.19324 0.62086C4.96265 0.774812 4.69363 0.851788 4.38619 0.8133L3.92501 0.736324C3.42
2024-05-15 22:37:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50185	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	798	OUT	GET /public/shared/images/apphubs/play_icon80.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:24 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:24 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:24 UTC	2191	IN	Data Raw: 38 38 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 37 08 06 00 00 00 9b e0 cd 4f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 Data Ascii: 888PNGIHDRP7OtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32
2024-05-15 22:37:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50187	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	573	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:24 UTC	187	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:24 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-05-15 22:37:24 UTC	3691	IN	Data Raw: 65 36 34 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 Data Ascii: e64<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="
2024-05-15 22:37:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50186	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	554	OUT	GET /public/images/login/throbber.gif HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:24 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:24 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:24 UTC	3215	IN	Data Raw: 63 38 38 0d 0a 47 49 46 38 39 61 20 00 20 00 f3 00 00 00 00 00 cc cc cc 2c 2c 2c 61 61 61 39 39 39 50 50 50 a0 a0 a0 86 86 86 1e 1e 1e 14 14 14 35 35 35 b3 b3 b3 c8 c8 c8 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 04 e7 10 c8 49 69 61 a5 ea cd e7 62 4b 85 24 9d 46 0c 15 a3 52 02 41 94 54 b2 2c 07 a5 32 53 e2 2a 30 35 2f 2f c9 6d a2 70 21 7a 93 c1 cc 30 19 02 10 3b 24 c5 30 43 01 9c 2e 02 49 2a 21 fc 48 43 28 41 40 11 6f 01 04 83 21 33 39 54 35 ba 5c d1 38 29 a8 0d 87 a0 60 c1 ee b4 b2 64 14 07 77 78 47 3d 59 04 0a 67 14 04 83 77 48 62 86 1d 76 06 41 3d 92 30 09 56 5c 9c 5c Data Ascii: c88GIF89a ,,,aaa999PPP555!NETSCAPE2.0!Created with ajaxload.info!, IiabK$FRAT,2S05//mp!z0;$0C.I!HC(A@o!39T5\8)`dwxG=YgwHbvA=0V\\
2024-05-15 22:37:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50194	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	564	OUT	GET /public/images/skin_1/ico_external_link.gif HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:24 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:24 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:24 UTC	69	IN	Data Raw: 33 66 0d 0a 47 49 46 38 39 61 08 00 08 00 91 02 00 4d 4d 4c c4 c2 c1 26 26 26 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 08 00 08 00 00 02 10 94 15 19 77 9a b6 1e 04 68 21 66 a1 6e d0 d9 02 00 3b 0d 0a Data Ascii: 3fGIF89aMML&&&!,wh!fn;
2024-05-15 22:37:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50188	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	578	OUT	GET /public/images//sharedfiles/searchbox_workshop_submit.gif HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:24 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:24 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:24 UTC	1425	IN	Data Raw: 35 38 61 0d 0a 47 49 46 38 39 61 17 00 12 00 d5 21 00 2c 2c 2c 55 55 56 4d 4d 4d b6 b7 b8 9b 9c 9d b6 b7 b7 54 54 55 71 71 72 3f 3f 40 4b 4b 4b a1 a1 a2 55 55 55 4b 4c 4c 60 60 60 96 96 97 b9 b9 ba 61 61 61 96 97 97 2e 2e 2e 38 38 38 31 31 31 4a 4a 4b 35 35 35 2d 2d 2d 4f 50 50 3e 3f 3f 43 43 43 64 64 65 57 57 57 cc cd ce 2b 2b 2b cb cc cd d6 d7 d8 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d Data Ascii: 58aGIF89a!,,,UUVMMMTTUqqr??@KKKUUUKLL```aaa...888111JJK555---OPP>??CCCddeWWW+++!XMP DataXMP<?xpacket begin="" id="W5M0M
2024-05-15 22:37:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50197	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	544	OUT	GET /public/images/x9x9.gif HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:24 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:24 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:24 UTC	64	IN	Data Raw: 33 61 0d 0a 47 49 46 38 39 61 09 00 09 00 80 01 00 cd ca c1 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 09 00 09 00 00 02 11 04 82 68 9b ec d6 d6 49 81 51 39 2b 7c 19 53 5d 00 00 3b 0d 0a Data Ascii: 3aGIF89a!,hIQ9+\|S];
2024-05-15 22:37:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50193	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	602	OUT	GET /apps/allcontenthome?l=english&browsefilter=trend&appHubSubSection=11&forceanon=1 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:25 UTC	1768	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Cache-Control: public,max-age=60 Expires: Wed, 15 May 2024 22:37:52 GMT
2024-05-15 22:37:25 UTC	14590	IN	Data Raw: 33 38 66 36 0d 0a 3c 64 69 76 20 69 64 3d 22 70 61 67 65 31 22 3e 0d 0a 09 3c 64 69 76 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 4c 69 6e 6b 20 69 6e 74 65 72 61 63 74 61 62 6c 65 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 20 64 61 74 61 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 2d 75 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 70 72 6f 66 69 6c 65 73 2f 37 36 35 36 31 31 39 38 33 38 39 32 33 31 32 30 39 2f 72 65 63 6f 6d 6d 65 Data Ascii: 38f6<div id="page1"><div data-panel="{"focusable":true,"clickOnActivate":true}" class="apphub_Card modalContentLink interactable" style="display: none" data-modal-content-url="https://gtm.you1.cn/profiles/76561198389231209/recomme
2024-05-15 22:37:26 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 09 09 09 09 09 26 6c 74 3b 64 69 76 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 72 65 76 69 65 77 5f 61 77 61 72 64 26 71 75 6f 74 3b 20 64 61 74 61 2d 72 65 61 63 74 69 6f 6e 3d 26 71 75 6f 74 3b 31 39 26 71 75 6f 74 3b 20 64 61 74 61 2d 72 65 61 63 74 69 6f 6e 63 6f 75 6e 74 3d 26 71 75 6f 74 3b 31 26 71 75 6f 74 3b 26 67 74 3b 0d 0a 09 09 09 09 09 26 6c 74 3b 69 6d 67 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 72 65 76 69 65 77 5f 61 77 61 72 64 5f 69 63 6f 6e 20 74 6f 6f 6c 74 69 70 26 71 75 6f 74 3b 20 73 72 63 3d 26 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 69 6d 61 67 65 73 2f 6c 6f 79 61 6c 74 79 2f 72 65 61 63 74 69 6f 6e 73 2f 73 74 Data Ascii: 3ff0<div class="review_award" data-reaction="19" data-reactioncount="1"><img class="review_award_icon tooltip" src="https://store.akamai.steamstatic.com/public/images/loyalty/reactions/st
2024-05-15 22:37:26 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 3d 26 71 75 6f 74 3b 72 65 76 69 65 77 5f 61 77 61 72 64 5f 63 6f 75 6e 74 20 68 69 64 64 65 6e 26 71 75 6f 74 3b 26 67 74 3b 31 26 6c 74 3b 2f 73 70 61 6e 26 67 74 3b 0d 0a 09 09 09 09 26 6c 74 3b 2f 64 69 76 26 67 74 3b 0d 0a 09 09 09 09 09 09 09 09 26 6c 74 3b 64 69 76 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 72 65 76 69 65 77 5f 61 77 61 72 64 26 71 75 6f 74 3b 20 64 61 74 61 2d 72 65 61 63 74 69 6f 6e 3d 26 71 75 6f 74 3b 31 36 26 71 75 6f 74 3b 20 64 61 74 61 2d 72 65 61 63 74 69 6f 6e 63 6f 75 6e 74 3d 26 71 75 6f 74 3b 31 26 71 75 6f 74 3b 26 67 74 3b 0d 0a 09 09 09 09 09 26 6c 74 3b 69 6d 67 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 72 65 76 69 65 77 5f 61 77 61 72 64 5f 69 63 6f 6e 20 74 6f 6f 6c 74 69 70 26 71 75 6f 74 3b 20 73 72 Data Ascii: 3ff0="review_award_count hidden">1</span></div><div class="review_award" data-reaction="16" data-reactioncount="1"><img class="review_award_icon tooltip" sr
2024-05-15 22:37:26 UTC	8	IN	Data Raw: 33 66 66 30 0d 0a 69 76 Data Ascii: 3ff0iv
2024-05-15 22:37:26 UTC	16384	IN	Data Raw: 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 20 6d 6f 64 61 6c 43 6f 6e 74 65 6e 74 4c 69 6e 6b 20 69 6e 74 65 72 61 63 74 61 62 6c 65 20 75 67 63 22 0d 0a 09 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 20 64 61 74 61 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 2d 75 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 68 61 72 65 64 66 69 6c 65 73 2f 66 69 6c 65 64 65 74 61 69 6c 73 2f 3f 69 64 3d 33 32 34 35 36 36 30 39 30 39 22 09 20 69 64 3d 22 61 70 70 68 75 62 5f 43 61 72 64 Data Ascii: data-panel="{"focusable":true,"clickOnActivate":true}" class="apphub_Card modalContentLink interactable ugc" style="display: none" data-modal-content-url="https://gtm.you1.cn/sharedfiles/filedetails/?id=3245660909" id="apphub_Card
2024-05-15 22:37:26 UTC	16360	IN	Data Raw: 2e 79 6f 75 31 2e 63 6e 2f 73 68 61 72 65 64 66 69 6c 65 73 2f 66 69 6c 65 64 65 74 61 69 6c 73 2f 3f 69 64 3d 33 32 34 37 33 33 31 31 30 36 22 09 20 69 64 3d 22 61 70 70 68 75 62 5f 43 61 72 64 5f 33 32 34 37 33 33 31 31 30 36 22 0d 0a 20 20 20 09 20 64 61 74 61 2d 61 70 70 69 64 3d 22 34 31 34 33 34 30 22 20 64 61 74 61 2d 70 75 62 6c 69 73 68 65 64 66 69 6c 65 69 64 3d 22 33 32 34 37 33 33 31 31 30 36 22 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 43 6c 69 63 6b 61 62 6c 65 22 3e 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 43 6f 6e 74 65 6e 74 54 79 70 65 43 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 Data Ascii: .you1.cn/sharedfiles/filedetails/?id=3247331106" id="apphub_Card_3247331106" data-appid="414340" data-publishedfileid="3247331106"><div class="apphub_CardContentClickable"><div class="apphub_CardContentTypeContainer"><div class="apphu
2024-05-15 22:37:26 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 31 2f 43 42 31 43 39 39 38 46 46 32 37 42 42 37 30 43 41 34 33 36 32 37 30 41 34 45 36 42 46 45 33 38 33 31 32 46 31 42 31 36 2f 3f 69 6d 77 3d 32 35 36 30 26 26 69 6d 61 3d 66 69 74 26 69 6d 70 6f 6c 69 63 79 3d 4c 65 74 74 65 72 62 6f 78 26 69 6d 63 6f 6c 6f 72 3d 25 32 33 30 30 30 30 30 30 26 6c 65 74 74 65 72 62 6f 78 3d 66 61 6c 73 65 20 32 35 36 30 77 22 20 73 69 7a 65 73 3d 22 28 6d 69 6e 2d 77 69 64 74 68 3a 39 34 38 29 20 39 34 38 70 78 2c 20 39 38 76 77 22 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 4d 65 74 61 44 61 74 61 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 Data Ascii: 7fe01/CB1C998FF27BB70CA436270A4E6BFE38312F1B16/?imw=2560&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false 2560w" sizes="(min-width:948) 948px, 98vw"></div></div></div><div class="apphub_CardMetaData"><div class="apphub_Ca
2024-05-15 22:37:26 UTC	16360	IN	Data Raw: 62 74 6e 5f 67 72 65 79 5f 67 72 65 79 20 62 74 6e 5f 73 6d 61 6c 6c 5f 74 68 69 6e 20 69 63 6f 5f 68 6f 76 65 72 22 3e 0d 0a 09 09 09 09 09 3c 73 70 61 6e 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 2f 61 77 61 72 64 5f 69 63 6f 6e 2e 73 76 67 22 20 63 6c 61 73 73 3d 22 72 65 77 61 72 64 5f 62 74 6e 5f 69 63 6f 6e 22 3e 41 77 61 72 64 3c 2f 73 70 61 6e 3e 0d 0a 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 64 52 69 67 68 74 44 61 74 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 70 70 68 75 62 5f 43 61 72 Data Ascii: btn_grey_grey btn_small_thin ico_hover"><span><img src="https://gtm.you1.cn/public/shared/images//award_icon.svg" class="reward_btn_icon">Award</span></a></div><div class="apphub_CardRightData"><div class="apphub_Car
2024-05-15 22:37:27 UTC	16384	IN	Data Raw: 35 32 64 32 0d 0a 33 36 33 36 31 39 32 2f 34 46 38 31 34 37 39 36 46 43 33 39 39 45 43 33 38 44 43 35 32 32 38 35 46 44 39 42 36 37 33 31 36 46 39 46 39 46 38 32 2f 3f 69 6d 77 3d 31 30 32 34 26 26 69 6d 61 3d 66 69 74 26 69 6d 70 6f 6c 69 63 79 3d 4c 65 74 74 65 72 62 6f 78 26 69 6d 63 6f 6c 6f 72 3d 25 32 33 30 30 30 30 30 30 26 6c 65 74 74 65 72 62 6f 78 3d 66 61 6c 73 65 20 31 30 32 34 77 2c 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 75 73 65 72 69 6d 61 67 65 73 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 75 67 63 2f 32 34 39 34 35 30 39 32 32 36 36 39 33 36 33 36 31 39 32 2f 34 46 38 31 34 37 39 36 46 43 33 39 39 45 43 33 38 44 43 35 32 32 38 35 46 44 39 42 36 37 33 31 36 46 39 46 39 46 38 32 2f 3f 69 6d 77 3d 31 39 32 30 26 26 69 6d 61 3d 66 69 Data Ascii: 52d23636192/4F814796FC399EC38DC52285FD9B67316F9F9F82/?imw=1024&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false 1024w, https://steamuserimages-a.akamaihd.net/ugc/2494509226693636192/4F814796FC399EC38DC52285FD9B67316F9F9F82/?imw=1920&&ima=fi
2024-05-15 22:37:27 UTC	4826	IN	Data Raw: 64 43 6f 6e 74 65 6e 74 50 72 65 76 69 65 77 49 6d 61 67 65 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 75 73 65 72 69 6d 61 67 65 73 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 75 67 63 2f 32 34 36 34 31 30 39 39 32 38 32 32 39 34 32 38 35 34 32 2f 38 39 38 42 44 34 39 41 34 39 32 39 43 37 37 39 45 39 37 39 39 33 31 38 38 46 35 44 33 33 45 39 32 37 43 34 37 39 41 42 2f 3f 69 6d 77 3d 31 30 32 34 26 26 69 6d 61 3d 66 69 74 26 69 6d 70 6f 6c 69 63 79 3d 4c 65 74 74 65 72 62 6f 78 26 69 6d 63 6f 6c 6f 72 3d 25 32 33 30 30 30 30 30 30 26 6c 65 74 74 65 72 62 6f 78 3d 66 61 6c 73 65 22 20 77 69 64 74 68 3d 22 31 30 32 34 22 20 68 65 69 67 68 74 3d 22 35 37 36 22 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 75 73 65 72 Data Ascii: dContentPreviewImage" src="https://steamuserimages-a.akamaihd.net/ugc/2464109928229428542/898BD49A4929C779E97993188F5D33E927C479AB/?imw=1024&&ima=fit&impolicy=Letterbox&imcolor=%23000000&letterbox=false" width="1024" height="576" srcset="https://steamuser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50201	142.250.189.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	687	OUT	GET /vi/FE07nT30TBg/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:23 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 16831 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:21:03 GMT Expires: Thu, 16 May 2024 00:21:03 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 980 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:23 UTC	607	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 19 1a 1d 1d 1b 1f 20 25 20 1f 20 1f 1f 25 1f 1f 1f 25 2e 27 31 30 2d 27 2d 2b 35 3d 50 42 35 38 4b 39 2d 2d 44 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1a 1b 2f 57 36 37 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 5d 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 ff c4 00 45 10 00 01 03 02 03 05 05 05 06 03 06 06 02 03 00 00 01 00 02 11 03 21 04 12 31 05 13 41 51 61 06 22 71 81 91 14 32 52 a1 b1 23 42 92 c1 d1 f0 33 62 Data Ascii: JFIF % %%.'10-'-+5=PB58K9--DaEKSV[\[2AemdXlPY[W//W67=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW]WWWh"E!1AQa"q2R#B3b
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: d0 08 1a c0 23 50 0c 1b c7 04 14 2b 66 e7 6e 24 44 f8 2b f5 c1 23 2e 70 40 39 80 eb a7 2e aa b1 6f f3 37 d4 fe ff 00 dc 73 4e 29 cb 6c d9 6d 6d 8c c0 3e ea b6 2f 06 5e 03 b7 6e 78 6e b9 5c d6 89 3c 0c 9b e9 c3 92 b0 e5 3b 1c 5a 08 65 56 c9 90 62 24 d8 cc 4e 96 cd 75 d7 f2 7d d3 3f ac 71 cf db 59 b4 ab b8 80 d1 9b 21 2d 96 b8 3c 9b 41 e2 79 f1 56 ea 38 13 28 de c2 45 ea 13 26 e3 f3 50 15 8f c4 a7 8c 49 cb 6d 91 e0 da 4d 66 00 24 93 61 ce c5 69 1f 67 ce 64 8a ee e0 03 8b a0 10 08 70 6e 5c b7 04 5c db f9 96 73 29 91 0e 6b da 08 bd f8 59 4a 6a 54 cc e3 bc 66 62 44 90 07 7b 87 2e 11 c9 70 fc ba 7c 96 f2 ac ba f0 72 78 57 24 15 00 75 67 66 3c be 4d 01 5b c1 31 b3 72 05 ed 2a 93 a8 92 4b 8b 9a 4d c9 83 cb c9 33 2a 19 0b d9 4c 9a 66 f4 e3 69 fb 36 7b 4f 8c 73 70 Data Ascii: #P+fn$D+#.p@9.o7sN)lmm>/^nxn\<;ZeVb$Nu}?qY!-<AyV8(E&PImMf$aigdpn\\s)kYJjTfbD{.p\|rxW$ugf<M[1rKM3Lfi6{Osp
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 34 b5 8d 7b 45 46 34 77 83 67 bc 08 e7 cd 63 e3 59 43 25 4d d3 5a 61 84 ce 51 6b 6b a2 0d 8f b5 4d 37 34 38 f4 04 d8 16 fc 2e 3f 43 c3 c1 79 23 39 6b f2 71 c7 a8 fd 3a 4e d2 7c 6c d9 d8 d5 69 e7 c4 39 94 da ca 56 22 a0 05 8d 22 f6 20 f1 1c 48 5c ce d8 a7 4d b5 dd ba 6e 56 1b 86 f2 f2 e1 3a c7 55 b3 b6 76 d4 f7 47 93 64 3b 2f f3 3b 2c 82 79 34 4f 33 c1 73 9f c4 79 0c 39 cd ef 7e f1 e8 b5 c3 7a f1 db ca fe 89 89 b4 7a 56 c5 0e e8 f1 55 40 57 31 82 18 3f ab f2 2a 90 72 cf e5 4c 4d f6 1a e3 8c a8 c0 49 20 53 af 2b a0 53 3c 81 08 a5 33 a0 ea 8a a3 88 04 52 25 c4 49 22 c3 82 a5 99 6d 65 6f 20 9b 2b 79 05 95 63 83 71 e2 16 a9 46 1a de 41 35 96 a1 24 09 d1 59 25 a4 08 49 ee 81 68 98 b4 d9 14 a1 74 1d 52 44 35 58 40 68 90 e3 ac f4 e4 a0 14 8b 9f a4 0f aa bc 00 e4 Data Ascii: 4{EF4wgcYC%MZaQkkM748.?Cy#9kq:N\|li9V"" H\MnV:UvGd;/;,y4O3sy9~zzVU@W1?*rLMI S+S<3R%I"meo +ycqFA5$Y%IhtRD5X@h
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: e3 f8 bd 76 b4 b4 76 4e 02 95 61 50 d5 79 6e 5c b1 0e 6b 66 66 75 f0 54 21 58 c3 d6 6b 58 f6 98 04 c1 07 29 24 40 3a 46 87 45 df f2 26 d1 4f af 6f 2d 22 26 7d af 37 66 61 dd 49 ef 0f a8 0b 41 20 39 cd b9 89 16 ca 2c b1 40 5b ad 18 66 b2 af db 0a 8e 2c 21 80 b5 d6 30 40 e9 c9 16 cb d8 2d aa d6 bd ef 3a 99 03 e4 bc fc 3c d3 5a cc dd d2 d4 89 9f ab 9c c4 bd cd a6 e7 34 4b 80 b0 d6 4a a1 ed 38 b8 9d cf f9 4c eb 1a 4c ae f7 68 f6 72 83 d8 e8 6b ba b5 ae 89 bf c9 73 78 ed 91 b4 03 4d 1a 34 1e 5b 2d 22 a8 ab 0f 3d c1 99 bd e7 ce 5c d3 aa e5 cb f9 53 69 fa 4e 3a f1 f1 c4 47 d9 5b 0c f2 ea 6d 73 84 12 2e 39 15 22 b7 43 61 d7 a5 46 8b 5c de f1 68 04 48 25 a7 91 85 15 7c 3b a9 bb 2b c4 15 ee e3 e5 ac d6 3d bc d6 ae 4a 6c 26 cf 35 98 5c d7 7d ec b6 69 74 18 9b fa 85 Data Ascii: vvNaPyn\kffuT!XkX)$@:FE&Oo-"&}7faIA 9,@[f,!0@-:<Z4KJ8LLhrksxM4[-"=\SiN:G[ms.9"CaF\hH%\|;+=Jl&5\}it
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: e6 9e e8 f0 5e 2e 7c f3 f4 f4 f1 ff 00 91 86 04 8b 01 42 0a 2c cb 8b 68 9d 49 55 da 0c 8a 63 c5 5e 95 06 3a 99 7b 00 1c d5 d1 56 80 25 a0 4c 37 e6 a4 7d 10 38 6a 9d 87 28 bf 0e 48 71 18 86 db 8a e3 3b ad c2 b5 46 8c c3 a1 0b 57 22 c9 71 cc 41 1c c4 ad 7c cb ad 59 b0 0b 51 0a 69 f3 23 6b a5 54 06 e9 47 51 97 0d 9d 75 f0 56 14 35 47 7c 1e 85 66 dd 00 c4 55 2c ca 00 d4 c2 77 d5 22 a3 5a 34 21 08 aa 3e f1 17 d0 f0 46 fa 8d 36 06 5c 74 85 c9 4d 54 43 81 e0 6c 52 4a a0 27 28 26 4c ca 4b af 1f 49 2a 74 6a 00 1c 09 22 61 11 ac d6 96 ee c1 88 82 a2 dd 94 b7 65 64 1b de 1d 72 63 ea a2 26 49 28 b2 d8 49 d7 4e a9 3d 80 10 8a 04 e1 c7 9a 3d d1 bc 19 ba 17 53 20 49 57 50 fb d7 73 44 31 0e e8 a3 84 6f a7 06 e6 c3 5b 26 a2 41 55 ae 6c 3c da 6e 07 10 99 f5 af dc 24 36 21 Data Ascii: ^.\|B,hIUc^:{V%L7}8j(Hq;FW"qA\|YQi#kTGQuV5G\|fU,w"Z4!>F6\tMTClRJ'(&LKI*tj"aedrc&I(IN==S IWPsD1o[&AUl<n$6!
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 61 7e 5a ae 24 01 ee 8c ad 1f 52 ba 71 cc 44 fb 49 75 7e d8 d3 fe 33 7f 1b 54 ec aa f6 88 0f 77 99 5e 71 84 1f 6d 4f fa db f5 5e 8a 75 5e be 29 8b 7e 9c ef 18 4e a8 e3 a9 51 6f 00 31 22 79 4a 9e 9b a0 e9 3d 11 67 6e 47 eb 9b 36 9a 01 c8 f5 bc 02 9c dc b3 c7 99 1a bc 74 8b 6e 9a 8d 42 56 8e 16 a9 85 51 a6 8f f3 0f 25 35 3a 6d e1 50 47 8a d5 bd b1 0b 15 69 31 d1 2e 63 5c 6c d9 20 12 79 0e 6a 0a bd d6 80 e1 de 06 c7 c1 64 63 f0 4e ab 89 6b 5a ee f0 01 94 c3 81 0d 2e 21 ce 24 1f fb 75 e7 e0 b4 30 8f df d3 0e cd 0e 81 99 87 de 69 e2 0f 98 2b 95 6d 1b 8d 63 53 05 b4 43 ce 57 08 2a d5 6a cd 02 e4 2c 13 86 7b 4c 83 e6 16 66 d5 65 47 64 9c ce 68 92 66 48 06 df a1 4b 71 c7 70 d5 7d fa 74 d5 aa b5 cd 70 90 6c b2 a9 32 eb 07 0a 21 ec 39 81 39 c0 8d 08 80 2f 1d 56 d3 Data Ascii: a~Z$RqDIu~3Tw^qmO^u^)~NQo1"yJ=gnG6tnBVQ%5:mPGi1.c\l yjdcNkZ.!$u0i+mcSCW*j,{LfeGdhfHKqp}tpl2!99/V
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 8d 13 45 f2 f1 cd 09 a8 39 aa 41 ae 22 42 20 ac 0b 3b f4 27 10 78 28 48 84 32 a8 94 d6 77 34 19 90 e6 49 ce 81 29 24 0d b5 48 d0 a9 5b 8a 3c 42 ae da a4 fd d0 93 eb b8 58 b4 2c f9 2f 8c ae 6f da 51 07 85 4d b5 09 22 40 84 7b c1 cd 54 41 58 0c cd cd a2 b1 85 a2 c0 e9 6b a4 a6 38 76 bc 12 e2 46 54 1d d6 34 1b de e2 75 0b 9c 06 7e 1c 49 2f 76 55 15 30 dd e7 74 c8 56 1a e9 ca e6 80 e7 0b 42 55 cf da 30 7d e0 0c 90 20 20 74 a1 24 eb 90 18 4a 13 a5 08 27 c1 6a 55 6c 6b 81 ad 94 da 2d 2a 7a 6e c8 d2 ef 28 e6 99 b8 70 f2 f2 75 20 1b ea 17 58 13 d3 c2 b5 a4 11 73 cc a8 71 be f8 f0 53 60 dc 4b 2f a8 24 28 71 be f7 92 92 2b a4 92 4b 21 a1 28 4e 91 40 4e c3 67 70 24 f0 0b a9 d8 15 5c cc 26 4a 59 80 35 c0 71 6c 48 04 36 4d c1 5c d9 74 31 93 72 6d 6d 56 9e c6 ae 29 67 Data Ascii: E9A"B ;'x(H2w4I)$H[<BX,/oQM"@{TAXk8vFT4u~I/vU0tVBU0} t$J'jUlk-*zn(pu XsqS`K/$(q+K!(N@Ngp$\&JY5qlH6M\t1rmmV)g
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: e3 f9 27 3c 7a 29 81 9a f2 22 c2 d7 08 c5 77 02 4c 0b a6 b4 84 c0 8f 9a d7 b0 ec ac 41 24 71 43 51 e5 c6 4a 41 c3 9f 97 14 f0 3e 68 01 32 32 04 0f 14 ce 03 81 50 0a 64 e9 c6 93 cb e6 80 d9 58 88 b0 b2 d2 d9 8f 71 63 bb c5 a0 b8 cc 09 e0 b2 dd 6e 13 3f 25 76 8d 77 53 a4 37 74 f3 92 f2 20 49 3e e8 bd 92 db 9e 86 85 6a 76 31 57 30 36 88 83 fb b2 8d f5 1f 97 29 71 cb ac 70 e6 a1 c4 63 2b 53 78 63 a9 70 61 71 13 0d cc 01 83 d4 4a bc ea 6b 8d b6 bd b3 2a 81 ce 11 04 db 4e 9e 1c b5 29 f7 af 99 cc 67 4d 07 cf 9e 8a c6 ea 48 17 b9 57 2b ec a6 33 15 ec f9 ea bd d9 5a e2 e6 52 cc 1a 49 80 0d fe 69 5d b7 48 ca 7b dc e9 97 13 20 03 20 12 63 4b c4 a8 0d 35 7b 17 84 34 ea be 9c ce 57 11 31 13 0a 02 0a 79 4c 09 6a 10 41 ff 00 88 24 46 9b b1 78 b8 e1 7b 8f dd d4 78 82 72 Data Ascii: '<z)"wLA$qCQJA>h22PdXqcn?%vwS7t I>jv1W06)qpc+SxcpaqJk*N)gMHW+3ZRIi]H{ cK5{4W1yLjA$Fx{xr
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 10 16 af 75 99 55 a3 4d 8e 7b 45 52 45 32 7b c4 18 31 d0 a7 c7 e3 5f 95 f4 18 ea 8e 60 68 c9 55 af 71 25 d0 09 06 60 e5 d4 79 02 ae 52 a7 00 38 34 3a 2c 24 c5 e7 58 8e b0 91 a0 f1 03 23 6c 08 37 1d e3 c4 99 fe 92 b7 4b 7a 58 96 36 1d 84 31 a0 88 20 5d 49 0a fd 7a 36 13 4c 37 80 b8 27 89 2a be e5 49 b7 b1 3d 7c 4e eb 0f 4d 98 7a 92 49 97 b4 c9 82 5a 0b 8e 91 ef 48 02 fc 79 aa 35 6a ba a3 cb de 3b e4 00 e2 09 20 c0 8d 38 2b 99 db 0d 06 98 30 39 c1 3e 8a 3a f0 f2 08 60 67 38 33 3d 56 a6 e8 aa 56 86 cc 7d 26 36 a3 9e ec af e1 62 49 68 13 00 0e 24 c6 a4 2a d4 db 96 4c 4d bf 7f a7 9a b6 ea 70 08 dc 30 89 e0 fe 53 fe be 85 22 62 56 27 11 6d 0c 68 aa d0 01 7b 8e 72 49 70 8e e8 b3 6d a4 9d 4c 71 54 55 dd cb b3 b8 e4 68 f7 81 13 a4 b7 d3 8a 6a d0 60 0a 6d 64 12 6c Data Ascii: uUM{ERE2{1_`hUq%`yR84:,$X#l7KzX61 ]Iz6L7'I=\|NMzIZHy5j; 8+09>:`g83=VV}&6bIh$LMp0S"bV'mh{rIpmLqTUhj`mdl
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 0c 1f bc ae b5 8a aa 6a 3a 29 4e 07 f9 91 33 08 46 85 4d 11 a7 53 7b 2b b9 84 e3 08 ee 6a 6a ab c2 78 56 3d 8c f3 42 ec 39 1c 42 08 c8 b2 05 3b 58 38 95 20 a3 4f 9a 0a 72 92 b6 e6 d2 0a b1 89 b2 26 82 12 00 a9 12 25 19 d0 c2 5a 26 2e 42 4a 2a 4d e8 e4 ac e1 58 f7 0c cd 60 74 1d 48 95 44 35 6d 6c 66 bb 76 48 d3 31 e3 d0 2c de 72 ae 94 ed b3 41 cf 20 1b 36 dc 13 62 2b 65 17 71 27 a1 46 cc 50 c8 65 a4 bb 80 54 6a 39 c0 9b 12 3c 25 78 29 49 b5 b6 5d f6 00 2a 0a 8e 00 e6 93 d6 55 7a 94 c4 38 5e 15 a6 d6 83 39 40 ff 00 b5 3d 53 dc 27 20 3a 69 2b d7 1e 98 98 89 55 c1 d3 00 6b 65 25 4a 00 dc b8 74 b1 4b 0d 95 cf 8c a4 02 34 9e 2a 66 96 90 2c 44 75 59 fd b3 4a 64 fb 40 30 7c 43 c4 79 a3 7b 0f 08 85 33 b2 c4 5c 28 9e d6 b6 c5 ff 00 25 a7 4c 50 cb df 13 13 2a f0 12 Data Ascii: j:)N3FMS{+jjxV=B9B;X8 Or&%Z&.BJMX`tHD5mlfvH1,rA 6b+eq'FPeTj9<%x)I]Uz8^9@=S' :i+Uke%JtK4f,DuYJd@0\|Cy{3\(%LP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50202	142.250.189.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	687	OUT	GET /vi/w9uaLdS7VrQ/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:23 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 16620 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:35:25 GMT Expires: Thu, 16 May 2024 00:35:25 GMT Cache-Control: public, max-age=7200 ETag: "1715461930" Content-Type: image/jpeg Vary: Origin Age: 118 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:23 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 0d 0d 0d 10 0e 0e 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 10 0d 0d 0d 0e 0d 0d 0d 0d 15 0d 0f 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 0f 0f 0f 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 45 10 00 01 03 02 02 07 05 06 04 03 07 03 05 01 01 00 01 00 02 11 03 21 04 31 05 12 41 51 61 71 91 06 81 a1 b1 f0 13 22 c1 d1 d2 e1 32 42 52 f1 15 Data Ascii: JFIFh"E!1AQaq"2BR
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: fc 21 db db d4 fc 90 67 a1 68 ff 00 08 76 f6 f5 3f 24 7f 08 76 f6 f5 3f 24 19 c8 5a 3f c2 1d bd bd 4f c9 2f f0 77 6f 6f 53 f2 41 9a 85 a5 fc 19 db db d4 fd 28 3a 1d db db d4 fd 28 33 50 b4 4e 88 76 f6 f5 3f 24 7f 08 76 f6 f5 3f 24 19 c8 5a 23 43 bb 7b 7a 9f 92 b3 87 ec e3 dd 93 a9 f5 77 d2 83 15 0b 76 b7 65 aa 0d b4 e3 78 2e fa 55 6f e0 6f de de a7 e9 4d 0c b4 2d a3 d9 c7 c0 3a d4 f9 6b 19 ff 00 8a 8f f8 03 f7 b3 ab be 94 19 28 5a df c0 1f fa 99 de 48 ff 00 c5 46 fd 0e e1 f9 98 79 17 7c 5a 10 66 a1 68 7f 09 76 f6 f5 3f 24 7f 09 76 f6 f5 3f 24 19 e8 5a 23 43 bb 7b 7a 9f 92 91 ba 09 f1 32 ce a7 e9 41 94 85 a6 fd 0a e1 b5 bd 4f d2 a4 6f 67 df 6b b2 fc 5d f4 a0 c8 42 d6 fe 02 fb 5d 97 31 99 ce df cb c4 28 bf 83 ba f7 6d b8 9d f1 b9 06 72 16 ad 3d 04 f2 26 59 Data Ascii: !ghv?$v?$Z?O/wooSA(:(3PNv?$v?$Z#C{zwvex.UooM-:k(ZHFy\|Zfhv?$v?$Z#C{z2AOogk]B]1(mr=&Y
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 34 0a 4e 05 cc 20 ea 3a f1 06 e5 b7 92 04 83 03 67 0d 96 aa d1 2e bc 58 3b 66 f2 35 8c ef bc 36 49 1b 36 22 b5 1d 76 96 82 1b 26 5a e2 e2 21 f9 c9 9b dc 48 f1 cd 66 55 d3 86 d2 b8 23 4d d1 32 0c ea 9f 9f 10 aa 2d dd 3e d7 1a 64 bc 43 e9 b8 07 0d b0 e0 08 24 03 17 07 3f e5 54 f4 5e 88 35 32 3b f6 c1 3c a6 64 6f e0 1f 1a da a5 51 3f 63 f0 ba d5 99 94 34 eb 5f 2f 74 17 6d ff 00 49 be f8 5d 7e 91 c2 6b 97 53 79 d6 69 73 88 3f a5 d2 e1 ae d0 44 03 7c 84 48 24 5a d1 6f 40 e8 76 d0 6c b4 9f 79 ba ba c6 c4 9d 77 b4 98 dd ee b4 6a 91 10 1d 9f e2 54 71 83 de 71 d9 24 03 6e 83 3c cd 80 31 ca 16 6d 57 9e 9c fd 48 49 af 1b 56 bf 6f e0 57 f7 64 17 53 a6 e7 cc 7e 2d 58 31 19 48 00 99 be b1 71 c8 82 b9 c8 5a 45 a7 d7 0a 37 e2 0a 89 04 a2 e8 8e 29 13 83 52 9a 6a a2 34 e6 Data Ascii: 4N :g.X;f56I6"v&Z!HfU#M2->dC$?T^52;<doQ?c4_/tmI]~kSyis?D\|H$Zo@vlywjTqq$n<1mWHIVoWdS~-X1HqZE7)Rj4
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: b4 67 9d fe 52 a7 73 64 5a 63 cf e2 b3 70 d5 20 1e 47 ae c5 72 86 26 72 f0 d8 b9 d8 ef 86 5b e8 cc 55 09 ff 00 50 cb 88 cf 95 bd 66 ab 62 05 88 dc b4 5c 36 9b 77 df a7 c1 55 c4 b0 91 20 73 99 98 ef dc b5 8d 63 e9 8f ea ae 15 b6 44 43 b9 fa f3 49 4a c6 07 c1 15 a6 c4 fc 16 9c 8e c5 d3 10 d3 33 98 3b ed 94 f3 6e af 8a 4a e3 dd ef 1e 50 96 a8 b1 9d 90 7e 5e 07 fe d5 18 b8 3c 06 48 17 0c 07 50 7c 95 b6 66 3f d3 f2 54 69 09 21 5c a7 48 20 94 04 ac 4b 48 25 2a 29 40 49 ae 80 52 48 41 42 b1 97 f7 8f 0f d9 2e 28 c9 03 d5 d3 28 19 71 3c fd 78 a5 26 5c 55 41 89 a9 64 dc 28 bf 24 da e6 ea 5c 38 b2 0b 4d 77 12 97 5c a8 42 7b 54 55 89 5a da 0b 06 1d 72 09 be 7b 00 ce 6f 9e 51 de a8 e8 ac 21 7b 80 98 1b 67 d7 77 7a eb 70 f4 75 61 b0 40 31 bb 39 19 81 6b c6 51 de 24 46 Data Ascii: gRsdZcp Gr&r[UPfb\6wU scDCIJ3;nJP~^<HP\|f?Ti!\H KH%*)@IRHAB.((q<x&\UAd($\8Mw\B{TUZr{oQ!{gwzpua@19kQ$F
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 69 e1 dd fa 9b cc 34 fd 4a 17 62 db b5 cd ee fb a5 66 39 bf a8 75 0a a2 6d 53 ac 1b ed 0c 9d cc 6d b6 e6 67 d4 6f 0a b6 32 b9 b8 0f 73 86 44 d8 03 bc 7b b1 61 6e 73 bb 34 af 52 49 2d e5 b7 28 b8 1b f6 f8 a8 1c f9 6b 60 49 24 e4 2f 19 09 ef f8 2e 57 27 49 8f ef fe 8c 6b 6c 98 48 da a6 c4 c8 86 c4 10 76 66 4d b7 1d 9b 15 7a a3 7e 7b b7 70 e6 a2 58 d0 68 f0 48 36 fa ca 53 9d e2 54 4f 36 3d 3a 95 c6 3b d5 78 b8 5a 9d 9a 11 55 a6 26 c6 dc c4 7c 72 59 94 c7 bc 78 0f 5f 15 b9 a0 9d aa 4b 8c e5 03 be e7 c4 0f 15 b9 eb 95 f1 3f 69 49 87 1d 91 e6 aa f6 56 b8 34 9c 36 87 78 10 20 f8 11 dc ad 69 10 d7 b5 de f8 6e df 7a 63 2f d4 62 e0 ef f1 85 93 a2 b0 ae a6 e2 4c 41 11 63 63 bb 8e c3 13 9a de dc db 2d de 9e f9 00 1e 06 38 5e 27 be e1 41 ad 37 d8 a3 ad 51 50 3a a4 7a Data Ascii: i4Jbf9umSmgo2sD{ans4RI-(k`I$/.W'IklHvfMz~{pXhH6STO6=:;xZU&\|rYx_K?iIV46x inzc/bLAcc-8^'A7QP:z
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 5e 85 10 1c b3 ca 3a 71 66 76 a0 46 ae 7a b9 15 87 8b c2 34 49 a6 21 db 23 3d 6d 90 39 c6 4b b1 d3 78 2d 7a 64 74 5c cd 2a 45 da ad 04 35 db c9 80 d2 36 cf 02 15 c6 ff 00 19 ca 6b d6 37 67 7b 25 53 10 41 82 ca 66 fe d1 c2 d1 fc a2 41 7f 96 77 5e 97 d8 5d 0a 30 f4 8b 60 6b 6b 1d 77 c0 97 c1 81 07 3d 5d dc 0e f9 4c ec d6 21 c5 9e cd ce 69 7d 20 05 42 0c 92 2f a8 4f 30 0b 67 69 69 3b 56 ed 43 ee 03 bd c4 73 88 24 f5 b7 72 f5 6d e2 ca b9 ce de 61 32 a8 dd 90 1d e5 f2 f1 58 5a 32 ad f3 fb fc bb a1 75 ba 55 ba e0 b4 fe 61 e2 bc ff 00 5c d3 75 c5 c6 63 25 36 b1 d2 0e cb d0 ab 25 cc 68 27 32 2c 77 67 04 e5 bc a8 71 7f d9 d5 30 09 69 78 b6 41 c0 ff 00 c9 a4 f7 ad 5e ca 4d 68 89 d5 98 71 fd 24 09 8e 32 ba 0c 33 c3 bd b5 30 7f cc a5 06 09 cc 11 20 8e 1b 3b 92 e5 23 Data Ascii: ^:qfvFz4I!#=m9Kx-zdt\*E56k7g{%SAfAw^]0`kkw=]L!i} B/O0gii;VCs$rma2XZ2uUa\uc%6%h'2,wgq0ixA^Mhq$230 ;#
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 95 58 d7 50 6e ad 52 6c 7d 98 10 1c d7 0d 8d bb 4e 50 3d 99 91 79 ec bb 2d a6 69 d6 a6 c6 b5 d2 f6 12 da a7 2f 7b 61 8d ce 1e f0 22 d7 23 61 5d ab cd 49 a6 34 70 82 e2 40 27 21 b7 9f 25 c2 76 8c 07 43 8f e2 16 3c 46 fe 6b d0 74 a5 dc 77 6c f8 2e 23 4d e1 ac ee 12 b3 08 e8 b4 46 25 b8 7c 2e 19 c3 ff 00 71 e7 58 9e 2e 73 5e 73 fc a0 47 26 a4 ed 06 3b d9 62 5a f6 98 25 8d 0e 69 da 2f d7 3b 72 0b 86 38 e7 16 b5 ae 32 d6 4e a8 3f 96 66 63 a9 5a 3a 5b 50 35 a5 95 1d 5a c2 5d 10 07 00 09 d6 b6 57 2b 37 1f eb be 39 f5 a8 d0 c7 12 2a eb 36 5a 1e 35 81 9c 9c 23 cc 10 7b b8 a8 f1 f5 cb 9c 1f 69 fc 2f 1b c1 fc 24 0e 07 cd 50 c6 69 26 ba 03 24 80 00 16 f7 a0 6f e2 b3 b4 9e 99 65 21 ef 49 79 c9 80 df 99 dc 39 f7 4a cf 1b e3 7c bf ad 5a b8 69 20 b6 ce d8 7d 6c 57 70 ba Data Ascii: XPnRl}NP=y-i/{a"#a]I4p@'!%vC<Fktwl.#MF%\|.qX.s^sG&;bZ%i/;r82N?fcZ:[P5Z]W+79*6Z5#{i/$Pi&$oe!Iy9J\|Zi }lWp
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: ba f8 2d 60 46 47 67 35 d0 f6 5a a1 d4 68 22 ed 10 78 e6 3e 0b 3f 51 6c e8 06 82 63 69 c8 f1 bf 55 9c 32 fc 5f ae 3d 6d cd e9 ed 0c fa 10 ec 23 35 5e 5f 25 f2 08 60 cf 54 b4 e4 cd 93 71 04 83 98 9a 8f 6b c9 d5 c2 fb 3a 38 8a 40 3a a5 10 20 bc 6e 1a c6 1d 4c 9b 41 20 b6 47 bd 76 93 dd d5 69 04 85 91 88 ec 85 3a 95 19 55 a5 d4 9e c7 07 17 32 c0 c6 62 0e 5a c3 dd 31 62 09 90 65 77 95 c3 6b ac c4 39 cc 69 a8 d0 d7 96 8d 66 83 20 3a 2e 01 dc 0a c2 d3 df 85 db f6 fa de b6 f1 d5 a2 78 2c 8c 45 02 e6 b9 e7 f0 83 1c dc 64 81 dc 24 f4 de 13 48 e2 31 14 7a 27 e0 f0 4f 70 3a 84 b7 90 04 de d2 1a 6c 63 e4 ae e2 69 41 32 9d 46 a6 a4 11 62 0d bd 6e 56 76 bb 72 7f df 2a 80 f6 b9 c4 10 60 c0 6b 48 33 06 ed 68 3d eb 06 bd 13 ac e1 99 69 cf 32 67 23 df 9a ec bb 48 35 aa 6b Data Ascii: -`FGg5Zh"x>?QlciU2_=m#5^_%`Tqk:8@: nLA Gvi:U2bZ1bewk9if :.x,Ed$H1z'Op:lciA2FbnVvr*`kH3h=i2g#H5k
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 08 58 f8 ba 4b 72 8e 57 49 50 8b f4 58 95 dc ba 2d 31 70 42 c0 6d 29 70 1b d5 d8 86 b8 90 07 a0 b3 f1 82 fd eb 5b 11 4a 15 3a 94 a6 c7 23 91 19 83 f2 5a c7 2d 0e 6b 12 25 f9 77 f7 11 f1 52 69 6a 01 ae 00 19 b0 f2 0b 4d fa 01 e5 e4 82 c2 39 9e bf 87 72 83 17 a1 aa 03 3a b3 c4 10 7c 26 7c 16 f1 f6 ad f1 83 8c 19 29 2a 8f f2 87 fa 8a 97 49 e1 9c 08 96 b8 67 98 3c 14 55 cf f9 6d e6 56 73 f5 ac 3c 59 a4 3f c9 3d ff 00 05 9c c0 b5 69 33 fc 83 fe ef 36 aa 38 46 5c 73 5d 23 14 c1 4d 4c 29 2b df dd 41 56 28 61 3b d1 23 25 b4 53 99 85 dc 60 f4 5b f4 f4 2b 9d b2 07 1f 96 7d 61 5c c3 e8 26 b6 e6 5c 7a 0e 83 e2 56 2e 52 3a 4c 2b 9f 6f b4 02 03 9c 78 07 13 e0 49 1d 02 b7 a3 70 55 5c e1 ed 0b 83 36 89 00 bb 84 08 31 be 76 48 5d 1b 29 86 e4 00 e4 23 c9 43 5a a4 2e 57 37 Data Ascii: XKrWIPX-1pBm)p[J:#Z-k%wRijM9r:\|&\|)*Ig<UmVs<Y?=i368F\s]#ML)+AV(a;#%S`[+}a\&\zV.R:L+oxIpU\61vH])#CZ.W7
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 55 12 34 27 85 0f b4 40 28 27 f6 8a f6 85 ac 0b 8b 1d 10 fb 02 67 dd 33 9d bc f2 b5 ed 25 66 b2 9a b1 4c ea 90 64 08 20 c9 12 04 5e fc 0e 44 6e 39 1c 94 a3 cb bd 83 ad ee bb 66 c3 cf 77 04 b4 f0 ae 9f c2 7a 15 d1 9c 4b 3f 50 3c 24 26 3b 16 cd e3 a8 5e 2e 4f 4e 98 d8 4c 3b 80 3e e9 c8 6c 8d a2 7c 07 8a 7d 3a 24 67 9a d6 38 d6 6f 1d 7d 70 5a 1a 32 93 2a 1d 52 60 1b 07 7e 93 fc dc 12 dd ac e9 81 4d d7 e1 7f 0f bc 26 d1 7e 7e af b5 4b 8b 66 ab 8b 47 11 3b fe db 65 46 04 75 b6 ce 1f 15 9d 69 a5 8c 18 bf 21 b9 58 17 50 51 16 52 ca ce bb 12 0f 5f 14 81 b7 f5 fb 22 3d 7a da 8d 6b fa f5 dc a0 75 63 fb ab 1d 9b 3a b5 e9 7f fe 8c 1d 48 1f 15 56 a3 ba 29 34 7d 48 a9 4c ee 7b 0f 47 04 1e c1 a2 74 ab 5c f2 c3 f8 9b 71 c4 7d 8f 98 56 f1 f6 ba f3 4e d3 38 87 87 34 90 45 Data Ascii: U4'@('g3%fLd ^Dn9fwzK?P<$&;^.ONL;>l\|}:$g8o}pZ2*R`~M&~~KfG;eFui!XPQR_"=zkuc:HV)4}HL{Gt\q}VN84E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50203	142.250.189.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	687	OUT	GET /vi/38vMxU9UwZc/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:23 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 7053 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:34:52 GMT Expires: Wed, 15 May 2024 22:39:52 GMT Cache-Control: public, max-age=300 Age: 151 ETag: "0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:23 UTC	609	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1b 19 19 1a 1e 1d 1b 1f 22 2d 26 24 22 22 21 2d 27 2b 25 2f 32 35 35 33 32 37 33 2f 35 3e 50 42 37 38 4b 3a 2e 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 18 25 1a 1a 25 57 36 2d 36 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 5c 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 01 03 06 02 07 ff c4 00 40 10 00 02 01 02 04 03 05 05 06 04 04 06 03 00 00 00 00 01 02 03 11 04 12 21 31 05 41 51 13 22 61 71 81 06 32 91 a1 f0 14 42 52 b1 c1 d1 23 82 e1 f1 Data Ascii: JFIF"-&$""!-'+%/2553273/5>PB78K:.-EaEKSV[\[2AemdXlPY[W%%W6-6WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\WWWWWWWWWWWWWWWWh"@!1AQ"aq2BR#
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 7c 03 72 d2 50 9a 6b c9 e9 fa a1 d4 5e a7 c7 24 00 30 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6e c2 61 a5 5a a4 69 c7 79 3b 79 75 7f 00 2e bd 90 c2 67 ae ea 35 a4 16 8f c7 fb 7e 65 ec eb 4a 6d da 37 cc de 5b 6e 8d 98 7c 17 d9 a8 4a 31 d3 4c b1 6f f3 7e 3b 90 e9 dd 4d 45 6f 6d 75 db cb eb 99 d3 98 e9 cc 5c 70 aa 7e f4 ad c9 45 75 f1 fc 89 b8 8a 91 93 8d 36 93 76 ba f0 67 9c 1d 2e ce 94 63 6b 3b 5d af 17 fd 2c 43 c5 b9 42 4e 51 9d 9b d3 6d 6d cc 9e d2 7d a8 93 a5 28 4f 37 bd 66 b3 6b cf a1 0b da 4a f0 fb 14 d2 de 53 8c 7f 37 fa 22 c6 85 57 18 ca 39 33 66 7a 79 f9 94 5e d6 51 94 29 52 4d db bc fb b7 db 4e 7f 5c cb d7 8b d7 8e 5c 00 73 72 00 00 Data Ascii: \|rPk^$0naZiy;yu.g5~eJm7[n\|J1Lo~;MEomu\p~Eu6vg.ck;],CBNQmm}(O7fkJS7"W93fzy^Q)RMN\\sr
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 9a 69 d9 ad 53 5c 8d 95 b5 79 bf 16 be bc fe 66 a2 67 0b a5 1a b5 a1 4a a3 4a 32 ba bb 76 b3 b6 9f 3b 01 61 c2 38 84 a1 28 54 d6 d7 ec e7 fe 64 fc 39 b4 f5 f5 67 41 5f 8d b5 4e 8d 39 d3 cb 3a 4a 4a ed b8 ad d7 55 fa 9c c5 38 76 70 ad 46 52 d3 49 41 db ef 47 6f 27 66 c9 95 b1 35 71 14 63 56 ad 68 54 9b 59 6d 95 e6 4a fc da d1 ff 00 50 34 fb 47 8b 58 8a bd aa ca 93 8e a9 3d 9f 3b f5 6f a9 57 85 9a 52 d7 62 45 39 77 9e 66 bc 3c 1d ff 00 b9 8c 62 5b d9 66 6d 75 f1 be fe 9a 81 a7 11 51 33 66 0e b7 76 50 bd 93 e9 cb c7 e4 46 68 93 80 92 52 4d d3 52 f3 db e6 ec 05 c4 26 ea c6 f7 cb 5a 12 59 ad f8 ef a4 97 2b 4b 4f e6 ff 00 51 dc 70 ee 25 0c 47 0e 9b 71 6d c2 16 94 57 dd 6b 96 bd 1f ca c7 cd a5 8d b5 47 92 c9 eb 1e 5a a7 ba d3 4b 6f 6e 9e 88 e8 fd 95 a8 fb ca 53 Data Ascii: iS\yfgJJ2v;a8(Td9gA_N9:JJU8vpFRIAGo'f5qcVhTYmJP4GX=;oWRbE9wf<b[fmuQ3fvPFhRMR&ZY+KOQp%GqmWkGZKonS
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: d3 c3 71 7d 8d 58 cf 95 f5 35 d1 a7 39 a6 a3 19 49 47 57 95 5e de 3e 46 a9 c2 de 2b 93 40 6e af 3b 4d d9 e9 73 c2 97 cb 53 34 68 b9 df c1 74 3c 4a 0d 01 65 85 ac d6 1e 4a fa 4a ac 5f c2 32 fd c9 98 79 5f eb eb eb e5 57 4a 5f c2 8f 8c e4 fe 0a 3f b9 33 0f 20 89 d4 ea 65 ab 4e 5f 86 71 7f 06 99 41 8e 86 5a f5 63 d2 72 5f 06 cb 5a 92 e4 55 f1 19 5f 11 55 f5 9c 9a f2 6e e8 08 c0 00 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 7c 2e bb a7 5e 2d 4a 51 bf 75 e5 76 76 7a 1b 31 f4 b2 ca 6e 2d da 32 4b 54 93 b3 be f6 f2 23 e0 a9 e7 ab 08 dd 46 f2 4a ef 6f 0b 96 bc 4f 07 52 39 dc f2 5a 76 b3 52 be ab d3 cc 09 7e c7 60 6a 62 23 8b 84 27 18 27 4e 37 6e 39 9d ef Data Ascii: q}X59IGW^>F+@n;MsS4ht<JeJJ_2y_WJ_?3 eN_qAZcr_ZU_Un\|.^-JQuvvz1n-2KT#FJoOR9ZvR~`jb#''N7n9
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 86 8b c5 54 c4 4e d9 68 53 72 5e 6f 4f ca ff 00 23 47 15 af da 49 ca fa b6 e4 fd 40 85 0b e6 9c a7 2b db ba ae f9 2d bd 0f 12 c4 29 68 bf ab 34 62 61 79 3b 3e 4a eb c6 ca ff 00 32 77 06 c2 a7 3c f2 d9 68 bc c0 df 4e 50 54 e3 4a aa bb 4d ef 2c b9 53 b3 b6 9e f3 ba 2a f1 74 d4 6b 38 42 f3 8d f4 ea fd 51 6b c5 70 d4 a1 df e7 c9 5f f4 e6 55 f6 8e 94 73 7d f9 69 7e 9f 57 02 55 4c 43 a2 f3 ce ce b5 ad 08 2f 76 92 f0 fa fd ca a9 49 b6 db 77 6c c3 6d bb bd 59 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3a ee 13 4d 61 b8 5c ab 66 ef e2 5b 8a f0 8a 76 7f 1b 7c 8a 2a d5 6e d8 7c 46 73 a1 4e 8c 9f 76 92 6a 3e 4d dc d0 a2 da 6f 7b 6f e0 41 ee 51 93 93 56 Data Ascii: TNhSr^oO#GI@+-)h4bay;>J2w<hNPTJM,Stk8BQkp_Us}i~WULC/vIwlmY:Ma\f[v\|n\|FsNvj>Mo{oAQV
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 00 00 3d 43 9f 91 ea 38 79 bf ba fd 74 27 60 f0 a9 46 7d a4 6f 75 64 d3 d6 3a eb a7 30 35 60 52 72 b3 76 24 71 8a 19 54 19 1b b2 95 29 b8 bf 46 9d 93 5f aa 25 c5 aa b2 8c 6a 4d 46 2d a4 e4 ee d4 57 56 41 ee 95 69 28 51 6d 3b f3 b3 4e eb 6d b7 d8 91 c4 2b e7 5a 35 96 da 75 df e1 d4 c6 3b 86 ca 85 4f c6 96 aa db ca 36 d1 c7 a9 e5 4f 0f 25 9d b7 9b 9c 6c d5 fc 74 d3 e6 05 55 5c 36 99 a3 6d 37 57 d7 cf eb a1 18 b1 a8 d3 93 6b 6b 98 73 e6 d4 5f 8b 45 15 c0 9b 2a 1d a5 dc 21 b6 f9 76 f9 e8 46 ec 65 c9 04 6b 32 1a b6 e0 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 50 a3 9e 4a 37 4a fc de c5 be 17 0c a9 7b f0 93 51 6b 3e 8d 5e fa a5 7b 69 75 6f 89 Data Ascii: =C8yt'`F}oud:05`Rrv$qT)F_%jMF-WVAi(Qm;Nm+Z5u;O6O%ltU\6m7Wkks_E*!vFek2+6PJ7J{Qk>^{iuo
2024-05-15 22:37:23 UTC	169	IN	Data Raw: 88 22 d7 a4 e2 af 26 b3 37 b2 34 1e a7 26 dd db bb 30 51 80 64 10 60 19 00 60 19 30 55 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 37 ca d9 9d b6 d3 f2 30 00 18 00 20 78 98 00 66 33 e4 d2 6b eb 99 8b f4 ba f5 30 02 8d 83 00 0c dc 5c 00 07 a8 4d c7 66 d1 80 06 1b b9 9b be ac c0 02 5d 2c 53 4a d2 ab 5a dd 22 ed fa 9a ea 38 3d a1 53 ce 52 5f b1 80 06 97 e5 63 00 01 90 60 01 90 01 10 00 00 30 01 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff d9 Data Ascii: "&74&0Qd``0U70 xf3k0\Mf],SJZ"8=SR_c`0T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50204	142.250.189.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	687	OUT	GET /vi/0SlXGG18Kco/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:23 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 4964 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:35:09 GMT Expires: Wed, 15 May 2024 22:40:09 GMT Cache-Control: public, max-age=300 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 134 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:23 UTC	609	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 15 15 15 15 15 15 15 0f 0f 0f 0d 15 1d 15 15 15 0f 0d 25 17 19 15 1d 2e 27 31 30 2d 27 38 2b 40 3d 50 48 34 3d 4b 39 2b 2d 44 61 45 4c 53 57 5e 5c 5b 3e 44 71 79 64 58 6c 51 65 5b 58 01 11 12 12 17 15 15 25 15 15 25 57 36 2d 36 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff c4 00 38 10 01 00 01 04 00 03 04 08 05 02 06 03 00 00 00 00 00 01 02 03 04 11 12 21 31 05 32 61 81 13 22 41 51 71 72 91 a1 06 14 62 92 c1 52 b1 23 33 42 82 d1 Data Ascii: JFIF%.'10-'8+@=PH4=K9+-DaELSW^\[>DqydXlQe[X%%W6-6WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"8!12a"AQqrbR#3B
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: dd 8f 8b cb 2b 06 00 51 51 61 10 6a 25 a4 88 6b 40 8a a0 22 e8 00 66 a6 99 a8 1c e4 00 00 51 6a 65 aa 99 00 00 00 05 11 a0 41 00 51 00 51 00 25 14 04 7a 2c 74 f3 70 76 b3 d3 cd 07 51 15 00 00 00 00 00 00 01 51 40 00 01 40 15 14 08 6a 19 6a 01 a8 54 85 05 00 1c 72 3b b1 f1 79 65 ea c8 ee c7 c5 e5 a9 60 c0 0a 2c 2c 10 90 0e 90 ac c4 ae d0 51 36 6c 14 40 15 8a 9a 66 a0 60 05 05 45 02 59 6a 59 00 00 00 02 1a 45 06 42 40 00 04 50 00 10 07 6b 3d 3c dc 5d ac f4 f3 41 d3 6a 8b 00 2a 28 00 20 02 02 80 02 a2 80 a8 a0 00 02 a2 82 ac 22 c0 35 0a 90 a0 a0 03 8e 4f 76 3e 2f 2d 4f 56 4f 76 3e 2f 2d 4b 06 00 51 a8 45 8e 89 08 35 0a 44 34 08 69 40 4d 2e 80 0d 31 5b 6c 56 0c 00 a0 a8 02 ca 69 a9 40 41 40 41 40 45 00 64 50 10 50 10 50 11 1a 40 47 6b 5d 3c dc 9d ac d1 33 1c Data Ascii: +QQaj%k@"fQjeAQQ%z,tpvQQ@@jjTr;ye`,,Q6l@f`EYjYEB@Pk=<]Aj*( "5Ov>/-OVOv>/-KQE5D4i@M.1[lVi@A@A@EdPPP@Gk]<3
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: 7a 01 1e 5b b5 6e 5d ee d5 a8 79 a2 36 0d d8 a3 72 f6 c5 2e 76 28 d4 7c 5d a1 04 d2 cd 30 ae 59 17 38 69 f1 ab 90 3c 99 15 6e ae 5e c7 38 84 59 e5 1e 32 a3 95 fe 9e 6e 2e d7 63 96 fc 5c a1 45 88 6d 29 85 00 00 15 14 10 00 26 5c a6 5b ae 58 00 00 20 95 65 41 61 16 01 41 41 34 a0 00 00 80 00 00 00 00 8a 80 00 80 f4 e3 47 ab 3f 17 99 e9 c7 ee cf cc 0e dc 27 0c 10 a8 26 85 4d 80 84 ca 02 00 08 8b 20 20 a6 81 24 b7 4e e4 99 75 c7 07 a2 98 d4 34 8e 77 eb d4 78 83 8d ea f7 3e 10 d5 8a 37 2e 54 c6 de db 34 ea 3e 20 eb 0b 04 2b 20 f0 64 57 c5 57 85 3d 1e 9c 8b 9c 34 f8 d5 c9 e2 58 14 c3 35 4e e5 aa a7 51 af 6d 49 44 7b 67 a4 28 c5 fe 54 c4 78 ed c6 1d 2e ce fe ac c4 28 b0 00 00 00 00 04 8c d7 20 cc a0 00 40 aa 24 a1 20 2a c9 09 20 a0 00 00 00 00 00 00 00 00 20 00 Data Ascii: z[n]y6r.v(\|]0Y8i<n^8Y2n.c\Em)&\[X eAaAA4G?'&M $Nu4wx>7.T4> + dWW=4X5NQmID{g(Tx.( @$ *
2024-05-15 22:37:23 UTC	1255	IN	Data Raw: f9 8f d3 f7 7e a6 7f 0c e1 d3 da 56 ec 44 dc bf 62 fd 9b 97 62 cd 35 d5 14 c7 0c 44 7f 99 bd ce ea e2 f8 3c 91 87 89 46 66 3e 36 47 64 de c4 9c ce 1a 62 2a ed aa eb d6 ea d7 17 2f 3e 5b 30 c7 c1 fc c7 e9 fb 9f 98 fd 3f 77 e8 2d 76 4e 36 5d 7d a7 67 17 12 bb 77 fb 36 9f 47 66 27 b4 2a af 8e e4 5c aa 38 b9 cc 44 72 a7 a4 f2 7e 77 3b 02 fe 2d cf 45 91 6e bb 17 75 c5 14 d5 31 3b 8f 7c 4c 72 93 0c 77 b7 5f 14 6f 5a e7 ef 59 97 9a cf 77 cd d3 68 63 53 3a dc fb 9e 3a a7 73 33 ef 7a 93 86 3d d1 f4 16 3c af 4e 3d 3a 8d fb d7 86 3d d1 f4 6a 15 75 c7 3b b9 1f 34 7f 69 78 1e ec be ec 7c cf 1e 88 89 b0 e1 34 a0 4c 35 10 95 03 00 28 ac ac a0 0b 00 09 20 00 00 0a 8a 2a 00 20 a8 02 80 0a 22 c0 00 20 00 00 00 0a 02 3d 58 bd d9 f8 bc cf 56 2f 76 7e 61 1d 54 56 44 34 a0 23 Data Ascii: ~VDbb5D<Ff>6Gdb/>[0?w-vN6]}gw6Gf'\8Dr~w;-Enu1;\|Lrw_oZYwhcS::s3z=<N=:=ju;4ix\|4L5( * " =XV/v~aTVD4#
2024-05-15 22:37:23 UTC	590	IN	Data Raw: 64 d1 fa 9c 5e dd c7 8b 5d 9f 89 76 e4 55 81 73 0a bc 7c ea 26 dc cc 5b ab 5e ac f4 eb 13 1d 60 8c de cf bb 91 89 9f 77 2f d1 5d ec eb 54 5b bb 8f 18 b5 4d 57 aa b7 bd 55 4c fb a6 67 7f f0 fc b7 a1 f1 fb 1e 87 c7 ec 68 f7 d7 6f 1f 26 e5 37 ee 65 53 8f 5f 68 65 dd aa f5 b9 c7 9a bf 2d 44 d5 33 15 6f db ec 8f 3f 07 9a fe 35 9a 6c c5 74 64 53 7a f4 df ae dc da 8b 13 4c c5 b8 de ae 6f c7 97 2f 1f 07 1f 41 e3 f6 5f 41 e3 f6 06 ac 77 7c dd 19 b7 4f 0c 6b 7b e7 ee 69 00 14 50 00 70 cc ee c7 cd fc 4b c6 f6 66 77 63 e6 fe 25 e2 6a 0a 00 09 52 b3 50 32 8a 8a 00 00 00 00 00 00 00 0a 00 20 00 0a 8a 02 2a 00 d4 32 d4 20 a0 00 00 00 a0 8f 5e 27 76 7e 67 95 eb c4 ee cf cc 95 1d 85 10 41 40 41 40 41 40 41 41 10 50 10 5d 2e 81 01 45 41 54 10 50 00 50 45 00 79 f3 3b b1 f3 Data Ascii: d^]vUs\|&[^`w/]T[MWULgho&7eS_he-D3o?5ltdSzLo/A_Aw\|Ok{iPpKfwc%jRP2 *2 ^'v~gA@A@A@AAP].EATPPEy;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50206	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	655	OUT	GET /steam/apps/2668080/ss_07b95e43d4229270333d7fcbea6ba428a80253e4.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	340	IN	HTTP/1.1 200 OK Last-Modified: Thu, 14 Dec 2023 07:17:39 GMT ETag: "657aac13-ddf7" Server: nginx Content-Type: image/jpeg Content-Length: 56823 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=99695 Expires: Fri, 17 May 2024 02:18:58 GMT Date: Wed, 15 May 2024 22:37:23 GMT Connection: close
2024-05-15 22:37:24 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 00 06 07 08 09 ff c4 00 5a 10 00 02 01 03 02 03 05 04 07 04 04 09 08 08 04 07 01 02 03 00 04 11 05 21 06 12 31 07 13 41 51 61 22 32 71 81 08 14 23 42 91 a1 Data Ascii: JFIFCCQXZ!1AQa"2q#B
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: c7 70 07 e3 45 b7 31 de c8 25 8f 1b 1d ab 4b 58 2e 38 a9 b5 03 14 21 c8 19 c5 00 21 5c 13 ed 8a bd 9c 93 25 3b 82 73 e7 9a 56 28 25 e6 39 d8 1f 3a 40 3d dd 7b 39 a7 15 71 5f 3b 09 c9 d6 a4 66 08 cb 1c 67 6a 77 b6 68 a5 9e a6 b3 c6 1d e4 5d d0 49 19 72 0f ba d8 ad 9d e3 86 a9 25 a9 8c 56 d5 67 d1 1a d2 dc 5d 01 81 71 30 1f eb 0f f6 d7 85 da d4 fc cc ec d8 5c 05 5b bb c5 e9 73 38 ff 00 e2 1a 3b 6a 9f 98 36 17 00 c5 ed e8 3f e3 53 ff 00 e3 34 fb 6a 9f 98 36 11 26 cf 88 b5 7d 2e 61 71 6b a8 dc c1 2a 82 39 d1 c8 38 23 04 7c c1 34 3a 92 9a b4 9d c9 95 28 ca 2e 12 57 4e d7 f5 df df 99 bf c3 a8 5c df 07 9e e2 53 71 2c df 69 23 49 bf 33 13 92 7e 67 26 bd 2c 2e 22 ad 58 a9 cd dd b6 ef eb 25 d9 26 90 ad 1c 12 c4 32 86 36 cf 54 dc 7e 15 d7 17 07 b5 b4 b7 7c 47 7d 08 Data Ascii: pE1%KX.8!!\%;sV(%9:@={9q_;fgjwh]Ir%Vg]q0\[s8;j6?S4j6&}.aqk*98#\|4:(.WN\Sq,i#I3~g&,."X%&26T~\|G}
2024-05-15 22:37:24 UTC	2011	IN	Data Raw: 0e b1 36 53 94 1c 29 24 63 27 cc fa 9a f2 7d 2d 8f 95 0c 0a b4 55 da 4c ee c3 b5 56 95 5b f0 bf a9 9e 85 82 f4 ba 29 09 d4 03 d6 be 92 8d 79 54 a5 19 f1 49 9f 3c ea a4 ed 62 54 77 24 6f c8 2b 65 52 44 76 bc 8d 9f 85 78 76 e3 5f 8e e2 f6 e2 78 b4 bd 0e c8 73 5e 6a 77 03 ec e2 5f 21 fb ce 7c 14 6e 6b 19 d7 9e d7 67 4f 39 3d df 16 f7 2e 65 c6 79 6d cf 25 ed 6f 82 5b df b1 6f 35 9e d0 3b 58 fe 9b b4 6e 19 e1 48 24 d3 38 72 36 cc ae ed f6 d7 ac 3f ce 4c c3 60 07 50 bd 00 3e 27 7a c7 b4 ec 6e d4 af 27 ac be 11 5b 97 b5 ef e0 75 41 4a 76 95 45 64 b4 5b 97 cd bd ed f9 1c cf f6 ac d0 c4 c0 28 19 92 66 ce 3f f2 cf e3 9a e7 73 6f 37 a9 ad f7 ee fa f6 f2 33 bc 59 87 22 8e 4b 68 f7 3b 6e c7 cc fa 9e 9e 54 94 58 ef bd 9a 8f 6a f2 9b be 12 b8 66 1c 91 c6 ca 23 41 d0 6f Data Ascii: 6S)$c'}-ULV[)yTI<bTw$o+eRDvxv_xs^jw_!\|nkgO9=.eym%o[o5;XnH$8r6?L`P>'zn'[uAJvEd[(f?so73Y"Kh;nTXjf#Ao
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: 80 7f 1a f5 30 77 a8 bb 49 bf 1b bf ab 2f 81 cb 59 a5 dd 5b 92 46 c3 a6 58 b0 69 a5 90 8f 66 33 ca 33 f7 8e c2 bd 07 1d a9 2c cc 1b ee b1 db 1d 22 6e ea e5 d6 50 80 47 86 dc e4 82 7a 63 c7 d6 a9 46 3b 4a e0 e4 ec 4a b0 d1 88 b5 bc 3e d3 65 54 12 06 c3 7a 14 56 d2 f3 25 cb 25 d7 e6 3d 6b a3 28 b2 b8 5c 9d d9 4f 4e bd 7c 7f e3 54 a2 ae 4b 6f 22 6d c6 8b 0c d1 5a e0 31 22 20 a7 3e 84 ff 00 7f 0f e6 5c 23 64 fa 8a ed 36 3d 71 a0 2b 77 52 b1 e7 79 10 12 dc d9 20 f4 df f0 e9 fa 55 c5 2b 59 2d 05 b4 ee c9 97 7a 0c 22 68 ae 56 20 ab 20 0e b9 1b 64 6c 76 c6 3a 8f e5 be f4 a3 6d 9b 32 76 ac da 1c 6d 0e 28 67 49 79 03 87 02 41 9d b3 be ff 00 9e 46 7f 0a ab dd 09 3b 64 c9 07 4a 86 0b b6 92 24 5e ed b2 40 e5 d8 a9 ea 08 cf 4f 4c f9 55 59 b5 7f ab 87 14 c9 0b a3 25 9c Data Ascii: 0wI/Y[FXif33,"nPGzcF;JJ>eTzV%%=k(\ON\|TKo"mZ1" >\#d6=q+wRy U+Y-z"hV dlv:m2vm(gIyAF;dJ$^@OLUY%
2024-05-15 22:37:24 UTC	6000	IN	Data Raw: cb 18 06 23 83 8e 94 b6 47 70 3b 9e a3 3b d0 a1 c8 2e 21 b7 c9 e8 4d 16 48 57 0e de 02 92 64 78 03 d7 e0 69 49 ad 87 6e 44 cb 34 14 4d 97 7c 8c 1c 7f 3a 94 fb 85 cb c5 e6 2c cb 95 24 7f 7d cd 67 2d 44 88 67 c7 34 0d 00 4d 00 0f 5a 40 62 33 44 e1 e3 76 47 1d 19 4e 08 a4 d5 c1 5d 16 11 eb ad 2b 29 be 84 5c b2 fb b3 a1 ee e6 5f 83 0e bf 3a 59 da da ae 65 26 b5 de 5b c5 a9 a6 a6 bc 92 18 b5 74 e9 dd dd 7d 95 ca ff 00 0c 83 66 f9 e6 9a 96 56 4e dc 9e 68 5b 3b fd df 22 05 c6 87 67 75 2b 25 9c ed 6f 71 ff 00 e9 2f 87 76 ff 00 26 e8 d4 9a 5f 8b 2f 70 2b ee cc aa 9e da f3 46 98 ac b1 3c 47 39 2b 22 fb 26 9a 73 82 c9 e4 2c a5 bf 32 5d b6 af 14 83 bb 96 31 10 62 06 db ae 3e 15 d5 46 a2 6d ed b3 2e cd 45 5e 27 60 5f 4a b3 cf 1d 8c 78 d3 44 9b 4f 01 70 0e af da 06 b5 Data Ascii: #Gp;;.!MHWdxiInD4M\|:,$}g-Dg4MZ@b3DvGN]+)\_:Ye&[t}fVNh[;"gu+%oq/v&_/p+F<G9+"&s,2]1b>Fm.E^'`_JxDOp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50210	172.217.165.206	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	456	OUT	GET /vi/N12y2V1VbyA/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 13186 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:34:01 GMT Expires: Thu, 16 May 2024 00:34:01 GMT Cache-Control: public, max-age=7200 ETag: "1715255551" Content-Type: image/jpeg Vary: Origin Age: 203 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:24 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 19 1a 1e 1d 1b 1f 1f 1f 25 1f 20 20 1f 25 25 1f 25 25 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2b 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 65 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1b 1b 2f 57 3f 35 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 04 01 03 05 06 07 ff c4 00 44 10 00 02 01 02 02 06 07 07 02 03 07 03 04 03 00 00 00 01 02 03 11 04 12 05 21 31 41 51 91 13 52 61 71 81 a1 d1 14 15 16 22 32 42 b1 06 c1 33 62 72 Data Ascii: JFIF% %%%%.'10-'--5=PB58K9+-EaEKSV[\[2AemeXlPY[W//W?5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"D!1AQRaq"2B3br
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 99 f8 fa b1 e6 aa 00 bf ee 9a 9c 61 cd fa 0f 74 d4 e3 0e 6f d0 74 ba df 99 38 35 3d 28 02 ff 00 ba 6a 75 a1 cd fa 0f 74 d4 e3 0e 6f d0 74 ba df 93 83 53 d2 80 2f fb a6 a7 18 73 7e 83 dd 35 38 c3 9b f4 1d 2e b7 e6 4e 0d 4f 4a 00 bf ee 9a 9c 61 cd fa 0f 74 d4 e3 0e 6f d0 74 ba df 99 38 35 3d 28 02 ff 00 ba 6a 71 87 37 e8 65 68 7a 9d 68 73 7e 83 a5 d6 fc c9 c1 a9 e9 cf 07 47 dc d5 3a f4 f9 bf 42 2f 44 54 eb 43 9b f4 1d 2e b7 e6 56 7e 3e a4 7d 28 02 ff 00 ba 6a 71 87 37 e8 3d d3 53 8c 39 bf 41 d2 eb 7e 65 38 35 3d 28 02 ff 00 ba 6a 75 a1 cd fa 05 a2 2a 75 a1 cd fa 0e 97 5b f3 27 06 a7 a5 00 74 7d cf 53 af 4f 9b f4 30 f4 44 d7 df 4f 9b f4 1d 2e b7 e6 57 a7 d4 f4 e7 82 eb d1 b3 5f 74 1f 8b f4 31 ee e9 f1 8f 37 e8 5e 93 5b f3 2c 71 5f d2 98 2e 7b ba 7c 63 cd fa Data Ascii: atot85=(jutotS/s~58.NOJatot85=(jq7ehzhs~G:B/DTC.V~>}(jq7=S9A~e85=(ju*u['t}SO0DO.W_t17^[,q_.{\|c
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: b3 1d 3c 7b 79 15 89 46 94 9e c4 df 80 c4 26 f9 96 ee 9e 3d a6 3d a1 70 62 38 39 bd c9 77 b2 6b 02 f7 c9 13 30 d7 f2 6b 78 8e cf 33 1e d0 fb 0d fe c2 ba fe 46 56 0a 3d 67 e4 37 42 e2 ea de d1 2e 26 1d 69 3f b9 97 16 16 9f 6b f1 24 a8 53 5f 68 dd 0d 6d bf b7 39 26 de ab b6 6e 86 0e 6f 6d 97 79 7d 34 b6 2b 19 cc 49 bc b5 1a 7e d5 63 81 5b db 7d da 88 57 e8 a9 d9 65 72 9b fa 60 ae e4 fc 0d 8e b5 4a b5 3a 1a 0a f3 fb a5 f6 c3 d5 f6 1e 87 44 68 2a 78 75 9a 5f 3d 57 f5 4a 5a db 67 ce f9 1f 3b 67 f1 a7 79 72 d4 d5 ad 7b 56 1c 6c 17 e9 ea d5 fe 6a ad 51 83 fb 21 6c ef be 5e 85 8a da 1b 0c a6 a8 d2 82 6a 2d 74 af 6c 9c ad 75 0b f0 d7 77 e1 c5 9d ad 2f 8e 74 28 b7 1d 75 24 d4 29 47 8c de cf 05 b5 f7 1a f4 46 0b a3 82 6d dd eb 77 7b 5b 6e f2 93 ed 6e e7 c9 be a5 af Data Ascii: <{yF&==pb89wk0kx3FV=g7B.&i?k$S_hm9&nomy}4+I~c[}Wer`J:Dh*xu_=WJZg;gyr{VljQ!l^j-tluw/t(u$)GFmw{[nn
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 68 5e 55 39 60 21 7d 4d ae c2 71 c3 d3 8f db 7e fd 66 f7 4f 83 31 d1 32 e5 39 65 15 33 2a 46 7a 26 3a 36 3b 27 2c b2 2c 61 41 8c ac 8b ca cd 8c 4a 09 ed 57 ef 19 58 cc d6 d4 f9 30 bc ad 33 c1 41 ee 6b b8 d6 f4 7a dd 27 c8 b0 eb a5 ff 00 86 41 e2 e3 d6 45 cc 9c 8a ef 47 be b2 e4 61 e8 f9 71 8f 99 63 db 23 c7 c9 98 f6 e8 f6 f2 19 93 7b 54 34 7f 5a 5c 8b 10 c2 41 7d b7 ef d6 6a 7a 41 75 5f 32 0f 1f 27 b2 29 77 eb 13 32 bb f0 ba a3 6d 8a c6 ac 5e 21 52 83 9c b7 6c 5b db dc 91 5f db a5 bd 23 66 89 a2 f1 98 95 29 2f ec a9 3d 5b d3 9e f7 e1 f9 3c ff 00 23 57 8e 99 fb 5a df 3e 1d 7f d3 7a 2d d3 8b af 57 f8 d5 35 bf e5 5b a2 8e e1 84 8c 9f 06 67 33 99 6c 38 1a 61 ba d8 dc 3d 05 b2 9a 75 65 c3 33 f9 61 cb 5b 3b e7 07 42 ae 97 15 8a af c6 a3 8c 7f a6 0b 2a fd c4 0e Data Ascii: h^U9`!}Mq~fO129e3Fz&:6;',,aAJWX03Akz'AEGaqc#{T4Z\A}jzAu_2')w2m^!Rl[_#f)/=[<#WZ>z-W5[g3l8a=ue3a[;B
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 66 63 0d f9 45 8b 4f 07 24 b5 a7 7f 02 3e ce f8 4b 90 df 0e 5b d5 ec 56 a9 52 71 da bc 51 72 aa c9 b6 fc 99 ad c9 4b 52 9d bb 8c da 73 e2 52 6c a7 88 92 73 93 5c 46 64 a3 6c 9a de c9 36 fc 8e 7c 71 05 c8 56 8e 57 29 4b 35 a3 f2 47 5e b6 de ce e5 b4 f1 ee 27 4e d9 c2 74 a1 99 ec 93 5b f2 ab b2 f5 3c 05 9d d4 e4 97 0b 5a 45 1a 18 a6 a3 1c 91 b4 d5 ef 37 ad be c4 b7 22 e6 02 53 95 4b 4d c9 5f 6c b2 a7 2d 5b b5 ec f0 35 5b e1 99 89 af 65 c8 53 4b 8b ef 66 ce 85 3d dc ae 5e a7 8a c3 c1 28 e6 8e cd ef 5b ed 36 fb 6d 0e b4 4b cb 3e 99 c4 b9 53 d1 b5 25 f4 b9 2e f4 9a 35 bd 11 89 dd 52 3e 3a 8e ac f1 b8 7d f2 7e 0e 5f b1 53 13 88 a2 d7 c9 52 b5 fb 1e af 32 c6 a5 fd 3a 56 25 ca 9d 0a d1 94 a3 29 a5 25 7d 4d d9 b5 c5 5f 6f 81 a2 4a 79 b2 b9 bb f7 b2 58 ab ca ce 52 Data Ascii: fcEO$>K[VRqQrKRsRls\Fdl6\|qVW)K5G^'Nt[<ZE7"SKM_l-[5[eSKf=^([6mK>S%.5R>:}~_SR2:V%)%}M_oJyXR
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 92 6d e7 4f 55 b6 35 bc 92 6f a2 92 d4 92 92 6f ad c3 fe 77 9c 22 f8 76 e3 8c ac 61 ea 36 d7 e4 bd 39 c2 3a a2 93 6b 7b 47 1e 9b 94 56 64 f7 d9 71 bf fc fc 9d 0a 34 5d 34 a5 26 9b 7f 6d fe 64 fb 4d d2 ce 77 a6 3b ac c6 4f 6c 9f ca f8 32 c4 75 a2 9d 0a 91 cf f3 76 9b 5e 29 ba 99 52 f9 6f ad f1 3a d6 cc 56 25 66 c6 2c 68 c4 63 14 1b 8a 57 96 ad 46 b9 62 53 4a 39 9d fe ed 4e f7 e1 64 6b 7c 37 b6 71 92 a5 67 7d 57 5c 8d 35 b1 72 84 5b da f6 25 6d ad ec 45 d5 85 56 5e 77 db dc 34 6e 15 55 c6 a8 da f0 a3 f3 cb b6 6f 62 f0 5f 93 8e ad a6 95 cb 3a 74 9b 5b bb b9 a0 74 77 b3 d1 f9 b5 d5 a9 f3 55 7f cc f7 77 22 be 97 59 b1 98 68 f0 85 69 78 b7 18 fe ec ed 9c 3c 7a ff 00 f2 54 78 3a 12 5f ff 00 48 9f 2f 39 97 d1 76 d1 90 0c a8 00 00 51 d2 35 13 8c 52 77 bb 7b 3b 0b Data Ascii: mOU5oow"va69:k{GVdq4]4&mdMw;Ol2uv^)Ro:V%f,hcWFbSJ9Ndk\|7qg}W\5r[%mEV^w4nUob_:t[twUw"Yhix<zTx:_H/9vQ5Rw{;
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 7b 49 16 76 9a 76 7a 0a 35 54 95 ee b5 6d b6 c4 5c fd 27 4b fb 09 56 6b 5d 59 ca 5e 17 d5 e5 63 ca cf 13 38 d2 9a 4e c9 a7 f8 3d be 81 86 5c 1d 15 c2 11 fc 1c 7e 4d f3 11 0b a5 4d b3 2b e7 13 4e ac b8 8c 2d 4d cd d4 a6 ff 00 cc b3 47 ce 27 6c e7 e9 ec 23 ad 85 9a 87 f1 21 6a 94 ff 00 aa 2e eb 9e b5 e2 78 e1 d9 6b 0b 5b 3c 7b 56 df 53 79 c0 c0 e3 33 46 15 60 f5 49 27 ea 99 da a1 59 4d 5d 78 ad e8 4c 0d a0 02 01 cd d2 5f 5a fe 9f dc e9 14 74 94 35 46 5c 35 32 c0 f2 73 d2 f3 a3 53 11 4e 49 ca d2 93 a6 f8 5d 5d 27 d9 ac dd a3 74 cc 5c 72 d7 92 8c d7 dc f5 46 4b 8f 63 28 e9 ca 59 71 2d f5 e2 9f 8a d4 ff 00 08 a0 66 6f 31 2f 76 97 c6 ae a6 9e 73 dd d1 d3 3a 41 56 6a 14 dd e1 17 76 f7 4a 5b ad d8 8a d8 3c 75 4a 0d e4 69 c5 bb b8 cb 67 7a e0 57 06 26 f3 9c bd 55 Data Ascii: {Ivvz5Tm\'KVk]Y^c8N=\~MM+N-MG'l#!j.xk[<{VSy3F`I'YM]xL_Zt5F\52sSNI]]'t\rFKc(Yq-fo1/vs:AVjvJ[<uJigzW&U
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 1f 3e c7 e0 4c 2b 8b fa 8b 03 27 0c d6 f9 a9 b6 fb e2 f6 fe cf c0 f3 88 f7 75 b1 2e 6a d2 8a ef d6 79 9d 21 a1 65 16 e7 41 5e 2f 6d 3d 8d 7f 4f 67 61 9b d7 2f 5f c6 d7 8a 7f 1b 78 72 81 19 cf 2b b4 93 8b e1 24 d3 10 96 67 68 27 27 c2 29 b6 72 db 2f a3 cb 4f 39 87 a0 fd 25 18 ba 95 db fa 94 60 97 f4 bb df cd 23 d2 9e 3b 05 82 c4 51 6f 10 ad 07 08 b7 93 6b 9a da e2 ed b3 52 3d 75 2a 8a 70 8c e3 f4 c9 26 bb 9a ba 3a 63 10 f3 57 52 b6 99 c2 d6 0d da 7d e8 e5 62 2b 2a 3a 46 32 4a ea a5 2a 91 6a fa be 59 26 9f 9b e6 5e 39 18 fd 78 ca 0b ab 4e ac 9f 73 71 48 b5 72 f9 11 fc 66 5d 29 e3 e6 f6 5a 3f 92 b4 a4 db bb 6d f7 98 07 4c 3c 01 46 bc 65 8a ab ec 94 db 4b 6d 79 af b6 1d 5e f6 66 a6 22 75 aa 74 18 5b 3a 9f 7d 4f b2 92 e2 f8 be 08 ef 68 cd 1d 4f 0d 49 53 86 bd Data Ascii: >L+'u.jy!eA^/m=Oga/_xr+$gh'')r/O9%`#;QokR=up&:cWR}b+:F2J*jY&^9xNsqHrf])Z?mL<FeKmy^f"ut[:}OhOIS
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: c4 97 e3 91 e5 f9 55 ce 9f f8 77 d0 9c 5d e8 ab d6 54 e8 d6 9b d9 1a 73 7c 93 3c 6e 84 c3 aa 98 69 c1 ed 56 69 f3 b1 dc fd 55 8b e8 f0 92 82 fa aa b5 05 dd b5 fe 2d e2 79 fd 19 8b 54 1b d5 74 d5 ac b5 17 fe 32 9b 77 5a 7e d8 f9 b9 9e d5 f2 d0 83 76 5d a6 fc 6d 78 4e 79 a1 1c b7 5f 32 ed 2a b3 e9 4b 8c 77 8e e9 c0 54 d4 8c d1 57 b9 8a db 51 8f b5 41 00 0a a0 30 d8 b8 16 3d 8f f9 bc 8c fb 1b eb 79 16 6c 66 cc eb b6 1c f7 4a af b1 be b7 90 f6 47 d6 f2 2d 82 ed 83 74 aa 7b 27 f3 79 07 85 b6 d9 79 16 ca f8 bf a7 6a ee b9 26 22 08 99 56 92 5b 9d fc 02 9b 4a d7 21 98 cd ce 6e 8c b0 9b 44 6e 2e 06 d8 d6 6b b4 b7 4e 4a 4a e8 a0 89 46 6d 6c 76 26 05 ec 83 21 5a 38 a6 b6 eb fc 96 e2 ee 93 5b ce b1 89 73 9c c3 45 4a 0e 4f 69 0f 63 7d 6f 22 d8 2e d8 4d d2 ab ec 8f 8f Data Ascii: Uw]Ts\|<niViU-yTt2wZ~v]mxNy_2*KwTWQA0=ylfJG-t{'yyj&"V[J!nDn.kNJJFmlv&!Z8[sEJOic}o".M
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 24 c1 b6 59 30 00 00 0d 75 6b 28 ea db 27 b1 2d a0 4e 73 51 57 7a 91 0a 34 5d 46 a5 35 68 2f a6 3c 7b 59 2a 58 57 27 9a a6 be 11 dc bb cb 65 88 19 30 01 a4 09 d3 9e 57 73 5b 92 56 bb db b0 c8 1b a5 88 93 df 6e e2 19 e4 f7 be 66 1a b2 bc 9a 8a e3 2d 48 d6 b1 4d fc b4 23 99 ef 9c b5 45 0f 23 6c d6 58 e6 9c 94 57 69 a6 55 29 d5 c3 55 b3 76 8d f6 ea 77 5a d3 ee 27 4f 03 f3 67 ab 27 52 7d bf 4a ee 44 eb 68 fa 53 96 67 1d 7d 8e d7 3a f1 4a 66 0c 14 52 a5 0b 2b 7c b1 e7 6d a6 eb 12 51 b6 a0 7a 22 31 0c 4b 16 16 02 e5 42 c2 c0 c8 18 b0 b0 b8 b8 30 90 64 ac 2c 1a c2 17 32 4a c2 c0 c2 20 95 85 81 84 6c 63 29 3b 0b 03 08 65 19 49 d8 58 08 34 60 d9 61 60 20 8c e5 25 61 60 20 d0 b9 3b 0c a0 c2 17 32 4a c6 6c 0c 35 ca 37 4d 71 27 a3 a5 7a 14 fb 22 93 ef 5a bf 60 6b c0 Data Ascii: $Y0uk('-NsQWz4]F5h/<{Y*XW'e0Ws[Vnf-HM#E#lXWiU)UvwZ'Og'R}JDhSg}:JfR+\|mQz"1KB0d,2J lc);eIX4`a` %a` ;2Jl57Mq'z"Z`k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50211	172.217.165.206	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:23 UTC	456	OUT	GET /vi/zlEfE7wtvBQ/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 16538 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:33:19 GMT Expires: Thu, 16 May 2024 00:33:19 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 245 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:24 UTC	607	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1b 1a 19 1a 1e 1d 1b 1f 22 27 25 22 22 22 22 27 2d 28 25 25 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2d 1b 1b 2f 57 36 35 36 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 5d 57 57 57 57 57 57 57 57 57 57 57 57 59 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 04 02 03 05 01 06 07 ff c4 00 49 10 00 01 03 02 03 04 06 06 08 03 07 03 04 03 01 00 01 00 02 11 03 21 04 12 31 05 41 51 61 13 22 71 81 91 d1 15 32 52 a1 b1 c1 06 14 42 62 92 a2 e1 Data Ascii: JFIF"'%""""'-(%%.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W-/W656WWWWWWWWWWWWWWWWWWWWWWWWWWW]WWWWWWWWWWWWYWWWWWWWWWh"I!1AQa"q2RBb
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 25 5e 2c f1 3e 48 6b 35 0b 4b d0 95 78 b3 c4 f9 23 d0 95 78 b3 c4 f9 21 ac d4 2d 1f 42 d5 e2 cf 13 e4 b9 e8 7a bc 59 e2 7c 90 d6 7a 13 fe 88 a9 c5 9e 27 c9 1e 89 a9 ed 33 c4 f9 21 a4 10 9e f4 5b fd a6 78 9f 25 1f 46 bb da 67 bf c9 0d 26 84 d9 d9 ee f6 d9 f9 bc 91 f5 03 ed b3 f3 79 21 a5 10 9b fa 81 f6 d9 f9 bc 97 3e a2 7d b6 7e 6f 24 34 aa 13 5f 51 3e db 3f 37 92 3e a2 7d b6 7e 6f 24 34 aa 13 5f 51 3e d3 7f 37 92 3e a2 7d b6 fe 6f 24 34 aa 13 5f 51 3e db 7f 37 92 83 f0 c0 18 35 18 3f 17 92 2a 84 2b 7a 11 fc c6 7e 6f 24 74 23 f9 8c fc de 48 2a 42 bb a1 1f cc 67 e6 f2 47 42 3f 98 cf cd e4 82 94 2b ba 01 fc d6 7e 6f 24 74 03 f9 ac fc de 48 29 42 bb a0 1f cd 67 e6 f2 47 40 3f 9a cf cd e4 82 94 26 19 86 04 c0 a8 c3 f8 bc 94 fe a0 7d b6 7e 6f 24 0a 21 37 f5 03 Data Ascii: %^,>Hk5Kx#x!-BzY\|z'3![x%Fg&y!>}~o$4_Q>?7>}~o$4_Q>7>}o$4_Q>75?+z~o$t#HBgGB?+~o$tH)BgG@?&}~o$!7
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 7d 51 7d 07 25 b7 49 f4 c5 26 30 e1 5e 5c d6 4c 9a 02 4d 40 64 02 e1 72 d3 11 de 75 dc 6d 27 d3 a9 43 25 2c 2d 46 d4 96 f5 ba 06 b6 60 00 4d b4 ec d3 7a 0a 7e 8c d6 67 4e ca 4e a3 4d e5 ee f5 9c 24 81 94 d8 0e e4 c6 06 a5 37 33 17 4b a0 a6 0b 29 55 76 78 97 13 26 23 84 03 ee 59 fb 29 b5 28 62 29 d5 34 6a 10 d2 4c 06 99 d0 85 6e 12 a5 4a 6e c4 93 42 a9 e9 a9 bd a3 aa 6c 5c 75 2b a7 1e 5e 9c b9 71 db 7f e1 0c 0f af dc b6 3a 06 08 69 79 0f 21 a7 d5 ea f5 a0 81 33 33 06 7d cb 3f 01 84 a8 1f 26 9b c0 83 ab 4a d6 0f aa 00 01 a6 c2 27 27 5b 28 33 13 13 0b 31 ae 5f e8 0c 13 09 21 ae 75 9c e6 99 0d 13 0c 73 ad 7f bb bf 8a a6 ae 1f 28 26 e3 ac d6 c1 cb bc 38 cd 89 1b 95 b3 55 b2 4b 4d c9 71 96 58 92 08 33 23 83 8a 94 d4 00 81 4c 41 83 1d 10 89 13 06 23 99 5a f4 ce Data Ascii: }Q}%I&0^\LM@drum'C%,-F`Mz~gNNM$73K)Uvx&#Y)(b)4jLnJnBl\u+^q:iy!33}?&J''[(31_!us(&8UKMqX3#LA#Z
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 82 d7 d9 4c eb 58 f2 23 91 fd 40 53 34 75 d4 d9 1b d4 1b 4c 75 e0 47 55 df 05 b1 d1 aa eb b3 a8 ff 00 e9 3f 05 59 78 8f a6 56 c4 d0 ff 00 fc ec 3f 99 c9 4f ac 8e a4 8f 5f 9e 9d aa 5f 48 2b ba ae 22 8f 49 06 29 b1 b6 11 23 31 f3 56 55 c2 d3 74 0c b0 06 82 4d 94 d5 b1 9b 8f c4 07 3a 1b a3 77 8d e9 42 79 eb aa d5 a3 b3 8b 1c 1d 9f 4f bb fa aa 6a e3 a0 b8 65 93 3a cf 8a a2 78 87 90 1a 58 e8 24 88 2a 38 46 b9 b5 c8 a9 39 80 36 9d e9 bc 35 52 d6 87 c0 91 0e 16 d0 8b d9 2d 5f 6c 3d ee 2e 2d 12 7b 77 59 54 f7 a5 31 4f 3d 2b ee 75 3b d3 3b 39 e4 e6 92 4d 86 a7 b5 70 6c fa 95 4b 9f 2c 6c f5 a0 93 bf 82 b7 07 86 75 32 64 8b f0 95 16 aa da 35 ff 00 bb ef 5f 47 c0 d0 06 85 13 a1 e8 d9 71 63 ea 8f 1e f5 f3 0c 7f f6 ae ee f8 2f aa 6c ef fb 7a 3f fc 6c ff 00 68 55 2f c2 Data Ascii: LX#@S4uLuGU?YxV?O__H+"I)#1VUtM:wByOje:xX$*8F965R-_l=.-{wYT1O=+u;;9MplK,lu2d5_Gqc/lz?lhU/
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 8d 70 3a 10 57 50 08 44 22 10 c6 56 d8 1d 66 f6 7c d6 7b 85 93 db 52 9c 55 9f 68 7b c5 bc 92 44 ac 57 59 f0 ac b6 eb 8d d5 4c 2e 34 5d 65 74 34 5d 75 ad b1 5d 1a ae ca a2 b2 d4 a5 5c f9 cc 4f 21 16 36 e2 9c 21 70 ea 90 2d 40 38 ce 62 ed da 88 fd 85 7b d4 9c a3 50 a2 12 a8 25 d1 c4 a7 f6 5d 42 e0 41 11 11 e3 bd 22 4f 5c 76 ad 8a 3a 2d 44 ab d4 5e e2 1a 48 13 03 45 d5 c7 dc 70 5a 65 41 32 27 44 a5 63 d6 ec 1f 1f fc 26 dc 52 75 0f 58 f6 0f 9a 0a 9b eb 27 69 88 09 6a 21 34 c0 62 ea 45 45 ee b4 f2 58 a6 25 6c d6 69 20 81 c0 ac ea b8 42 37 81 2a a2 ad 96 24 8f e9 07 c5 68 9c c1 53 82 c2 9a 7a 90 6c 05 b9 26 2a 09 08 32 9e 5a ea d7 13 24 f8 0d 53 2c 70 24 43 5b af 00 93 73 5c 2a 92 00 25 b3 ac ef 56 61 8b dc f8 01 82 00 33 0e b4 cf 3e 4a 2b 5d 85 58 aa a6 15 a1 Data Ascii: p:WPD"Vf\|{RUh{DWYL.4]et4]u]\O!6!p-@8b{P%]BA"O\v:-D^HEpZeA2'Dc&RuX'ij!4bEEX%li B7$hSzl&2Z$S,p$C[s\*%Va3>J+]X
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 72 d0 a3 f4 5d af ff 00 dc 55 f0 1e 6b 73 07 95 8c a6 dc c4 16 33 20 23 35 a1 ad 00 c6 e3 63 a2 62 88 eb b8 8b 02 49 03 91 2b 9f 2e 5f 8d f1 e3 3e d8 d4 be 88 06 e9 89 7d f8 b4 79 a4 76 c7 d1 c1 4d ad 71 ac e7 02 48 f5 40 85 ed 1a 90 db 8c 9c 39 e4 e0 7e 23 e6 b3 39 dd 6a f0 98 f2 5b 3b e8 d3 2b b8 8e 95 c2 04 d9 a0 a6 2b 7d 10 6b 1d 06 b1 20 82 47 54 6e 23 9f 35 a1 f4 7a a1 fa c4 4e a0 ad cd a5 46 1b 98 38 c8 dd ba f0 ba 5b 75 99 26 3c 6f fd 30 cf e6 bb f0 85 b9 4d a1 8c 6b 66 c0 01 3d 81 4d b3 17 d5 53 89 12 c2 b4 c2 42 a0 e2 ba f1 69 b7 7a c9 a4 eb b7 f7 b9 6a d4 1d 52 a0 a2 b1 01 a0 c8 b3 82 b3 7a ca 2b 4c 19 84 16 82 ac 06 ea a0 ac 0a 87 69 03 d1 d5 87 39 a7 a3 20 65 d4 98 77 cc a5 e9 e3 69 3d 8c 90 73 8c bd 62 49 ed 37 5a 7b 29 b2 d2 77 cc 77 2a eb Data Ascii: r]Uks3 #5cbI+._>}yvMqH@9~#9j[;++}k GTn#5zNF8[u&<o0Mkf=MSBizjRz+Li9 ewi=sbI7Z{)ww*
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: ba 9b a0 d9 c1 6c d2 c4 34 bd cd 06 e0 f0 b7 8a ee 2b 0c da ad 83 63 b8 f0 4d 1d d9 db 50 18 6b e0 1d c5 6c 03 2b c8 37 0a e0 e2 d2 40 70 e7 af 7a 7f 67 ed 27 53 39 1f a7 03 a8 45 c7 a0 52 51 a5 51 af 12 d3 21 4d 56 48 6d 7c 59 a5 48 c7 ac ee ab 7c d7 9e a1 4b 34 92 60 0d 4a d5 fa 4b a5 2e d7 7c 92 38 68 34 83 49 80 e2 5a 4f 02 74 9e 56 57 d4 f7 5d 3c 7c 65 be de 8f 63 53 60 6b 48 68 16 d4 dc a6 b6 a6 cc c3 e2 1b 99 f5 b2 3d a2 ce cb 36 9d 08 de b2 ea 39 f8 6a 6d 6d 30 5f 78 76 a4 e9 32 3b e5 27 89 c6 d5 14 9d 9d c3 36 a4 40 ea de c0 c6 f9 f8 2f 99 c7 c1 e4 e7 cf bf 0e 59 ed f4 bc 97 87 5c a9 56 d9 59 06 7a 55 d9 50 0b fd a6 38 7e 2b 7b d3 5b 3f 19 d2 36 1d eb 0f 78 e2 bc db f1 0e 79 97 38 9e d2 af a3 58 82 08 30 42 fa 12 59 ea dd 7c bb 67 d3 76 ab 84 1b Data Ascii: l4+cMPkl+7@pzg'S9ERQQ!MVHm\|YH\|K4`JK.\|8h4IZOtVW]<\|ecS`kHh=69jmm0_xv2;'6@/Y\VYzUP8~+{[?6xy8X0BY\|gv
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 34 29 c6 ed 2a 8d a9 04 02 0e 80 53 a6 7d f1 a2 79 9b 54 8d 69 d3 ff 00 35 2f 22 a6 1a f3 01 da 8d ea 60 15 ea 7d 2d 4e 2f 42 81 3d 81 bf 10 57 47 d2 1c 38 99 c2 b6 dc 03 0f ff 00 a8 4c 1e 5e 0a 32 95 eb 29 7d 21 c3 38 c0 c2 8f c0 cf 35 2a fb 7b 0e c6 97 1c 18 20 72 62 0f 2d 40 75 82 ba ad 41 04 4a f5 0c da f8 48 b6 13 f2 53 f3 5c 7e d0 c1 3b d6 c1 83 db 4e 9f 9a a3 c9 10 7d 92 3b 95 6e 5e c7 eb d8 19 ff 00 b5 3f 81 9e 6a 2f c4 ec f3 ae 19 dd cd 1f 22 b3 8b af 1e 10 f3 63 d8 57 ab 7f a3 4e b4 2a 78 1f f9 24 f1 7e 8b 0d 70 e8 ea 87 41 8b bf 58 ed 53 17 48 53 fa 53 0c a7 ff 00 a5 71 0e 6d 88 78 83 94 c1 dd 6d 3d e1 59 4f e9 46 6d 70 ce 03 33 58 49 78 b3 88 90 34 bd 82 f3 fb 13 15 d1 06 b6 a3 da 29 3d f2 1a e0 08 d0 b1 ce 20 e8 20 c1 b8 90 bb 8f c6 ba ad 4a Data Ascii: 4)S}yTi5/"`}-N/B=WG8L^2)}!85{ rb-@uAJHS\~;N};n^?j/"cWN*x$~pAXSHSSqmxm=YOFmp3XIx4)= J
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 86 fa b9 44 e9 2a bc f5 da 5c d6 d5 80 1e 59 20 40 91 bf bf 44 fe db 9a f6 fd 69 df 45 53 36 34 ea 5b 77 49 ca 78 70 2a 03 67 61 fd 87 7f a8 7c 92 55 f1 d8 86 41 75 52 73 4f ba d7 95 4f a4 ea fb 43 c0 2c de 3e 4f aa 4b 1b 0d d9 b8 7f 61 ff 00 ea 1f 25 31 b2 f0 fe c3 ff 00 d4 3e 4b 10 ed 6a c3 ed 0f c2 14 7d 39 88 f6 9b f8 5a a7 4f 2f ea ef 16 f7 a2 30 e7 ec 3b f1 9f 25 da 9b 1e 8b e4 bb a4 71 3b cd 42 4a c6 a3 b5 31 6f 6d 47 34 b6 29 b7 33 ba a3 4f 0e df 04 c6 37 1b 5e 8b 65 d8 a6 74 85 a1 c2 9f 43 7b 89 00 de dd e9 d3 cd fa 76 e2 d7 76 d3 91 00 1b 2a 2a 3c bc 6b 97 9e f5 4d 4c 5d 1a 14 c0 e8 da f7 ea 73 7c 49 85 0a 7b 7a 1b 4c 34 d2 9b 97 fd 91 a9 ea 8e ed eb d3 27 eb 17 57 0c 1b 75 2f 71 3d a1 5c ca 2c 1b c9 ef 09 2d ab b5 2a d3 70 73 2b b3 a2 78 cc c8 Data Ascii: D\Y @DiES64[wIxpga\|UAuRsOOC,>OKa%1>Kj}9ZO/0;%q;BJ1omG4)3O7^etC{vv*<kML]s\|I{zL4'Wu/q=\,-ps+x
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 13 16 bf 35 4b ab d2 26 4e 1c 1e 33 56 ad cf 1d 54 f6 96 1c 52 2d 8a 99 cb e4 9b 47 0f 35 45 1c 3e 76 83 9a 25 d9 6e 3b 39 f3 fd ca e3 97 ed ee ef e3 cf 71 31 5e 97 f8 76 fe 3a 9e 6b a7 11 4b fc 33 7f d4 a9 e6 a8 c4 d2 e8 e3 ad 32 5c 34 e0 61 51 d2 26 2c e7 e3 fc 38 fa d4 c8 fe c1 a3 98 7d 4f 99 55 8e 8f f9 2d fc 75 3c d2 fd 22 b0 14 ca 77 f1 fe 18 15 18 01 02 88 00 88 20 54 aa 24 70 3d 65 0a cf a6 41 3d 08 9e 25 f5 09 f7 b9 4e 86 19 d5 19 55 e3 4a 4c cc ef 2f 8f 82 bb 1d 82 a7 49 b0 6a bb a5 2c 07 26 4d 09 13 0e 33 65 72 a7 7f 1f e3 5d fb 05 ce b9 a9 32 38 28 52 fa 26 d3 f6 8c f2 68 85 e8 a9 ed 06 8a 6d 6b 29 07 90 3d 67 01 fb f7 ab d9 8f aa 03 03 40 11 77 08 10 7e e8 8d 07 cd 35 c7 1e 62 b7 d1 ba 74 cc 11 55 c7 ee b4 9f 80 85 0a 7b 3d a3 d4 a0 07 02 f1 Data Ascii: 5K&N3VTR-G5E>v%n;9q1^v:kK32\4aQ&,8}OU-u<"w T$p=eA=%NUJL/Ij,&M3er]28(R&hmk)=g@w~5btU{=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50213	142.250.189.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	687	OUT	GET /vi/9aQhbmoFhuY/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 36898 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:33:59 GMT Expires: Wed, 15 May 2024 22:38:59 GMT Cache-Control: public, max-age=300 Age: 205 ETag: "1715723500" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:24 UTC	599	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 0f 0e 10 10 10 10 0f 0f 0f 0e 10 0e 10 10 10 10 10 0d 10 0f 0e 0e 0e 10 0d 0f 0d 10 10 0f 10 0f 10 0d 0f 0d 10 0f 10 0d 0d 15 0d 0e 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 15 12 15 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 02 03 08 01 09 ff c4 00 53 10 00 02 01 02 04 02 07 04 08 03 05 05 06 04 04 07 01 02 11 00 03 04 12 21 31 05 41 06 07 13 22 51 61 71 32 81 91 a1 08 14 15 42 52 b1 d1 f0 Data Ascii: JFIFh"S!1A"Qaq2BR
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 02 8a 28 a0 0a 28 a2 80 28 a2 8a 00 a2 8a 28 02 8a 28 a0 0a 29 e2 cf 47 9c ec c9 f7 b9 9f ba 24 fd df df 95 2d 6e 85 dd 05 46 6b 72 e8 1c 6a fe c9 9e 59 26 74 3a 00 6a fe 5c bb 15 e3 8f 72 35 45 4a af 74 16 f0 66 5c d6 e5 22 60 bf 39 fe e4 f2 35 86 27 a1 37 54 3b 16 b7 16 e2 60 be b2 01 11 28 27 71 e1 4f 2e 5d 8a f9 b0 ee 46 28 a9 4e 27 a0 d7 55 d5 0b 5a 96 88 82 f1 ad c1 6c 7d c9 dc e6 db d9 f3 d2 98 b8 a7 0e 36 ee 3d b2 41 36 dd d0 91 30 4a 31 52 44 80 60 91 a4 80 7c 85 55 c5 ae 65 e3 25 2e 42 3a 2b 67 65 47 62 6a 2c b7 0b 35 d1 5b be ae 7c a8 ec 0f 95 45 a2 78 59 a6 8a dd d8 1f 2a 57 80 e1 0c f3 05 74 f1 27 f4 a9 5b ba 45 5a ad d8 dd 45 3f db e8 ad c3 cd 3e 2d ff 00 2d 7b 73 a2 77 07 de b6 7d 0b 7f cb 5a 79 52 ec 57 8d 11 fa 2a 43 86 e8 85 d6 d8 a6 bb Data Ascii: ((((()G$-nFkrjY&t:j\r5EJtf\"`95'7T;`('qO.]F(N'UZl}6=A60J1RD`\|Ue%.B:+geGbj,5[\|ExYWt'[EZE?>--{sw}ZyRWC
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 5b e8 08 20 11 68 6e 34 03 11 6c fa 78 e9 fc a7 d2 13 d2 6b 67 eb 17 ff 00 f1 af 7f ee 3d 61 a8 e4 8e dd 1a df e4 33 e4 ac 82 d6 c2 b5 7e fd 10 7a 93 4e 29 72 e6 27 14 1b ea 78 67 54 c8 34 fa cd e2 b9 da d9 60 43 2a 5b 53 6d 9c 08 2d da a0 04 77 ab 98 ef 7b 14 87 02 e0 77 b1 0d 92 c5 9b d7 dc 6e 96 6d 5c ba c3 d5 51 58 8f 78 a9 fd af a3 df 19 36 3b 6f a8 dd 8c d1 d9 9c a2 f9 1f 8b b1 9c f9 67 4f c5 ce 20 13 5f 48 ba 3f c1 2c e1 ad ad ac 3d 9b 56 2d 89 8b 76 91 51 07 89 ca a0 02 76 93 b9 3b d3 83 ae 9a 18 3e 3a 50 c9 cc f9 1d c7 fa 3f 7f 0c c1 71 16 2f 61 d8 ec b7 ed 5c b4 c7 d0 5c 55 27 dd 4b ba 27 64 90 e4 4c 02 b2 40 26 37 f4 d7 df fa d7 d5 2e 2f c3 6d 62 11 ac e2 2d 5b ba 8d ba 5c 45 74 61 c8 e5 70 46 9f 23 ea 0d 71 27 5d fd 4e db e1 98 82 d6 19 be ab Data Ascii: [ hn4lxkg=a3~zN)r'xgT4`C*[Sm-w{wnm\QXx6;ogO _H?,=V-vQv;>:P?q/a\\U'K'dL@&7./mb-[\EtapF#q']N
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 1b 38 46 3a e5 92 4a 9d 35 05 0c 95 20 ef a7 98 d2 69 5e 29 43 cb da 26 d3 c7 79 33 65 26 64 12 be c9 20 ea a4 2c 88 df 99 2f 1c 43 87 ac 68 07 c7 5d 01 dc 9e 7a 49 88 1e 42 a3 98 8b 05 48 20 f8 ea 0f 97 96 e3 c7 c4 78 56 ce 34 66 9a 6e c6 af ab d6 20 88 8f d8 3f bd 29 dd af 07 19 5c 64 7e 4f ac 1f 5f 03 be a0 52 3b d8 28 f8 48 f0 61 e5 54 a2 e9 f7 11 dd 5a 4f 71 29 5f 67 eb 35 a4 da aa b4 68 98 8c 8a c0 d6 f7 4a d2 c2 b3 68 d1 1e 4d 6f c2 ef 5a 94 52 fe 0b 81 7b 8d 92 da 33 b1 fb aa 09 31 cc 9e 41 47 36 30 07 32 2a b2 5f 0b 25 18 d0 0d 4a 5b ab ec 5e 59 c8 bf cb da 26 6f 99 c9 ff 00 aa a3 38 cc 3b 23 15 75 2a c3 70 c0 83 f0 3c bc f6 35 cb c2 d1 75 24 f9 1a dd a4 c9 d4 f8 9d 4d 78 0d 63 34 03 50 48 e7 d1 c7 8b f6 7c af 59 ff 00 dc 5a 9f f4 6c c5 e7 27 5e Data Ascii: 8F:J5 i^)C&y3e&d ,/Ch]zIBH xV4fn ?)\d~O_R;(HaTZOq)_g5hJhMoZR{31AG602_%J[^Y&o8;#up<5u$Mxc4PH\|YZl'^
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: ed ce b9 9a 34 1b af 97 81 8e 51 e7 e9 53 18 d1 59 4a c6 3c 0a aa 1f 46 df 93 0d 74 06 20 6f a1 8d 75 98 06 af 1e a1 78 50 37 0e 2e e3 c2 61 db 2d b5 01 7b d7 1d 1a 4b 46 bd c5 65 88 e6 4c ed 54 45 eb a4 b1 ee a8 1a 19 ef 41 d8 68 01 99 db bb 3e b5 7e f5 0f 78 0c 11 47 02 7e b0 e5 b4 10 09 54 22 23 c8 0d 09 27 e5 5c 3e 23 91 c3 0b e1 eb b1 d1 a5 c6 a7 91 26 5d 1f f6 81 48 90 7c bd 29 1e 23 8a 4c 99 35 9d 84 85 95 40 47 3d 06 b4 8f 1c ee 44 e4 ee ed 3b 57 cb 70 5f 53 de 5a 57 ca c6 8e 29 c4 ed 5c 56 b5 71 43 a3 82 ae a7 66 53 b8 3e bb d7 36 74 d3 84 2e 17 14 d6 d7 31 b6 ba a1 62 0b 15 61 e3 22 60 86 12 62 63 5f 1a bb 7a 41 c4 94 38 02 27 5f 8c 4d 53 1d 63 f1 2c d7 16 66 72 b4 72 d3 41 1e 3e 3f 3f 1a f5 bc 26 72 8e 4e 1e 8c f3 b5 d8 78 76 1a b0 57 9d a0 47 Data Ascii: 4QSYJ<Ft ouxP7.a-{KFeLTEAh>~xG~T"#'\>#&]H\|)#L5@G=D;Wp_SZW)\VqCfS>6t.1ba"`bc_zA8'_MSc,frrA>??&rNxvWG
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: cf 47 ae 11 7a ec 08 d1 80 f1 ff 00 e6 1f 9c 1d 81 89 83 b0 f0 02 a2 bc 0f 05 17 ad 19 da e5 b3 b7 83 a9 a9 47 45 c9 37 ae 41 dd 5f 53 a1 33 7d f5 f2 d6 04 7a 8d f7 df 4e f6 67 0e ba 34 f7 ec 38 74 77 0e 0a 61 e6 22 5e 75 3b 76 77 08 91 b7 22 0f 88 0b b5 6c b5 7a 2e d8 d1 75 ed 35 1a 49 2b 6f 7d 37 00 65 8f 40 29 ab 81 2c db b2 74 92 4c c6 e0 76 77 7c a6 0a ac fa 4d 28 c3 b9 ed 30 d1 cf 36 fe 59 27 dd 22 76 da 45 74 a3 82 b7 fe 7a 9a f8 69 6e d7 11 24 99 b2 46 84 4e a0 15 1b 6e d0 06 c3 56 a8 b6 3c 80 44 00 46 75 1b ee 21 63 c0 6f f3 f5 35 2a e1 ad fc 4c 42 98 d6 cb 6a 4e bc a7 de 47 31 11 bf 91 8a 62 58 1d fc 57 f2 5f 79 e5 ad 19 b4 18 61 23 59 f1 6f c9 80 d7 73 e3 4f f8 a6 3d a5 93 a7 f6 33 10 27 49 d3 d0 81 3b 7e 54 c7 80 5d 75 1b 97 df c7 29 f0 27 c6 Data Ascii: GzGE7A_S3}zNg48twa"^u;vw"lz.u5I+o}7e@),tLvw\|M(06Y'"vEtzin$FNnV<DFu!co5*LBjNG1bXW_ya#YosO=3'I;~T]u)'
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 49 e6 60 78 c0 14 9f 0d d2 5b 17 f1 38 97 b4 dd ad b9 0f 99 55 fb b2 34 32 54 08 30 60 a9 3c e6 2b e7 d6 54 df 17 0a af c0 fa 1f 21 a8 f0 f1 3b fc 4a 9e d7 15 c6 34 36 26 58 21 21 6e c0 19 86 c7 55 8c c2 39 95 f7 9a 87 f4 e3 1b 9b 2b 83 bc 8f 33 bf e5 1b f9 d5 8b d6 67 49 0d c0 46 a1 06 c0 c6 83 dd 55 4e 22 db e2 6e 65 b6 18 e5 03 90 10 27 73 a8 59 3c 84 eb a6 f5 e9 e8 22 e5 3e 35 b1 e6 6b f8 21 1a 97 3f e6 e2 3e 1a e5 98 e8 18 f2 11 32 4e 9e 67 e1 35 37 e1 bc 58 d9 bf 65 07 77 33 12 e2 18 6a c3 2a 2e 9a e5 d1 60 28 1a 9e 71 34 81 38 52 d9 81 93 39 24 02 c0 89 0d ea 1b ba 35 11 a0 07 d6 98 b8 d7 15 7b ac a2 06 87 2a e5 58 82 48 fb d3 24 ed cf 94 fa 7b 8b 64 78 7f 7d fa 17 a6 13 1e d9 a1 60 00 49 3d d5 07 31 91 b9 02 5b 42 73 cc c1 d3 c6 b1 7c 61 3b ee 39 Data Ascii: I`x[8U42T0`<+T!;J46&X!!nU9+3gIFUN"ne'sY<">5k!?>2Ng57Xew3j.`(q48R9$5{XH${dx}`I=1[Bs\|a;9
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 82 49 1a 13 4f 2a ac 2d 82 44 36 51 cc 48 f2 24 69 a6 da 69 5c be 6b 5d 39 9d 4f 04 7b 95 ae 23 80 86 71 6d db 21 24 21 3a 99 76 81 68 80 01 d4 39 50 62 25 27 c0 11 24 c3 75 26 7e f6 25 7d d6 cf e6 5e b5 74 7f 02 6e e2 c4 c9 ca c1 98 ce c1 48 61 3e a4 2a 83 e2 6a dd 5b d5 d5 8a 52 6b 76 73 4b 1c 63 c9 10 6c 1f 53 98 6b 48 d7 5b 13 78 dc b4 a6 ea 28 b7 6c 23 bd b0 5d 54 b6 62 c0 33 00 09 03 63 bd 55 9d 1a 20 5e b8 7f ba f0 39 c0 be d1 a7 36 d8 c7 98 db 58 e8 8c 75 e3 91 c7 f7 5a 3e 07 d6 a8 0e 8d d8 22 fd c0 00 ef 2b c4 8d 81 c4 30 f1 3a 9e f2 ce bc a4 d7 a5 a5 e4 cf 1b c4 97 c4 bd 8d 7c 05 f2 db b1 26 64 b1 23 58 81 6a e8 89 24 78 ce c3 e7 47 67 99 f0 f2 74 86 20 6a 3e ed b2 7f 7e 00 6d cb 56 1b 0c c2 ce 1f 2e a5 a7 42 7f bb 76 49 f0 d0 11 c8 7b c9 35 ed Data Ascii: IO-D6QH$ii\k]9O{#qm!$!:vh9Pb%'$u&~%}^tnHa>j[RkvsKclSkH[x(l#]Tb3cU ^96XuZ>"+0:\|&d#Xj$xGgt j>~mV.BvI{5
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: cb 72 f6 4e e3 02 a7 32 3b 4a 85 9d c8 82 07 3c b5 16 ea c3 ab ec 4d ac 3e 2b 13 77 0d 7a da dc b4 b6 2c 35 d4 36 bf b4 26 f6 22 e8 17 32 bc 2d 8c 3b da 0c 04 1f ac 10 0b 6d 5d 7c 49 e2 69 fa a3 38 ed 24 c9 86 07 11 88 6b 5f c1 19 d3 ef 5b 16 bb 43 b7 b5 fd a2 6b e4 7c f5 a4 38 67 c4 25 b6 0a a6 c5 a8 39 87 63 90 6d 11 ad db 9e 7a 96 27 5a 63 c3 63 6f 5b cc 70 f7 4d ac da b0 33 04 ff 00 43 f1 a6 6c 7f 1d c5 5d 05 6e 5d 25 79 c4 c7 c4 98 f7 c5 78 10 c7 b5 1f 46 f3 fa 7c c4 bc 6b 14 2e 30 4e 44 80 48 23 ef 69 be d3 ac eb b5 3c 62 f0 69 82 40 96 c8 7c da 9b de c8 73 cc ea 49 00 6a 02 ea 3b b3 ac 9c d2 be a8 7a b3 ed 87 d6 6f a1 18 74 13 69 0c a9 c4 dc 98 5d 7d ae c4 12 25 87 b4 4c 03 a3 55 e5 d6 df 55 09 8d c1 84 ed 16 c5 cb 50 6c e7 23 b2 cc 00 9b 67 43 70 Data Ascii: rN2;J<M>+wz,56&"2-;m]\|Ii8$k_[Ck\|8g%9cmz'Zcco[pM3Cl]n]%yxF\|k.0NDH#i<bi@\|sIj;zoti]}%LUUPl#gCp
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 2c c9 65 ad 9f 64 dc b6 e0 f8 90 1c 1f 91 13 e8 3c 6a bd 15 e5 ea 27 25 26 8e 88 24 e2 89 cf 57 56 de e9 bb 79 ae 1f f6 71 6d 85 b0 d9 4d d2 e4 8d 20 44 05 04 c7 33 94 1d 0d 5a fd 18 e3 90 90 5b bc b2 09 e6 3c 1b e0 41 f5 9a e7 de 07 c4 7b 27 cd 00 88 82 08 07 4d c4 78 10 40 3e ea b3 3a 22 bd b5 a7 28 58 77 fb ac 74 d9 52 63 c4 7d d3 e6 0d 78 fa b8 39 6f 26 7a 5a 3c 9c 3b 22 c1 c5 70 cc 53 fb 0d 72 f0 3b b1 bb d8 a8 9d 0e 96 c2 92 35 e6 69 ab 89 61 db 0e 3b ec d9 e6 08 37 19 d4 0f f1 31 d4 78 ef 51 6c 5f d7 47 74 3b 65 1a 68 63 e3 ad 21 b9 81 bc c4 76 8e 5a 3c 6b 15 8f 6d da 3a e5 9d bd a8 9d 75 77 7b b4 37 08 8d 5c 03 ac 36 52 34 3b 10 41 ef 0d 75 1c a3 59 b1 7b 6a ad ba b8 c1 5a 0c 1c b8 17 15 88 44 9c a4 c0 9c db cb 0d 79 0d 08 f4 ab 03 b4 ae 9c 4a 91 Data Ascii: ,ed<j'%&$WVyqmM D3Z[<A{'Mx@>:"(XwtRc}x9o&zZ<;"pSr;5ia;71xQl_Gt;ehc!vZ<km:uw{7\6R4;AuY{jZDyJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50216	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	424	OUT	GET /steam/apps/2668080/ss_fe0f704abb30337d15a509b7a8a5a6f0e6bc9c46.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Thu, 14 Dec 2023 07:19:44 GMT ETag: "657aac90-c3d5" Server: nginx Content-Type: image/jpeg Content-Length: 50133 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=582725 Expires: Wed, 22 May 2024 16:29:29 GMT Date: Wed, 15 May 2024 22:37:24 GMT Connection: close
2024-05-15 22:37:24 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 02 04 05 06 07 01 00 08 09 ff c4 00 55 10 00 01 02 04 04 03 04 06 07 02 09 09 07 03 05 00 01 02 03 00 04 05 11 06 12 21 31 13 41 51 07 22 61 71 14 32 81 91 a1 b1 08 15 Data Ascii: JFIFCCQXU!1AQ"aq2
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: f2 ae a6 3a 72 49 7b b3 f5 f8 9d c5 3f 62 4b b4 86 ef 4c 92 5f e1 7d 42 fe 69 ff 00 08 f2 a3 6c a5 51 9c 2d 55 25 94 0d be d0 45 21 f4 0b 36 62 54 29 09 b9 20 18 f3 9a 0e d9 0e a1 2a 52 6c 77 17 81 44 29 4e f1 ac 07 73 e1 02 04 52 c2 82 d2 15 65 40 01 6d 46 5d b5 15 ab 4e 90 00 dc c9 34 90 42 b6 80 10 e4 d2 58 21 16 80 14 12 8c dc 40 35 8a 40 28 99 71 4f 29 25 36 1e 3c a0 0e b8 a3 95 41 bb 05 40 83 66 0b 88 4a 8b 86 c3 a1 8a 80 37 ad 34 d9 c8 bb 40 70 04 a8 4a b5 de 24 93 ca 00 ae e2 67 03 8f 4a b8 9f c0 a4 9f 78 8d c4 a0 28 2e e5 ab 33 d0 92 3d e8 57 e9 18 cd f4 33 78 fe a4 5d a6 5f 1c 26 95 fb 22 3e 5c 8f 6c 7b 8d cc c8 cd 19 46 8e fa 60 00 8b c5 4c 9b 1f 32 a3 09 49 c9 f6 e5 4c c6 f4 d4 29 8c 3c fc 94 ce 20 41 55 c1 61 c6 db 3c 46 d5 b5 88 71 43 4f 18 Data Ascii: :rI{?bKL_}BilQ-U%E!6bT) *RlwD)NsRe@mF]N4BX!@5@(qO)%6<A@fJ74@pJ$gJx(.3=W3x]_&">\l{F`L2IL)< AUa<FqCO
2024-05-15 22:37:24 UTC	3466	IN	Data Raw: 98 f7 8a 1b 62 f6 42 a4 0f 91 8c 43 93 52 e0 f9 f6 a9 49 9a 9f c5 74 c6 24 a5 9d 9a 9a 72 64 25 b6 58 41 5a d6 7a 00 35 e5 1f 7f 0e 48 c3 1c a5 37 4a 8f 89 9b 1c a7 34 a2 ad d9 aa e1 fe cd 7b 67 69 d9 a6 64 28 8f 48 4a 2d f2 b0 a7 d4 c3 57 1b 5f bc 49 d8 08 f9 19 3a df 86 ba 72 9d bf cd 9f 73 07 4f 9d 26 a5 12 f3 47 ec 17 b4 5a 99 9a 35 f9 a9 04 a5 68 48 6b 89 36 16 52 6e 6f ea a6 3e 76 6f 89 74 71 4b d2 bf d0 f5 3e 9b 24 b9 a1 dd 03 e8 91 3b 25 89 e9 95 99 bc 4d 2a d2 a4 a6 51 31 c1 96 95 5a ca b2 9f 57 32 8a 6d 7e b6 8e 7f f9 c8 c5 35 18 37 f9 9c 7f f1 cd cb 53 91 a0 55 fb 02 a7 d4 9e 79 e6 f1 35 6a 4d 6b 5e 70 d3 0a 42 5a 07 31 51 ba 6d ad ef 6d e3 e7 cf e2 b2 9c f5 68 47 b6 1d 24 63 1d 36 65 d8 c7 b2 3c 53 52 9c 9b 97 97 a7 25 fc 8e 10 97 9b 75 29 6d Data Ascii: bBCRIt$rd%XAZz5H7J4{gid(HJ-W_I:rsO&GZ5hHk6Rno>votqK>$;%M*Q1ZW2m~57SUy5jMk^pBZ1QmmhG$c6e<SR%u)m
2024-05-15 22:37:24 UTC	14240	IN	Data Raw: 7b cd e9 a0 d7 51 1f d4 3e 11 d5 be af a7 f9 df cd 1d 9f ec cf 99 99 2c 52 f6 64 dc 8f 6d d4 d6 59 52 d7 34 8c a8 4d ce 50 49 b0 e8 39 c7 db 69 2d cf 33 cb 14 9b 63 d1 f4 8b c3 89 40 22 65 f7 0f 31 e8 ea 00 47 1f 51 78 3c 6f ab 87 64 26 bb f4 8c a3 cc d2 d1 27 4c 9a e1 b8 b5 12 b7 e6 a5 5c 50 6c 5b 92 52 46 62 7c c5 a2 3c 9e 11 ca 5d 4c 6e e0 53 f0 f7 67 38 12 bd 87 e6 6a 93 d5 99 cf 48 99 7d d1 c2 90 a6 80 9b 93 75 0e fa ec 91 de e4 23 51 cf 96 2a 95 7e 88 f1 bc 96 f8 20 ab 38 0f 0d 61 ca 4b c9 c3 0c d4 4b c8 40 cb e9 ce a5 c5 2c 24 1b 25 21 00 0d 74 de e7 c6 37 d3 67 96 19 b6 f8 66 23 25 1e 0a fb d5 7c 4b 55 c3 32 72 92 d2 b3 5f 58 19 46 12 f1 20 a3 84 ea 1d fb 4b f4 cc 90 34 11 af c6 64 70 94 24 ee ff 00 a0 d5 26 89 29 b9 0a dd 47 11 09 d5 99 79 69 34 Data Ascii: {Q>,RdmYR4MPI9i-3c@"e1GQx<od&'L\Pl[RFb\|<]LnSg8jH}u#Q*~ 8aKK@,$%!t7gf#%\|KU2r_XF K4dp$&)Gyi4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50218	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	655	OUT	GET /steam/apps/2668080/ss_4924762e48ea2e5f835de9dc20dc0a958535e81e.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Thu, 14 Dec 2023 07:22:40 GMT ETag: "657aad40-edb6" Server: nginx Content-Type: image/jpeg Content-Length: 60854 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=263403 Expires: Sat, 18 May 2024 23:47:27 GMT Date: Wed, 15 May 2024 22:37:24 GMT Connection: close
2024-05-15 22:37:24 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 01 00 09 ff c4 00 51 10 00 01 03 03 02 03 05 06 03 04 06 08 04 03 08 03 01 02 03 04 00 05 11 06 21 12 31 41 07 13 22 51 61 14 32 71 81 91 a1 42 b1 c1 Data Ascii: JFIFCCQXQ!1A"Qa2qB
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: 6a ab b6 49 2e a7 50 5a 64 a9 89 c4 1f 74 e0 d7 01 1d 46 68 11 d4 1c 65 24 1c 8c 53 20 3a 84 f0 8d b6 14 c0 1a 5b f9 3c 09 3f 1a 00 fa 34 9d c2 57 f2 26 90 82 c8 da 98 0c be b0 d3 44 8e 7c a8 02 3d 0b 52 17 c4 0e f9 a0 44 83 4a ef 11 c5 8c 53 19 ea b6 07 02 80 23 1e 2a 52 d4 55 cf 3f 4a 08 84 42 5a 94 14 0e e9 1c 8d 00 13 8d 8d 00 47 4b 42 b8 f2 af 77 90 a0 47 91 02 bb cf 0f 2e b4 00 72 53 9a 06 48 d8 b4 84 cd 55 3b ba 8b 84 36 8f e9 5e 70 1e 06 f3 cb 97 35 1e 83 f2 1b d5 33 b1 41 16 42 0e 46 a3 67 ec ae c7 6a 42 7b d6 4d c2 46 37 5c 83 91 9f 44 8d 87 df e3 58 65 64 e5 dc d7 18 45 74 1e bd 69 2b 12 a3 11 2e df 14 b7 b0 4a 43 00 92 7a 00 31 9c d6 67 c7 2d 97 c7 9e 85 1a f1 a1 96 d3 cd c7 45 b5 95 c7 29 f0 34 e2 92 14 d8 df 18 1c 87 c3 34 29 b5 c3 26 94 59 Data Ascii: jI.PZdtFhe$S :[<?4W&D\|=RDJS#*RU?JBZGKBwG.rSHU;6^p53ABFgjB{MF7\DXedEti+.JCz1g-E)44)&Y
2024-05-15 22:37:24 UTC	1971	IN	Data Raw: ea db c5 cc 9e fe 7b c5 27 f0 a5 5c 23 ed 4f 22 21 17 c6 b5 12 a2 54 7c c9 c9 a4 21 18 34 0c 5a 02 f0 76 26 80 1d 43 67 d0 50 03 a9 6f 6e 79 a7 81 8e 25 03 cb eb 40 87 00 c7 4c 53 11 f1 14 00 9c 50 02 4e d4 00 93 f0 a0 04 11 40 05 d9 21 4c 9d 76 87 1e de da 9d 9c e3 c9 0c 21 3b 12 bc f8 7e f5 10 37 2e d2 ae 7a 7d 9e d5 74 a3 da 99 a6 d6 c1 8e 7d b1 a4 9e 20 70 76 51 fe 64 25 44 e7 1d 2b 24 6e 4e e9 d3 dd 24 ff 00 1c fe c4 da f8 54 bd 4e 82 5c 14 bb 05 0b 84 51 ec eb 40 53 6a 64 0e 02 92 36 23 1b 63 15 3b a1 be b6 a2 f0 41 70 f9 19 d1 36 39 96 e7 a4 ad f9 06 47 78 e1 53 60 a7 87 84 74 4f fd fd 6b 81 e0 fa 2d 4e 9a 53 95 b2 ca 66 cd 45 95 cf 0a 11 c1 f9 d5 db 07 ed 03 72 d5 bd aa dc 2e f7 d6 d2 cd b4 36 61 37 0a 3a f8 84 54 b6 4e 38 73 ef ab 8b 24 9e bc 5d Data Ascii: {'\#O"!T\|!4Zv&CgPony%@LSPN@!Lv!;~7.z}t} pvQd%D+$nN$TN\Q@Sjd6#c;Ap69GxS`tOk-NSfEr.6a7:TN8s$]
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: c2 1c 46 0e 08 38 34 08 19 51 56 95 e0 6e 0d 03 0e 8e d8 69 1d 33 40 08 76 51 42 f8 53 b8 1c e8 10 fb 0f a5 d1 91 b9 f2 a0 62 4c 40 a5 85 03 8f 31 48 02 38 d2 d3 79 e9 ca 98 80 8b ca 5a f8 f3 bf 4f 4a 40 19 1e 48 77 65 1f 17 e7 4c 07 d0 00 25 58 19 a0 63 32 5f e0 fe 18 e6 79 fc 29 08 19 07 99 f5 a4 04 84 27 d4 bc 85 6f 8e b4 c6 11 d7 d6 98 11 ee 85 07 15 c7 cc f5 a4 23 c4 02 70 06 e4 ed 4c 09 36 c7 03 60 12 49 f3 a4 31 2f 34 1e 49 19 f5 06 98 11 ea 6c b6 a2 14 37 cd 02 0c 88 c7 08 e3 57 33 bd 03 1c f6 84 a5 ce 0e 5e b4 08 44 98 e1 d0 4f 23 e7 40 0c c4 60 85 15 28 72 db 14 08 5c a7 cb 68 e1 07 0a a6 33 c6 64 07 c6 39 28 74 a4 23 cf 67 42 56 5d 23 64 8c 91 f0 a6 84 4a c1 be cd 7b b3 f9 fa 72 dc a5 bb 26 ed 70 4f b5 34 ca 0a 96 b4 21 23 84 00 37 c7 11 3f 41 Data Ascii: F84QVni3@vQBSbL@1H8yZOJ@HweL%Xc2_y)'o#pL6`I1/4Il7W3^DO#@`(r\h3d9(t#gBV]#dJ{r&pO4!#7?A
2024-05-15 22:37:24 UTC	10072	IN	Data Raw: d9 5a 4b 22 63 0c 25 19 c2 e4 71 7a f4 48 34 b7 b2 5e 5a 44 8c bb 34 49 89 c4 8b dc 5f ff 00 8a 3b a4 fd 78 45 0a 6d 77 0d 8b d0 05 5a 4e c0 8f e9 2e eb 5f f6 62 b9 fa a8 53 f3 1f a8 6c 5e 83 4a b1 69 26 f3 c7 35 f5 fc 22 8f d5 ca 8e f7 ea 49 43 d8 64 c6 d1 8c e7 c3 31 df ec c6 68 7e 6a 34 b7 fb 8d 43 d9 0b 6a 6e 98 8e 73 1a dd 73 51 f3 49 65 bf b8 49 a8 e5 31 a8 b0 4b a6 a3 b7 34 d1 ee 62 b9 19 5f cd 2a 72 55 f6 09 14 b2 89 a4 ca e2 b5 4f b4 2c a1 83 ed 0b e8 98 ed 29 c3 f6 cd 2c 8c 57 fe 37 25 39 4d bd f6 d2 7f 14 a7 12 c0 fa 13 9f b5 1c 86 50 84 d9 2e 2f 12 5e 9b 0d 81 e4 d2 56 fa be bb 0f bd 1b 58 b2 2d 3a 7a 32 77 91 3a 6c 83 e4 95 21 84 fd 81 3f 7a 96 d0 c9 f2 6d d6 78 a7 88 41 8e a5 0f c4 ff 00 13 c7 fe a3 8f b5 4b 6a 10 e1 d4 6c b0 9e e9 a7 42 47 Data Ascii: ZK"c%qzH4^ZD4I_;xEmwZN._bSl^Ji&5"ICd1h~j4CjnssQIeI1K4b_*rUO,),W7%9MP./^VX-:z2w:l!?zmxAKjlBG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50221	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	424	OUT	GET /steam/apps/2668080/ss_a2e873c749f7303529b471ba9e9ed793abd409f6.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 76195 Last-Modified: Thu, 14 Dec 2023 07:16:26 GMT ETag: "657aabca-129a3" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=310525 Expires: Sun, 19 May 2024 12:52:49 GMT Date: Wed, 15 May 2024 22:37:24 GMT Connection: close
2024-05-15 22:37:24 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 04 03 05 06 07 01 02 08 00 09 ff c4 00 60 10 00 01 03 03 03 02 03 05 04 06 04 08 09 09 02 0f 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 14 22 61 71 81 08 32 91 a1 15 23 Data Ascii: JFIFCCQX`!1AQ"aq2#
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: c2 8c a5 19 a4 31 54 a7 15 24 21 66 d3 c5 16 21 54 b5 9a 04 28 96 a8 01 66 d2 53 da 98 05 34 e2 85 17 41 41 6d 2d c0 8d f8 3b 33 b7 76 38 cf a5 3b 15 07 42 79 4e b8 94 78 89 6f 27 1b 96 70 07 ce 8b 22 10 cc f2 09 04 e6 a4 24 28 a9 09 5e 7e 34 12 34 05 3c f1 9a 00 4d 4c 83 9e 29 01 b3 68 09 3e 79 a0 03 23 3f 83 de 81 04 38 a0 b4 9c 1a 60 29 09 cd 9e e9 a4 03 9a 10 1d 1c 1c 50 2a 35 72 12 88 3c e6 9a 0a 00 79 c7 61 b7 21 08 da 12 f2 3c 35 e5 20 e4 67 3c 67 b7 6e e2 a2 08 67 28 4e 55 bd 25 43 07 80 71 cf 95 2b 25 42 08 65 5b c1 56 55 d8 72 68 01 c5 b8 0b f0 54 e8 db b5 24 0c 13 c9 cf a0 a7 62 30 13 85 27 79 28 41 20 29 40 64 81 eb 8f 3a 2c 60 e1 af 11 5e b4 93 dc 5d 81 fd 90 9f 2a 43 17 8d 0b 72 80 23 03 d6 84 c0 3b f4 3e 50 36 f7 cf 95 4c 46 89 b2 c9 8c fd Data Ascii: 1T$!f!T(fS4AAm-;3v8;ByNxo'p"$(^~44<ML)h>y#?8`)P5r<ya!<5 g<gng(NU%Cq+%Be[VUrhT$b0'y(A )@d:,`^]Cr#;>P6LF
2024-05-15 22:37:24 UTC	3049	IN	Data Raw: 21 6f 60 2d 67 d7 6b 64 fe 35 cc cb 1f eb 3a 51 de d3 49 ac 3d 72 e4 92 e9 9d 79 ac f4 62 d9 b0 de 2c f6 3f d1 30 23 a5 96 a7 5b e4 29 29 09 48 da 84 f8 67 9d d8 03 83 db d7 d6 32 c6 e3 c9 28 4d 4c ae fa a3 ae 64 ea 59 ad 25 6b ca 51 92 4f c4 9e c3 d0 71 53 c6 88 cd 90 63 21 49 1f 7b 1f 33 57 14 50 e3 a6 74 cd df 5b 5e e3 5a ac d1 97 2e 73 e7 dd 42 4e 12 91 e6 a5 2b b2 52 3c c9 a8 b6 92 1a 4c ee 6e 94 74 e5 1d 32 d2 28 b5 99 86 e1 39 d5 07 65 cb e4 25 6a f2 4a 01 ec 84 f9 79 93 92 7b e0 66 94 ba 99 6a d9 51 2b 52 7b d2 01 87 59 69 38 1a cf 4a dd ec 37 06 50 ec 3b 94 67 23 38 0a 46 46 e0 76 a8 7c 52 ac 28 7c 40 a7 c9 24 e8 e1 dd 23 d2 6d 47 d0 9e af c3 b0 de 8b 32 fd b6 29 79 99 51 73 e0 c8 49 6d 5b b6 95 00 72 95 a3 04 11 e9 e4 45 4b 0e d3 41 9b 7c 6c ba Data Ascii: !o`-gkd5:QI=ryb,?0#[))Hg2(MLdY%kQOqSc!I{3WPt[^Z.sBN+R<Lnt2(9e%jJy{fjQ+R{Yi8J7P;g#8FFv\|R(\|@$#mG2)yQsIm[rEKA\|l
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: 00 96 d1 80 70 01 38 c8 2f df f6 63 c1 35 1e 8f 6a 5c 90 99 7d 65 be c1 6e ee 23 bc 81 0a 79 da e4 67 10 16 96 d1 93 f7 3b 60 e0 e3 38 fc ea 52 8a 6a d8 a1 39 26 3c 69 b4 de 6e 8e b9 63 d2 33 d9 b7 df 1f 69 92 99 4b 21 42 33 04 29 d5 28 f7 c9 42 88 da 13 93 ef 63 8e e3 16 28 fb 4d 1b 72 c9 28 db 3a 3a c5 64 16 1b 34 2b 7a 5c 5b c9 8c ca 5b 2f 38 72 b7 08 1e f2 d4 7c d4 a3 92 4f a9 ad 69 52 a3 99 2f 69 db 0e 6c 6f 24 00 7e a2 81 74 8a 08 a4 9a 28 28 50 46 ca 4a 7c aa 49 6c c2 8f 7b 1a 40 1d f3 51 25 54 56 fd 68 d4 e8 b0 46 b4 c2 52 b6 7b 53 aa 70 ab 19 c6 cc 6d e3 e6 ac ff 00 a3 5c 3f 15 9b 58 94 17 7f c8 f6 ff 00 64 f4 9e 7e ae 59 3f ba bf 79 58 c9 d4 10 ed 56 c4 98 6a 49 f6 b5 29 c0 b2 72 54 84 93 95 73 ea a0 47 e3 5e 3d ad da 5d 8f ac f4 6f 4f b1 56 eb Data Ascii: p8/c5j\}en#yg;`8Rj9&<inc3iK!B3)(Bc(Mr(::d4+z\[[/8r\|OiR/ilo$~t((PFJ\|Il{@Q%TVhFR{Spm\?Xd~Y?yXVjI)rTsG^=]oOV
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: 69 5b 7a 52 fa d2 50 ac 13 ec 8e 00 7d 70 40 ed 50 6a 4d 96 45 c5 2e 47 db 7f 47 f5 8a 64 67 f4 1d c8 93 c8 4f b2 ba 76 9f 2f ba 9f e3 56 a5 45 56 9a 24 57 0e 86 f5 3b 53 a1 01 76 59 6f bc af 74 bd 31 41 a0 12 3b 02 55 8c 0a 25 6d 51 18 46 10 7b 16 cf 4e ba 05 aa b4 6d b4 36 cb de cb 32 40 47 b6 2d 97 da 21 69 19 3e 18 56 77 6d 07 1e 99 24 93 d8 54 1c 5b 2d 53 8a dd 8e 57 ce 89 4c d4 8c be c5 e1 31 d4 0a 49 69 5e d9 92 df 7f 74 f9 fd 68 e8 75 41 e6 25 ba 64 26 4f d9 51 a6 8b 6f 33 35 b8 ee 76 71 a6 96 cb 83 e6 16 e3 6a 3f 4f ce 85 85 13 fd 23 e0 5d 5d 2c d0 36 fb 0a e1 44 69 b6 64 98 ac 84 2a 4b ad 37 e2 b8 72 4e 54 52 90 0f 7c 56 ab 8c 63 48 c7 92 6e 56 58 73 27 c2 d3 53 d0 a4 46 71 6a 29 50 29 8e 30 39 c7 97 6f 2a 94 32 6d 4c aa 3b d8 44 5d 6c c3 aa e2 Data Ascii: i[zRP}p@PjME.GGdgOv/VEV$W;SvYot1A;U%mQF{Nm62@G-!i>Vwm$T[-SWL1Ii^thuA%d&OQo35vqj?O#]],6DidK7rNTR\|VcHnVXs'SFqj)P)09o2mL;D]l
2024-05-15 22:37:24 UTC	7952	IN	Data Raw: 99 55 70 bd 3e 2f e2 ff 00 0e 08 cb d1 d2 a5 ed 0a 71 27 f6 54 16 70 6b 9b 2b 67 a8 c4 94 51 e6 93 25 93 84 ca 5e 3f be 01 14 a2 ab 72 e9 3b 26 fd 3a ea 13 ba 32 e4 e8 97 1d bb 85 ba 4e 10 fa 53 94 ab 00 f0 52 7c 8f fb fc 2b d0 78 7e b5 69 a5 53 57 16 79 ff 00 11 d0 cb 53 0b c6 ea 4b 82 f6 b2 4d b0 6a 90 97 2d 37 f8 8d 05 0c f8 53 55 e1 38 93 e8 7c 8f cf f2 af 69 86 58 35 0a f0 e4 5f 27 b3 3c 46 57 9f 4d b6 a3 13 f9 ad d0 fc fd 91 f7 50 ca 66 6a 0b 6a 98 8e df 84 d2 dc b8 05 a5 b4 64 9d a9 4f ec 8c 92 70 38 e4 d6 85 a7 71 b7 d5 15 f7 a3 33 d6 c1 d2 51 93 fb 98 e5 60 d6 fd 36 d0 0c 48 b9 5e ef 46 e9 31 83 88 f1 63 36 55 e2 ab 04 9d a0 7c b1 b9 47 cf 8a cb 97 55 a7 d3 2d a7 d5 2f c0 97 93 ad d5 2a 8e 37 14 fe a2 1a 4b ed 6d 67 d5 7a c9 31 b5 3c 24 59 b4 d3 Data Ascii: Up>/q'Tpk+gQ%^?r;&:2NSR\|+x~iSWySKMj-7SU8\|iX5_'<FWMPfjjdOp8q3Q`6H^F1c6U\|GU-/*7Kmgz1<$Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50220	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	401	OUT	GET /steam/apps/2668080/capsule_616x353.jpg?t=1714968679 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 79227 Last-Modified: Wed, 06 Dec 2023 03:39:52 GMT ETag: "656fed08-1357b" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305081 Expires: Sun, 19 May 2024 11:22:05 GMT Date: Wed, 15 May 2024 22:37:24 GMT Connection: close
2024-05-15 22:37:24 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 00 01 07 08 09 ff c4 00 4f 10 00 02 01 02 04 04 04 04 02 08 04 03 06 04 03 09 01 02 03 04 11 00 05 12 21 06 13 31 41 07 22 51 61 14 32 71 81 08 91 15 23 33 Data Ascii: JFIFCCahO!1A"Qa2q#3
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: ea a3 b0 fa e1 d8 0c 54 b4 70 4b 21 59 5c 4a 5b f5 f5 4d b9 53 fe 1f 7e d8 91 a3 25 ab a8 c9 34 53 4b 4b 24 c8 80 10 04 66 29 c2 9d c5 d1 b6 3f 63 f6 c2 4d a5 e6 8a d2 9f a0 f6 7b 9e e5 f9 b6 55 91 ac 35 48 6a 29 e9 de 09 a9 e4 04 48 8c 24 66 00 ad af ba 9b 83 d3 11 a9 5b 1e 89 02 32 fa a8 73 14 85 a1 2a f4 f2 3b 0d 40 f9 76 27 7c 5c 24 9a b2 25 1a 74 4e a1 92 82 a2 64 54 30 4e e4 d8 44 b2 58 b7 d3 1a 5c 64 a9 3a 64 ef 17 6e 36 11 8b 2f 81 50 33 c3 a4 5e c6 d7 b8 f7 b7 a6 29 f9 44 85 c6 ff 00 5f 00 94 b9 2d 34 34 bc f6 8d 81 60 ad 61 70 45 f7 b0 ed 6d c6 e7 11 1b 7d f8 2a 49 25 ba dc c8 e0 a6 56 d2 e6 54 60 37 ef 6c 56 fd 88 d8 2f 43 56 b4 b4 95 50 a2 96 52 37 95 fe 60 0f 5b 5f fa e3 19 e3 73 69 df 1d bb 1d 10 c9 a1 3d b9 ef dc 79 51 80 16 b0 05 75 00 c3 Data Ascii: TpK!Y\J[MS~%4SKK$f)?cM{U5Hj)H$f[2s;@v'\|\$%tNdT0NDX\d:dn6/P3^)D_-44`apEm}I%VT`7lV/CVPR7`[_si=yQu
2024-05-15 22:37:24 UTC	2009	IN	Data Raw: 0a e8 02 fd 1b 51 1b 83 d8 8e be d8 ca 59 5f 63 48 c1 77 08 7c 06 63 ae 2a 1a 4c be 0c be 95 8d 8d 66 bb 95 16 f9 ae 2c 75 5f a0 e9 8c b5 2e 5b b3 45 17 c2 08 e4 19 8e 6b 58 d5 52 66 74 a9 44 bc cd 14 da 9b 54 86 35 f2 92 6d d4 9b 5e fe f8 ce 5a 57 05 c6 fb 93 9d 55 d9 40 96 57 55 2c 4a 85 d3 bf b9 bf 9b 6f 6f cb 09 14 33 9a d5 d4 d1 e5 32 4f 0f 9e 50 3f 56 b2 02 75 1e b6 b7 6e 87 7b 80 3b e2 a3 4d d0 bb 1c c3 3a 08 2a 99 92 49 26 59 ad 3c 72 c8 da b5 ab 0d 43 eb dc 7f e9 c7 54 78 39 d8 cd 31 50 cd 25 b4 b9 00 6a b9 dd 47 6c 58 8e 8f c1 d9 ca c1 93 44 91 40 8f 98 8a 85 a4 e6 15 36 30 1b b5 9c 8e 80 0d 60 13 df 1c 99 23 ed 7a 1d 18 de c1 a9 7f f9 6d 44 f1 2d d8 2d d0 16 16 fa 7f 2b 62 a2 f5 c6 c8 6b 4b 74 53 38 92 2b 66 82 45 46 f3 a0 2c dd 98 f4 c7 4c 1e Data Ascii: QY_cHw\|cLf,u_.[EkXRftDT5m^ZWU@WU,Joo32OP?Vun{;M:I&Y<rCTx91P%jGlXD@60`#zmD--+bkKtS8+fEF,L
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: 23 c3 25 55 12 48 69 c9 31 14 65 28 09 04 5c 2d 86 f6 36 c7 86 a5 e4 7a ee 1e 64 28 b2 45 82 79 dd a6 9a 29 24 d2 6f 32 b4 6a b6 1f bb 6d 87 5d f0 f5 13 a4 8b 91 70 3d 6d 14 55 b3 d7 71 01 cc 8d 63 6b 11 81 cb d3 60 40 b1 df 6b 75 16 df 0d cd 3d 92 a0 50 6b 76 c8 8f 93 d5 65 72 c3 3c 93 a4 d9 8c a0 43 25 43 29 44 44 ef a0 5e c2 f6 1b 7d f1 49 a7 b7 62 6a 8a 17 14 71 36 6b 51 59 99 64 c8 ab 96 2e eb 1c ca da e5 94 a8 d4 55 6d fc 4b 7b 5b f3 eb 8d a3 15 5a 8c 9b 7c 17 0e 0e cd e4 ad c8 22 7a 94 8a a5 e0 41 15 41 73 71 22 ed 61 a7 b1 dc 1b 63 29 2a 96 c6 91 7b 6e 40 e2 4c 9e 9a 97 87 e7 a8 10 45 20 40 74 a1 63 18 8c 33 5c a2 91 e8 77 1f 53 8b 84 9b 74 4c 92 ab 28 b4 c4 c5 a5 19 95 c1 5b f9 0d c0 f6 fa e3 a8 c4 b9 70 26 69 35 06 65 34 50 44 25 92 aa 06 85 11 Data Ascii: #%UHi1e(\-6zd(Ey)$o2jm]p=mUqck`@ku=Pkver<C%C)DD^}Ibjq6kQYd.UmK{[Z\|"zAAsq"ac)*{n@LE @tc3\wStL([p&i5e4PD%
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: fa 64 2a da bd 6c 0e 2b 72 4e cb e1 3c b5 b5 fc 1a ff 00 15 53 25 43 49 3c 9c 96 94 ea 64 40 46 d7 3b 9b 9b 9d f1 cf 92 4a 2e d9 d9 82 0e 68 7f 38 57 a2 cc c3 42 dc b1 57 19 56 3b 6c 4f 51 f9 8f e7 8e 5d 76 bd c7 6f 87 a5 d7 98 4a 5e 19 ab a6 a1 5d 22 ee ca a0 03 b8 b5 ef fe 58 e7 59 53 96 e7 43 c5 ec d2 25 49 48 19 20 68 60 31 c0 80 6a 7b ea 60 2d d0 0f 6c 74 bc ca 5c 0a 38 5c 17 a8 d3 34 a5 64 2b 16 a9 74 f5 d5 64 51 ea 7d c1 fb 63 68 35 c9 c9 97 6d 90 34 d3 c8 8e 0b b6 ae ec 71 b1 cc 4f 8a 6d 07 52 1f d6 5b a9 dc 0f f3 38 75 7c 8a ea e8 91 45 5b 49 99 d6 d4 50 ff 00 cd ae 68 21 33 c3 14 76 bd 50 1f b4 11 b1 ff 00 c4 5e b6 3f e7 8a b7 1f 71 8b 69 ec b9 fc cb 4e 5f c2 99 65 7d 0d 2d 2b 1c ca ad 05 b5 49 52 fa 98 11 b9 0e 41 b8 63 fc b7 18 8d 72 88 d4 13 Data Ascii: d*l+rN<S%CI<d@F;J.h8WBWV;lOQ]voJ^]"XYSC%IH h`1j{`-lt\8\4d+tdQ}ch5m4qOmR[8u\|E[IPh!3vP^?qiN_e}-+IRAcr
2024-05-15 22:37:24 UTC	7952	IN	Data Raw: 52 49 8d a0 78 c8 d9 6d 7b 8f ae 0e 00 6e 15 81 0c 88 88 1e ea 55 e2 bd ed 7f ea 0e 1d b1 23 85 d0 c4 0c ca 1d 95 77 dd 9f a6 37 b3 9c 36 25 bf 4e 9e dd 31 b1 99 be 65 87 be 00 1c a7 a9 e4 ca b2 6c 4a f6 61 70 70 86 b6 35 cd d4 4f 61 e8 30 05 19 25 5a d3 c6 5d ba 0e 80 77 c2 04 33 4b 21 79 1a 79 4d dd be 50 3a 01 84 bc c7 e8 38 cc 19 c9 56 b9 3d af d3 14 21 5f 16 68 01 a8 2e bb 02 bb 8b ff 00 2c 27 43 40 b8 a3 ab cd a7 96 45 8d e4 8d 07 31 d5 18 5d 56 fb da fd 58 ef 61 dc e3 36 cb 48 81 c4 4f 4f 1e 75 7c be 35 8a 9c c4 80 2f 5d 7b 7c c7 dc ff 00 6c 38 83 21 4f 24 b5 31 1d 46 da 45 b5 6a bd b1 44 2d 87 69 ab 5e 0a 7d 32 12 6d d0 8e c3 00 04 32 1e 22 a9 ca 33 28 67 40 b2 0b 10 ca 05 8b 29 ff 00 63 09 ab 54 38 ec c7 33 7c d2 4a da 89 6a 1e 40 f3 3b 0f f6 3d Data Ascii: RIxm{nU#w76%N1elJapp5Oa0%Z]w3K!yyMP:8V=!_h.,'C@E1]VXa6HOOu\|5/]{\|l8!O$1FEjD-i^}2m2"3(g@)cT83\|Jj@;=
2024-05-15 22:37:24 UTC	4072	IN	Data Raw: 3d 59 89 37 27 14 49 1e 92 52 68 6a 45 fa 83 87 d8 55 b8 e7 0c d4 a8 ce e8 2c d6 3a 8a ed f4 38 cd f0 69 15 b8 4e b4 e5 a2 ae a1 18 14 60 e4 12 2e 37 be 29 55 10 ee c1 95 72 45 03 05 a6 95 8c 4c 37 01 bf ae 1b 04 46 59 09 07 a6 24 61 7c ab 32 14 85 c9 51 22 ba e9 2a 4e 00 44 98 eb 69 83 ea 45 9e 11 fc 2a c0 af f3 c3 dc 7b 04 a8 f3 2a 7a 80 69 a3 59 3c e8 c9 a6 d7 26 e0 ee 4e 21 a6 52 7d 80 f3 73 2b e8 e8 21 df 96 08 33 3f fd 3b 5b f9 62 fb 10 b9 64 fc d3 32 68 68 e6 70 7c e4 69 50 3d 4e d8 43 00 66 73 f2 f4 53 8b e8 a7 41 10 07 f8 8e ec 7f 3c 20 17 91 53 c1 54 2a ea 2a 46 a8 21 4d 88 36 37 ff 00 63 f9 e0 02 1d 7c d0 a5 51 48 dc 4c 14 0b 3a 8d 20 13 d4 5b db 00 c6 69 7c 92 c8 e3 a2 8b 06 38 04 22 a2 a1 94 b1 ea 7a 0c 20 46 a1 07 52 ad ef 7d ce 1a 01 74 f2 Data Ascii: =Y7'IRhjEU,:8iN`.7)UrEL7FY$a\|2Q"NDiE{ziY<&N!R}s+!3?;[bd2hhp\|iP=NCfsSA< ST*F!M67c\|QHL: [i\|8"z FR}t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50222	172.217.165.206	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	456	OUT	GET /vi/FE07nT30TBg/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 16831 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:21:03 GMT Expires: Thu, 16 May 2024 00:21:03 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 981 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:24 UTC	607	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 19 1a 1d 1d 1b 1f 20 25 20 1f 20 1f 1f 25 1f 1f 1f 25 2e 27 31 30 2d 27 2d 2b 35 3d 50 42 35 38 4b 39 2d 2d 44 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1a 1b 2f 57 36 37 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 5d 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 ff c4 00 45 10 00 01 03 02 03 05 05 05 06 03 06 06 02 03 00 00 01 00 02 11 03 21 04 12 31 05 13 41 51 61 06 22 71 81 91 14 32 52 a1 b1 23 42 92 c1 d1 f0 33 62 Data Ascii: JFIF % %%.'10-'-+5=PB58K9--DaEKSV[\[2AemdXlPY[W//W67=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW]WWWh"E!1AQa"q2R#B3b
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: d0 08 1a c0 23 50 0c 1b c7 04 14 2b 66 e7 6e 24 44 f8 2b f5 c1 23 2e 70 40 39 80 eb a7 2e aa b1 6f f3 37 d4 fe ff 00 dc 73 4e 29 cb 6c d9 6d 6d 8c c0 3e ea b6 2f 06 5e 03 b7 6e 78 6e b9 5c d6 89 3c 0c 9b e9 c3 92 b0 e5 3b 1c 5a 08 65 56 c9 90 62 24 d8 cc 4e 96 cd 75 d7 f2 7d d3 3f ac 71 cf db 59 b4 ab b8 80 d1 9b 21 2d 96 b8 3c 9b 41 e2 79 f1 56 ea 38 13 28 de c2 45 ea 13 26 e3 f3 50 15 8f c4 a7 8c 49 cb 6d 91 e0 da 4d 66 00 24 93 61 ce c5 69 1f 67 ce 64 8a ee e0 03 8b a0 10 08 70 6e 5c b7 04 5c db f9 96 73 29 91 0e 6b da 08 bd f8 59 4a 6a 54 cc e3 bc 66 62 44 90 07 7b 87 2e 11 c9 70 fc ba 7c 96 f2 ac ba f0 72 78 57 24 15 00 75 67 66 3c be 4d 01 5b c1 31 b3 72 05 ed 2a 93 a8 92 4b 8b 9a 4d c9 83 cb c9 33 2a 19 0b d9 4c 9a 66 f4 e3 69 fb 36 7b 4f 8c 73 70 Data Ascii: #P+fn$D+#.p@9.o7sN)lmm>/^nxn\<;ZeVb$Nu}?qY!-<AyV8(E&PImMf$aigdpn\\s)kYJjTfbD{.p\|rxW$ugf<M[1rKM3Lfi6{Osp
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 34 b5 8d 7b 45 46 34 77 83 67 bc 08 e7 cd 63 e3 59 43 25 4d d3 5a 61 84 ce 51 6b 6b a2 0d 8f b5 4d 37 34 38 f4 04 d8 16 fc 2e 3f 43 c3 c1 79 23 39 6b f2 71 c7 a8 fd 3a 4e d2 7c 6c d9 d8 d5 69 e7 c4 39 94 da ca 56 22 a0 05 8d 22 f6 20 f1 1c 48 5c ce d8 a7 4d b5 dd ba 6e 56 1b 86 f2 f2 e1 3a c7 55 b3 b6 76 d4 f7 47 93 64 3b 2f f3 3b 2c 82 79 34 4f 33 c1 73 9f c4 79 0c 39 cd ef 7e f1 e8 b5 c3 7a f1 db ca fe 89 89 b4 7a 56 c5 0e e8 f1 55 40 57 31 82 18 3f ab f2 2a 90 72 cf e5 4c 4d f6 1a e3 8c a8 c0 49 20 53 af 2b a0 53 3c 81 08 a5 33 a0 ea 8a a3 88 04 52 25 c4 49 22 c3 82 a5 99 6d 65 6f 20 9b 2b 79 05 95 63 83 71 e2 16 a9 46 1a de 41 35 96 a1 24 09 d1 59 25 a4 08 49 ee 81 68 98 b4 d9 14 a1 74 1d 52 44 35 58 40 68 90 e3 ac f4 e4 a0 14 8b 9f a4 0f aa bc 00 e4 Data Ascii: 4{EF4wgcYC%MZaQkkM748.?Cy#9kq:N\|li9V"" H\MnV:UvGd;/;,y4O3sy9~zzVU@W1?*rLMI S+S<3R%I"meo +ycqFA5$Y%IhtRD5X@h
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: e3 f8 bd 76 b4 b4 76 4e 02 95 61 50 d5 79 6e 5c b1 0e 6b 66 66 75 f0 54 21 58 c3 d6 6b 58 f6 98 04 c1 07 29 24 40 3a 46 87 45 df f2 26 d1 4f af 6f 2d 22 26 7d af 37 66 61 dd 49 ef 0f a8 0b 41 20 39 cd b9 89 16 ca 2c b1 40 5b ad 18 66 b2 af db 0a 8e 2c 21 80 b5 d6 30 40 e9 c9 16 cb d8 2d aa d6 bd ef 3a 99 03 e4 bc fc 3c d3 5a cc dd d2 d4 89 9f ab 9c c4 bd cd a6 e7 34 4b 80 b0 d6 4a a1 ed 38 b8 9d cf f9 4c eb 1a 4c ae f7 68 f6 72 83 d8 e8 6b ba b5 ae 89 bf c9 73 78 ed 91 b4 03 4d 1a 34 1e 5b 2d 22 a8 ab 0f 3d c1 99 bd e7 ce 5c d3 aa e5 cb f9 53 69 fa 4e 3a f1 f1 c4 47 d9 5b 0c f2 ea 6d 73 84 12 2e 39 15 22 b7 43 61 d7 a5 46 8b 5c de f1 68 04 48 25 a7 91 85 15 7c 3b a9 bb 2b c4 15 ee e3 e5 ac d6 3d bc d6 ae 4a 6c 26 cf 35 98 5c d7 7d ec b6 69 74 18 9b fa 85 Data Ascii: vvNaPyn\kffuT!XkX)$@:FE&Oo-"&}7faIA 9,@[f,!0@-:<Z4KJ8LLhrksxM4[-"=\SiN:G[ms.9"CaF\hH%\|;+=Jl&5\}it
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: e6 9e e8 f0 5e 2e 7c f3 f4 f4 f1 ff 00 91 86 04 8b 01 42 0a 2c cb 8b 68 9d 49 55 da 0c 8a 63 c5 5e 95 06 3a 99 7b 00 1c d5 d1 56 80 25 a0 4c 37 e6 a4 7d 10 38 6a 9d 87 28 bf 0e 48 71 18 86 db 8a e3 3b ad c2 b5 46 8c c3 a1 0b 57 22 c9 71 cc 41 1c c4 ad 7c cb ad 59 b0 0b 51 0a 69 f3 23 6b a5 54 06 e9 47 51 97 0d 9d 75 f0 56 14 35 47 7c 1e 85 66 dd 00 c4 55 2c ca 00 d4 c2 77 d5 22 a3 5a 34 21 08 aa 3e f1 17 d0 f0 46 fa 8d 36 06 5c 74 85 c9 4d 54 43 81 e0 6c 52 4a a0 27 28 26 4c ca 4b af 1f 49 2a 74 6a 00 1c 09 22 61 11 ac d6 96 ee c1 88 82 a2 dd 94 b7 65 64 1b de 1d 72 63 ea a2 26 49 28 b2 d8 49 d7 4e a9 3d 80 10 8a 04 e1 c7 9a 3d d1 bc 19 ba 17 53 20 49 57 50 fb d7 73 44 31 0e e8 a3 84 6f a7 06 e6 c3 5b 26 a2 41 55 ae 6c 3c da 6e 07 10 99 f5 af dc 24 36 21 Data Ascii: ^.\|B,hIUc^:{V%L7}8j(Hq;FW"qA\|YQi#kTGQuV5G\|fU,w"Z4!>F6\tMTClRJ'(&LKI*tj"aedrc&I(IN==S IWPsD1o[&AUl<n$6!
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 61 7e 5a ae 24 01 ee 8c ad 1f 52 ba 71 cc 44 fb 49 75 7e d8 d3 fe 33 7f 1b 54 ec aa f6 88 0f 77 99 5e 71 84 1f 6d 4f fa db f5 5e 8a 75 5e be 29 8b 7e 9c ef 18 4e a8 e3 a9 51 6f 00 31 22 79 4a 9e 9b a0 e9 3d 11 67 6e 47 eb 9b 36 9a 01 c8 f5 bc 02 9c dc b3 c7 99 1a bc 74 8b 6e 9a 8d 42 56 8e 16 a9 85 51 a6 8f f3 0f 25 35 3a 6d e1 50 47 8a d5 bd b1 0b 15 69 31 d1 2e 63 5c 6c d9 20 12 79 0e 6a 0a bd d6 80 e1 de 06 c7 c1 64 63 f0 4e ab 89 6b 5a ee f0 01 94 c3 81 0d 2e 21 ce 24 1f fb 75 e7 e0 b4 30 8f df d3 0e cd 0e 81 99 87 de 69 e2 0f 98 2b 95 6d 1b 8d 63 53 05 b4 43 ce 57 08 2a d5 6a cd 02 e4 2c 13 86 7b 4c 83 e6 16 66 d5 65 47 64 9c ce 68 92 66 48 06 df a1 4b 71 c7 70 d5 7d fa 74 d5 aa b5 cd 70 90 6c b2 a9 32 eb 07 0a 21 ec 39 81 39 c0 8d 08 80 2f 1d 56 d3 Data Ascii: a~Z$RqDIu~3Tw^qmO^u^)~NQo1"yJ=gnG6tnBVQ%5:mPGi1.c\l yjdcNkZ.!$u0i+mcSCW*j,{LfeGdhfHKqp}tpl2!99/V
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 8d 13 45 f2 f1 cd 09 a8 39 aa 41 ae 22 42 20 ac 0b 3b f4 27 10 78 28 48 84 32 a8 94 d6 77 34 19 90 e6 49 ce 81 29 24 0d b5 48 d0 a9 5b 8a 3c 42 ae da a4 fd d0 93 eb b8 58 b4 2c f9 2f 8c ae 6f da 51 07 85 4d b5 09 22 40 84 7b c1 cd 54 41 58 0c cd cd a2 b1 85 a2 c0 e9 6b a4 a6 38 76 bc 12 e2 46 54 1d d6 34 1b de e2 75 0b 9c 06 7e 1c 49 2f 76 55 15 30 dd e7 74 c8 56 1a e9 ca e6 80 e7 0b 42 55 cf da 30 7d e0 0c 90 20 20 74 a1 24 eb 90 18 4a 13 a5 08 27 c1 6a 55 6c 6b 81 ad 94 da 2d 2a 7a 6e c8 d2 ef 28 e6 99 b8 70 f2 f2 75 20 1b ea 17 58 13 d3 c2 b5 a4 11 73 cc a8 71 be f8 f0 53 60 dc 4b 2f a8 24 28 71 be f7 92 92 2b a4 92 4b 21 a1 28 4e 91 40 4e c3 67 70 24 f0 0b a9 d8 15 5c cc 26 4a 59 80 35 c0 71 6c 48 04 36 4d c1 5c d9 74 31 93 72 6d 6d 56 9e c6 ae 29 67 Data Ascii: E9A"B ;'x(H2w4I)$H[<BX,/oQM"@{TAXk8vFT4u~I/vU0tVBU0} t$J'jUlk-*zn(pu XsqS`K/$(q+K!(N@Ngp$\&JY5qlH6M\t1rmmV)g
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: e3 f9 27 3c 7a 29 81 9a f2 22 c2 d7 08 c5 77 02 4c 0b a6 b4 84 c0 8f 9a d7 b0 ec ac 41 24 71 43 51 e5 c6 4a 41 c3 9f 97 14 f0 3e 68 01 32 32 04 0f 14 ce 03 81 50 0a 64 e9 c6 93 cb e6 80 d9 58 88 b0 b2 d2 d9 8f 71 63 bb c5 a0 b8 cc 09 e0 b2 dd 6e 13 3f 25 76 8d 77 53 a4 37 74 f3 92 f2 20 49 3e e8 bd 92 db 9e 86 85 6a 76 31 57 30 36 88 83 fb b2 8d f5 1f 97 29 71 cb ac 70 e6 a1 c4 63 2b 53 78 63 a9 70 61 71 13 0d cc 01 83 d4 4a bc ea 6b 8d b6 bd b3 2a 81 ce 11 04 db 4e 9e 1c b5 29 f7 af 99 cc 67 4d 07 cf 9e 8a c6 ea 48 17 b9 57 2b ec a6 33 15 ec f9 ea bd d9 5a e2 e6 52 cc 1a 49 80 0d fe 69 5d b7 48 ca 7b dc e9 97 13 20 03 20 12 63 4b c4 a8 0d 35 7b 17 84 34 ea be 9c ce 57 11 31 13 0a 02 0a 79 4c 09 6a 10 41 ff 00 88 24 46 9b b1 78 b8 e1 7b 8f dd d4 78 82 72 Data Ascii: '<z)"wLA$qCQJA>h22PdXqcn?%vwS7t I>jv1W06)qpc+SxcpaqJk*N)gMHW+3ZRIi]H{ cK5{4W1yLjA$Fx{xr
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 10 16 af 75 99 55 a3 4d 8e 7b 45 52 45 32 7b c4 18 31 d0 a7 c7 e3 5f 95 f4 18 ea 8e 60 68 c9 55 af 71 25 d0 09 06 60 e5 d4 79 02 ae 52 a7 00 38 34 3a 2c 24 c5 e7 58 8e b0 91 a0 f1 03 23 6c 08 37 1d e3 c4 99 fe 92 b7 4b 7a 58 96 36 1d 84 31 a0 88 20 5d 49 0a fd 7a 36 13 4c 37 80 b8 27 89 2a be e5 49 b7 b1 3d 7c 4e eb 0f 4d 98 7a 92 49 97 b4 c9 82 5a 0b 8e 91 ef 48 02 fc 79 aa 35 6a ba a3 cb de 3b e4 00 e2 09 20 c0 8d 38 2b 99 db 0d 06 98 30 39 c1 3e 8a 3a f0 f2 08 60 67 38 33 3d 56 a6 e8 aa 56 86 cc 7d 26 36 a3 9e ec af e1 62 49 68 13 00 0e 24 c6 a4 2a d4 db 96 4c 4d bf 7f a7 9a b6 ea 70 08 dc 30 89 e0 fe 53 fe be 85 22 62 56 27 11 6d 0c 68 aa d0 01 7b 8e 72 49 70 8e e8 b3 6d a4 9d 4c 71 54 55 dd cb b3 b8 e4 68 f7 81 13 a4 b7 d3 8a 6a d0 60 0a 6d 64 12 6c Data Ascii: uUM{ERE2{1_`hUq%`yR84:,$X#l7KzX61 ]Iz6L7'I=\|NMzIZHy5j; 8+09>:`g83=VV}&6bIh$LMp0S"bV'mh{rIpmLqTUhj`mdl
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 0c 1f bc ae b5 8a aa 6a 3a 29 4e 07 f9 91 33 08 46 85 4d 11 a7 53 7b 2b b9 84 e3 08 ee 6a 6a ab c2 78 56 3d 8c f3 42 ec 39 1c 42 08 c8 b2 05 3b 58 38 95 20 a3 4f 9a 0a 72 92 b6 e6 d2 0a b1 89 b2 26 82 12 00 a9 12 25 19 d0 c2 5a 26 2e 42 4a 2a 4d e8 e4 ac e1 58 f7 0c cd 60 74 1d 48 95 44 35 6d 6c 66 bb 76 48 d3 31 e3 d0 2c de 72 ae 94 ed b3 41 cf 20 1b 36 dc 13 62 2b 65 17 71 27 a1 46 cc 50 c8 65 a4 bb 80 54 6a 39 c0 9b 12 3c 25 78 29 49 b5 b6 5d f6 00 2a 0a 8e 00 e6 93 d6 55 7a 94 c4 38 5e 15 a6 d6 83 39 40 ff 00 b5 3d 53 dc 27 20 3a 69 2b d7 1e 98 98 89 55 c1 d3 00 6b 65 25 4a 00 dc b8 74 b1 4b 0d 95 cf 8c a4 02 34 9e 2a 66 96 90 2c 44 75 59 fd b3 4a 64 fb 40 30 7c 43 c4 79 a3 7b 0f 08 85 33 b2 c4 5c 28 9e d6 b6 c5 ff 00 25 a7 4c 50 cb df 13 13 2a f0 12 Data Ascii: j:)N3FMS{+jjxV=B9B;X8 Or&%Z&.BJMX`tHD5mlfvH1,rA 6b+eq'FPeTj9<%x)I]Uz8^9@=S' :i+Uke%JtK4f,DuYJd@0\|Cy{3\(%LP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50223	172.217.165.206	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	456	OUT	GET /vi/0SlXGG18Kco/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 4964 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:35:09 GMT Expires: Wed, 15 May 2024 22:40:09 GMT Cache-Control: public, max-age=300 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 135 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:24 UTC	609	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 15 15 15 15 15 15 15 0f 0f 0f 0d 15 1d 15 15 15 0f 0d 25 17 19 15 1d 2e 27 31 30 2d 27 38 2b 40 3d 50 48 34 3d 4b 39 2b 2d 44 61 45 4c 53 57 5e 5c 5b 3e 44 71 79 64 58 6c 51 65 5b 58 01 11 12 12 17 15 15 25 15 15 25 57 36 2d 36 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff c4 00 38 10 01 00 01 04 00 03 04 08 05 02 06 03 00 00 00 00 00 01 02 03 04 11 12 21 31 05 32 61 81 13 22 41 51 71 72 91 a1 06 14 62 92 c1 52 b1 23 33 42 82 d1 Data Ascii: JFIF%.'10-'8+@=PH4=K9+-DaELSW^\[>DqydXlQe[X%%W6-6WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"8!12a"AQqrbR#3B
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: dd 8f 8b cb 2b 06 00 51 51 61 10 6a 25 a4 88 6b 40 8a a0 22 e8 00 66 a6 99 a8 1c e4 00 00 51 6a 65 aa 99 00 00 00 05 11 a0 41 00 51 00 51 00 25 14 04 7a 2c 74 f3 70 76 b3 d3 cd 07 51 15 00 00 00 00 00 00 01 51 40 00 01 40 15 14 08 6a 19 6a 01 a8 54 85 05 00 1c 72 3b b1 f1 79 65 ea c8 ee c7 c5 e5 a9 60 c0 0a 2c 2c 10 90 0e 90 ac c4 ae d0 51 36 6c 14 40 15 8a 9a 66 a0 60 05 05 45 02 59 6a 59 00 00 00 02 1a 45 06 42 40 00 04 50 00 10 07 6b 3d 3c dc 5d ac f4 f3 41 d3 6a 8b 00 2a 28 00 20 02 02 80 02 a2 80 a8 a0 00 02 a2 82 ac 22 c0 35 0a 90 a0 a0 03 8e 4f 76 3e 2f 2d 4f 56 4f 76 3e 2f 2d 4b 06 00 51 a8 45 8e 89 08 35 0a 44 34 08 69 40 4d 2e 80 0d 31 5b 6c 56 0c 00 a0 a8 02 ca 69 a9 40 41 40 41 40 45 00 64 50 10 50 10 50 11 1a 40 47 6b 5d 3c dc 9d ac d1 33 1c Data Ascii: +QQaj%k@"fQjeAQQ%z,tpvQQ@@jjTr;ye`,,Q6l@f`EYjYEB@Pk=<]Aj*( "5Ov>/-OVOv>/-KQE5D4i@M.1[lVi@A@A@EdPPP@Gk]<3
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 7a 01 1e 5b b5 6e 5d ee d5 a8 79 a2 36 0d d8 a3 72 f6 c5 2e 76 28 d4 7c 5d a1 04 d2 cd 30 ae 59 17 38 69 f1 ab 90 3c 99 15 6e ae 5e c7 38 84 59 e5 1e 32 a3 95 fe 9e 6e 2e d7 63 96 fc 5c a1 45 88 6d 29 85 00 00 15 14 10 00 26 5c a6 5b ae 58 00 00 20 95 65 41 61 16 01 41 41 34 a0 00 00 80 00 00 00 00 8a 80 00 80 f4 e3 47 ab 3f 17 99 e9 c7 ee cf cc 0e dc 27 0c 10 a8 26 85 4d 80 84 ca 02 00 08 8b 20 20 a6 81 24 b7 4e e4 99 75 c7 07 a2 98 d4 34 8e 77 eb d4 78 83 8d ea f7 3e 10 d5 8a 37 2e 54 c6 de db 34 ea 3e 20 eb 0b 04 2b 20 f0 64 57 c5 57 85 3d 1e 9c 8b 9c 34 f8 d5 c9 e2 58 14 c3 35 4e e5 aa a7 51 af 6d 49 44 7b 67 a4 28 c5 fe 54 c4 78 ed c6 1d 2e ce fe ac c4 28 b0 00 00 00 00 04 8c d7 20 cc a0 00 40 aa 24 a1 20 2a c9 09 20 a0 00 00 00 00 00 00 00 00 20 00 Data Ascii: z[n]y6r.v(\|]0Y8i<n^8Y2n.c\Em)&\[X eAaAA4G?'&M $Nu4wx>7.T4> + dWW=4X5NQmID{g(Tx.( @$ *
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: f9 8f d3 f7 7e a6 7f 0c e1 d3 da 56 ec 44 dc bf 62 fd 9b 97 62 cd 35 d5 14 c7 0c 44 7f 99 bd ce ea e2 f8 3c 91 87 89 46 66 3e 36 47 64 de c4 9c ce 1a 62 2a ed aa eb d6 ea d7 17 2f 3e 5b 30 c7 c1 fc c7 e9 fb 9f 98 fd 3f 77 e8 2d 76 4e 36 5d 7d a7 67 17 12 bb 77 fb 36 9f 47 66 27 b4 2a af 8e e4 5c aa 38 b9 cc 44 72 a7 a4 f2 7e 77 3b 02 fe 2d cf 45 91 6e bb 17 75 c5 14 d5 31 3b 8f 7c 4c 72 93 0c 77 b7 5f 14 6f 5a e7 ef 59 97 9a cf 77 cd d3 68 63 53 3a dc fb 9e 3a a7 73 33 ef 7a 93 86 3d d1 f4 16 3c af 4e 3d 3a 8d fb d7 86 3d d1 f4 6a 15 75 c7 3b b9 1f 34 7f 69 78 1e ec be ec 7c cf 1e 88 89 b0 e1 34 a0 4c 35 10 95 03 00 28 ac ac a0 0b 00 09 20 00 00 0a 8a 2a 00 20 a8 02 80 0a 22 c0 00 20 00 00 00 0a 02 3d 58 bd d9 f8 bc cf 56 2f 76 7e 61 1d 54 56 44 34 a0 23 Data Ascii: ~VDbb5D<Ff>6Gdb/>[0?w-vN6]}gw6Gf'\8Dr~w;-Enu1;\|Lrw_oZYwhcS::s3z=<N=:=ju;4ix\|4L5( * " =XV/v~aTVD4#
2024-05-15 22:37:24 UTC	590	IN	Data Raw: 64 d1 fa 9c 5e dd c7 8b 5d 9f 89 76 e4 55 81 73 0a bc 7c ea 26 dc cc 5b ab 5e ac f4 eb 13 1d 60 8c de cf bb 91 89 9f 77 2f d1 5d ec eb 54 5b bb 8f 18 b5 4d 57 aa b7 bd 55 4c fb a6 67 7f f0 fc b7 a1 f1 fb 1e 87 c7 ec 68 f7 d7 6f 1f 26 e5 37 ee 65 53 8f 5f 68 65 dd aa f5 b9 c7 9a bf 2d 44 d5 33 15 6f db ec 8f 3f 07 9a fe 35 9a 6c c5 74 64 53 7a f4 df ae dc da 8b 13 4c c5 b8 de ae 6f c7 97 2f 1f 07 1f 41 e3 f6 5f 41 e3 f6 06 ac 77 7c dd 19 b7 4f 0c 6b 7b e7 ee 69 00 14 50 00 70 cc ee c7 cd fc 4b c6 f6 66 77 63 e6 fe 25 e2 6a 0a 00 09 52 b3 50 32 8a 8a 00 00 00 00 00 00 00 0a 00 20 00 0a 8a 02 2a 00 d4 32 d4 20 a0 00 00 00 a0 8f 5e 27 76 7e 67 95 eb c4 ee cf cc 95 1d 85 10 41 40 41 40 41 40 41 41 10 50 10 5d 2e 81 01 45 41 54 10 50 00 50 45 00 79 f3 3b b1 f3 Data Ascii: d^]vUs\|&[^`w/]T[MWULgho&7eS_he-D3o?5ltdSzLo/A_Aw\|Ok{iPpKfwc%jRP2 *2 ^'v~gA@A@A@AAP].EATPPEy;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50224	172.217.165.206	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	456	OUT	GET /vi/38vMxU9UwZc/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 7053 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:34:52 GMT Expires: Wed, 15 May 2024 22:39:52 GMT Cache-Control: public, max-age=300 Age: 152 ETag: "0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:24 UTC	609	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1b 19 19 1a 1e 1d 1b 1f 22 2d 26 24 22 22 21 2d 27 2b 25 2f 32 35 35 33 32 37 33 2f 35 3e 50 42 37 38 4b 3a 2e 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 18 25 1a 1a 25 57 36 2d 36 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 5c 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 01 03 06 02 07 ff c4 00 40 10 00 02 01 02 04 03 05 05 06 04 04 06 03 00 00 00 00 01 02 03 11 04 12 21 31 05 41 51 13 22 61 71 81 06 32 91 a1 f0 14 42 52 b1 c1 d1 23 82 e1 f1 Data Ascii: JFIF"-&$""!-'+%/2553273/5>PB78K:.-EaEKSV[\[2AemdXlPY[W%%W6-6WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\WWWWWWWWWWWWWWWWh"@!1AQ"aq2BR#
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 7c 03 72 d2 50 9a 6b c9 e9 fa a1 d4 5e a7 c7 24 00 30 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6e c2 61 a5 5a a4 69 c7 79 3b 79 75 7f 00 2e bd 90 c2 67 ae ea 35 a4 16 8f c7 fb 7e 65 ec eb 4a 6d da 37 cc de 5b 6e 8d 98 7c 17 d9 a8 4a 31 d3 4c b1 6f f3 7e 3b 90 e9 dd 4d 45 6f 6d 75 db cb eb 99 d3 98 e9 cc 5c 70 aa 7e f4 ad c9 45 75 f1 fc 89 b8 8a 91 93 8d 36 93 76 ba f0 67 9c 1d 2e ce 94 63 6b 3b 5d af 17 fd 2c 43 c5 b9 42 4e 51 9d 9b d3 6d 6d cc 9e d2 7d a8 93 a5 28 4f 37 bd 66 b3 6b cf a1 0b da 4a f0 fb 14 d2 de 53 8c 7f 37 fa 22 c6 85 57 18 ca 39 33 66 7a 79 f9 94 5e d6 51 94 29 52 4d db bc fb b7 db 4e 7f 5c cb d7 8b d7 8e 5c 00 73 72 00 00 Data Ascii: \|rPk^$0naZiy;yu.g5~eJm7[n\|J1Lo~;MEomu\p~Eu6vg.ck;],CBNQmm}(O7fkJS7"W93fzy^Q)RMN\\sr
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 9a 69 d9 ad 53 5c 8d 95 b5 79 bf 16 be bc fe 66 a2 67 0b a5 1a b5 a1 4a a3 4a 32 ba bb 76 b3 b6 9f 3b 01 61 c2 38 84 a1 28 54 d6 d7 ec e7 fe 64 fc 39 b4 f5 f5 67 41 5f 8d b5 4e 8d 39 d3 cb 3a 4a 4a ed b8 ad d7 55 fa 9c c5 38 76 70 ad 46 52 d3 49 41 db ef 47 6f 27 66 c9 95 b1 35 71 14 63 56 ad 68 54 9b 59 6d 95 e6 4a fc da d1 ff 00 50 34 fb 47 8b 58 8a bd aa ca 93 8e a9 3d 9f 3b f5 6f a9 57 85 9a 52 d7 62 45 39 77 9e 66 bc 3c 1d ff 00 b9 8c 62 5b d9 66 6d 75 f1 be fe 9a 81 a7 11 51 33 66 0e b7 76 50 bd 93 e9 cb c7 e4 46 68 93 80 92 52 4d d3 52 f3 db e6 ec 05 c4 26 ea c6 f7 cb 5a 12 59 ad f8 ef a4 97 2b 4b 4f e6 ff 00 51 dc 70 ee 25 0c 47 0e 9b 71 6d c2 16 94 57 dd 6b 96 bd 1f ca c7 cd a5 8d b5 47 92 c9 eb 1e 5a a7 ba d3 4b 6f 6e 9e 88 e8 fd 95 a8 fb ca 53 Data Ascii: iS\yfgJJ2v;a8(Td9gA_N9:JJU8vpFRIAGo'f5qcVhTYmJP4GX=;oWRbE9wf<b[fmuQ3fvPFhRMR&ZY+KOQp%GqmWkGZKonS
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: d3 c3 71 7d 8d 58 cf 95 f5 35 d1 a7 39 a6 a3 19 49 47 57 95 5e de 3e 46 a9 c2 de 2b 93 40 6e af 3b 4d d9 e9 73 c2 97 cb 53 34 68 b9 df c1 74 3c 4a 0d 01 65 85 ac d6 1e 4a fa 4a ac 5f c2 32 fd c9 98 79 5f eb eb eb e5 57 4a 5f c2 8f 8c e4 fe 0a 3f b9 33 0f 20 89 d4 ea 65 ab 4e 5f 86 71 7f 06 99 41 8e 86 5a f5 63 d2 72 5f 06 cb 5a 92 e4 55 f1 19 5f 11 55 f5 9c 9a f2 6e e8 08 c0 00 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 7c 2e bb a7 5e 2d 4a 51 bf 75 e5 76 76 7a 1b 31 f4 b2 ca 6e 2d da 32 4b 54 93 b3 be f6 f2 23 e0 a9 e7 ab 08 dd 46 f2 4a ef 6f 0b 96 bc 4f 07 52 39 dc f2 5a 76 b3 52 be ab d3 cc 09 7e c7 60 6a 62 23 8b 84 27 18 27 4e 37 6e 39 9d ef Data Ascii: q}X59IGW^>F+@n;MsS4ht<JeJJ_2y_WJ_?3 eN_qAZcr_ZU_Un\|.^-JQuvvz1n-2KT#FJoOR9ZvR~`jb#''N7n9
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 86 8b c5 54 c4 4e d9 68 53 72 5e 6f 4f ca ff 00 23 47 15 af da 49 ca fa b6 e4 fd 40 85 0b e6 9c a7 2b db ba ae f9 2d bd 0f 12 c4 29 68 bf ab 34 62 61 79 3b 3e 4a eb c6 ca ff 00 32 77 06 c2 a7 3c f2 d9 68 bc c0 df 4e 50 54 e3 4a aa bb 4d ef 2c b9 53 b3 b6 9e f3 ba 2a f1 74 d4 6b 38 42 f3 8d f4 ea fd 51 6b c5 70 d4 a1 df e7 c9 5f f4 e6 55 f6 8e 94 73 7d f9 69 7e 9f 57 02 55 4c 43 a2 f3 ce ce b5 ad 08 2f 76 92 f0 fa fd ca a9 49 b6 db 77 6c c3 6d bb bd 59 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3a ee 13 4d 61 b8 5c ab 66 ef e2 5b 8a f0 8a 76 7f 1b 7c 8a 2a d5 6e d8 7c 46 73 a1 4e 8c 9f 76 92 6a 3e 4d dc d0 a2 da 6f 7b 6f e0 41 ee 51 93 93 56 Data Ascii: TNhSr^oO#GI@+-)h4bay;>J2w<hNPTJM,Stk8BQkp_Us}i~WULC/vIwlmY:Ma\f[v\|n\|FsNvj>Mo{oAQV
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 00 00 00 00 00 00 00 00 3d 43 9f 91 ea 38 79 bf ba fd 74 27 60 f0 a9 46 7d a4 6f 75 64 d3 d6 3a eb a7 30 35 60 52 72 b3 76 24 71 8a 19 54 19 1b b2 95 29 b8 bf 46 9d 93 5f aa 25 c5 aa b2 8c 6a 4d 46 2d a4 e4 ee d4 57 56 41 ee 95 69 28 51 6d 3b f3 b3 4e eb 6d b7 d8 91 c4 2b e7 5a 35 96 da 75 df e1 d4 c6 3b 86 ca 85 4f c6 96 aa db ca 36 d1 c7 a9 e5 4f 0f 25 9d b7 9b 9c 6c d5 fc 74 d3 e6 05 55 5c 36 99 a3 6d 37 57 d7 cf eb a1 18 b1 a8 d3 93 6b 6b 98 73 e6 d4 5f 8b 45 15 c0 9b 2a 1d a5 dc 21 b6 f9 76 f9 e8 46 ec 65 c9 04 6b 32 1a b6 e0 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 50 a3 9e 4a 37 4a fc de c5 be 17 0c a9 7b f0 93 51 6b 3e 8d 5e fa a5 7b 69 75 6f 89 Data Ascii: =C8yt'`F}oud:05`Rrv$qT)F_%jMF-WVAi(Qm;Nm+Z5u;O6O%ltU\6m7Wkks_E*!vFek2+6PJ7J{Qk>^{iuo
2024-05-15 22:37:24 UTC	169	IN	Data Raw: 88 22 d7 a4 e2 af 26 b3 37 b2 34 1e a7 26 dd db bb 30 51 80 64 10 60 19 00 60 19 30 55 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 37 ca d9 9d b6 d3 f2 30 00 18 00 20 78 98 00 66 33 e4 d2 6b eb 99 8b f4 ba f5 30 02 8d 83 00 0c dc 5c 00 07 a8 4d c7 66 d1 80 06 1b b9 9b be ac c0 02 5d 2c 53 4a d2 ab 5a dd 22 ed fa 9a ea 38 3d a1 53 ce 52 5f b1 80 06 97 e5 63 00 01 90 60 01 90 01 10 00 00 30 01 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff d9 Data Ascii: "&74&0Qd``0U70 xf3k0\Mf],SJZ"8=SR_c`0T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50225	172.217.165.206	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	456	OUT	GET /vi/w9uaLdS7VrQ/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 16620 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:35:25 GMT Expires: Thu, 16 May 2024 00:35:25 GMT Cache-Control: public, max-age=7200 ETag: "1715461930" Content-Type: image/jpeg Vary: Origin Age: 119 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:24 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 0d 0d 0d 10 0e 0e 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 10 0d 0d 0d 0e 0d 0d 0d 0d 15 0d 0f 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 0f 0f 0f 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 45 10 00 01 03 02 02 07 05 06 04 03 07 03 05 01 01 00 01 00 02 11 03 21 04 31 05 12 41 51 61 71 91 06 81 a1 b1 f0 13 22 c1 d1 d2 e1 32 42 52 f1 15 Data Ascii: JFIFh"E!1AQaq"2BR
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: fc 21 db db d4 fc 90 67 a1 68 ff 00 08 76 f6 f5 3f 24 7f 08 76 f6 f5 3f 24 19 c8 5a 3f c2 1d bd bd 4f c9 2f f0 77 6f 6f 53 f2 41 9a 85 a5 fc 19 db db d4 fd 28 3a 1d db db d4 fd 28 33 50 b4 4e 88 76 f6 f5 3f 24 7f 08 76 f6 f5 3f 24 19 c8 5a 23 43 bb 7b 7a 9f 92 b3 87 ec e3 dd 93 a9 f5 77 d2 83 15 0b 76 b7 65 aa 0d b4 e3 78 2e fa 55 6f e0 6f de de a7 e9 4d 0c b4 2d a3 d9 c7 c0 3a d4 f9 6b 19 ff 00 8a 8f f8 03 f7 b3 ab be 94 19 28 5a df c0 1f fa 99 de 48 ff 00 c5 46 fd 0e e1 f9 98 79 17 7c 5a 10 66 a1 68 7f 09 76 f6 f5 3f 24 7f 09 76 f6 f5 3f 24 19 e8 5a 23 43 bb 7b 7a 9f 92 91 ba 09 f1 32 ce a7 e9 41 94 85 a6 fd 0a e1 b5 bd 4f d2 a4 6f 67 df 6b b2 fc 5d f4 a0 c8 42 d6 fe 02 fb 5d 97 31 99 ce df cb c4 28 bf 83 ba f7 6d b8 9d f1 b9 06 72 16 ad 3d 04 f2 26 59 Data Ascii: !ghv?$v?$Z?O/wooSA(:(3PNv?$v?$Z#C{zwvex.UooM-:k(ZHFy\|Zfhv?$v?$Z#C{z2AOogk]B]1(mr=&Y
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 34 0a 4e 05 cc 20 ea 3a f1 06 e5 b7 92 04 83 03 67 0d 96 aa d1 2e bc 58 3b 66 f2 35 8c ef bc 36 49 1b 36 22 b5 1d 76 96 82 1b 26 5a e2 e2 21 f9 c9 9b dc 48 f1 cd 66 55 d3 86 d2 b8 23 4d d1 32 0c ea 9f 9f 10 aa 2d dd 3e d7 1a 64 bc 43 e9 b8 07 0d b0 e0 08 24 03 17 07 3f e5 54 f4 5e 88 35 32 3b f6 c1 3c a6 64 6f e0 1f 1a da a5 51 3f 63 f0 ba d5 99 94 34 eb 5f 2f 74 17 6d ff 00 49 be f8 5d 7e 91 c2 6b 97 53 79 d6 69 73 88 3f a5 d2 e1 ae d0 44 03 7c 84 48 24 5a d1 6f 40 e8 76 d0 6c b4 9f 79 ba ba c6 c4 9d 77 b4 98 dd ee b4 6a 91 10 1d 9f e2 54 71 83 de 71 d9 24 03 6e 83 3c cd 80 31 ca 16 6d 57 9e 9c fd 48 49 af 1b 56 bf 6f e0 57 f7 64 17 53 a6 e7 cc 7e 2d 58 31 19 48 00 99 be b1 71 c8 82 b9 c8 5a 45 a7 d7 0a 37 e2 0a 89 04 a2 e8 8e 29 13 83 52 9a 6a a2 34 e6 Data Ascii: 4N :g.X;f56I6"v&Z!HfU#M2->dC$?T^52;<doQ?c4_/tmI]~kSyis?D\|H$Zo@vlywjTqq$n<1mWHIVoWdS~-X1HqZE7)Rj4
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: b4 67 9d fe 52 a7 73 64 5a 63 cf e2 b3 70 d5 20 1e 47 ae c5 72 86 26 72 f0 d8 b9 d8 ef 86 5b e8 cc 55 09 ff 00 50 cb 88 cf 95 bd 66 ab 62 05 88 dc b4 5c 36 9b 77 df a7 c1 55 c4 b0 91 20 73 99 98 ef dc b5 8d 63 e9 8f ea ae 15 b6 44 43 b9 fa f3 49 4a c6 07 c1 15 a6 c4 fc 16 9c 8e c5 d3 10 d3 33 98 3b ed 94 f3 6e af 8a 4a e3 dd ef 1e 50 96 a8 b1 9d 90 7e 5e 07 fe d5 18 b8 3c 06 48 17 0c 07 50 7c 95 b6 66 3f d3 f2 54 69 09 21 5c a7 48 20 94 04 ac 4b 48 25 2a 29 40 49 ae 80 52 48 41 42 b1 97 f7 8f 0f d9 2e 28 c9 03 d5 d3 28 19 71 3c fd 78 a5 26 5c 55 41 89 a9 64 dc 28 bf 24 da e6 ea 5c 38 b2 0b 4d 77 12 97 5c a8 42 7b 54 55 89 5a da 0b 06 1d 72 09 be 7b 00 ce 6f 9e 51 de a8 e8 ac 21 7b 80 98 1b 67 d7 77 7a eb 70 f4 75 61 b0 40 31 bb 39 19 81 6b c6 51 de 24 46 Data Ascii: gRsdZcp Gr&r[UPfb\6wU scDCIJ3;nJP~^<HP\|f?Ti!\H KH%*)@IRHAB.((q<x&\UAd($\8Mw\B{TUZr{oQ!{gwzpua@19kQ$F
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 69 e1 dd fa 9b cc 34 fd 4a 17 62 db b5 cd ee fb a5 66 39 bf a8 75 0a a2 6d 53 ac 1b ed 0c 9d cc 6d b6 e6 67 d4 6f 0a b6 32 b9 b8 0f 73 86 44 d8 03 bc 7b b1 61 6e 73 bb 34 af 52 49 2d e5 b7 28 b8 1b f6 f8 a8 1c f9 6b 60 49 24 e4 2f 19 09 ef f8 2e 57 27 49 8f ef fe 8c 6b 6c 98 48 da a6 c4 c8 86 c4 10 76 66 4d b7 1d 9b 15 7a a3 7e 7b b7 70 e6 a2 58 d0 68 f0 48 36 fa ca 53 9d e2 54 4f 36 3d 3a 95 c6 3b d5 78 b8 5a 9d 9a 11 55 a6 26 c6 dc c4 7c 72 59 94 c7 bc 78 0f 5f 15 b9 a0 9d aa 4b 8c e5 03 be e7 c4 0f 15 b9 eb 95 f1 3f 69 49 87 1d 91 e6 aa f6 56 b8 34 9c 36 87 78 10 20 f8 11 dc ad 69 10 d7 b5 de f8 6e df 7a 63 2f d4 62 e0 ef f1 85 93 a2 b0 ae a6 e2 4c 41 11 63 63 bb 8e c3 13 9a de dc db 2d de 9e f9 00 1e 06 38 5e 27 be e1 41 ad 37 d8 a3 ad 51 50 3a a4 7a Data Ascii: i4Jbf9umSmgo2sD{ans4RI-(k`I$/.W'IklHvfMz~{pXhH6STO6=:;xZU&\|rYx_K?iIV46x inzc/bLAcc-8^'A7QP:z
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 5e 85 10 1c b3 ca 3a 71 66 76 a0 46 ae 7a b9 15 87 8b c2 34 49 a6 21 db 23 3d 6d 90 39 c6 4b b1 d3 78 2d 7a 64 74 5c cd 2a 45 da ad 04 35 db c9 80 d2 36 cf 02 15 c6 ff 00 19 ca 6b d6 37 67 7b 25 53 10 41 82 ca 66 fe d1 c2 d1 fc a2 41 7f 96 77 5e 97 d8 5d 0a 30 f4 8b 60 6b 6b 1d 77 c0 97 c1 81 07 3d 5d dc 0e f9 4c ec d6 21 c5 9e cd ce 69 7d 20 05 42 0c 92 2f a8 4f 30 0b 67 69 69 3b 56 ed 43 ee 03 bd c4 73 88 24 f5 b7 72 f5 6d e2 ca b9 ce de 61 32 a8 dd 90 1d e5 f2 f1 58 5a 32 ad f3 fb fc bb a1 75 ba 55 ba e0 b4 fe 61 e2 bc ff 00 5c d3 75 c5 c6 63 25 36 b1 d2 0e cb d0 ab 25 cc 68 27 32 2c 77 67 04 e5 bc a8 71 7f d9 d5 30 09 69 78 b6 41 c0 ff 00 c9 a4 f7 ad 5e ca 4d 68 89 d5 98 71 fd 24 09 8e 32 ba 0c 33 c3 bd b5 30 7f cc a5 06 09 cc 11 20 8e 1b 3b 92 e5 23 Data Ascii: ^:qfvFz4I!#=m9Kx-zdt\*E56k7g{%SAfAw^]0`kkw=]L!i} B/O0gii;VCs$rma2XZ2uUa\uc%6%h'2,wgq0ixA^Mhq$230 ;#
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 95 58 d7 50 6e ad 52 6c 7d 98 10 1c d7 0d 8d bb 4e 50 3d 99 91 79 ec bb 2d a6 69 d6 a6 c6 b5 d2 f6 12 da a7 2f 7b 61 8d ce 1e f0 22 d7 23 61 5d ab cd 49 a6 34 70 82 e2 40 27 21 b7 9f 25 c2 76 8c 07 43 8f e2 16 3c 46 fe 6b d0 74 a5 dc 77 6c f8 2e 23 4d e1 ac ee 12 b3 08 e8 b4 46 25 b8 7c 2e 19 c3 ff 00 71 e7 58 9e 2e 73 5e 73 fc a0 47 26 a4 ed 06 3b d9 62 5a f6 98 25 8d 0e 69 da 2f d7 3b 72 0b 86 38 e7 16 b5 ae 32 d6 4e a8 3f 96 66 63 a9 5a 3a 5b 50 35 a5 95 1d 5a c2 5d 10 07 00 09 d6 b6 57 2b 37 1f eb be 39 f5 a8 d0 c7 12 2a eb 36 5a 1e 35 81 9c 9c 23 cc 10 7b b8 a8 f1 f5 cb 9c 1f 69 fc 2f 1b c1 fc 24 0e 07 cd 50 c6 69 26 ba 03 24 80 00 16 f7 a0 6f e2 b3 b4 9e 99 65 21 ef 49 79 c9 80 df 99 dc 39 f7 4a cf 1b e3 7c bf ad 5a b8 69 20 b6 ce d8 7d 6c 57 70 ba Data Ascii: XPnRl}NP=y-i/{a"#a]I4p@'!%vC<Fktwl.#MF%\|.qX.s^sG&;bZ%i/;r82N?fcZ:[P5Z]W+79*6Z5#{i/$Pi&$oe!Iy9J\|Zi }lWp
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: ba f8 2d 60 46 47 67 35 d0 f6 5a a1 d4 68 22 ed 10 78 e6 3e 0b 3f 51 6c e8 06 82 63 69 c8 f1 bf 55 9c 32 fc 5f ae 3d 6d cd e9 ed 0c fa 10 ec 23 35 5e 5f 25 f2 08 60 cf 54 b4 e4 cd 93 71 04 83 98 9a 8f 6b c9 d5 c2 fb 3a 38 8a 40 3a a5 10 20 bc 6e 1a c6 1d 4c 9b 41 20 b6 47 bd 76 93 dd d5 69 04 85 91 88 ec 85 3a 95 19 55 a5 d4 9e c7 07 17 32 c0 c6 62 0e 5a c3 dd 31 62 09 90 65 77 95 c3 6b ac c4 39 cc 69 a8 d0 d7 96 8d 66 83 20 3a 2e 01 dc 0a c2 d3 df 85 db f6 fa de b6 f1 d5 a2 78 2c 8c 45 02 e6 b9 e7 f0 83 1c dc 64 81 dc 24 f4 de 13 48 e2 31 14 7a 27 e0 f0 4f 70 3a 84 b7 90 04 de d2 1a 6c 63 e4 ae e2 69 41 32 9d 46 a6 a4 11 62 0d bd 6e 56 76 bb 72 7f df 2a 80 f6 b9 c4 10 60 c0 6b 48 33 06 ed 68 3d eb 06 bd 13 ac e1 99 69 cf 32 67 23 df 9a ec bb 48 35 aa 6b Data Ascii: -`FGg5Zh"x>?QlciU2_=m#5^_%`Tqk:8@: nLA Gvi:U2bZ1bewk9if :.x,Ed$H1z'Op:lciA2FbnVvr*`kH3h=i2g#H5k
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 08 58 f8 ba 4b 72 8e 57 49 50 8b f4 58 95 dc ba 2d 31 70 42 c0 6d 29 70 1b d5 d8 86 b8 90 07 a0 b3 f1 82 fd eb 5b 11 4a 15 3a 94 a6 c7 23 91 19 83 f2 5a c7 2d 0e 6b 12 25 f9 77 f7 11 f1 52 69 6a 01 ae 00 19 b0 f2 0b 4d fa 01 e5 e4 82 c2 39 9e bf 87 72 83 17 a1 aa 03 3a b3 c4 10 7c 26 7c 16 f1 f6 ad f1 83 8c 19 29 2a 8f f2 87 fa 8a 97 49 e1 9c 08 96 b8 67 98 3c 14 55 cf f9 6d e6 56 73 f5 ac 3c 59 a4 3f c9 3d ff 00 05 9c c0 b5 69 33 fc 83 fe ef 36 aa 38 46 5c 73 5d 23 14 c1 4d 4c 29 2b df dd 41 56 28 61 3b d1 23 25 b4 53 99 85 dc 60 f4 5b f4 f4 2b 9d b2 07 1f 96 7d 61 5c c3 e8 26 b6 e6 5c 7a 0e 83 e2 56 2e 52 3a 4c 2b 9f 6f b4 02 03 9c 78 07 13 e0 49 1d 02 b7 a3 70 55 5c e1 ed 0b 83 36 89 00 bb 84 08 31 be 76 48 5d 1b 29 86 e4 00 e4 23 c9 43 5a a4 2e 57 37 Data Ascii: XKrWIPX-1pBm)p[J:#Z-k%wRijM9r:\|&\|)*Ig<UmVs<Y?=i368F\s]#ML)+AV(a;#%S`[+}a\&\zV.R:L+oxIpU\61vH])#CZ.W7
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 55 12 34 27 85 0f b4 40 28 27 f6 8a f6 85 ac 0b 8b 1d 10 fb 02 67 dd 33 9d bc f2 b5 ed 25 66 b2 9a b1 4c ea 90 64 08 20 c9 12 04 5e fc 0e 44 6e 39 1c 94 a3 cb bd 83 ad ee bb 66 c3 cf 77 04 b4 f0 ae 9f c2 7a 15 d1 9c 4b 3f 50 3c 24 26 3b 16 cd e3 a8 5e 2e 4f 4e 98 d8 4c 3b 80 3e e9 c8 6c 8d a2 7c 07 8a 7d 3a 24 67 9a d6 38 d6 6f 1d 7d 70 5a 1a 32 93 2a 1d 52 60 1b 07 7e 93 fc dc 12 dd ac e9 81 4d d7 e1 7f 0f bc 26 d1 7e 7e af b5 4b 8b 66 ab 8b 47 11 3b fe db 65 46 04 75 b6 ce 1f 15 9d 69 a5 8c 18 bf 21 b9 58 17 50 51 16 52 ca ce bb 12 0f 5f 14 81 b7 f5 fb 22 3d 7a da 8d 6b fa f5 dc a0 75 63 fb ab 1d 9b 3a b5 e9 7f fe 8c 1d 48 1f 15 56 a3 ba 29 34 7d 48 a9 4c ee 7b 0f 47 04 1e c1 a2 74 ab 5c f2 c3 f8 9b 71 c4 7d 8f 98 56 f1 f6 ba f3 4e d3 38 87 87 34 90 45 Data Ascii: U4'@('g3%fLd ^Dn9fwzK?P<$&;^.ONL;>l\|}:$g8o}pZ2*R`~M&~~KfG;eFui!XPQR_"=zkuc:HV)4}HL{Gt\q}VN84E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50226	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	424	OUT	GET /steam/apps/2668080/ss_07b95e43d4229270333d7fcbea6ba428a80253e4.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	340	IN	HTTP/1.1 200 OK Last-Modified: Thu, 14 Dec 2023 07:17:39 GMT ETag: "657aac13-ddf7" Server: nginx Content-Type: image/jpeg Content-Length: 56823 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=99724 Expires: Fri, 17 May 2024 02:19:28 GMT Date: Wed, 15 May 2024 22:37:24 GMT Connection: close
2024-05-15 22:37:24 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 00 06 07 08 09 ff c4 00 5a 10 00 02 01 03 02 03 05 04 07 04 04 09 08 08 04 07 01 02 03 00 04 11 05 21 06 12 31 07 13 41 51 61 22 32 71 81 08 14 23 42 91 a1 Data Ascii: JFIFCCQXZ!1AQa"2q#B
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: c7 70 07 e3 45 b7 31 de c8 25 8f 1b 1d ab 4b 58 2e 38 a9 b5 03 14 21 c8 19 c5 00 21 5c 13 ed 8a bd 9c 93 25 3b 82 73 e7 9a 56 28 25 e6 39 d8 1f 3a 40 3d dd 7b 39 a7 15 71 5f 3b 09 c9 d6 a4 66 08 cb 1c 67 6a 77 b6 68 a5 9e a6 b3 c6 1d e4 5d d0 49 19 72 0f ba d8 ad 9d e3 86 a9 25 a9 8c 56 d5 67 d1 1a d2 dc 5d 01 81 71 30 1f eb 0f f6 d7 85 da d4 fc cc ec d8 5c 05 5b bb c5 e9 73 38 ff 00 e2 1a 3b 6a 9f 98 36 17 00 c5 ed e8 3f e3 53 ff 00 e3 34 fb 6a 9f 98 36 11 26 cf 88 b5 7d 2e 61 71 6b a8 dc c1 2a 82 39 d1 c8 38 23 04 7c c1 34 3a 92 9a b4 9d c9 95 28 ca 2e 12 57 4e d7 f5 df df 99 bf c3 a8 5c df 07 9e e2 53 71 2c df 69 23 49 bf 33 13 92 7e 67 26 bd 2c 2e 22 ad 58 a9 cd dd b6 ef eb 25 d9 26 90 ad 1c 12 c4 32 86 36 cf 54 dc 7e 15 d7 17 07 b5 b4 b7 7c 47 7d 08 Data Ascii: pE1%KX.8!!\%;sV(%9:@={9q_;fgjwh]Ir%Vg]q0\[s8;j6?S4j6&}.aqk*98#\|4:(.WN\Sq,i#I3~g&,."X%&26T~\|G}
2024-05-15 22:37:24 UTC	2011	IN	Data Raw: 0e b1 36 53 94 1c 29 24 63 27 cc fa 9a f2 7d 2d 8f 95 0c 0a b4 55 da 4c ee c3 b5 56 95 5b f0 bf a9 9e 85 82 f4 ba 29 09 d4 03 d6 be 92 8d 79 54 a5 19 f1 49 9f 3c ea a4 ed 62 54 77 24 6f c8 2b 65 52 44 76 bc 8d 9f 85 78 76 e3 5f 8e e2 f6 e2 78 b4 bd 0e c8 73 5e 6a 77 03 ec e2 5f 21 fb ce 7c 14 6e 6b 19 d7 9e d7 67 4f 39 3d df 16 f7 2e 65 c6 79 6d cf 25 ed 6f 82 5b df b1 6f 35 9e d0 3b 58 fe 9b b4 6e 19 e1 48 24 d3 38 72 36 cc ae ed f6 d7 ac 3f ce 4c c3 60 07 50 bd 00 3e 27 7a c7 b4 ec 6e d4 af 27 ac be 11 5b 97 b5 ef e0 75 41 4a 76 95 45 64 b4 5b 97 cd bd ed f9 1c cf f6 ac d0 c4 c0 28 19 92 66 ce 3f f2 cf e3 9a e7 73 6f 37 a9 ad f7 ee fa f6 f2 33 bc 59 87 22 8e 4b 68 f7 3b 6e c7 cc fa 9e 9e 54 94 58 ef bd 9a 8f 6a f2 9b be 12 b8 66 1c 91 c6 ca 23 41 d0 6f Data Ascii: 6S)$c'}-ULV[)yTI<bTw$o+eRDvxv_xs^jw_!\|nkgO9=.eym%o[o5;XnH$8r6?L`P>'zn'[uAJvEd[(f?so73Y"Kh;nTXjf#Ao
2024-05-15 22:37:24 UTC	16384	IN	Data Raw: 80 7f 1a f5 30 77 a8 bb 49 bf 1b bf ab 2f 81 cb 59 a5 dd 5b 92 46 c3 a6 58 b0 69 a5 90 8f 66 33 ca 33 f7 8e c2 bd 07 1d a9 2c cc 1b ee b1 db 1d 22 6e ea e5 d6 50 80 47 86 dc e4 82 7a 63 c7 d6 a9 46 3b 4a e0 e4 ec 4a b0 d1 88 b5 bc 3e d3 65 54 12 06 c3 7a 14 56 d2 f3 25 cb 25 d7 e6 3d 6b a3 28 b2 b8 5c 9d d9 4f 4e bd 7c 7f e3 54 a2 ae 4b 6f 22 6d c6 8b 0c d1 5a e0 31 22 20 a7 3e 84 ff 00 7f 0f e6 5c 23 64 fa 8a ed 36 3d 71 a0 2b 77 52 b1 e7 79 10 12 dc d9 20 f4 df f0 e9 fa 55 c5 2b 59 2d 05 b4 ee c9 97 7a 0c 22 68 ae 56 20 ab 20 0e b9 1b 64 6c 76 c6 3a 8f e5 be f4 a3 6d 9b 32 76 ac da 1c 6d 0e 28 67 49 79 03 87 02 41 9d b3 be ff 00 9e 46 7f 0a ab dd 09 3b 64 c9 07 4a 86 0b b6 92 24 5e ed b2 40 e5 d8 a9 ea 08 cf 4f 4c f9 55 59 b5 7f ab 87 14 c9 0b a3 25 9c Data Ascii: 0wI/Y[FXif33,"nPGzcF;JJ>eTzV%%=k(\ON\|TKo"mZ1" >\#d6=q+wRy U+Y-z"hV dlv:m2vm(gIyAF;dJ$^@OLUY%
2024-05-15 22:37:24 UTC	6000	IN	Data Raw: cb 18 06 23 83 8e 94 b6 47 70 3b 9e a3 3b d0 a1 c8 2e 21 b7 c9 e8 4d 16 48 57 0e de 02 92 64 78 03 d7 e0 69 49 ad 87 6e 44 cb 34 14 4d 97 7c 8c 1c 7f 3a 94 fb 85 cb c5 e6 2c cb 95 24 7f 7d cd 67 2d 44 88 67 c7 34 0d 00 4d 00 0f 5a 40 62 33 44 e1 e3 76 47 1d 19 4e 08 a4 d5 c1 5d 16 11 eb ad 2b 29 be 84 5c b2 fb b3 a1 ee e6 5f 83 0e bf 3a 59 da da ae 65 26 b5 de 5b c5 a9 a6 a6 bc 92 18 b5 74 e9 dd dd 7d 95 ca ff 00 0c 83 66 f9 e6 9a 96 56 4e dc 9e 68 5b 3b fd df 22 05 c6 87 67 75 2b 25 9c ed 6f 71 ff 00 e9 2f 87 76 ff 00 26 e8 d4 9a 5f 8b 2f 70 2b ee cc aa 9e da f3 46 98 ac b1 3c 47 39 2b 22 fb 26 9a 73 82 c9 e4 2c a5 bf 32 5d b6 af 14 83 bb 96 31 10 62 06 db ae 3e 15 d5 46 a2 6d ed b3 2e cd 45 5e 27 60 5f 4a b3 cf 1d 8c 78 d3 44 9b 4f 01 70 0e af da 06 b5 Data Ascii: #Gp;;.!MHWdxiInD4M\|:,$}g-Dg4MZ@b3DvGN]+)\_:Ye&[t}fVNh[;"gu+%oq/v&_/p+F<G9+"&s,2]1b>Fm.E^'`_JxDOp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50229	142.250.189.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	687	OUT	GET /vi/DW6VDDih8nM/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 34238 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:35:06 GMT Expires: Thu, 16 May 2024 00:35:06 GMT Cache-Control: public, max-age=7200 ETag: "1712400508" Content-Type: image/jpeg Vary: Origin Age: 138 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:24 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0a 0d 0a 0d 0a 0a 0d 0a 0d 0d 0a 0a 0a 0d 0a 0a 0a 0d 0a 0a 0a 0a 0a 0a 0a 0a 0b 0a 0a 0a 0a 0d 0d 10 0b 0a 0d 0e 0a 0a 0b 0d 15 0e 0e 11 11 13 13 13 0d 0e 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 17 15 12 15 15 18 17 16 15 17 15 17 15 18 15 16 15 17 15 15 18 17 17 17 17 15 15 15 17 17 15 17 15 15 15 16 15 15 15 17 15 17 15 15 15 17 15 15 15 17 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 01 03 08 02 09 ff c4 00 51 10 00 02 01 03 03 02 03 05 04 05 08 08 03 04 0b 00 01 02 03 00 04 11 05 12 21 06 31 13 22 41 07 14 32 51 61 08 23 71 81 15 42 91 94 a1 16 24 Data Ascii: JFIFh"Q!1"A2Qa#qB$
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 5c 8a 03 8a 57 24 57 14 02 94 a5 00 a5 29 40 29 4a 50 0a 57 25 6b 8a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 66 42 62 db ce 72 47 6f 5c fd 3d 3e b5 86 ec 49 4e 9e fb b5 d2 eb 30 e9 5c b7 d2 b8 ac 91 8a 52 94 06 5d bc 4d 29 da b8 2f 80 11 7f 5a 53 93 e5 07 f5 a4 c1 e0 7e b6 30 32 db 43 62 91 5c 54 a5 d6 a2 92 a8 32 a9 f1 06 77 cc b8 26 51 c6 1d d4 e3 ef 07 3b 9f 3e 7e 09 1b b7 3b ea dd 89 21 15 2c 9b b1 17 53 3d 31 a3 3c e5 c2 63 c8 14 9c 90 3b 92 3b 9e 3d 2a 1c d6 c8 f6 11 d4 9a 7d Data Ascii: ()JJRR()JJRR()\W$W)@)JPW%kJRR()JJRR()JJRR()JJRR()JJRR()JJRRfBbrGo\=>IN0\R]M)/ZS~02Cb\T2w&Q;>~;!,S=1<c;;=*}
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 5b 4d d5 af fb b9 94 9e cd af bf bb 7c af ad f8 73 e6 6a 8f f4 49 d7 3f ee 9d 27 f7 3e 90 ff 00 dd d5 77 5e e9 de a3 b6 93 c1 bc 83 a6 6d e4 da 1b c2 b9 5e 87 b7 97 6b 67 6b 78 72 6d 7c 1c 1c 1c 60 d6 f6 bb f6 2b 6b 2b b4 8f 12 12 cc ce e5 ac a3 f1 1d 9b e2 2e c5 f2 4b 31 dc 4f a9 f5 ae b9 7d 82 e8 ac bb a6 b4 79 1c 00 0b 40 5e d9 08 f4 1e 14 52 04 04 0e e7 b9 ef f4 a8 e9 6d 58 b7 f7 c5 25 fd 0b ff 00 76 4b 57 65 54 8a fb 67 77 ca ed 79 9a 03 4e d2 f5 c9 64 48 a1 5e 96 92 49 64 54 8a 24 3d 0e f2 49 23 b0 54 8e 38 c1 2c ec cc 40 0a 07 24 f1 de ad 52 fb 22 eb 7e e7 4a d2 ff 00 2b 4e 93 1f c0 27 35 b4 97 d8 56 8b 19 59 21 b2 bc 59 63 75 78 dc 3d cb f8 6c 84 32 b9 56 94 2b 61 80 e3 35 0f 7d ec 8e dc ca d3 3c 0e db 9b 2c 1a c2 32 cf b8 9c f9 bc 5f 31 27 9c f7 Data Ascii: [M\|sjI?'>w^m^kgkxrm\|`+k+.K1O}y@^RmX%vKWeTgwyNdH^IdT$=I#T8,@$R"~J+N'5VY!Ycux=l2V+a5}<,2_1'
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: df 83 76 6b 95 af f2 e7 b6 97 db 17 4b 19 37 35 dd a8 ce 32 56 d7 58 ec 3b 64 78 3c 9f c3 15 ae f5 1f b5 12 2c ae 23 d3 2d e4 44 77 11 cb ef 17 09 e2 20 62 16 4d 86 3c ae e5 c1 c1 e4 66 bc cd 4a de 86 c3 c2 d2 bf db bd d6 93 fc 22 3a bb 5f 13 52 df 73 5d 4d fa 9e b6 f6 79 f6 92 d3 a7 b8 91 35 2b 68 2c 62 30 3b 25 c0 7b db a2 d3 ee 8d 56 2f 0e 28 99 d4 14 69 1b 76 31 e5 c6 79 15 b5 bd 9e 7b 4d e9 fb fb d8 74 fb 5b 98 a5 92 7d e1 23 10 ea 31 b3 08 a3 79 9c ac 93 42 b1 29 11 c6 c7 cc 46 70 40 c9 20 57 e7 9d 4c f4 67 52 4f 63 77 1d ed b1 02 58 7c 4d 85 86 40 f1 22 78 9b 23 23 f5 24 6a 8b 13 b0 b0 f2 bc e1 1b 3b 64 b2 b5 fa 72 e3 c4 52 da 95 ff 00 4c a4 ec f8 bb b6 bc 78 1e 8c ea 8f b4 df 83 73 71 6b fa 32 07 10 dc 4d 16 f3 73 30 2e 21 91 e3 0c 40 4e 32 06 71 Data Ascii: vkK752VX;dx<,#-Dw bM<fJ":_Rs]My5+h,b0;%{V/(iv1y{Mt[}#1yB)Fp@ WLgROcwX\|M@"x##$j;drRLxsqk2Ms0.!@N2q
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 2b 82 40 3d 89 01 97 f6 8f 9d 4b 69 5a 84 67 c9 70 09 1b 42 a4 9b 43 ed c2 b0 51 2c 7c 19 57 0d b4 30 65 78 c6 0a 93 b4 21 d2 51 ed e8 26 8c af 95 ec f9 92 20 69 b3 8c ef 6b 39 70 72 b2 89 6e 2c c9 c6 72 93 22 bd dc 43 77 02 37 8e 7e 07 f4 a3 3c 63 ea 5d 1f 77 1c 6d 3a a0 9a 14 6d af 71 6a c9 75 6e 8d c9 c3 cd 09 74 88 ed c1 db 21 46 c3 0f 2e 39 ae 8d 63 42 64 0a e9 e6 8d c0 f0 dd 4e f4 9b b6 ef 05 c2 80 e5 77 21 68 d8 24 a9 bc 06 41 b4 9a c0 d2 b5 39 e0 90 4b 6f 2c b0 c8 3b 49 0b bc 52 0e 41 e1 d0 86 1c 80 7b fa 0a d5 27 fc af bf e5 fb ee 24 d5 ed 25 dd 97 b1 8c 54 f7 f4 e7 9f 4e 31 9f ef 1f b6 be 6a dd 1f b4 3b d2 57 de 45 ad d8 40 7f d7 6d ad e6 95 b2 08 05 ae f6 0b cc 83 86 c8 94 12 54 67 23 20 f7 c1 d5 5a 63 0f bf d2 61 dc 08 d8 6d 6e ef e2 45 51 ce Data Ascii: +@=KiZgpBCQ,\|W0ex!Q& ik9prn,r"Cw7~<c]wm:mqjunt!F.9cBdNw!h$A9Ko,;IRA{'$%TN1j;WE@mTg# ZcamnEQ
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 3c f3 8e c6 ac 4f ec 7f 5f 03 71 d3 ee b1 c7 21 54 83 93 8c a9 07 cc 33 ea 33 51 ca b4 23 94 a4 97 69 2c 28 d4 9e 71 8b 7d 49 94 5a 55 b2 ff 00 d9 be b1 1a 97 92 ca e8 01 dc ec 2d d8 64 f0 b9 3c 0e ff 00 2a a9 d6 61 52 33 ce 2d 3e a7 73 15 29 4e 9f eb 4d 75 ab 0a 52 95 b9 18 a5 29 40 29 4a 50 0a c8 b4 88 13 93 db fb fe 95 d0 05 76 44 d8 e7 f6 0a c3 d0 92 93 4a 49 b2 dd a1 5f 90 56 38 bc 80 b6 1a 4c 7d e1 1e bb 48 e6 3f 51 90 77 7a 82 bd aa c9 aa f4 40 8e d1 ef 22 93 7e 00 12 86 5e 56 27 3b 19 92 4d f9 00 44 fb 58 36 ec ae 7b 11 5a e3 4c bc 71 2a 60 fe ba f1 81 8e 48 e3 15 b9 7a 2e ef 77 89 03 8c a4 97 17 d6 e5 0a 8c 3c 50 b4 22 45 6f 43 88 ee a2 00 9c 7a fe 7c 2c 7b a9 87 6a 70 79 6b 25 cd 71 3d 36 16 bd 1c 54 77 64 b3 e0 de 89 f0 e8 b1 4e d1 f4 08 b2 3c Data Ascii: <O_q!T33Q#i,(q}IZU-d<aR3->s)NMuR)@)JPvDJI_V8L}H?Qwz@"~^V';MDX6{ZLq`Hz.w<P"EoCz\|,{jpyk%q=6TwdN<
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: ce bb e5 dd 24 37 32 46 c0 0c f8 7e 1c 0d 03 ab 64 e0 36 66 01 73 c6 71 54 fe a0 eb ab 67 5d b7 16 d7 48 0c 67 73 62 de 54 2d 90 04 6a 63 98 ca cd 8f 36 4c 61 70 0f 3e 95 a7 bd b6 fb 48 be 10 da 3d be 6d 4c ef a8 78 8a 3c 37 97 f9 b5 e4 b6 a8 ac f8 65 18 11 b1 3b 09 1b 8f 04 80 0d 4f 7b 2f d5 a1 d4 b4 c0 8d 20 17 b0 02 b7 03 80 d2 28 76 31 4a 54 fc 41 97 6a 92 bd 98 1e 06 54 1e 55 5d 9b 2a 54 15 7a 91 56 bb 4e d7 ba cd ab bc ed aa f2 3a d8 5c 4d 1f ad f4 68 c9 a7 6b ab da ce e9 3c af 9f 1b f7 9a 93 db 15 9d bc 77 82 e6 c9 e4 c4 bc b6 62 9e 1d 92 81 c9 56 91 14 3e e5 23 3b 37 60 86 cf 71 9a bd dc be 3c 46 63 fd 2c 3b 43 91 c7 88 84 e0 3e 07 66 07 39 ff 00 e5 8d e7 d4 fd 2d 6f 75 0b 45 28 64 92 0c e1 d3 82 70 7b 9e 3c c3 19 1c f1 e6 cf 7c 11 ad af ba 30 db Data Ascii: $72F~d6fsqTg]HgsbT-jc6Lap>H=mLx<7e;O{/ (v1JTAjTU]*TzVN:\Mhk<wbV>#;7`q<Fc,;C>f9-ouE(dp{<\|0
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 6d 11 24 7d e4 70 46 5f ea 3e f3 7a 73 ff 00 2f e1 8a d6 5a b5 fc 93 4d 25 c4 c7 74 93 cb 24 b2 b6 15 77 49 2b 97 76 da a0 22 e5 98 9c 28 00 7a 01 58 b4 ae bd 1c 2d 2a 37 fa 71 4a fc 95 8e 3d 6c 45 5a bf f9 24 df 5b 14 a5 2a 72 11 5e e0 fb 2b 7b 3a 33 f4 3d fa da e2 3b ad 6d 6f 63 13 c8 19 15 96 25 6b 78 21 2e bc 98 77 89 81 60 0e 0c d2 f0 d8 db 5e 1f af 6b 7d 9d 2f 2f 2c 74 fb 28 e1 ba fe 96 cd ee 4c 37 59 5b 78 ad cd cc ed 22 5a c3 bc 1b a9 12 49 9e 49 1a 36 55 8c 72 fe 61 b5 6b e2 2b 7d 34 9d af 99 3e 1e 83 aa da 4e d9 15 1f 61 bf 65 9d 7e 2d 5a d2 f6 fd 6d ed 62 b0 bf b7 b8 21 a5 8e e2 49 c5 ad c4 32 85 8d 61 66 0a 24 01 80 2e 54 8d a7 2b db 3e e9 be 80 bc 6f 18 66 42 e8 ea 1d 0e 1d 0b 29 01 d4 fa 11 9c 8f a8 ad 61 d2 3d 57 a9 4d 04 77 42 4b 79 cc 89 Data Ascii: m$}pF_>zs/ZM%t$wI+v"(zX-7qJ=lEZ$[r^+{:3=;moc%kx!.w`^k}//,t(L7Y[x"ZII6Urak+}4>Nae~-Zmb!I2af$.T+>ofB)a=WMwBKy
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 64 df b2 56 b5 dc 5f 91 15 5e a7 d2 7a ee d2 f7 a7 17 4e 82 1b eb 1f 08 45 12 cf 0a 35 ca 23 47 24 6e 5d 24 67 4d de 21 25 4a 17 c8 0f 81 bb 8c f9 8b 52 b5 d8 c0 03 b8 32 23 a3 63 1b 95 d4 1e d9 38 c1 c8 23 3d c1 ab a7 b3 ee a9 78 ad 67 b5 91 91 2d a6 12 24 92 9d e6 68 67 9a 09 4d bb 44 88 43 90 24 87 73 1c 63 d0 91 91 9a 78 ea 4e ac 14 a3 aa 69 fc 5c 7a 8b db 2e a4 69 56 94 2a 68 d3 5d bd 7c 17 4e 9c 4d 93 79 a0 e9 e8 25 37 6f aa b7 8d 67 6d 6f 3c 8a 74 fb 68 9c 5b 9b 6d 93 17 6b 89 19 5f 75 b2 70 ca 7d 7b e6 be 75 69 34 e6 8d bc 1b 1b 8b a1 72 96 b1 3e fb e9 65 96 76 b2 45 8a 36 d9 6d 6a 4b 3e 22 62 db 18 64 b3 9e dd b5 cd 9e 9f 66 b0 b5 bc 97 46 4f 78 9a df 3e 1a 10 60 90 2b b2 b6 58 b2 b0 65 7d 84 8c 10 7b f6 e7 ea cb 52 b5 f7 54 b4 41 33 47 33 ca 09 Data Ascii: dV_^zNE5#G$n]$gM!%JR2#c8#=xg-$hgMDC$scxNi\z.iV*h]\|NMy%7ogmo<th[mk_up}{ui4r>evE6mjK>"bdfFOx>`+Xe}{RTA3G3
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 8b fa 1c d6 59 71 e5 7b 69 d8 76 ff 00 6f c2 57 9a 75 e3 c1 e7 9f 0d 2f 6b eb a7 41 9a fd 55 ac 6a 53 32 44 92 43 15 e4 73 05 60 81 55 a7 b6 b7 ba 9a d9 60 7d bb b2 e2 cd a3 76 1b 9b ef 26 42 db 7c 15 8f 9d 69 20 b4 d5 9c cf 24 4b 65 aa 69 32 0b bc 85 60 6c ef 2d c9 91 4b 33 81 0a 47 32 cb 22 fe ae d2 cb 81 bd 0a fd 7d a0 fd ae d9 e8 50 59 e9 f6 88 b7 73 30 9d a5 8c 5c 98 1e d1 37 2b 46 d2 08 32 3c 47 77 6d b9 c8 2a b2 13 bb c4 25 bc 7b d7 7e d2 6f 2f 4b 29 d9 04 4c 5f 30 c1 e2 79 95 9b 21 65 91 dd a4 90 01 81 8c 80 70 0e 2b 34 f0 18 8d e8 c9 bc ee 9b 6d e9 cd 25 da cd 27 b4 70 fb b3 84 63 68 d9 a4 92 d7 93 6d f1 c9 70 b9 4a a5 29 5d f3 cf 8a 52 94 02 b7 ff 00 d8 c7 a6 7c 5b cb 9b d7 07 65 b4 02 18 ce 0e 0c d7 0d 92 55 f3 8c ac 31 38 23 07 89 47 6e 33 a0 Data Ascii: Yq{ivoWu/kAUjS2DCs`U`}v&B\|i $Kei2`l-K3G2"}PYs0\7+F2<Gwm*%{~o/K)L_0y!ep+4m%'pchmpJ)]R\|[eU18#Gn3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50231	142.250.189.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	687	OUT	GET /vi/lqj9G6oisic/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 42771 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:32:06 GMT Expires: Thu, 16 May 2024 00:32:06 GMT Cache-Control: public, max-age=7200 ETag: "1712190782" Content-Type: image/jpeg Vary: Origin Age: 318 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:24 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 10 0e 10 10 10 10 10 10 0e 0e 10 10 10 10 0f 10 10 10 0f 0f 0f 10 0e 10 0d 0e 0d 10 10 0d 0e 10 10 10 10 10 10 0d 0e 0e 10 15 10 0e 11 12 13 13 13 0e 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 15 12 15 15 15 15 15 18 15 15 15 15 15 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 02 01 08 09 ff c4 00 4f 10 00 02 01 03 02 03 05 04 07 05 04 08 04 06 01 05 01 02 11 00 03 21 04 12 05 31 41 06 13 22 51 61 07 32 71 81 08 14 23 42 91 a1 d1 15 52 b1 Data Ascii: JFIFh"O!1A"Qa2q#BR
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 77 f5 03 e9 f9 fe 95 ef ec f6 f3 1f 9f e9 53 45 45 84 ce 8a 79 fb 3d bc c7 e7 fa 51 fb 3d bc c7 e7 fa 51 45 16 13 3a 29 e7 ec f6 f3 1f 9f e9 47 ec e6 f3 1f 9f e9 45 14 6a 09 9d 14 f3 f6 7b 79 8f cf f4 a3 f6 73 79 8f cf f4 a2 8a 35 04 ce 8a 79 fb 39 bc c7 e7 fa 57 56 b8 5b 12 04 ae 4c 75 eb f2 a2 8a 35 04 c6 8a 9b bf d9 a7 01 8e e4 21 62 60 9c cc f2 f0 f4 8a 61 fb 3d bc c7 e7 fa 51 45 01 c0 a6 74 53 cf d9 ed e6 3f 3f d2 8f d9 ed e6 3f 3f d2 8a 28 b0 99 d1 4f 3f 67 b7 98 fc ff 00 4a 3f 67 b7 98 fc ff 00 4a 28 a2 c2 67 45 3d 1c 35 bc c7 e7 fa 50 78 6b 79 8f cf f4 a2 8a 35 04 ca 8a 79 fb 3d bc c7 e7 fa 51 fb 39 bc c7 e7 fa 51 45 16 13 3a Data Ascii: ("((B(("((B(("wSEEy=Q=QE:)GEj{ysy5y9WV[Lu5!b`a=QEtS????(O?gJ?gJ(gE=5Pxky5y=Q9QE:
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 2e ed c9 0a cb 66 cb 09 1f 79 56 e0 5e a2 b5 4f 67 de c2 f4 f2 d7 f5 3a 8b 5a cb 2f 06 cb 5b ba 55 2e 99 66 77 77 0c 77 1f 09 c2 dc 60 46 f2 d3 d3 2c f6 9d c3 6c e9 b8 98 4e 1a e4 ec 36 b6 6d 73 73 65 f2 63 62 3e 59 b3 b6 41 2c 65 99 67 10 32 4b 9b 93 15 3d ed 68 04 d5 5f 9b f8 5e 83 07 e1 9e 8b d4 0b b1 b1 66 95 d2 35 85 de 21 68 11 58 1b 8a 20 38 0f 9f d5 63 7c 7f 83 5c b2 f7 ad 5e 43 69 d0 05 75 6c 14 60 56 56 79 72 93 23 0c b0 44 83 57 4f 60 de c7 b4 ba dd 16 a3 5d ad d5 5c d3 e9 f4 f7 45 98 b2 81 98 36 db 6c 59 e6 dd c3 b4 f7 a8 a0 2a fe f1 26 22 ae 7f 4c 9d 0c f1 50 c0 2e e3 a5 b1 de 41 c6 f0 d7 84 c4 e4 ed 28 33 f7 42 d4 bf d1 5e d0 b8 38 86 81 b0 9a eb 05 d0 40 01 6e 22 ec 24 7f 7a 18 1f 85 91 5d 97 ea d2 4b 79 5f 38 c6 f0 84 cd 6c b7 a6 c5 d7 35 Data Ascii: .fyV^Og:Z/[U.fwww`F,lN6mssecb>YA,eg2K=h_^f5!hX 8c\|\^Ciul`VVyr#DWO`]\E6lY*&"LP.A(3B^8@n"$z]Ky_8l5
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 15 61 94 e7 64 f8 43 80 2c a5 49 d0 e2 8b a2 8c f9 0b 83 dd 2e 86 8d ab 48 16 4f 17 c8 23 90 b2 ff 00 60 be c8 57 88 26 a3 53 a9 bc da 6e 1f a4 11 72 f2 80 5d ee 11 bb 62 6e 56 1e 05 2a 5b c2 c4 ef 45 51 24 95 d0 34 bf 47 de 15 aa 5b a9 a0 e2 5a 8b ba b4 b4 d7 51 2e da 02 d9 d9 b4 78 fe c2 d9 82 59 57 c2 d2 37 4c 18 22 ac 5e d5 6c ae 9a c6 93 81 68 fc 66 de c3 7c a8 1b af 6a 2e 10 ca 1a 3a b3 b1 ba 41 e5 36 bf 76 b8 f6 2d a2 6d 0f 1e 5d 33 9d c4 1b b6 19 a3 68 3b ad 9b 8a 40 63 20 12 ab 1c e6 44 73 ac f2 f5 17 09 c3 1a 3c b6 1a 4f b9 ec 17 63 03 e0 e8 9f d2 9f 95 33 c8 97 c3 74 ac 60 ad e3 6d 79 9d b5 ee 4e db 8d ab de be 63 f6 67 d9 57 d7 eb 34 fa 44 60 8f a9 7d bb 98 48 40 15 ae 5c 62 a0 82 4a a2 31 89 12 40 12 39 d7 d1 9a 5f a3 ef 05 6d 4f d5 53 89 ea Data Ascii: adC,I.HO#`W&Snr]bnV*[EQ$4G[ZQ.xYW7L"^lhf\|j.:A6v-m]3h;@c Ds<Oc3t`myNcgW4D`}H@\bJ1@9_mOS
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: e4 75 93 6e f2 72 0f 6d c8 12 3a 10 40 65 38 20 62 77 ee 31 d9 9e 1b aa e1 f7 b5 fc 32 ed e2 ba 6b 8a b7 ac df 11 01 f6 01 b6 54 37 df 0c 0c b8 6f 10 c1 15 ef 6d 1f eb fd 97 bc f7 bc 57 f8 4d e4 36 ae 9c bf 76 c6 da b2 93 cc 8e ea e3 2e 79 f7 76 ce 4a cd 56 0c b9 3c 5f 06 50 01 ab 15 c1 4d ea 7d 03 13 fc 7f f9 0e 9f 2b 9c c0 ed 0f 0f 00 39 a4 f0 76 d8 8e 3e bf 3a c2 fd 8c 7b 3b bb c4 f5 8b a6 b4 76 2c 1b 97 ae 91 2b 66 d2 90 19 a3 12 c4 90 aa b2 25 8f 30 03 11 b4 e8 be 8e 9c 2e e5 c1 6a df 1a dd 75 9b 62 a0 b5 6c 92 f9 11 86 ce 7c 8d 4a 76 6f 86 7e c4 e0 70 7c 3c 4b 8b 8d cf 88 7b 16 02 e1 3c c1 4b 6d f1 17 6f 39 ce cc 55 34 5c 26 ee 87 55 a1 b9 70 6d 2e 74 fa a5 5f 10 2a 86 f1 85 69 db e2 2a 92 56 70 18 03 ce 97 99 d4 4c 52 06 b4 5f 1a bd ac ec b6 fc 3b Data Ascii: unrm:@e8 bw12kT7omWM6v.yvJV<_PM}+9v>:{;v,+f%0.jubl\|Jvo~p\|<K{<Kmo9U4\&Upm.t_iVpLR_;
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 2a f6 36 02 8e ff 00 41 9c 1f fd 77 ff 00 da 4f d6 9f e8 7e 8b da 7d 4a 86 d0 f1 45 bc 12 ea 2d e2 d6 84 2a 37 bc 54 a3 66 e0 19 55 6c 1c c9 1c eb 71 ff 00 40 5c 2f ca e7 fb f3 53 1c 0b 87 e9 f8 6d ad 4d 9b 16 ee aa 2d 9b 9a c3 75 db 7a 31 55 09 b5 48 62 d2 05 b0 4a ed 11 82 27 76 1b 14 b9 37 fe a0 6d 7b 13 6b 9f 9d 8f d2 3c 3a c3 74 c6 42 40 01 ed 68 6f ec 49 f9 2f 9d 74 5f 46 fd 05 e7 6b 3a 7e 2f de 6a 61 f6 db ee 54 8d c8 0c ee da d3 b4 11 98 e9 ca be 65 e3 1a 62 8e c8 d1 ba db ba 34 64 6e 46 28 d0 48 12 24 18 24 0c 74 15 f5 77 d1 a5 fb 9f af f1 0b 9e e6 8f 48 ec 58 f2 2c c0 dd 3d 32 62 d1 c0 fd e1 83 22 be 4b d5 dc 27 2d 96 62 4b 1f 36 39 63 f3 33 56 c1 c8 74 f1 6b 70 e6 fe 89 7f 13 f4 98 7a 5e 73 b1 62 71 76 90 db 26 bf 31 16 46 df 30 9b c5 7d 19 f4 Data Ascii: 6AwO~}JE-7TfUlq@\/SmM-uz1UHbJ'v7m{k<:tB@hoI/t_Fk:~/jaTeb4dnF(H$$twHX,=2b"K'-bK69c3Vtkpz^sbqv&1F0}
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 2b c6 2d 5d d4 11 3a ad 5e 9e d9 59 94 b5 65 af 22 2d a4 9f ba a8 48 e9 b9 8b 31 cb 1a e4 74 fc 3b 91 d3 b8 55 92 5a 0f 6b ef f3 2b e8 3f 16 7c 42 46 2c 5d 32 27 b5 c5 ac 63 65 7b 78 71 6f 0d 0e ee d6 dd fb 9f 4d d6 dd ed dd 4e 9f 43 c2 74 44 cb d9 d2 8b b7 a4 cb 1b 8e 10 16 6c c9 2d 70 5e 24 9e 64 9c f3 a9 8e 1f ec 8f 8c 77 36 d5 75 96 ed da da 19 2d fd 6b 51 6f 60 61 31 b1 6d 00 0e 4c 8f 39 a7 fe d9 fb 0b ac d6 71 70 46 9e e1 d2 83 a7 b3 de 8d bb 7b a1 b5 ae b6 48 c2 97 b9 d3 3b 71 38 ac 63 e9 6f c5 ed 5e e3 d7 55 c2 b5 bd 35 ab 5a 6c 89 02 10 dd 68 8e 5b 6e 5f 61 e8 57 20 c5 51 b8 9e 3c f2 3d f6 06 c0 55 8b af ba d3 93 f1 09 e9 5d 2b 0b 1b 14 c6 e7 16 b9 ef b0 d7 d1 71 b1 7c d1 16 41 ee b5 ce cb 76 0f 47 c3 f5 16 6f 71 1d 6d 8b 9a 86 bd 6d 6c e9 6d 36 Data Ascii: +-]:^Ye"-H1t;UZk+?\|BF,]2'ce{xqoMNCtDl-p^$dw6u-kQo`a1mL9qpF{H;q8co^U5Zlh[n_aW Q<=U]+q\|AvGoqmmlm6
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 7b c1 c7 da da ff 00 d4 b7 ff 00 3a d7 41 79 55 35 d9 be 0a 75 3c 4a d6 9e 27 bf d6 2d b2 3f ba d7 a2 e7 e1 6f 71 f9 57 d2 fe d6 87 d6 fb 43 6a c0 12 96 df 4d 60 8e 9b 56 2e dd 80 71 c9 d8 7a c7 5a cb 3e 89 dc 28 5d ed 15 b2 79 58 3a bb ff 00 12 a1 ed 2f e0 d7 83 7f 96 b6 9f 64 dd 98 d4 37 1a bb ac d4 58 bb 6a d2 b6 aa f8 7b 88 c8 b2 e5 95 04 98 92 2d dc 3e 78 53 f1 ae 57 52 69 7e 88 c0 e5 c2 fe 41 7b 9f 83 a6 8f 17 f1 59 4e 70 05 90 b8 32 c8 04 b9 db 0a f5 ef c2 87 f6 bf 61 b8 67 1c 4d 55 b1 16 ee b2 df 81 c8 83 e0 d5 5b e7 92 7c 4d e4 3b d5 f2 ae 7d 92 bf d7 7b 42 fa 80 65 15 f5 17 c1 8e 68 a0 da b1 82 01 07 c7 6c e4 4e 3e 26 8d 1f 17 6e 3b c1 5e ea a9 b9 ad d0 ea ee 10 aa 25 de c5 f7 2f 6c 01 cc 8e e5 d0 40 e6 74 e6 94 f6 5f c3 75 1c 37 43 c5 b5 b7 ad Data Ascii: {:AyU5u<J'-?oqWCjM`V.qzZ>(]yX:/d7Xj{->xSWRi~A{YNp2agMU[\|M;}{BehlN>&n;^%/l@t_u7C
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: b7 64 40 81 cc 1f 5a d1 90 1d 33 9b b1 da 37 1f d4 8a af 9a e3 74 79 21 e9 b0 4b 4f 6d bb 2e 26 72 3f 24 6f d5 ab 9f cb ef c2 c9 f5 7d a6 6b 9c 37 45 c3 ac e5 9e ed c7 b8 3f 79 ee 6a 1d 74 d6 ff 00 13 bc 8f 5b 66 ac 3d a4 ec f2 fe d5 d0 f0 d4 32 9a 51 62 dd cc 61 9d cf d6 b5 4f d6 77 ab 75 c0 80 39 0a 9f fa 34 7b 32 bc ba b6 d4 ea 6c dc b4 ba 75 fb 25 b8 a5 4b dd 79 1b 80 39 22 da 4f 4f 79 d6 32 b4 fb d9 37 66 b5 37 38 e5 ed 5d fb 17 6d db 9d 45 c4 6b 96 d9 01 2c 45 bb 4a 37 47 8b ba 62 7a fb a6 b1 c5 04 8f 6b 0b c1 b2 5a 3e 4d 6f f2 57 a3 cf ea b8 98 f3 64 33 1d ed d3 1c 72 c9 76 3c d3 cc 76 af fe b4 b4 91 b7 17 5d 94 ff 00 b6 de 2a 34 0b ab d4 82 3e bb c4 76 69 ec 99 f1 59 d3 58 48 24 7c 2e 3d db 92 3e f5 eb 40 fb 82 a8 9f 47 8e d9 70 ed 05 a7 7b ce ff Data Ascii: d@Z37ty!KOm.&r?$o}k7E?yjt[f=2QbaOwu94{2lu%Ky9"OOy27f78]mEk,EJ7GbzkZ>MoWd3rv<v]*4>viYXH$\|.=>@Gp{
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: fb d3 fa 54 0b 76 af 55 f5 93 aa fa cd f1 ab 3c f5 02 eb 8b c4 00 04 17 04 12 b0 00 d9 ee c0 02 22 a1 cd 7a ad 53 48 b2 b5 3e 05 ed d3 8b ee da da fb c4 44 09 5b 3e 99 9e ea 7f 13 e7 51 fc 6b b4 da 8b ae d7 75 37 ae de 70 61 7b c6 2e 02 b1 5f 0a 82 61 54 8c c2 80 26 0d 67 b6 de 08 3e 47 f1 ab ca b0 b8 aa 39 4f 88 4c 4c 08 2a 03 18 e5 eb 27 f8 00 6c a8 f0 4a 77 c3 9b 70 2c 67 70 32 ac a4 02 08 4f 0f ca 39 c0 9c 4d 58 b8 0f b4 9d 76 99 05 bb 5a ab d6 ad 02 c4 5b 40 8d 27 20 81 de 2b 80 77 0d c7 6f 32 4f 99 35 54 d1 69 1e 18 2f 8b 71 18 07 23 dc 00 ed 39 f4 f9 c7 5a e1 f8 7b 03 ba e3 8f 0b 10 16 4c 8f 53 11 89 24 c0 3c e6 63 9d 58 90 a8 d6 9b d9 4e f6 eb b4 9a 9d 62 a3 6a 6e 3d e6 da 59 4b b7 85 44 ac 94 41 0a bb 84 a9 20 09 23 91 8a cc ed 2c 91 1d 7c b9 f3 Data Ascii: TvU<"zSH>D[>Qku7pa{._aT&g>G9OLL*'lJwp,gp2O9MXvZ[@' +wo2O5Ti/q#9Z{LS$<cXNbjn=YKDA #,\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50232	142.250.189.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	687	OUT	GET /vi/xQOMy02LbNQ/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:24 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 31900 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:22:31 GMT Expires: Thu, 16 May 2024 00:22:31 GMT Cache-Control: public, max-age=7200 ETag: "1713343212" Content-Type: image/jpeg Vary: Origin Age: 893 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:24 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 10 0f 0f 0d 10 0d 0d 10 10 0d 0f 0e 0d 0f 10 0d 0d 0d 0f 0d 0e 0d 0d 0d 0d 0d 0e 0d 0e 0d 0d 0d 10 0d 0d 0d 0f 0d 0d 0d 0d 15 0d 0e 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 01 02 07 08 09 ff c4 00 4d 10 00 02 01 02 04 02 07 03 08 07 05 07 03 05 01 01 01 02 03 00 11 04 12 21 31 05 41 06 07 13 22 51 61 71 32 81 91 14 23 42 52 a1 b1 c1 f0 15 Data Ascii: JFIFh"M!1A"Qaq2#BR
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 15 d1 3f d9 06 27 f5 98 6f df 97 fa 35 93 d4 fe 27 f5 b8 6f df 97 fa 35 7b d9 97 3f 03 33 fd ab 69 f6 88 e7 54 57 47 ff 00 63 98 af d6 e1 bf 7e 5f e8 d6 c3 a9 ac 57 eb 30 df bf 2f f4 68 f6 65 cf c0 c3 da b6 9f 68 8e 6d 45 74 91 d4 ce 2b f5 b8 6f df 97 fa 34 0e a6 b1 5f ad c3 7e fc bf d1 a3 d9 b7 3f 03 0f 6a da fd a2 39 b5 15 d2 ff 00 d8 be 2b f5 b8 5f df 97 fa 35 83 d4 c6 2b f5 b8 6f df 97 fa 34 7b 36 e7 e0 61 ed 5b 5f b4 47 35 a2 ba 57 fb 17 c5 7e b7 0d fb f2 ff 00 46 b2 3a 97 c5 7e b7 0b fb f2 ff 00 46 8f 66 dc fc 0c 3d ab 6b f6 88 e6 94 57 4d 1d 4a 62 bf 5b 85 fd f9 7f a3 47 fb 13 c5 fe b7 0b fb f2 ff 00 42 93 d9 b7 3f 03 0f 6a da fd a2 39 95 15 d3 bf d8 96 2f f5 b8 5f Data Ascii: Q@Q@Q@Q@Q@Q@Q@?'o5'o5{?3iTWGc~_W0/hehmEt+o4_~?j9+_5+o4{6a[_G5W~F:~Ff=kWMJb[GB?j9/_
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: a2 4f ca fe 84 94 bd e5 f5 38 67 66 72 8d 86 80 5a db 79 6f f6 d6 bd 8d 2f 30 bd ac 7f d7 98 bd 61 8d 72 f8 3b e7 aa 10 29 49 98 86 f6 d6 9c 5a 82 29 46 64 4b 2d 63 2d 2b 58 2b 4a 02 6c 2b 53 4a 11 58 cb 40 09 da 8b 56 e4 56 2d 40 1a 81 58 22 b7 b5 0d fe 94 31 09 4e 8a f0 c1 23 b3 30 bc 70 a9 92 4f 4b e5 55 d0 de ec e4 0f 8d 43 b0 ab ef 46 a1 ec f8 7c b2 90 33 62 a7 58 56 ff 00 ab 81 43 35 bd 65 90 0f f2 79 d5 0d a9 a9 e5 8f 92 c2 46 84 56 a5 69 42 2b 14 a3 72 25 6a c1 14 b5 ab 52 b4 0b 91 12 b5 82 29 52 2b 52 28 0c 76 13 22 b5 b5 2a 6b 5b 51 80 c8 99 15 82 29 6c b5 82 94 0a 84 6d 58 22 97 29 58 c9 40 b9 10 b5 16 a5 48 ad 0d 20 1a 85 ad 82 50 29 58 d6 94 1b 3d 16 29 45 15 a5 a9 41 5d 6b 96 87 9c 23 60 69 54 a4 90 52 c0 d3 04 cb 33 5b 2d 68 0d 6e 29 ac 95 Data Ascii: O8gfrZyo/0ar;)IZ)FdK-c-+X+Jl+SJX@VV-@X"1N#0pOKUCF\|3bXVC5eyFViB+r%jR)R+R(v"*k[Q)lmX")X@H P)X=)EA]k#`iTR3[-hn)
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: cb e4 88 11 6d fd ff 00 0b 1a b4 f4 43 a6 66 1f 9b 98 bb c7 f4 5f da 31 f9 1b ea cb f6 8a a8 b9 e9 d5 8d 78 6f 1e 84 d5 a9 46 b5 37 4a 7b 30 c5 f1 99 b1 a7 b2 8a 37 8e 33 a3 16 0c ba 6c 73 1b 58 7e c8 d4 e9 57 8e 8b f0 05 c3 a6 54 d5 8f b4 d6 d5 8f 97 82 df 65 e5 49 9e 95 e1 42 66 f9 44 76 1a d8 1d 4f 96 5b 5e fe 56 ae 69 d2 ae 94 c9 33 e7 46 78 d1 7f ba 50 6d 7b 7d 27 b6 e4 db 63 4f bc bb ba e2 12 fe 23 c2 29 d9 58 5b d8 47 f8 6b 2c bb 74 85 b2 62 12 50 18 02 44 32 12 0d 8b 6e 84 1e 7b 95 bd 58 c9 bd 50 f1 dc 48 c9 85 85 8b 10 5c 47 a1 6b fc ea 4c 01 37 f1 3a e9 7a ba e0 b4 55 f4 15 db 7a 29 56 6e d9 d3 97 f2 bc 1c 1f a5 b4 61 0b 95 35 d4 c9 15 ab d2 d2 56 8c 2b ab 4c e4 d8 85 ab 46 5a 58 ad 6a 45 2e 44 11 15 96 5a df 2d 64 2d 36 6f 47 f4 1f 0f 79 1c 37 Data Ascii: mCf_1xoF7J{073lsX~WTeIBfDvO[^Vi3FxPm{}'cO#)X[Gk,tbPD2n{XPH\GkL7:zUz)Vna5V+LFZXjE.DZ-d-6oGy7
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 77 60 e3 bc 0a 98 c9 59 ae 05 8f 2d 6a cc 68 25 1c a2 19 56 cc da 91 e3 6e 1f 8c 68 9b bc 08 be ea da 30 f8 d8 8b 6b b8 15 62 4c 5e 6d 76 5d 35 6d cd fc 07 2a e9 5d 20 e0 b8 7c 7e 2f 13 96 68 de 30 ca e9 36 15 10 24 ae 57 29 90 82 a0 8d bb d1 de d7 d4 6f 50 5c 4f ab 0c 48 b8 49 61 91 5a c6 ed 74 6d 36 04 6b f6 1f 75 5a 7c 2a b5 58 2a 91 89 56 3c 72 8d 19 ca 9c e4 54 67 0a 35 d2 fe 9e 1a fa f8 52 11 86 91 b2 22 96 76 d0 2a 8b 9d 46 fe 00 03 e3 6a ba 70 ce ab 71 0c 47 6a f1 c6 a3 7c bd f6 37 f0 b5 80 d3 c6 ba 27 00 e8 fc 38 75 c9 1a 5a fe d3 36 ae c7 fc 47 f8 55 ab 3e 01 52 72 fe 2e 88 cf e2 1e 93 d3 84 71 4b 56 54 7a 1b d0 76 40 8d 88 60 c6 3b 94 8d 7d 84 2d 72 6f e2 d7 3f 65 5c ca 53 99 05 24 c2 bb 0b 7b 78 50 87 2c 0e 16 ea ee a5 c4 f9 a6 20 e2 b0 05 2a Data Ascii: w`Y-jh%Vnh0kbL^mv]5m] \|~/h06$W)oP\OHIaZtm6kuZ\|XV<rTg5R"vFjpqGj\|7'8uZ6GU>Rr.qKVTzv@`;}-ro?e\S${xP, *
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 8d cb 12 6f 1c 66 4b 3a b4 84 0c a4 1a aa 70 0e 91 08 5a 08 25 c3 48 b2 62 19 d7 13 31 01 82 62 99 8d e3 91 ec 41 cc d6 51 73 6c a4 5b 43 5d 9f a4 d2 a2 e3 b0 f0 82 01 18 49 c2 a0 fa 2a 1e 15 16 b6 c0 aa 90 07 80 f2 bd 54 7a db e8 d4 4f 87 c4 62 2c c9 2c 68 26 cd 1b 15 0e d0 90 c9 da 20 ee c8 05 b7 22 fa 6f 59 95 92 84 f9 59 b9 65 5b 0b 25 53 8f 60 e7 86 5c d8 39 db 0f f2 95 31 e2 00 17 8c 28 20 19 23 46 f9 b4 96 cd bd 85 ed 72 6a c5 d1 cc 4e 2b 0b 14 91 c2 d8 79 d5 ee dd 9e 22 3e c9 49 28 10 f7 e1 bd b3 65 17 cc ad cf 7a c7 06 c5 07 41 dd 60 48 0e 55 fd a0 18 5c 16 bd f7 e4 39 53 d3 55 a1 79 56 0f 47 b1 ad 53 87 d1 a8 9e 56 e7 19 ea ef 00 b0 3c b0 3c 2b 86 98 b1 6e c5 4b 18 fb 32 4b 29 89 9d 99 a4 4d 4f 78 92 79 69 6a b9 d4 af 4e ba 3a 31 11 77 7b b3 c3 Data Ascii: ofK:pZ%Hb1bAQsl[C]I*TzOb,,h& "oYYe[%S`\91( #FrjN+y">I(ezA`HU\9SUyVGSV<<+nK2K)MOxyijN:1w{
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 61 97 ef 15 3b c3 e6 49 06 64 74 71 fe 16 0d f7 1b fd 82 b7 95 c5 37 b4 8c 79 5b 54 8e f1 61 6a ab f5 9b c6 1e 0c 2b ba 1b 33 11 18 23 42 33 6e 47 81 b7 3a b8 3a f2 b7 95 44 74 bb a3 a3 13 03 c0 4d 8b 6a a7 90 71 b5 32 be 65 4d a4 49 6a 94 6a c7 9b 6c 9e 5c 96 42 49 24 dc 9d 49 3a 92 7c 49 3a df d6 a4 3a 29 c3 7b 59 e2 8a da 3b a8 3e 9b 9f b0 56 9d 23 e1 0f 04 8d 0c 82 cc 87 d4 10 75 0c 0f 35 23 9d 5d 3a 91 c1 2a c9 2e 36 4f ee f0 91 96 f5 72 08 51 f8 7b eb 91 a7 0f e2 62 67 7b 5e a2 f0 5b 8f 6d 30 75 a0 92 e0 e7 80 70 e9 25 13 92 7b 3c 28 01 a1 75 b5 9d a5 07 54 8e d6 cc d7 16 b0 23 5b 0a ec fc 23 81 ca ee b8 ac 64 a2 6c 42 8e e2 a0 b6 1b 0d 98 6a 20 8f 5e f1 1a 19 98 96 37 36 b0 36 a8 6e a7 7a 2c d1 23 63 27 1f f1 58 b0 18 83 ff 00 26 0d e3 85 7c c0 20 Data Ascii: a;Idtq7y[Taj+3#B3nG::DtMjq2eMIjjl\BI$I:\|I::){Y;>V#u5#]:*.6OrQ{bg{^[m0up%{<(uT#[#dlBj ^766nz,#c'X&\|
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 7d ab f7 b2 e7 cd 90 8c d9 74 20 9f 75 76 af ec ab d6 34 58 66 93 0f 33 a8 49 b2 e5 24 8b 2b 20 ca 33 5e d6 0e a7 e3 6d ab 83 3e 14 2c 6c 72 92 72 23 02 da 35 dd 44 96 22 ff 00 54 83 f0 a8 3c 11 94 5c dc 85 b5 ec a4 6a 18 ed ef b7 ae 82 99 2a 7c cb 03 b9 9a 67 be fa d0 eb 87 09 06 1a 4c 93 47 24 8e 8c 91 a4 6e ae 4b 30 22 e7 21 36 02 f7 37 b6 da 57 80 38 c7 04 65 63 20 05 96 46 69 2c 09 ba dc 93 63 a0 f1 04 1f 23 52 2e e4 8b db 30 bf 78 58 09 92 c3 70 57 75 b7 e7 95 36 c0 71 d9 63 2a af 69 61 cd 9a c4 28 ee 9b 06 ef 01 7f 67 96 c3 c2 96 8d 2e 40 93 c9 0b 8c c6 b9 d1 dd f4 d7 52 76 23 29 d3 cc 0a 6c f2 80 6e 5b 35 c7 3d ea e7 c6 b8 1e 71 9e 22 0a eb dc 72 3b 40 0e c7 37 35 d4 69 b8 d2 a0 70 dc 13 20 cc e0 5f 90 df fd 2f 53 f3 11 b2 32 1c 41 26 c3 41 52 9c Data Ascii: }t uv4Xf3I$+ 3^m>,lrr#5D"T<\j\|gLG$nK0"!67W8ec Fi,c#R.0xXpWu6qcia(g.@Rv#)ln[5=q"r;@75ip _/S2A&AR
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: e9 82 8e 59 a6 cb ae 56 90 05 45 fd a2 01 ee d3 38 1d 4a 91 ba 8f 2f de 27 a5 30 a7 2b 29 f3 fc b1 f5 26 b2 d3 4c 68 76 78 60 88 81 2e 26 55 86 32 45 c2 e6 b9 79 08 f0 44 0c de a0 53 bc 4f 68 99 0c d8 79 60 ed 40 28 64 ca 51 ae 2e 06 74 25 43 db e8 31 bd 48 f5 6d 84 cf c5 21 36 b8 83 0d 3c 9f e6 72 b1 03 ee 05 be 35 e8 55 ae 57 84 dc 4f 27 b5 b3 6e bc 61 34 63 a7 5d 10 5c 13 c0 12 69 64 18 80 ea fd b3 66 3d a4 6a 1b b4 5d 06 40 c0 d8 a0 b8 1a 58 78 c4 93 6e 76 f5 36 bd 5a ba fc e2 bf f1 78 2c 3a 03 24 af 1c cc 91 a0 ef 3b bb 46 8b fb 2a 2c 73 39 d8 5e a6 78 07 55 38 75 85 a4 c6 85 9a 66 42 d2 48 c4 88 e1 16 b9 58 45 ec 81 37 ed 2d 98 db 5a a1 42 fb 92 9f 9b 5d 4d 5b 9e 16 ea d6 6e 1a 2c 1c f7 b5 36 dc d4 47 1f e9 64 58 70 0c d3 88 f3 fb 37 cc 49 b6 e4 2a Data Ascii: YVE8J/'0+)&Lhvx`.&U2EyDSOhy`@(dQ.t%C1Hm!6<r5UWO'na4c]\idf=j]@Xxnv6Zx,:$;F,s9^xU8ufBHXE7-ZB]M[n,6GdXp7I
2024-05-15 22:37:24 UTC	1255	IN	Data Raw: 89 27 f3 a5 2a 98 97 02 e0 b0 f7 d1 a8 81 87 c5 48 87 42 7e fa 9d e1 5c 73 31 ca ca 07 98 d3 df 63 e7 51 58 1c 58 66 01 80 04 91 de b5 af ea 36 f7 8a 5f 1d 0e b7 b5 8a 9d 2d ce dc a8 e7 69 88 e2 9a 2c ec b4 e7 03 0d fe fa 86 e0 78 ec e3 5d 0a e8 47 e3 53 b1 7d f5 66 9b ce a5 79 ac 68 48 c2 ea 07 9d 58 78 1e 34 5c 69 f9 f1 aa 9a c5 f6 d4 bf 0a 5b 55 88 b2 09 a3 a7 70 6c 72 92 0d f9 d8 7c 35 fb 2f 57 de 01 89 f6 48 b7 7a e7 dd 7f 1a e3 1c 3e 72 32 8f f1 13 af c0 f3 ab ef 44 78 a8 2a 05 fd 91 af af e3 49 51 65 11 25 83 82 e1 70 af 23 2c 71 ad d9 be 0a 2f 62 c7 c8 78 0d e9 7e 33 c2 da 12 b7 94 39 77 64 cb 96 c4 2a 8b 87 df 40 4e 99 4e f6 a4 f0 b8 87 46 0f 1b 95 61 a7 93 0b df 29 e6 35 e6 0f 8d 29 87 8e 4c 54 99 ae 15 17 ba cc 82 c2 e7 da 44 cc 4d d9 be 93 92 Data Ascii: 'HB~\s1cQXXf6_-i,x]GS}fyhHXx4\i[Uplr\|5/WHz>r2DxIQe%p#,q/bx~39wd*@NNFa)5)LTDM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50243	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:24 UTC	424	OUT	GET /steam/apps/2668080/ss_4924762e48ea2e5f835de9dc20dc0a958535e81e.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:25 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Thu, 14 Dec 2023 07:22:40 GMT ETag: "657aad40-edb6" Server: nginx Content-Type: image/jpeg Content-Length: 60854 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=263352 Expires: Sat, 18 May 2024 23:46:36 GMT Date: Wed, 15 May 2024 22:37:24 GMT Connection: close
2024-05-15 22:37:25 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 01 00 09 ff c4 00 51 10 00 01 03 03 02 03 05 06 03 04 06 08 04 03 08 03 01 02 03 04 00 05 11 06 21 12 31 41 07 13 22 51 61 14 32 71 81 91 a1 42 b1 c1 Data Ascii: JFIFCCQXQ!1A"Qa2qB
2024-05-15 22:37:25 UTC	16384	IN	Data Raw: 6a ab b6 49 2e a7 50 5a 64 a9 89 c4 1f 74 e0 d7 01 1d 46 68 11 d4 1c 65 24 1c 8c 53 20 3a 84 f0 8d b6 14 c0 1a 5b f9 3c 09 3f 1a 00 fa 34 9d c2 57 f2 26 90 82 c8 da 98 0c be b0 d3 44 8e 7c a8 02 3d 0b 52 17 c4 0e f9 a0 44 83 4a ef 11 c5 8c 53 19 ea b6 07 02 80 23 1e 2a 52 d4 55 cf 3f 4a 08 84 42 5a 94 14 0e e9 1c 8d 00 13 8d 8d 00 47 4b 42 b8 f2 af 77 90 a0 47 91 02 bb cf 0f 2e b4 00 72 53 9a 06 48 d8 b4 84 cd 55 3b ba 8b 84 36 8f e9 5e 70 1e 06 f3 cb 97 35 1e 83 f2 1b d5 33 b1 41 16 42 0e 46 a3 67 ec ae c7 6a 42 7b d6 4d c2 46 37 5c 83 91 9f 44 8d 87 df e3 58 65 64 e5 dc d7 18 45 74 1e bd 69 2b 12 a3 11 2e df 14 b7 b0 4a 43 00 92 7a 00 31 9c d6 67 c7 2d 97 c7 9e 85 1a f1 a1 96 d3 cd c7 45 b5 95 c7 29 f0 34 e2 92 14 d8 df 18 1c 87 c3 34 29 b5 c3 26 94 59 Data Ascii: jI.PZdtFhe$S :[<?4W&D\|=RDJS#*RU?JBZGKBwG.rSHU;6^p53ABFgjB{MF7\DXedEti+.JCz1g-E)44)&Y
2024-05-15 22:37:25 UTC	1971	IN	Data Raw: ea db c5 cc 9e fe 7b c5 27 f0 a5 5c 23 ed 4f 22 21 17 c6 b5 12 a2 54 7c c9 c9 a4 21 18 34 0c 5a 02 f0 76 26 80 1d 43 67 d0 50 03 a9 6f 6e 79 a7 81 8e 25 03 cb eb 40 87 00 c7 4c 53 11 f1 14 00 9c 50 02 4e d4 00 93 f0 a0 04 11 40 05 d9 21 4c 9d 76 87 1e de da 9d 9c e3 c9 0c 21 3b 12 bc f8 7e f5 10 37 2e d2 ae 7a 7d 9e d5 74 a3 da 99 a6 d6 c1 8e 7d b1 a4 9e 20 70 76 51 fe 64 25 44 e7 1d 2b 24 6e 4e e9 d3 dd 24 ff 00 1c fe c4 da f8 54 bd 4e 82 5c 14 bb 05 0b 84 51 ec eb 40 53 6a 64 0e 02 92 36 23 1b 63 15 3b a1 be b6 a2 f0 41 70 f9 19 d1 36 39 96 e7 a4 ad f9 06 47 78 e1 53 60 a7 87 84 74 4f fd fd 6b 81 e0 fa 2d 4e 9a 53 95 b2 ca 66 cd 45 95 cf 0a 11 c1 f9 d5 db 07 ed 03 72 d5 bd aa dc 2e f7 d6 d2 cd b4 36 61 37 0a 3a f8 84 54 b6 4e 38 73 ef ab 8b 24 9e bc 5d Data Ascii: {'\#O"!T\|!4Zv&CgPony%@LSPN@!Lv!;~7.z}t} pvQd%D+$nN$TN\Q@Sjd6#c;Ap69GxS`tOk-NSfEr.6a7:TN8s$]
2024-05-15 22:37:25 UTC	16384	IN	Data Raw: c2 1c 46 0e 08 38 34 08 19 51 56 95 e0 6e 0d 03 0e 8e d8 69 1d 33 40 08 76 51 42 f8 53 b8 1c e8 10 fb 0f a5 d1 91 b9 f2 a0 62 4c 40 a5 85 03 8f 31 48 02 38 d2 d3 79 e9 ca 98 80 8b ca 5a f8 f3 bf 4f 4a 40 19 1e 48 77 65 1f 17 e7 4c 07 d0 00 25 58 19 a0 63 32 5f e0 fe 18 e6 79 fc 29 08 19 07 99 f5 a4 04 84 27 d4 bc 85 6f 8e b4 c6 11 d7 d6 98 11 ee 85 07 15 c7 cc f5 a4 23 c4 02 70 06 e4 ed 4c 09 36 c7 03 60 12 49 f3 a4 31 2f 34 1e 49 19 f5 06 98 11 ea 6c b6 a2 14 37 cd 02 0c 88 c7 08 e3 57 33 bd 03 1c f6 84 a5 ce 0e 5e b4 08 44 98 e1 d0 4f 23 e7 40 0c c4 60 85 15 28 72 db 14 08 5c a7 cb 68 e1 07 0a a6 33 c6 64 07 c6 39 28 74 a4 23 cf 67 42 56 5d 23 64 8c 91 f0 a6 84 4a c1 be cd 7b b3 f9 fa 72 dc a5 bb 26 ed 70 4f b5 34 ca 0a 96 b4 21 23 84 00 37 c7 11 3f 41 Data Ascii: F84QVni3@vQBSbL@1H8yZOJ@HweL%Xc2_y)'o#pL6`I1/4Il7W3^DO#@`(r\h3d9(t#gBV]#dJ{r&pO4!#7?A
2024-05-15 22:37:25 UTC	10072	IN	Data Raw: d9 5a 4b 22 63 0c 25 19 c2 e4 71 7a f4 48 34 b7 b2 5e 5a 44 8c bb 34 49 89 c4 8b dc 5f ff 00 8a 3b a4 fd 78 45 0a 6d 77 0d 8b d0 05 5a 4e c0 8f e9 2e eb 5f f6 62 b9 fa a8 53 f3 1f a8 6c 5e 83 4a b1 69 26 f3 c7 35 f5 fc 22 8f d5 ca 8e f7 ea 49 43 d8 64 c6 d1 8c e7 c3 31 df ec c6 68 7e 6a 34 b7 fb 8d 43 d9 0b 6a 6e 98 8e 73 1a dd 73 51 f3 49 65 bf b8 49 a8 e5 31 a8 b0 4b a6 a3 b7 34 d1 ee 62 b9 19 5f cd 2a 72 55 f6 09 14 b2 89 a4 ca e2 b5 4f b4 2c a1 83 ed 0b e8 98 ed 29 c3 f6 cd 2c 8c 57 fe 37 25 39 4d bd f6 d2 7f 14 a7 12 c0 fa 13 9f b5 1c 86 50 84 d9 2e 2f 12 5e 9b 0d 81 e4 d2 56 fa be bb 0f bd 1b 58 b2 2d 3a 7a 32 77 91 3a 6c 83 e4 95 21 84 fd 81 3f 7a 96 d0 c9 f2 6d d6 78 a7 88 41 8e a5 0f c4 ff 00 13 c7 fe a3 8f b5 4b 6a 10 e1 d4 6c b0 9e e9 a7 42 47 Data Ascii: ZK"c%qzH4^ZD4I_;xEmwZN._bSl^Ji&5"ICd1h~j4CjnssQIeI1K4b_*rUO,),W7%9MP./^VX-:z2w:l!?zmxAKjlBG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50246	172.217.165.206	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:25 UTC	456	OUT	GET /vi/9aQhbmoFhuY/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:25 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 36898 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:33:59 GMT Expires: Wed, 15 May 2024 22:38:59 GMT Cache-Control: public, max-age=300 Age: 206 ETag: "1715723500" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:25 UTC	599	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 0f 0e 10 10 10 10 0f 0f 0f 0e 10 0e 10 10 10 10 10 0d 10 0f 0e 0e 0e 10 0d 0f 0d 10 10 0f 10 0f 10 0d 0f 0d 10 0f 10 0d 0d 15 0d 0e 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 15 12 15 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 02 03 08 01 09 ff c4 00 53 10 00 02 01 02 04 02 07 04 08 03 05 05 06 04 04 07 01 02 11 00 03 04 12 21 31 05 41 06 07 13 22 51 61 71 32 81 91 a1 08 14 15 42 52 b1 d1 f0 Data Ascii: JFIFh"S!1A"Qaq2BR
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 02 8a 28 a0 0a 28 a2 80 28 a2 8a 00 a2 8a 28 02 8a 28 a0 0a 29 e2 cf 47 9c ec c9 f7 b9 9f ba 24 fd df df 95 2d 6e 85 dd 05 46 6b 72 e8 1c 6a fe c9 9e 59 26 74 3a 00 6a fe 5c bb 15 e3 8f 72 35 45 4a af 74 16 f0 66 5c d6 e5 22 60 bf 39 fe e4 f2 35 86 27 a1 37 54 3b 16 b7 16 e2 60 be b2 01 11 28 27 71 e1 4f 2e 5d 8a f9 b0 ee 46 28 a9 4e 27 a0 d7 55 d5 0b 5a 96 88 82 f1 ad c1 6c 7d c9 dc e6 db d9 f3 d2 98 b8 a7 0e 36 ee 3d b2 41 36 dd d0 91 30 4a 31 52 44 80 60 91 a4 80 7c 85 55 c5 ae 65 e3 25 2e 42 3a 2b 67 65 47 62 6a 2c b7 0b 35 d1 5b be ae 7c a8 ec 0f 95 45 a2 78 59 a6 8a dd d8 1f 2a 57 80 e1 0c f3 05 74 f1 27 f4 a9 5b ba 45 5a ad d8 dd 45 3f db e8 ad c3 cd 3e 2d ff 00 2d 7b 73 a2 77 07 de b6 7d 0b 7f cb 5a 79 52 ec 57 8d 11 fa 2a 43 86 e8 85 d6 d8 a6 bb Data Ascii: ((((()G$-nFkrjY&t:j\r5EJtf\"`95'7T;`('qO.]F(N'UZl}6=A60J1RD`\|Ue%.B:+geGbj,5[\|ExYWt'[EZE?>--{sw}ZyRWC
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 5b e8 08 20 11 68 6e 34 03 11 6c fa 78 e9 fc a7 d2 13 d2 6b 67 eb 17 ff 00 f1 af 7f ee 3d 61 a8 e4 8e dd 1a df e4 33 e4 ac 82 d6 c2 b5 7e fd 10 7a 93 4e 29 72 e6 27 14 1b ea 78 67 54 c8 34 fa cd e2 b9 da d9 60 43 2a 5b 53 6d 9c 08 2d da a0 04 77 ab 98 ef 7b 14 87 02 e0 77 b1 0d 92 c5 9b d7 dc 6e 96 6d 5c ba c3 d5 51 58 8f 78 a9 fd af a3 df 19 36 3b 6f a8 dd 8c d1 d9 9c a2 f9 1f 8b b1 9c f9 67 4f c5 ce 20 13 5f 48 ba 3f c1 2c e1 ad ad ac 3d 9b 56 2d 89 8b 76 91 51 07 89 ca a0 02 76 93 b9 3b d3 83 ae 9a 18 3e 3a 50 c9 cc f9 1d c7 fa 3f 7f 0c c1 71 16 2f 61 d8 ec b7 ed 5c b4 c7 d0 5c 55 27 dd 4b ba 27 64 90 e4 4c 02 b2 40 26 37 f4 d7 df fa d7 d5 2e 2f c3 6d 62 11 ac e2 2d 5b ba 8d ba 5c 45 74 61 c8 e5 70 46 9f 23 ea 0d 71 27 5d fd 4e db e1 98 82 d6 19 be ab Data Ascii: [ hn4lxkg=a3~zN)r'xgT4`C*[Sm-w{wnm\QXx6;ogO _H?,=V-vQv;>:P?q/a\\U'K'dL@&7./mb-[\EtapF#q']N
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 1b 38 46 3a e5 92 4a 9d 35 05 0c 95 20 ef a7 98 d2 69 5e 29 43 cb da 26 d3 c7 79 33 65 26 64 12 be c9 20 ea a4 2c 88 df 99 2f 1c 43 87 ac 68 07 c7 5d 01 dc 9e 7a 49 88 1e 42 a3 98 8b 05 48 20 f8 ea 0f 97 96 e3 c7 c4 78 56 ce 34 66 9a 6e c6 af ab d6 20 88 8f d8 3f bd 29 dd af 07 19 5c 64 7e 4f ac 1f 5f 03 be a0 52 3b d8 28 f8 48 f0 61 e5 54 a2 e9 f7 11 dd 5a 4f 71 29 5f 67 eb 35 a4 da aa b4 68 98 8c 8a c0 d6 f7 4a d2 c2 b3 68 d1 1e 4d 6f c2 ef 5a 94 52 fe 0b 81 7b 8d 92 da 33 b1 fb aa 09 31 cc 9e 41 47 36 30 07 32 2a b2 5f 0b 25 18 d0 0d 4a 5b ab ec 5e 59 c8 bf cb da 26 6f 99 c9 ff 00 aa a3 38 cc 3b 23 15 75 2a c3 70 c0 83 f0 3c bc f6 35 cb c2 d1 75 24 f9 1a dd a4 c9 d4 f8 9d 4d 78 0d 63 34 03 50 48 e7 d1 c7 8b f6 7c af 59 ff 00 dc 5a 9f f4 6c c5 e7 27 5e Data Ascii: 8F:J5 i^)C&y3e&d ,/Ch]zIBH xV4fn ?)\d~O_R;(HaTZOq)_g5hJhMoZR{31AG602_%J[^Y&o8;#up<5u$Mxc4PH\|YZl'^
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: ed ce b9 9a 34 1b af 97 81 8e 51 e7 e9 53 18 d1 59 4a c6 3c 0a aa 1f 46 df 93 0d 74 06 20 6f a1 8d 75 98 06 af 1e a1 78 50 37 0e 2e e3 c2 61 db 2d b5 01 7b d7 1d 1a 4b 46 bd c5 65 88 e6 4c ed 54 45 eb a4 b1 ee a8 1a 19 ef 41 d8 68 01 99 db bb 3e b5 7e f5 0f 78 0c 11 47 02 7e b0 e5 b4 10 09 54 22 23 c8 0d 09 27 e5 5c 3e 23 91 c3 0b e1 eb b1 d1 a5 c6 a7 91 26 5d 1f f6 81 48 90 7c bd 29 1e 23 8a 4c 99 35 9d 84 85 95 40 47 3d 06 b4 8f 1c ee 44 e4 ee ed 3b 57 cb 70 5f 53 de 5a 57 ca c6 8e 29 c4 ed 5c 56 b5 71 43 a3 82 ae a7 66 53 b8 3e bb d7 36 74 d3 84 2e 17 14 d6 d7 31 b6 ba a1 62 0b 15 61 e3 22 60 86 12 62 63 5f 1a bb 7a 41 c4 94 38 02 27 5f 8c 4d 53 1d 63 f1 2c d7 16 66 72 b4 72 d3 41 1e 3e 3f 3f 1a f5 bc 26 72 8e 4e 1e 8c f3 b5 d8 78 76 1a b0 57 9d a0 47 Data Ascii: 4QSYJ<Ft ouxP7.a-{KFeLTEAh>~xG~T"#'\>#&]H\|)#L5@G=D;Wp_SZW)\VqCfS>6t.1ba"`bc_zA8'_MSc,frrA>??&rNxvWG
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: cf 47 ae 11 7a ec 08 d1 80 f1 ff 00 e6 1f 9c 1d 81 89 83 b0 f0 02 a2 bc 0f 05 17 ad 19 da e5 b3 b7 83 a9 a9 47 45 c9 37 ae 41 dd 5f 53 a1 33 7d f5 f2 d6 04 7a 8d f7 df 4e f6 67 0e ba 34 f7 ec 38 74 77 0e 0a 61 e6 22 5e 75 3b 76 77 08 91 b7 22 0f 88 0b b5 6c b5 7a 2e d8 d1 75 ed 35 1a 49 2b 6f 7d 37 00 65 8f 40 29 ab 81 2c db b2 74 92 4c c6 e0 76 77 7c a6 0a ac fa 4d 28 c3 b9 ed 30 d1 cf 36 fe 59 27 dd 22 76 da 45 74 a3 82 b7 fe 7a 9a f8 69 6e d7 11 24 99 b2 46 84 4e a0 15 1b 6e d0 06 c3 56 a8 b6 3c 80 44 00 46 75 1b ee 21 63 c0 6f f3 f5 35 2a e1 ad fc 4c 42 98 d6 cb 6a 4e bc a7 de 47 31 11 bf 91 8a 62 58 1d fc 57 f2 5f 79 e5 ad 19 b4 18 61 23 59 f1 6f c9 80 d7 73 e3 4f f8 a6 3d a5 93 a7 f6 33 10 27 49 d3 d0 81 3b 7e 54 c7 80 5d 75 1b 97 df c7 29 f0 27 c6 Data Ascii: GzGE7A_S3}zNg48twa"^u;vw"lz.u5I+o}7e@),tLvw\|M(06Y'"vEtzin$FNnV<DFu!co5*LBjNG1bXW_ya#YosO=3'I;~T]u)'
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 49 e6 60 78 c0 14 9f 0d d2 5b 17 f1 38 97 b4 dd ad b9 0f 99 55 fb b2 34 32 54 08 30 60 a9 3c e6 2b e7 d6 54 df 17 0a af c0 fa 1f 21 a8 f0 f1 3b fc 4a 9e d7 15 c6 34 36 26 58 21 21 6e c0 19 86 c7 55 8c c2 39 95 f7 9a 87 f4 e3 1b 9b 2b 83 bc 8f 33 bf e5 1b f9 d5 8b d6 67 49 0d c0 46 a1 06 c0 c6 83 dd 55 4e 22 db e2 6e 65 b6 18 e5 03 90 10 27 73 a8 59 3c 84 eb a6 f5 e9 e8 22 e5 3e 35 b1 e6 6b f8 21 1a 97 3f e6 e2 3e 1a e5 98 e8 18 f2 11 32 4e 9e 67 e1 35 37 e1 bc 58 d9 bf 65 07 77 33 12 e2 18 6a c3 2a 2e 9a e5 d1 60 28 1a 9e 71 34 81 38 52 d9 81 93 39 24 02 c0 89 0d ea 1b ba 35 11 a0 07 d6 98 b8 d7 15 7b ac a2 06 87 2a e5 58 82 48 fb d3 24 ed cf 94 fa 7b 8b 64 78 7f 7d fa 17 a6 13 1e d9 a1 60 00 49 3d d5 07 31 91 b9 02 5b 42 73 cc c1 d3 c6 b1 7c 61 3b ee 39 Data Ascii: I`x[8U42T0`<+T!;J46&X!!nU9+3gIFUN"ne'sY<">5k!?>2Ng57Xew3j.`(q48R9$5{XH${dx}`I=1[Bs\|a;9
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 82 49 1a 13 4f 2a ac 2d 82 44 36 51 cc 48 f2 24 69 a6 da 69 5c be 6b 5d 39 9d 4f 04 7b 95 ae 23 80 86 71 6d db 21 24 21 3a 99 76 81 68 80 01 d4 39 50 62 25 27 c0 11 24 c3 75 26 7e f6 25 7d d6 cf e6 5e b5 74 7f 02 6e e2 c4 c9 ca c1 98 ce c1 48 61 3e a4 2a 83 e2 6a dd 5b d5 d5 8a 52 6b 76 73 4b 1c 63 c9 10 6c 1f 53 98 6b 48 d7 5b 13 78 dc b4 a6 ea 28 b7 6c 23 bd b0 5d 54 b6 62 c0 33 00 09 03 63 bd 55 9d 1a 20 5e b8 7f ba f0 39 c0 be d1 a7 36 d8 c7 98 db 58 e8 8c 75 e3 91 c7 f7 5a 3e 07 d6 a8 0e 8d d8 22 fd c0 00 ef 2b c4 8d 81 c4 30 f1 3a 9e f2 ce bc a4 d7 a5 a5 e4 cf 1b c4 97 c4 bd 8d 7c 05 f2 db b1 26 64 b1 23 58 81 6a e8 89 24 78 ce c3 e7 47 67 99 f0 f2 74 86 20 6a 3e ed b2 7f 7e 00 6d cb 56 1b 0c c2 ce 1f 2e a5 a7 42 7f bb 76 49 f0 d0 11 c8 7b c9 35 ed Data Ascii: IO-D6QH$ii\k]9O{#qm!$!:vh9Pb%'$u&~%}^tnHa>j[RkvsKclSkH[x(l#]Tb3cU ^96XuZ>"+0:\|&d#Xj$xGgt j>~mV.BvI{5
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: cb 72 f6 4e e3 02 a7 32 3b 4a 85 9d c8 82 07 3c b5 16 ea c3 ab ec 4d ac 3e 2b 13 77 0d 7a da dc b4 b6 2c 35 d4 36 bf b4 26 f6 22 e8 17 32 bc 2d 8c 3b da 0c 04 1f ac 10 0b 6d 5d 7c 49 e2 69 fa a3 38 ed 24 c9 86 07 11 88 6b 5f c1 19 d3 ef 5b 16 bb 43 b7 b5 fd a2 6b e4 7c f5 a4 38 67 c4 25 b6 0a a6 c5 a8 39 87 63 90 6d 11 ad db 9e 7a 96 27 5a 63 c3 63 6f 5b cc 70 f7 4d ac da b0 33 04 ff 00 43 f1 a6 6c 7f 1d c5 5d 05 6e 5d 25 79 c4 c7 c4 98 f7 c5 78 10 c7 b5 1f 46 f3 fa 7c c4 bc 6b 14 2e 30 4e 44 80 48 23 ef 69 be d3 ac eb b5 3c 62 f0 69 82 40 96 c8 7c da 9b de c8 73 cc ea 49 00 6a 02 ea 3b b3 ac 9c d2 be a8 7a b3 ed 87 d6 6f a1 18 74 13 69 0c a9 c4 dc 98 5d 7d ae c4 12 25 87 b4 4c 03 a3 55 e5 d6 df 55 09 8d c1 84 ed 16 c5 cb 50 6c e7 23 b2 cc 00 9b 67 43 70 Data Ascii: rN2;J<M>+wz,56&"2-;m]\|Ii8$k_[Ck\|8g%9cmz'Zcco[pM3Cl]n]%yxF\|k.0NDH#i<bi@\|sIj;zoti]}%LUUPl#gCp
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 2c c9 65 ad 9f 64 dc b6 e0 f8 90 1c 1f 91 13 e8 3c 6a bd 15 e5 ea 27 25 26 8e 88 24 e2 89 cf 57 56 de e9 bb 79 ae 1f f6 71 6d 85 b0 d9 4d d2 e4 8d 20 44 05 04 c7 33 94 1d 0d 5a fd 18 e3 90 90 5b bc b2 09 e6 3c 1b e0 41 f5 9a e7 de 07 c4 7b 27 cd 00 88 82 08 07 4d c4 78 10 40 3e ea b3 3a 22 bd b5 a7 28 58 77 fb ac 74 d9 52 63 c4 7d d3 e6 0d 78 fa b8 39 6f 26 7a 5a 3c 9c 3b 22 c1 c5 70 cc 53 fb 0d 72 f0 3b b1 bb d8 a8 9d 0e 96 c2 92 35 e6 69 ab 89 61 db 0e 3b ec d9 e6 08 37 19 d4 0f f1 31 d4 78 ef 51 6c 5f d7 47 74 3b 65 1a 68 63 e3 ad 21 b9 81 bc c4 76 8e 5a 3c 6b 15 8f 6d da 3a e5 9d bd a8 9d 75 77 7b b4 37 08 8d 5c 03 ac 36 52 34 3b 10 41 ef 0d 75 1c a3 59 b1 7b 6a ad ba b8 c1 5a 0c 1c b8 17 15 88 44 9c a4 c0 9c db cb 0d 79 0d 08 f4 ab 03 b4 ae 9c 4a 91 Data Ascii: ,ed<j'%&$WVyqmM D3Z[<A{'Mx@>:"(XwtRc}x9o&zZ<;"pSr;5ia;71xQl_Gt;ehc!vZ<km:uw{7\6R4;AuY{jZDyJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50234	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:25 UTC	563	OUT	GET /public/shared/images//award_icon_blue.svg HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:25 UTC	187	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:25 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-05-15 22:37:25 UTC	2393	IN	Data Raw: 39 35 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 35 2e 38 30 38 31 34 20 30 2e 31 39 37 34 39 32 4c 35 2e 31 39 33 32 34 20 30 2e 36 32 30 38 36 43 34 2e 39 36 32 36 35 20 30 2e 37 37 34 38 31 32 20 34 2e 36 39 33 36 33 20 30 2e 38 35 31 37 38 38 20 34 2e 33 38 36 31 39 20 30 2e 38 31 33 33 4c 33 2e 39 32 35 30 31 20 30 2e 37 33 36 33 32 34 43 33 2e 34 32 Data Ascii: 952<svg width="13" height="21" viewBox="0 0 13 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.80814 0.197492L5.19324 0.62086C4.96265 0.774812 4.69363 0.851788 4.38619 0.8133L3.92501 0.736324C3.42
2024-05-15 22:37:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50235	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:25 UTC	576	OUT	GET /public/shared/images/userreviews/icon_thumbsUp.png?v=1 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:25 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:25 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:25 UTC	2110	IN	Data Raw: 38 33 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 Data Ascii: 837PNGIHDR((mtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56
2024-05-15 22:37:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50233	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:25 UTC	558	OUT	GET /public/shared/images//award_icon.svg HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:25 UTC	187	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:25 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: *
2024-05-15 22:37:25 UTC	2393	IN	Data Raw: 39 35 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 35 2e 38 30 38 31 34 20 30 2e 31 39 37 34 39 32 4c 35 2e 31 39 33 32 34 20 30 2e 36 32 30 38 36 43 34 2e 39 36 32 36 35 20 30 2e 37 37 34 38 31 32 20 34 2e 36 39 33 36 33 20 30 2e 38 35 31 37 38 38 20 34 2e 33 38 36 31 39 20 30 2e 38 31 33 33 4c 33 2e 39 32 35 30 31 20 30 2e 37 33 36 33 32 34 43 33 2e 34 32 Data Ascii: 952<svg width="13" height="21" viewBox="0 0 13 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.80814 0.197492L5.19324 0.62086C4.96265 0.774812 4.69363 0.851788 4.38619 0.8133L3.92501 0.736324C3.42
2024-05-15 22:37:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50237	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:25 UTC	566	OUT	GET /public/shared/images/apphubs/play_icon80.png HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:25 UTC	173	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:25 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Accept-Ranges: bytes
2024-05-15 22:37:25 UTC	2191	IN	Data Raw: 38 38 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 37 08 06 00 00 00 9b e0 cd 4f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 Data Ascii: 888PNGIHDRP7OtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32
2024-05-15 22:37:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50244	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:25 UTC	790	OUT	GET /public/javascript/applications/community/libraries~4b330692b.js?contenthash=32fdb0c2c16cbd1f7255 HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:26 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:26 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177389 Expires: Fri, 17 May 2024 23:53:55 GMT
2024-05-15 22:37:26 UTC	16117	IN	Data Raw: 36 35 36 32 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 34 38 5d 2c 7b 34 32 33 36 33 3a 28 65 2c 74 Data Ascii: 6562/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[6148],{42363:(e,t
2024-05-15 22:37:26 UTC	9845	IN	Data Raw: 39 2c 64 61 72 6b 73 61 6c 6d 6f 6e 3a 33 39 31 38 39 35 33 32 31 35 2c 64 61 72 6b 73 65 61 67 72 65 65 6e 3a 32 34 31 31 34 39 39 35 31 39 2c 64 61 72 6b 73 6c 61 74 65 62 6c 75 65 3a 31 32 31 31 39 39 33 30 38 37 2c 64 61 72 6b 73 6c 61 74 65 67 72 61 79 3a 37 39 33 37 32 36 39 37 35 2c 64 61 72 6b 73 6c 61 74 65 67 72 65 79 3a 37 39 33 37 32 36 39 37 35 2c 64 61 72 6b 74 75 72 71 75 6f 69 73 65 3a 31 33 35 35 34 31 37 35 2c 64 61 72 6b 76 69 6f 6c 65 74 3a 32 34 38 33 30 38 32 32 33 39 2c 64 65 65 70 70 69 6e 6b 3a 34 32 37 39 35 33 38 36 38 37 2c 64 65 65 70 73 6b 79 62 6c 75 65 3a 31 32 35 38 32 39 31 31 2c 64 69 6d 67 72 61 79 3a 31 37 36 38 35 31 36 30 39 35 2c 64 69 6d 67 72 65 79 3a 31 37 36 38 35 31 36 30 39 35 2c 64 6f 64 67 65 72 62 6c 75 65 Data Ascii: 9,darksalmon:3918953215,darkseagreen:2411499519,darkslateblue:1211993087,darkslategray:793726975,darkslategrey:793726975,darkturquoise:13554175,darkviolet:2483082239,deeppink:4279538687,deepskyblue:12582911,dimgray:1768516095,dimgrey:1768516095,dodgerblue
2024-05-15 22:37:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50257	172.217.165.206	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:25 UTC	456	OUT	GET /vi/DW6VDDih8nM/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:25 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 34238 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:35:06 GMT Expires: Thu, 16 May 2024 00:35:06 GMT Cache-Control: public, max-age=7200 ETag: "1712400508" Content-Type: image/jpeg Vary: Origin Age: 139 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:25 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0a 0d 0a 0d 0a 0a 0d 0a 0d 0d 0a 0a 0a 0d 0a 0a 0a 0d 0a 0a 0a 0a 0a 0a 0a 0a 0b 0a 0a 0a 0a 0d 0d 10 0b 0a 0d 0e 0a 0a 0b 0d 15 0e 0e 11 11 13 13 13 0d 0e 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 17 15 12 15 15 18 17 16 15 17 15 17 15 18 15 16 15 17 15 15 18 17 17 17 17 15 15 15 17 17 15 17 15 15 15 16 15 15 15 17 15 17 15 15 15 17 15 15 15 17 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 01 03 08 02 09 ff c4 00 51 10 00 02 01 03 03 02 03 05 04 05 08 08 03 04 0b 00 01 02 03 00 04 11 05 12 21 06 31 13 22 41 07 14 32 51 61 08 23 71 81 15 42 91 94 a1 16 24 Data Ascii: JFIFh"Q!1"A2Qa#qB$
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 5c 8a 03 8a 57 24 57 14 02 94 a5 00 a5 29 40 29 4a 50 0a 57 25 6b 8a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 94 a0 14 a5 66 42 62 db ce 72 47 6f 5c fd 3d 3e b5 86 ec 49 4e 9e fb b5 d2 eb 30 e9 5c b7 d2 b8 ac 91 8a 52 94 06 5d bc 4d 29 da b8 2f 80 11 7f 5a 53 93 e5 07 f5 a4 c1 e0 7e b6 30 32 db 43 62 91 5c 54 a5 d6 a2 92 a8 32 a9 f1 06 77 cc b8 26 51 c6 1d d4 e3 ef 07 3b 9f 3e 7e 09 1b b7 3b ea dd 89 21 15 2c 9b b1 17 53 3d 31 a3 3c e5 c2 63 c8 14 9c 90 3b 92 3b 9e 3d 2a 1c d6 c8 f6 11 d4 9a 7d Data Ascii: ()JJRR()JJRR()\W$W)@)JPW%kJRR()JJRR()JJRR()JJRR()JJRR()JJRRfBbrGo\=>IN0\R]M)/ZS~02Cb\T2w&Q;>~;!,S=1<c;;=*}
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 5b 4d d5 af fb b9 94 9e cd af bf bb 7c af ad f8 73 e6 6a 8f f4 49 d7 3f ee 9d 27 f7 3e 90 ff 00 dd d5 77 5e e9 de a3 b6 93 c1 bc 83 a6 6d e4 da 1b c2 b9 5e 87 b7 97 6b 67 6b 78 72 6d 7c 1c 1c 1c 60 d6 f6 bb f6 2b 6b 2b b4 8f 12 12 cc ce e5 ac a3 f1 1d 9b e2 2e c5 f2 4b 31 dc 4f a9 f5 ae b9 7d 82 e8 ac bb a6 b4 79 1c 00 0b 40 5e d9 08 f4 1e 14 52 04 04 0e e7 b9 ef f4 a8 e9 6d 58 b7 f7 c5 25 fd 0b ff 00 76 4b 57 65 54 8a fb 67 77 ca ed 79 9a 03 4e d2 f5 c9 64 48 a1 5e 96 92 49 64 54 8a 24 3d 0e f2 49 23 b0 54 8e 38 c1 2c ec cc 40 0a 07 24 f1 de ad 52 fb 22 eb 7e e7 4a d2 ff 00 2b 4e 93 1f c0 27 35 b4 97 d8 56 8b 19 59 21 b2 bc 59 63 75 78 dc 3d cb f8 6c 84 32 b9 56 94 2b 61 80 e3 35 0f 7d ec 8e dc ca d3 3c 0e db 9b 2c 1a c2 32 cf b8 9c f9 bc 5f 31 27 9c f7 Data Ascii: [M\|sjI?'>w^m^kgkxrm\|`+k+.K1O}y@^RmX%vKWeTgwyNdH^IdT$=I#T8,@$R"~J+N'5VY!Ycux=l2V+a5}<,2_1'
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: df 83 76 6b 95 af f2 e7 b6 97 db 17 4b 19 37 35 dd a8 ce 32 56 d7 58 ec 3b 64 78 3c 9f c3 15 ae f5 1f b5 12 2c ae 23 d3 2d e4 44 77 11 cb ef 17 09 e2 20 62 16 4d 86 3c ae e5 c1 c1 e4 66 bc cd 4a de 86 c3 c2 d2 bf db bd d6 93 fc 22 3a bb 5f 13 52 df 73 5d 4d fa 9e b6 f6 79 f6 92 d3 a7 b8 91 35 2b 68 2c 62 30 3b 25 c0 7b db a2 d3 ee 8d 56 2f 0e 28 99 d4 14 69 1b 76 31 e5 c6 79 15 b5 bd 9e 7b 4d e9 fb fb d8 74 fb 5b 98 a5 92 7d e1 23 10 ea 31 b3 08 a3 79 9c ac 93 42 b1 29 11 c6 c7 cc 46 70 40 c9 20 57 e7 9d 4c f4 67 52 4f 63 77 1d ed b1 02 58 7c 4d 85 86 40 f1 22 78 9b 23 23 f5 24 6a 8b 13 b0 b0 f2 bc e1 1b 3b 64 b2 b5 fa 72 e3 c4 52 da 95 ff 00 4c a4 ec f8 bb b6 bc 78 1e 8c ea 8f b4 df 83 73 71 6b fa 32 07 10 dc 4d 16 f3 73 30 2e 21 91 e3 0c 40 4e 32 06 71 Data Ascii: vkK752VX;dx<,#-Dw bM<fJ":_Rs]My5+h,b0;%{V/(iv1y{Mt[}#1yB)Fp@ WLgROcwX\|M@"x##$j;drRLxsqk2Ms0.!@N2q
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 2b 82 40 3d 89 01 97 f6 8f 9d 4b 69 5a 84 67 c9 70 09 1b 42 a4 9b 43 ed c2 b0 51 2c 7c 19 57 0d b4 30 65 78 c6 0a 93 b4 21 d2 51 ed e8 26 8c af 95 ec f9 92 20 69 b3 8c ef 6b 39 70 72 b2 89 6e 2c c9 c6 72 93 22 bd dc 43 77 02 37 8e 7e 07 f4 a3 3c 63 ea 5d 1f 77 1c 6d 3a a0 9a 14 6d af 71 6a c9 75 6e 8d c9 c3 cd 09 74 88 ed c1 db 21 46 c3 0f 2e 39 ae 8d 63 42 64 0a e9 e6 8d c0 f0 dd 4e f4 9b b6 ef 05 c2 80 e5 77 21 68 d8 24 a9 bc 06 41 b4 9a c0 d2 b5 39 e0 90 4b 6f 2c b0 c8 3b 49 0b bc 52 0e 41 e1 d0 86 1c 80 7b fa 0a d5 27 fc af bf e5 fb ee 24 d5 ed 25 dd 97 b1 8c 54 f7 f4 e7 9f 4e 31 9f ef 1f b6 be 6a dd 1f b4 3b d2 57 de 45 ad d8 40 7f d7 6d ad e6 95 b2 08 05 ae f6 0b cc 83 86 c8 94 12 54 67 23 20 f7 c1 d5 5a 63 0f bf d2 61 dc 08 d8 6d 6e ef e2 45 51 ce Data Ascii: +@=KiZgpBCQ,\|W0ex!Q& ik9prn,r"Cw7~<c]wm:mqjunt!F.9cBdNw!h$A9Ko,;IRA{'$%TN1j;WE@mTg# ZcamnEQ
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 3c f3 8e c6 ac 4f ec 7f 5f 03 71 d3 ee b1 c7 21 54 83 93 8c a9 07 cc 33 ea 33 51 ca b4 23 94 a4 97 69 2c 28 d4 9e 71 8b 7d 49 94 5a 55 b2 ff 00 d9 be b1 1a 97 92 ca e8 01 dc ec 2d d8 64 f0 b9 3c 0e ff 00 2a a9 d6 61 52 33 ce 2d 3e a7 73 15 29 4e 9f eb 4d 75 ab 0a 52 95 b9 18 a5 29 40 29 4a 50 0a c8 b4 88 13 93 db fb fe 95 d0 05 76 44 d8 e7 f6 0a c3 d0 92 93 4a 49 b2 dd a1 5f 90 56 38 bc 80 b6 1a 4c 7d e1 1e bb 48 e6 3f 51 90 77 7a 82 bd aa c9 aa f4 40 8e d1 ef 22 93 7e 00 12 86 5e 56 27 3b 19 92 4d f9 00 44 fb 58 36 ec ae 7b 11 5a e3 4c bc 71 2a 60 fe ba f1 81 8e 48 e3 15 b9 7a 2e ef 77 89 03 8c a4 97 17 d6 e5 0a 8c 3c 50 b4 22 45 6f 43 88 ee a2 00 9c 7a fe 7c 2c 7b a9 87 6a 70 79 6b 25 cd 71 3d 36 16 bd 1c 54 77 64 b3 e0 de 89 f0 e8 b1 4e d1 f4 08 b2 3c Data Ascii: <O_q!T33Q#i,(q}IZU-d<aR3->s)NMuR)@)JPvDJI_V8L}H?Qwz@"~^V';MDX6{ZLq`Hz.w<P"EoCz\|,{jpyk%q=6TwdN<
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: ce bb e5 dd 24 37 32 46 c0 0c f8 7e 1c 0d 03 ab 64 e0 36 66 01 73 c6 71 54 fe a0 eb ab 67 5d b7 16 d7 48 0c 67 73 62 de 54 2d 90 04 6a 63 98 ca cd 8f 36 4c 61 70 0f 3e 95 a7 bd b6 fb 48 be 10 da 3d be 6d 4c ef a8 78 8a 3c 37 97 f9 b5 e4 b6 a8 ac f8 65 18 11 b1 3b 09 1b 8f 04 80 0d 4f 7b 2f d5 a1 d4 b4 c0 8d 20 17 b0 02 b7 03 80 d2 28 76 31 4a 54 fc 41 97 6a 92 bd 98 1e 06 54 1e 55 5d 9b 2a 54 15 7a 91 56 bb 4e d7 ba cd ab bc ed aa f2 3a d8 5c 4d 1f ad f4 68 c9 a7 6b ab da ce e9 3c af 9f 1b f7 9a 93 db 15 9d bc 77 82 e6 c9 e4 c4 bc b6 62 9e 1d 92 81 c9 56 91 14 3e e5 23 3b 37 60 86 cf 71 9a bd dc be 3c 46 63 fd 2c 3b 43 91 c7 88 84 e0 3e 07 66 07 39 ff 00 e5 8d e7 d4 fd 2d 6f 75 0b 45 28 64 92 0c e1 d3 82 70 7b 9e 3c c3 19 1c f1 e6 cf 7c 11 ad af ba 30 db Data Ascii: $72F~d6fsqTg]HgsbT-jc6Lap>H=mLx<7e;O{/ (v1JTAjTU]*TzVN:\Mhk<wbV>#;7`q<Fc,;C>f9-ouE(dp{<\|0
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 6d 11 24 7d e4 70 46 5f ea 3e f3 7a 73 ff 00 2f e1 8a d6 5a b5 fc 93 4d 25 c4 c7 74 93 cb 24 b2 b6 15 77 49 2b 97 76 da a0 22 e5 98 9c 28 00 7a 01 58 b4 ae bd 1c 2d 2a 37 fa 71 4a fc 95 8e 3d 6c 45 5a bf f9 24 df 5b 14 a5 2a 72 11 5e e0 fb 2b 7b 3a 33 f4 3d fa da e2 3b ad 6d 6f 63 13 c8 19 15 96 25 6b 78 21 2e bc 98 77 89 81 60 0e 0c d2 f0 d8 db 5e 1f af 6b 7d 9d 2f 2f 2c 74 fb 28 e1 ba fe 96 cd ee 4c 37 59 5b 78 ad cd cc ed 22 5a c3 bc 1b a9 12 49 9e 49 1a 36 55 8c 72 fe 61 b5 6b e2 2b 7d 34 9d af 99 3e 1e 83 aa da 4e d9 15 1f 61 bf 65 9d 7e 2d 5a d2 f6 fd 6d ed 62 b0 bf b7 b8 21 a5 8e e2 49 c5 ad c4 32 85 8d 61 66 0a 24 01 80 2e 54 8d a7 2b db 3e e9 be 80 bc 6f 18 66 42 e8 ea 1d 0e 1d 0b 29 01 d4 fa 11 9c 8f a8 ad 61 d2 3d 57 a9 4d 04 77 42 4b 79 cc 89 Data Ascii: m$}pF_>zs/ZM%t$wI+v"(zX-7qJ=lEZ$[r^+{:3=;moc%kx!.w`^k}//,t(L7Y[x"ZII6Urak+}4>Nae~-Zmb!I2af$.T+>ofB)a=WMwBKy
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 64 df b2 56 b5 dc 5f 91 15 5e a7 d2 7a ee d2 f7 a7 17 4e 82 1b eb 1f 08 45 12 cf 0a 35 ca 23 47 24 6e 5d 24 67 4d de 21 25 4a 17 c8 0f 81 bb 8c f9 8b 52 b5 d8 c0 03 b8 32 23 a3 63 1b 95 d4 1e d9 38 c1 c8 23 3d c1 ab a7 b3 ee a9 78 ad 67 b5 91 91 2d a6 12 24 92 9d e6 68 67 9a 09 4d bb 44 88 43 90 24 87 73 1c 63 d0 91 91 9a 78 ea 4e ac 14 a3 aa 69 fc 5c 7a 8b db 2e a4 69 56 94 2a 68 d3 5d bd 7c 17 4e 9c 4d 93 79 a0 e9 e8 25 37 6f aa b7 8d 67 6d 6f 3c 8a 74 fb 68 9c 5b 9b 6d 93 17 6b 89 19 5f 75 b2 70 ca 7d 7b e6 be 75 69 34 e6 8d bc 1b 1b 8b a1 72 96 b1 3e fb e9 65 96 76 b2 45 8a 36 d9 6d 6a 4b 3e 22 62 db 18 64 b3 9e dd b5 cd 9e 9f 66 b0 b5 bc 97 46 4f 78 9a df 3e 1a 10 60 90 2b b2 b6 58 b2 b0 65 7d 84 8c 10 7b f6 e7 ea cb 52 b5 f7 54 b4 41 33 47 33 ca 09 Data Ascii: dV_^zNE5#G$n]$gM!%JR2#c8#=xg-$hgMDC$scxNi\z.iV*h]\|NMy%7ogmo<th[mk_up}{ui4r>evE6mjK>"bdfFOx>`+Xe}{RTA3G3
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 8b fa 1c d6 59 71 e5 7b 69 d8 76 ff 00 6f c2 57 9a 75 e3 c1 e7 9f 0d 2f 6b eb a7 41 9a fd 55 ac 6a 53 32 44 92 43 15 e4 73 05 60 81 55 a7 b6 b7 ba 9a d9 60 7d bb b2 e2 cd a3 76 1b 9b ef 26 42 db 7c 15 8f 9d 69 20 b4 d5 9c cf 24 4b 65 aa 69 32 0b bc 85 60 6c ef 2d c9 91 4b 33 81 0a 47 32 cb 22 fe ae d2 cb 81 bd 0a fd 7d a0 fd ae d9 e8 50 59 e9 f6 88 b7 73 30 9d a5 8c 5c 98 1e d1 37 2b 46 d2 08 32 3c 47 77 6d b9 c8 2a b2 13 bb c4 25 bc 7b d7 7e d2 6f 2f 4b 29 d9 04 4c 5f 30 c1 e2 79 95 9b 21 65 91 dd a4 90 01 81 8c 80 70 0e 2b 34 f0 18 8d e8 c9 bc ee 9b 6d e9 cd 25 da cd 27 b4 70 fb b3 84 63 68 d9 a4 92 d7 93 6d f1 c9 70 b9 4a a5 29 5d f3 cf 8a 52 94 02 b7 ff 00 d8 c7 a6 7c 5b cb 9b d7 07 65 b4 02 18 ce 0e 0c d7 0d 92 55 f3 8c ac 31 38 23 07 89 47 6e 33 a0 Data Ascii: Yq{ivoWu/kAUjS2DCs`U`}v&B\|i $Kei2`l-K3G2"}PYs0\7+F2<Gwm*%{~o/K)L_0y!ep+4m%'pchmpJ)]R\|[eU18#Gn3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50258	172.217.165.206	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:25 UTC	456	OUT	GET /vi/xQOMy02LbNQ/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:25 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 31900 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:22:31 GMT Expires: Thu, 16 May 2024 00:22:31 GMT Cache-Control: public, max-age=7200 ETag: "1713343212" Content-Type: image/jpeg Vary: Origin Age: 894 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:25 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 10 0f 0f 0d 10 0d 0d 10 10 0d 0f 0e 0d 0f 10 0d 0d 0d 0f 0d 0e 0d 0d 0d 0d 0d 0e 0d 0e 0d 0d 0d 10 0d 0d 0d 0f 0d 0d 0d 0d 15 0d 0e 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 01 02 07 08 09 ff c4 00 4d 10 00 02 01 02 04 02 07 03 08 07 05 07 03 05 01 01 01 02 03 00 11 04 12 21 31 05 41 06 07 13 22 51 61 71 32 81 91 14 23 42 52 a1 b1 c1 f0 15 Data Ascii: JFIFh"M!1A"Qaq2#BR
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 15 d1 3f d9 06 27 f5 98 6f df 97 fa 35 93 d4 fe 27 f5 b8 6f df 97 fa 35 7b d9 97 3f 03 33 fd ab 69 f6 88 e7 54 57 47 ff 00 63 98 af d6 e1 bf 7e 5f e8 d6 c3 a9 ac 57 eb 30 df bf 2f f4 68 f6 65 cf c0 c3 da b6 9f 68 8e 6d 45 74 91 d4 ce 2b f5 b8 6f df 97 fa 34 0e a6 b1 5f ad c3 7e fc bf d1 a3 d9 b7 3f 03 0f 6a da fd a2 39 b5 15 d2 ff 00 d8 be 2b f5 b8 5f df 97 fa 35 83 d4 c6 2b f5 b8 6f df 97 fa 34 7b 36 e7 e0 61 ed 5b 5f b4 47 35 a2 ba 57 fb 17 c5 7e b7 0d fb f2 ff 00 46 b2 3a 97 c5 7e b7 0b fb f2 ff 00 46 8f 66 dc fc 0c 3d ab 6b f6 88 e6 94 57 4d 1d 4a 62 bf 5b 85 fd f9 7f a3 47 fb 13 c5 fe b7 0b fb f2 ff 00 42 93 d9 b7 3f 03 0f 6a da fd a2 39 95 15 d3 bf d8 96 2f f5 b8 5f Data Ascii: Q@Q@Q@Q@Q@Q@Q@?'o5'o5{?3iTWGc~_W0/hehmEt+o4_~?j9+_5+o4{6a[_G5W~F:~Ff=kWMJb[GB?j9/_
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: a2 4f ca fe 84 94 bd e5 f5 38 67 66 72 8d 86 80 5a db 79 6f f6 d6 bd 8d 2f 30 bd ac 7f d7 98 bd 61 8d 72 f8 3b e7 aa 10 29 49 98 86 f6 d6 9c 5a 82 29 46 64 4b 2d 63 2d 2b 58 2b 4a 02 6c 2b 53 4a 11 58 cb 40 09 da 8b 56 e4 56 2d 40 1a 81 58 22 b7 b5 0d fe 94 31 09 4e 8a f0 c1 23 b3 30 bc 70 a9 92 4f 4b e5 55 d0 de ec e4 0f 8d 43 b0 ab ef 46 a1 ec f8 7c b2 90 33 62 a7 58 56 ff 00 ab 81 43 35 bd 65 90 0f f2 79 d5 0d a9 a9 e5 8f 92 c2 46 84 56 a5 69 42 2b 14 a3 72 25 6a c1 14 b5 ab 52 b4 0b 91 12 b5 82 29 52 2b 52 28 0c 76 13 22 b5 b5 2a 6b 5b 51 80 c8 99 15 82 29 6c b5 82 94 0a 84 6d 58 22 97 29 58 c9 40 b9 10 b5 16 a5 48 ad 0d 20 1a 85 ad 82 50 29 58 d6 94 1b 3d 16 29 45 15 a5 a9 41 5d 6b 96 87 9c 23 60 69 54 a4 90 52 c0 d3 04 cb 33 5b 2d 68 0d 6e 29 ac 95 Data Ascii: O8gfrZyo/0ar;)IZ)FdK-c-+X+Jl+SJX@VV-@X"1N#0pOKUCF\|3bXVC5eyFViB+r%jR)R+R(v"*k[Q)lmX")X@H P)X=)EA]k#`iTR3[-hn)
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: cb e4 88 11 6d fd ff 00 0b 1a b4 f4 43 a6 66 1f 9b 98 bb c7 f4 5f da 31 f9 1b ea cb f6 8a a8 b9 e9 d5 8d 78 6f 1e 84 d5 a9 46 b5 37 4a 7b 30 c5 f1 99 b1 a7 b2 8a 37 8e 33 a3 16 0c ba 6c 73 1b 58 7e c8 d4 e9 57 8e 8b f0 05 c3 a6 54 d5 8f b4 d6 d5 8f 97 82 df 65 e5 49 9e 95 e1 42 66 f9 44 76 1a d8 1d 4f 96 5b 5e fe 56 ae 69 d2 ae 94 c9 33 e7 46 78 d1 7f ba 50 6d 7b 7d 27 b6 e4 db 63 4f bc bb ba e2 12 fe 23 c2 29 d9 58 5b d8 47 f8 6b 2c bb 74 85 b2 62 12 50 18 02 44 32 12 0d 8b 6e 84 1e 7b 95 bd 58 c9 bd 50 f1 dc 48 c9 85 85 8b 10 5c 47 a1 6b fc ea 4c 01 37 f1 3a e9 7a ba e0 b4 55 f4 15 db 7a 29 56 6e d9 d3 97 f2 bc 1c 1f a5 b4 61 0b 95 35 d4 c9 15 ab d2 d2 56 8c 2b ab 4c e4 d8 85 ab 46 5a 58 ad 6a 45 2e 44 11 15 96 5a df 2d 64 2d 36 6f 47 f4 1f 0f 79 1c 37 Data Ascii: mCf_1xoF7J{073lsX~WTeIBfDvO[^Vi3FxPm{}'cO#)X[Gk,tbPD2n{XPH\GkL7:zUz)Vna5V+LFZXjE.DZ-d-6oGy7
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 77 60 e3 bc 0a 98 c9 59 ae 05 8f 2d 6a cc 68 25 1c a2 19 56 cc da 91 e3 6e 1f 8c 68 9b bc 08 be ea da 30 f8 d8 8b 6b b8 15 62 4c 5e 6d 76 5d 35 6d cd fc 07 2a e9 5d 20 e0 b8 7c 7e 2f 13 96 68 de 30 ca e9 36 15 10 24 ae 57 29 90 82 a0 8d bb d1 de d7 d4 6f 50 5c 4f ab 0c 48 b8 49 61 91 5a c6 ed 74 6d 36 04 6b f6 1f 75 5a 7c 2a b5 58 2a 91 89 56 3c 72 8d 19 ca 9c e4 54 67 0a 35 d2 fe 9e 1a fa f8 52 11 86 91 b2 22 96 76 d0 2a 8b 9d 46 fe 00 03 e3 6a ba 70 ce ab 71 0c 47 6a f1 c6 a3 7c bd f6 37 f0 b5 80 d3 c6 ba 27 00 e8 fc 38 75 c9 1a 5a fe d3 36 ae c7 fc 47 f8 55 ab 3e 01 52 72 fe 2e 88 cf e2 1e 93 d3 84 71 4b 56 54 7a 1b d0 76 40 8d 88 60 c6 3b 94 8d 7d 84 2d 72 6f e2 d7 3f 65 5c ca 53 99 05 24 c2 bb 0b 7b 78 50 87 2c 0e 16 ea ee a5 c4 f9 a6 20 e2 b0 05 2a Data Ascii: w`Y-jh%Vnh0kbL^mv]5m] \|~/h06$W)oP\OHIaZtm6kuZ\|XV<rTg5R"vFjpqGj\|7'8uZ6GU>Rr.qKVTzv@`;}-ro?e\S${xP, *
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 8d cb 12 6f 1c 66 4b 3a b4 84 0c a4 1a aa 70 0e 91 08 5a 08 25 c3 48 b2 62 19 d7 13 31 01 82 62 99 8d e3 91 ec 41 cc d6 51 73 6c a4 5b 43 5d 9f a4 d2 a2 e3 b0 f0 82 01 18 49 c2 a0 fa 2a 1e 15 16 b6 c0 aa 90 07 80 f2 bd 54 7a db e8 d4 4f 87 c4 62 2c c9 2c 68 26 cd 1b 15 0e d0 90 c9 da 20 ee c8 05 b7 22 fa 6f 59 95 92 84 f9 59 b9 65 5b 0b 25 53 8f 60 e7 86 5c d8 39 db 0f f2 95 31 e2 00 17 8c 28 20 19 23 46 f9 b4 96 cd bd 85 ed 72 6a c5 d1 cc 4e 2b 0b 14 91 c2 d8 79 d5 ee dd 9e 22 3e c9 49 28 10 f7 e1 bd b3 65 17 cc ad cf 7a c7 06 c5 07 41 dd 60 48 0e 55 fd a0 18 5c 16 bd f7 e4 39 53 d3 55 a1 79 56 0f 47 b1 ad 53 87 d1 a8 9e 56 e7 19 ea ef 00 b0 3c b0 3c 2b 86 98 b1 6e c5 4b 18 fb 32 4b 29 89 9d 99 a4 4d 4f 78 92 79 69 6a b9 d4 af 4e ba 3a 31 11 77 7b b3 c3 Data Ascii: ofK:pZ%Hb1bAQsl[C]I*TzOb,,h& "oYYe[%S`\91( #FrjN+y">I(ezA`HU\9SUyVGSV<<+nK2K)MOxyijN:1w{
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 61 97 ef 15 3b c3 e6 49 06 64 74 71 fe 16 0d f7 1b fd 82 b7 95 c5 37 b4 8c 79 5b 54 8e f1 61 6a ab f5 9b c6 1e 0c 2b ba 1b 33 11 18 23 42 33 6e 47 81 b7 3a b8 3a f2 b7 95 44 74 bb a3 a3 13 03 c0 4d 8b 6a a7 90 71 b5 32 be 65 4d a4 49 6a 94 6a c7 9b 6c 9e 5c 96 42 49 24 dc 9d 49 3a 92 7c 49 3a df d6 a4 3a 29 c3 7b 59 e2 8a da 3b a8 3e 9b 9f b0 56 9d 23 e1 0f 04 8d 0c 82 cc 87 d4 10 75 0c 0f 35 23 9d 5d 3a 91 c1 2a c9 2e 36 4f ee f0 91 96 f5 72 08 51 f8 7b eb 91 a7 0f e2 62 67 7b 5e a2 f0 5b 8f 6d 30 75 a0 92 e0 e7 80 70 e9 25 13 92 7b 3c 28 01 a1 75 b5 9d a5 07 54 8e d6 cc d7 16 b0 23 5b 0a ec fc 23 81 ca ee b8 ac 64 a2 6c 42 8e e2 a0 b6 1b 0d 98 6a 20 8f 5e f1 1a 19 98 96 37 36 b0 36 a8 6e a7 7a 2c d1 23 63 27 1f f1 58 b0 18 83 ff 00 26 0d e3 85 7c c0 20 Data Ascii: a;Idtq7y[Taj+3#B3nG::DtMjq2eMIjjl\BI$I:\|I::){Y;>V#u5#]:*.6OrQ{bg{^[m0up%{<(uT#[#dlBj ^766nz,#c'X&\|
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 7d ab f7 b2 e7 cd 90 8c d9 74 20 9f 75 76 af ec ab d6 34 58 66 93 0f 33 a8 49 b2 e5 24 8b 2b 20 ca 33 5e d6 0e a7 e3 6d ab 83 3e 14 2c 6c 72 92 72 23 02 da 35 dd 44 96 22 ff 00 54 83 f0 a8 3c 11 94 5c dc 85 b5 ec a4 6a 18 ed ef b7 ae 82 99 2a 7c cb 03 b9 9a 67 be fa d0 eb 87 09 06 1a 4c 93 47 24 8e 8c 91 a4 6e ae 4b 30 22 e7 21 36 02 f7 37 b6 da 57 80 38 c7 04 65 63 20 05 96 46 69 2c 09 ba dc 93 63 a0 f1 04 1f 23 52 2e e4 8b db 30 bf 78 58 09 92 c3 70 57 75 b7 e7 95 36 c0 71 d9 63 2a af 69 61 cd 9a c4 28 ee 9b 06 ef 01 7f 67 96 c3 c2 96 8d 2e 40 93 c9 0b 8c c6 b9 d1 dd f4 d7 52 76 23 29 d3 cc 0a 6c f2 80 6e 5b 35 c7 3d ea e7 c6 b8 1e 71 9e 22 0a eb dc 72 3b 40 0e c7 37 35 d4 69 b8 d2 a0 70 dc 13 20 cc e0 5f 90 df fd 2f 53 f3 11 b2 32 1c 41 26 c3 41 52 9c Data Ascii: }t uv4Xf3I$+ 3^m>,lrr#5D"T<\j\|gLG$nK0"!67W8ec Fi,c#R.0xXpWu6qcia(g.@Rv#)ln[5=q"r;@75ip _/S2A&AR
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: e9 82 8e 59 a6 cb ae 56 90 05 45 fd a2 01 ee d3 38 1d 4a 91 ba 8f 2f de 27 a5 30 a7 2b 29 f3 fc b1 f5 26 b2 d3 4c 68 76 78 60 88 81 2e 26 55 86 32 45 c2 e6 b9 79 08 f0 44 0c de a0 53 bc 4f 68 99 0c d8 79 60 ed 40 28 64 ca 51 ae 2e 06 74 25 43 db e8 31 bd 48 f5 6d 84 cf c5 21 36 b8 83 0d 3c 9f e6 72 b1 03 ee 05 be 35 e8 55 ae 57 84 dc 4f 27 b5 b3 6e bc 61 34 63 a7 5d 10 5c 13 c0 12 69 64 18 80 ea fd b3 66 3d a4 6a 1b b4 5d 06 40 c0 d8 a0 b8 1a 58 78 c4 93 6e 76 f5 36 bd 5a ba fc e2 bf f1 78 2c 3a 03 24 af 1c cc 91 a0 ef 3b bb 46 8b fb 2a 2c 73 39 d8 5e a6 78 07 55 38 75 85 a4 c6 85 9a 66 42 d2 48 c4 88 e1 16 b9 58 45 ec 81 37 ed 2d 98 db 5a a1 42 fb 92 9f 9b 5d 4d 5b 9e 16 ea d6 6e 1a 2c 1c f7 b5 36 dc d4 47 1f e9 64 58 70 0c d3 88 f3 fb 37 cc 49 b6 e4 2a Data Ascii: YVE8J/'0+)&Lhvx`.&U2EyDSOhy`@(dQ.t%C1Hm!6<r5UWO'na4c]\idf=j]@Xxnv6Zx,:$;F,s9^xU8ufBHXE7-ZB]M[n,6GdXp7I
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 89 27 f3 a5 2a 98 97 02 e0 b0 f7 d1 a8 81 87 c5 48 87 42 7e fa 9d e1 5c 73 31 ca ca 07 98 d3 df 63 e7 51 58 1c 58 66 01 80 04 91 de b5 af ea 36 f7 8a 5f 1d 0e b7 b5 8a 9d 2d ce dc a8 e7 69 88 e2 9a 2c ec b4 e7 03 0d fe fa 86 e0 78 ec e3 5d 0a e8 47 e3 53 b1 7d f5 66 9b ce a5 79 ac 68 48 c2 ea 07 9d 58 78 1e 34 5c 69 f9 f1 aa 9a c5 f6 d4 bf 0a 5b 55 88 b2 09 a3 a7 70 6c 72 92 0d f9 d8 7c 35 fb 2f 57 de 01 89 f6 48 b7 7a e7 dd 7f 1a e3 1c 3e 72 32 8f f1 13 af c0 f3 ab ef 44 78 a8 2a 05 fd 91 af af e3 49 51 65 11 25 83 82 e1 70 af 23 2c 71 ad d9 be 0a 2f 62 c7 c8 78 0d e9 7e 33 c2 da 12 b7 94 39 77 64 cb 96 c4 2a 8b 87 df 40 4e 99 4e f6 a4 f0 b8 87 46 0f 1b 95 61 a7 93 0b df 29 e6 35 e6 0f 8d 29 87 8e 4c 54 99 ae 15 17 ba cc 82 c2 e7 da 44 cc 4d d9 be 93 92 Data Ascii: 'HB~\s1cQXXf6_-i,x]GS}fyhHXx4\i[Uplr\|5/WHz>r2DxIQe%p#,q/bx~39wd*@NNFa)5)LTDM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50256	172.217.165.206	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:25 UTC	456	OUT	GET /vi/lqj9G6oisic/0.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:25 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 42771 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 May 2024 22:32:06 GMT Expires: Thu, 16 May 2024 00:32:06 GMT Cache-Control: public, max-age=7200 ETag: "1712190782" Content-Type: image/jpeg Vary: Origin Age: 319 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-15 22:37:25 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 10 0e 10 10 10 10 10 10 0e 0e 10 10 10 10 0f 10 10 10 0f 0f 0f 10 0e 10 0d 0e 0d 10 10 0d 0e 10 10 10 10 10 10 0d 0e 0e 10 15 10 0e 11 12 13 13 13 0e 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 15 12 15 15 15 15 15 18 15 15 15 15 15 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 02 01 08 09 ff c4 00 4f 10 00 02 01 03 02 03 05 04 07 05 04 08 04 06 01 05 01 02 11 00 03 21 04 12 05 31 41 06 13 22 51 61 07 32 71 81 08 14 23 42 91 a1 d1 15 52 b1 Data Ascii: JFIFh"O!1A"Qa2q#BR
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 77 f5 03 e9 f9 fe 95 ef ec f6 f3 1f 9f e9 53 45 45 84 ce 8a 79 fb 3d bc c7 e7 fa 51 fb 3d bc c7 e7 fa 51 45 16 13 3a 29 e7 ec f6 f3 1f 9f e9 47 ec e6 f3 1f 9f e9 45 14 6a 09 9d 14 f3 f6 7b 79 8f cf f4 a3 f6 73 79 8f cf f4 a2 8a 35 04 ce 8a 79 fb 39 bc c7 e7 fa 57 56 b8 5b 12 04 ae 4c 75 eb f2 a2 8a 35 04 c6 8a 9b bf d9 a7 01 8e e4 21 62 60 9c cc f2 f0 f4 8a 61 fb 3d bc c7 e7 fa 51 45 01 c0 a6 74 53 cf d9 ed e6 3f 3f d2 8f d9 ed e6 3f 3f d2 8a 28 b0 99 d1 4f 3f 67 b7 98 fc ff 00 4a 3f 67 b7 98 fc ff 00 4a 28 a2 c2 67 45 3d 1c 35 bc c7 e7 fa 50 78 6b 79 8f cf f4 a2 8a 35 04 ca 8a 79 fb 3d bc c7 e7 fa 51 fb 39 bc c7 e7 fa 51 45 16 13 3a Data Ascii: ("((B(("((B(("wSEEy=Q=QE:)GEj{ysy5y9WV[Lu5!b`a=QEtS????(O?gJ?gJ(gE=5Pxky5y=Q9QE:
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 2e ed c9 0a cb 66 cb 09 1f 79 56 e0 5e a2 b5 4f 67 de c2 f4 f2 d7 f5 3a 8b 5a cb 2f 06 cb 5b ba 55 2e 99 66 77 77 0c 77 1f 09 c2 dc 60 46 f2 d3 d3 2c f6 9d c3 6c e9 b8 98 4e 1a e4 ec 36 b6 6d 73 73 65 f2 63 62 3e 59 b3 b6 41 2c 65 99 67 10 32 4b 9b 93 15 3d ed 68 04 d5 5f 9b f8 5e 83 07 e1 9e 8b d4 0b b1 b1 66 95 d2 35 85 de 21 68 11 58 1b 8a 20 38 0f 9f d5 63 7c 7f 83 5c b2 f7 ad 5e 43 69 d0 05 75 6c 14 60 56 56 79 72 93 23 0c b0 44 83 57 4f 60 de c7 b4 ba dd 16 a3 5d ad d5 5c d3 e9 f4 f7 45 98 b2 81 98 36 db 6c 59 e6 dd c3 b4 f7 a8 a0 2a fe f1 26 22 ae 7f 4c 9d 0c f1 50 c0 2e e3 a5 b1 de 41 c6 f0 d7 84 c4 e4 ed 28 33 f7 42 d4 bf d1 5e d0 b8 38 86 81 b0 9a eb 05 d0 40 01 6e 22 ec 24 7f 7a 18 1f 85 91 5d 97 ea d2 4b 79 5f 38 c6 f0 84 cd 6c b7 a6 c5 d7 35 Data Ascii: .fyV^Og:Z/[U.fwww`F,lN6mssecb>YA,eg2K=h_^f5!hX 8c\|\^Ciul`VVyr#DWO`]\E6lY*&"LP.A(3B^8@n"$z]Ky_8l5
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 15 61 94 e7 64 f8 43 80 2c a5 49 d0 e2 8b a2 8c f9 0b 83 dd 2e 86 8d ab 48 16 4f 17 c8 23 90 b2 ff 00 60 be c8 57 88 26 a3 53 a9 bc da 6e 1f a4 11 72 f2 80 5d ee 11 bb 62 6e 56 1e 05 2a 5b c2 c4 ef 45 51 24 95 d0 34 bf 47 de 15 aa 5b a9 a0 e2 5a 8b ba b4 b4 d7 51 2e da 02 d9 d9 b4 78 fe c2 d9 82 59 57 c2 d2 37 4c 18 22 ac 5e d5 6c ae 9a c6 93 81 68 fc 66 de c3 7c a8 1b af 6a 2e 10 ca 1a 3a b3 b1 ba 41 e5 36 bf 76 b8 f6 2d a2 6d 0f 1e 5d 33 9d c4 1b b6 19 a3 68 3b ad 9b 8a 40 63 20 12 ab 1c e6 44 73 ac f2 f5 17 09 c3 1a 3c b6 1a 4f b9 ec 17 63 03 e0 e8 9f d2 9f 95 33 c8 97 c3 74 ac 60 ad e3 6d 79 9d b5 ee 4e db 8d ab de be 63 f6 67 d9 57 d7 eb 34 fa 44 60 8f a9 7d bb 98 48 40 15 ae 5c 62 a0 82 4a a2 31 89 12 40 12 39 d7 d1 9a 5f a3 ef 05 6d 4f d5 53 89 ea Data Ascii: adC,I.HO#`W&Snr]bnV*[EQ$4G[ZQ.xYW7L"^lhf\|j.:A6v-m]3h;@c Ds<Oc3t`myNcgW4D`}H@\bJ1@9_mOS
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: e4 75 93 6e f2 72 0f 6d c8 12 3a 10 40 65 38 20 62 77 ee 31 d9 9e 1b aa e1 f7 b5 fc 32 ed e2 ba 6b 8a b7 ac df 11 01 f6 01 b6 54 37 df 0c 0c b8 6f 10 c1 15 ef 6d 1f eb fd 97 bc f7 bc 57 f8 4d e4 36 ae 9c bf 76 c6 da b2 93 cc 8e ea e3 2e 79 f7 76 ce 4a cd 56 0c b9 3c 5f 06 50 01 ab 15 c1 4d ea 7d 03 13 fc 7f f9 0e 9f 2b 9c c0 ed 0f 0f 00 39 a4 f0 76 d8 8e 3e bf 3a c2 fd 8c 7b 3b bb c4 f5 8b a6 b4 76 2c 1b 97 ae 91 2b 66 d2 90 19 a3 12 c4 90 aa b2 25 8f 30 03 11 b4 e8 be 8e 9c 2e e5 c1 6a df 1a dd 75 9b 62 a0 b5 6c 92 f9 11 86 ce 7c 8d 4a 76 6f 86 7e c4 e0 70 7c 3c 4b 8b 8d cf 88 7b 16 02 e1 3c c1 4b 6d f1 17 6f 39 ce cc 55 34 5c 26 ee 87 55 a1 b9 70 6d 2e 74 fa a5 5f 10 2a 86 f1 85 69 db e2 2a 92 56 70 18 03 ce 97 99 d4 4c 52 06 b4 5f 1a bd ac ec b6 fc 3b Data Ascii: unrm:@e8 bw12kT7omWM6v.yvJV<_PM}+9v>:{;v,+f%0.jubl\|Jvo~p\|<K{<Kmo9U4\&Upm.t_iVpLR_;
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 2a f6 36 02 8e ff 00 41 9c 1f fd 77 ff 00 da 4f d6 9f e8 7e 8b da 7d 4a 86 d0 f1 45 bc 12 ea 2d e2 d6 84 2a 37 bc 54 a3 66 e0 19 55 6c 1c c9 1c eb 71 ff 00 40 5c 2f ca e7 fb f3 53 1c 0b 87 e9 f8 6d ad 4d 9b 16 ee aa 2d 9b 9a c3 75 db 7a 31 55 09 b5 48 62 d2 05 b0 4a ed 11 82 27 76 1b 14 b9 37 fe a0 6d 7b 13 6b 9f 9d 8f d2 3c 3a c3 74 c6 42 40 01 ed 68 6f ec 49 f9 2f 9d 74 5f 46 fd 05 e7 6b 3a 7e 2f de 6a 61 f6 db ee 54 8d c8 0c ee da d3 b4 11 98 e9 ca be 65 e3 1a 62 8e c8 d1 ba db ba 34 64 6e 46 28 d0 48 12 24 18 24 0c 74 15 f5 77 d1 a5 fb 9f af f1 0b 9e e6 8f 48 ec 58 f2 2c c0 dd 3d 32 62 d1 c0 fd e1 83 22 be 4b d5 dc 27 2d 96 62 4b 1f 36 39 63 f3 33 56 c1 c8 74 f1 6b 70 e6 fe 89 7f 13 f4 98 7a 5e 73 b1 62 71 76 90 db 26 bf 31 16 46 df 30 9b c5 7d 19 f4 Data Ascii: 6AwO~}JE-7TfUlq@\/SmM-uz1UHbJ'v7m{k<:tB@hoI/t_Fk:~/jaTeb4dnF(H$$twHX,=2b"K'-bK69c3Vtkpz^sbqv&1F0}
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 2b c6 2d 5d d4 11 3a ad 5e 9e d9 59 94 b5 65 af 22 2d a4 9f ba a8 48 e9 b9 8b 31 cb 1a e4 74 fc 3b 91 d3 b8 55 92 5a 0f 6b ef f3 2b e8 3f 16 7c 42 46 2c 5d 32 27 b5 c5 ac 63 65 7b 78 71 6f 0d 0e ee d6 dd fb 9f 4d d6 dd ed dd 4e 9f 43 c2 74 44 cb d9 d2 8b b7 a4 cb 1b 8e 10 16 6c c9 2d 70 5e 24 9e 64 9c f3 a9 8e 1f ec 8f 8c 77 36 d5 75 96 ed da da 19 2d fd 6b 51 6f 60 61 31 b1 6d 00 0e 4c 8f 39 a7 fe d9 fb 0b ac d6 71 70 46 9e e1 d2 83 a7 b3 de 8d bb 7b a1 b5 ae b6 48 c2 97 b9 d3 3b 71 38 ac 63 e9 6f c5 ed 5e e3 d7 55 c2 b5 bd 35 ab 5a 6c 89 02 10 dd 68 8e 5b 6e 5f 61 e8 57 20 c5 51 b8 9e 3c f2 3d f6 06 c0 55 8b af ba d3 93 f1 09 e9 5d 2b 0b 1b 14 c6 e7 16 b9 ef b0 d7 d1 71 b1 7c d1 16 41 ee b5 ce cb 76 0f 47 c3 f5 16 6f 71 1d 6d 8b 9a 86 bd 6d 6c e9 6d 36 Data Ascii: +-]:^Ye"-H1t;UZk+?\|BF,]2'ce{xqoMNCtDl-p^$dw6u-kQo`a1mL9qpF{H;q8co^U5Zlh[n_aW Q<=U]+q\|AvGoqmmlm6
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: 7b c1 c7 da da ff 00 d4 b7 ff 00 3a d7 41 79 55 35 d9 be 0a 75 3c 4a d6 9e 27 bf d6 2d b2 3f ba d7 a2 e7 e1 6f 71 f9 57 d2 fe d6 87 d6 fb 43 6a c0 12 96 df 4d 60 8e 9b 56 2e dd 80 71 c9 d8 7a c7 5a cb 3e 89 dc 28 5d ed 15 b2 79 58 3a bb ff 00 12 a1 ed 2f e0 d7 83 7f 96 b6 9f 64 dd 98 d4 37 1a bb ac d4 58 bb 6a d2 b6 aa f8 7b 88 c8 b2 e5 95 04 98 92 2d dc 3e 78 53 f1 ae 57 52 69 7e 88 c0 e5 c2 fe 41 7b 9f 83 a6 8f 17 f1 59 4e 70 05 90 b8 32 c8 04 b9 db 0a f5 ef c2 87 f6 bf 61 b8 67 1c 4d 55 b1 16 ee b2 df 81 c8 83 e0 d5 5b e7 92 7c 4d e4 3b d5 f2 ae 7d 92 bf d7 7b 42 fa 80 65 15 f5 17 c1 8e 68 a0 da b1 82 01 07 c7 6c e4 4e 3e 26 8d 1f 17 6e 3b c1 5e ea a9 b9 ad d0 ea ee 10 aa 25 de c5 f7 2f 6c 01 cc 8e e5 d0 40 e6 74 e6 94 f6 5f c3 75 1c 37 43 c5 b5 b7 ad Data Ascii: {:AyU5u<J'-?oqWCjM`V.qzZ>(]yX:/d7Xj{->xSWRi~A{YNp2agMU[\|M;}{BehlN>&n;^%/l@t_u7C
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: b7 64 40 81 cc 1f 5a d1 90 1d 33 9b b1 da 37 1f d4 8a af 9a e3 74 79 21 e9 b0 4b 4f 6d bb 2e 26 72 3f 24 6f d5 ab 9f cb ef c2 c9 f5 7d a6 6b 9c 37 45 c3 ac e5 9e ed c7 b8 3f 79 ee 6a 1d 74 d6 ff 00 13 bc 8f 5b 66 ac 3d a4 ec f2 fe d5 d0 f0 d4 32 9a 51 62 dd cc 61 9d cf d6 b5 4f d6 77 ab 75 c0 80 39 0a 9f fa 34 7b 32 bc ba b6 d4 ea 6c dc b4 ba 75 fb 25 b8 a5 4b dd 79 1b 80 39 22 da 4f 4f 79 d6 32 b4 fb d9 37 66 b5 37 38 e5 ed 5d fb 17 6d db 9d 45 c4 6b 96 d9 01 2c 45 bb 4a 37 47 8b ba 62 7a fb a6 b1 c5 04 8f 6b 0b c1 b2 5a 3e 4d 6f f2 57 a3 cf ea b8 98 f3 64 33 1d ed d3 1c 72 c9 76 3c d3 cc 76 af fe b4 b4 91 b7 17 5d 94 ff 00 b6 de 2a 34 0b ab d4 82 3e bb c4 76 69 ec 99 f1 59 d3 58 48 24 7c 2e 3d db 92 3e f5 eb 40 fb 82 a8 9f 47 8e d9 70 ed 05 a7 7b ce ff Data Ascii: d@Z37ty!KOm.&r?$o}k7E?yjt[f=2QbaOwu94{2lu%Ky9"OOy27f78]mEk,EJ7GbzkZ>MoWd3rv<v]*4>viYXH$\|.=>@Gp{
2024-05-15 22:37:25 UTC	1255	IN	Data Raw: fb d3 fa 54 0b 76 af 55 f5 93 aa fa cd f1 ab 3c f5 02 eb 8b c4 00 04 17 04 12 b0 00 d9 ee c0 02 22 a1 cd 7a ad 53 48 b2 b5 3e 05 ed d3 8b ee da da fb c4 44 09 5b 3e 99 9e ea 7f 13 e7 51 fc 6b b4 da 8b ae d7 75 37 ae de 70 61 7b c6 2e 02 b1 5f 0a 82 61 54 8c c2 80 26 0d 67 b6 de 08 3e 47 f1 ab ca b0 b8 aa 39 4f 88 4c 4c 08 2a 03 18 e5 eb 27 f8 00 6c a8 f0 4a 77 c3 9b 70 2c 67 70 32 ac a4 02 08 4f 0f ca 39 c0 9c 4d 58 b8 0f b4 9d 76 99 05 bb 5a ab d6 ad 02 c4 5b 40 8d 27 20 81 de 2b 80 77 0d c7 6f 32 4f 99 35 54 d1 69 1e 18 2f 8b 71 18 07 23 dc 00 ed 39 f4 f9 c7 5a e1 f8 7b 03 ba e3 8f 0b 10 16 4c 8f 53 11 89 24 c0 3c e6 63 9d 58 90 a8 d6 9b d9 4e f6 eb b4 9a 9d 62 a3 6a 6e 3d e6 da 59 4b b7 85 44 ac 94 41 0a bb 84 a9 20 09 23 91 8a cc ed 2c 91 1d 7c b9 f3 Data Ascii: TvU<"zSH>D[>Qku7pa{._aT&g>G9OLL*'lJwp,gp2O9MXvZ[@' +wo2O5Ti/q#9Z{LS$<cXNbjn=YKDA #,\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50248	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:25 UTC	786	OUT	GET /public/javascript/applications/community/chunk~4b330692b.js?contenthash=555ff2496b7cbfc4085c HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:27 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:26 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=142205 Expires: Fri, 17 May 2024 14:07:31 GMT
2024-05-15 22:37:27 UTC	16098	IN	Data Raw: 33 65 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 30 35 5d 2c 7b 36 35 34 34 30 3a 65 3d 3e 7b Data Ascii: 3eda/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[2805],{65440:e=>{
2024-05-15 22:37:27 UTC	16384	IN	Data Raw: 34 65 65 33 0d 0a 34 20 33 35 4c 34 38 20 30 5a 22 2c 66 69 6c 6c 3a 65 2e 66 69 6c 6c 7d 29 29 5d 2c 6a 3d 5b 28 7b 73 74 79 6c 65 3a 65 7d 29 3d 3e 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2e 71 2e 73 76 67 2c 7b 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 35 34 20 34 37 2e 31 38 22 2c 73 74 79 6c 65 3a 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 77 69 64 74 68 3a 32 38 2c 68 65 69 67 68 74 3a 32 38 7d 2c 65 29 7d 2c 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 6f 6c 79 67 6f 6e 22 2c 7b 66 69 6c 6c 3a 22 23 36 30 30 30 30 65 22 2c 70 6f 69 6e 74 73 3a 22 31 30 2e 30 32 20 31 34 2e 30 36 20 31 30 2e 30 32 20 31 34 2e 30 36 20 31 30 2e Data Ascii: 4ee34 35L48 0Z",fill:e.fill}))],j=[({style:e})=>l.createElement(b.q.svg,{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 54 47.18",style:Object.assign({width:28,height:28},e)},l.createElement("polygon",{fill:"#60000e",points:"10.02 14.06 10.02 14.06 10.
2024-05-15 22:37:27 UTC	3819	IN	Data Raw: 65 52 65 71 75 65 73 74 22 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 65 3d 28 30 2c 5f 2e 58 78 29 28 22 23 47 72 61 6e 74 41 77 61 72 64 45 72 72 6f 72 5f 46 61 69 6c 22 29 7d 79 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6c 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 65 2c 7b 64 65 73 63 72 69 70 74 69 6f 6e 3a 52 7d 29 2c 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 65 2c 6e 75 6c 6c 29 2c 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 7b 70 6f 73 69 74 69 6f 6e 3a 22 72 65 6c 61 74 69 76 65 22 7d 7d 2c 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 46 2e 45 72 72 6f 72 43 6f 6e 74 61 69 6e Data Ascii: eRequest");break;default:e=(0,_.Xx)("#GrantAwardError_Fail")}y=l.createElement(l.Fragment,null,l.createElement(ee,{description:R}),l.createElement(ae,null),l.createElement("div",{style:{position:"relative"}},l.createElement("div",{className:F.ErrorContain
2024-05-15 22:37:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50249	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:25 UTC	789	OUT	GET /public/javascript/applications/community/communityawardsapp.js?contenthash=afc3d1cf46d793a7e76b HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:26 UTC	267	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:26 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: public, must-revalidate, max-age=177345 Expires: Fri, 17 May 2024 23:53:11 GMT
2024-05-15 22:37:26 UTC	411	IN	Data Raw: 31 39 34 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 67 74 6d 2e 79 6f 75 31 2e 63 6e 2f 73 74 6f 72 65 73 74 65 61 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 6f 6d 6d 75 6e 69 74 79 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 38 5d 2c Data Ascii: 194/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://gtm.you1.cn/storesteam/subscriber_agreement/. **/"use strict";(self.webpackChunkcommunity=self.webpackChunkcommunity\|\|[]).push([[238],
2024-05-15 22:37:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50285	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	633	OUT	GET /public/shared/images/comment_quoteicon.png HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	309	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 417 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-1a1" X-Cache: MISS CF-Cache-Status: HIT Age: 3627 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd52d2d288e-MIA
2024-05-15 22:37:27 UTC	417	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 43 49 44 41 54 78 da a4 53 5d 4e 83 40 10 9e 6d 38 40 8f c0 11 f4 06 70 03 bd 41 79 d1 50 9b 86 aa 69 7c 33 be 68 52 13 a5 84 4a ad 0f 72 03 7b 03 b9 41 f7 08 1c a1 07 d8 1f 3f 5a a0 60 4c 0a f8 25 c3 00 33 f3 ed b7 b3 b3 8c 80 20 8c 06 8c 31 93 8e 40 6b 9d 8e 47 6e 5c fd c7 fc 60 f1 0a ef 51 73 f8 de f8 6a 52 7c f4 a4 94 1e 8c 5a 58 6d 31 36 7b 7e d1 d4 1e b6 c2 76 ee a6 37 69 4f 80 b5 8b 29 29 37 8f 4f 33 d3 90 52 50 47 f4 61 03 43 0a 49 ff 81 21 3a 28 c0 91 73 1c e9 9e 00 0a d6 f0 67 2d ea 13 4d da 62 c4 72 02 25 1d d2 94 e2 dd 42 e0 a4 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<CIDATxS]N@m8@pAyPi\|3hRJr{A?Z`L%3 1@kGn\`QsjR\|ZXm16{~v7iO))7O3RPGaCI!:(sg-Mbr%B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50286	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	630	OUT	GET /public/shared/images/apphubs/5-star.png HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	310	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 3607 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-e17" X-Cache: MISS CF-Cache-Status: HIT Age: 3741 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd52a06a518-MIA
2024-05-15 22:37:27 UTC	1059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 51 00 00 00 0e 08 06 00 00 00 57 57 f0 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRQWWtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: 30 23 01 8c b8 41 8c 92 4f 37 38 db d6 2d fd a1 39 c2 18 95 13 4f 15 07 ae a5 8d 2b 8f d1 d6 8a 26 7a 68 c3 34 9a 52 9a 46 01 4f 88 24 93 48 09 a9 26 8c 14 88 11 82 40 c9 21 55 ff d9 b2 dc cf b7 f6 74 04 28 c2 78 72 4b 11 a5 5f 61 a3 87 a6 ec a1 09 b3 52 e8 c9 cd 33 c8 e7 52 8d 75 25 59 a0 84 34 73 34 23 51 d7 f5 6b ef cf db 53 dd 79 c2 3f c0 78 bc aa 10 fe c4 d3 03 79 9f d3 b8 e9 49 f4 74 75 51 98 01 3f e2 93 cd 64 b6 4a 03 7e d8 12 e4 b9 1b 57 d6 7d 5f f5 a7 ba d3 91 f9 57 ce 4e a5 67 77 5e 45 7f bd eb 20 89 3c 48 10 05 0a fa 35 00 c8 80 f0 ad 85 f4 ab bc bd ea d5 14 75 a5 65 5b 8d 31 c3 5d 61 46 68 28 63 a6 b7 57 99 3d 88 91 65 25 d2 87 99 0f db 34 55 23 a5 0f 76 e8 e1 f9 f8 63 0f 78 d4 85 78 66 89 8c 93 cd a2 b1 59 fc 7e 58 46 48 1f ca 88 c3 06 dd 8e Data Ascii: 0#AO78-9O+&zh4RFO$H&@!Ut(xrK_aR3Ru%Y4s4#QkSy?xyItuQ?dJ~W}_WNgw^E <H5ue[1]aFh(cW=e%4U#vcxxfY~XFH
2024-05-15 22:37:27 UTC	1179	IN	Data Raw: 71 ed da 59 d9 56 02 64 0b 1b a6 f6 df 1a 76 e3 54 a3 67 ff ba fb 7e b8 17 01 7c 1f ab 79 22 c5 00 40 e3 68 63 30 90 a2 3f d5 b9 3f dd f1 5a 6b 09 69 d4 38 94 71 ba c5 fb ed fa a5 87 ee 45 00 b7 60 82 3b c2 60 29 f2 09 80 eb 18 ce 89 e7 aa 5f 6a ba 1b c1 5e a3 06 cf cf e7 ff a1 ee 60 75 45 f3 8a ad 6b 9b 9e 41 00 1b 39 80 11 e7 d8 0e ea 67 98 cc 62 57 75 45 cb d2 8e 36 df 2a 55 89 62 84 ed 50 b6 ad 6b fe 7d 75 45 d3 4a 04 b0 21 9a 61 f8 81 cb 1c 2b 52 dd fe ae 4d ff f9 e7 f1 52 fc 3c 33 68 3e 22 da 72 a8 77 f7 cb bf 3d b4 14 01 dc 8e 59 3e f6 43 e6 c5 b9 dd cf 9a 9f ce 8a 39 e7 77 87 64 3e 63 f1 a1 95 eb 0a a7 66 28 44 f1 9e 1e a5 05 13 06 f5 66 ee b2 ac 02 be b2 27 c5 53 61 f9 48 76 f8 9c df 73 21 03 63 ed de 6e 85 0f ee 83 da 22 ab 34 00 86 23 3b 16 69 Data Ascii: qYVdvTg~\|y"@hc0??Zki8qE`;`)_j^`uEkA9gbWuE6*UbPk}uEJ!a+RMR<3h>"rw=Y>C9wd>cf(Df'SaHvs!cn"4#;i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50287	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	630	OUT	GET /public/shared/images/apphubs/4-star.png HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	309	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 3475 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-d93" X-Cache: MISS CF-Cache-Status: HIT Age: 377 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd52814da6f-MIA
2024-05-15 22:37:27 UTC	1060	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 51 00 00 00 0e 08 06 00 00 00 57 57 f0 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRQWWtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: 21 8c 24 60 24 0c c2 98 77 70 7b 6b cb a6 95 df 36 46 30 46 4f 4c a4 ca a3 73 e9 ad 75 27 68 77 e5 69 7a 68 fb 0c 9a 5e 96 4e 41 9f 4e a2 dd 46 49 69 76 f4 14 88 21 04 81 46 e8 9a 79 fd 7d f9 9f ec ee ed 08 52 04 e3 f1 5d c5 94 39 21 9e 1e 9a 7e 88 26 cd 49 a5 c7 77 ce a2 40 9f 66 cd 2b 4a 02 25 a5 3b a2 31 92 4d d3 9c 7b 7f c1 a1 ea ae 76 79 00 63 cd 8e 22 ec 27 91 1e 9c f6 09 25 27 a5 52 49 49 09 a9 aa 4a c3 3c 8b 6c 36 db 51 bc 3b 43 9f 02 19 86 3e d0 68 b3 aa 6c 02 29 b2 01 22 c8 22 83 8b a1 9b d7 f8 2f 6a d7 46 23 a5 e7 ba ac 3e 43 3d 21 0c 3d 16 63 b6 ff a2 5a 32 08 23 c7 45 64 0e 31 1e 7b 33 34 83 d4 7e ac c3 0c 8d c7 cb 13 f4 69 4b 51 e7 8c f4 93 1c 36 eb b0 b8 7d 48 0c dd 8c c5 48 c0 01 2d 43 9d 6b 00 c3 ce 18 d2 90 18 43 ee 4d 10 6e 74 38 9c 93 Data Ascii: !$`$wp{k6F0FOLsu'hwizh^NANFIiv!Fy}R]9!~&Iw@f+J%;1M{vyc"'%'RIIJ<l6Q;C>hl)""/jF#>C=!=cZ2#Ed1{34~iKQ6}HH-CkCMnt8
2024-05-15 22:37:27 UTC	1046	IN	Data Raw: 7b 40 e0 2e 0c f0 46 30 58 8a 7c d2 ec c7 90 27 5e a8 7e f1 f4 5d 20 fb 59 4d b9 34 9e ff 43 dd 4a 75 65 e3 da dd 1b 4e 3f 05 02 1b 98 c0 81 8d 89 16 88 85 61 77 d8 ba ab 2b 9b 56 76 b4 04 d6 6b 6a 14 46 68 1d ea 9e 4d 8d bf ab ae 3c bd 0e 04 9e 8a c6 88 7e a0 b0 bd 3e 9f b7 0c 79 e3 99 21 9a df 04 ef 4b 41 6e db 25 9f 88 c9 39 dc cf 59 92 c9 8a b9 20 7b 75 c9 92 ae 24 58 e9 02 9b a6 ae 53 a2 af 57 6d c2 a4 83 62 33 47 59 56 01 3f b9 53 12 a9 a8 62 14 6f f8 82 ec bb 1c 03 7d 3d fe 1e 95 13 f7 41 61 91 55 1a 04 46 46 ae 1b 66 9f 40 85 0b 32 10 d0 ec be 7e d9 b2 00 ab b0 9f 76 38 45 d1 df ab fa 43 0a 1e 1c 11 d4 60 48 8d 69 d9 6e ca 1c e7 a6 99 0b 47 12 02 9a 57 09 18 24 44 61 08 c4 18 5a 00 43 fa 86 8a 6c bc e6 40 c0 6f bd 75 5d 0f e0 1d 9f 90 90 18 db 67 Data Ascii: {@.F0X\|'^~] YM4CJueN?aw+VvkjFhM<~>y!KAn%9Y {u$XSWmb3GYV?Sbo}=AaUFFf@2~v8EC`HinGW$DaZCl@ou]g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50290	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	643	OUT	GET /public/shared/images/apphubs/item_type_hover.png?v=1 HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	309	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 2792 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-ae8" X-Cache: MISS CF-Cache-Status: HIT Age: 388 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd53b564c33-MIA
2024-05-15 22:37:27 UTC	1060	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: 87 a8 13 34 75 9a 39 cd 83 16 49 4b a5 ad a2 95 d3 1a 68 17 68 f7 69 af e8 74 ba 11 dd 95 1e 4e 97 d0 57 d2 cb e9 47 e8 97 e8 03 f4 77 0c 0d 86 15 83 c7 88 67 28 19 9b 18 07 18 67 19 77 18 af 98 4c a6 19 d3 8b 19 c7 54 30 37 31 eb 98 e7 99 0f 99 6f 55 58 2a b6 2a 7c 15 91 ca 0a 95 4a 95 26 95 1b 2a 2f 54 a9 aa a6 aa de aa 0b 55 f3 55 cb 54 8f a9 5e 53 7d ae 46 55 33 53 e3 a9 09 d4 96 ab 55 aa 9d 50 eb 53 1b 53 67 a9 3b a8 87 aa 67 a8 6f 54 3f a4 7e 59 fd 89 06 59 c3 4c c3 4f 43 a4 51 a0 b1 5f e3 bc c6 20 0b 63 19 b3 78 2c 21 6b 0d ab 86 75 81 35 c4 26 b1 cd d9 7c 76 2a bb 98 fd 1d bb 8b 3d aa a9 a1 39 43 33 4a 33 57 b3 52 f3 94 66 3f 07 e3 98 71 f8 9c 74 4e 09 e7 28 a7 97 f3 7e 8a de 14 ef 29 e2 29 1b a6 34 4c b9 31 65 5c 6b aa 96 97 96 58 ab 48 ab 51 ab Data Ascii: 4u9IKhhitNWGwg(gwLT071oUX*\|J&/TUUT^S}FU3SUPSSg;goT?~YYLOCQ_ cx,!ku5&\|v*=9C3J3WRf?qtN(~))4L1e\kXHQ
2024-05-15 22:37:27 UTC	363	IN	Data Raw: d3 93 67 f2 cf 8c 9d 95 9d 7d 7e 2e f9 dc 60 db a2 b6 7b e7 63 ce df 6a 0f 6f ef ba 10 74 e1 d2 45 ff 8b e7 3b bc 3b ce 5c f2 b8 74 f2 b2 db e5 13 57 b8 57 9a af 3a 5f 6d ea 74 ea 3c fe 93 d3 4f c7 bb 9c bb 9a ae b9 5c 6b b9 ee 7a bd b5 7b 66 f7 e9 1b 9e 37 ce dd f4 bd 79 f1 16 ff d6 d5 9e 39 3d dd bd f3 7a 6f f7 c5 f7 f5 df 16 dd 7e 72 27 fd ce cb bb d9 77 27 ee ad bc 4f bc 5f f4 40 ed 41 d9 43 dd 87 d5 3f 5b fe dc d8 ef dc 7f 6a c0 77 a0 f3 d1 dc 47 f7 06 85 83 cf fe 91 f5 8f 0f 43 05 8f 99 8f cb 86 0d 86 eb 9e 38 3e 39 39 e2 3f 72 fd e9 fc a7 43 cf 64 cf 26 9e 17 fe a2 fe cb ae 17 16 2f 7e f8 d5 eb d7 ce d1 98 d1 a1 97 f2 97 93 bf 6d 7c a5 fd ea c0 eb 19 af db c6 c2 c6 1e be c9 78 33 31 5e f4 56 fb ed c1 77 dc 77 1d ef a3 df 0f 4f e4 7c 20 7f 28 ff 68 Data Ascii: g}~.`{cjotE;;\tWW:_mt<O\kz{f7y9=zo~r'w'O_@AC?[jwGC8>99?rCd&/~m\|x31^VwwO\| (h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50288	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	636	OUT	GET /public/shared/images/buttons/icons_16.png?v=5 HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	311	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 6719 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-1a3f" X-Cache: MISS CF-Cache-Status: HIT Age: 3510 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd53903d9d9-MIA
2024-05-15 22:37:27 UTC	1058	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 20 08 06 00 00 00 63 13 a1 44 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR@ cDtEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: ba aa ba aa 7a 84 f9 7b e7 dc a9 ea f7 de 57 5d f5 ea d5 d7 f7 de 77 eb 4e 24 1e 8f ab 48 24 a2 da 7b f9 cd 6f 37 4e c0 66 28 a4 ea 87 97 8d ad 0d 8a 1f 30 60 40 0a bf 6f df be c0 f8 67 26 4d 4a e1 2f ad ac ac 75 1b 37 9c 67 14 9b d7 21 b5 38 cf a2 a0 df 73 c3 86 f1 29 fc 83 e3 d6 17 85 b8 ce 14 1e d7 e9 8a b7 ce ff be 07 96 c4 f1 a9 e2 27 3f be be c4 6a fb f5 fd 0f f2 18 51 b9 de 18 8f 75 d3 8d 37 c4 5c be 0f 78 55 81 ef 2a 31 ce c1 86 47 bb 23 7e f3 94 d3 12 f8 0b d6 ec 2a d1 ea d2 f0 68 8f b5 97 b9 88 b1 fb 06 36 bf 87 b4 62 0c ff 56 6f 9b 55 fd d9 59 d8 cc 84 5c 08 39 45 aa 3f 80 bc 00 59 be 6c 74 9f 6d 7a ff 0f 3f 6f 39 7c e2 71 39 bd b8 bf ff 70 eb 17 af 1c 68 e9 3d 3e 9a d7 8a e3 bc 89 aa ef 4b b7 ed 90 d3 81 8d 9b f5 a8 1b 92 cd b5 e0 78 89 f1 c7 Data Ascii: z{W]wN$H${o7Nf(0`@og&MJ/u7g!8s)'?jQu7\xU1G#~h6bVoUY\9E?Yltmz?o9\|q9ph=>Kx
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: a8 7d d1 af e7 f4 3b a5 77 0e 35 c0 bf e9 a6 bf 70 04 48 cc e7 ea c8 4a 54 b6 f8 e9 ca 9f c3 9e 0f 70 6c e2 f8 31 45 0e e6 b3 6f bc b9 32 2a e6 af 6f fc e4 0d 1b 12 f8 b8 9d 30 75 02 1d ed 60 3e af 00 09 16 81 04 eb 5d 7c 2f 19 f1 20 c1 22 90 60 68 3c 48 b0 08 d7 9e 86 6f ee f8 26 30 57 fa a6 e9 fe 1e 0f 4d 90 76 e3 34 10 c6 8f a8 a0 61 7b 63 42 b5 1f 9c d7 77 19 48 05 44 d7 1f 1f ff 11 b2 16 1a de 47 1a 94 66 2f 1d ef 5c 74 b8 12 6d 8d 5a db 85 b2 7d 4c ff 2e 6a 72 96 4f 0f c4 f3 75 6c 3e d6 9a 1f 13 02 bc d0 6d b5 d7 6d 75 d8 ac bf 6b db e1 9f 88 39 9d 23 c7 a0 96 cb 45 96 e5 fa f9 f4 e9 a9 4a 3f 6b 8a 1f c0 6e bf c1 c7 e7 7c fb e5 0f 9b d6 1d 6e 89 bf bc 66 57 63 97 26 c0 9c 10 98 3a 95 74 00 7f 19 f2 3b 4d 7c 81 3c c0 d5 c6 83 6c 92 4f 11 c8 2f 31 c9 Data Ascii: };w5pHJTpl1Eo2*o0u`>]\|/ "`h<Ho&0WMv4a{cBwHDGf/\tmZ}L.jrOul>mmuk9#EJ?kn\|nfWc&:t;M\|<lO/1
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: 88 6f 7e 08 9f 69 bb bd ff c6 79 6e 63 ac a7 4a 2e 04 9d 2d 8b 5e 4a d3 fe 2b 65 0e 6c 5b 6a 2d 50 69 78 aa 02 7f 84 2c e0 2f 88 b0 f1 bf aa 64 84 bb 55 b8 64 b4 88 e6 01 b4 c6 5d c6 f7 07 c2 63 50 76 b9 5c 87 f5 90 2a 68 7f 15 21 c6 2b aa 0d 7c 45 08 02 64 5c 20 b7 6a e6 96 2d be f0 d0 02 ab 35 5f 64 81 8b f9 39 5d d3 6a 6d 26 35 b4 c0 40 78 33 24 46 7e 7d 7d e3 75 97 00 4d e0 4e 10 0a e3 55 de 16 93 67 ac 1b f9 3d 5d d7 d8 e0 40 82 5b 20 97 42 5e ce f4 d0 a9 64 08 0a 7f f0 ab 84 e0 12 85 e6 30 c5 20 bf 2a e9 bb 86 58 ae ea ca 9a 49 62 e5 97 0b 1d d2 f7 4d f1 57 c5 65 3f a1 05 98 fd 8d 73 f9 03 36 df 91 e7 ee bf 21 fd 64 3e ec 12 9f e7 43 aa 93 17 b9 c7 db c5 d5 a1 17 7e de 6e ce 01 5d 03 a4 d9 3a 0b c4 66 0d 6a c2 4e 86 69 fc 17 2a b9 6c 3f 46 fa 54 a0 Data Ascii: o~iyncJ.-^J+el[j-Pix,/dUd]cPv\h!+\|Ed\ j-5_d9]jm&5@x3$F~}}uMNUg=]@[ B^d0 XIbMWe?s6!d>C~n]:fjNi*l?FT
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: a2 ae a6 aa 1f c6 76 a7 98 bc 0d 18 6b be 8e 75 40 fa 4c 66 9d b4 ed 44 5b 3f 87 f3 ef 07 0d 6f a7 98 bc 0d d0 f8 6c 78 d6 49 db 4e b4 39 e2 a1 e1 ed 14 93 b7 01 1a 9f 0d cf 3a 69 db 89 b6 7e dd 94 97 41 03 d4 c9 4f 27 bd 00 9a a0 de 2f 12 d0 1c 76 22 bd 27 5c da d3 8a 13 e9 e9 e4 a7 b7 1b c5 4a 8a 6a 49 cc c3 b7 65 f5 29 6d 2b 3c 93 b2 1a 29 b9 62 2e d9 57 26 68 7d cc a4 ac 65 a2 6d 59 12 d5 b5 30 d3 64 37 4a 46 bc 91 81 26 30 de 34 f9 db b0 d0 b1 7f 89 f6 79 87 47 5f bd ed 12 c1 f2 bc e7 a9 23 b1 7b 94 e1 d0 1c 19 0b ca d8 be 8b 64 7f b8 d1 67 9e 60 ad 1f a1 88 10 5d 1d e4 90 48 9d de e6 55 40 6e 11 21 ba 3a c8 21 91 3a bd cd ab 80 dc 22 42 74 75 90 43 22 75 7a 5b 77 49 2f b6 55 60 93 fc 2c 4d ca 8d 14 7d 90 9f a5 c9 b9 91 a2 97 06 e8 45 8e 19 35 40 2f Data Ascii: vku@LfD[?olxIN9:i~AO'/v"'\JjIe)m+<)b.W&h}emY0d7JF&04yG_#{dg`]HU@n!:!:"BtuC"uz[wI/U`,M}E5@/
2024-05-15 22:37:27 UTC	185	IN	Data Raw: ff 9b 4b ed c1 fa a7 49 cc 28 d2 47 fc 8c 3f 27 49 e2 78 65 aa bb b4 57 2d 90 3f 64 7c 2f fa d7 98 67 4b f0 99 1a e1 4d 90 33 f1 f9 a0 f4 71 d7 00 db 13 a1 67 03 0e 43 7e 9a af 2a 74 52 55 75 8c 92 b2 82 d4 3c 93 a2 4a 32 07 d7 a4 aa d9 26 65 c5 e4 f2 c4 4b 78 82 2b be 8d 35 41 12 de a9 01 20 24 4b fe c3 f3 cd 2a 19 56 f2 90 f5 ff 39 64 e5 f8 7a 69 63 ce cb 3b ba 69 a6 5d 6b 81 07 31 d7 12 f9 00 b1 4d e5 03 b4 c8 cf 9c 94 dd 23 d6 5d ba 4b 77 e9 8c 9a e0 34 c8 17 dc 3a f1 1e e5 ff 05 18 00 d5 55 a2 56 60 d4 43 10 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: KI(G?'IxeW-?d\|/gKM3qgC~tRUu<J2&eKx+5A $KV9dzic;i]k1M#]Kw4:UV`CIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50289	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	639	OUT	GET /public/shared/images/apphubs/icons/icon_rate.png HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	310	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 1131 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-46b" X-Cache: MISS CF-Cache-Status: HIT Age: 6053 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd5396ba543-MIA
2024-05-15 22:37:27 UTC	1059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-05-15 22:37:27 UTC	72	IN	Data Raw: 61 de 81 b8 00 ea a7 0f 48 2e c0 06 1e 40 5d a6 80 64 18 4a 42 4a 84 fa 9f 01 8f f3 fd 61 b6 c3 a2 94 11 57 6e c4 93 43 41 2e d8 40 96 01 d8 00 40 80 01 00 d6 2d 50 a0 5d 53 af ac 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: aH.@]dJBJaWnCA.@@-P]SIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50179	172.64.145.151	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	402	OUT	GET /public/shared/images/comment_quoteicon.png HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	309	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 417 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-1a1" X-Cache: MISS CF-Cache-Status: HIT Age: 3627 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd65fd78dba-MIA
2024-05-15 22:37:27 UTC	417	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 43 49 44 41 54 78 da a4 53 5d 4e 83 40 10 9e 6d 38 40 8f c0 11 f4 06 70 03 bd 41 79 d1 50 9b 86 aa 69 7c 33 be 68 52 13 a5 84 4a ad 0f 72 03 7b 03 b9 41 f7 08 1c a1 07 d8 1f 3f 5a a0 60 4c 0a f8 25 c3 00 33 f3 ed b7 b3 b3 8c 80 20 8c 06 8c 31 93 8e 40 6b 9d 8e 47 6e 5c fd c7 fc 60 f1 0a ef 51 73 f8 de f8 6a 52 7c f4 a4 94 1e 8c 5a 58 6d 31 36 7b 7e d1 d4 1e b6 c2 76 ee a6 37 69 4f 80 b5 8b 29 29 37 8f 4f 33 d3 90 52 50 47 f4 61 03 43 0a 49 ff 81 21 3a 28 c0 91 73 1c e9 9e 00 0a d6 f0 67 2d ea 13 4d da 62 c4 72 02 25 1d d2 94 e2 dd 42 e0 a4 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<CIDATxS]N@m8@pAyPi\|3hRJr{A?Z`L%3 1@kGn\`QsjR\|ZXm16{~v7iO))7O3RPGaCI!:(sg-Mbr%B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50295	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	631	OUT	GET /public/shared/images/apphubs/not-yet.png HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	310	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 2441 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-989" X-Cache: MISS CF-Cache-Status: HIT Age: 6735 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd86ecb8d97-MIA
2024-05-15 22:37:27 UTC	1059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 51 00 00 00 0e 08 06 00 00 00 57 57 f0 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRQWWtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: 7f 4d f4 bd c9 41 6b 1a c5 15 d1 a8 bb c4 75 a3 86 88 e3 b8 46 15 bf fb 60 2c ad 96 41 b0 eb 23 11 7b 30 1a ad 31 45 9f a7 81 33 15 2d 24 73 eb 22 91 c8 1a 74 ad 6a 19 2c c0 43 e8 2e ba ea 87 33 65 bc 5c 10 1d 32 68 80 17 0e 8a 82 28 62 4e a5 ab 67 f3 f2 7e 18 8f 5e 65 54 9c 01 2b 5c d7 5d 87 cc 15 86 6d db 86 e7 79 e2 54 25 8c 7b 59 bc b5 30 1a aa 64 24 88 05 8b 10 ed 0c fc 28 14 f2 53 16 c1 2a b3 7a 8d ae eb 2c 61 05 97 23 09 49 dd 4c 26 5b 91 f1 30 30 da 5d 86 be c8 8c 42 c1 33 b2 d9 4c 45 0c 8c ef c1 f0 18 fa ab 25 7b 32 99 f1 4a cb 89 bc af 87 00 d6 c0 78 b8 1a 06 73 c9 40 77 01 3b e2 01 18 b6 e7 e5 f0 63 6a 2c ca 65 62 97 6d 3b 32 b1 89 cc 59 94 4e a7 fd e8 57 f8 eb 20 00 20 cc 5b 61 2c 16 46 65 59 58 88 db 76 64 95 64 0e 8e 0c 8a e1 99 4c a6 42 13 Data Ascii: MAkuF`,A#{01E3-$s"tj,C.3e\2h(bNg~^eT+\]myT%{Y0d$(S*z,a#IL&[00]B3LE%{2Jxs@w;cj,ebm;2YNW [a,FeYXvddLB
2024-05-15 22:37:27 UTC	13	IN	Data Raw: e6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50294	104.18.42.105	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	643	OUT	GET /public/shared/images/apphubs/bg_workshopitem.png?v=1 HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	312	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 24341 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-5f15" X-Cache: MISS CF-Cache-Status: HIT Age: 6629 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd85ca474b0-MIA
2024-05-15 22:37:27 UTC	1057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 31 00 00 00 7e 08 06 00 00 00 4c 1c 26 65 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR1~L&etEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: 2d 7e bf 6f 05 cd f3 d8 3b 9e fc 7d 6e 3b f2 9b 38 ee e1 f8 dc f4 ae 15 0f ee 53 88 ef e2 c9 67 2e 7c 46 fb 7e 8e ef 68 ef 8f b2 5d 6c ff 66 ff 77 fe 5d e1 17 fa b1 30 55 67 4d 5e 5f 16 ef 47 75 8f e0 f4 16 02 c0 7d 7d 1e 83 8b 7c 69 60 a0 c9 07 f9 be 8e 7f 74 f3 e3 0e c7 44 9d 40 86 83 e7 81 ef b0 bf 18 04 2b 74 82 42 27 68 84 fb 1e d4 09 1c e5 19 c9 7f ca ff 95 82 8d 0c 39 69 ab f5 e3 32 be 6f 58 fc 36 3f 9f 3c 15 b8 5b e7 0d 13 0b ea c4 3d 56 2d 00 da 99 d3 af 07 67 47 c4 fe 10 c1 f9 47 43 f0 22 b1 f0 f4 ae bd b6 58 89 f7 70 ba 8e e1 8b ca eb e7 3e 86 f0 c6 d3 5f 59 e0 6a bd 17 77 f8 8e d1 36 f0 16 f7 7b 84 7e f0 16 cf 3b 26 51 18 37 ce 57 ef cf 7d 1d d3 db 5f 96 a0 7c 1c 0d a4 83 39 68 3a 3c 33 e9 83 79 58 9c c5 a3 5c 84 e4 f1 b7 89 f0 2d 81 50 b1 01 Data Ascii: -~o;}n;8Sg.\|F~h]lfw]0UgM^_Gu}}\|i`tD@+tB'h9i2oX6?<[=V-gGGC"Xp>_Yjw6{~;&Q7W}_\|9h:<3yX\-P
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: f1 fa da 65 ac 7a 86 14 12 0a f2 86 44 e1 f3 6d 47 77 09 5a 47 03 c9 25 41 09 13 81 a9 17 28 5a bf 9f 79 ef 91 6d f4 b6 67 26 bf 6b e6 d8 4d 03 1d 99 0b af cd 88 8f 1b 21 f4 11 87 36 78 98 9a 38 ab e4 c5 88 3a c5 b3 94 87 f0 8c d0 34 4f 69 5c bf e0 2c 77 d5 e2 cf 8a f7 71 e3 34 cd ec 1b 66 b8 38 fd 98 d0 3c bf f3 8b 46 4c e6 ca 2a 64 08 c2 5a f5 32 09 c5 e2 7b f3 f6 28 ce 7f 0e 1f 33 45 35 39 f5 66 ba 02 65 8e c4 8e e8 c3 66 38 91 b7 91 7a cd fc fe 92 40 d3 7b 0f 0e 04 31 33 b9 ad de e7 ca 60 d4 fa bc 99 3c 77 f7 71 1d 46 ef bb 74 51 e3 0e 41 2e 11 c1 fd ea 12 4a fc 72 e9 c3 dc df f6 00 35 56 d4 95 44 2b c7 73 bf 23 6d e2 fd 37 35 ce 81 aa e1 aa df 8b 49 e6 20 be 0f 92 a2 57 e2 35 0a 69 6d 7d 4b 9d 0e a0 ac bb a6 88 ad 55 df 1c 44 52 97 20 a1 d6 cf e6 0e Data Ascii: ezDmGwZG%A(Zymg&kM!6x8:4Oi\,wq4f8<FL*dZ2{(3E59fef8z@{13`<wqFtQA.Jr5VD+s#m75I W5im}KUDR
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: 9b 31 c6 13 fb 04 91 45 42 49 2d d3 36 f6 af 5a 96 85 ce 4e 63 c1 a9 d7 3c 3f 10 2d 9d 34 1d 10 3c 63 b3 dc ab 6a 1d e1 6f 66 d3 41 0c 10 ce 91 60 35 0a 40 a3 c0 75 97 ed 8e 02 ee 4c 60 d4 d0 61 6f bb 2d 84 3c 23 1f d1 ae 65 99 9b 69 db e1 c6 fd 31 e9 a7 05 6a 70 4a b5 3b 03 77 f9 9f 19 18 e2 bd 7f 58 43 5d 7d 44 46 6a 10 cd 39 b4 d1 90 34 aa 02 18 17 e3 e6 74 c6 ad ee 8e 6c 15 41 66 17 0e e9 82 ef 1d 58 d1 72 22 13 c7 c0 51 52 01 d1 b9 e5 90 18 53 ea 91 84 48 3b 91 fa 2e 61 bc f4 82 8b a0 08 d1 9f e9 39 b1 42 5e 31 43 e0 8f d0 da 48 a1 3f 9b 4a ce a4 57 33 88 a7 7c df 32 78 4d fb 9c 99 d8 37 a3 bc 57 e3 c8 66 f6 69 86 67 3b 8a 3a 7b e9 72 0b 11 53 41 d8 2f 45 85 72 24 d7 68 c9 33 cc 24 76 e8 e9 b3 46 96 3b 65 45 10 02 7d 70 9e 9f 70 9e 0c 8a 6d 08 24 36 Data Ascii: 1EBI-6ZNc<?-4<cjofA`5@uL`ao-<#ei1jpJ;wXC]}DFj94tlAfXr"QRSH;.a9B^1CH?JW3\|2xM7Wfig;:{rSA/Er$h3$vF;eE}ppm$6
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: c5 42 09 1f 80 48 2b 83 bb 85 a8 7d 78 b7 0c 64 15 4c 63 23 aa 0d 62 7f f8 c3 1f b8 70 b2 68 a5 8d 23 e3 c4 91 85 0f d3 9c 9d 4d 6f f5 ef 09 4d 5b 15 cb 1e 2a 5b 94 d4 49 43 65 a6 81 bc a8 f1 7a 0b 1d 2d 4a 7a da db 9e 39 50 1c 58 3a fc 98 19 a4 98 ad 5e cf a5 23 83 99 49 47 0f a4 93 8a a6 a0 85 1b 52 ec 28 e7 38 ce a6 8f a3 be cd 81 30 54 89 99 85 5a 5f 69 71 9a 68 ea ce dc 05 21 60 c5 85 33 9a d0 13 7c 0c b6 83 ce 97 95 0e 16 fb b9 37 54 cf 4a 56 0a 26 f5 9c d0 2c c7 0c 56 fc a9 20 02 4e 15 04 64 f3 db f6 a0 26 25 16 25 f2 9a 51 54 b3 72 63 f7 f8 34 43 63 cd 50 6b 35 6f 55 2b 5b fe f4 66 c0 09 2d 03 f9 86 44 57 a7 41 30 ea a5 84 da 36 b5 20 36 2a 0a 2c 83 b4 72 c4 af 61 e2 3d d4 41 76 3d f9 86 69 14 0b a8 93 4e 16 b3 b8 1a 63 bb e6 cc 01 31 41 d0 cf fa Data Ascii: BH+}xdLc#bph#MoM[[ICez-Jz9PX:^#IGR(80TZ_iqh!`3\|7TJV&,V Nd&%%QTrc4CcPk5oU+[f-DWA06 6,ra=Av=iNc1A
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: f5 ad 8b ca 20 c1 83 c5 63 26 d8 1c 85 0b 23 2d 20 06 fb 54 54 9d b8 26 2b f2 eb 53 ef 87 e8 bc cb cf 00 37 f3 2f 19 88 78 74 9c 4a e0 c9 4d fd e6 ce 55 e3 bb a8 67 31 26 2c 4f 0f 82 4f 14 fb d1 3a 17 da 1c 80 c1 86 99 d3 e2 02 a7 32 e5 ec 6b b8 48 0b eb 82 e9 3e 3c 8d 59 4b 94 45 3f a4 f0 9c 74 1d 0b c6 fe 78 ce cc 0d 4d 30 72 25 ab 04 91 b7 cc fe ef d5 7e 9b 0d 64 d7 b7 ab b7 e3 d9 ff 72 9f 73 71 ef 6c ff 61 26 b9 96 89 46 dd 26 7a c1 c4 03 4f 1d de ac 85 ee 8e 22 0d ee 04 a2 16 c1 dd 4a 2d 31 40 9c a3 06 e7 d9 f4 4d 4b 53 8f 70 54 47 e4 94 33 7c 98 92 21 95 e3 67 40 d4 2f 06 4d e7 5f 17 00 ca 7b 1a dd 73 c9 5b 67 32 3b 1c 39 f7 93 f4 0a 8e 36 b9 a3 05 d9 fa 0f 2b 88 54 eb 8e 96 39 ac 36 01 a9 9e 54 d4 3c 2c 1f 08 39 06 48 d3 30 ef e6 43 a3 b4 c6 86 75 Data Ascii: c&#- TT&+S7/xtJMUg1&,OO:2kH><YKE?txM0r%~drsqla&F&zO"J-1@MKSpTG3\|!g@/M_{s[g2;96+T96T<,9H0Cu
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: f0 3d 3c 78 f0 67 1c 37 b5 94 14 03 74 87 9c 78 40 11 18 8a 3b 57 bf 43 f9 b2 07 b2 4a 2f d1 18 5c c1 ed 7d ee 9c 53 1c 47 23 b8 34 b6 cc 7d 06 77 09 28 f1 6f be e0 28 ee f1 4c e8 20 ba 90 2c a0 85 73 1b 1a af 32 80 a9 db cb 34 67 62 4e 64 87 2b 83 10 b2 ca 85 8a e5 fb 4d 92 5c 08 8d 99 19 a4 5c bd 06 ee de 03 47 d4 16 95 8e 64 04 23 2b a0 5e 4f e2 11 97 05 74 d0 21 35 10 54 2b 45 6d 05 6a a6 f9 81 2b 5c af ce 52 15 8d f2 61 47 bd a4 c6 cd c8 7a b9 9c 7f 3a e2 f9 b4 42 d3 9a f1 5e 18 2e 00 c5 d4 6e f0 fd 04 d1 99 86 92 bf 26 9e eb d2 78 7a a4 5f 1f 97 ef 06 5a fc 97 86 bc 52 d0 0a 23 d3 a0 05 b0 ce 75 02 5a 01 be 96 6a 70 9c 99 2e d2 cc a8 d2 4f eb a8 eb fd 84 6a 5f 5b ae 98 5a 73 f5 8c ed cd 8c 84 a1 15 9c 38 c7 c6 5c 36 29 8f fa 3c 67 2a 85 5a a3 fa 9c Data Ascii: =<xg7tx@;WCJ/\}SG#4}w(o(L ,s24gbNd+M\\Gd#+^Ot!5T+Emj+\RaGz:B^.n&xz_ZR#uZjp.Oj_[Zs8\6)<g*Z
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: e7 27 f0 70 47 4e 81 ec 7f 5a a0 ca d1 0e 37 f8 0d 28 04 2e 17 e7 21 4f af a0 30 65 2d 47 56 a8 81 44 43 5e a8 ee 93 e4 c8 90 be 9f d5 cf 8b 0e 8a ac d3 30 bf 1f b9 20 36 aa 85 04 dd 00 af e8 ca 92 da 50 a6 ec ad 08 df 0a 34 47 11 66 49 1d b0 02 4b f8 5e 78 a7 19 df e0 7b 47 65 77 f5 fa c2 e5 db c3 28 70 61 92 e3 af c0 b5 d4 15 26 29 0b 10 b9 b1 4c 6e 21 db 86 80 0a 8d e8 89 99 11 29 83 11 9f 31 49 07 56 dc 5a ab 8d 59 6b 2e 32 82 db 16 87 6d 1a 83 b2 01 bc b7 6a 8f 04 a1 92 b9 cb 7f e2 ea ac b1 42 54 b7 1f 90 f2 c1 6f e1 b6 7e 27 27 57 21 2b 05 1e 8d 68 cf 1d 19 28 be 57 38 32 a0 95 fc c9 ef 9b 45 76 3d e4 2b 95 01 50 82 d6 a8 f0 c0 13 c5 83 19 d4 d6 17 13 47 6d 50 af 88 71 e9 18 d2 bf 26 44 35 44 4d 77 fb 6e 34 02 8f 9a 04 a1 7d cf 57 29 63 3e 94 1d 52 Data Ascii: 'pGNZ7(.!O0e-GVDC^0 6P4GfIK^x{Gew(pa&)Ln!)1IVZYk.2mjBTo~''W!+h(W82Ev=+PGmPq&D5DMwn4}W)c>R
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: f3 cf 9e 9d 15 22 21 16 0b 15 4a a6 49 8c 85 ae 17 3c 40 03 8b bd 5a 12 bc 1b d2 28 90 d4 35 0c fb 9c f1 38 00 51 16 10 fc 65 ce d2 9e 62 3a 51 c3 8c 3d 7e 6e 88 90 79 00 9c d9 21 14 16 29 58 f1 b9 35 dc 06 cc 7e f7 84 53 13 6b 39 34 e8 bc ae b5 c9 8a e6 de 1a 0d 5c 40 b7 e7 33 d5 d3 7a 81 7c 75 0b 49 49 a8 3e 9e e9 e6 96 65 d5 d1 5f c3 73 e2 ed 7c 3f 78 6a 67 72 c1 f8 f5 f5 d9 7e de 2c 57 36 80 62 d9 7e 73 43 11 ad 49 9d 18 4d 06 16 25 c5 28 7b 1d e5 d9 ce 9c 27 78 40 34 63 82 b5 1c ce 86 e4 71 fe c4 4a ae 5b c8 26 a6 12 16 55 e9 d2 80 05 e5 1b 47 66 8c 34 48 66 66 6b f8 5c 94 bc 31 76 1d 17 19 c0 d8 71 b6 04 b9 48 69 24 fb 27 a9 e2 ce b8 5f 3f ea 9d c2 29 c8 76 8f 79 aa 54 e7 49 1d 3b 73 c5 9c 30 6a 4e a8 cb 83 1f 9d fb 4c 39 94 e4 66 e0 8d 6b 1d a3 be Data Ascii: "!JI<@Z(58Qeb:Q=~ny!)X5~Sk94\@3z\|uII>e_s\|?xjgr~,W6b~sCIM%({'x@4cqJ[&UGf4Hffk\1vqHi$'_?)vyTI;s0jNL9fk
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: b8 9f 5d 86 06 18 45 21 1b f5 00 0d e9 f1 54 8c 71 2f 8e b6 08 46 59 3c 44 23 91 11 22 b1 b4 6e bb 94 a3 84 68 61 5f 8a 00 95 d2 2d 85 97 e4 fc 18 a8 40 34 2c 6c a6 3d 61 ef 9f f5 d5 f3 5f 6b 5c 6b a3 e9 21 9f a3 15 cf 7a 3e f3 9e 52 26 35 da ee e8 7a 82 0d 92 fb 08 37 73 d5 ac 4e 5e ba 34 ea bd 83 da 44 aa 50 fe c8 98 12 8c 96 cc c9 09 4b 53 4d 6e 45 1a 27 cb 29 f2 7e 42 af 1d 6b 42 26 d2 e4 c8 66 86 ea 96 cb 61 63 61 66 1e 5c 3b 1e b0 bc d4 4e 77 33 c3 bc ce d4 27 45 84 3b e7 49 37 3e 83 5d 2c 75 54 a5 32 93 ad b3 92 53 4d 6c 31 04 28 d4 8e 10 6e 48 29 8a d5 10 03 62 65 a8 a4 c1 c4 a5 d4 aa 11 f5 6b 68 09 11 b4 a6 71 ef 44 21 0b 18 31 28 b1 14 62 08 ab 1d 69 b2 b8 50 b0 ab b6 db 5a 45 2a 4a 1c 24 17 41 f0 8a c4 5c ad 79 02 b7 93 ff eb 99 cc 20 80 61 92 Data Ascii: ]E!Tq/FY<D#"nha_-@4,l=a_k\k!z>R&5z7sN^4DPKSMnE')~BkB&facaf\;Nw3'E;I7>],uT2SMl1(nH)bekhqD!1(biPZE*J$A\y a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50296	172.64.145.151	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	399	OUT	GET /public/shared/images/apphubs/4-star.png HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	309	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 3475 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-d93" X-Cache: MISS CF-Cache-Status: HIT Age: 377 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd8becba4d0-MIA
2024-05-15 22:37:27 UTC	1060	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 51 00 00 00 0e 08 06 00 00 00 57 57 f0 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRQWWtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: 21 8c 24 60 24 0c c2 98 77 70 7b 6b cb a6 95 df 36 46 30 46 4f 4c a4 ca a3 73 e9 ad 75 27 68 77 e5 69 7a 68 fb 0c 9a 5e 96 4e 41 9f 4e a2 dd 46 49 69 76 f4 14 88 21 04 81 46 e8 9a 79 fd 7d f9 9f ec ee ed 08 52 04 e3 f1 5d c5 94 39 21 9e 1e 9a 7e 88 26 cd 49 a5 c7 77 ce a2 40 9f 66 cd 2b 4a 02 25 a5 3b a2 31 92 4d d3 9c 7b 7f c1 a1 ea ae 76 79 00 63 cd 8e 22 ec 27 91 1e 9c f6 09 25 27 a5 52 49 49 09 a9 aa 4a c3 3c 8b 6c 36 db 51 bc 3b 43 9f 02 19 86 3e d0 68 b3 aa 6c 02 29 b2 01 22 c8 22 83 8b a1 9b d7 f8 2f 6a d7 46 23 a5 e7 ba ac 3e 43 3d 21 0c 3d 16 63 b6 ff a2 5a 32 08 23 c7 45 64 0e 31 1e 7b 33 34 83 d4 7e ac c3 0c 8d c7 cb 13 f4 69 4b 51 e7 8c f4 93 1c 36 eb b0 b8 7d 48 0c dd 8c c5 48 c0 01 2d 43 9d 6b 00 c3 ce 18 d2 90 18 43 ee 4d 10 6e 74 38 9c 93 Data Ascii: !$`$wp{k6F0FOLsu'hwizh^NANFIiv!Fy}R]9!~&Iw@f+J%;1M{vyc"'%'RIIJ<l6Q;C>hl)""/jF#>C=!=cZ2#Ed1{34~iKQ6}HH-CkCMnt8
2024-05-15 22:37:27 UTC	1046	IN	Data Raw: 7b 40 e0 2e 0c f0 46 30 58 8a 7c d2 ec c7 90 27 5e a8 7e f1 f4 5d 20 fb 59 4d b9 34 9e ff 43 dd 4a 75 65 e3 da dd 1b 4e 3f 05 02 1b 98 c0 81 8d 89 16 88 85 61 77 d8 ba ab 2b 9b 56 76 b4 04 d6 6b 6a 14 46 68 1d ea 9e 4d 8d bf ab ae 3c bd 0e 04 9e 8a c6 88 7e a0 b0 bd 3e 9f b7 0c 79 e3 99 21 9a df 04 ef 4b 41 6e db 25 9f 88 c9 39 dc cf 59 92 c9 8a b9 20 7b 75 c9 92 ae 24 58 e9 02 9b a6 ae 53 a2 af 57 6d c2 a4 83 62 33 47 59 56 01 3f b9 53 12 a9 a8 62 14 6f f8 82 ec bb 1c 03 7d 3d fe 1e 95 13 f7 41 61 91 55 1a 04 46 46 ae 1b 66 9f 40 85 0b 32 10 d0 ec be 7e d9 b2 00 ab b0 9f 76 38 45 d1 df ab fa 43 0a 1e 1c 11 d4 60 48 8d 69 d9 6e ca 1c e7 a6 99 0b 47 12 02 9a 57 09 18 24 44 61 08 c4 18 5a 00 43 fa 86 8a 6c bc e6 40 c0 6f bd 75 5d 0f e0 1d 9f 90 90 18 db 67 Data Ascii: {@.F0X\|'^~] YM4CJueN?aw+VvkjFhM<~>y!KAn%9Y {u$XSWmb3GYV?Sbo}=AaUFFf@2~v8EC`HinGW$DaZCl@ou]g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50297	172.64.145.151	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	412	OUT	GET /public/shared/images/apphubs/item_type_hover.png?v=1 HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	309	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 2792 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-ae8" X-Cache: MISS CF-Cache-Status: HIT Age: 388 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd8b9db0359-MIA
2024-05-15 22:37:27 UTC	1060	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRpHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: 87 a8 13 34 75 9a 39 cd 83 16 49 4b a5 ad a2 95 d3 1a 68 17 68 f7 69 af e8 74 ba 11 dd 95 1e 4e 97 d0 57 d2 cb e9 47 e8 97 e8 03 f4 77 0c 0d 86 15 83 c7 88 67 28 19 9b 18 07 18 67 19 77 18 af 98 4c a6 19 d3 8b 19 c7 54 30 37 31 eb 98 e7 99 0f 99 6f 55 58 2a b6 2a 7c 15 91 ca 0a 95 4a 95 26 95 1b 2a 2f 54 a9 aa a6 aa de aa 0b 55 f3 55 cb 54 8f a9 5e 53 7d ae 46 55 33 53 e3 a9 09 d4 96 ab 55 aa 9d 50 eb 53 1b 53 67 a9 3b a8 87 aa 67 a8 6f 54 3f a4 7e 59 fd 89 06 59 c3 4c c3 4f 43 a4 51 a0 b1 5f e3 bc c6 20 0b 63 19 b3 78 2c 21 6b 0d ab 86 75 81 35 c4 26 b1 cd d9 7c 76 2a bb 98 fd 1d bb 8b 3d aa a9 a1 39 43 33 4a 33 57 b3 52 f3 94 66 3f 07 e3 98 71 f8 9c 74 4e 09 e7 28 a7 97 f3 7e 8a de 14 ef 29 e2 29 1b a6 34 4c b9 31 65 5c 6b aa 96 97 96 58 ab 48 ab 51 ab Data Ascii: 4u9IKhhitNWGwg(gwLT071oUX*\|J&/TUUT^S}FU3SUPSSg;goT?~YYLOCQ_ cx,!ku5&\|v*=9C3J3WRf?qtN(~))4L1e\kXHQ
2024-05-15 22:37:27 UTC	363	IN	Data Raw: d3 93 67 f2 cf 8c 9d 95 9d 7d 7e 2e f9 dc 60 db a2 b6 7b e7 63 ce df 6a 0f 6f ef ba 10 74 e1 d2 45 ff 8b e7 3b bc 3b ce 5c f2 b8 74 f2 b2 db e5 13 57 b8 57 9a af 3a 5f 6d ea 74 ea 3c fe 93 d3 4f c7 bb 9c bb 9a ae b9 5c 6b b9 ee 7a bd b5 7b 66 f7 e9 1b 9e 37 ce dd f4 bd 79 f1 16 ff d6 d5 9e 39 3d dd bd f3 7a 6f f7 c5 f7 f5 df 16 dd 7e 72 27 fd ce cb bb d9 77 27 ee ad bc 4f bc 5f f4 40 ed 41 d9 43 dd 87 d5 3f 5b fe dc d8 ef dc 7f 6a c0 77 a0 f3 d1 dc 47 f7 06 85 83 cf fe 91 f5 8f 0f 43 05 8f 99 8f cb 86 0d 86 eb 9e 38 3e 39 39 e2 3f 72 fd e9 fc a7 43 cf 64 cf 26 9e 17 fe a2 fe cb ae 17 16 2f 7e f8 d5 eb d7 ce d1 98 d1 a1 97 f2 97 93 bf 6d 7c a5 fd ea c0 eb 19 af db c6 c2 c6 1e be c9 78 33 31 5e f4 56 fb ed c1 77 dc 77 1d ef a3 df 0f 4f e4 7c 20 7f 28 ff 68 Data Ascii: g}~.`{cjotE;;\tWW:_mt<O\kz{f7y9=zo~r'w'O_@AC?[jwGC8>99?rCd&/~m\|x31^VwwO\| (h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50299	172.64.145.151	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	408	OUT	GET /public/shared/images/apphubs/icons/icon_rate.png HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	310	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 1131 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-46b" X-Cache: MISS CF-Cache-Status: HIT Age: 6053 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd8cdbd74a6-MIA
2024-05-15 22:37:27 UTC	1059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-05-15 22:37:27 UTC	72	IN	Data Raw: 61 de 81 b8 00 ea a7 0f 48 2e c0 06 1e 40 5d a6 80 64 18 4a 42 4a 84 fa 9f 01 8f f3 fd 61 b6 c3 a2 94 11 57 6e c4 93 43 41 2e d8 40 96 01 d8 00 40 80 01 00 d6 2d 50 a0 5d 53 af ac 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: aH.@]dJBJaWnCA.@@-P]SIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50298	172.64.145.151	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	399	OUT	GET /public/shared/images/apphubs/5-star.png HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	310	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 3607 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-e17" X-Cache: MISS CF-Cache-Status: HIT Age: 3741 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd8bfd1a55a-MIA
2024-05-15 22:37:27 UTC	1059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 51 00 00 00 0e 08 06 00 00 00 57 57 f0 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRQWWtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: 30 23 01 8c b8 41 8c 92 4f 37 38 db d6 2d fd a1 39 c2 18 95 13 4f 15 07 ae a5 8d 2b 8f d1 d6 8a 26 7a 68 c3 34 9a 52 9a 46 01 4f 88 24 93 48 09 a9 26 8c 14 88 11 82 40 c9 21 55 ff d9 b2 dc cf b7 f6 74 04 28 c2 78 72 4b 11 a5 5f 61 a3 87 a6 ec a1 09 b3 52 e8 c9 cd 33 c8 e7 52 8d 75 25 59 a0 84 34 73 34 23 51 d7 f5 6b ef cf db 53 dd 79 c2 3f c0 78 bc aa 10 fe c4 d3 03 79 9f d3 b8 e9 49 f4 74 75 51 98 01 3f e2 93 cd 64 b6 4a 03 7e d8 12 e4 b9 1b 57 d6 7d 5f f5 a7 ba d3 91 f9 57 ce 4e a5 67 77 5e 45 7f bd eb 20 89 3c 48 10 05 0a fa 35 00 c8 80 f0 ad 85 f4 ab bc bd ea d5 14 75 a5 65 5b 8d 31 c3 5d 61 46 68 28 63 a6 b7 57 99 3d 88 91 65 25 d2 87 99 0f db 34 55 23 a5 0f 76 e8 e1 f9 f8 63 0f 78 d4 85 78 66 89 8c 93 cd a2 b1 59 fc 7e 58 46 48 1f ca 88 c3 06 dd 8e Data Ascii: 0#AO78-9O+&zh4RFO$H&@!Ut(xrK_aR3Ru%Y4s4#QkSy?xyItuQ?dJ~W}_WNgw^E <H5ue[1]aFh(cW=e%4U#vcxxfY~XFH
2024-05-15 22:37:27 UTC	1179	IN	Data Raw: 71 ed da 59 d9 56 02 64 0b 1b a6 f6 df 1a 76 e3 54 a3 67 ff ba fb 7e b8 17 01 7c 1f ab 79 22 c5 00 40 e3 68 63 30 90 a2 3f d5 b9 3f dd f1 5a 6b 09 69 d4 38 94 71 ba c5 fb ed fa a5 87 ee 45 00 b7 60 82 3b c2 60 29 f2 09 80 eb 18 ce 89 e7 aa 5f 6a ba 1b c1 5e a3 06 cf cf e7 ff a1 ee 60 75 45 f3 8a ad 6b 9b 9e 41 00 1b 39 80 11 e7 d8 0e ea 67 98 cc 62 57 75 45 cb d2 8e 36 df 2a 55 89 62 84 ed 50 b6 ad 6b fe 7d 75 45 d3 4a 04 b0 21 9a 61 f8 81 cb 1c 2b 52 dd fe ae 4d ff f9 e7 f1 52 fc 3c 33 68 3e 22 da 72 a8 77 f7 cb bf 3d b4 14 01 dc 8e 59 3e f6 43 e6 c5 b9 dd cf 9a 9f ce 8a 39 e7 77 87 64 3e 63 f1 a1 95 eb 0a a7 66 28 44 f1 9e 1e a5 05 13 06 f5 66 ee b2 ac 02 be b2 27 c5 53 61 f9 48 76 f8 9c df 73 21 03 63 ed de 6e 85 0f ee 83 da 22 ab 34 00 86 23 3b 16 69 Data Ascii: qYVdvTg~\|y"@hc0??Zki8qE`;`)_j^`uEkA9gbWuE6*UbPk}uEJ!a+RMR<3h>"rw=Y>C9wd>cf(Df'SaHvs!cn"4#;i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50300	172.64.145.151	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	405	OUT	GET /public/shared/images/buttons/icons_16.png?v=5 HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	311	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:27 GMT Content-Type: image/png Content-Length: 6719 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-1a3f" X-Cache: MISS CF-Cache-Status: HIT Age: 3510 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cd8c8aeda77-MIA
2024-05-15 22:37:27 UTC	1058	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 20 08 06 00 00 00 63 13 a1 44 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR@ cDtEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: ba aa ba aa 7a 84 f9 7b e7 dc a9 ea f7 de 57 5d f5 ea d5 d7 f7 de 77 eb 4e 24 1e 8f ab 48 24 a2 da 7b f9 cd 6f 37 4e c0 66 28 a4 ea 87 97 8d ad 0d 8a 1f 30 60 40 0a bf 6f df be c0 f8 67 26 4d 4a e1 2f ad ac ac 75 1b 37 9c 67 14 9b d7 21 b5 38 cf a2 a0 df 73 c3 86 f1 29 fc 83 e3 d6 17 85 b8 ce 14 1e d7 e9 8a b7 ce ff be 07 96 c4 f1 a9 e2 27 3f be be c4 6a fb f5 fd 0f f2 18 51 b9 de 18 8f 75 d3 8d 37 c4 5c be 0f 78 55 81 ef 2a 31 ce c1 86 47 bb 23 7e f3 94 d3 12 f8 0b d6 ec 2a d1 ea d2 f0 68 8f b5 97 b9 88 b1 fb 06 36 bf 87 b4 62 0c ff 56 6f 9b 55 fd d9 59 d8 cc 84 5c 08 39 45 aa 3f 80 bc 00 59 be 6c 74 9f 6d 7a ff 0f 3f 6f 39 7c e2 71 39 bd b8 bf ff 70 eb 17 af 1c 68 e9 3d 3e 9a d7 8a e3 bc 89 aa ef 4b b7 ed 90 d3 81 8d 9b f5 a8 1b 92 cd b5 e0 78 89 f1 c7 Data Ascii: z{W]wN$H${o7Nf(0`@og&MJ/u7g!8s)'?jQu7\xU1G#~h6bVoUY\9E?Yltmz?o9\|q9ph=>Kx
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: a8 7d d1 af e7 f4 3b a5 77 0e 35 c0 bf e9 a6 bf 70 04 48 cc e7 ea c8 4a 54 b6 f8 e9 ca 9f c3 9e 0f 70 6c e2 f8 31 45 0e e6 b3 6f bc b9 32 2a e6 af 6f fc e4 0d 1b 12 f8 b8 9d 30 75 02 1d ed 60 3e af 00 09 16 81 04 eb 5d 7c 2f 19 f1 20 c1 22 90 60 68 3c 48 b0 08 d7 9e 86 6f ee f8 26 30 57 fa a6 e9 fe 1e 0f 4d 90 76 e3 34 10 c6 8f a8 a0 61 7b 63 42 b5 1f 9c d7 77 19 48 05 44 d7 1f 1f ff 11 b2 16 1a de 47 1a 94 66 2f 1d ef 5c 74 b8 12 6d 8d 5a db 85 b2 7d 4c ff 2e 6a 72 96 4f 0f c4 f3 75 6c 3e d6 9a 1f 13 02 bc d0 6d b5 d7 6d 75 d8 ac bf 6b db e1 9f 88 39 9d 23 c7 a0 96 cb 45 96 e5 fa f9 f4 e9 a9 4a 3f 6b 8a 1f c0 6e bf c1 c7 e7 7c fb e5 0f 9b d6 1d 6e 89 bf bc 66 57 63 97 26 c0 9c 10 98 3a 95 74 00 7f 19 f2 3b 4d 7c 81 3c c0 d5 c6 83 6c 92 4f 11 c8 2f 31 c9 Data Ascii: };w5pHJTpl1Eo2*o0u`>]\|/ "`h<Ho&0WMv4a{cBwHDGf/\tmZ}L.jrOul>mmuk9#EJ?kn\|nfWc&:t;M\|<lO/1
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: 88 6f 7e 08 9f 69 bb bd ff c6 79 6e 63 ac a7 4a 2e 04 9d 2d 8b 5e 4a d3 fe 2b 65 0e 6c 5b 6a 2d 50 69 78 aa 02 7f 84 2c e0 2f 88 b0 f1 bf aa 64 84 bb 55 b8 64 b4 88 e6 01 b4 c6 5d c6 f7 07 c2 63 50 76 b9 5c 87 f5 90 2a 68 7f 15 21 c6 2b aa 0d 7c 45 08 02 64 5c 20 b7 6a e6 96 2d be f0 d0 02 ab 35 5f 64 81 8b f9 39 5d d3 6a 6d 26 35 b4 c0 40 78 33 24 46 7e 7d 7d e3 75 97 00 4d e0 4e 10 0a e3 55 de 16 93 67 ac 1b f9 3d 5d d7 d8 e0 40 82 5b 20 97 42 5e ce f4 d0 a9 64 08 0a 7f f0 ab 84 e0 12 85 e6 30 c5 20 bf 2a e9 bb 86 58 ae ea ca 9a 49 62 e5 97 0b 1d d2 f7 4d f1 57 c5 65 3f a1 05 98 fd 8d 73 f9 03 36 df 91 e7 ee bf 21 fd 64 3e ec 12 9f e7 43 aa 93 17 b9 c7 db c5 d5 a1 17 7e de 6e ce 01 5d 03 a4 d9 3a 0b c4 66 0d 6a c2 4e 86 69 fc 17 2a b9 6c 3f 46 fa 54 a0 Data Ascii: o~iyncJ.-^J+el[j-Pix,/dUd]cPv\h!+\|Ed\ j-5_d9]jm&5@x3$F~}}uMNUg=]@[ B^d0 XIbMWe?s6!d>C~n]:fjNi*l?FT
2024-05-15 22:37:27 UTC	1369	IN	Data Raw: a2 ae a6 aa 1f c6 76 a7 98 bc 0d 18 6b be 8e 75 40 fa 4c 66 9d b4 ed 44 5b 3f 87 f3 ef 07 0d 6f a7 98 bc 0d d0 f8 6c 78 d6 49 db 4e b4 39 e2 a1 e1 ed 14 93 b7 01 1a 9f 0d cf 3a 69 db 89 b6 7e dd 94 97 41 03 d4 c9 4f 27 bd 00 9a a0 de 2f 12 d0 1c 76 22 bd 27 5c da d3 8a 13 e9 e9 e4 a7 b7 1b c5 4a 8a 6a 49 cc c3 b7 65 f5 29 6d 2b 3c 93 b2 1a 29 b9 62 2e d9 57 26 68 7d cc a4 ac 65 a2 6d 59 12 d5 b5 30 d3 64 37 4a 46 bc 91 81 26 30 de 34 f9 db b0 d0 b1 7f 89 f6 79 87 47 5f bd ed 12 c1 f2 bc e7 a9 23 b1 7b 94 e1 d0 1c 19 0b ca d8 be 8b 64 7f b8 d1 67 9e 60 ad 1f a1 88 10 5d 1d e4 90 48 9d de e6 55 40 6e 11 21 ba 3a c8 21 91 3a bd cd ab 80 dc 22 42 74 75 90 43 22 75 7a 5b 77 49 2f b6 55 60 93 fc 2c 4d ca 8d 14 7d 90 9f a5 c9 b9 91 a2 97 06 e8 45 8e 19 35 40 2f Data Ascii: vku@LfD[?olxIN9:i~AO'/v"'\JjIe)m+<)b.W&h}emY0d7JF&04yG_#{dg`]HU@n!:!:"BtuC"uz[wI/U`,M}E5@/
2024-05-15 22:37:27 UTC	185	IN	Data Raw: ff 9b 4b ed c1 fa a7 49 cc 28 d2 47 fc 8c 3f 27 49 e2 78 65 aa bb b4 57 2d 90 3f 64 7c 2f fa d7 98 67 4b f0 99 1a e1 4d 90 33 f1 f9 a0 f4 71 d7 00 db 13 a1 67 03 0e 43 7e 9a af 2a 74 52 55 75 8c 92 b2 82 d4 3c 93 a2 4a 32 07 d7 a4 aa d9 26 65 c5 e4 f2 c4 4b 78 82 2b be 8d 35 41 12 de a9 01 20 24 4b fe c3 f3 cd 2a 19 56 f2 90 f5 ff 39 64 e5 f8 7a 69 63 ce cb 3b ba 69 a6 5d 6b 81 07 31 d7 12 f9 00 b1 4d e5 03 b4 c8 cf 9c 94 dd 23 d6 5d ba 4b 77 e9 8c 9a e0 34 c8 17 dc 3a f1 1e e5 ff 05 18 00 d5 55 a2 56 60 d4 43 10 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: KI(G?'IxeW-?d\|/gKM3qgC~tRUu<J2&eKx+5A $KV9dzic;i]k1M#]Kw4:UV`CIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50302	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	645	OUT	GET /steam/apps/2195250/capsule_616x353_alt_assets_8.jpg?t=1713799333 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 91657 Last-Modified: Tue, 16 Apr 2024 13:47:35 GMT ETag: "661e8177-16609" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=224466 Expires: Sat, 18 May 2024 12:58:33 GMT Date: Wed, 15 May 2024 22:37:27 GMT Connection: close
2024-05-15 22:37:27 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 00 00 00 00 00 03 02 04 05 00 01 06 07 08 09 0a ff c4 00 6a 10 00 01 03 02 04 03 05 04 07 04 05 04 08 10 0a 0b 01 02 03 04 05 11 00 06 12 21 07 31 41 08 13 22 51 61 14 32 71 81 09 42 91 Data Ascii: JFIFHHCCahj!1A"Qa2qB
2024-05-15 22:37:27 UTC	16384	IN	Data Raw: 79 61 4b 4b 82 7c c2 b9 79 79 9c 18 59 5c 37 4f d8 56 18 16 67 6c 9f c6 3b f3 df e3 86 05 91 ea 56 2d b6 c3 5a b0 bd 78 fd c5 ce cc 93 b2 a9 93 52 cb ae 1a cd 1c 5d 44 25 36 79 91 e4 a4 f3 1f 1d c7 ae 3e 8b c1 3e 98 43 8c 77 d5 78 83 7b 19 86 94 76 bf 1f f8 2b 8d c3 ff 00 fa 7f e9 ac 27 19 f4 46 7f e2 01 6e c3 bc d4 8d eb 96 fd 61 e6 b4 43 d1 54 ca d4 95 24 85 03 62 08 b1 c7 d1 b7 16 17 9b 7b 1f 13 cc 72 02 08 dc 1d d0 c3 76 c5 10 ad a6 95 06 cf 2b 60 72 f3 46 0a be 8d b0 34 88 1e 4a b4 ed 81 21 10 d5 25 43 a6 16 46 89 81 74 5f 66 fe c1 1c 45 ed 49 91 e7 66 bc a1 53 cb b0 69 b1 2a 2e 53 1c 6e af 25 e6 dd 2e a1 0d ad 44 04 34 b1 a6 ce a7 72 6f 70 70 aa 25 22 4c 43 63 34 56 d5 ff 00 61 cb 8e 37 bf ed ec 91 ff 00 97 ca ff 00 dd b1 32 94 af ae b3 e7 fe 55 23 Data Ascii: yaKK\|yyY\7OVgl;V-ZxR]D%6y>>Cwx{v+'FnaCT$b{rv+`rF4J!%CFt_fEIfSi*.Sn%.D4ropp%"LCc4Va72U#
2024-05-15 22:37:27 UTC	2223	IN	Data Raw: 57 9e 38 d8 68 e1 82 71 14 3e 8b 25 65 78 96 f3 fc a7 55 87 04 c1 13 e5 84 8a ca ec de 7b ae a4 ed 0a 51 98 a8 b4 4a e4 07 5b 26 a9 45 9c c4 77 c0 4b a8 2b 5c 7e fd 85 00 41 4a 80 5a 41 b1 04 1e 58 be 27 08 a7 36 4d 68 51 ae 7a 8d 93 cb 7e ad 8e 8c 0d c3 88 fd 16 ab e0 74 6c b8 ff 00 67 fe 1e e7 88 11 92 d6 64 ad 4e 43 75 f9 e1 64 19 32 ec e2 5f 51 6c 1d 08 ba c0 50 4a 40 02 e0 0d ad 8c b8 88 58 30 a5 a0 7f 77 a0 f0 07 4f 71 4d c4 b9 c1 e0 5f ac e6 bb c4 fe eb 96 7b 30 71 c6 05 03 83 95 d8 f5 ec c3 4d a7 3f 95 e4 4d 54 0a 5c e9 cd b4 eb 8d 38 db ee 15 34 95 10 57 e2 21 1b 5f 70 07 5c 33 15 84 2f 2f 68 e6 d6 96 f7 bb 33 41 1e 34 2f c1 6e 92 6c c2 16 8d da e7 66 3d 1b 97 d1 f6 59 3a ae 53 e1 e6 7f ce 8e 65 14 f0 df 2f cf 72 4d 27 31 38 98 c2 8d dc 36 be fa Data Ascii: W8hq>%exU{QJ[&EwK+\~AJZAX'6MhQz~tlgdNCud2_QlPJ@X0wOqM_{0qM?MT\84W!_p\3//h3A4/nlf=Y:Se/rM'186
2024-05-15 22:37:27 UTC	16384	IN	Data Raw: 4e 20 45 71 4e 16 e3 04 28 77 64 20 2d 1b 58 27 c3 b5 b1 ce 05 a1 e4 90 bd 8b e3 96 4c 30 63 1f ad 6f ec 5e aa 76 51 cc fc 0c ed 5b 44 cc 55 1a 2f 04 b2 fd 09 ba 34 96 a2 ba 8a 8d 0a 02 8b 85 68 d6 0a 74 24 ec 07 9f a6 3a 0c c8 fd 43 57 90 c5 7d 6f 08 e0 d7 4a 7c ca e5 6e 24 f6 92 e0 af 17 73 56 52 c8 99 5f 83 10 f2 c5 58 67 7a 64 79 13 cd 2e 0b 6d ba cb 73 42 1d 69 45 a1 a9 49 58 b8 29 3b 10 77 c6 77 3e 32 43 43 57 5e 1c 36 2e 38 dd 2b e5 35 47 99 5b 87 b7 e7 62 6a d7 10 15 90 ff 00 c8 b7 0e 68 51 7d 89 53 4d 54 d3 04 3a 66 ad 41 9e e7 5d f4 6b f7 5d b7 3b 5f d7 17 3c 39 ab 20 49 e1 5c 48 45 9f eb 52 1d 6a ae cf 5f 15 33 c3 4e ca d4 fe 1b f6 16 cd 2c 71 0f 87 d9 7d 9c fb 02 89 5b 90 b9 6f 45 8b 2e 53 47 4b eb 61 42 42 42 b7 4a 74 69 21 5e 1b 0e 56 c5 b6 Data Ascii: N EqN(wd -X'L0co^vQ[DU/4ht$:CW}oJ\|n$sVR_Xgzdy.msBiEIX);ww>2CCW^6.8+5G[bjhQ}SMT:fA]k];_<9 I\HERj_3N,q}[oE.SGKaBBBJti!^V
2024-05-15 22:37:27 UTC	16384	IN	Data Raw: 7f 75 8a f1 bf b5 af 12 bb 41 d1 e9 b4 fc fb 5b 85 52 83 4b 90 64 c6 4b 34 f6 a3 69 71 48 28 24 94 80 48 b1 22 df 03 85 be 47 3f 42 b6 61 f0 b0 e1 89 7b 74 58 b7 09 38 d5 9c 78 39 99 4d 7b 21 e6 27 a8 15 2d 01 b7 d7 18 25 c6 9f 6c 1b e8 75 a5 5d 0b 17 e4 08 d8 9d ad 80 6b 9c cd 42 d5 2c 50 e2 9b 4f 16 b7 c5 67 e9 3e e3 dd 66 9c aa 7a 33 3d 1e 9a eb 89 d0 a9 10 29 4d 26 40 e8 6c 56 54 01 f5 09 bf 96 18 67 92 96 16 70 bc 20 76 ba ad 37 c3 ae 3a e7 0e 14 71 01 dc ff 00 45 ac a5 19 a5 d0 f2 1d a9 d4 9b 12 96 fa 9e dd d5 2f bc 3e 25 1b 5f 51 c6 76 3d cd 76 60 ba d2 e1 e0 96 2e c9 e3 d1 f2 5b a1 bf a4 df 8f eb 59 42 33 8d 21 c2 39 69 a2 c6 37 f5 e5 86 9c 44 81 62 6f 08 c1 9e 5e f3 fb ac 07 87 7d aa f8 83 c2 7c eb 9a 73 56 5e ae 40 a6 e6 1c d8 ea a4 d5 5f 7e 0b Data Ascii: uA[RKdK4iqH($H"G?Ba{tX8x9M{!'-%lu]kB,POg>fz3=)M&@lVTgp v7:qE/>%_Qv=v`.[YB3!9i7Dbo^}\|sV^@_~
2024-05-15 22:37:27 UTC	7952	IN	Data Raw: c6 7d 9f 7e 8c a4 f1 5b 22 e6 6e 25 f6 8f ac 66 4c b1 5e a8 cd 93 51 79 91 21 98 ae b6 ca 49 5b d2 65 f7 8d ab 49 52 f5 a8 0d 82 50 90 7e b6 d4 07 34 c2 fe 4b 4a 76 2a ec ab 95 3b 4a f6 a5 ac 0a 1c 1a 83 dc 19 ca f2 7d b5 e5 55 d4 95 48 9a ce a2 22 b0 f1 4a 52 35 3c 52 5c 52 40 00 21 2b 4d ef 62 60 08 89 a6 d2 f5 27 8d 3d a2 33 1f 05 b3 15 3f 2c 65 0e 05 e6 ec fd 01 a8 28 70 cd cb f1 83 50 63 0b 94 a1 84 1d 24 12 94 a2 e4 00 02 42 92 37 de d6 92 d1 7b 95 cc 7d a6 be 92 ac fb 92 78 6d 50 a6 39 c1 7c d1 c3 4c c5 5e 8e f4 3a 3d 62 bc fa 50 96 97 64 87 1d 6d 3a 41 52 d0 95 82 3a 05 14 5f 6d 8d 12 98 c8 ec d0 2b 44 f6 44 fa 50 87 67 3e 0d 53 f8 7f 98 32 2b d9 86 25 21 c7 95 06 a1 4f 9a 86 16 5b 75 d5 ba a4 3a 85 24 82 a0 b5 af c4 0e e0 8b 8b 8b 91 6b 82 6b e1 Data Ascii: }~["n%fL^Qy!I[eIRP~4KJv*;J}UH"JR5<R\R@!+Mb`'=3?,e(pPc$B7{}xmP9\|L^:=bPdm:AR:_m+DDPg>S2+%!O[u:$kk
2024-05-15 22:37:27 UTC	16288	IN	Data Raw: 14 da 55 74 9b 9d b9 74 c5 23 09 6c a0 ac 29 3a 55 71 ba 7c 3f 68 fd 79 62 2b 44 52 08 48 40 49 20 6e 48 4f 33 fe 1f 9e 05 30 22 b6 d2 de 48 36 50 50 b2 54 4a 4f 2e 87 f5 e4 30 25 18 d1 2b c6 57 a9 08 5a 42 6d a4 69 3b 01 fa fe 67 14 98 11 d0 d5 8f 79 dd ab ba b6 a0 92 93 cf fa bf 6f f2 c0 22 0a ed 6b 0e 12 b4 ad 41 5b 2b c2 6e 7f 5c fe 58 89 a1 18 32 e3 08 55 d2 a2 b5 78 52 42 4f 2e a7 f0 fb 70 28 82 53 28 52 c1 6c a1 5e 69 f0 9e 7f e2 3f 0c 0f 72 60 45 52 14 84 04 68 5d f6 52 bc 27 9f 97 c8 7d f8 a4 c6 a3 21 a5 bc 84 80 95 05 a6 c3 70 7d de 87 e5 f9 60 13 42 25 94 54 34 85 84 a7 dd f0 ff 00 3f b7 7f b3 11 38 27 09 68 ad 45 c2 85 04 73 52 74 f2 3e 5f 3f c4 f9 60 48 d1 30 74 4b 6f 51 70 a9 40 92 6f 7d bf 5f ab 60 13 5a 34 45 4a 0a 09 22 fe 86 dc c6 29 39 Data Ascii: Utt#l):Uq\|?hyb+DRH@I nHO30"H6PPTJO.0%+WZBmi;gyo"kA[+n\X2UxRBO.p(S(Rl^i?r`ERh]R'}!p}`B%T4?8'hEsRt>_?`H0tKoQp@o}_`Z4EJ")9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50303	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	655	OUT	GET /steam/apps/2195250/ss_eb8f5def662f28726c875e641cd5faff75e6b16d.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 03 Oct 2023 02:22:47 GMT ETag: "651b7af7-12f31" Server: nginx Content-Type: image/jpeg Content-Length: 77617 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=575968 Expires: Wed, 22 May 2024 14:36:55 GMT Date: Wed, 15 May 2024 22:37:27 GMT Connection: close
2024-05-15 22:37:27 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 31 00 31 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 05 03 04 06 07 01 02 08 09 00 0a ff c4 00 4a 10 00 01 03 03 03 02 04 04 03 05 05 06 03 06 07 00 01 02 03 04 00 05 11 06 12 21 07 31 13 22 41 51 08 14 61 71 23 32 81 15 33 Data Ascii: JFIF11CCQXJ!1"AQaq#23
2024-05-15 22:37:27 UTC	16384	IN	Data Raw: 44 58 2f bf 1c a9 28 08 40 58 05 23 b0 af 9d 92 cc a1 a7 60 36 a6 07 ca 73 4f c4 1e ad 73 51 5e 44 68 0e ee 65 9f 63 5d f7 43 d2 fa 09 bd 87 26 61 6b ec f5 47 a6 a6 57 5a 42 d6 eb d3 fc 77 cf 97 f8 ab e9 5a 7a d2 8d 3e f3 c1 3d a7 0f 60 6b ae 15 83 da 3e d7 cb 69 ac ad 8c 60 0c 00 2b 00 de eb 94 b0 f3 99 b8 02 dd 58 2b e2 32 67 59 4a b8 e9 71 6d 0d a9 45 ae 42 bd aa d6 fa 56 d8 b6 9e f1 5d 12 d9 43 ba a9 e1 a4 75 72 1d 2c b8 56 7c c3 d6 89 6d fc 6d 10 be 90 dc 4b 46 76 67 76 dc d2 a7 7f 2f 7c d2 8b 81 28 41 e2 4a d1 71 1f 3e da fb a0 7b d4 20 0c c6 58 e5 54 10 61 4b 2c 64 df af 8a 65 d4 a4 25 63 8c fa 55 ce 9c 58 8e 6b f1 01 66 a5 b4 fb 6c 6e c4 e2 27 76 d3 32 62 cb 2d a5 ad cd 36 71 91 4b d0 c3 70 df e6 3e 70 f9 0a 7e 70 34 f8 0a 6e 3a d5 8c 2b 3c 66 9d Data Ascii: DX/(@X#`6sOsQ^Dhec]C&akGWZBwZz>=`k>i`+X+2gYJqmEBV]Cur,V\|mmKFvgv/\|(AJq>{ XTaK,de%cUXkfln'v2b-6qKp>p~p4n:+<f
2024-05-15 22:37:27 UTC	2447	IN	Data Raw: 70 04 4c b5 e1 39 82 7b 1a ba ae 41 cc f6 73 13 97 2d 49 24 27 b5 42 a8 cc 0c d2 34 c2 94 28 13 c9 a3 06 20 c9 c0 33 e5 4b da c2 f1 de 8f 5e 33 93 17 7c 9c 08 d6 22 c8 70 2d 59 c6 6a 0b 64 c9 ed c4 79 36 ea f2 99 53 20 00 83 c5 32 96 6c ed 16 6a f2 79 8c 23 a1 cd a9 20 1f 29 ef 43 07 b9 97 c6 66 b3 db 7a 64 90 92 09 e3 02 8a d6 12 30 4c 5d 53 04 e2 23 1a ce f3 88 74 25 07 c4 49 e5 3e b4 54 b9 6b 53 99 5d 85 a6 15 61 91 b4 ac 8c 29 26 a0 5c 08 e2 7b d3 e4 cf a4 db 9c 6d 2e a9 5e ad e7 34 44 b8 31 c4 55 d4 a0 30 75 be c6 89 48 29 71 7f 9e a9 ea 6d c9 10 81 37 01 99 33 d3 5d 2a 76 eb 01 de 4e e4 2b fa 52 0f d4 92 a5 dc 63 0b a7 2d da 49 8e 90 6b 47 86 56 b4 ee f1 06 15 9a 02 6b 86 ad 5c 2f 89 0d 5f a4 f8 32 4b 6e b6 33 77 80 e2 56 94 a4 2f 00 05 7a d6 7d 5a Data Ascii: pL9{As-I$'B4( 3K^3\|"p-Yjdy6S 2ljy# )Cfzd0L]S#t%I>TkS]a)&\{m.^4D1U0uH)qm73]*vN+Rc-IkGVk\/_2Kn3wV/z}Z
2024-05-15 22:37:27 UTC	16384	IN	Data Raw: 29 b7 dc 21 b1 f4 f7 a7 6a aa a1 ba df 69 aa a1 b2 2b 69 2f e9 c3 72 74 8b ef a6 e2 bd d1 b0 50 91 fe 94 4a ee ad 9c b4 26 dd a2 57 f7 5d 67 33 4e f5 15 77 28 59 72 36 1c 8e b6 0a b6 87 59 58 29 5a 09 f4 c8 3c 1f 43 83 e9 56 6c 58 b8 88 d9 90 c6 54 fa 9a d3 22 d5 71 53 cb 4b aa 86 f2 8a e3 c8 75 38 f1 13 9f 5c 71 b8 7a 8f 7f a5 11 59 5b 2a 0f 31 12 a5 79 3d a0 42 39 35 7c ca 4c 54 cf 4b 77 a3 7a 55 9b 5a dd d4 b7 54 ec 2c 82 98 8d 2c 60 85 11 82 b3 f5 c1 e3 ee 4f b5 21 73 0b 4f a4 3f 19 a1 45 7b 17 d5 6e fe 25 d3 d2 9d 3b 69 d5 7a 86 42 82 90 a7 56 ca 8a 52 07 73 cd 01 97 d2 04 37 61 19 0d bb 05 7b c3 5d 2a 62 1e 99 6f 52 a6 6b 60 ca f1 14 db 7e f8 e6 b8 4e bd 45 da cb 6b 34 1e 04 da d1 e2 a0 fb bb c8 16 a7 d6 31 e1 dd 96 d1 68 25 c7 06 53 fe 94 cd 3d 2e Data Ascii: )!ji+i/rtPJ&W]g3Nw(Yr6YX)Z<CVlXT"qSKu8\qzY[1y=B95\|LTKwzUZT,,`O!sO?E{n%;izBVRs7a{]boRk`~NEk41h%S=.
2024-05-15 22:37:27 UTC	16384	IN	Data Raw: 03 3e df fa 35 09 a7 2c e6 68 36 a9 52 a1 91 17 b1 de e3 a2 61 6d c4 9d c5 4a 58 fa 7d 6b 41 ec 2a 85 26 12 05 6b 7d 4c f1 1e 75 1f a8 e9 bf da 6d 56 a6 90 02 58 07 71 a5 70 58 7d d3 42 af 4d 5b 07 cc 8f de b5 23 d7 3d 12 c4 06 d1 c3 6e 72 47 b0 a1 02 15 b9 32 f7 32 b6 76 f6 96 f7 c2 3d e6 cd 65 d5 96 87 ef ae 25 a8 4c c9 4a d4 a7 06 52 82 41 01 5f 60 48 3f a5 68 d0 03 6f 3e 71 33 f5 37 7c 0a 9f 39 10 eb dd e6 da 7a b1 aa d5 66 58 55 ae 55 c1 4e a5 61 38 4b 89 3d c8 f6 c9 c9 fd 68 d5 d4 cd 5a 6e f1 06 e5 55 db 10 9f 43 ec f0 91 7f 89 73 09 04 89 29 1c f6 a5 d7 50 28 d7 d7 58 f2 60 fd 1f 56 86 63 ed 18 5d ee b1 67 75 de f2 cc 91 86 17 20 a5 09 03 8e dc 57 51 5b 2a de e5 e6 15 c8 cd 52 84 8e a5 eb 07 f4 55 be 7b 16 c2 b4 37 35 d5 36 bc 1c 67 04 d0 6d b1 0d Data Ascii: >5,h6RamJX}kA&k}LumVXqpX}BM[#=nrG22v=e%LJRA_`H?ho>q37\|9zfXUUNa8K=hZnUCs)P(X`Vc]gu WQ[RU{756gm
2024-05-15 22:37:27 UTC	7952	IN	Data Raw: 1f f8 0e d5 68 9c eb 51 14 a1 e2 21 20 e0 f7 ad be 9b 51 fa a5 a7 e7 3e 7c 6b fa be bc 0f 79 c7 e1 45 3c d7 c9 7c cf bc 13 c4 ca 9e ca 4d 36 08 0b 07 89 a3 6d 97 14 71 4b 85 dc d2 d9 c0 98 71 1b 29 83 59 95 dd 1d 40 65 4b 6d 4a 03 81 53 55 25 db 88 37 70 23 69 4d 2d c2 a2 13 e5 14 c6 d2 dc 09 01 82 f7 8c dc 50 4b 64 7a d0 00 02 5b 39 31 b3 6c 2d e2 48 19 c5 48 42 dd a5 89 c0 e6 26 50 5a 27 75 43 54 56 40 6c 8e 26 bb 3c 44 9a f0 c7 69 11 3f 96 39 ce 30 2b c1 64 4f 90 cb 5c 95 1e 69 da 55 3f aa 09 89 f1 0c e8 eb 3a f5 36 a7 b7 da 99 05 45 f7 92 8c 0f 6c f3 5e d4 ea 05 14 b1 10 da 3a 3d 7b c2 99 df 9d 61 ea 54 6e 89 74 96 0e 95 b4 14 b5 35 c8 c1 b3 b3 8d a3 1c 9a 0f 4e a8 d7 56 f6 f3 cc b6 bd c5 d7 1c 76 1c 4f 3e 6f f7 67 2e 12 dd 75 c5 15 ad 67 24 9a bd b6 Data Ascii: hQ! Q>\|kyE<\|M6mqKq)Y@eKmJSU%7p#iM-PKdz[91l-HHB&PZ'uCTV@l&<Di?90+dO\iU?:6El^:={aTnt5NVvO>og.ug$
2024-05-15 22:37:27 UTC	2024	IN	Data Raw: 74 bb 4d 2d f2 9a bf 47 6d 0f 53 9f 73 99 2e 8b d5 3b 88 d2 d0 a0 b0 bd a8 65 20 63 de bb 1e 83 55 76 e8 43 79 ed 32 fa a3 1f ac 95 03 e7 18 a3 aa 37 48 16 e9 31 43 a7 72 cf 3e fc d3 1a c7 f4 6e 50 a3 b0 8b 52 88 68 65 63 e6 3b d2 5a e2 e8 ab 5d c9 2d bc 5b 42 93 95 2a ad a1 d4 55 71 26 ee eb 32 f5 c4 e9 80 ae b1 c3 1e f0 1a 3a dd 79 b1 59 df b6 c5 79 41 2e 13 b8 e7 b8 af 86 fd 2d a2 9e ad d4 bd 4f 0b 3b 1e 9d a1 45 a0 17 12 b3 ba ea 09 77 42 43 ae 15 24 ab 77 3e f5 9f 40 34 2e d5 9b 62 b5 5e c2 21 69 74 fe d1 64 a8 f1 bc 64 d5 ac 62 54 99 a7 d3 f6 fd 6a bd dd b2 21 bd 4b 75 0a 51 42 57 b8 f6 a4 ab 39 9f 46 fa 41 d6 3e b1 8a d0 f1 da 07 b5 dc 7f 67 bd e2 a4 79 c1 c8 a2 30 24 60 4e 3f 47 a9 1a 67 f5 31 93 2d 0d 27 d5 db cb 16 09 10 84 e5 b4 c1 73 7a 92 93 Data Ascii: tM-GmSs.;e cUvCy27H1Cr>nPRhec;Z]-[B*Uq&2:yYyA.-O;EwBC$w>@4.b^!itddbTj!KuQBW9FA>gy0$`N?Gg1-'sz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50304	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:27 UTC	655	OUT	GET /steam/apps/2195250/ss_96496b17bd35a97ceb926231e963762d3b86c3c8.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:27 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Tue, 03 Oct 2023 02:22:47 GMT ETag: "651b7af7-bf8e" Server: nginx Content-Type: image/jpeg Content-Length: 49038 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=337502 Expires: Sun, 19 May 2024 20:22:29 GMT Date: Wed, 15 May 2024 22:37:27 GMT Connection: close
2024-05-15 22:37:27 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 31 00 31 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 00 01 07 08 09 ff c4 00 53 10 00 01 03 02 05 01 05 05 05 02 0b 05 06 02 0b 00 01 00 02 03 04 11 05 06 12 21 31 41 07 13 22 51 61 08 32 71 81 91 14 23 a1 b1 Data Ascii: JFIF11CCQXS!1A"Qa2q#
2024-05-15 22:37:27 UTC	16384	IN	Data Raw: 5f ed 52 99 d8 70 90 ca d0 4f 42 52 bc 69 b2 d8 67 94 15 13 18 16 76 8b 15 aa 22 39 03 9b 7b 92 0a 0e 09 20 c3 3b 72 a6 5a 31 3c 0c e6 ea 46 c6 f9 9d 4b 48 46 f2 b5 a0 bd c3 fa 00 fe 67 6f 8a c6 f3 ac 56 a3 cb 3b 0b 46 f5 49 39 f1 1f ab fd f9 92 78 06 07 41 96 a8 19 43 86 c3 f6 78 80 f1 48 e7 6a 91 fe 65 ce 3b 9f c9 62 93 94 de e9 bb 67 63 16 2c 78 23 b7 12 a4 65 66 24 d0 48 68 d2 d1 b7 a9 e7 92 ae 86 3f 31 67 95 22 12 ab 17 8d ae f7 ba f2 b5 c7 1b 30 cb 29 0d 5b 8e 46 1c e1 7b ef c9 2b 4c 31 33 2c b2 a2 26 a3 15 73 49 73 5e 7e 21 69 8c 11 99 ce b9 03 cc 74 98 96 11 dd bf 10 c3 aa 30 fe fa e6 37 4f 19 60 7d b9 b7 ae e1 1c 19 71 65 b5 8a 6a 55 e4 57 9e 19 71 53 c9 17 1b f3 2b 32 63 65 ae 70 15 2e 89 c3 76 91 c1 5b 94 3d 86 07 91 af 12 53 38 60 39 93 29 61 Data Ascii: _RpOBRigv"9{ ;rZ1<FKHFgoV;FI9xACxHje;bgc,x#ef$Hh?1g"0)[F{+L13,&sIs^~!it07O`}qejUWqS+2cep.v[=S8`9)a
2024-05-15 22:37:27 UTC	2371	IN	Data Raw: 75 2b dc 6c d8 ab 40 d2 1b e8 25 68 0d fe b3 1b fc e5 e6 bb 53 4e d3 5a 88 fb 9f e4 ff 00 27 f0 3d 37 65 6a 17 3a 79 7b d7 e6 bf 3f 99 ec 7c 0a 41 08 74 2e f7 49 d4 36 b5 8a f3 99 57 89 e8 a1 c2 a2 77 ec 18 6e 67 a2 aa c2 31 4a 4a 7c 42 82 a4 77 73 52 d4 b0 3e 39 1b ea 0f e7 d3 90 b0 cd 38 bd c8 d3 1d b3 4e 32 3c 55 db cf b2 16 5a ca 99 b2 7a bc 32 af 14 c3 30 ea 91 df 36 9e 39 db 33 23 1c 10 d7 48 d7 3a c0 f9 93 b1 0b d8 68 32 fe 2f 4f 6d bd d1 eb cf f8 67 8f d7 63 7a 4c db 52 5b 5f 4f df 05 4b b3 ce cb 72 fe 57 ce 18 5d 65 2b 27 ab c4 63 a8 8d d0 d5 56 c9 de 18 8e a1 62 d6 80 1a 0f ad af ea ab c8 bd 16 df 25 38 e4 dc 92 f6 a3 e8 96 6a c3 c6 2b 91 71 08 2c 5d de 52 bc 58 75 3a 49 b7 d5 79 4c 12 d9 96 2f da 7b 5c f1 df 8a 51 7e 28 e2 fe cd f5 72 43 8d e2 Data Ascii: u+l@%hSNZ'=7ej:y{?\|At.I6Wwng1JJ\|BwsR>98N2<UZz20693#H:h2/OmgczLR[_OKrW]e+'cVb%8j+q,]RXu:IyL/{\Q~(rC
2024-05-15 22:37:27 UTC	14240	IN	Data Raw: e0 44 1b 87 d2 9a 88 85 b8 e4 ab a2 ad 70 52 fa 9a 8a 9f bc a9 6b 6d 63 ab c9 04 80 d9 d3 a3 cb b0 47 96 24 3a 41 7b 86 c6 cb a1 1c 6b 63 32 b9 b7 23 94 d6 d2 e9 9d ed 02 d6 3d 57 32 4a 99 ba 12 e0 1e 3d 74 e5 ce 0d b8 e0 94 9c 96 d9 65 c1 c8 ac 80 b4 f9 6d 74 d1 e7 80 3e 39 06 8f 0f 22 ac 91 bb 5d e6 aa 97 08 ba 3c a3 e9 4f b1 67 67 bf f6 7b d8 db 31 aa c8 3b bc 4b 1f 93 ed b6 70 b3 85 38 1a 61 07 d0 8d 4f fe da f0 fd a7 a9 df 95 bf 08 f0 bf 3f af d8 f7 fd 91 a4 ee f0 a4 fa cb 97 f9 7d 3e ec b0 e7 fc dd 52 75 49 1d 5f 71 1e ed d9 d6 e1 79 8e 72 ca e4 7b 4c 58 e3 8d 55 1e 73 ed 4f b5 fa ca f2 70 98 e4 ef 1a d1 e2 75 f9 0b bf a0 c2 a1 e9 4b a1 c7 ed 0c ca 09 c2 1d 59 cc 29 a6 74 cf 76 b7 59 b6 b9 b0 5d e7 2b 76 79 46 b8 2b 19 c7 19 74 14 b5 0e 67 82 18 85 Data Ascii: DpRkmcG$:A{kc2#=W2J=temt>9"]<Ogg{1;Kp8aO?}>RuI_qyr{LXUsOpuKY)tvY]+vyF+tg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50305	172.64.145.151	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:28 UTC	400	OUT	GET /public/shared/images/apphubs/not-yet.png HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:28 UTC	310	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:28 GMT Content-Type: image/png Content-Length: 2441 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-989" X-Cache: MISS CF-Cache-Status: HIT Age: 6736 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cdb8b66a530-MIA
2024-05-15 22:37:28 UTC	1059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 51 00 00 00 0e 08 06 00 00 00 57 57 f0 14 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRQWWtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-05-15 22:37:28 UTC	1369	IN	Data Raw: 7f 4d f4 bd c9 41 6b 1a c5 15 d1 a8 bb c4 75 a3 86 88 e3 b8 46 15 bf fb 60 2c ad 96 41 b0 eb 23 11 7b 30 1a ad 31 45 9f a7 81 33 15 2d 24 73 eb 22 91 c8 1a 74 ad 6a 19 2c c0 43 e8 2e ba ea 87 33 65 bc 5c 10 1d 32 68 80 17 0e 8a 82 28 62 4e a5 ab 67 f3 f2 7e 18 8f 5e 65 54 9c 01 2b 5c d7 5d 87 cc 15 86 6d db 86 e7 79 e2 54 25 8c 7b 59 bc b5 30 1a aa 64 24 88 05 8b 10 ed 0c fc 28 14 f2 53 16 c1 2a b3 7a 8d ae eb 2c 61 05 97 23 09 49 dd 4c 26 5b 91 f1 30 30 da 5d 86 be c8 8c 42 c1 33 b2 d9 4c 45 0c 8c ef c1 f0 18 fa ab 25 7b 32 99 f1 4a cb 89 bc af 87 00 d6 c0 78 b8 1a 06 73 c9 40 77 01 3b e2 01 18 b6 e7 e5 f0 63 6a 2c ca 65 62 97 6d 3b 32 b1 89 cc 59 94 4e a7 fd e8 57 f8 eb 20 00 20 cc 5b 61 2c 16 46 65 59 58 88 db 76 64 95 64 0e 8e 0c 8a e1 99 4c a6 42 13 Data Ascii: MAkuF`,A#{01E3-$s"tj,C.3e\2h(bNg~^eT+\]myT%{Y0d$(S*z,a#IL&[00]B3LE%{2Jxs@w;cj,ebm;2YNW [a,FeYXvddLB
2024-05-15 22:37:28 UTC	13	IN	Data Raw: e6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50306	172.64.145.151	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:28 UTC	412	OUT	GET /public/shared/images/apphubs/bg_workshopitem.png?v=1 HTTP/1.1 Host: community.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:28 UTC	312	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:28 GMT Content-Type: image/png Content-Length: 24341 Connection: close Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT ETag: "5a4ed654-5f15" X-Cache: MISS CF-Cache-Status: HIT Age: 6630 Accept-Ranges: bytes Server: cloudflare CF-RAY: 88469cdbcf090985-MIA
2024-05-15 22:37:28 UTC	1057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 31 00 00 00 7e 08 06 00 00 00 4c 1c 26 65 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR1~L&etEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-05-15 22:37:28 UTC	1369	IN	Data Raw: 2d 7e bf 6f 05 cd f3 d8 3b 9e fc 7d 6e 3b f2 9b 38 ee e1 f8 dc f4 ae 15 0f ee 53 88 ef e2 c9 67 2e 7c 46 fb 7e 8e ef 68 ef 8f b2 5d 6c ff 66 ff 77 fe 5d e1 17 fa b1 30 55 67 4d 5e 5f 16 ef 47 75 8f e0 f4 16 02 c0 7d 7d 1e 83 8b 7c 69 60 a0 c9 07 f9 be 8e 7f 74 f3 e3 0e c7 44 9d 40 86 83 e7 81 ef b0 bf 18 04 2b 74 82 42 27 68 84 fb 1e d4 09 1c e5 19 c9 7f ca ff 95 82 8d 0c 39 69 ab f5 e3 32 be 6f 58 fc 36 3f 9f 3c 15 b8 5b e7 0d 13 0b ea c4 3d 56 2d 00 da 99 d3 af 07 67 47 c4 fe 10 c1 f9 47 43 f0 22 b1 f0 f4 ae bd b6 58 89 f7 70 ba 8e e1 8b ca eb e7 3e 86 f0 c6 d3 5f 59 e0 6a bd 17 77 f8 8e d1 36 f0 16 f7 7b 84 7e f0 16 cf 3b 26 51 18 37 ce 57 ef cf 7d 1d d3 db 5f 96 a0 7c 1c 0d a4 83 39 68 3a 3c 33 e9 83 79 58 9c c5 a3 5c 84 e4 f1 b7 89 f0 2d 81 50 b1 01 Data Ascii: -~o;}n;8Sg.\|F~h]lfw]0UgM^_Gu}}\|i`tD@+tB'h9i2oX6?<[=V-gGGC"Xp>_Yjw6{~;&Q7W}_\|9h:<3yX\-P
2024-05-15 22:37:28 UTC	1369	IN	Data Raw: f1 fa da 65 ac 7a 86 14 12 0a f2 86 44 e1 f3 6d 47 77 09 5a 47 03 c9 25 41 09 13 81 a9 17 28 5a bf 9f 79 ef 91 6d f4 b6 67 26 bf 6b e6 d8 4d 03 1d 99 0b af cd 88 8f 1b 21 f4 11 87 36 78 98 9a 38 ab e4 c5 88 3a c5 b3 94 87 f0 8c d0 34 4f 69 5c bf e0 2c 77 d5 e2 cf 8a f7 71 e3 34 cd ec 1b 66 b8 38 fd 98 d0 3c bf f3 8b 46 4c e6 ca 2a 64 08 c2 5a f5 32 09 c5 e2 7b f3 f6 28 ce 7f 0e 1f 33 45 35 39 f5 66 ba 02 65 8e c4 8e e8 c3 66 38 91 b7 91 7a cd fc fe 92 40 d3 7b 0f 0e 04 31 33 b9 ad de e7 ca 60 d4 fa bc 99 3c 77 f7 71 1d 46 ef bb 74 51 e3 0e 41 2e 11 c1 fd ea 12 4a fc 72 e9 c3 dc df f6 00 35 56 d4 95 44 2b c7 73 bf 23 6d e2 fd 37 35 ce 81 aa e1 aa df 8b 49 e6 20 be 0f 92 a2 57 e2 35 0a 69 6d 7d 4b 9d 0e a0 ac bb a6 88 ad 55 df 1c 44 52 97 20 a1 d6 cf e6 0e Data Ascii: ezDmGwZG%A(Zymg&kM!6x8:4Oi\,wq4f8<FL*dZ2{(3E59fef8z@{13`<wqFtQA.Jr5VD+s#m75I W5im}KUDR
2024-05-15 22:37:28 UTC	1369	IN	Data Raw: 9b 31 c6 13 fb 04 91 45 42 49 2d d3 36 f6 af 5a 96 85 ce 4e 63 c1 a9 d7 3c 3f 10 2d 9d 34 1d 10 3c 63 b3 dc ab 6a 1d e1 6f 66 d3 41 0c 10 ce 91 60 35 0a 40 a3 c0 75 97 ed 8e 02 ee 4c 60 d4 d0 61 6f bb 2d 84 3c 23 1f d1 ae 65 99 9b 69 db e1 c6 fd 31 e9 a7 05 6a 70 4a b5 3b 03 77 f9 9f 19 18 e2 bd 7f 58 43 5d 7d 44 46 6a 10 cd 39 b4 d1 90 34 aa 02 18 17 e3 e6 74 c6 ad ee 8e 6c 15 41 66 17 0e e9 82 ef 1d 58 d1 72 22 13 c7 c0 51 52 01 d1 b9 e5 90 18 53 ea 91 84 48 3b 91 fa 2e 61 bc f4 82 8b a0 08 d1 9f e9 39 b1 42 5e 31 43 e0 8f d0 da 48 a1 3f 9b 4a ce a4 57 33 88 a7 7c df 32 78 4d fb 9c 99 d8 37 a3 bc 57 e3 c8 66 f6 69 86 67 3b 8a 3a 7b e9 72 0b 11 53 41 d8 2f 45 85 72 24 d7 68 c9 33 cc 24 76 e8 e9 b3 46 96 3b 65 45 10 02 7d 70 9e 9f 70 9e 0c 8a 6d 08 24 36 Data Ascii: 1EBI-6ZNc<?-4<cjofA`5@uL`ao-<#ei1jpJ;wXC]}DFj94tlAfXr"QRSH;.a9B^1CH?JW3\|2xM7Wfig;:{rSA/Er$h3$vF;eE}ppm$6
2024-05-15 22:37:28 UTC	1369	IN	Data Raw: c5 42 09 1f 80 48 2b 83 bb 85 a8 7d 78 b7 0c 64 15 4c 63 23 aa 0d 62 7f f8 c3 1f b8 70 b2 68 a5 8d 23 e3 c4 91 85 0f d3 9c 9d 4d 6f f5 ef 09 4d 5b 15 cb 1e 2a 5b 94 d4 49 43 65 a6 81 bc a8 f1 7a 0b 1d 2d 4a 7a da db 9e 39 50 1c 58 3a fc 98 19 a4 98 ad 5e cf a5 23 83 99 49 47 0f a4 93 8a a6 a0 85 1b 52 ec 28 e7 38 ce a6 8f a3 be cd 81 30 54 89 99 85 5a 5f 69 71 9a 68 ea ce dc 05 21 60 c5 85 33 9a d0 13 7c 0c b6 83 ce 97 95 0e 16 fb b9 37 54 cf 4a 56 0a 26 f5 9c d0 2c c7 0c 56 fc a9 20 02 4e 15 04 64 f3 db f6 a0 26 25 16 25 f2 9a 51 54 b3 72 63 f7 f8 34 43 63 cd 50 6b 35 6f 55 2b 5b fe f4 66 c0 09 2d 03 f9 86 44 57 a7 41 30 ea a5 84 da 36 b5 20 36 2a 0a 2c 83 b4 72 c4 af 61 e2 3d d4 41 76 3d f9 86 69 14 0b a8 93 4e 16 b3 b8 1a 63 bb e6 cc 01 31 41 d0 cf fa Data Ascii: BH+}xdLc#bph#MoM[[ICez-Jz9PX:^#IGR(80TZ_iqh!`3\|7TJV&,V Nd&%%QTrc4CcPk5oU+[f-DWA06 6,ra=Av=iNc1A
2024-05-15 22:37:28 UTC	1369	IN	Data Raw: f5 ad 8b ca 20 c1 83 c5 63 26 d8 1c 85 0b 23 2d 20 06 fb 54 54 9d b8 26 2b f2 eb 53 ef 87 e8 bc cb cf 00 37 f3 2f 19 88 78 74 9c 4a e0 c9 4d fd e6 ce 55 e3 bb a8 67 31 26 2c 4f 0f 82 4f 14 fb d1 3a 17 da 1c 80 c1 86 99 d3 e2 02 a7 32 e5 ec 6b b8 48 0b eb 82 e9 3e 3c 8d 59 4b 94 45 3f a4 f0 9c 74 1d 0b c6 fe 78 ce cc 0d 4d 30 72 25 ab 04 91 b7 cc fe ef d5 7e 9b 0d 64 d7 b7 ab b7 e3 d9 ff 72 9f 73 71 ef 6c ff 61 26 b9 96 89 46 dd 26 7a c1 c4 03 4f 1d de ac 85 ee 8e 22 0d ee 04 a2 16 c1 dd 4a 2d 31 40 9c a3 06 e7 d9 f4 4d 4b 53 8f 70 54 47 e4 94 33 7c 98 92 21 95 e3 67 40 d4 2f 06 4d e7 5f 17 00 ca 7b 1a dd 73 c9 5b 67 32 3b 1c 39 f7 93 f4 0a 8e 36 b9 a3 05 d9 fa 0f 2b 88 54 eb 8e 96 39 ac 36 01 a9 9e 54 d4 3c 2c 1f 08 39 06 48 d3 30 ef e6 43 a3 b4 c6 86 75 Data Ascii: c&#- TT&+S7/xtJMUg1&,OO:2kH><YKE?txM0r%~drsqla&F&zO"J-1@MKSpTG3\|!g@/M_{s[g2;96+T96T<,9H0Cu
2024-05-15 22:37:28 UTC	1369	IN	Data Raw: f0 3d 3c 78 f0 67 1c 37 b5 94 14 03 74 87 9c 78 40 11 18 8a 3b 57 bf 43 f9 b2 07 b2 4a 2f d1 18 5c c1 ed 7d ee 9c 53 1c 47 23 b8 34 b6 cc 7d 06 77 09 28 f1 6f be e0 28 ee f1 4c e8 20 ba 90 2c a0 85 73 1b 1a af 32 80 a9 db cb 34 67 62 4e 64 87 2b 83 10 b2 ca 85 8a e5 fb 4d 92 5c 08 8d 99 19 a4 5c bd 06 ee de 03 47 d4 16 95 8e 64 04 23 2b a0 5e 4f e2 11 97 05 74 d0 21 35 10 54 2b 45 6d 05 6a a6 f9 81 2b 5c af ce 52 15 8d f2 61 47 bd a4 c6 cd c8 7a b9 9c 7f 3a e2 f9 b4 42 d3 9a f1 5e 18 2e 00 c5 d4 6e f0 fd 04 d1 99 86 92 bf 26 9e eb d2 78 7a a4 5f 1f 97 ef 06 5a fc 97 86 bc 52 d0 0a 23 d3 a0 05 b0 ce 75 02 5a 01 be 96 6a 70 9c 99 2e d2 cc a8 d2 4f eb a8 eb fd 84 6a 5f 5b ae 98 5a 73 f5 8c ed cd 8c 84 a1 15 9c 38 c7 c6 5c 36 29 8f fa 3c 67 2a 85 5a a3 fa 9c Data Ascii: =<xg7tx@;WCJ/\}SG#4}w(o(L ,s24gbNd+M\\Gd#+^Ot!5T+Emj+\RaGz:B^.n&xz_ZR#uZjp.Oj_[Zs8\6)<g*Z
2024-05-15 22:37:28 UTC	1369	IN	Data Raw: e7 27 f0 70 47 4e 81 ec 7f 5a a0 ca d1 0e 37 f8 0d 28 04 2e 17 e7 21 4f af a0 30 65 2d 47 56 a8 81 44 43 5e a8 ee 93 e4 c8 90 be 9f d5 cf 8b 0e 8a ac d3 30 bf 1f b9 20 36 aa 85 04 dd 00 af e8 ca 92 da 50 a6 ec ad 08 df 0a 34 47 11 66 49 1d b0 02 4b f8 5e 78 a7 19 df e0 7b 47 65 77 f5 fa c2 e5 db c3 28 70 61 92 e3 af c0 b5 d4 15 26 29 0b 10 b9 b1 4c 6e 21 db 86 80 0a 8d e8 89 99 11 29 83 11 9f 31 49 07 56 dc 5a ab 8d 59 6b 2e 32 82 db 16 87 6d 1a 83 b2 01 bc b7 6a 8f 04 a1 92 b9 cb 7f e2 ea ac b1 42 54 b7 1f 90 f2 c1 6f e1 b6 7e 27 27 57 21 2b 05 1e 8d 68 cf 1d 19 28 be 57 38 32 a0 95 fc c9 ef 9b 45 76 3d e4 2b 95 01 50 82 d6 a8 f0 c0 13 c5 83 19 d4 d6 17 13 47 6d 50 af 88 71 e9 18 d2 bf 26 44 35 44 4d 77 fb 6e 34 02 8f 9a 04 a1 7d cf 57 29 63 3e 94 1d 52 Data Ascii: 'pGNZ7(.!O0e-GVDC^0 6P4GfIK^x{Gew(pa&)Ln!)1IVZYk.2mjBTo~''W!+h(W82Ev=+PGmPq&D5DMwn4}W)c>R
2024-05-15 22:37:28 UTC	1369	IN	Data Raw: f3 cf 9e 9d 15 22 21 16 0b 15 4a a6 49 8c 85 ae 17 3c 40 03 8b bd 5a 12 bc 1b d2 28 90 d4 35 0c fb 9c f1 38 00 51 16 10 fc 65 ce d2 9e 62 3a 51 c3 8c 3d 7e 6e 88 90 79 00 9c d9 21 14 16 29 58 f1 b9 35 dc 06 cc 7e f7 84 53 13 6b 39 34 e8 bc ae b5 c9 8a e6 de 1a 0d 5c 40 b7 e7 33 d5 d3 7a 81 7c 75 0b 49 49 a8 3e 9e e9 e6 96 65 d5 d1 5f c3 73 e2 ed 7c 3f 78 6a 67 72 c1 f8 f5 f5 d9 7e de 2c 57 36 80 62 d9 7e 73 43 11 ad 49 9d 18 4d 06 16 25 c5 28 7b 1d e5 d9 ce 9c 27 78 40 34 63 82 b5 1c ce 86 e4 71 fe c4 4a ae 5b c8 26 a6 12 16 55 e9 d2 80 05 e5 1b 47 66 8c 34 48 66 66 6b f8 5c 94 bc 31 76 1d 17 19 c0 d8 71 b6 04 b9 48 69 24 fb 27 a9 e2 ce b8 5f 3f ea 9d c2 29 c8 76 8f 79 aa 54 e7 49 1d 3b 73 c5 9c 30 6a 4e a8 cb 83 1f 9d fb 4c 39 94 e4 66 e0 8d 6b 1d a3 be Data Ascii: "!JI<@Z(58Qeb:Q=~ny!)X5~Sk94\@3z\|uII>e_s\|?xjgr~,W6b~sCIM%({'x@4cqJ[&UGf4Hffk\1vqHi$'_?)vyTI;s0jNL9fk
2024-05-15 22:37:28 UTC	1369	IN	Data Raw: b8 9f 5d 86 06 18 45 21 1b f5 00 0d e9 f1 54 8c 71 2f 8e b6 08 46 59 3c 44 23 91 11 22 b1 b4 6e bb 94 a3 84 68 61 5f 8a 00 95 d2 2d 85 97 e4 fc 18 a8 40 34 2c 6c a6 3d 61 ef 9f f5 d5 f3 5f 6b 5c 6b a3 e9 21 9f a3 15 cf 7a 3e f3 9e 52 26 35 da ee e8 7a 82 0d 92 fb 08 37 73 d5 ac 4e 5e ba 34 ea bd 83 da 44 aa 50 fe c8 98 12 8c 96 cc c9 09 4b 53 4d 6e 45 1a 27 cb 29 f2 7e 42 af 1d 6b 42 26 d2 e4 c8 66 86 ea 96 cb 61 63 61 66 1e 5c 3b 1e b0 bc d4 4e 77 33 c3 bc ce d4 27 45 84 3b e7 49 37 3e 83 5d 2c 75 54 a5 32 93 ad b3 92 53 4d 6c 31 04 28 d4 8e 10 6e 48 29 8a d5 10 03 62 65 a8 a4 c1 c4 a5 d4 aa 11 f5 6b 68 09 11 b4 a6 71 ef 44 21 0b 18 31 28 b1 14 62 08 ab 1d 69 b2 b8 50 b0 ab b6 db 5a 45 2a 4a 1c 24 17 41 f0 8a c4 5c ad 79 02 b7 93 ff eb 99 cc 20 80 61 92 Data Ascii: ]E!Tq/FY<D#"nha_-@4,l=a_k\k!z>R&5z7sN^4DPKSMnE')~BkB&facaf\;Nw3'E;I7>],uT2SMl1(nH)bekhqD!1(biPZE*J$A\y a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50307	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:28 UTC	655	OUT	GET /steam/apps/2195250/ss_6c1ef918ffe94050e72dcb2cfad3a95ee3d69f08.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:28 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 03 Oct 2023 02:22:47 GMT ETag: "651b7af7-10b27" Server: nginx Content-Type: image/jpeg Content-Length: 68391 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=548377 Expires: Wed, 22 May 2024 06:57:05 GMT Date: Wed, 15 May 2024 22:37:28 GMT Connection: close
2024-05-15 22:37:28 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 31 00 31 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 04 03 05 06 07 01 02 08 00 09 ff c4 00 52 10 00 01 03 03 03 02 03 06 02 06 04 0a 07 07 05 01 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 08 14 22 61 71 81 32 91 15 23 42 Data Ascii: JFIF11CCQXR!1AQ"aq2#B
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: 4b 8a d2 a6 12 0b 88 8c d8 28 61 1f 32 3f 68 fc d5 5c 5e de ec 7e 46 e5 3a 2e b4 55 4b 87 95 8d 5a 78 8a f2 f9 fd 7e e1 19 ba bc 04 0b 75 84 07 a4 ed 09 5c 80 30 84 67 d3 f2 a7 18 26 f5 4f 8f d8 e3 56 fb ff 00 c1 69 ef 49 2e 7b 26 c2 ed 16 d1 09 25 e7 9c f1 a5 38 3f 58 f2 f9 38 a8 39 b7 c7 97 e6 5f b7 b7 54 b2 e4 f3 26 d2 6f d1 6e 1f 16 71 4b 6a ec 5a 4e 48 3d b3 51 7b 7f 3f 9d cb 30 a9 b6 ef 6f dd e7 f2 40 32 2f e1 ad e9 df 80 33 e7 52 51 ce c5 3a 97 3a 7b f1 ff 00 9f cd a0 68 da 8b c6 74 61 44 9e f9 cd 76 4b 0b 2f f9 92 93 ac a7 2d 29 ff 00 e1 77 64 c7 4e 6a b9 10 dc 4a e3 c8 5b 4e 24 fc 25 a5 90 a4 fd c5 38 ca 50 96 53 c3 f4 25 3a 74 6e a9 4a 95 68 a9 42 4b 0d 4b 18 69 fa 63 8f e2 2c 5d 2f af 65 c4 b9 47 9c 24 28 3c ca d0 e7 27 85 29 2a c8 e3 d3 23 b5 Data Ascii: K(a2?h\^~F:.UKZx~u\0g&OViI.{&%8?X89_T&onqKjZNH=Q{?0o@2/3RQ::{htaDvK/-)wdNjJ[N$%8PS%:tnJhBKKic,]/eG$(<')*#
2024-05-15 22:37:28 UTC	3389	IN	Data Raw: 4c b4 d3 92 64 3b e1 30 d6 0a 94 7e 7d 80 a8 4e 71 a5 17 29 12 a7 49 d5 96 98 8e da 57 a8 3a 0e 23 ed fe 98 b4 4b b8 44 0b c3 af b5 2c 33 f6 4f c2 72 6b 1e a7 50 a9 9f 71 1b b4 ba 7d 3c 7b ec b1 1f 5f 44 35 33 cc 8b 46 a2 be 69 32 b2 91 ba eb 15 33 19 f3 c9 de d1 04 73 ea 2a 30 ea 92 4f fa 90 25 3e 95 4e 4b fa 73 23 ba a3 4a c6 b2 2c b9 6c bf 5b b5 2d b0 a8 84 cb b7 ad 40 a4 f9 78 8d a8 05 23 3e 59 18 3e b5 ab 6d 79 4e e7 2a 3c a3 26 e6 ca a5 ae 1c b7 4f ba 18 e3 23 7a b0 7b 0a ba 50 4b 26 54 36 ad 58 1c 0a 62 c6 37 35 09 0e e7 9a 44 92 4f 91 3d 89 0b c7 7f 95 1d 87 84 8f 38 12 41 03 bd 21 01 bc 02 73 81 81 eb 4b 07 4c 60 5b 4f 69 f7 b5 4e a2 b5 d9 63 1c 3d 70 94 d4 54 91 fb 3b d4 12 4f d8 12 7e d5 ca a4 95 28 4a a4 bb 2c 9d 69 53 75 6a 46 9c 79 6d 2f bc Data Ascii: Ld;0~}Nq)IW:#KD,3OrkPq}<{_D53Fi23s0O%>NKs#J,l[-@x#>Y>myN<&O#z{PK&T6Xb75DO=8A!sKL`[OiNc=pT;O~(J,iSujFym/
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: fc cb 97 57 2a de c3 c0 cf bd 37 f8 15 b7 b6 df 51 58 d7 fd 6f b8 31 11 ef 12 05 9d a4 da da 71 0a ca 54 b4 15 29 c5 03 fd b5 11 fe ed 3b ba 9a ea 35 e5 b7 ef fb 1f 59 f6 4e c2 56 3d 32 0a 5b 4a af be fd 33 f0 fd c9 67 ea 54 76 5b fc b2 fb 52 5c 5e e9 4d 0f 0d f6 95 f8 5d 47 6d c0 79 d6 6b 49 70 7d 1e 85 79 d4 5f d4 e5 72 bc d7 9f ea c7 b9 3a 2b a7 da a6 63 0e 5e ed 09 6d 2b 5e 5d 95 6d 4f 84 e9 4e 30 31 8c 0c f9 f3 5d a8 dd 55 a4 d6 fb 19 5d 57 d9 6e 8f d4 e1 29 3a 31 53 7c 35 ee fd f8 fd 99 09 be fb 38 5b 64 ad 6e e9 db eb 8d 30 40 2d b5 73 40 56 07 cd 68 c7 3f 6a d0 87 54 59 c4 e2 78 1b cf fd 31 fe 9e bb 2b 8d fc a4 bf 55 fa a2 aa d5 bd 3d be 68 a9 05 17 38 64 31 9f 82 5b 3f 1b 0b fa 2c 76 fa 1c 1a d5 a5 5e 9d 65 ee 33 e5 1d 57 a0 75 1e 8b 2c 5e 52 69 Data Ascii: W*7QXo1qT);5YNV=2[J3gTv[R\^M]GmykIp}y_r:+c^m+^]mON01]U]Wn):1S\|58[dn0@-s@Vh?jTYx1+U=h8d1[?,v^e3Wu,^Ri
2024-05-15 22:37:28 UTC	16192	IN	Data Raw: e5 73 e8 6e d2 ba 8c aa c5 2c 34 bd 7f 31 e3 aa 5d 47 d3 16 c9 86 cc dd b2 1c cb 84 95 25 b0 fe d4 80 95 1e c7 3f 7a e4 9c e7 16 bb 1d 25 56 8d 3a 8a 38 cb 67 07 fb 5c bf 1a 0e a1 b4 d8 5a b9 0b 8c a8 2d a9 4f 78 67 f5 6c 95 1c ed 1f ce bd 2f 46 8c f4 4a a4 96 13 3c 7f b4 8e 9c 27 4e de 2f 2e 2b 7f a9 44 35 f0 a0 80 79 f9 57 a2 3c 5e 4d 57 c2 b2 4e 3e 74 60 4a 40 ae 02 4f 04 e7 d4 50 b6 0c e4 52 3a 0e e1 bb 91 dc e6 80 3e af 7b 1b 5a 7a 68 f7 b3 65 bb a7 da 9a d7 6f b7 df ef f1 ff 00 48 dc 62 bc ad 8f cf 4a 9c 59 8c f6 fe e1 49 40 49 4a 41 f8 78 38 f8 b9 83 d1 55 ba 6f 7f 42 e5 b5 c5 c7 4f 9c 6e a8 b7 17 d9 fe 8f f6 ee 73 07 b5 0f b2 86 a2 e9 5c d7 ae 5a 7d d7 75 1d 85 45 58 da 8f f2 a6 11 e8 b4 8e 14 07 ef 27 f2 aa 35 2c dc 16 61 ba 3d cd 1f 6a a1 76 d4 Data Ascii: sn,41]G%?z%V:8g\Z-Oxgl/FJ<'N/.+D5yW<^MWN>t`J@OPR:>{ZzheoHbJYI@IJAx8UoBOns\Z}uEX'5,a=jv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50308	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:28 UTC	424	OUT	GET /steam/apps/2195250/ss_96496b17bd35a97ceb926231e963762d3b86c3c8.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:28 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Tue, 03 Oct 2023 02:22:47 GMT ETag: "651b7af7-bf8e" Server: nginx Content-Type: image/jpeg Content-Length: 49038 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=337501 Expires: Sun, 19 May 2024 20:22:29 GMT Date: Wed, 15 May 2024 22:37:28 GMT Connection: close
2024-05-15 22:37:28 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 31 00 31 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 00 01 07 08 09 ff c4 00 53 10 00 01 03 02 05 01 05 05 05 02 0b 05 06 02 0b 00 01 00 02 03 04 11 05 06 12 21 31 41 07 13 22 51 61 08 32 71 81 91 14 23 a1 b1 Data Ascii: JFIF11CCQXS!1A"Qa2q#
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: 5f ed 52 99 d8 70 90 ca d0 4f 42 52 bc 69 b2 d8 67 94 15 13 18 16 76 8b 15 aa 22 39 03 9b 7b 92 0a 0e 09 20 c3 3b 72 a6 5a 31 3c 0c e6 ea 46 c6 f9 9d 4b 48 46 f2 b5 a0 bd c3 fa 00 fe 67 6f 8a c6 f3 ac 56 a3 cb 3b 0b 46 f5 49 39 f1 1f ab fd f9 92 78 06 07 41 96 a8 19 43 86 c3 f6 78 80 f1 48 e7 6a 91 fe 65 ce 3b 9f c9 62 93 94 de e9 bb 67 63 16 2c 78 23 b7 12 a4 65 66 24 d0 48 68 d2 d1 b7 a9 e7 92 ae 86 3f 31 67 95 22 12 ab 17 8d ae f7 ba f2 b5 c7 1b 30 cb 29 0d 5b 8e 46 1c e1 7b ef c9 2b 4c 31 33 2c b2 a2 26 a3 15 73 49 73 5e 7e 21 69 8c 11 99 ce b9 03 cc 74 98 96 11 dd bf 10 c3 aa 30 fe fa e6 37 4f 19 60 7d b9 b7 ae e1 1c 19 71 65 b5 8a 6a 55 e4 57 9e 19 71 53 c9 17 1b f3 2b 32 63 65 ae 70 15 2e 89 c3 76 91 c1 5b 94 3d 86 07 91 af 12 53 38 60 39 93 29 61 Data Ascii: _RpOBRigv"9{ ;rZ1<FKHFgoV;FI9xACxHje;bgc,x#ef$Hh?1g"0)[F{+L13,&sIs^~!it07O`}qejUWqS+2cep.v[=S8`9)a
2024-05-15 22:37:28 UTC	2371	IN	Data Raw: 75 2b dc 6c d8 ab 40 d2 1b e8 25 68 0d fe b3 1b fc e5 e6 bb 53 4e d3 5a 88 fb 9f e4 ff 00 27 f0 3d 37 65 6a 17 3a 79 7b d7 e6 bf 3f 99 ec 7c 0a 41 08 74 2e f7 49 d4 36 b5 8a f3 99 57 89 e8 a1 c2 a2 77 ec 18 6e 67 a2 aa c2 31 4a 4a 7c 42 82 a4 77 73 52 d4 b0 3e 39 1b ea 0f e7 d3 90 b0 cd 38 bd c8 d3 1d b3 4e 32 3c 55 db cf b2 16 5a ca 99 b2 7a bc 32 af 14 c3 30 ea 91 df 36 9e 39 db 33 23 1c 10 d7 48 d7 3a c0 f9 93 b1 0b d8 68 32 fe 2f 4f 6d bd d1 eb cf f8 67 8f d7 63 7a 4c db 52 5b 5f 4f df 05 4b b3 ce cb 72 fe 57 ce 18 5d 65 2b 27 ab c4 63 a8 8d d0 d5 56 c9 de 18 8e a1 62 d6 80 1a 0f ad af ea ab c8 bd 16 df 25 38 e4 dc 92 f6 a3 e8 96 6a c3 c6 2b 91 71 08 2c 5d de 52 bc 58 75 3a 49 b7 d5 79 4c 12 d9 96 2f da 7b 5c f1 df 8a 51 7e 28 e2 fe cd f5 72 43 8d e2 Data Ascii: u+l@%hSNZ'=7ej:y{?\|At.I6Wwng1JJ\|BwsR>98N2<UZz20693#H:h2/OmgczLR[_OKrW]e+'cVb%8j+q,]RXu:IyL/{\Q~(rC
2024-05-15 22:37:28 UTC	14240	IN	Data Raw: e0 44 1b 87 d2 9a 88 85 b8 e4 ab a2 ad 70 52 fa 9a 8a 9f bc a9 6b 6d 63 ab c9 04 80 d9 d3 a3 cb b0 47 96 24 3a 41 7b 86 c6 cb a1 1c 6b 63 32 b9 b7 23 94 d6 d2 e9 9d ed 02 d6 3d 57 32 4a 99 ba 12 e0 1e 3d 74 e5 ce 0d b8 e0 94 9c 96 d9 65 c1 c8 ac 80 b4 f9 6d 74 d1 e7 80 3e 39 06 8f 0f 22 ac 91 bb 5d e6 aa 97 08 ba 3c a3 e9 4f b1 67 67 bf f6 7b d8 db 31 aa c8 3b bc 4b 1f 93 ed b6 70 b3 85 38 1a 61 07 d0 8d 4f fe da f0 fd a7 a9 df 95 bf 08 f0 bf 3f af d8 f7 fd 91 a4 ee f0 a4 fa cb 97 f9 7d 3e ec b0 e7 fc dd 52 75 49 1d 5f 71 1e ed d9 d6 e1 79 8e 72 ca e4 7b 4c 58 e3 8d 55 1e 73 ed 4f b5 fa ca f2 70 98 e4 ef 1a d1 e2 75 f9 0b bf a0 c2 a1 e9 4b a1 c7 ed 0c ca 09 c2 1d 59 cc 29 a6 74 cf 76 b7 59 b6 b9 b0 5d e7 2b 76 79 46 b8 2b 19 c7 19 74 14 b5 0e 67 82 18 85 Data Ascii: DpRkmcG$:A{kc2#=W2J=temt>9"]<Ogg{1;Kp8aO?}>RuI_qyr{LXUsOpuKY)tvY]+vyF+tg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50309	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:28 UTC	655	OUT	GET /steam/apps/2195250/ss_f3d31c7cffc2a6ab42fb76aaac2bc9d5258bc142.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:28 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 69704 Last-Modified: Tue, 03 Oct 2023 02:22:47 GMT ETag: "651b7af7-11048" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=296154 Expires: Sun, 19 May 2024 08:53:22 GMT Date: Wed, 15 May 2024 22:37:28 GMT Connection: close
2024-05-15 22:37:28 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 31 00 31 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 01 07 08 00 09 ff c4 00 49 10 00 02 01 03 03 02 04 04 03 05 05 07 02 05 03 05 01 02 03 00 04 11 05 12 21 06 31 07 13 41 51 14 22 61 71 08 32 81 15 42 91 a1 Data Ascii: JFIF11CCQXI!1AQ"aq2B
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: 18 a2 5b 22 84 c6 ab 3a c7 4b 24 c1 b6 ad 29 8e 39 06 e1 23 1e f8 ca a1 ea fd 33 25 b6 e7 40 78 f6 ac ee 6f 49 6c c4 8a 57 38 f9 b4 ee 54 08 7b b4 9b ca 0e 48 63 8c 1a f3 3e a3 d3 1d 82 f2 f0 36 0b 43 01 39 33 02 4d 92 b6 97 49 fe 1e 7a cb ae f4 ab dd 43 4c 8e c1 ed ac a0 f8 89 de e2 e8 43 b5 3e ec 31 9f a6 6b 17 17 57 c7 92 7f 00 5e a2 6b 8b 53 fb 43 86 ff 00 66 cc 2e cf 23 4c a2 c6 93 64 0f f7 81 a2 3e 5c ab 27 86 96 12 74 4d c0 9e fb 4a b1 be 60 41 09 28 57 00 83 df 9a d3 e4 fb 09 d4 f2 33 18 dc b3 a1 9b 1d 9d 76 3e db fd 41 51 e4 7b 4b 19 c4 f7 68 58 0c 64 51 f2 f3 fd 47 d4 2d 8b aa eb 1d 3b d5 65 e4 87 4e 4d 1a f8 f2 7c 8f 96 32 7f ca 38 03 ed 5e a5 8f d3 30 70 e0 6e 36 56 38 7b 06 c1 c3 67 8f 98 70 e7 e8 6c 76 58 07 62 e4 31 fe f3 89 31 2d ee c7 1b Data Ascii: [":K$)9#3%@xoIlW8T{Hc>6C93MIzCLC>1kW^kSCf.#Ld>\'tMJ`A(W3v>AQ{KhXdQG-;eNM\|28^0pn6V8{gplvXb11-
2024-05-15 22:37:28 UTC	2678	IN	Data Raw: b8 b5 5e b9 59 b5 1d 35 ad 94 f1 1f 70 3d 29 c6 50 d7 36 21 f4 5e a5 d4 e6 32 63 eb 62 72 f8 1e 47 7a fa 32 77 6c bc b6 21 4a 12 e5 48 cf ad 66 a6 b7 12 8f 61 51 d3 36 2a aa 46 d6 e8 b6 84 04 cf 9c 8a a6 c8 97 4e c8 96 84 2b 77 ac fb df a8 a9 42 4e 2a 24 a9 24 62 95 72 f0 19 ae 5c 37 52 7a 4d 97 9d 36 48 e0 50 73 49 42 82 b3 c7 88 5d 95 b1 7a 7e c2 38 23 12 38 19 f4 15 5c 23 74 bb 05 36 46 68 ad 0d e1 58 a3 be 58 97 0a 40 ab a8 31 44 42 87 2a 99 f3 82 9a 97 52 0d 9e e7 ed 56 0d 6d 21 0c c4 f0 84 96 e4 c8 08 f4 34 e0 40 e1 40 e2 5c 28 aa fe a9 65 e6 92 7d 47 ad 1d 14 d5 b2 ad 68 30 3f e4 80 b6 98 5a 93 9f d6 8f 88 02 51 ef 90 3d b4 89 6b f4 95 48 18 ad 4c 39 42 16 69 25 57 be 02 3c ca 3a e5 03 64 e3 14 63 a4 12 b6 c2 73 36 40 bc 59 26 ab 5e d4 4b 52 92 dd Data Ascii: ^Y5p=)P6!^2cbrGz2wl!JHfaQ6FN+wBN$$br\7RzM6HPsIB]z~8#8\#t6FhXX@1DB*RVm!4@@\(e}Gh0?ZQ=kHL9Bi%W<:dcs6@Y&^KR
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: f7 83 1b 75 3f 61 75 be db fa 7d 77 5e bc d4 84 68 c5 57 7b 7a 13 d8 52 80 a3 2e a5 4a d7 b5 18 62 59 27 bf b9 02 35 05 8e e6 c2 2a 8e e4 fd 05 45 36 44 78 cc 2f 3d be e6 ce c0 01 dc 93 b0 03 92 95 91 49 3b 83 47 7e 02 d7 72 dd 5f 75 76 ac 91 e9 96 af 18 4c 18 72 9f 3c 40 f6 93 69 e3 cd 61 f9 41 e1 17 e6 3c 9a 02 1c 5c 9c 93 23 e4 1b 9b 6b b7 e0 77 8c 3b b0 ff 00 e6 78 dc 9f e1 b2 e8 a3 e5 97 1b 11 8d 88 53 81 fc 9e 47 ea 58 d3 c7 fa dd f2 16 ac fa 0f 81 37 da 93 09 75 0d 43 4e d3 24 8c 28 5b 77 63 2b 22 8c ed 07 b6 79 24 9e 79 24 9f 5a b9 63 61 8a 32 18 f2 e7 11 cb 40 1f 95 f1 e8 36 d8 00 10 39 0d c9 c9 7e ad 04 b6 f9 3d ef 73 c6 d6 7b 80 76 00 0e cb 58 78 a7 fe cf 9d 5b ad e4 b9 b8 5f 14 cc 93 3b 99 52 ce f3 4d fe c3 3f bb ca 49 9e 3b 67 06 ab 01 f0 bc Data Ascii: u?au}w^hW{zR.JbY'5*E6Dx/=I;G~r_uvLr<@iaA<\#kw;xSGX7uCN$([wc+"y$y$Zca2@69~=s{vXx[_;RM?I;g
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: 97 38 28 11 ac ff 00 69 f9 bd 6a b7 2b 30 39 e5 1c c8 e8 2b 0e 93 ac ee 50 37 54 50 64 f9 92 c9 1d ab ef 4c 42 75 0c b8 19 55 1e 94 64 d9 cd 60 a2 51 98 f8 c5 ac 33 57 09 ef d8 ed 25 ec 85 c6 c5 cf 03 1d eb 0b d4 72 7c 57 eb 6a b0 c6 84 18 1e 0f aa ba c7 79 a7 e9 ba 34 08 a1 56 54 39 27 d6 aa b1 9a 75 48 5f f8 95 86 5c 8d 74 8c 7b 3d 11 f6 1a 4f ed 5e 9a be be 64 57 75 1f 26 3b e3 35 0c 6f 32 e6 b2 26 f1 49 b9 35 06 2c 12 1e 5c e1 7f 4b 41 5d 69 21 ed 2d 5e de 32 e1 17 32 8a 7c 16 1b 24 4f f8 89 d9 17 90 e6 b3 38 c9 ff 00 b6 6b f3 51 6d 2a 47 d5 d6 11 a8 04 48 02 05 f5 c9 35 3c b6 cc 1d 67 f0 94 2e 3b c6 47 50 7c 2d 1c d5 2e 96 f1 9b c2 2b 19 3c 3f d2 2e 16 35 37 d0 da 27 3f c4 d5 f7 b3 0f 6e 47 4b 7b 25 e1 c6 c2 c2 f5 d6 f8 1d 59 f2 c5 c7 07 ec b8 73 5c Data Ascii: 8(ij+09+P7TPdLBuUd`Q3W%r\|Wjy4VT9'uH_\t{=O^dWu&;5o2&I5,\KA]i!-^22\|$O8kQm*GH5<g.;GP\|-.+<?.57'?nGK{%Ys\
2024-05-15 22:37:28 UTC	1832	IN	Data Raw: 4b 3a bd a4 64 98 e3 00 7f 78 ff 00 e7 f3 a6 86 93 b7 25 26 8d b7 4d bf 51 47 e5 e1 62 40 bd ce 78 1f 73 4b a4 82 77 dd 2e 81 76 78 5e 5e a0 66 8d 44 70 02 0f 67 61 80 dc fa 0f 6a 46 b0 ee 49 fd ff 00 74 e2 c1 7b fe 5f be 13 c7 56 b8 28 09 3b 7d 17 68 1c 7b e3 de 91 a1 bb a6 96 8d 54 02 c4 f7 d2 c6 80 bb aa 93 d9 01 c9 3f af fa 9a 56 80 41 48 6a e8 0f df ef f3 41 36 aa 25 91 44 d2 79 a4 76 8e 3c e3 1e c3 fe f5 c5 ba 46 ca 40 de e3 94 fa 6a 30 43 14 92 3c ab bc 8c 00 80 e4 52 06 ee 2d 21 69 aa 1d d0 57 5a 9c 6e a9 0d bc 4e 58 f1 b8 fe 66 3f d2 9e 01 a2 e3 dd 26 92 5d 49 09 3d bc 51 91 3d c1 29 91 bc a3 64 31 f4 51 ee 07 f3 a5 f0 e4 ba 6b 6c ff 00 2f fa ae 2e 1d cf fd 51 d6 fa bd a9 59 1e 38 19 50 0c 02 79 24 fb ff 00 e7 b5 37 c1 9b 87 0a 09 b6 da b0 eb 49 Data Ascii: K:dx%&MQGb@xsKw.vx^^fDpgajFIt{_V(;}h{T?VAHjA6%Dyv<F@j0C<R-!iWZnNXf?&]I=Q=)d1Qkl/.QY8Py$7I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50310	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:28 UTC	424	OUT	GET /steam/apps/2195250/ss_eb8f5def662f28726c875e641cd5faff75e6b16d.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:28 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 03 Oct 2023 02:22:47 GMT ETag: "651b7af7-12f31" Server: nginx Content-Type: image/jpeg Content-Length: 77617 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=575964 Expires: Wed, 22 May 2024 14:36:52 GMT Date: Wed, 15 May 2024 22:37:28 GMT Connection: close
2024-05-15 22:37:28 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 31 00 31 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 05 03 04 06 07 01 02 08 09 00 0a ff c4 00 4a 10 00 01 03 03 03 02 04 04 03 05 05 06 03 06 07 00 01 02 03 04 00 05 11 06 12 21 07 31 13 22 41 51 08 14 61 71 23 32 81 15 33 Data Ascii: JFIF11CCQXJ!1"AQaq#23
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: 44 58 2f bf 1c a9 28 08 40 58 05 23 b0 af 9d 92 cc a1 a7 60 36 a6 07 ca 73 4f c4 1e ad 73 51 5e 44 68 0e ee 65 9f 63 5d f7 43 d2 fa 09 bd 87 26 61 6b ec f5 47 a6 a6 57 5a 42 d6 eb d3 fc 77 cf 97 f8 ab e9 5a 7a d2 8d 3e f3 c1 3d a7 0f 60 6b ae 15 83 da 3e d7 cb 69 ac ad 8c 60 0c 00 2b 00 de eb 94 b0 f3 99 b8 02 dd 58 2b e2 32 67 59 4a b8 e9 71 6d 0d a9 45 ae 42 bd aa d6 fa 56 d8 b6 9e f1 5d 12 d9 43 ba a9 e1 a4 75 72 1d 2c b8 56 7c c3 d6 89 6d fc 6d 10 be 90 dc 4b 46 76 67 76 dc d2 a7 7f 2f 7c d2 8b 81 28 41 e2 4a d1 71 1f 3e da fb a0 7b d4 20 0c c6 58 e5 54 10 61 4b 2c 64 df af 8a 65 d4 a4 25 63 8c fa 55 ce 9c 58 8e 6b f1 01 66 a5 b4 fb 6c 6e c4 e2 27 76 d3 32 62 cb 2d a5 ad cd 36 71 91 4b d0 c3 70 df e6 3e 70 f9 0a 7e 70 34 f8 0a 6e 3a d5 8c 2b 3c 66 9d Data Ascii: DX/(@X#`6sOsQ^Dhec]C&akGWZBwZz>=`k>i`+X+2gYJqmEBV]Cur,V\|mmKFvgv/\|(AJq>{ XTaK,de%cUXkfln'v2b-6qKp>p~p4n:+<f
2024-05-15 22:37:28 UTC	2447	IN	Data Raw: 70 04 4c b5 e1 39 82 7b 1a ba ae 41 cc f6 73 13 97 2d 49 24 27 b5 42 a8 cc 0c d2 34 c2 94 28 13 c9 a3 06 20 c9 c0 33 e5 4b da c2 f1 de 8f 5e 33 93 17 7c 9c 08 d6 22 c8 70 2d 59 c6 6a 0b 64 c9 ed c4 79 36 ea f2 99 53 20 00 83 c5 32 96 6c ed 16 6a f2 79 8c 23 a1 cd a9 20 1f 29 ef 43 07 b9 97 c6 66 b3 db 7a 64 90 92 09 e3 02 8a d6 12 30 4c 5d 53 04 e2 23 1a ce f3 88 74 25 07 c4 49 e5 3e b4 54 b9 6b 53 99 5d 85 a6 15 61 91 b4 ac 8c 29 26 a0 5c 08 e2 7b d3 e4 cf a4 db 9c 6d 2e a9 5e ad e7 34 44 b8 31 c4 55 d4 a0 30 75 be c6 89 48 29 71 7f 9e a9 ea 6d c9 10 81 37 01 99 33 d3 5d 2a 76 eb 01 de 4e e4 2b fa 52 0f d4 92 a5 dc 63 0b a7 2d da 49 8e 90 6b 47 86 56 b4 ee f1 06 15 9a 02 6b 86 ad 5c 2f 89 0d 5f a4 f8 32 4b 6e b6 33 77 80 e2 56 94 a4 2f 00 05 7a d6 7d 5a Data Ascii: pL9{As-I$'B4( 3K^3\|"p-Yjdy6S 2ljy# )Cfzd0L]S#t%I>TkS]a)&\{m.^4D1U0uH)qm73]*vN+Rc-IkGVk\/_2Kn3wV/z}Z
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: 29 b7 dc 21 b1 f4 f7 a7 6a aa a1 ba df 69 aa a1 b2 2b 69 2f e9 c3 72 74 8b ef a6 e2 bd d1 b0 50 91 fe 94 4a ee ad 9c b4 26 dd a2 57 f7 5d 67 33 4e f5 15 77 28 59 72 36 1c 8e b6 0a b6 87 59 58 29 5a 09 f4 c8 3c 1f 43 83 e9 56 6c 58 b8 88 d9 90 c6 54 fa 9a d3 22 d5 71 53 cb 4b aa 86 f2 8a e3 c8 75 38 f1 13 9f 5c 71 b8 7a 8f 7f a5 11 59 5b 2a 0f 31 12 a5 79 3d a0 42 39 35 7c ca 4c 54 cf 4b 77 a3 7a 55 9b 5a dd d4 b7 54 ec 2c 82 98 8d 2c 60 85 11 82 b3 f5 c1 e3 ee 4f b5 21 73 0b 4f a4 3f 19 a1 45 7b 17 d5 6e fe 25 d3 d2 9d 3b 69 d5 7a 86 42 82 90 a7 56 ca 8a 52 07 73 cd 01 97 d2 04 37 61 19 0d bb 05 7b c3 5d 2a 62 1e 99 6f 52 a6 6b 60 ca f1 14 db 7e f8 e6 b8 4e bd 45 da cb 6b 34 1e 04 da d1 e2 a0 fb bb c8 16 a7 d6 31 e1 dd 96 d1 68 25 c7 06 53 fe 94 cd 3d 2e Data Ascii: )!ji+i/rtPJ&W]g3Nw(Yr6YX)Z<CVlXT"qSKu8\qzY[1y=B95\|LTKwzUZT,,`O!sO?E{n%;izBVRs7a{]boRk`~NEk41h%S=.
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: 03 3e df fa 35 09 a7 2c e6 68 36 a9 52 a1 91 17 b1 de e3 a2 61 6d c4 9d c5 4a 58 fa 7d 6b 41 ec 2a 85 26 12 05 6b 7d 4c f1 1e 75 1f a8 e9 bf da 6d 56 a6 90 02 58 07 71 a5 70 58 7d d3 42 af 4d 5b 07 cc 8f de b5 23 d7 3d 12 c4 06 d1 c3 6e 72 47 b0 a1 02 15 b9 32 f7 32 b6 76 f6 96 f7 c2 3d e6 cd 65 d5 96 87 ef ae 25 a8 4c c9 4a d4 a7 06 52 82 41 01 5f 60 48 3f a5 68 d0 03 6f 3e 71 33 f5 37 7c 0a 9f 39 10 eb dd e6 da 7a b1 aa d5 66 58 55 ae 55 c1 4e a5 61 38 4b 89 3d c8 f6 c9 c9 fd 68 d5 d4 cd 5a 6e f1 06 e5 55 db 10 9f 43 ec f0 91 7f 89 73 09 04 89 29 1c f6 a5 d7 50 28 d7 d7 58 f2 60 fd 1f 56 86 63 ed 18 5d ee b1 67 75 de f2 cc 91 86 17 20 a5 09 03 8e dc 57 51 5b 2a de e5 e6 15 c8 cd 52 84 8e a5 eb 07 f4 55 be 7b 16 c2 b4 37 35 d5 36 bc 1c 67 04 d0 6d b1 0d Data Ascii: >5,h6RamJX}kA&k}LumVXqpX}BM[#=nrG22v=e%LJRA_`H?ho>q37\|9zfXUUNa8K=hZnUCs)P(X`Vc]gu WQ[RU{756gm
2024-05-15 22:37:28 UTC	7952	IN	Data Raw: 1f f8 0e d5 68 9c eb 51 14 a1 e2 21 20 e0 f7 ad be 9b 51 fa a5 a7 e7 3e 7c 6b fa be bc 0f 79 c7 e1 45 3c d7 c9 7c cf bc 13 c4 ca 9e ca 4d 36 08 0b 07 89 a3 6d 97 14 71 4b 85 dc d2 d9 c0 98 71 1b 29 83 59 95 dd 1d 40 65 4b 6d 4a 03 81 53 55 25 db 88 37 70 23 69 4d 2d c2 a2 13 e5 14 c6 d2 dc 09 01 82 f7 8c dc 50 4b 64 7a d0 00 02 5b 39 31 b3 6c 2d e2 48 19 c5 48 42 dd a5 89 c0 e6 26 50 5a 27 75 43 54 56 40 6c 8e 26 bb 3c 44 9a f0 c7 69 11 3f 96 39 ce 30 2b c1 64 4f 90 cb 5c 95 1e 69 da 55 3f aa 09 89 f1 0c e8 eb 3a f5 36 a7 b7 da 99 05 45 f7 92 8c 0f 6c f3 5e d4 ea 05 14 b1 10 da 3a 3d 7b c2 99 df 9d 61 ea 54 6e 89 74 96 0e 95 b4 14 b5 35 c8 c1 b3 b3 8d a3 1c 9a 0f 4e a8 d7 56 f6 f3 cc b6 bd c5 d7 1c 76 1c 4f 3e 6f f7 67 2e 12 dd 75 c5 15 ad 67 24 9a bd b6 Data Ascii: hQ! Q>\|kyE<\|M6mqKq)Y@eKmJSU%7p#iM-PKdz[91l-HHB&PZ'uCTV@l&<Di?90+dO\iU?:6El^:={aTnt5NVvO>og.ug$
2024-05-15 22:37:28 UTC	2024	IN	Data Raw: 74 bb 4d 2d f2 9a bf 47 6d 0f 53 9f 73 99 2e 8b d5 3b 88 d2 d0 a0 b0 bd a8 65 20 63 de bb 1e 83 55 76 e8 43 79 ed 32 fa a3 1f ac 95 03 e7 18 a3 aa 37 48 16 e9 31 43 a7 72 cf 3e fc d3 1a c7 f4 6e 50 a3 b0 8b 52 88 68 65 63 e6 3b d2 5a e2 e8 ab 5d c9 2d bc 5b 42 93 95 2a ad a1 d4 55 71 26 ee eb 32 f5 c4 e9 80 ae b1 c3 1e f0 1a 3a dd 79 b1 59 df b6 c5 79 41 2e 13 b8 e7 b8 af 86 fd 2d a2 9e ad d4 bd 4f 0b 3b 1e 9d a1 45 a0 17 12 b3 ba ea 09 77 42 43 ae 15 24 ab 77 3e f5 9f 40 34 2e d5 9b 62 b5 5e c2 21 69 74 fe d1 64 a8 f1 bc 64 d5 ac 62 54 99 a7 d3 f6 fd 6a bd dd b2 21 bd 4b 75 0a 51 42 57 b8 f6 a4 ab 39 9f 46 fa 41 d6 3e b1 8a d0 f1 da 07 b5 dc 7f 67 bd e2 a4 79 c1 c8 a2 30 24 60 4e 3f 47 a9 1a 67 f5 31 93 2d 0d 27 d5 db cb 16 09 10 84 e5 b4 c1 73 7a 92 93 Data Ascii: tM-GmSs.;e cUvCy27H1Cr>nPRhec;Z]-[B*Uq&2:yYyA.-O;EwBC$w>@4.b^!itddbTj!KuQBW9FA>gy0$`N?Gg1-'sz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50311	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:28 UTC	414	OUT	GET /steam/apps/2195250/capsule_616x353_alt_assets_8.jpg?t=1713799333 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:28 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 91657 Last-Modified: Tue, 16 Apr 2024 13:47:35 GMT ETag: "661e8177-16609" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=224523 Expires: Sat, 18 May 2024 12:59:31 GMT Date: Wed, 15 May 2024 22:37:28 GMT Connection: close
2024-05-15 22:37:28 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 00 00 00 00 00 03 02 04 05 00 01 06 07 08 09 0a ff c4 00 6a 10 00 01 03 02 04 03 05 04 07 04 05 04 08 10 0a 0b 01 02 03 04 05 11 00 06 12 21 07 31 41 08 13 22 51 61 14 32 71 81 09 42 91 Data Ascii: JFIFHHCCahj!1A"Qa2qB
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: 79 61 4b 4b 82 7c c2 b9 79 79 9c 18 59 5c 37 4f d8 56 18 16 67 6c 9f c6 3b f3 df e3 86 05 91 ea 56 2d b6 c3 5a b0 bd 78 fd c5 ce cc 93 b2 a9 93 52 cb ae 1a cd 1c 5d 44 25 36 79 91 e4 a4 f3 1f 1d c7 ae 3e 8b c1 3e 98 43 8c 77 d5 78 83 7b 19 86 94 76 bf 1f f8 2b 8d c3 ff 00 fa 7f e9 ac 27 19 f4 46 7f e2 01 6e c3 bc d4 8d eb 96 fd 61 e6 b4 43 d1 54 ca d4 95 24 85 03 62 08 b1 c7 d1 b7 16 17 9b 7b 1f 13 cc 72 02 08 dc 1d d0 c3 76 c5 10 ad a6 95 06 cf 2b 60 72 f3 46 0a be 8d b0 34 88 1e 4a b4 ed 81 21 10 d5 25 43 a6 16 46 89 81 74 5f 66 fe c1 1c 45 ed 49 91 e7 66 bc a1 53 cb b0 69 b1 2a 2e 53 1c 6e af 25 e6 dd 2e a1 0d ad 44 04 34 b1 a6 ce a7 72 6f 70 70 aa 25 22 4c 43 63 34 56 d5 ff 00 61 cb 8e 37 bf ed ec 91 ff 00 97 ca ff 00 dd b1 32 94 af ae b3 e7 fe 55 23 Data Ascii: yaKK\|yyY\7OVgl;V-ZxR]D%6y>>Cwx{v+'FnaCT$b{rv+`rF4J!%CFt_fEIfSi*.Sn%.D4ropp%"LCc4Va72U#
2024-05-15 22:37:28 UTC	2223	IN	Data Raw: 57 9e 38 d8 68 e1 82 71 14 3e 8b 25 65 78 96 f3 fc a7 55 87 04 c1 13 e5 84 8a ca ec de 7b ae a4 ed 0a 51 98 a8 b4 4a e4 07 5b 26 a9 45 9c c4 77 c0 4b a8 2b 5c 7e fd 85 00 41 4a 80 5a 41 b1 04 1e 58 be 27 08 a7 36 4d 68 51 ae 7a 8d 93 cb 7e ad 8e 8c 0d c3 88 fd 16 ab e0 74 6c b8 ff 00 67 fe 1e e7 88 11 92 d6 64 ad 4e 43 75 f9 e1 64 19 32 ec e2 5f 51 6c 1d 08 ba c0 50 4a 40 02 e0 0d ad 8c b8 88 58 30 a5 a0 7f 77 a0 f0 07 4f 71 4d c4 b9 c1 e0 5f ac e6 bb c4 fe eb 96 7b 30 71 c6 05 03 83 95 d8 f5 ec c3 4d a7 3f 95 e4 4d 54 0a 5c e9 cd b4 eb 8d 38 db ee 15 34 95 10 57 e2 21 1b 5f 70 07 5c 33 15 84 2f 2f 68 e6 d6 96 f7 bb 33 41 1e 34 2f c1 6e 92 6c c2 16 8d da e7 66 3d 1b 97 d1 f6 59 3a ae 53 e1 e6 7f ce 8e 65 14 f0 df 2f cf 72 4d 27 31 38 98 c2 8d dc 36 be fa Data Ascii: W8hq>%exU{QJ[&EwK+\~AJZAX'6MhQz~tlgdNCud2_QlPJ@X0wOqM_{0qM?MT\84W!_p\3//h3A4/nlf=Y:Se/rM'186
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: 4e 20 45 71 4e 16 e3 04 28 77 64 20 2d 1b 58 27 c3 b5 b1 ce 05 a1 e4 90 bd 8b e3 96 4c 30 63 1f ad 6f ec 5e aa 76 51 cc fc 0c ed 5b 44 cc 55 1a 2f 04 b2 fd 09 ba 34 96 a2 ba 8a 8d 0a 02 8b 85 68 d6 0a 74 24 ec 07 9f a6 3a 0c c8 fd 43 57 90 c5 7d 6f 08 e0 d7 4a 7c ca e5 6e 24 f6 92 e0 af 17 73 56 52 c8 99 5f 83 10 f2 c5 58 67 7a 64 79 13 cd 2e 0b 6d ba cb 73 42 1d 69 45 a1 a9 49 58 b8 29 3b 10 77 c6 77 3e 32 43 43 57 5e 1c 36 2e 38 dd 2b e5 35 47 99 5b 87 b7 e7 62 6a d7 10 15 90 ff 00 c8 b7 0e 68 51 7d 89 53 4d 54 d3 04 3a 66 ad 41 9e e7 5d f4 6b f7 5d b7 3b 5f d7 17 3c 39 ab 20 49 e1 5c 48 45 9f eb 52 1d 6a ae cf 5f 15 33 c3 4e ca d4 fe 1b f6 16 cd 2c 71 0f 87 d9 7d 9c fb 02 89 5b 90 b9 6f 45 8b 2e 53 47 4b eb 61 42 42 42 b7 4a 74 69 21 5e 1b 0e 56 c5 b6 Data Ascii: N EqN(wd -X'L0co^vQ[DU/4ht$:CW}oJ\|n$sVR_Xgzdy.msBiEIX);ww>2CCW^6.8+5G[bjhQ}SMT:fA]k];_<9 I\HERj_3N,q}[oE.SGKaBBBJti!^V
2024-05-15 22:37:28 UTC	16384	IN	Data Raw: 7f 75 8a f1 bf b5 af 12 bb 41 d1 e9 b4 fc fb 5b 85 52 83 4b 90 64 c6 4b 34 f6 a3 69 71 48 28 24 94 80 48 b1 22 df 03 85 be 47 3f 42 b6 61 f0 b0 e1 89 7b 74 58 b7 09 38 d5 9c 78 39 99 4d 7b 21 e6 27 a8 15 2d 01 b7 d7 18 25 c6 9f 6c 1b e8 75 a5 5d 0b 17 e4 08 d8 9d ad 80 6b 9c cd 42 d5 2c 50 e2 9b 4f 16 b7 c5 67 e9 3e e3 dd 66 9c aa 7a 33 3d 1e 9a eb 89 d0 a9 10 29 4d 26 40 e8 6c 56 54 01 f5 09 bf 96 18 67 92 96 16 70 bc 20 76 ba ad 37 c3 ae 3a e7 0e 14 71 01 dc ff 00 45 ac a5 19 a5 d0 f2 1d a9 d4 9b 12 96 fa 9e dd d5 2f bc 3e 25 1b 5f 51 c6 76 3d cd 76 60 ba d2 e1 e0 96 2e c9 e3 d1 f2 5b a1 bf a4 df 8f eb 59 42 33 8d 21 c2 39 69 a2 c6 37 f5 e5 86 9c 44 81 62 6f 08 c1 9e 5e f3 fb ac 07 87 7d aa f8 83 c2 7c eb 9a 73 56 5e ae 40 a6 e6 1c d8 ea a4 d5 5f 7e 0b Data Ascii: uA[RKdK4iqH($H"G?Ba{tX8x9M{!'-%lu]kB,POg>fz3=)M&@lVTgp v7:qE/>%_Qv=v`.[YB3!9i7Dbo^}\|sV^@_~
2024-05-15 22:37:28 UTC	7952	IN	Data Raw: c6 7d 9f 7e 8c a4 f1 5b 22 e6 6e 25 f6 8f ac 66 4c b1 5e a8 cd 93 51 79 91 21 98 ae b6 ca 49 5b d2 65 f7 8d ab 49 52 f5 a8 0d 82 50 90 7e b6 d4 07 34 c2 fe 4b 4a 76 2a ec ab 95 3b 4a f6 a5 ac 0a 1c 1a 83 dc 19 ca f2 7d b5 e5 55 d4 95 48 9a ce a2 22 b0 f1 4a 52 35 3c 52 5c 52 40 00 21 2b 4d ef 62 60 08 89 a6 d2 f5 27 8d 3d a2 33 1f 05 b3 15 3f 2c 65 0e 05 e6 ec fd 01 a8 28 70 cd cb f1 83 50 63 0b 94 a1 84 1d 24 12 94 a2 e4 00 02 42 92 37 de d6 92 d1 7b 95 cc 7d a6 be 92 ac fb 92 78 6d 50 a6 39 c1 7c d1 c3 4c c5 5e 8e f4 3a 3d 62 bc fa 50 96 97 64 87 1d 6d 3a 41 52 d0 95 82 3a 05 14 5f 6d 8d 12 98 c8 ec d0 2b 44 f6 44 fa 50 87 67 3e 0d 53 f8 7f 98 32 2b d9 86 25 21 c7 95 06 a1 4f 9a 86 16 5b 75 d5 ba a4 3a 85 24 82 a0 b5 af c4 0e e0 8b 8b 8b 91 6b 82 6b e1 Data Ascii: }~["n%fL^Qy!I[eIRP~4KJv*;J}UH"JR5<R\R@!+Mb`'=3?,e(pPc$B7{}xmP9\|L^:=bPdm:AR:_m+DDPg>S2+%!O[u:$kk
2024-05-15 22:37:28 UTC	16288	IN	Data Raw: 14 da 55 74 9b 9d b9 74 c5 23 09 6c a0 ac 29 3a 55 71 ba 7c 3f 68 fd 79 62 2b 44 52 08 48 40 49 20 6e 48 4f 33 fe 1f 9e 05 30 22 b6 d2 de 48 36 50 50 b2 54 4a 4f 2e 87 f5 e4 30 25 18 d1 2b c6 57 a9 08 5a 42 6d a4 69 3b 01 fa fe 67 14 98 11 d0 d5 8f 79 dd ab ba b6 a0 92 93 cf fa bf 6f f2 c0 22 0a ed 6b 0e 12 b4 ad 41 5b 2b c2 6e 7f 5c fe 58 89 a1 18 32 e3 08 55 d2 a2 b5 78 52 42 4f 2e a7 f0 fb 70 28 82 53 28 52 c1 6c a1 5e 69 f0 9e 7f e2 3f 0c 0f 72 60 45 52 14 84 04 68 5d f6 52 bc 27 9f 97 c8 7d f8 a4 c6 a3 21 a5 bc 84 80 95 05 a6 c3 70 7d de 87 e5 f9 60 13 42 25 94 54 34 85 84 a7 dd f0 ff 00 3f b7 7f b3 11 38 27 09 68 ad 45 c2 85 04 73 52 74 f2 3e 5f 3f c4 f9 60 48 d1 30 74 4b 6f 51 70 a9 40 92 6f 7d bf 5f ab 60 13 5a 34 45 4a 0a 09 22 fe 86 dc c6 29 39 Data Ascii: Utt#l):Uq\|?hyb+DRH@I nHO30"H6PPTJO.0%+WZBmi;gyo"kA[+n\X2UxRBO.p(S(Rl^i?r`ERh]R'}!p}`B%T4?8'hEsRt>_?`H0tKoQp@o}_`Z4EJ")9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50312	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:28 UTC	424	OUT	GET /steam/apps/2195250/ss_6c1ef918ffe94050e72dcb2cfad3a95ee3d69f08.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:29 UTC	342	IN	HTTP/1.1 200 OK Last-Modified: Tue, 03 Oct 2023 02:22:47 GMT ETag: "651b7af7-10b27" Server: nginx Content-Type: image/jpeg Content-Length: 68391 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=548317 Expires: Wed, 22 May 2024 06:56:06 GMT Date: Wed, 15 May 2024 22:37:29 GMT Connection: close
2024-05-15 22:37:29 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 31 00 31 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 04 03 05 06 07 01 02 08 00 09 ff c4 00 52 10 00 01 03 03 03 02 03 06 02 06 04 0a 07 07 05 01 01 02 03 04 00 05 11 06 12 21 07 31 13 41 51 08 14 22 61 71 81 32 91 15 23 42 Data Ascii: JFIF11CCQXR!1AQ"aq2#B
2024-05-15 22:37:29 UTC	16384	IN	Data Raw: 4b 8a d2 a6 12 0b 88 8c d8 28 61 1f 32 3f 68 fc d5 5c 5e de ec 7e 46 e5 3a 2e b4 55 4b 87 95 8d 5a 78 8a f2 f9 fd 7e e1 19 ba bc 04 0b 75 84 07 a4 ed 09 5c 80 30 84 67 d3 f2 a7 18 26 f5 4f 8f d8 e3 56 fb ff 00 c1 69 ef 49 2e 7b 26 c2 ed 16 d1 09 25 e7 9c f1 a5 38 3f 58 f2 f9 38 a8 39 b7 c7 97 e6 5f b7 b7 54 b2 e4 f3 26 d2 6f d1 6e 1f 16 71 4b 6a ec 5a 4e 48 3d b3 51 7b 7f 3f 9d cb 30 a9 b6 ef 6f dd e7 f2 40 32 2f e1 ad e9 df 80 33 e7 52 51 ce c5 3a 97 3a 7b f1 ff 00 9f cd a0 68 da 8b c6 74 61 44 9e f9 cd 76 4b 0b 2f f9 92 93 ac a7 2d 29 ff 00 e1 77 64 c7 4e 6a b9 10 dc 4a e3 c8 5b 4e 24 fc 25 a5 90 a4 fd c5 38 ca 50 96 53 c3 f4 25 3a 74 6e a9 4a 95 68 a9 42 4b 0d 4b 18 69 fa 63 8f e2 2c 5d 2f af 65 c4 b9 47 9c 24 28 3c ca d0 e7 27 85 29 2a c8 e3 d3 23 b5 Data Ascii: K(a2?h\^~F:.UKZx~u\0g&OViI.{&%8?X89_T&onqKjZNH=Q{?0o@2/3RQ::{htaDvK/-)wdNjJ[N$%8PS%:tnJhBKKic,]/eG$(<')*#
2024-05-15 22:37:29 UTC	3389	IN	Data Raw: 4c b4 d3 92 64 3b e1 30 d6 0a 94 7e 7d 80 a8 4e 71 a5 17 29 12 a7 49 d5 96 98 8e da 57 a8 3a 0e 23 ed fe 98 b4 4b b8 44 0b c3 af b5 2c 33 f6 4f c2 72 6b 1e a7 50 a9 9f 71 1b b4 ba 7d 3c 7b ec b1 1f 5f 44 35 33 cc 8b 46 a2 be 69 32 b2 91 ba eb 15 33 19 f3 c9 de d1 04 73 ea 2a 30 ea 92 4f fa 90 25 3e 95 4e 4b fa 73 23 ba a3 4a c6 b2 2c b9 6c bf 5b b5 2d b0 a8 84 cb b7 ad 40 a4 f9 78 8d a8 05 23 3e 59 18 3e b5 ab 6d 79 4e e7 2a 3c a3 26 e6 ca a5 ae 1c b7 4f ba 18 e3 23 7a b0 7b 0a ba 50 4b 26 54 36 ad 58 1c 0a 62 c6 37 35 09 0e e7 9a 44 92 4f 91 3d 89 0b c7 7f 95 1d 87 84 8f 38 12 41 03 bd 21 01 bc 02 73 81 81 eb 4b 07 4c 60 5b 4f 69 f7 b5 4e a2 b5 d9 63 1c 3d 70 94 d4 54 91 fb 3b d4 12 4f d8 12 7e d5 ca a4 95 28 4a a4 bb 2c 9d 69 53 75 6a 46 9c 79 6d 2f bc Data Ascii: Ld;0~}Nq)IW:#KD,3OrkPq}<{_D53Fi23s0O%>NKs#J,l[-@x#>Y>myN<&O#z{PK&T6Xb75DO=8A!sKL`[OiNc=pT;O~(J,iSujFym/
2024-05-15 22:37:29 UTC	16384	IN	Data Raw: fc cb 97 57 2a de c3 c0 cf bd 37 f8 15 b7 b6 df 51 58 d7 fd 6f b8 31 11 ef 12 05 9d a4 da da 71 0a ca 54 b4 15 29 c5 03 fd b5 11 fe ed 3b ba 9a ea 35 e5 b7 ef fb 1f 59 f6 4e c2 56 3d 32 0a 5b 4a af be fd 33 f0 fd c9 67 ea 54 76 5b fc b2 fb 52 5c 5e e9 4d 0f 0d f6 95 f8 5d 47 6d c0 79 d6 6b 49 70 7d 1e 85 79 d4 5f d4 e5 72 bc d7 9f ea c7 b9 3a 2b a7 da a6 63 0e 5e ed 09 6d 2b 5e 5d 95 6d 4f 84 e9 4e 30 31 8c 0c f9 f3 5d a8 dd 55 a4 d6 fb 19 5d 57 d9 6e 8f d4 e1 29 3a 31 53 7c 35 ee fd f8 fd 99 09 be fb 38 5b 64 ad 6e e9 db eb 8d 30 40 2d b5 73 40 56 07 cd 68 c7 3f 6a d0 87 54 59 c4 e2 78 1b cf fd 31 fe 9e bb 2b 8d fc a4 bf 55 fa a2 aa d5 bd 3d be 68 a9 05 17 38 64 31 9f 82 5b 3f 1b 0b fa 2c 76 fa 1c 1a d5 a5 5e 9d 65 ee 33 e5 1d 57 a0 75 1e 8b 2c 5e 52 69 Data Ascii: W*7QXo1qT);5YNV=2[J3gTv[R\^M]GmykIp}y_r:+c^m+^]mON01]U]Wn):1S\|58[dn0@-s@Vh?jTYx1+U=h8d1[?,v^e3Wu,^Ri
2024-05-15 22:37:29 UTC	16192	IN	Data Raw: e5 73 e8 6e d2 ba 8c aa c5 2c 34 bd 7f 31 e3 aa 5d 47 d3 16 c9 86 cc dd b2 1c cb 84 95 25 b0 fe d4 80 95 1e c7 3f 7a e4 9c e7 16 bb 1d 25 56 8d 3a 8a 38 cb 67 07 fb 5c bf 1a 0e a1 b4 d8 5a b9 0b 8c a8 2d a9 4f 78 67 f5 6c 95 1c ed 1f ce bd 2f 46 8c f4 4a a4 96 13 3c 7f b4 8e 9c 27 4e de 2f 2e 2b 7f a9 44 35 f0 a0 80 79 f9 57 a2 3c 5e 4d 57 c2 b2 4e 3e 74 60 4a 40 ae 02 4f 04 e7 d4 50 b6 0c e4 52 3a 0e e1 bb 91 dc e6 80 3e af 7b 1b 5a 7a 68 f7 b3 65 bb a7 da 9a d7 6f b7 df ef f1 ff 00 48 dc 62 bc ad 8f cf 4a 9c 59 8c f6 fe e1 49 40 49 4a 41 f8 78 38 f8 b9 83 d1 55 ba 6f 7f 42 e5 b5 c5 c7 4f 9c 6e a8 b7 17 d9 fe 8f f6 ee 73 07 b5 0f b2 86 a2 e9 5c d7 ae 5a 7d d7 75 1d 85 45 58 da 8f f2 a6 11 e8 b4 8e 14 07 ef 27 f2 aa 35 2c dc 16 61 ba 3d cd 1f 6a a1 76 d4 Data Ascii: sn,41]G%?z%V:8g\Z-Oxgl/FJ<'N/.+D5yW<^MWN>t`J@OPR:>{ZzheoHbJYI@IJAx8UoBOns\Z}uEX'5,a=jv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50313	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:28 UTC	424	OUT	GET /steam/apps/2195250/ss_f3d31c7cffc2a6ab42fb76aaac2bc9d5258bc142.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:29 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 69704 Last-Modified: Tue, 03 Oct 2023 02:22:47 GMT ETag: "651b7af7-11048" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=296125 Expires: Sun, 19 May 2024 08:52:54 GMT Date: Wed, 15 May 2024 22:37:29 GMT Connection: close
2024-05-15 22:37:29 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 31 00 31 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 04 02 03 05 06 01 07 08 00 09 ff c4 00 49 10 00 02 01 03 03 02 04 04 03 05 05 07 02 05 03 05 01 02 03 00 04 11 05 12 21 06 31 07 13 41 51 14 22 61 71 08 32 81 15 42 91 a1 Data Ascii: JFIF11CCQXI!1AQ"aq2B
2024-05-15 22:37:29 UTC	16384	IN	Data Raw: 18 a2 5b 22 84 c6 ab 3a c7 4b 24 c1 b6 ad 29 8e 39 06 e1 23 1e f8 ca a1 ea fd 33 25 b6 e7 40 78 f6 ac ee 6f 49 6c c4 8a 57 38 f9 b4 ee 54 08 7b b4 9b ca 0e 48 63 8c 1a f3 3e a3 d3 1d 82 f2 f0 36 0b 43 01 39 33 02 4d 92 b6 97 49 fe 1e 7a cb ae f4 ab dd 43 4c 8e c1 ed ac a0 f8 89 de e2 e8 43 b5 3e ec 31 9f a6 6b 17 17 57 c7 92 7f 00 5e a2 6b 8b 53 fb 43 86 ff 00 66 cc 2e cf 23 4c a2 c6 93 64 0f f7 81 a2 3e 5c ab 27 86 96 12 74 4d c0 9e fb 4a b1 be 60 41 09 28 57 00 83 df 9a d3 e4 fb 09 d4 f2 33 18 dc b3 a1 9b 1d 9d 76 3e db fd 41 51 e4 7b 4b 19 c4 f7 68 58 0c 64 51 f2 f3 fd 47 d4 2d 8b aa eb 1d 3b d5 65 e4 87 4e 4d 1a f8 f2 7c 8f 96 32 7f ca 38 03 ed 5e a5 8f d3 30 70 e0 6e 36 56 38 7b 06 c1 c3 67 8f 98 70 e7 e8 6c 76 58 07 62 e4 31 fe f3 89 31 2d ee c7 1b Data Ascii: [":K$)9#3%@xoIlW8T{Hc>6C93MIzCLC>1kW^kSCf.#Ld>\'tMJ`A(W3v>AQ{KhXdQG-;eNM\|28^0pn6V8{gplvXb11-
2024-05-15 22:37:29 UTC	2678	IN	Data Raw: b8 b5 5e b9 59 b5 1d 35 ad 94 f1 1f 70 3d 29 c6 50 d7 36 21 f4 5e a5 d4 e6 32 63 eb 62 72 f8 1e 47 7a fa 32 77 6c bc b6 21 4a 12 e5 48 cf ad 66 a6 b7 12 8f 61 51 d3 36 2a aa 46 d6 e8 b6 84 04 cf 9c 8a a6 c8 97 4e c8 96 84 2b 77 ac fb df a8 a9 42 4e 2a 24 a9 24 62 95 72 f0 19 ae 5c 37 52 7a 4d 97 9d 36 48 e0 50 73 49 42 82 b3 c7 88 5d 95 b1 7a 7e c2 38 23 12 38 19 f4 15 5c 23 74 bb 05 36 46 68 ad 0d e1 58 a3 be 58 97 0a 40 ab a8 31 44 42 87 2a 99 f3 82 9a 97 52 0d 9e e7 ed 56 0d 6d 21 0c c4 f0 84 96 e4 c8 08 f4 34 e0 40 e1 40 e2 5c 28 aa fe a9 65 e6 92 7d 47 ad 1d 14 d5 b2 ad 68 30 3f e4 80 b6 98 5a 93 9f d6 8f 88 02 51 ef 90 3d b4 89 6b f4 95 48 18 ad 4c 39 42 16 69 25 57 be 02 3c ca 3a e5 03 64 e3 14 63 a4 12 b6 c2 73 36 40 bc 59 26 ab 5e d4 4b 52 92 dd Data Ascii: ^Y5p=)P6!^2cbrGz2wl!JHfaQ6FN+wBN$$br\7RzM6HPsIB]z~8#8\#t6FhXX@1DB*RVm!4@@\(e}Gh0?ZQ=kHL9Bi%W<:dcs6@Y&^KR
2024-05-15 22:37:29 UTC	16384	IN	Data Raw: f7 83 1b 75 3f 61 75 be db fa 7d 77 5e bc d4 84 68 c5 57 7b 7a 13 d8 52 80 a3 2e a5 4a d7 b5 18 62 59 27 bf b9 02 35 05 8e e6 c2 2a 8e e4 fd 05 45 36 44 78 cc 2f 3d be e6 ce c0 01 dc 93 b0 03 92 95 91 49 3b 83 47 7e 02 d7 72 dd 5f 75 76 ac 91 e9 96 af 18 4c 18 72 9f 3c 40 f6 93 69 e3 cd 61 f9 41 e1 17 e6 3c 9a 02 1c 5c 9c 93 23 e4 1b 9b 6b b7 e0 77 8c 3b b0 ff 00 e6 78 dc 9f e1 b2 e8 a3 e5 97 1b 11 8d 88 53 81 fc 9e 47 ea 58 d3 c7 fa dd f2 16 ac fa 0f 81 37 da 93 09 75 0d 43 4e d3 24 8c 28 5b 77 63 2b 22 8c ed 07 b6 79 24 9e 79 24 9f 5a b9 63 61 8a 32 18 f2 e7 11 cb 40 1f 95 f1 e8 36 d8 00 10 39 0d c9 c9 7e ad 04 b6 f9 3d ef 73 c6 d6 7b 80 76 00 0e cb 58 78 a7 fe cf 9d 5b ad e4 b9 b8 5f 14 cc 93 3b 99 52 ce f3 4d fe c3 3f bb ca 49 9e 3b 67 06 ab 01 f0 bc Data Ascii: u?au}w^hW{zR.JbY'5*E6Dx/=I;G~r_uvLr<@iaA<\#kw;xSGX7uCN$([wc+"y$y$Zca2@69~=s{vXx[_;RM?I;g
2024-05-15 22:37:29 UTC	16384	IN	Data Raw: 97 38 28 11 ac ff 00 69 f9 bd 6a b7 2b 30 39 e5 1c c8 e8 2b 0e 93 ac ee 50 37 54 50 64 f9 92 c9 1d ab ef 4c 42 75 0c b8 19 55 1e 94 64 d9 cd 60 a2 51 98 f8 c5 ac 33 57 09 ef d8 ed 25 ec 85 c6 c5 cf 03 1d eb 0b d4 72 7c 57 eb 6a b0 c6 84 18 1e 0f aa ba c7 79 a7 e9 ba 34 08 a1 56 54 39 27 d6 aa b1 9a 75 48 5f f8 95 86 5c 8d 74 8c 7b 3d 11 f6 1a 4f ed 5e 9a be be 64 57 75 1f 26 3b e3 35 0c 6f 32 e6 b2 26 f1 49 b9 35 06 2c 12 1e 5c e1 7f 4b 41 5d 69 21 ed 2d 5e de 32 e1 17 32 8a 7c 16 1b 24 4f f8 89 d9 17 90 e6 b3 38 c9 ff 00 b6 6b f3 51 6d 2a 47 d5 d6 11 a8 04 48 02 05 f5 c9 35 3c b6 cc 1d 67 f0 94 2e 3b c6 47 50 7c 2d 1c d5 2e 96 f1 9b c2 2b 19 3c 3f d2 2e 16 35 37 d0 da 27 3f c4 d5 f7 b3 0f 6e 47 4b 7b 25 e1 c6 c2 c2 f5 d6 f8 1d 59 f2 c5 c7 07 ec b8 73 5c Data Ascii: 8(ij+09+P7TPdLBuUd`Q3W%r\|Wjy4VT9'uH_\t{=O^dWu&;5o2&I5,\KA]i!-^22\|$O8kQm*GH5<g.;GP\|-.+<?.57'?nGK{%Ys\
2024-05-15 22:37:29 UTC	1832	IN	Data Raw: 4b 3a bd a4 64 98 e3 00 7f 78 ff 00 e7 f3 a6 86 93 b7 25 26 8d b7 4d bf 51 47 e5 e1 62 40 bd ce 78 1f 73 4b a4 82 77 dd 2e 81 76 78 5e 5e a0 66 8d 44 70 02 0f 67 61 80 dc fa 0f 6a 46 b0 ee 49 fd ff 00 74 e2 c1 7b fe 5f be 13 c7 56 b8 28 09 3b 7d 17 68 1c 7b e3 de 91 a1 bb a6 96 8d 54 02 c4 f7 d2 c6 80 bb aa 93 d9 01 c9 3f af fa 9a 56 80 41 48 6a e8 0f df ef f3 41 36 aa 25 91 44 d2 79 a4 76 8e 3c e3 1e c3 fe f5 c5 ba 46 ca 40 de e3 94 fa 6a 30 43 14 92 3c ab bc 8c 00 80 e4 52 06 ee 2d 21 69 aa 1d d0 57 5a 9c 6e a9 0d bc 4e 58 f1 b8 fe 66 3f d2 9e 01 a2 e3 dd 26 92 5d 49 09 3d bc 51 91 3d c1 29 91 bc a3 64 31 f4 51 ee 07 f3 a5 f0 e4 ba 6b 6c ff 00 2f fa ae 2e 1d cf fd 51 d6 fa bd a9 59 1e 38 19 50 0c 02 79 24 fb ff 00 e7 b5 37 c1 9b 87 0a 09 b6 da b0 eb 49 Data Ascii: K:dx%&MQGb@xsKw.vx^^fDpgajFIt{_V(;}h{T?VAHjA6%Dyv<F@j0C<R-!iWZnNXf?&]I=Q=)d1Qkl/.QY8Py$7I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50314	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:32 UTC	654	OUT	GET /steam/apps/281990/ss_692532123e560e6b866baee59b1e310a291a110d.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:32 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Wed, 17 Jun 2020 08:52:18 GMT ETag: "5ee9d9c2-9b74" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 39796 Accept-Ranges: bytes Cache-Control: public, max-age=273905 Expires: Sun, 19 May 2024 02:42:37 GMT Date: Wed, 15 May 2024 22:37:32 GMT Connection: close
2024-05-15 22:37:32 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 09 ff c4 00 42 10 00 01 04 01 03 02 05 02 04 03 06 04 05 04 03 00 01 00 02 03 11 04 12 21 31 05 41 06 13 22 51 61 71 81 07 14 32 91 42 a1 b1 15 Data Ascii: JFIF&&CCQXB!1A"Qaq2B
2024-05-15 22:37:32 UTC	16384	IN	Data Raw: 63 69 a5 7e ff 00 dc 5e 78 49 b6 e3 d3 55 f9 0d c8 e9 21 bd 3f c9 c1 06 48 dd a5 d3 4d 30 04 07 37 9d f9 03 e3 e1 17 a8 94 b7 4f f4 fa 91 e0 ff 00 c7 b3 1f 9e db fa 1a 2f 0b e6 48 ee aa c7 b5 a4 49 21 1a 62 d8 11 46 be d7 6b 0e 45 b5 5f b1 bd ed 94 25 bb 8b 3d 57 2a 3c 6e 91 e0 89 9b 24 4d 66 44 f2 13 a8 ee 68 6d cf ee 50 c7 f0 fe 67 9a 8c e7 9b 5c a4 a5 f2 c5 1e 0d d5 e0 f3 27 90 8e 2c d2 ea e2 e1 23 0e bb 22 72 74 64 3a 86 3e ad 57 62 97 4e 0c f2 5a 89 19 7e a3 10 07 6f d9 6e 81 c0 cb 22 87 28 91 f0 b5 44 e3 e5 65 54 e3 7b a5 a6 27 32 6c 8a 61 d4 0d a6 a6 65 90 07 c4 1b 7b 26 27 66 76 0d ac 6d ee 68 7b 9e c8 ad 8a 60 27 df 84 71 15 21 8e b2 cd b7 44 aa c5 b2 2b f5 37 9e 13 95 09 62 68 70 0f 3b 10 d3 44 87 0f f6 51 00 36 c2 80 31 ae 22 a9 58 2c 8d 23 2d Data Ascii: ci~^xIU!?HM07O/HI!bFkE_%=W*<n$MfDhmPg\',#"rtd:>WbNZ~on"(DeT{'2lae{&'fvmh{`'q!D+7bhp;DQ61"X,#-
2024-05-15 22:37:32 UTC	3297	IN	Data Raw: 82 3f 4b be a1 32 78 54 d7 06 5d 3f c4 b2 e9 a6 a3 3e 51 f2 f7 8e ba 6c de 1f cf 9b 0e 60 1b 2c 67 71 76 bc ce a3 1b 84 9a 67 d4 f4 7a 98 e6 c6 a7 0e 99 e7 d9 f9 ad 68 ad 54 e2 7b 2e 64 97 27 6a 33 49 15 99 19 01 d1 58 e3 e7 ba ce fb 35 6e b4 53 67 48 1d 19 6b cd 0e df 08 0a 6f 8e 4a 69 23 2d 04 f6 1d d5 8b 23 02 0a 10 86 1a 04 aa 0e c2 61 e4 3f 0f 21 b3 c6 ea 2d 75 ff 00 9a 12 fb 34 df 89 2d 6c d3 37 21 bc 4a d0 ff 00 dc 5a 29 83 07 4c c1 b8 16 12 0f 29 26 a1 a1 d4 a8 bb 2c b1 66 d6 d1 7c 3b 63 f5 50 a2 4b aa 56 16 d5 11 b7 df df ee a8 ab 20 c6 68 ba 3e dc 85 02 b2 5e 34 a6 87 c7 2a 10 1f 55 63 9d 0e c7 d2 d2 5c 07 d7 63 fe 48 5a 2d 49 f4 54 76 3b aa e8 21 01 a5 4c a5 c0 72 f1 42 90 50 76 32 f5 1b fd d5 95 61 75 8d 28 28 bb 1c c8 8b b7 ad b9 54 dd 16 1d Data Ascii: ?K2xT]?>Ql`,gqvgzhT{.d'j3IX5nSgHkoJi#-#a?!-u4-l7!JZ)L)&,f\|;cPKV h>^4*Uc\cHZ-ITv;!LrBPv2au((T
2024-05-15 22:37:32 UTC	4072	IN	Data Raw: db 09 c4 b4 7e df 74 16 31 40 3c ad ef d8 ee 89 30 1c 00 9b a2 d3 ca 34 c4 b8 8f 86 62 36 3f 42 8e c1 a2 5b 24 d8 d9 16 3b 1e e1 4b 2f 68 39 2c 0f 8f 7f 64 4a 40 b8 80 32 16 9a 28 b7 09 71 38 4e 42 96 4a 2c fa 4f 54 f2 4e 97 0b 24 f2 4f 6f 6a 52 c2 49 51 27 2c ba 39 5c 5a 6d ae 16 d3 ee 10 d8 ca b2 10 98 b8 12 7b ff 00 24 36 5a 44 69 65 2c 05 0d 87 d0 38 9e 65 b0 7f 9a 06 1a 1a f8 89 b4 0d 8d 48 06 9a 24 21 b2 51 cf 61 8d a7 80 15 17 b4 8c 1a e7 bb 61 b2 bb 2e 89 4c 81 c5 ed 63 41 71 26 80 1d ca 1b 2e 89 bd 4b 25 bd 2f 03 f2 ac 23 59 f5 48 e1 dc ff 00 d1 17 48 1a b6 65 48 32 17 3a c5 fb 13 b9 fa 25 36 3d 20 d1 62 97 10 5c 3f fc 7b a9 44 26 b1 ba 4e d4 5c 3f 60 a1 56 2c 93 08 1b 67 77 2b 2a c8 60 99 5d ad f7 a4 7b f7 54 40 d1 34 c8 eb 3b 34 28 5d 92 8b bc Data Ascii: ~t1@<04b6?B[$;K/h9,dJ@2(q8NBJ,OTN$OojRIQ',9\Zm{$6ZDie,8eH$!Qaa.LcAq&.K%/#YHHeH2:%6= b\?{D&N\?`V,gw+*`]{T@4;4(]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50316	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:32 UTC	654	OUT	GET /steam/apps/281990/ss_7f4d7cc160c43e77aa523e910b365e0ca436e6bb.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:32 UTC	357	IN	HTTP/1.1 200 OK Last-Modified: Wed, 17 Jun 2020 08:52:18 GMT ETag: "5ee9d9c2-c429" Server: nginx/1.10.3 (Ubuntu) Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 50217 Accept-Ranges: bytes Cache-Control: public, max-age=382314 Expires: Mon, 20 May 2024 08:49:26 GMT Date: Wed, 15 May 2024 22:37:32 GMT Connection: close
2024-05-15 22:37:32 UTC	16027	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 4c 00 4c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 52 02 1c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 59 10 00 02 01 03 02 03 05 03 06 08 08 0a 08 05 05 01 01 02 03 00 04 11 05 21 06 12 31 07 13 41 51 61 14 22 71 08 15 32 81 91 d1 16 Data Ascii: JFIFLLCCRY!1AQa"q2
2024-05-15 22:37:32 UTC	16384	IN	Data Raw: c7 24 a8 99 27 95 5c 81 93 d7 c7 d0 54 38 46 4e da 3a 21 d4 75 18 a3 a2 13 69 7a 33 43 a4 70 f7 13 71 75 85 e5 f6 9d 6f 79 a8 c0 92 77 33 2c 53 0e 62 cc 14 91 c9 cc 32 30 57 27 18 1b 54 2c 38 e3 55 15 b1 d1 3e b7 ad cd a9 cb 2b 77 ce fd fd 0a fd 5e 1d 63 41 9d 6d 75 34 bf b1 99 e3 12 08 6e 1d 83 15 24 80 71 cd e6 08 c7 81 07 ca 9f 85 8f f0 a1 3e b7 ac 4a 9e 59 7e ac ac 9e e8 dd 38 69 9e 59 98 00 a1 a4 62 c4 01 d0 6e 6a e3 18 c1 54 55 1c d9 73 66 ce d4 b2 c9 c9 f1 bb b1 bc c7 f9 a7 fe 7e ba a3 1d c7 6c 39 4e b5 65 ca 08 fc 5b e7 3f 5d 44 b8 3a ba 6f 7b 7f e6 c6 98 a8 c8 38 ac d3 68 f4 5c 6d 84 ca 07 86 6b 44 c8 71 03 8e 55 04 0a 2e c1 c4 6c f5 a9 61 b8 08 ce 69 a2 5a 1b 61 81 8f 13 e5 56 ac 86 34 40 02 ab 82 1a 42 79 7c 68 b2 34 b4 29 4e 36 c6 f4 c4 28 9e Data Ascii: $'\T8FN:!uiz3Cpquoyw3,Sb20W'T,8U>+w^cAmu4n$q>JY~8iYbnjTUsf~l9Ne[?]D:o{8h\mkDqU.laiZaV4@By\|h4)N6(
2024-05-15 22:37:32 UTC	1518	IN	Data Raw: 7e d2 f6 b8 f8 9e f7 b7 1c 7e cb f6 79 3c 29 f2 b8 e2 8e 01 e3 1e d1 ad 75 3e 04 d4 75 1d 46 36 b3 58 6f e4 bf 84 26 66 46 20 32 b6 01 62 47 5c 8f 01 8a e8 e9 b0 bc 10 70 f2 bd 8f 3f aa cb 1c f3 53 5c f9 9c e7 4f ff 00 b5 2e ff 00 d2 13 fd 86 ae af 23 c8 5e e2 f8 1d 36 29 00 81 15 79 82 15 53 82 7d 2a 51 da b8 41 f2 f3 02 40 ce 06 4d 2a 2a c1 71 0a 45 cb cb 2a ca 19 41 c8 18 c1 f2 22 97 c4 64 ee 1c e1 e9 38 86 e6 7b 78 52 52 d1 44 66 2c 8b cc 15 57 a9 61 58 e4 c8 b1 a4 d8 e3 0d 6d d0 2e 34 fd 3a 5d 2b da 23 ba 29 75 cc 71 6e 08 28 ab cd 81 b9 f7 b3 d5 ba 63 15 4a 52 d5 4f 81 34 a8 9f ad 5a 37 0e dc 58 df e9 d7 56 12 18 63 55 13 58 f3 0e 76 23 04 e1 bc 71 d4 8e 9f 1e 91 07 e2 27 19 a7 f9 95 2f 61 a7 16 22 e3 5e 97 57 d1 a7 8d ed 9a 62 be f4 82 25 62 22 df Data Ascii: ~~y<)u>uF6Xo&fF 2bG\p?S\O.#^6)yS}QA@MqEA"d8{xRRDf,WaXm.4:]+#)uqn(cJRO4Z7XVcUXv#q'/a"^Wb%b"
2024-05-15 22:37:32 UTC	16288	IN	Data Raw: 4e d0 6c 25 d5 ef 5f 4f d3 22 92 31 cc 91 17 33 39 62 02 67 a2 8c e3 2c 73 8c f4 a3 4b 94 59 c7 d3 b4 a2 ad 9e 82 93 5c b0 ec 81 2f b8 5a e3 87 ef 6d f4 c9 16 4b 49 27 7c 95 75 fc 97 50 40 e6 00 80 32 09 af 0d f4 b2 9c dc 96 44 da f2 3d c7 9a 2a 0a 3a 28 e2 7a af 14 71 16 81 6d 2a 68 3a 9c b1 da 16 69 3d 92 43 ce 98 3b 90 01 e8 73 d3 15 e8 78 11 7b 4c e6 59 65 1d e2 61 ec b4 d9 b8 d3 d8 62 b8 bd 8e da 4b 89 03 49 77 71 b2 29 25 b7 62 3a 0c 9e bd 05 76 42 29 3d 2b 63 cc 8b 72 cb 26 ce f9 a1 7c 9e a7 ec cb 56 f9 b3 8c 34 6b d8 96 7b 43 79 05 fd a1 5c 8c 10 39 9b 27 a6 48 18 1b ef 9d c6 f5 d9 1c 1a db 83 5f 99 a4 b2 a8 24 ce 63 c6 3c 2d 25 a6 af 25 97 b6 3b da ca c5 41 ce 19 72 36 62 3d 36 ff 00 93 58 cb 0e 89 51 aa 9e a8 da 30 f1 e8 37 5a 47 ce 16 52 27 79 Data Ascii: Nl%_O"139bg,sKY\/ZmKI'\|uP@2D=:(zqmh:i=C;sx{LYeabKIwq)%b:vB)=+cr&\|V4k{Cy\9'H_$c<-%%;Ar6b=6XQ07ZGR'y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50315	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:32 UTC	631	OUT	GET /steam/apps/281990/capsule_616x353.jpg?t=1715759591 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:32 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 45842 Last-Modified: Thu, 01 Sep 2022 08:15:32 GMT ETag: "63106a24-b312" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=551702 Expires: Wed, 22 May 2024 07:52:34 GMT Date: Wed, 15 May 2024 22:37:32 GMT Connection: close
2024-05-15 22:37:32 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 02 03 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 00 05 06 07 08 09 ff c4 00 65 10 00 02 01 02 04 03 05 04 06 04 07 06 10 0a 0b 01 01 02 03 00 11 04 12 21 31 05 41 51 06 07 13 22 61 08 32 71 81 09 14 42 91 a1 Data Ascii: JFIFCCahe!1AQ"a2qB
2024-05-15 22:37:32 UTC	16384	IN	Data Raw: 29 f6 ed 58 67 67 15 b2 8b 11 06 21 32 c6 de 56 fb 23 7b d4 ea cf 2d 77 2f 83 8e 1a 45 4b 0b 03 6d 87 4a 9d c5 4c 69 98 4c 10 d5 c8 24 8d 2c 2a 32 ad ba 78 fb 5b 6c 20 c9 98 a9 cc 76 15 96 db 76 9b 0e 01 99 34 52 3a d4 aa 62 98 f8 78 77 cc 05 89 e5 d6 b5 9c 32 d6 f9 80 c4 e3 30 7c 28 33 62 a5 02 4e 51 26 af f7 55 e3 8d cb c3 3c f3 c7 a7 f9 57 14 e3 3d a6 c4 f1 28 db 0e 83 ea d8 4d fc 35 3a bf f4 8f ee ae ac 30 98 f2 f3 ba bd 7c ba 93 5e 23 42 cd 75 3c c0 e9 5a c7 22 b3 6a 0d 8f 9a d4 11 79 ad 6b 83 f0 a0 bc 8e fa dc 5f 5e 54 e5 2d 26 d7 21 af fd 54 c2 42 86 7b 81 cf 4a 64 36 88 83 7d 96 88 46 21 cc e1 56 db 6c 74 aa 24 dc 82 34 a6 49 0a 49 b1 d4 d3 24 2d 8b 15 23 30 f5 a6 5b 4e 20 cb 8a 98 c9 2c b2 62 24 6d e4 91 b3 31 b7 53 40 db 16 05 8c 1c d7 21 b4 36 Data Ascii: )Xgg!2V#{-w/EKmJLiL$,*2x[l vv4R:bxw20\|(3bNQ&U<W=(M5:0\|^#Bu<Z"jyk_^T-&!TB{Jd6}F!Vlt$4II$-#0[N ,b$m1S@!6
2024-05-15 22:37:32 UTC	3247	IN	Data Raw: e2 62 65 69 a6 91 a5 95 fd e7 63 a9 3e b5 5b 2d 22 28 a2 30 ca 4c 99 24 5b 64 04 13 e2 1b ed e9 6a 71 3a 0f 84 51 f4 70 fc c1 53 4c bc 00 42 65 93 c3 be a4 da e3 5b 9a 06 8b 92 12 59 bc 40 43 03 ad f7 a7 12 43 25 81 65 cb ae 9a fe 74 8e 42 de 36 65 cc 00 55 3e 5b 8a 36 24 40 82 f1 e8 09 d6 d7 a2 01 88 01 51 65 00 03 e5 3c cd 38 54 e1 73 95 1a 43 e4 f7 3f 9a 29 a4 32 c5 65 6d 01 b1 e5 ad cd 34 ab 14 21 d8 95 59 2e a5 40 6e 5e a2 80 54 50 14 52 40 b0 da e6 9e 82 cf 80 ae a0 92 58 a9 f3 0e 44 55 23 c2 c0 00 4e 32 ad 83 6c bf b2 3a 55 44 de 4e 7c ec 9e 11 91 d6 12 d9 bc 3b e9 7e b5 48 f0 c5 16 26 e4 b2 fe c9 aa 88 39 b0 b1 c8 72 db 35 85 f6 e5 4f 49 de 92 b8 71 33 47 1c a7 3a 44 3c 80 ea 51 6f ad a8 90 ed e0 df ab 42 57 12 44 aa b1 c6 6c 91 c9 fc a3 fc a9 cf Data Ascii: beic>[-"(0L$[djq:QpSLBe[Y@CC%etB6eU>[6$@Qe<8TsC?)2em4!Y.@n^TPR@XDU#N2l:UDN\|;~H&9r5OIq3G:D<QoBWDl
2024-05-15 22:37:32 UTC	10168	IN	Data Raw: 02 ec 3a 5f ad 03 48 36 04 10 c4 dc 6b 71 b1 a0 16 4a b9 23 6b d2 05 3b 2a 0c a2 d7 be ba 51 bd 1c 81 77 bd b5 b0 a4 ad 14 d9 56 e0 35 fa 72 a9 32 33 64 25 89 bf 20 69 2b 41 8c 84 be 50 6e 4d e8 87 a3 8f eb 10 28 40 18 1b e6 eb 41 47 a3 7c 22 a2 dc ab f3 5d ed fb 77 6e 8b 6d 2a f1 ba 63 94 f5 52 c4 08 64 27 92 93 7a e9 c7 2d b8 b3 c7 52 ba ba 56 05 9c df 52 4f e7 5f 4b 3c 3e 37 2f 6a f7 37 d7 5a a4 c1 47 6b d0 7a 58 51 96 c6 da 52 26 cf 0b 20 65 ac b4 d2 1b 63 1b 07 5d c5 2f 3c 0f 1c c3 27 c4 89 80 ca 0a b1 22 f5 18 e3 71 f2 ac b2 99 78 72 4c 34 43 c2 17 e9 bd 70 5b cb d1 c3 1e 07 24 43 cc 3d eb f4 e5 44 a7 71 51 93 0c 6e 46 f5 b4 c9 cd 70 56 6c 2b 58 d6 b3 28 c6 e1 c1 06 32 01 ad 25 61 71 d1 45 77 ad 23 2b 00 52 ae 33 d1 4e 87 5a a4 58 17 f0 fc 14 51 19 Data Ascii: :_H6kqJ#k;QwV5r23d% i+APnM(@AG\|"]wnmcRd'z-RVRO_K<>7/j7ZGkzXQR& ec]/<'"qxrL4Cp[$C=DqQnFpVl+X(2%aqEw#+R3NZXQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50317	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:33 UTC	654	OUT	GET /steam/apps/281990/ss_f844372cc220e3858aa17205e9fec0ae79a4e665.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:33 UTC	357	IN	HTTP/1.1 200 OK Last-Modified: Wed, 17 Jun 2020 08:50:14 GMT ETag: "5ee9d946-ebce" Server: nginx/1.10.3 (Ubuntu) Content-Type: image/jpeg Content-Length: 60366 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=157397 Expires: Fri, 17 May 2024 18:20:50 GMT Date: Wed, 15 May 2024 22:37:33 GMT Connection: close
2024-05-15 22:37:33 UTC	16027	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 02 05 00 01 06 07 08 ff c4 00 57 10 00 02 01 03 02 03 04 07 05 04 06 05 0a 03 06 07 01 02 03 00 04 11 05 21 06 12 31 13 41 51 61 07 14 22 32 71 81 91 15 a1 b1 c1 d1 Data Ascii: JFIFCCQXW!1AQa"2q
2024-05-15 22:37:33 UTC	16384	IN	Data Raw: 27 2a e8 5a ea bc 19 79 64 d6 8b 77 66 90 f6 b0 24 f1 85 65 21 d1 86 41 c8 3e 15 19 9a 27 2a 11 97 85 a3 ec cf 20 28 fe 4e 31 f8 d5 a3 52 5c ca b8 21 8d 0f 83 ae f5 6b d8 6d 51 a0 0f 18 79 83 4b 3a 46 39 14 17 61 92 7a e0 12 07 8e c3 ad 6c a6 99 93 8b 2b 67 b1 30 b3 30 91 04 8e 4b 34 a3 24 ef fc 20 0d be 3d 7e 15 6c c8 8b 32 7a 16 89 6d 7b 74 56 43 70 ea 3a 98 82 a7 de 73 f8 55 25 38 c7 56 32 54 96 90 b5 fb ff 00 63 bd b5 e1 bb 08 e3 54 8b 4b 8d 40 19 e7 b8 99 9c 9c 0c f7 72 8a e5 e2 a6 f4 5f 13 57 87 9d bd aa 8f c9 25 f5 bb 3b cf 47 5c 77 a8 70 24 3a ad 85 a4 56 50 58 ea d6 c6 c6 f2 25 b7 89 8b c4 c4 1c 6e 39 b2 08 53 b1 cd 61 52 8a af 28 ba 89 68 5e 2e 54 29 c9 51 93 bb ea df fb 2b ea b6 14 79 60 d4 64 c4 18 b6 9c 9d ed 9d c1 c9 f0 56 fc 9b 1f 13 54 95 Data Ascii: 'Zydwf$e!A>' (N1R\!kmQyK:F9azl+g00K4$ =~l2zm{tVCp:sU%8V2TcTK@r_W%;G\wp$:VPX%n9SaR(h^.T)Q+y`dVT
2024-05-15 22:37:33 UTC	3523	IN	Data Raw: 38 b5 87 c3 ce 9c 15 ea 39 3b 69 a2 56 df 5f 92 f8 9c 6f 15 e9 43 85 af 75 0b 7b dd 2a 5b c9 65 74 b8 b6 bf 12 8e 6e 46 e6 20 c8 aa 70 a5 ba 91 dc 40 ee 3b fd 3a 8c f3 43 82 d2 82 d1 a3 92 3c 08 d1 a9 1a e9 b9 bd 9f 4f 1d 49 70 8f 0a 9e 2c 9a e8 76 6f 12 86 68 20 ec dc 12 f3 63 99 43 03 80 13 7c 13 9c f9 57 54 a5 18 fb cc e1 85 19 54 57 4c aa d4 24 4b 11 0d 9c 9a 3c 96 b7 b1 09 62 9e 6e df b4 8e 52 19 b7 04 64 13 b6 32 36 c0 07 e3 8d 38 d5 55 24 e4 ef 17 b2 e8 75 56 f5 67 42 9c 61 16 aa 2d df 27 bf 7f 02 de cf 82 25 be e1 29 b5 68 ad 4b 5d 47 18 bb 36 fd aa 88 fd 5f bc f3 1c 1e 70 7f 74 03 9c e0 6f 5a 39 47 dd be a7 3a a3 2b 29 37 a1 c8 f1 8d cd b5 c7 6e b6 ba 5c 9a 5c 62 75 22 19 1f 98 ae cf 90 0e fb 78 6f dd 59 d0 8d 58 d3 b5 67 76 76 d6 78 79 62 1c b0 Data Ascii: 89;iV_oCu{*[etnF p@;:C<OIp,voh cC\|WTTWL$K<bnRd268U$uVgBa-'%)hK]G6_ptoZ9G:+)7n\\bu"xoYXgvvxyb
2024-05-15 22:37:33 UTC	16384	IN	Data Raw: b5 8b e8 91 23 ed c9 8d 07 2a a9 c6 00 c9 3f 3d c9 eb 51 64 2e c6 60 d5 62 90 7e de 3e 4d f1 cd 11 ef fe 5f d3 15 57 12 d9 86 04 91 b9 fd 81 12 0f ee 7b c3 e5 d6 ab 95 93 74 4a 0b 86 2d 92 43 01 dc 7a d4 65 b9 37 1d 86 e5 63 98 32 c8 d0 38 dc 10 7a 7d 29 95 ad 51 17 4f 46 75 7a 5f 1e dd da 85 86 f8 2e a1 6a 76 c9 c0 70 3e 3d ff 00 3a ec a7 8b 9c 56 5a ab 32 39 2a 61 21 2d 61 a3 3a dd 3f 49 83 88 ed 9a 7d 1e 55 7c 0f 6a 16 38 2a 7c 37 e8 6b a7 85 0a cb 3d 17 e4 79 f3 cd 49 da a2 2b e6 86 7b 12 79 94 a3 0e aa c2 b8 f5 5a 32 15 99 ad 39 66 d4 2f 16 15 49 65 18 32 48 b0 80 58 46 a3 99 d8 7c 14 13 bf 85 4a bb 39 b1 35 61 87 a5 2a b3 76 4b eb c9 79 bd 09 ce 74 e7 73 d9 0b c8 65 ba 9b 3a 62 cc 53 99 a3 59 0a 37 68 00 c8 7c f2 e0 ae 06 73 e3 b7 5d 4c 3c a1 17 52 Data Ascii: #?=Qd.`b~>M_W{tJ-Cze7c28z})QOFuz_.jvp>=:VZ29a!-a:?I}U\|j8\|7k=yI+{yZ29f/Ie2HXF\|J95avKytse:bSY7h\|s]L<R
2024-05-15 22:37:33 UTC	8048	IN	Data Raw: 5d 54 23 f3 3c ac 54 b3 4d 45 72 38 ad 46 f9 af ee e7 b8 73 ed cc e5 cf ce bd 3b 16 4a c8 4f b5 00 f2 92 4f c2 85 87 2d 80 62 01 db 34 2a 59 47 62 d2 9f 64 66 84 0a 5e 5a b4 0d 93 91 50 48 93 ce ea 31 cd b5 49 22 de b0 dc dd 68 48 cc 53 93 8c 6e 6a 48 63 c9 21 48 fa 90 2a 4a 83 f5 b3 b8 ce 45 00 b4 d2 10 db 54 32 e9 12 b6 95 4a 4a 65 e5 03 03 94 be 71 9f 0d bf 1e ea a9 56 9f 21 79 d5 1a 43 c8 49 5c ed 9f 0a 92 51 07 4c 7b 4a 68 00 b5 ce 09 04 1a 82 49 c6 c6 40 40 ee df 35 20 f2 69 a1 fd a1 f8 9a f3 ce a3 70 d8 bc d2 2c 6b ca 19 8e 01 76 0a 3e 64 ec 28 0d 2d b1 19 c8 a0 37 c8 77 01 7a 8d f6 a0 35 d8 ed 40 68 c1 40 41 e0 c0 24 77 75 a0 00 63 39 de a0 07 79 7b 5b 52 06 39 e3 1c ac 4a 82 4a 6d be 7a ed 80 3e 1f 3a 12 57 b1 20 9c 6e 33 d6 a2 e4 d8 1b 49 83 d7 Data Ascii: ]T#<TMEr8Fs;JOO-b4YGbdf^ZPH1I"hHSnjHc!HJET2JJeqV!yCI\QL{JhI@@5 ip,kv>d(-7wz5@h@A$wuc9y{[R9JJmz>:W n3I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50318	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:33 UTC	654	OUT	GET /steam/apps/281990/ss_034b0d55a5c370bec4709f09d0914f9d131b7788.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:33 UTC	357	IN	HTTP/1.1 200 OK Last-Modified: Wed, 17 Jun 2020 08:52:18 GMT ETag: "5ee9d9c2-fea1" Server: nginx/1.10.3 (Ubuntu) Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 65185 Accept-Ranges: bytes Cache-Control: public, max-age=270554 Expires: Sun, 19 May 2024 01:46:47 GMT Date: Wed, 15 May 2024 22:37:33 GMT Connection: close
2024-05-15 22:37:33 UTC	16027	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 02 07 08 01 00 09 ff c4 00 51 10 00 02 01 03 03 02 04 03 04 07 05 05 06 03 05 09 01 02 03 00 04 11 05 12 21 06 31 13 41 51 61 07 22 71 14 32 81 91 08 15 23 42 Data Ascii: JFIFCCQXQ!1AQa"q2#B
2024-05-15 22:37:33 UTC	16384	IN	Data Raw: b2 43 6a 50 32 7f 68 77 c8 1e 67 ca b2 cb 4d 24 ad 23 5c 75 49 b6 9b 1a db 7c 2a 94 b1 29 79 94 03 73 17 80 90 40 f3 18 3d 87 af 6a 8f 4f 7e 4b 8e 6a 77 45 cf a5 7e 13 e9 2f ab 7d b2 fe e1 17 4c b5 92 26 9a c0 33 2d c4 f1 96 01 84 67 b6 71 ce 4e 3b d6 98 69 f9 bf 06 6c b9 be 5a 8f 6c 79 d5 dd 3f d2 1a 0e 9f 72 f6 7a 5e c6 99 9c 5b 0b 89 99 a7 0b 9e 30 7b 02 01 19 38 e4 d3 72 c3 14 61 ca 07 0c b2 46 4a 5b 8a ef 4f 75 04 56 17 16 b0 c3 a6 da a4 01 86 f6 98 17 7e fc 9d dd c7 e5 58 f0 ed c6 f8 46 ed 46 79 e7 4b 77 49 70 91 be e5 e9 dd 23 51 d3 ef b5 28 6e 6d ed a4 58 a3 92 08 14 b7 ed 95 b0 32 99 e7 dc 83 eb 5d 19 2f cc e4 2c 8d 34 a8 d2 9a a6 9b 75 a7 ea d7 6b 2b 3b bb 36 7c 42 0a ee 07 cf e9 5c cc 90 b7 52 3a 98 73 cf 0f 38 dd 3f b1 ed ae 96 24 4c 9f bd 9a Data Ascii: CjP2hwgM$#\uI\|*)ys@=jO~KjwE~/}L&3-gqN;ilZly?rz^[0{8raFJ[OuV~XFFyKwIp#Q(nmX2]/,4uk+;6\|B\R:s8?$L
2024-05-15 22:37:33 UTC	2246	IN	Data Raw: 47 13 a6 86 16 ba 2d dd d4 5b ed 24 b6 8e 34 62 0b c8 5b c4 6f 4f 97 1c 0f a7 af 73 43 3d 54 64 aa 8c 99 35 70 c7 2a 92 63 cd 13 a8 f5 4d 3f 4a d4 2d e2 d4 5e 18 88 5f 10 88 c8 59 3d 17 bf 3e bc 8f 2a c9 37 19 35 6a ce 6e 7c 58 72 e4 8c e5 8d 37 e3 ab 5f 71 65 e6 a1 0d ca 28 55 92 6b cc 93 23 b9 1b 8f 6c 05 07 80 3b f3 c9 ad 71 9c 12 a4 8d d8 dc 20 ed f0 85 77 57 d2 cf b2 17 b6 91 73 c3 89 13 c4 52 3d b0 32 3f 0e 69 ab 9e 51 d2 8b 4d 5a 63 0e 9e e8 ab 3e a1 bc b8 49 75 8b 7d 1a ca 00 a5 a6 b9 89 db 2c 7f 74 6d e5 88 1c f9 63 cf 14 fc 50 8c db df 2d a6 7c f9 27 8d 2d 90 72 6f db fe cb 5c 5f 09 7a 64 30 0b d6 17 17 47 b9 6b 5d 21 ca e3 ea ce 2b 47 a7 a6 5d e5 fd 99 95 67 d6 49 5f a1 5f 8c 97 fc 22 79 be 18 74 d4 26 3f 03 aa a6 62 7b ad c6 9e e9 fc 41 3c 52 Data Ascii: G-[$4b[oOsC=Td5pcM?J-^_Y=>75jn\|Xr7_qe(Uk#l;q wWsR=2?iQMZc>Iu},tmcP-\|'-ro\_zd0Gk]!+G]gI__"yt&?b{A<R
2024-05-15 22:37:33 UTC	16384	IN	Data Raw: 43 59 fc 38 e8 c8 35 4d 76 ee de 58 d4 4a 56 68 18 ec dd 86 47 07 04 f9 7b 13 8e 45 2b 3b 6a 99 c9 d5 2a 92 65 77 e2 67 c3 b3 d3 ba f7 85 e0 15 fd 62 85 22 cf 73 2a 7c dd 87 6d cb 91 db b8 f7 a6 e1 9e e5 f8 0a c6 ed 51 ae 20 8c 86 d8 46 08 e0 d6 db b1 d7 c5 97 2e 9f d2 46 a4 f6 b0 da 41 3c d7 4d b8 c8 aa 37 67 d3 68 1c f6 19 a4 ca 7b 6d b7 c1 cd cf 9b d2 dd 2c 8d 28 f8 ff 00 b2 df af db 69 56 fa 84 23 47 69 64 b6 10 a3 30 b8 1f 32 c9 b0 6f 1e e0 36 71 47 a7 72 6b e6 33 7c 3e 59 e7 06 f5 09 5d be bd af 8f d8 33 44 b5 f1 66 4d fe 67 92 6b aa 9f 07 60 db dd 0f a7 4a 35 db 49 22 43 bc 3a b8 18 f3 07 34 f4 21 be 0f d0 be 9b 12 59 db 88 ae be 47 6c 6d 40 0e 31 8a e1 6a 2b 23 dd 03 a7 a6 92 c7 c4 f8 0f d5 26 91 23 26 33 82 06 77 79 7d 0d 23 14 55 f2 3b 3c df f6 Data Ascii: CY85MvXJVhG{E+;jewgb"s\|mQ F.FA<M7gh{m,(iV#Gid02o6qGrk3\|>Y]3DfMgk`J5I"C:4!YGlm@1j+#&#&3wy}#U;<
2024-05-15 22:37:33 UTC	14144	IN	Data Raw: 3e 22 ba 42 5c 3c f6 13 45 94 6d b8 1b 90 e4 fb 71 fd 7c ab 6e 0a df c9 9f 32 7b 38 3b c7 43 d0 ae 2f 74 09 ae 60 df e0 aa ed 3e 03 12 cc 47 25 97 cc ff 00 3e f5 a6 59 a3 19 24 fb 32 c7 14 a5 17 25 d1 b6 fa 4f a5 a0 b3 b3 b5 b8 1f f6 82 99 cb 02 47 3d bb fa 57 17 51 9d ca 4e 3e 0e ae 0c 34 94 bc 96 48 66 72 d8 2a 38 e0 e0 e4 56 26 91 b1 49 d8 16 b9 fe ff 00 a5 b2 45 19 9d 25 3b 4b 21 e5 46 70 5b 1e 78 a6 62 f9 27 6f 81 79 bf 99 0a 5c 9a 2f a8 ae 97 4e d4 a6 8d 8b c7 b1 f1 1b 46 dc 10 3c 89 3f e5 5e 93 1a dc 93 38 13 5b 5d 1b 83 a2 75 3b 4b 9d 16 d5 1e 54 69 65 40 d9 e4 2b 71 d8 67 d2 b8 7a 98 cb 7b 92 3b 1a 77 0d 9b 64 09 d4 dd 21 05 d6 e6 b4 18 97 07 82 fc 2b 79 1c 1e c7 f1 1e 54 dc 1a a9 2f a8 5e 6d 34 7f b4 d6 10 6a 7a 8e 93 ae ba 5a cc e2 21 3e 4c 37 Data Ascii: >"B\<Emq\|n2{8;C/t`>G%>Y$2%OG=WQN>4Hfr*8V&IE%;K!Fp[xb'oy\/NF<?^8[]u;KTie@+qgz{;wd!+yT/^m4jzZ!>L7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50319	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:33 UTC	423	OUT	GET /steam/apps/281990/ss_692532123e560e6b866baee59b1e310a291a110d.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:33 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Wed, 17 Jun 2020 08:52:18 GMT ETag: "5ee9d9c2-9b74" Server: nginx Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 39796 Accept-Ranges: bytes Cache-Control: public, max-age=273912 Expires: Sun, 19 May 2024 02:42:45 GMT Date: Wed, 15 May 2024 22:37:33 GMT Connection: close
2024-05-15 22:37:33 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 26 00 26 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 09 ff c4 00 42 10 00 01 04 01 03 02 05 02 04 03 06 04 05 04 03 00 01 00 02 03 11 04 12 21 31 05 41 06 13 22 51 61 71 81 07 14 32 91 42 a1 b1 15 Data Ascii: JFIF&&CCQXB!1A"Qaq2B
2024-05-15 22:37:33 UTC	16384	IN	Data Raw: 63 69 a5 7e ff 00 dc 5e 78 49 b6 e3 d3 55 f9 0d c8 e9 21 bd 3f c9 c1 06 48 dd a5 d3 4d 30 04 07 37 9d f9 03 e3 e1 17 a8 94 b7 4f f4 fa 91 e0 ff 00 c7 b3 1f 9e db fa 1a 2f 0b e6 48 ee aa c7 b5 a4 49 21 1a 62 d8 11 46 be d7 6b 0e 45 b5 5f b1 bd ed 94 25 bb 8b 3d 57 2a 3c 6e 91 e0 89 9b 24 4d 66 44 f2 13 a8 ee 68 6d cf ee 50 c7 f0 fe 67 9a 8c e7 9b 5c a4 a5 f2 c5 1e 0d d5 e0 f3 27 90 8e 2c d2 ea e2 e1 23 0e bb 22 72 74 64 3a 86 3e ad 57 62 97 4e 0c f2 5a 89 19 7e a3 10 07 6f d9 6e 81 c0 cb 22 87 28 91 f0 b5 44 e3 e5 65 54 e3 7b a5 a6 27 32 6c 8a 61 d4 0d a6 a6 65 90 07 c4 1b 7b 26 27 66 76 0d ac 6d ee 68 7b 9e c8 ad 8a 60 27 df 84 71 15 21 8e b2 cd b7 44 aa c5 b2 2b f5 37 9e 13 95 09 62 68 70 0f 3b 10 d3 44 87 0f f6 51 00 36 c2 80 31 ae 22 a9 58 2c 8d 23 2d Data Ascii: ci~^xIU!?HM07O/HI!bFkE_%=W*<n$MfDhmPg\',#"rtd:>WbNZ~on"(DeT{'2lae{&'fvmh{`'q!D+7bhp;DQ61"X,#-
2024-05-15 22:37:33 UTC	3297	IN	Data Raw: 82 3f 4b be a1 32 78 54 d7 06 5d 3f c4 b2 e9 a6 a3 3e 51 f2 f7 8e ba 6c de 1f cf 9b 0e 60 1b 2c 67 71 76 bc ce a3 1b 84 9a 67 d4 f4 7a 98 e6 c6 a7 0e 99 e7 d9 f9 ad 68 ad 54 e2 7b 2e 64 97 27 6a 33 49 15 99 19 01 d1 58 e3 e7 ba ce fb 35 6e b4 53 67 48 1d 19 6b cd 0e df 08 0a 6f 8e 4a 69 23 2d 04 f6 1d d5 8b 23 02 0a 10 86 1a 04 aa 0e c2 61 e4 3f 0f 21 b3 c6 ea 2d 75 ff 00 9a 12 fb 34 df 89 2d 6c d3 37 21 bc 4a d0 ff 00 dc 5a 29 83 07 4c c1 b8 16 12 0f 29 26 a1 a1 d4 a8 bb 2c b1 66 d6 d1 7c 3b 63 f5 50 a2 4b aa 56 16 d5 11 b7 df df ee a8 ab 20 c6 68 ba 3e dc 85 02 b2 5e 34 a6 87 c7 2a 10 1f 55 63 9d 0e c7 d2 d2 5c 07 d7 63 fe 48 5a 2d 49 f4 54 76 3b aa e8 21 01 a5 4c a5 c0 72 f1 42 90 50 76 32 f5 1b fd d5 95 61 75 8d 28 28 bb 1c c8 8b b7 ad b9 54 dd 16 1d Data Ascii: ?K2xT]?>Ql`,gqvgzhT{.d'j3IX5nSgHkoJi#-#a?!-u4-l7!JZ)L)&,f\|;cPKV h>^4*Uc\cHZ-ITv;!LrBPv2au((T
2024-05-15 22:37:33 UTC	4072	IN	Data Raw: db 09 c4 b4 7e df 74 16 31 40 3c ad ef d8 ee 89 30 1c 00 9b a2 d3 ca 34 c4 b8 8f 86 62 36 3f 42 8e c1 a2 5b 24 d8 d9 16 3b 1e e1 4b 2f 68 39 2c 0f 8f 7f 64 4a 40 b8 80 32 16 9a 28 b7 09 71 38 4e 42 96 4a 2c fa 4f 54 f2 4e 97 0b 24 f2 4f 6f 6a 52 c2 49 51 27 2c ba 39 5c 5a 6d ae 16 d3 ee 10 d8 ca b2 10 98 b8 12 7b ff 00 24 36 5a 44 69 65 2c 05 0d 87 d0 38 9e 65 b0 7f 9a 06 1a 1a f8 89 b4 0d 8d 48 06 9a 24 21 b2 51 cf 61 8d a7 80 15 17 b4 8c 1a e7 bb 61 b2 bb 2e 89 4c 81 c5 ed 63 41 71 26 80 1d ca 1b 2e 89 bd 4b 25 bd 2f 03 f2 ac 23 59 f5 48 e1 dc ff 00 d1 17 48 1a b6 65 48 32 17 3a c5 fb 13 b9 fa 25 36 3d 20 d1 62 97 10 5c 3f fc 7b a9 44 26 b1 ba 4e d4 5c 3f 60 a1 56 2c 93 08 1b 67 77 2b 2a c8 60 99 5d ad f7 a4 7b f7 54 40 d1 34 c8 eb 3b 34 28 5d 92 8b bc Data Ascii: ~t1@<04b6?B[$;K/h9,dJ@2(q8NBJ,OTN$OojRIQ',9\Zm{$6ZDie,8eH$!Qaa.LcAq&.K%/#YHHeH2:%6= b\?{D&N\?`V,gw+*`]{T@4;4(]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50320	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:33 UTC	400	OUT	GET /steam/apps/281990/capsule_616x353.jpg?t=1715759591 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:33 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 45842 Last-Modified: Thu, 01 Sep 2022 08:15:32 GMT ETag: "63106a24-b312" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=551649 Expires: Wed, 22 May 2024 07:51:42 GMT Date: Wed, 15 May 2024 22:37:33 GMT Connection: close
2024-05-15 22:37:33 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 02 03 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 00 05 06 07 08 09 ff c4 00 65 10 00 02 01 02 04 03 05 04 06 04 07 06 10 0a 0b 01 01 02 03 00 11 04 12 21 31 05 41 51 06 07 13 22 61 08 32 71 81 09 14 42 91 a1 Data Ascii: JFIFCCahe!1AQ"a2qB
2024-05-15 22:37:33 UTC	16384	IN	Data Raw: 29 f6 ed 58 67 67 15 b2 8b 11 06 21 32 c6 de 56 fb 23 7b d4 ea cf 2d 77 2f 83 8e 1a 45 4b 0b 03 6d 87 4a 9d c5 4c 69 98 4c 10 d5 c8 24 8d 2c 2a 32 ad ba 78 fb 5b 6c 20 c9 98 a9 cc 76 15 96 db 76 9b 0e 01 99 34 52 3a d4 aa 62 98 f8 78 77 cc 05 89 e5 d6 b5 9c 32 d6 f9 80 c4 e3 30 7c 28 33 62 a5 02 4e 51 26 af f7 55 e3 8d cb c3 3c f3 c7 a7 f9 57 14 e3 3d a6 c4 f1 28 db 0e 83 ea d8 4d fc 35 3a bf f4 8f ee ae ac 30 98 f2 f3 ba bd 7c ba 93 5e 23 42 cd 75 3c c0 e9 5a c7 22 b3 6a 0d 8f 9a d4 11 79 ad 6b 83 f0 a0 bc 8e fa dc 5f 5e 54 e5 2d 26 d7 21 af fd 54 c2 42 86 7b 81 cf 4a 64 36 88 83 7d 96 88 46 21 cc e1 56 db 6c 74 aa 24 dc 82 34 a6 49 0a 49 b1 d4 d3 24 2d 8b 15 23 30 f5 a6 5b 4e 20 cb 8a 98 c9 2c b2 62 24 6d e4 91 b3 31 b7 53 40 db 16 05 8c 1c d7 21 b4 36 Data Ascii: )Xgg!2V#{-w/EKmJLiL$,*2x[l vv4R:bxw20\|(3bNQ&U<W=(M5:0\|^#Bu<Z"jyk_^T-&!TB{Jd6}F!Vlt$4II$-#0[N ,b$m1S@!6
2024-05-15 22:37:33 UTC	3247	IN	Data Raw: e2 62 65 69 a6 91 a5 95 fd e7 63 a9 3e b5 5b 2d 22 28 a2 30 ca 4c 99 24 5b 64 04 13 e2 1b ed e9 6a 71 3a 0f 84 51 f4 70 fc c1 53 4c bc 00 42 65 93 c3 be a4 da e3 5b 9a 06 8b 92 12 59 bc 40 43 03 ad f7 a7 12 43 25 81 65 cb ae 9a fe 74 8e 42 de 36 65 cc 00 55 3e 5b 8a 36 24 40 82 f1 e8 09 d6 d7 a2 01 88 01 51 65 00 03 e5 3c cd 38 54 e1 73 95 1a 43 e4 f7 3f 9a 29 a4 32 c5 65 6d 01 b1 e5 ad cd 34 ab 14 21 d8 95 59 2e a5 40 6e 5e a2 80 54 50 14 52 40 b0 da e6 9e 82 cf 80 ae a0 92 58 a9 f3 0e 44 55 23 c2 c0 00 4e 32 ad 83 6c bf b2 3a 55 44 de 4e 7c ec 9e 11 91 d6 12 d9 bc 3b e9 7e b5 48 f0 c5 16 26 e4 b2 fe c9 aa 88 39 b0 b1 c8 72 db 35 85 f6 e5 4f 49 de 92 b8 71 33 47 1c a7 3a 44 3c 80 ea 51 6f ad a8 90 ed e0 df ab 42 57 12 44 aa b1 c6 6c 91 c9 fc a3 fc a9 cf Data Ascii: beic>[-"(0L$[djq:QpSLBe[Y@CC%etB6eU>[6$@Qe<8TsC?)2em4!Y.@n^TPR@XDU#N2l:UDN\|;~H&9r5OIq3G:D<QoBWDl
2024-05-15 22:37:33 UTC	10168	IN	Data Raw: 02 ec 3a 5f ad 03 48 36 04 10 c4 dc 6b 71 b1 a0 16 4a b9 23 6b d2 05 3b 2a 0c a2 d7 be ba 51 bd 1c 81 77 bd b5 b0 a4 ad 14 d9 56 e0 35 fa 72 a9 32 33 64 25 89 bf 20 69 2b 41 8c 84 be 50 6e 4d e8 87 a3 8f eb 10 28 40 18 1b e6 eb 41 47 a3 7c 22 a2 dc ab f3 5d ed fb 77 6e 8b 6d 2a f1 ba 63 94 f5 52 c4 08 64 27 92 93 7a e9 c7 2d b8 b3 c7 52 ba ba 56 05 9c df 52 4f e7 5f 4b 3c 3e 37 2f 6a f7 37 d7 5a a4 c1 47 6b d0 7a 58 51 96 c6 da 52 26 cf 0b 20 65 ac b4 d2 1b 63 1b 07 5d c5 2f 3c 0f 1c c3 27 c4 89 80 ca 0a b1 22 f5 18 e3 71 f2 ac b2 99 78 72 4c 34 43 c2 17 e9 bd 70 5b cb d1 c3 1e 07 24 43 cc 3d eb f4 e5 44 a7 71 51 93 0c 6e 46 f5 b4 c9 cd 70 56 6c 2b 58 d6 b3 28 c6 e1 c1 06 32 01 ad 25 61 71 d1 45 77 ad 23 2b 00 52 ae 33 d1 4e 87 5a a4 58 17 f0 fc 14 51 19 Data Ascii: :_H6kqJ#k;QwV5r23d% i+APnM(@AG\|"]wnmcRd'z-RVRO_K<>7/j7ZGkzXQR& ec]/<'"qxrL4Cp[$C=DqQnFpVl+X(2%aqEw#+R3NZXQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50321	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:33 UTC	423	OUT	GET /steam/apps/281990/ss_7f4d7cc160c43e77aa523e910b365e0ca436e6bb.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:33 UTC	357	IN	HTTP/1.1 200 OK Last-Modified: Wed, 17 Jun 2020 08:52:18 GMT ETag: "5ee9d9c2-c429" Server: nginx/1.10.3 (Ubuntu) Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 50217 Accept-Ranges: bytes Cache-Control: public, max-age=382264 Expires: Mon, 20 May 2024 08:48:37 GMT Date: Wed, 15 May 2024 22:37:33 GMT Connection: close
2024-05-15 22:37:33 UTC	16027	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 4c 00 4c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 52 02 1c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 59 10 00 02 01 03 02 03 05 03 06 08 08 0a 08 05 05 01 01 02 03 00 04 11 05 21 06 12 31 07 13 41 51 61 14 22 71 08 15 32 81 91 d1 16 Data Ascii: JFIFLLCCRY!1AQa"q2
2024-05-15 22:37:33 UTC	16384	IN	Data Raw: c7 24 a8 99 27 95 5c 81 93 d7 c7 d0 54 38 46 4e da 3a 21 d4 75 18 a3 a2 13 69 7a 33 43 a4 70 f7 13 71 75 85 e5 f6 9d 6f 79 a8 c0 92 77 33 2c 53 0e 62 cc 14 91 c9 cc 32 30 57 27 18 1b 54 2c 38 e3 55 15 b1 d1 3e b7 ad cd a9 cb 2b 77 ce fd fd 0a fd 5e 1d 63 41 9d 6d 75 34 bf b1 99 e3 12 08 6e 1d 83 15 24 80 71 cd e6 08 c7 81 07 ca 9f 85 8f f0 a1 3e b7 ac 4a 9e 59 7e ac ac 9e e8 dd 38 69 9e 59 98 00 a1 a4 62 c4 01 d0 6e 6a e3 18 c1 54 55 1c d9 73 66 ce d4 b2 c9 c9 f1 bb b1 bc c7 f9 a7 fe 7e ba a3 1d c7 6c 39 4e b5 65 ca 08 fc 5b e7 3f 5d 44 b8 3a ba 6f 7b 7f e6 c6 98 a8 c8 38 ac d3 68 f4 5c 6d 84 ca 07 86 6b 44 c8 71 03 8e 55 04 0a 2e c1 c4 6c f5 a9 61 b8 08 ce 69 a2 5a 1b 61 81 8f 13 e5 56 ac 86 34 40 02 ab 82 1a 42 79 7c 68 b2 34 b4 29 4e 36 c6 f4 c4 28 9e Data Ascii: $'\T8FN:!uiz3Cpquoyw3,Sb20W'T,8U>+w^cAmu4n$q>JY~8iYbnjTUsf~l9Ne[?]D:o{8h\mkDqU.laiZaV4@By\|h4)N6(
2024-05-15 22:37:33 UTC	1518	IN	Data Raw: 7e d2 f6 b8 f8 9e f7 b7 1c 7e cb f6 79 3c 29 f2 b8 e2 8e 01 e3 1e d1 ad 75 3e 04 d4 75 1d 46 36 b3 58 6f e4 bf 84 26 66 46 20 32 b6 01 62 47 5c 8f 01 8a e8 e9 b0 bc 10 70 f2 bd 8f 3f aa cb 1c f3 53 5c f9 9c e7 4f ff 00 b5 2e ff 00 d2 13 fd 86 ae af 23 c8 5e e2 f8 1d 36 29 00 81 15 79 82 15 53 82 7d 2a 51 da b8 41 f2 f3 02 40 ce 06 4d 2a 2a c1 71 0a 45 cb cb 2a ca 19 41 c8 18 c1 f2 22 97 c4 64 ee 1c e1 e9 38 86 e6 7b 78 52 52 d1 44 66 2c 8b cc 15 57 a9 61 58 e4 c8 b1 a4 d8 e3 0d 6d d0 2e 34 fd 3a 5d 2b da 23 ba 29 75 cc 71 6e 08 28 ab cd 81 b9 f7 b3 d5 ba 63 15 4a 52 d5 4f 81 34 a8 9f ad 5a 37 0e dc 58 df e9 d7 56 12 18 63 55 13 58 f3 0e 76 23 04 e1 bc 71 d4 8e 9f 1e 91 07 e2 27 19 a7 f9 95 2f 61 a7 16 22 e3 5e 97 57 d1 a7 8d ed 9a 62 be f4 82 25 62 22 df Data Ascii: ~~y<)u>uF6Xo&fF 2bG\p?S\O.#^6)yS}QA@MqEA"d8{xRRDf,WaXm.4:]+#)uqn(cJRO4Z7XVcUXv#q'/a"^Wb%b"
2024-05-15 22:37:33 UTC	16288	IN	Data Raw: 4e d0 6c 25 d5 ef 5f 4f d3 22 92 31 cc 91 17 33 39 62 02 67 a2 8c e3 2c 73 8c f4 a3 4b 94 59 c7 d3 b4 a2 ad 9e 82 93 5c b0 ec 81 2f b8 5a e3 87 ef 6d f4 c9 16 4b 49 27 7c 95 75 fc 97 50 40 e6 00 80 32 09 af 0d f4 b2 9c dc 96 44 da f2 3d c7 9a 2a 0a 3a 28 e2 7a af 14 71 16 81 6d 2a 68 3a 9c b1 da 16 69 3d 92 43 ce 98 3b 90 01 e8 73 d3 15 e8 78 11 7b 4c e6 59 65 1d e2 61 ec b4 d9 b8 d3 d8 62 b8 bd 8e da 4b 89 03 49 77 71 b2 29 25 b7 62 3a 0c 9e bd 05 76 42 29 3d 2b 63 cc 8b 72 cb 26 ce f9 a1 7c 9e a7 ec cb 56 f9 b3 8c 34 6b d8 96 7b 43 79 05 fd a1 5c 8c 10 39 9b 27 a6 48 18 1b ef 9d c6 f5 d9 1c 1a db 83 5f 99 a4 b2 a8 24 ce 63 c6 3c 2d 25 a6 af 25 97 b6 3b da ca c5 41 ce 19 72 36 62 3d 36 ff 00 93 58 cb 0e 89 51 aa 9e a8 da 30 f1 e8 37 5a 47 ce 16 52 27 79 Data Ascii: Nl%_O"139bg,sKY\/ZmKI'\|uP@2D=:(zqmh:i=C;sx{LYeabKIwq)%b:vB)=+cr&\|V4k{Cy\9'H_$c<-%%;Ar6b=6XQ07ZGR'y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50324	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:35 UTC	423	OUT	GET /steam/apps/281990/ss_034b0d55a5c370bec4709f09d0914f9d131b7788.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:35 UTC	357	IN	HTTP/1.1 200 OK Last-Modified: Wed, 17 Jun 2020 08:52:18 GMT ETag: "5ee9d9c2-fea1" Server: nginx/1.10.3 (Ubuntu) Access-Control-Allow-Origin: * Content-Type: image/jpeg Content-Length: 65185 Accept-Ranges: bytes Cache-Control: public, max-age=270568 Expires: Sun, 19 May 2024 01:47:03 GMT Date: Wed, 15 May 2024 22:37:35 GMT Connection: close
2024-05-15 22:37:35 UTC	16027	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 04 05 03 06 02 07 08 01 00 09 ff c4 00 51 10 00 02 01 03 03 02 04 03 04 07 05 05 06 03 05 09 01 02 03 00 04 11 05 12 21 06 31 13 41 51 61 07 22 71 14 32 81 91 08 15 23 42 Data Ascii: JFIFCCQXQ!1AQa"q2#B
2024-05-15 22:37:35 UTC	16384	IN	Data Raw: b2 43 6a 50 32 7f 68 77 c8 1e 67 ca b2 cb 4d 24 ad 23 5c 75 49 b6 9b 1a db 7c 2a 94 b1 29 79 94 03 73 17 80 90 40 f3 18 3d 87 af 6a 8f 4f 7e 4b 8e 6a 77 45 cf a5 7e 13 e9 2f ab 7d b2 fe e1 17 4c b5 92 26 9a c0 33 2d c4 f1 96 01 84 67 b6 71 ce 4e 3b d6 98 69 f9 bf 06 6c b9 be 5a 8f 6c 79 d5 dd 3f d2 1a 0e 9f 72 f6 7a 5e c6 99 9c 5b 0b 89 99 a7 0b 9e 30 7b 02 01 19 38 e4 d3 72 c3 14 61 ca 07 0c b2 46 4a 5b 8a ef 4f 75 04 56 17 16 b0 c3 a6 da a4 01 86 f6 98 17 7e fc 9d dd c7 e5 58 f0 ed c6 f8 46 ed 46 79 e7 4b 77 49 70 91 be e5 e9 dd 23 51 d3 ef b5 28 6e 6d ed a4 58 a3 92 08 14 b7 ed 95 b0 32 99 e7 dc 83 eb 5d 19 2f cc e4 2c 8d 34 a8 d2 9a a6 9b 75 a7 ea d7 6b 2b 3b bb 36 7c 42 0a ee 07 cf e9 5c cc 90 b7 52 3a 98 73 cf 0f 38 dd 3f b1 ed ae 96 24 4c 9f bd 9a Data Ascii: CjP2hwgM$#\uI\|*)ys@=jO~KjwE~/}L&3-gqN;ilZly?rz^[0{8raFJ[OuV~XFFyKwIp#Q(nmX2]/,4uk+;6\|B\R:s8?$L
2024-05-15 22:37:35 UTC	2246	IN	Data Raw: 47 13 a6 86 16 ba 2d dd d4 5b ed 24 b6 8e 34 62 0b c8 5b c4 6f 4f 97 1c 0f a7 af 73 43 3d 54 64 aa 8c 99 35 70 c7 2a 92 63 cd 13 a8 f5 4d 3f 4a d4 2d e2 d4 5e 18 88 5f 10 88 c8 59 3d 17 bf 3e bc 8f 2a c9 37 19 35 6a ce 6e 7c 58 72 e4 8c e5 8d 37 e3 ab 5f 71 65 e6 a1 0d ca 28 55 92 6b cc 93 23 b9 1b 8f 6c 05 07 80 3b f3 c9 ad 71 9c 12 a4 8d d8 dc 20 ed f0 85 77 57 d2 cf b2 17 b6 91 73 c3 89 13 c4 52 3d b0 32 3f 0e 69 ab 9e 51 d2 8b 4d 5a 63 0e 9e e8 ab 3e a1 bc b8 49 75 8b 7d 1a ca 00 a5 a6 b9 89 db 2c 7f 74 6d e5 88 1c f9 63 cf 14 fc 50 8c db df 2d a6 7c f9 27 8d 2d 90 72 6f db fe cb 5c 5f 09 7a 64 30 0b d6 17 17 47 b9 6b 5d 21 ca e3 ea ce 2b 47 a7 a6 5d e5 fd 99 95 67 d6 49 5f a1 5f 8c 97 fc 22 79 be 18 74 d4 26 3f 03 aa a6 62 7b ad c6 9e e9 fc 41 3c 52 Data Ascii: G-[$4b[oOsC=Td5pcM?J-^_Y=>75jn\|Xr7_qe(Uk#l;q wWsR=2?iQMZc>Iu},tmcP-\|'-ro\_zd0Gk]!+G]gI__"yt&?b{A<R
2024-05-15 22:37:35 UTC	16384	IN	Data Raw: 43 59 fc 38 e8 c8 35 4d 76 ee de 58 d4 4a 56 68 18 ec dd 86 47 07 04 f9 7b 13 8e 45 2b 3b 6a 99 c9 d5 2a 92 65 77 e2 67 c3 b3 d3 ba f7 85 e0 15 fd 62 85 22 cf 73 2a 7c dd 87 6d cb 91 db b8 f7 a6 e1 9e e5 f8 0a c6 ed 51 ae 20 8c 86 d8 46 08 e0 d6 db b1 d7 c5 97 2e 9f d2 46 a4 f6 b0 da 41 3c d7 4d b8 c8 aa 37 67 d3 68 1c f6 19 a4 ca 7b 6d b7 c1 cd cf 9b d2 dd 2c 8d 28 f8 ff 00 b2 df af db 69 56 fa 84 23 47 69 64 b6 10 a3 30 b8 1f 32 c9 b0 6f 1e e0 36 71 47 a7 72 6b e6 33 7c 3e 59 e7 06 f5 09 5d be bd af 8f d8 33 44 b5 f1 66 4d fe 67 92 6b aa 9f 07 60 db dd 0f a7 4a 35 db 49 22 43 bc 3a b8 18 f3 07 34 f4 21 be 0f d0 be 9b 12 59 db 88 ae be 47 6c 6d 40 0e 31 8a e1 6a 2b 23 dd 03 a7 a6 92 c7 c4 f8 0f d5 26 91 23 26 33 82 06 77 79 7d 0d 23 14 55 f2 3b 3c df f6 Data Ascii: CY85MvXJVhG{E+;jewgb"s\|mQ F.FA<M7gh{m,(iV#Gid02o6qGrk3\|>Y]3DfMgk`J5I"C:4!YGlm@1j+#&#&3wy}#U;<
2024-05-15 22:37:35 UTC	14144	IN	Data Raw: 3e 22 ba 42 5c 3c f6 13 45 94 6d b8 1b 90 e4 fb 71 fd 7c ab 6e 0a df c9 9f 32 7b 38 3b c7 43 d0 ae 2f 74 09 ae 60 df e0 aa ed 3e 03 12 cc 47 25 97 cc ff 00 3e f5 a6 59 a3 19 24 fb 32 c7 14 a5 17 25 d1 b6 fa 4f a5 a0 b3 b3 b5 b8 1f f6 82 99 cb 02 47 3d bb fa 57 17 51 9d ca 4e 3e 0e ae 0c 34 94 bc 96 48 66 72 d8 2a 38 e0 e0 e4 56 26 91 b1 49 d8 16 b9 fe ff 00 a5 b2 45 19 9d 25 3b 4b 21 e5 46 70 5b 1e 78 a6 62 f9 27 6f 81 79 bf 99 0a 5c 9a 2f a8 ae 97 4e d4 a6 8d 8b c7 b1 f1 1b 46 dc 10 3c 89 3f e5 5e 93 1a dc 93 38 13 5b 5d 1b 83 a2 75 3b 4b 9d 16 d5 1e 54 69 65 40 d9 e4 2b 71 d8 67 d2 b8 7a 98 cb 7b 92 3b 1a 77 0d 9b 64 09 d4 dd 21 05 d6 e6 b4 18 97 07 82 fc 2b 79 1c 1e c7 f1 1e 54 dc 1a a9 2f a8 5e 6d 34 7f b4 d6 10 6a 7a 8e 93 ae ba 5a cc e2 21 3e 4c 37 Data Ascii: >"B\<Emq\|n2{8;C/t`>G%>Y$2%OG=WQN>4Hfr*8V&IE%;K!Fp[xb'oy\/NF<?^8[]u;KTie@+qgz{;wd!+yT/^m4jzZ!>L7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50323	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:35 UTC	423	OUT	GET /steam/apps/281990/ss_f844372cc220e3858aa17205e9fec0ae79a4e665.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:35 UTC	357	IN	HTTP/1.1 200 OK Last-Modified: Wed, 17 Jun 2020 08:50:14 GMT ETag: "5ee9d946-ebce" Server: nginx/1.10.3 (Ubuntu) Content-Type: image/jpeg Content-Length: 60366 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=157371 Expires: Fri, 17 May 2024 18:20:26 GMT Date: Wed, 15 May 2024 22:37:35 GMT Connection: close
2024-05-15 22:37:35 UTC	16027	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 02 05 00 01 06 07 08 ff c4 00 57 10 00 02 01 03 02 03 04 07 05 04 06 05 0a 03 06 07 01 02 03 00 04 11 05 21 06 12 31 13 41 51 61 07 14 22 32 71 81 91 15 a1 b1 c1 d1 Data Ascii: JFIFCCQXW!1AQa"2q
2024-05-15 22:37:35 UTC	16384	IN	Data Raw: 27 2a e8 5a ea bc 19 79 64 d6 8b 77 66 90 f6 b0 24 f1 85 65 21 d1 86 41 c8 3e 15 19 9a 27 2a 11 97 85 a3 ec cf 20 28 fe 4e 31 f8 d5 a3 52 5c ca b8 21 8d 0f 83 ae f5 6b d8 6d 51 a0 0f 18 79 83 4b 3a 46 39 14 17 61 92 7a e0 12 07 8e c3 ad 6c a6 99 93 8b 2b 67 b1 30 b3 30 91 04 8e 4b 34 a3 24 ef fc 20 0d be 3d 7e 15 6c c8 8b 32 7a 16 89 6d 7b 74 56 43 70 ea 3a 98 82 a7 de 73 f8 55 25 38 c7 56 32 54 96 90 b5 fb ff 00 63 bd b5 e1 bb 08 e3 54 8b 4b 8d 40 19 e7 b8 99 9c 9c 0c f7 72 8a e5 e2 a6 f4 5f 13 57 87 9d bd aa 8f c9 25 f5 bb 3b cf 47 5c 77 a8 70 24 3a ad 85 a4 56 50 58 ea d6 c6 c6 f2 25 b7 89 8b c4 c4 1c 6e 39 b2 08 53 b1 cd 61 52 8a af 28 ba 89 68 5e 2e 54 29 c9 51 93 bb ea df fb 2b ea b6 14 79 60 d4 64 c4 18 b6 9c 9d ed 9d c1 c9 f0 56 fc 9b 1f 13 54 95 Data Ascii: 'Zydwf$e!A>' (N1R\!kmQyK:F9azl+g00K4$ =~l2zm{tVCp:sU%8V2TcTK@r_W%;G\wp$:VPX%n9SaR(h^.T)Q+y`dVT
2024-05-15 22:37:35 UTC	3523	IN	Data Raw: 38 b5 87 c3 ce 9c 15 ea 39 3b 69 a2 56 df 5f 92 f8 9c 6f 15 e9 43 85 af 75 0b 7b dd 2a 5b c9 65 74 b8 b6 bf 12 8e 6e 46 e6 20 c8 aa 70 a5 ba 91 dc 40 ee 3b fd 3a 8c f3 43 82 d2 82 d1 a3 92 3c 08 d1 a9 1a e9 b9 bd 9f 4f 1d 49 70 8f 0a 9e 2c 9a e8 76 6f 12 86 68 20 ec dc 12 f3 63 99 43 03 80 13 7c 13 9c f9 57 54 a5 18 fb cc e1 85 19 54 57 4c aa d4 24 4b 11 0d 9c 9a 3c 96 b7 b1 09 62 9e 6e df b4 8e 52 19 b7 04 64 13 b6 32 36 c0 07 e3 8d 38 d5 55 24 e4 ef 17 b2 e8 75 56 f5 67 42 9c 61 16 aa 2d df 27 bf 7f 02 de cf 82 25 be e1 29 b5 68 ad 4b 5d 47 18 bb 36 fd aa 88 fd 5f bc f3 1c 1e 70 7f 74 03 9c e0 6f 5a 39 47 dd be a7 3a a3 2b 29 37 a1 c8 f1 8d cd b5 c7 6e b6 ba 5c 9a 5c 62 75 22 19 1f 98 ae cf 90 0e fb 78 6f dd 59 d0 8d 58 d3 b5 67 76 76 d6 78 79 62 1c b0 Data Ascii: 89;iV_oCu{*[etnF p@;:C<OIp,voh cC\|WTTWL$K<bnRd268U$uVgBa-'%)hK]G6_ptoZ9G:+)7n\\bu"xoYXgvvxyb
2024-05-15 22:37:35 UTC	16384	IN	Data Raw: b5 8b e8 91 23 ed c9 8d 07 2a a9 c6 00 c9 3f 3d c9 eb 51 64 2e c6 60 d5 62 90 7e de 3e 4d f1 cd 11 ef fe 5f d3 15 57 12 d9 86 04 91 b9 fd 81 12 0f ee 7b c3 e5 d6 ab 95 93 74 4a 0b 86 2d 92 43 01 dc 7a d4 65 b9 37 1d 86 e5 63 98 32 c8 d0 38 dc 10 7a 7d 29 95 ad 51 17 4f 46 75 7a 5f 1e dd da 85 86 f8 2e a1 6a 76 c9 c0 70 3e 3d ff 00 3a ec a7 8b 9c 56 5a ab 32 39 2a 61 21 2d 61 a3 3a dd 3f 49 83 88 ed 9a 7d 1e 55 7c 0f 6a 16 38 2a 7c 37 e8 6b a7 85 0a cb 3d 17 e4 79 f3 cd 49 da a2 2b e6 86 7b 12 79 94 a3 0e aa c2 b8 f5 5a 32 15 99 ad 39 66 d4 2f 16 15 49 65 18 32 48 b0 80 58 46 a3 99 d8 7c 14 13 bf 85 4a bb 39 b1 35 61 87 a5 2a b3 76 4b eb c9 79 bd 09 ce 74 e7 73 d9 0b c8 65 ba 9b 3a 62 cc 53 99 a3 59 0a 37 68 00 c8 7c f2 e0 ae 06 73 e3 b7 5d 4c 3c a1 17 52 Data Ascii: #?=Qd.`b~>M_W{tJ-Cze7c28z})QOFuz_.jvp>=:VZ29a!-a:?I}U\|j8\|7k=yI+{yZ29f/Ie2HXF\|J95avKytse:bSY7h\|s]L<R
2024-05-15 22:37:35 UTC	8048	IN	Data Raw: 5d 54 23 f3 3c ac 54 b3 4d 45 72 38 ad 46 f9 af ee e7 b8 73 ed cc e5 cf ce bd 3b 16 4a c8 4f b5 00 f2 92 4f c2 85 87 2d 80 62 01 db 34 2a 59 47 62 d2 9f 64 66 84 0a 5e 5a b4 0d 93 91 50 48 93 ce ea 31 cd b5 49 22 de b0 dc dd 68 48 cc 53 93 8c 6e 6a 48 63 c9 21 48 fa 90 2a 4a 83 f5 b3 b8 ce 45 00 b4 d2 10 db 54 32 e9 12 b6 95 4a 4a 65 e5 03 03 94 be 71 9f 0d bf 1e ea a9 56 9f 21 79 d5 1a 43 c8 49 5c ed 9f 0a 92 51 07 4c 7b 4a 68 00 b5 ce 09 04 1a 82 49 c6 c6 40 40 ee df 35 20 f2 69 a1 fd a1 f8 9a f3 ce a3 70 d8 bc d2 2c 6b ca 19 8e 01 76 0a 3e 64 ec 28 0d 2d b1 19 c8 a0 37 c8 77 01 7a 8d f6 a0 35 d8 ed 40 68 c1 40 41 e0 c0 24 77 75 a0 00 63 39 de a0 07 79 7b 5b 52 06 39 e3 1c ac 4a 82 4a 6d be 7a ed 80 3e 1f 3a 12 57 b1 20 9c 6e 33 d6 a2 e4 d8 1b 49 83 d7 Data Ascii: ]T#<TMEr8Fs;JOO-b4YGbdf^ZPH1I"hHSnjHc!HJET2JJeqV!yCI\QL{JhI@@5 ip,kv>d(-7wz5@h@A$wuc9y{[R9JJmz>:W n3I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50325	47.57.186.72	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:37 UTC	896	OUT	GET /storesteam/about/ HTTP/1.1 Host: gtm.you1.cn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sessionid=3508f816d0cd4e44f984cf27; timezoneOffset=7200,0; app_impressions=2143540@2_9_100000_; browserid=3526959438637945341; steamCountry=HK%7Cc6b412f8b107c83cce03ee97132e3add
2024-05-15 22:37:38 UTC	1580	IN	HTTP/1.1 200 OK Date: Wed, 15 May 2024 22:37:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.akamai.steamstatic.com/ https://store.akamai.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.akamai.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.akamai.steamstatic.com/ https://checkout.steampowered.com/; frame-src 'self' steam: http://www.youtube.com https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://steamcommunity.com/ http [TRUNCATED] X-Frame-Options: DENY Strict-Transport-Security: max-age=10368000 Set-Cookie: steamCountry=HK%7C4f1812e0538341c41eb886219e964d29; Path=/; Secure; HttpOnly; SameSite=None
2024-05-15 22:37:38 UTC	14785	IN	Data Raw: 33 39 62 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 Data Ascii: 39b9<!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"
2024-05-15 22:37:38 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6d 61 72 6b 65 74 2f 22 3e 0d 0a 09 09 09 09 09 09 09 4d 61 72 6b 65 74 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 3f 73 75 62 73 65 63 74 69 6f 6e 3d 62 72 6f 61 64 63 61 73 74 73 22 3e 0d 0a 09 09 09 09 09 09 09 42 72 6f 61 64 63 61 73 74 73 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f Data Ascii: 3ff0<a class="submenuitem" href="https://steamcommunity.com/market/">Market</a><a class="submenuitem" href="https://steamcommunity.com/?subsection=broadcasts">Broadcasts</
2024-05-15 22:37:39 UTC	16376	IN	Data Raw: 33 66 66 30 0d 0a 37 31 35 32 35 33 37 35 38 22 3e 0d 0a 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 61 6d 65 5f 69 6d 61 67 65 22 20 64 61 74 61 2d 72 65 6c 6c 61 78 2d 70 65 72 63 65 6e 74 61 67 65 3d 22 30 2e 35 22 20 64 61 74 61 2d 72 65 6c 6c 61 78 2d 73 70 65 65 64 3d 22 31 2e 35 22 3e 0d 0a 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 70 70 2f 32 33 34 34 35 32 30 2f 44 69 61 62 6c 6f 5f 49 56 2f 22 3e 0d 0a 09 09 09 09 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 Data Ascii: 3ff0715253758"></a></div><div class="game_image" data-rellax-percentage="0.5" data-rellax-speed="1.5"><a href="https://store.steampowered.com/app/2344520/Diablo_IV/"><img src="https://cdn.akamai.steams
2024-05-15 22:37:39 UTC	8	IN	Data Raw: 37 62 39 0d 0a 22 22 3e Data Ascii: 7b9"">
2024-05-15 22:37:39 UTC	1976	IN	Data Raw: 4a 6f 62 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 20 3c 73 70 61 6e 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 7c 3c 2f 73 70 61 6e 3e 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 74 65 61 6d 77 6f 72 6b 73 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 22 3e 53 74 65 61 6d 77 6f 72 6b 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 20 3c 73 70 61 6e 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 7c 3c 2f 73 70 61 6e 3e 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 2e 73 74 65 61 6d 67 61 6d 65 73 2e 63 6f 6d 2f 73 74 65 61 6d 64 Data Ascii: Jobs</a>   <span aria-hidden="true">\|</span>  <a href="http://www.steampowered.com/steamworks/" target="_blank" rel="">Steamworks</a>   <span aria-hidden="true">\|</span>  <a href="https://partner.steamgames.com/steamd
2024-05-15 22:37:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50328	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:37 UTC	632	OUT	GET /steam/apps/2215430/capsule_616x353.jpg?t=1715792238 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:37 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 68283 Last-Modified: Tue, 20 Feb 2024 19:37:52 GMT ETag: "65d4ff90-10abb" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=584332 Expires: Wed, 22 May 2024 16:56:29 GMT Date: Wed, 15 May 2024 22:37:37 GMT Connection: close
2024-05-15 22:37:37 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 01 05 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 00 04 06 07 08 05 09 0a ff c4 00 4e 10 00 02 01 02 04 03 05 05 05 06 04 05 02 03 07 05 01 02 03 04 11 00 05 12 21 06 31 41 07 13 22 51 61 08 14 32 71 81 09 42 91 Data Ascii: JFIFCCahN!1A"Qa2qB
2024-05-15 22:37:37 UTC	16384	IN	Data Raw: dd 2d aa b5 b9 52 47 56 33 64 cb a3 a5 8c e5 64 05 91 48 1a 40 23 73 7e 77 e7 f5 fc 70 a7 cd ca 97 74 98 ab ea 1b d3 56 d2 57 c5 43 4d 4b 1f ec c7 36 90 2a 02 08 37 d4 58 df 9f f6 1c ef b2 a4 a5 cb 15 81 69 ab 6f 24 4f 49 51 97 57 2c 14 94 e1 a8 65 b6 b1 a6 e2 d7 df 51 3b f2 fd 1e 58 34 e2 ea 2b 05 4e d6 77 0e a2 9e a3 2e 96 18 32 da 25 5a 76 3a a4 52 2e 1b a1 b9 27 95 bf af 95 8c 92 94 5a 5a 6b 01 53 cc 99 35 b4 b3 50 ba 2e 59 4e 3b 87 3f bc 54 00 f2 f9 f4 fd 6d 84 93 87 f0 d0 4d 3f 11 59 82 c9 97 d3 a3 65 90 20 69 5b 70 ab cc 0e 9b f4 e7 fe 98 b2 4e 0b f1 a1 1a 6f bc 36 aa 96 7a 08 8c f4 50 22 d4 48 01 90 c6 ba 88 3d 40 1e 57 c2 51 70 57 05 92 26 9e 24 45 5d 1c f4 f0 a5 5c 10 0f 7d 6b 77 a1 17 7b 9e 64 0f c3 97 f3 c2 51 71 5c d1 59 09 a7 87 b0 2d 4e f1 Data Ascii: -RGV3ddH@#s~wptVWCMK6*7Xio$OIQW,eQ;X4+Nw.2%Zv:R.'ZZkS5P.YN;?TmM?Ye i[pNo6zP"H=@WQpW&$E]\}kw{dQq\Y-N
2024-05-15 22:37:37 UTC	3281	IN	Data Raw: 5d 76 61 22 51 50 50 20 91 a9 a0 82 35 b7 85 d8 9b 5b 99 db c4 ce c4 05 e4 3a a5 44 3d 1e 18 f6 26 ed 43 8e 3b 2a ac e3 6c aa 91 29 a4 92 11 2e 5d 91 55 82 95 99 9c 0c 0f 79 2c 2b 6b 0b 8b 68 d4 41 90 5f 45 fc 3a be 5e a7 d4 f8 7d 2d 6e c9 bf d5 f4 5f f7 af 91 e9 8f 0d a9 28 73 23 9f 78 5f 89 33 5e ce 78 96 83 35 c8 ea 73 2c 9b 88 b2 c9 cb cd a6 43 0c 91 48 8f b6 83 b1 52 39 58 ee 08 fa 63 ea e1 ab 3c db 1f 53 73 0c f2 0f b4 73 d8 37 34 ce e5 a5 82 3e d3 b8 38 4e ce 61 89 43 b5 54 31 87 65 40 bb f7 75 50 e9 1a 6c 17 bd 1c 8f 74 0e 39 57 2c 8d 6e 8f 92 d9 85 40 ab 90 8a 78 cf 76 10 46 bb 6e 7f c4 c7 a6 e7 fa 63 b1 82 e3 24 cb e7 9e aa 9a 8e 10 b3 54 4f 3a 33 44 84 37 85 77 df a7 52 77 f2 df 00 7d d3 f6 ba ed db 83 3d 94 a8 f8 72 6a ae cc 72 ce 22 4c f5 ea Data Ascii: ]va"QPP 5[:D=&C;*l).]Uy,+khA_E:^}-n_(s#x_3^x5s,CHR9Xc<Sss74>8NaCT1e@uPlt9W,n@xvFnc$TO:3D7wRw}=rjr"L
2024-05-15 22:37:37 UTC	16384	IN	Data Raw: 38 85 7d 4e 86 27 e2 66 ff 00 97 e7 6b 0d bf a6 35 ce 89 ca ce d5 f6 21 f6 59 e2 ef 65 2e cb 38 eb 29 e2 aa dc a6 b6 7c c6 51 55 4b fb 2a 79 65 11 aa c0 54 dd 9e 34 20 93 c8 00 6d be 39 ca 56 58 a3 e4 df 01 71 99 e1 ba e9 16 a6 19 21 ad 47 57 15 94 92 68 65 65 36 b9 ff 00 1d ba 5e fd 31 d8 ca 36 5e 6f c6 99 3d 4c 69 5f 5b 3b 64 b9 ac 01 2a 28 b3 cc b6 43 0d 4a fc 2b 7b 8b df 48 04 81 b9 2d d4 74 94 0f a2 bc 17 c5 b9 f6 57 ec 1b c4 d9 d7 14 4b 59 98 67 0b 94 c9 54 66 75 48 aa 58 3d 3c 2f 11 60 46 95 93 4b a1 dc 1d f9 df 72 79 f5 34 b6 39 5f d8 97 24 8b 37 c8 7b 5d a6 e1 0e 22 8b 87 fb 57 ce 60 a6 a0 ca 29 33 f9 fb a4 08 ab 79 64 89 82 9b c9 a9 9c d8 03 6d 2a 74 d8 9c 6d 91 23 60 7b 33 70 0f 14 70 57 b5 3f 00 53 76 99 94 9c a3 b4 4a 3a 4a ba 5f 7b 4a 84 a8 Data Ascii: 8}N'fk5!Ye.8)\|QUKyeT4 m9VXq!GWhee6^16^o=Li_[;d(CJ+{H-tWKYgTfuHX=</`FKry49_$7{]"W`)3ydm*tm#`{3ppW?SvJ:J_{J
2024-05-15 22:37:37 UTC	16192	IN	Data Raw: 7b b5 dc 93 3e a3 9d 45 7e 58 2a 6b d6 79 3c 45 5a 3a 79 19 5b e6 1a d6 3e 76 c6 9e d4 44 6b 7a 35 8e a6 79 52 46 d4 ed 72 ba 8e e5 af d0 f9 fc f9 e3 44 36 0f 13 51 51 57 f6 71 c0 99 d2 b0 5c c2 9e ae ab 22 cc 5a f6 25 62 64 92 06 23 ff 00 c3 99 96 fe 51 8c 42 9a f6 5b d3 c0 f1 12 1c c5 33 28 0d d3 d7 f9 62 90 b5 33 c8 45 8c 8d 6f 2b e0 00 c0 1e bf 0d f0 8e 79 c6 35 33 53 64 59 4d 66 71 51 0a 09 1e 1a 28 5a 57 0b 70 b7 d2 a0 9e 64 60 0c 99 7d 9f fb 50 79 bb 94 ec e7 8a e5 93 9e 98 f2 4a 96 fc 93 12 d0 a3 1c cf 78 27 88 b8 5e 3e f3 3a c8 33 3c a2 3e f3 ba d5 5f 47 24 23 5d 89 d3 76 03 7b 02 6d e9 8a 0f 5b b2 79 f2 f8 f8 fb 21 6c f7 35 ac c9 38 74 55 c7 16 61 99 51 c2 66 6a 48 1d c0 67 31 df c6 05 ee 57 a8 06 c0 9b 0c 40 76 57 b7 87 b1 0e 4b d9 5f 65 fc 27 Data Ascii: {>E~X*ky<EZ:y[>vDkz5yRFrD6QQWq\"Z%bd#QB[3(b3Eo+y53SdYMfqQ(ZWpd`}PyJx'^>:3<>_G$#]v{m[y!l58tUaQfjHg1W@vWK_e'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50329	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:37 UTC	655	OUT	GET /steam/apps/2215430/ss_d4ce3e825d9e48759f0e8732f2e705e71fa508d1.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:37 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 50890 Last-Modified: Thu, 09 May 2024 19:00:51 GMT ETag: "663d1d63-c6ca" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=78660 Expires: Thu, 16 May 2024 20:28:37 GMT Date: Wed, 15 May 2024 22:37:37 GMT Connection: close
2024-05-15 22:37:37 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff c0 00 0b 08 01 51 02 58 01 01 11 00 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 03 02 04 05 06 00 01 07 08 09 0a ff c4 00 53 10 00 02 01 02 04 04 04 02 06 07 05 04 07 06 05 05 01 02 03 04 11 00 05 12 21 06 31 41 51 07 13 22 61 71 81 08 14 32 42 91 a1 23 52 72 b1 c1 d1 f0 09 15 33 62 e1 16 24 34 43 17 35 53 73 82 b2 f1 25 36 74 92 a2 b3 18 37 38 63 75 83 44 45 c2 c3 ff da 00 08 01 01 00 00 3f 00 f0 92 45 b0 db 0e a2 4b fa 4f 2f cc 61 c4 50 ee 6c 6e 3b e1 ec 74 c5 b7 17 36 Data Ascii: JFIFCQXS!1AQ"aq2B#Rr3b$4C5Ss%6t78cuDE?EKO/aPln;t6
2024-05-15 22:37:37 UTC	16384	IN	Data Raw: 03 29 3b 6d 7d 8d ad b1 fc 06 39 2f 16 c6 e9 c6 cb 4e 24 2f 03 4b 79 56 10 08 51 bd 9b 4f 20 7e 38 a5 56 56 d7 d3 cb 9d 64 f1 c0 b5 32 a3 b1 d1 24 7f a2 92 3e cf cc 0b ff 00 2c 56 7f e8 ea bc c7 4f 5b 94 52 ae 59 98 0f 53 d2 09 01 86 fb fd 92 79 0d f9 6e 31 37 96 f0 bf 13 c3 92 a5 25 67 d5 e1 49 5f 54 63 cc 52 57 63 71 6b 9d 3b fe ec 5c 38 6f 22 cc 72 ac 92 19 de 38 24 9d 58 43 aa 33 a9 8e ff 00 69 b9 02 3f ad f1 d1 38 6e 09 72 aa 78 62 9e 73 51 1b 5c 2d 44 a2 ce fb 9d 8f e5 8e 8b c1 75 8b 1c c5 e3 2c cd b8 92 4a 64 b8 bf ba db e5 8b ac b5 4d 24 0a f1 02 47 22 5f b7 c3 1c cf 8f 72 e3 4f 9c c7 99 1b bd 15 5a 7d 5a b2 29 14 15 61 f7 58 fe 63 e1 88 be 1f ce ea b2 4c fe 2a 00 af 2c 25 b4 43 3c 73 98 90 c6 3e e3 81 b3 15 bd 86 dd 7a 63 a2 2e 71 59 54 f2 24 f4 Data Ascii: );m}9/N$/KyVQO ~8VVd2$>,VO[RYSyn17%gI_TcRWcqk;\8o"r8$XC3i?8nrxbsQ\-Du,JdM$G"_rOZ}Z)aXcL*,%C<s>zc.qYT$
2024-05-15 22:37:37 UTC	2174	IN	Data Raw: aa db e3 ae f8 03 f4 92 a9 e0 da 19 f2 0c cf 33 d5 92 e6 33 47 53 2c 72 2e ad 12 2b 8b 97 3b 37 94 54 12 40 3b 15 17 b0 be 3d 3d e2 ff 00 14 f0 32 cf 98 c5 e7 d3 36 5e 5e 28 29 b2 da 5a 23 23 54 b4 8b 23 49 24 4a 1a c5 3e cb 5e c0 12 49 0d 72 31 e4 4f 14 f2 76 ca 92 93 35 a5 90 cf 96 19 85 3c 72 bc 6d 13 b9 20 10 08 db 53 2d ca 92 39 8e b7 18 86 a6 ae 2d 0e aa 99 12 28 ea a4 3a 51 25 2c 5c 8d af a0 f5 de db f7 c2 a9 e2 a7 ab 75 a7 86 9a 1d 4b 6b 2c b2 94 76 1b dc 03 cf e1 7e f8 1c d4 54 c4 30 59 1e 85 d7 a5 49 04 1e f6 23 af b6 09 53 9f 4d 3e 4f 47 97 4f 59 15 47 d4 99 be a9 35 ee f1 46 c4 96 8b 9e eb a8 ea 03 a1 2d 6d 98 e1 81 ae 8a 6b 93 50 2f 7d fd 1b 5f be 32 28 d6 ad 5f c9 98 9d 02 e6 c8 05 87 f5 6c 36 6a 99 61 d5 69 b9 1e 7a ad f9 5c e0 70 71 52 28 Data Ascii: 33GS,r.+;7T@;==26^^()Z##T#I$J>^Ir1Ov5<rm S-9-(:Q%,\uKk,v~T0YI#SM>OGOYG5F-mkP/}_2(_l6jaiz\pqR(
2024-05-15 22:37:37 UTC	16288	IN	Data Raw: cc 6b 69 32 9c be a2 ba ba a6 1a 2a 1a 74 32 4d 53 53 20 8e 28 94 6e 4b 33 10 00 1e e7 1f 23 bf b5 2b e9 0b c0 9e 39 66 be 1f 65 1c 09 c4 74 5c 4b 0e 4c 6b 9a b2 a2 85 5c aa 4b 21 89 51 43 b2 80 e0 aa 31 ba 92 2f 8f 13 e4 28 f4 86 57 68 bc f8 3c a2 ee c0 5b ca 6f bb 72 7a f5 ef 8b 16 68 fc 1a f1 50 4e df 59 cc 26 57 1f 5d 86 19 b4 30 5b 6e ca cd d2 f6 ee 46 24 a2 af e1 dc 91 6a aa 72 21 35 24 d3 52 ab 44 27 a8 70 81 ac 41 52 03 6e 76 be fc ff 00 2c 26 8e af 85 eb f3 91 26 6f 1b a5 45 3a 2a 87 a7 07 c9 ab 7b 1b b5 80 1a 37 b7 2f e7 86 7c 55 98 42 32 b8 e8 e9 cc 94 b2 ca c8 f2 4d 08 11 c5 29 de e4 2a f3 00 69 03 e1 73 b9 38 bc 7d 1b be 90 fc 69 f4 6c ce 6a ea 38 7e ae 96 b7 27 cc c2 ae 71 90 d7 c5 e6 52 66 30 ad c1 56 3c d5 b4 b3 00 ca 7a d8 86 1b 63 d1 1c Data Ascii: ki2t2MSS (nK3#+9fet\KLk\K!QC1/(Wh<[orzhPNY&W]0[nF$jr!5$RD'pARnv,&&oE:{7/\|UB2M)*is8}ilj8~'qRf0V<zc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50330	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:37 UTC	655	OUT	GET /steam/apps/2215430/ss_2db8246d9743a5c6c1c85fd8539d2a73a4f1ac36.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:37 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 90968 Last-Modified: Thu, 09 May 2024 19:00:51 GMT ETag: "663d1d63-16358" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=78646 Expires: Thu, 16 May 2024 20:28:23 GMT Date: Wed, 15 May 2024 22:37:37 GMT Connection: close
2024-05-15 22:37:37 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 01 08 00 09 ff c4 00 55 10 00 01 03 02 05 02 04 03 05 05 04 05 08 08 04 07 01 02 03 04 05 11 00 06 12 21 31 13 41 07 22 51 61 14 32 71 08 15 23 81 91 42 Data Ascii: JFIFCCQXU!1A"Qa2q#B
2024-05-15 22:37:37 UTC	16384	IN	Data Raw: ed 02 e7 52 5b 72 c5 62 df bb 73 ed 86 c5 ac 6b 8e d7 b4 b4 fb 61 46 cb b8 d1 b0 b6 39 42 9a 19 4c 87 63 97 1c 0a b0 56 a5 6e 37 e6 fc 9c 7d bd a5 fc 35 79 17 1c e5 5b 35 9e 73 15 4e 93 26 90 2a 4f 3f 4b 7c 8e a4 70 d7 97 90 40 fa dd 23 be 26 c6 b4 ee ea 98 64 71 1b 7a 29 a9 ce ea 81 97 85 1d 6c bd 1d 25 01 2a 71 0f 38 81 7e f7 45 f4 9b f7 b8 ec 0f 6c 2b bb 2f 76 eb b0 87 7a ed bb 42 ad ca 55 ba 8b 4e 4b a5 22 b4 aa 4c 39 ed 29 b9 0e ab 52 92 a0 3c c1 3a 46 fb 90 06 1c f8 d9 5b 8b 54 63 8f 17 40 aa d7 9b 79 b9 1a 1a 96 a7 1f 4d d4 12 da 6c ab f3 cf 7c 16 ed 23 22 82 a0 24 9a 0b 42 ff 00 d6 95 72 4e 4c 85 02 a5 4f 5b 8a 8b 21 0b 6a 43 4e 14 0d 23 50 57 91 24 79 88 57 cc 2c 7b f3 be 12 d8 5a 24 34 79 0b 49 99 c1 81 a4 2d eb 20 f8 eb 97 64 53 e9 c6 bb 12 22 Data Ascii: R[rbskaF9BLcVn7}5y[5sN&O?K\|p@#&dqz)l%q8~El+/vzBUNK"L9)R<:F[Tc@yMl\|#"$BrNLO[!jCN#PW$yW,{Z$4yI- dS"
2024-05-15 22:37:37 UTC	1533	IN	Data Raw: 2d 07 a5 f0 b1 4e c1 21 05 c2 d5 fe 5c 8f 5a ae 53 6a 50 e2 c2 a7 ba f2 da d6 dc b9 aa 70 3c ca 00 3a 8a 10 85 26 ea 20 6d aa c2 fc fb fa 8d 0f 69 6a a4 1b 24 7d fd 17 3b f0 10 b7 c5 b5 08 3b 9b e0 a1 1f 77 33 48 51 f8 65 36 a5 ca 90 fa c8 75 c1 b9 21 03 e5 1e d7 23 7c 7a ed 33 dd 33 37 3b 0b ce eb 9a dd 34 80 37 36 15 dc 8c fb 4b 76 3a 7e 16 98 f3 4f 00 35 07 5f 0e 24 9e fa 6c 80 7f 5c 3d ac 90 1c 91 4b 9c e7 c2 47 84 10 7e 49 96 73 b4 52 42 de a6 38 5a 1c a0 24 1d 5e c4 dc 5b f2 c5 65 8d ee 69 68 2a d0 6a 5b 13 f7 16 d8 f7 a5 a5 d3 be d3 71 e9 f0 1b 86 aa 55 4a 3b 2d b6 52 19 8f 30 34 15 74 94 dc a8 a5 46 d6 f4 fe 78 e1 bf b2 cc 82 8b d7 72 3e d9 03 3d df df fc 2b 5c a1 f6 81 c8 f2 fa cd d4 28 cf d0 dc 42 14 be ac 85 a5 c6 dd b1 03 fb c5 dc 92 a2 4e db Data Ascii: -N!\ZSjPp<:& mij$};;w3HQe6u!#\|z337;476Kv:~O5_$l\=KG~IsRB8Z$^[eih*j[qUJ;-R04tFxr>=+\(BN
2024-05-15 22:37:37 UTC	16384	IN	Data Raw: a0 da 92 dc 79 4f d2 96 d8 60 f9 e3 82 95 21 3b 2b cc 0a 77 f5 dc fe 98 53 48 0e b4 ee ed ce e0 2b 0c b7 97 a6 48 76 44 55 3e cc 02 09 58 72 42 fc a3 74 9e 45 f7 c2 25 d4 41 08 2f 90 a6 bf 4e e2 01 aa 5a 66 55 f0 db 20 d5 52 eb 95 7c d1 50 12 9f 52 6e cb 31 52 da 01 1a 77 d6 75 5e e4 1e c3 9c 62 1d a6 c2 2e 30 b6 69 f4 6c 90 51 72 d0 ea 5e 18 64 e5 c4 6b e1 29 53 e6 2d b5 97 09 5c fd d7 63 7b 58 01 b1 38 c4 ce d1 01 d7 4b a0 de cc 88 73 ca 2a ca fe 12 56 df 5a 6a 54 4c 87 41 a5 b8 90 52 89 72 1e 5a ca 41 bd ef ac 9b 2b 73 73 6e e7 1a 7f 1c e7 e0 34 ad 1f 82 85 80 e0 05 ae 64 6c a7 4d ca a9 71 87 e3 d3 21 ce 55 fa bf 06 de ad ec 2f 6d 29 f3 5c e2 ae 99 ce c1 c2 68 8a 30 30 11 5a 44 78 a9 50 87 4e 71 d7 d2 92 12 0c 52 81 ef b9 b6 e4 f7 ef 81 bc f9 da 94 d5 Data Ascii: yO`!;+wSH+HvDU>XrBtE%A/NZfU R\|PRn1Rwu^b.0ilQr^dk)S-\c{X8Ks*VZjTLARrZA+ssn4dlMq!U/m)\h00ZDxPNqR
2024-05-15 22:37:37 UTC	16384	IN	Data Raw: c3 53 15 49 51 66 bf 28 d3 e3 a5 88 4b 78 96 96 a6 f4 ba 40 48 4d 8f 98 fa 13 61 dc fe 81 e4 34 d0 29 a4 10 57 63 d0 65 d3 1b 86 e5 59 99 10 e0 cd 64 c8 8a f2 9a b9 7d ab a8 6b 6e e4 05 0d 49 22 f7 ec 7d 30 b7 11 6a a7 2a 89 97 d2 05 d6 75 5b 8b f1 8e 83 4d 8c a6 52 9d 06 ac b8 bc 3a b4 b4 a5 02 b4 21 5a 6e 3f f2 fe 78 07 08 85 63 5e ac 33 29 c4 06 a9 2d 41 8e a4 82 d2 19 55 8e 8b 9f a9 df d4 ef 8a 1b e1 59 1d f8 69 45 84 8a 24 dc d3 29 90 b1 48 50 2b 2f 2e c8 6c 1d 92 10 0f ce bb df 6d ad 6c 72 35 8e 97 77 74 cc 5a 4b dc 41 a0 b7 4f 0d 7c 5e 5d 42 a0 8a fd 49 f4 cf 94 c2 3a 30 18 65 a5 3a cd 29 0a 50 4d f8 f3 48 70 91 a9 5b 90 2c 2e 2c 71 86 49 1f a7 da c6 1c 8f ad f9 aa b9 e4 1a 5a d4 44 52 b2 b4 26 25 b3 48 f8 55 3a be ac 97 60 32 d3 ca 72 f7 24 a9 c5 Data Ascii: SIQf(Kx@HMa4)WceYd}knI"}0j*u[MR:!Zn?xc^3)-AUYiE$)HP+/.lmlr5wtZKAO\|^]BI:0e:)PMHp[,.,qIZDR&%HU:`2r$
2024-05-15 22:37:37 UTC	7952	IN	Data Raw: ad 18 69 ba 9d 41 97 56 ca ff 00 01 63 e1 52 ea c2 42 ca 6e 75 81 7e 09 e6 fe db 61 0d 91 e1 bf 96 71 e8 a8 dd cf 34 d5 2a b7 06 54 a6 12 66 d9 d5 be ce a5 04 2c 6a 69 1b 90 9d 89 b9 bf 62 47 e4 71 37 d1 05 ce b3 ef 7f f8 a3 f7 33 93 7e cb 35 93 e1 fe 5e 83 58 9b 54 4c a9 15 0a bb 1a 3a d0 5f 92 a7 52 96 8a f5 3a 90 9b 58 29 40 de ca 36 16 16 f5 c7 5d 9a 99 4b 36 38 80 ce 9e 7e 89 ad 3e 1b b1 fb aa 4a 25 7e 15 63 37 1a 80 81 50 a9 21 b9 8e 49 44 48 4c 05 85 bc b5 28 ad 6a 72 e3 4a 42 34 26 c4 d8 e9 b5 ac 30 f9 5b b6 30 1a 40 c6 4f a7 92 a6 6b 0b 57 94 b6 6b b4 b5 54 2b 0c 3e 1a 88 e2 94 d4 57 34 21 3a c6 e0 85 03 65 59 24 0e 6c 37 1b e3 99 b7 60 a8 ce 4f 5f 34 41 f2 4c 64 bf 10 f2 e5 5b c4 8a 69 72 65 44 52 62 eb 7d 70 d9 82 56 ab 20 24 5d 69 4d d4 d2 35 Data Ascii: iAVcRBnu~aq4*Tf,jibGq73~5^XTL:_R:X)@6]K68~>J%~c7P!IDHL(jrJB4&0[0@OkWkT+>W4!:eY$l7`O_4ALd[ireDRb}pV $]iM5
2024-05-15 22:37:37 UTC	16288	IN	Data Raw: 19 23 7e 32 55 5c 03 78 58 f4 99 2c bf 25 6e a1 84 a5 05 57 0d dc d8 0f 4b e3 7b 5a 5a 2a d5 9a a2 29 5f 11 21 65 31 d0 10 84 ea 3a 41 b0 18 b5 d2 bd d2 65 6b 5a d7 60 85 0b 6e 40 de d8 36 07 2a 12 9c 06 c9 23 13 a2 21 3c d7 02 fb 83 80 78 51 5c d1 5d 52 5d 20 aa cc a6 cb 70 76 b0 de f6 f5 f4 c6 69 05 84 b7 0c 65 5b d7 eb 62 7b a0 34 be bb 44 59 32 03 45 b5 38 6e 6f 7b ee 70 88 a0 2c b2 56 70 c0 0d 84 45 94 bc 63 af e4 d8 52 62 53 44 36 e3 3c cf 44 a4 b3 62 8d ad ac 10 47 9a db 15 72 6d 85 49 a4 8e 53 6e e5 02 c0 50 ba 6b 21 b7 54 f3 2d 6b a9 38 4a 9c 98 f6 95 79 8f 3a 13 c2 7d 8f d7 1a 43 09 34 ee 3c 91 da a1 45 6d f0 f0 70 c8 23 52 8a 42 92 e1 bf be e3 7c 5c 86 d5 52 94 b7 0f 0e 93 97 69 66 12 1e ac b7 52 88 85 29 e7 23 a6 e1 1a 92 92 bd 01 2b f3 5d 45 Data Ascii: #~2U\xX,%nWK{ZZ)_!e1:AekZ`n@6#!<xQ\]R] pvie[b{4DY2E8no{p,VpEcRbSD6<DbGrmISnPk!T-k8Jy:}C4<Emp#RB\|\RifR)#+]E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50331	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	655	OUT	GET /steam/apps/2215430/ss_7e9e7e1f405f1ce0d932258c6ed5291ab426392a.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:38 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 61755 Last-Modified: Thu, 09 May 2024 19:00:51 GMT ETag: "663d1d63-f13b" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=78537 Expires: Thu, 16 May 2024 20:26:35 GMT Date: Wed, 15 May 2024 22:37:38 GMT Connection: close
2024-05-15 22:37:38 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 4e 10 00 01 03 03 02 04 04 04 02 07 04 07 06 05 04 03 01 02 03 04 00 05 11 12 21 06 13 31 41 07 22 51 61 14 71 81 91 08 32 15 23 42 Data Ascii: JFIFCCQXN!1A"Qaq2#B
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: 1a 0b a3 9a eb d0 62 32 ee ac ed 97 16 a4 fe f7 a6 4e fd 3d 7d a9 39 26 25 17 cd a4 46 b9 5f 13 6f d0 d4 45 6a 4e c5 4d 21 79 c2 4f 5f a7 be 73 d2 95 5d 71 c9 4c f2 6d f4 c4 64 32 8e 43 d2 1a 76 53 51 48 0a 71 0c 0c 24 9e 99 c9 19 3f c7 b5 55 df b3 22 92 6b 77 34 48 8f 76 8d 0e de cc 96 14 1d 0d 28 36 4a 75 1f 9e 49 3d 7b ec 3a 8a b2 2a 52 74 8b b7 a8 c5 49 14 d7 de 25 6a 74 67 db 6d 62 41 4a 02 80 75 00 36 76 d8 92 73 d3 e9 9a d9 1c 6d f7 e1 a3 34 f2 dd f9 28 27 5c 22 43 44 45 3a f4 70 5d 4e 93 1f 04 a1 19 19 d4 40 3b 8d b3 83 eb da a6 b2 34 b6 c5 d9 9e 95 59 52 ab d5 8e cd 3d f9 85 81 25 b5 a5 21 b5 a9 09 4b 49 07 aa 92 93 f2 1d bb ef 53 49 e4 e3 d8 4a 51 8b 6d 23 2b 75 bf 41 75 ff 00 8b 86 b9 30 dd 90 f8 6d 0b d4 9d 29 2a 18 d5 8f 7e be be e2 ab db b3 Data Ascii: b2N=}9&%F_oEjNM!yO_s]qLmd2CvSQHq$?U"kw4Hv(6JuI={:RtI%jtgmbAJu6vsm4('\"CDE:p]N@;4YR=%!KISIJQm#+uAu0m)~
2024-05-15 22:37:38 UTC	2871	IN	Data Raw: 1d b6 94 03 7a 93 96 f6 d3 b7 c8 74 15 e7 f5 7a 65 89 ee 47 5b 4f 97 7a a3 42 ec 44 2d 85 a9 c7 d2 fa 14 30 46 8c 67 7e da 77 cd 60 8c da 74 95 1a dc 78 e4 a0 7b 84 60 cf 84 e8 6e d2 88 8f a8 e1 2b 52 f5 14 ef b1 3f 31 da b6 2d 56 48 4b d5 3b 46 5e 8c 65 1e 15 14 3c 5d 6d 8d 6f 7d 2c c3 80 cc 42 e3 61 2e ba cb 61 3a c6 73 8d 5e 9b 0d ab 5e 96 4e 6b 74 e5 7e c5 19 fd 2e a2 31 c2 1c 34 d4 d9 19 75 d7 70 da 82 82 51 be 4f 51 b9 e9 53 d4 e6 78 e3 51 5d c8 e1 c6 a4 ed b2 ce 07 86 16 a8 b7 37 52 dd ad 09 86 52 57 97 dc 53 84 b8 55 95 2b ae 72 7d 4e 6b 2b d6 cf 62 f5 72 5e b4 f1 dc f8 e0 97 fe 80 d8 43 8b 0f 41 cf 7d 6d 2d 60 0f 6c 66 a3 f6 cc f5 c4 bf a0 fa 18 ef 94 3f 13 84 78 67 87 27 35 31 11 c2 24 28 10 85 29 45 67 1e b8 f6 f5 3d 2a b9 6a 35 19 e2 e3 7c 13 Data Ascii: ztzeG[OzBD-0Fg~w`tx{`n+R?1-VHK;F^e<]mo},Ba.a:s^^Nkt~.14upQOQSxQ]7RRWSU+r}Nk+br^CA}m-`lf?xg'51$()Eg=*j5\|
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: c7 35 27 55 45 f0 71 3e b5 86 99 a0 30 ea 48 fc c2 8d ac 02 e6 a3 f7 87 de 8d ac 02 e7 b7 ff 00 c4 4f de 8d ac 56 84 97 da ff 00 e2 27 ef 46 d9 7b 05 a0 73 d1 fb e2 9e d9 05 a0 7c 53 43 aa c0 a3 64 bd 85 b9 01 b9 0d 24 10 16 15 9e ea de 9e c9 0e d0 48 7d b6 93 82 ee af 75 1a 1c 5b f0 2d c9 00 4b 69 5d 1c 4f de 96 c9 7b 06 e4 50 f1 15 ad 57 c2 96 bf 4b ae 24 42 30 eb 0c 90 0b 83 fb dd 45 6f d3 e5 58 13 7b 2d fb 99 b2 c5 64 e3 75 22 95 7e 1d 59 1c 41 65 01 a6 62 a1 3e 44 b6 32 b2 af de 52 fa 9f 95 6b 5a ec cb 96 ad 99 fe cd 8b f0 2b 5f f0 5f 87 65 43 71 a7 26 cb 5c 85 a7 06 41 78 93 ed b6 31 8f 6a 93 f8 8e 7b f9 55 11 fb 1e 26 aa d8 8e 1a f0 3a c3 60 ba 31 3b e2 e4 4a 71 95 05 a1 2a 01 20 28 12 77 c0 dc 7b 7b 55 19 35 99 27 1d a9 50 63 d1 63 84 b7 5d 9a 6e Data Ascii: 5'UEq>0HOV'F{s\|SCd$H}u[-Ki]O{PWK$B0EoX{-du"~YAeb>D2RkZ+__eCq&\Ax1j{U&:`1;Jq* (w{{U5'Pcc]n
2024-05-15 22:37:38 UTC	10072	IN	Data Raw: e2 9a 6c 85 0d 2a 32 77 c0 a9 ee 64 5c 53 23 ad 81 be c2 ac 52 2b da 88 cb 63 19 fe 95 62 95 94 b8 d0 c1 04 74 de ac 44 3b 08 e6 11 d8 9a 74 42 d8 a0 bd 43 d2 95 0e c3 0a 50 ce ff 00 7a 29 0a d8 9f 88 3d 0e 45 1b 50 5b 12 64 63 34 f6 91 dc c6 d7 20 ef 8a 92 8a 22 e4 c6 55 29 c4 e7 02 a6 a2 88 39 b1 85 cf 59 c8 c5 58 a0 8a 5e 47 d8 42 24 24 9d c5 3d a2 dc 3c 80 da c7 4f bd 47 94 49 24 c7 3f 47 c6 70 79 92 93 51 ea 49 79 25 d2 83 ee 34 6c 51 b2 48 48 1f 2a 9a cf 2f 24 1e 9e 1e 02 fd 0c d2 77 03 f8 51 d7 64 7e cf 10 c5 b9 28 ce d4 ba 8d 91 e8 a4 30 e4 06 c9 e9 52 59 19 5b c6 47 36 f1 9d 85 5a a7 c1 57 4d 01 31 08 a7 b8 8e ca 15 f0 bb 74 26 96 e1 ed 02 61 a5 5f 99 04 7b d1 bd 8d 42 c2 55 a9 0a 07 0a c7 d2 8e ab 1f 45 31 95 59 8f 65 66 a4 b3 2f 24 7a 01 7e 89 Data Ascii: l2wd\S#R+cbtD;tBCPz)=EP[dc4 "U)9YX^GB$$=<OGI$?GpyQIy%4lQHH/$wQd~(0RY[G6ZWM1t&a_{BUE1Yef/$z~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50332	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	424	OUT	GET /steam/apps/2215430/ss_d4ce3e825d9e48759f0e8732f2e705e71fa508d1.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:38 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 50890 Last-Modified: Thu, 09 May 2024 19:00:51 GMT ETag: "663d1d63-c6ca" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=78650 Expires: Thu, 16 May 2024 20:28:28 GMT Date: Wed, 15 May 2024 22:37:38 GMT Connection: close
2024-05-15 22:37:38 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff c0 00 0b 08 01 51 02 58 01 01 11 00 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 03 02 04 05 06 00 01 07 08 09 0a ff c4 00 53 10 00 02 01 02 04 04 04 02 06 07 05 04 07 06 05 05 01 02 03 04 11 00 05 12 21 06 31 41 51 07 13 22 61 71 81 08 14 32 42 91 a1 23 52 72 b1 c1 d1 f0 09 15 33 62 e1 16 24 34 43 17 35 53 73 82 b2 f1 25 36 74 92 a2 b3 18 37 38 63 75 83 44 45 c2 c3 ff da 00 08 01 01 00 00 3f 00 f0 92 45 b0 db 0e a2 4b fa 4f 2f cc 61 c4 50 ee 6c 6e 3b e1 ec 74 c5 b7 17 36 Data Ascii: JFIFCQXS!1AQ"aq2B#Rr3b$4C5Ss%6t78cuDE?EKO/aPln;t6
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: 03 29 3b 6d 7d 8d ad b1 fc 06 39 2f 16 c6 e9 c6 cb 4e 24 2f 03 4b 79 56 10 08 51 bd 9b 4f 20 7e 38 a5 56 56 d7 d3 cb 9d 64 f1 c0 b5 32 a3 b1 d1 24 7f a2 92 3e cf cc 0b ff 00 2c 56 7f e8 ea bc c7 4f 5b 94 52 ae 59 98 0f 53 d2 09 01 86 fb fd 92 79 0d f9 6e 31 37 96 f0 bf 13 c3 92 a5 25 67 d5 e1 49 5f 54 63 cc 52 57 63 71 6b 9d 3b fe ec 5c 38 6f 22 cc 72 ac 92 19 de 38 24 9d 58 43 aa 33 a9 8e ff 00 69 b9 02 3f ad f1 d1 38 6e 09 72 aa 78 62 9e 73 51 1b 5c 2d 44 a2 ce fb 9d 8f e5 8e 8b c1 75 8b 1c c5 e3 2c cd b8 92 4a 64 b8 bf ba db e5 8b ac b5 4d 24 0a f1 02 47 22 5f b7 c3 1c cf 8f 72 e3 4f 9c c7 99 1b bd 15 5a 7d 5a b2 29 14 15 61 f7 58 fe 63 e1 88 be 1f ce ea b2 4c fe 2a 00 af 2c 25 b4 43 3c 73 98 90 c6 3e e3 81 b3 15 bd 86 dd 7a 63 a2 2e 71 59 54 f2 24 f4 Data Ascii: );m}9/N$/KyVQO ~8VVd2$>,VO[RYSyn17%gI_TcRWcqk;\8o"r8$XC3i?8nrxbsQ\-Du,JdM$G"_rOZ}Z)aXcL*,%C<s>zc.qYT$
2024-05-15 22:37:38 UTC	2174	IN	Data Raw: aa db e3 ae f8 03 f4 92 a9 e0 da 19 f2 0c cf 33 d5 92 e6 33 47 53 2c 72 2e ad 12 2b 8b 97 3b 37 94 54 12 40 3b 15 17 b0 be 3d 3d e2 ff 00 14 f0 32 cf 98 c5 e7 d3 36 5e 5e 28 29 b2 da 5a 23 23 54 b4 8b 23 49 24 4a 1a c5 3e cb 5e c0 12 49 0d 72 31 e4 4f 14 f2 76 ca 92 93 35 a5 90 cf 96 19 85 3c 72 bc 6d 13 b9 20 10 08 db 53 2d ca 92 39 8e b7 18 86 a6 ae 2d 0e aa 99 12 28 ea a4 3a 51 25 2c 5c 8d af a0 f5 de db f7 c2 a9 e2 a7 ab 75 a7 86 9a 1d 4b 6b 2c b2 94 76 1b dc 03 cf e1 7e f8 1c d4 54 c4 30 59 1e 85 d7 a5 49 04 1e f6 23 af b6 09 53 9f 4d 3e 4f 47 97 4f 59 15 47 d4 99 be a9 35 ee f1 46 c4 96 8b 9e eb a8 ea 03 a1 2d 6d 98 e1 81 ae 8a 6b 93 50 2f 7d fd 1b 5f be 32 28 d6 ad 5f c9 98 9d 02 e6 c8 05 87 f5 6c 36 6a 99 61 d5 69 b9 1e 7a ad f9 5c e0 70 71 52 28 Data Ascii: 33GS,r.+;7T@;==26^^()Z##T#I$J>^Ir1Ov5<rm S-9-(:Q%,\uKk,v~T0YI#SM>OGOYG5F-mkP/}_2(_l6jaiz\pqR(
2024-05-15 22:37:38 UTC	16288	IN	Data Raw: cc 6b 69 32 9c be a2 ba ba a6 1a 2a 1a 74 32 4d 53 53 20 8e 28 94 6e 4b 33 10 00 1e e7 1f 23 bf b5 2b e9 0b c0 9e 39 66 be 1f 65 1c 09 c4 74 5c 4b 0e 4c 6b 9a b2 a2 85 5c aa 4b 21 89 51 43 b2 80 e0 aa 31 ba 92 2f 8f 13 e4 28 f4 86 57 68 bc f8 3c a2 ee c0 5b ca 6f bb 72 7a f5 ef 8b 16 68 fc 1a f1 50 4e df 59 cc 26 57 1f 5d 86 19 b4 30 5b 6e ca cd d2 f6 ee 46 24 a2 af e1 dc 91 6a aa 72 21 35 24 d3 52 ab 44 27 a8 70 81 ac 41 52 03 6e 76 be fc ff 00 2c 26 8e af 85 eb f3 91 26 6f 1b a5 45 3a 2a 87 a7 07 c9 ab 7b 1b b5 80 1a 37 b7 2f e7 86 7c 55 98 42 32 b8 e8 e9 cc 94 b2 ca c8 f2 4d 08 11 c5 29 de e4 2a f3 00 69 03 e1 73 b9 38 bc 7d 1b be 90 fc 69 f4 6c ce 6a ea 38 7e ae 96 b7 27 cc c2 ae 71 90 d7 c5 e6 52 66 30 ad c1 56 3c d5 b4 b3 00 ca 7a d8 86 1b 63 d1 1c Data Ascii: ki2t2MSS (nK3#+9fet\KLk\K!QC1/(Wh<[orzhPNY&W]0[nF$jr!5$RD'pARnv,&&oE:{7/\|UB2M)*is8}ilj8~'qRf0V<zc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50333	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	655	OUT	GET /steam/apps/2215430/ss_a02b32b20c30550b5c7e872309872082a62bb01d.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:38 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 102150 Last-Modified: Thu, 09 May 2024 19:00:51 GMT ETag: "663d1d63-18f06" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=78604 Expires: Thu, 16 May 2024 20:27:42 GMT Date: Wed, 15 May 2024 22:37:38 GMT Connection: close
2024-05-15 22:37:38 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 08 01 00 09 ff c4 00 57 10 00 02 01 03 03 02 05 01 05 05 02 0a 07 05 02 0f 01 02 03 04 05 11 00 12 21 06 31 07 13 22 41 51 61 08 14 32 71 81 15 42 91 a1 Data Ascii: JFIFCCQXW!1"AQa2qB
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: 4e 48 71 76 84 56 53 54 46 d7 ad 6b af 3e 6b 4b 0d 8c 93 11 24 2d 9f 72 ed 2b 40 6b 51 b5 eb 5e 4b 2f ba d2 c9 4a 27 61 48 b8 32 80 be ad c8 14 93 f8 47 b9 04 03 9c 71 df 5d 18 cc 5f 74 68 8f bf 7e 8b a6 7b 1e d7 13 97 7f 55 79 d3 a9 28 a9 69 64 84 f9 ac 80 aa 29 d8 4f 20 64 7e 47 db f8 ea f3 eb b2 a6 ae 8f 06 c2 06 cb 38 f1 4b c4 29 ab 27 9e c9 0c eb 25 25 2c cc 24 91 54 0f 3a 40 70 71 c7 0a 31 db dc 8c fc 6b c3 ff 00 13 71 d3 8b 95 d8 58 3b b1 b7 43 ff 00 91 1d 7c 01 d9 72 7c 5b 88 ba 67 3b 0e cd 1a 0f b9 1f a2 ca e7 99 e5 2e c0 f1 fd d6 d7 9c 17 5e ab 9a 3a ea ab dc 6e 7e da aa 53 27 69 d3 2d df df 8d 4d 9a 1b 49 74 4f d9 6e d7 49 1d 5d eb a8 6b 65 89 2e 14 b0 95 a3 96 68 4c 84 6c 4c b6 d3 fb a4 e5 46 e1 82 3d 8f cf a9 7e 1b c1 19 e2 76 32 46 e6 2e 70 Data Ascii: NHqvVSTFk>kK$-r+@kQ^K/J'aH2Gq]_th~{Uy(id)O d~G8K)'%%,$T:@pq1kqX;C\|r\|[g;.^:n~S'i-MItOnI]ke.hLlLF=~v2F.p
2024-05-15 22:37:38 UTC	2548	IN	Data Raw: 4f 09 06 2b 13 25 c6 d2 41 e7 c9 6f 60 78 7e 33 1a fa c3 b0 91 d7 97 ba 7b ac bc 32 b8 74 82 47 24 80 56 52 15 07 ef 94 d1 93 0a 92 71 b4 9f 63 9f 9c 7d 35 a8 70 b3 44 4b 66 14 ae e2 f8 66 2f 00 7f 8c dd 3a 8d be fc d0 6c 8e d1 e5 09 39 1f bc 74 02 dc ab 2d 40 9e 57 93 29 18 dc df 27 50 27 44 82 66 25 68 dc 87 1c 7b ec 23 42 d7 9a 92 79 00 67 c0 2d b4 73 ce 9d 35 27 32 aa 73 9c fc 8d 48 68 a2 bd 20 46 a5 81 e3 d8 69 d2 4d 89 cb 76 e0 7c 8d 24 c1 29 29 c5 43 60 33 29 c7 e7 a8 9a ab 2a 63 a2 9d d2 77 8e 99 82 e4 52 f2 b7 26 84 37 f8 fa 58 89 58 c8 c9 f5 2e dc b0 21 5b 20 10 70 32 3b 6b 98 77 18 0c 9a b2 66 60 3e ff 00 b2 de 83 87 34 80 e9 7d 96 c5 5f 5d 1b bb 8a 51 08 52 80 3c d4 f1 80 b2 63 20 1c fb 1e 31 83 ea 04 10 79 07 5e cd c1 71 18 6c 48 38 8c 01 68 Data Ascii: O+%Ao`x~3{2tG$VRqc}5pDKff/:l9t-@W)'P'Df%h{#Byg-s5'2sHh FiMv\|$))C`3)*cwR&7XX.![ p2;kwf`>4}_]QR<c 1y^qlH8h
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: 49 03 38 6c 70 55 f9 0d c7 b1 c7 3d f5 e8 7c 23 8d ca d6 9c ac a7 0d 29 c6 ec 9e 9f 74 8d 86 e2 72 42 f2 d8 2a ea b5 37 64 9f af cb 9a 8d d4 55 15 57 88 2d f1 54 cf b5 11 5d 4a 07 0c 07 ab b8 c6 3b ea 32 c1 3e 3a 4c ae d0 75 b0 7f ca cb c7 3a 6c 6b 99 db 1d 35 e6 0e e7 92 1f ab 8e db 4b 14 d1 ee 69 67 c0 11 97 ce d3 f3 9c 6b 8a c6 42 f8 f1 26 36 3e da 39 8d 35 e6 b9 e9 62 ec dd 95 a6 c2 aa 48 c3 b7 0c a3 9e 15 41 1c 7e ba 2b 45 0a b4 13 e2 97 00 c4 e5 09 e0 8d 4c 0a 4c ab 5d be eb 75 32 9c 90 b2 07 c0 38 cf 23 55 e5 dd 5c 87 65 6c f1 88 8e 10 7a 0f 23 f2 d1 63 d9 55 70 01 c6 93 b0 c8 e8 be 92 54 fd 0e 8a 14 0a bb b0 ed 9a 50 26 39 3f 5d 49 47 c9 1b c4 aa f1 60 2e 70 30 a0 69 20 a8 f3 5b 24 56 0c c7 19 ec 0e 99 25 33 a6 ad 06 6a 9a d4 41 92 ae 33 9f c8 1f Data Ascii: I8lpU=\|#)trB*7dUW-T]J;2>:Lu:lk5KigkB&6>95bHA~+ELL]u28#U\elz#cUpTP&9?]IG`.p0i [$V%3jA3
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: 96 db 07 03 53 49 25 01 39 f9 d4 08 e6 92 f6 3c fa bd d8 7b ea 4d 49 4b 4f 44 67 e7 e7 44 51 4d 2b 9e 76 b1 18 1f c7 50 26 c6 89 93 b5 8f e9 8c 33 71 b4 67 3a 62 74 4e 05 aa da 8a 9f 37 0a a3 0a 3b 0d 0c a9 81 49 b6 03 dc e3 51 4e ba e2 fb f6 c1 ea be a6 06 9e 1b 65 b2 9e 16 c2 88 88 67 64 1f 9e 40 3a 07 e5 5a 11 f5 40 37 18 a8 fa 86 a1 ab af 37 43 e7 11 bb ee f4 c9 fd 90 fd 3f e1 ab 4d 69 68 a4 d7 4a 25 fe 3a 1e a8 b8 d0 d1 5b a1 a7 a0 08 04 4b 2a 0d a1 8f cb 7f eb 8d 39 34 13 34 93 ba d4 7a 43 c3 3e 8e e9 ea 26 b8 5e 6f 72 d2 d7 c0 11 da 09 20 43 93 ee 63 7e 43 af d7 04 8f 8d 66 3c bd e2 91 17 42 f8 65 e2 ff 00 46 4d 67 a9 6b 37 50 35 39 a5 75 53 05 73 c7 14 45 c9 c7 ef 72 47 3d f1 db 54 b2 ba e8 a6 5b 2d 87 a8 2d bd 45 f7 77 a1 bc 5a de 72 0f 94 2d f5 Data Ascii: SI%9<{MIKODgDQM+vP&3qg:btN7;IQNegd@:Z@77C?MihJ%:[K*944zC>&^or Cc~Cf<BeFMgk7P59uSsErG=T[--EwZr-
2024-05-15 22:37:38 UTC	7952	IN	Data Raw: 8e 66 de 94 76 af 40 6e fc 6c 04 a3 8d cd d4 04 5d 4d 68 be 54 5a a5 ab ba 74 e3 25 c9 a2 f5 35 42 c7 6f 85 50 03 87 3e 66 dc 1c 13 9e 72 75 a7 07 0e 81 83 2b e4 cc 05 58 1b 0f af cd 69 88 80 61 cc 2c fb 52 a5 4b 2f 50 cd 69 8a a7 a7 fa 5a 56 9c 40 b1 6f 33 46 fb 41 24 17 8b 12 02 43 03 82 58 3f 3e f8 c0 d6 54 bf 87 e2 7b 5c 04 a0 b7 96 84 d7 ad 80 15 33 85 73 9a 48 6d 8f bd b5 55 7d 3b 4d d5 96 91 74 a5 4e 8e 88 ca 76 94 fd a6 40 31 63 f0 92 49 24 e0 71 df 1c 7d 34 d1 f0 0c 33 88 91 e2 dd e1 60 1f 1d 7e 6a 2c c3 38 ea 58 9c a6 b5 78 93 5d 78 a8 13 f4 da a1 90 6c 46 8e 7d 91 e0 e7 f0 80 09 7c 93 ac bc 5f e1 e6 62 64 2e ba 03 7d 2f ea 54 4e 0a 47 ba b2 a3 cb 07 84 dd 43 5b 4b 44 27 b4 45 65 ad da cb ca 09 e3 98 29 c1 12 06 c0 53 d8 fe 2c f6 d3 37 f0 f4 19 Data Ascii: fv@nl]MhTZt%5BoP>fru+Xia,RK/PiZV@o3FA$CX?>T{\3sHmU};MtNv@1cI$q}43`~j,8Xx]xlF}\|_bd.}/TNGC[KD'Ee)S,7
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: 83 5b 2f d3 9f 07 e9 a4 ea 9e 8f b2 75 33 d2 bc 56 ba 9a 75 a9 92 ac 57 a1 95 ce 30 c1 21 19 c9 56 04 63 23 3e e3 1c 6b d2 9b 8b ce d0 1b ab 88 e9 a7 bf ea bb 08 5e 1e d6 96 8d 4f 34 51 43 e1 fd bd a9 9a e2 ea 2a 1f 73 3e c4 8b 32 32 96 c8 5d 81 02 82 78 24 64 81 f4 ef ab 0f 98 87 56 df 45 64 b1 b6 4f 34 48 dd 35 4d 41 46 f5 5e 5d 11 96 79 14 d3 0a b6 70 e1 bd d4 92 e4 0f 7e 00 19 d5 76 ca e7 3b 2e ba 6e 95 02 68 2b 5a 0e 9a b8 75 5d 1c fb e9 ed d6 c6 4c 26 e8 91 66 20 8f de 46 dc 76 b7 fa 38 18 1f 43 aa 8f c4 32 12 00 24 fd fa 28 17 50 ab 2a 86 ea 14 5c 9a 4b bd de 82 d9 1d 32 ec 06 a9 4c 11 95 1c 19 01 53 eb 6e 3e 31 9f 81 ab 4c 77 73 2c 6d 26 fa 51 3f d9 2e e8 a0 4a fa 9a 3b 0d 54 f5 71 c3 b6 e9 3d 46 dc 49 04 72 33 30 c0 fc 2c cb b4 64 63 d5 90 35 07 Data Ascii: [/u3VuW0!Vc#>k^O4QCs>22]x$dVEdO4H5MAF^]yp~v;.nh+Zu]L&f Fv8C2$(P\K2LSn>1Lws,m&Q?.J;Tq=FIr30,dc5
2024-05-15 22:37:38 UTC	10072	IN	Data Raw: 5d 5c 23 e9 e1 5c 0c d0 ad 8b c9 54 ad c5 af cb 4d 87 18 53 2a 90 e7 27 19 2c 38 cf 7d 36 14 19 5a 1d 33 6d d7 dd ef 5f cb 6f 64 ec d1 a5 d2 b5 0b fe d5 b4 f5 a3 45 41 6b b7 d1 50 59 12 02 b2 d4 d1 af de 14 29 3c bf a4 fa 76 fc b0 f7 d4 de c9 63 fe 21 79 06 fc bd 3c 90 43 8b bb d1 dd 26 29 68 ba 87 a1 2e b8 b3 57 4f 59 42 3d 2b ba 44 8d 9e 3f 62 d8 e7 f2 23 5a 70 c9 0e 2a 32 25 ab f7 fe ca e3 0d 8a bf d9 3f 4b d6 57 de a3 0d 6b a9 ea aa 71 73 93 07 cc 92 9a 31 54 36 1c 6c f3 58 1d c4 67 8d dc f3 f5 d0 7f 27 0c 1d e7 b6 87 fe 27 4d 7c 3f 64 cd 8d a3 47 1a f2 51 2e b5 77 c9 da 96 2a ba 7b b7 55 cd 12 b2 23 d4 52 43 0c b4 c9 f2 1b 3b 58 12 3b 60 7c 83 f3 1e cd 98 57 76 ad 70 ca 7d 54 5c 1b 85 76 70 49 f6 48 5e a9 7a 1b 50 9a 37 bb 41 51 16 13 ee 90 46 29 e3 Data Ascii: ]\#\TMS',8}6Z3m_odEAkPY)<vc!y<C&)h.WOYB=+D?b#Zp2%?KWkqs1T6lXg''M\|?dGQ.w*{U#RC;X;`\|Wvp}T\vpIH^zP7AQF)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50334	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	401	OUT	GET /steam/apps/2215430/capsule_616x353.jpg?t=1715792238 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:38 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 68283 Last-Modified: Tue, 20 Feb 2024 19:37:52 GMT ETag: "65d4ff90-10abb" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=584367 Expires: Wed, 22 May 2024 16:57:05 GMT Date: Wed, 15 May 2024 22:37:38 GMT Connection: close
2024-05-15 22:37:38 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 01 05 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 00 04 06 07 08 05 09 0a ff c4 00 4e 10 00 02 01 02 04 03 05 05 05 06 04 05 02 03 07 05 01 02 03 04 11 00 05 12 21 06 31 41 07 13 22 51 61 08 14 32 71 81 09 42 91 Data Ascii: JFIFCCahN!1A"Qa2qB
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: dd 2d aa b5 b9 52 47 56 33 64 cb a3 a5 8c e5 64 05 91 48 1a 40 23 73 7e 77 e7 f5 fc 70 a7 cd ca 97 74 98 ab ea 1b d3 56 d2 57 c5 43 4d 4b 1f ec c7 36 90 2a 02 08 37 d4 58 df 9f f6 1c ef b2 a4 a5 cb 15 81 69 ab 6f 24 4f 49 51 97 57 2c 14 94 e1 a8 65 b6 b1 a6 e2 d7 df 51 3b f2 fd 1e 58 34 e2 ea 2b 05 4e d6 77 0e a2 9e a3 2e 96 18 32 da 25 5a 76 3a a4 52 2e 1b a1 b9 27 95 bf af 95 8c 92 94 5a 5a 6b 01 53 cc 99 35 b4 b3 50 ba 2e 59 4e 3b 87 3f bc 54 00 f2 f9 f4 fd 6d 84 93 87 f0 d0 4d 3f 11 59 82 c9 97 d3 a3 65 90 20 69 5b 70 ab cc 0e 9b f4 e7 fe 98 b2 4e 0b f1 a1 1a 6f bc 36 aa 96 7a 08 8c f4 50 22 d4 48 01 90 c6 ba 88 3d 40 1e 57 c2 51 70 57 05 92 26 9e 24 45 5d 1c f4 f0 a5 5c 10 0f 7d 6b 77 a1 17 7b 9e 64 0f c3 97 f3 c2 51 71 5c d1 59 09 a7 87 b0 2d 4e f1 Data Ascii: -RGV3ddH@#s~wptVWCMK6*7Xio$OIQW,eQ;X4+Nw.2%Zv:R.'ZZkS5P.YN;?TmM?Ye i[pNo6zP"H=@WQpW&$E]\}kw{dQq\Y-N
2024-05-15 22:37:38 UTC	3281	IN	Data Raw: 5d 76 61 22 51 50 50 20 91 a9 a0 82 35 b7 85 d8 9b 5b 99 db c4 ce c4 05 e4 3a a5 44 3d 1e 18 f6 26 ed 43 8e 3b 2a ac e3 6c aa 91 29 a4 92 11 2e 5d 91 55 82 95 99 9c 0c 0f 79 2c 2b 6b 0b 8b 68 d4 41 90 5f 45 fc 3a be 5e a7 d4 f8 7d 2d 6e c9 bf d5 f4 5f f7 af 91 e9 8f 0d a9 28 73 23 9f 78 5f 89 33 5e ce 78 96 83 35 c8 ea 73 2c 9b 88 b2 c9 cb cd a6 43 0c 91 48 8f b6 83 b1 52 39 58 ee 08 fa 63 ea e1 ab 3c db 1f 53 73 0c f2 0f b4 73 d8 37 34 ce e5 a5 82 3e d3 b8 38 4e ce 61 89 43 b5 54 31 87 65 40 bb f7 75 50 e9 1a 6c 17 bd 1c 8f 74 0e 39 57 2c 8d 6e 8f 92 d9 85 40 ab 90 8a 78 cf 76 10 46 bb 6e 7f c4 c7 a6 e7 fa 63 b1 82 e3 24 cb e7 9e aa 9a 8e 10 b3 54 4f 3a 33 44 84 37 85 77 df a7 52 77 f2 df 00 7d d3 f6 ba ed db 83 3d 94 a8 f8 72 6a ae cc 72 ce 22 4c f5 ea Data Ascii: ]va"QPP 5[:D=&C;*l).]Uy,+khA_E:^}-n_(s#x_3^x5s,CHR9Xc<Sss74>8NaCT1e@uPlt9W,n@xvFnc$TO:3D7wRw}=rjr"L
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: 38 85 7d 4e 86 27 e2 66 ff 00 97 e7 6b 0d bf a6 35 ce 89 ca ce d5 f6 21 f6 59 e2 ef 65 2e cb 38 eb 29 e2 aa dc a6 b6 7c c6 51 55 4b fb 2a 79 65 11 aa c0 54 dd 9e 34 20 93 c8 00 6d be 39 ca 56 58 a3 e4 df 01 71 99 e1 ba e9 16 a6 19 21 ad 47 57 15 94 92 68 65 65 36 b9 ff 00 1d ba 5e fd 31 d8 ca 36 5e 6f c6 99 3d 4c 69 5f 5b 3b 64 b9 ac 01 2a 28 b3 cc b6 43 0d 4a fc 2b 7b 8b df 48 04 81 b9 2d d4 74 94 0f a2 bc 17 c5 b9 f6 57 ec 1b c4 d9 d7 14 4b 59 98 67 0b 94 c9 54 66 75 48 aa 58 3d 3c 2f 11 60 46 95 93 4b a1 dc 1d f9 df 72 79 f5 34 b6 39 5f d8 97 24 8b 37 c8 7b 5d a6 e1 0e 22 8b 87 fb 57 ce 60 a6 a0 ca 29 33 f9 fb a4 08 ab 79 64 89 82 9b c9 a9 9c d8 03 6d 2a 74 d8 9c 6d 91 23 60 7b 33 70 0f 14 70 57 b5 3f 00 53 76 99 94 9c a3 b4 4a 3a 4a ba 5f 7b 4a 84 a8 Data Ascii: 8}N'fk5!Ye.8)\|QUKyeT4 m9VXq!GWhee6^16^o=Li_[;d(CJ+{H-tWKYgTfuHX=</`FKry49_$7{]"W`)3ydm*tm#`{3ppW?SvJ:J_{J
2024-05-15 22:37:38 UTC	16192	IN	Data Raw: 7b b5 dc 93 3e a3 9d 45 7e 58 2a 6b d6 79 3c 45 5a 3a 79 19 5b e6 1a d6 3e 76 c6 9e d4 44 6b 7a 35 8e a6 79 52 46 d4 ed 72 ba 8e e5 af d0 f9 fc f9 e3 44 36 0f 13 51 51 57 f6 71 c0 99 d2 b0 5c c2 9e ae ab 22 cc 5a f6 25 62 64 92 06 23 ff 00 c3 99 96 fe 51 8c 42 9a f6 5b d3 c0 f1 12 1c c5 33 28 0d d3 d7 f9 62 90 b5 33 c8 45 8c 8d 6f 2b e0 00 c0 1e bf 0d f0 8e 79 c6 35 33 53 64 59 4d 66 71 51 0a 09 1e 1a 28 5a 57 0b 70 b7 d2 a0 9e 64 60 0c 99 7d 9f fb 50 79 bb 94 ec e7 8a e5 93 9e 98 f2 4a 96 fc 93 12 d0 a3 1c cf 78 27 88 b8 5e 3e f3 3a c8 33 3c a2 3e f3 ba d5 5f 47 24 23 5d 89 d3 76 03 7b 02 6d e9 8a 0f 5b b2 79 f2 f8 f8 fb 21 6c f7 35 ac c9 38 74 55 c7 16 61 99 51 c2 66 6a 48 1d c0 67 31 df c6 05 ee 57 a8 06 c0 9b 0c 40 76 57 b7 87 b1 0e 4b d9 5f 65 fc 27 Data Ascii: {>E~X*ky<EZ:y[>vDkz5yRFrD6QQWq\"Z%bd#QB[3(b3Eo+y53SdYMfqQ(ZWpd`}PyJx'^>:3<>_G$#]v{m[y!l58tUaQfjHg1W@vWK_e'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50335	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	424	OUT	GET /steam/apps/2215430/ss_2db8246d9743a5c6c1c85fd8539d2a73a4f1ac36.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:38 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 90968 Last-Modified: Thu, 09 May 2024 19:00:51 GMT ETag: "663d1d63-16358" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=78592 Expires: Thu, 16 May 2024 20:27:30 GMT Date: Wed, 15 May 2024 22:37:38 GMT Connection: close
2024-05-15 22:37:38 UTC	16043	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 01 08 00 09 ff c4 00 55 10 00 01 03 02 05 02 04 03 05 05 04 05 08 08 04 07 01 02 03 04 05 11 00 06 12 21 31 13 41 07 22 51 61 14 32 71 08 15 23 81 91 42 Data Ascii: JFIFCCQXU!1A"Qa2q#B
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: ed 02 e7 52 5b 72 c5 62 df bb 73 ed 86 c5 ac 6b 8e d7 b4 b4 fb 61 46 cb b8 d1 b0 b6 39 42 9a 19 4c 87 63 97 1c 0a b0 56 a5 6e 37 e6 fc 9c 7d bd a5 fc 35 79 17 1c e5 5b 35 9e 73 15 4e 93 26 90 2a 4f 3f 4b 7c 8e a4 70 d7 97 90 40 fa dd 23 be 26 c6 b4 ee ea 98 64 71 1b 7a 29 a9 ce ea 81 97 85 1d 6c bd 1d 25 01 2a 71 0f 38 81 7e f7 45 f4 9b f7 b8 ec 0f 6c 2b bb 2f 76 eb b0 87 7a ed bb 42 ad ca 55 ba 8b 4e 4b a5 22 b4 aa 4c 39 ed 29 b9 0e ab 52 92 a0 3c c1 3a 46 fb 90 06 1c f8 d9 5b 8b 54 63 8f 17 40 aa d7 9b 79 b9 1a 1a 96 a7 1f 4d d4 12 da 6c ab f3 cf 7c 16 ed 23 22 82 a0 24 9a 0b 42 ff 00 d6 95 72 4e 4c 85 02 a5 4f 5b 8a 8b 21 0b 6a 43 4e 14 0d 23 50 57 91 24 79 88 57 cc 2c 7b f3 be 12 d8 5a 24 34 79 0b 49 99 c1 81 a4 2d eb 20 f8 eb 97 64 53 e9 c6 bb 12 22 Data Ascii: R[rbskaF9BLcVn7}5y[5sN&O?K\|p@#&dqz)l%q8~El+/vzBUNK"L9)R<:F[Tc@yMl\|#"$BrNLO[!jCN#PW$yW,{Z$4yI- dS"
2024-05-15 22:37:38 UTC	1533	IN	Data Raw: 2d 07 a5 f0 b1 4e c1 21 05 c2 d5 fe 5c 8f 5a ae 53 6a 50 e2 c2 a7 ba f2 da d6 dc b9 aa 70 3c ca 00 3a 8a 10 85 26 ea 20 6d aa c2 fc fb fa 8d 0f 69 6a a4 1b 24 7d fd 17 3b f0 10 b7 c5 b5 08 3b 9b e0 a1 1f 77 33 48 51 f8 65 36 a5 ca 90 fa c8 75 c1 b9 21 03 e5 1e d7 23 7c 7a ed 33 dd 33 37 3b 0b ce eb 9a dd 34 80 37 36 15 dc 8c fb 4b 76 3a 7e 16 98 f3 4f 00 35 07 5f 0e 24 9e fa 6c 80 7f 5c 3d ac 90 1c 91 4b 9c e7 c2 47 84 10 7e 49 96 73 b4 52 42 de a6 38 5a 1c a0 24 1d 5e c4 dc 5b f2 c5 65 8d ee 69 68 2a d0 6a 5b 13 f7 16 d8 f7 a5 a5 d3 be d3 71 e9 f0 1b 86 aa 55 4a 3b 2d b6 52 19 8f 30 34 15 74 94 dc a8 a5 46 d6 f4 fe 78 e1 bf b2 cc 82 8b d7 72 3e d9 03 3d df df fc 2b 5c a1 f6 81 c8 f2 fa cd d4 28 cf d0 dc 42 14 be ac 85 a5 c6 dd b1 03 fb c5 dc 92 a2 4e db Data Ascii: -N!\ZSjPp<:& mij$};;w3HQe6u!#\|z337;476Kv:~O5_$l\=KG~IsRB8Z$^[eih*j[qUJ;-R04tFxr>=+\(BN
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: a0 da 92 dc 79 4f d2 96 d8 60 f9 e3 82 95 21 3b 2b cc 0a 77 f5 dc fe 98 53 48 0e b4 ee ed ce e0 2b 0c b7 97 a6 48 76 44 55 3e cc 02 09 58 72 42 fc a3 74 9e 45 f7 c2 25 d4 41 08 2f 90 a6 bf 4e e2 01 aa 5a 66 55 f0 db 20 d5 52 eb 95 7c d1 50 12 9f 52 6e cb 31 52 da 01 1a 77 d6 75 5e e4 1e c3 9c 62 1d a6 c2 2e 30 b6 69 f4 6c 90 51 72 d0 ea 5e 18 64 e5 c4 6b e1 29 53 e6 2d b5 97 09 5c fd d7 63 7b 58 01 b1 38 c4 ce d1 01 d7 4b a0 de cc 88 73 ca 2a ca fe 12 56 df 5a 6a 54 4c 87 41 a5 b8 90 52 89 72 1e 5a ca 41 bd ef ac 9b 2b 73 73 6e e7 1a 7f 1c e7 e0 34 ad 1f 82 85 80 e0 05 ae 64 6c a7 4d ca a9 71 87 e3 d3 21 ce 55 fa bf 06 de ad ec 2f 6d 29 f3 5c e2 ae 99 ce c1 c2 68 8a 30 30 11 5a 44 78 a9 50 87 4e 71 d7 d2 92 12 0c 52 81 ef b9 b6 e4 f7 ef 81 bc f9 da 94 d5 Data Ascii: yO`!;+wSH+HvDU>XrBtE%A/NZfU R\|PRn1Rwu^b.0ilQr^dk)S-\c{X8Ks*VZjTLARrZA+ssn4dlMq!U/m)\h00ZDxPNqR
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: c3 53 15 49 51 66 bf 28 d3 e3 a5 88 4b 78 96 96 a6 f4 ba 40 48 4d 8f 98 fa 13 61 dc fe 81 e4 34 d0 29 a4 10 57 63 d0 65 d3 1b 86 e5 59 99 10 e0 cd 64 c8 8a f2 9a b9 7d ab a8 6b 6e e4 05 0d 49 22 f7 ec 7d 30 b7 11 6a a7 2a 89 97 d2 05 d6 75 5b 8b f1 8e 83 4d 8c a6 52 9d 06 ac b8 bc 3a b4 b4 a5 02 b4 21 5a 6e 3f f2 fe 78 07 08 85 63 5e ac 33 29 c4 06 a9 2d 41 8e a4 82 d2 19 55 8e 8b 9f a9 df d4 ef 8a 1b e1 59 1d f8 69 45 84 8a 24 dc d3 29 90 b1 48 50 2b 2f 2e c8 6c 1d 92 10 0f ce bb df 6d ad 6c 72 35 8e 97 77 74 cc 5a 4b dc 41 a0 b7 4f 0d 7c 5e 5d 42 a0 8a fd 49 f4 cf 94 c2 3a 30 18 65 a5 3a cd 29 0a 50 4d f8 f3 48 70 91 a9 5b 90 2c 2e 2c 71 86 49 1f a7 da c6 1c 8f ad f9 aa b9 e4 1a 5a d4 44 52 b2 b4 26 25 b3 48 f8 55 3a be ac 97 60 32 d3 ca 72 f7 24 a9 c5 Data Ascii: SIQf(Kx@HMa4)WceYd}knI"}0j*u[MR:!Zn?xc^3)-AUYiE$)HP+/.lmlr5wtZKAO\|^]BI:0e:)PMHp[,.,qIZDR&%HU:`2r$
2024-05-15 22:37:38 UTC	7952	IN	Data Raw: ad 18 69 ba 9d 41 97 56 ca ff 00 01 63 e1 52 ea c2 42 ca 6e 75 81 7e 09 e6 fe db 61 0d 91 e1 bf 96 71 e8 a8 dd cf 34 d5 2a b7 06 54 a6 12 66 d9 d5 be ce a5 04 2c 6a 69 1b 90 9d 89 b9 bf 62 47 e4 71 37 d1 05 ce b3 ef 7f f8 a3 f7 33 93 7e cb 35 93 e1 fe 5e 83 58 9b 54 4c a9 15 0a bb 1a 3a d0 5f 92 a7 52 96 8a f5 3a 90 9b 58 29 40 de ca 36 16 16 f5 c7 5d 9a 99 4b 36 38 80 ce 9e 7e 89 ad 3e 1b b1 fb aa 4a 25 7e 15 63 37 1a 80 81 50 a9 21 b9 8e 49 44 48 4c 05 85 bc b5 28 ad 6a 72 e3 4a 42 34 26 c4 d8 e9 b5 ac 30 f9 5b b6 30 1a 40 c6 4f a7 92 a6 6b 0b 57 94 b6 6b b4 b5 54 2b 0c 3e 1a 88 e2 94 d4 57 34 21 3a c6 e0 85 03 65 59 24 0e 6c 37 1b e3 99 b7 60 a8 ce 4f 5f 34 41 f2 4c 64 bf 10 f2 e5 5b c4 8a 69 72 65 44 52 62 eb 7d 70 d9 82 56 ab 20 24 5d 69 4d d4 d2 35 Data Ascii: iAVcRBnu~aq4*Tf,jibGq73~5^XTL:_R:X)@6]K68~>J%~c7P!IDHL(jrJB4&0[0@OkWkT+>W4!:eY$l7`O_4ALd[ireDRb}pV $]iM5
2024-05-15 22:37:38 UTC	16288	IN	Data Raw: 19 23 7e 32 55 5c 03 78 58 f4 99 2c bf 25 6e a1 84 a5 05 57 0d dc d8 0f 4b e3 7b 5a 5a 2a d5 9a a2 29 5f 11 21 65 31 d0 10 84 ea 3a 41 b0 18 b5 d2 bd d2 65 6b 5a d7 60 85 0b 6e 40 de d8 36 07 2a 12 9c 06 c9 23 13 a2 21 3c d7 02 fb 83 80 78 51 5c d1 5d 52 5d 20 aa cc a6 cb 70 76 b0 de f6 f5 f4 c6 69 05 84 b7 0c 65 5b d7 eb 62 7b a0 34 be bb 44 59 32 03 45 b5 38 6e 6f 7b ee 70 88 a0 2c b2 56 70 c0 0d 84 45 94 bc 63 af e4 d8 52 62 53 44 36 e3 3c cf 44 a4 b3 62 8d ad ac 10 47 9a db 15 72 6d 85 49 a4 8e 53 6e e5 02 c0 50 ba 6b 21 b7 54 f3 2d 6b a9 38 4a 9c 98 f6 95 79 8f 3a 13 c2 7d 8f d7 1a 43 09 34 ee 3c 91 da a1 45 6d f0 f0 70 c8 23 52 8a 42 92 e1 bf be e3 7c 5c 86 d5 52 94 b7 0f 0e 93 97 69 66 12 1e ac b7 52 88 85 29 e7 23 a6 e1 1a 92 92 bd 01 2b f3 5d 45 Data Ascii: #~2U\xX,%nWK{ZZ)_!e1:AekZ`n@6#!<xQ\]R] pvie[b{4DY2E8no{p,VpEcRbSD6<DbGrmISnPk!T-k8Jy:}C4<Emp#RB\|\RifR)#+]E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50336	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	424	OUT	GET /steam/apps/2215430/ss_7e9e7e1f405f1ce0d932258c6ed5291ab426392a.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:38 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 61755 Last-Modified: Thu, 09 May 2024 19:00:51 GMT ETag: "663d1d63-f13b" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=78558 Expires: Thu, 16 May 2024 20:26:56 GMT Date: Wed, 15 May 2024 22:37:38 GMT Connection: close
2024-05-15 22:37:38 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 4e 10 00 01 03 03 02 04 04 04 02 07 04 07 06 05 04 03 01 02 03 04 00 05 11 12 21 06 13 31 41 07 22 51 61 14 71 81 91 08 32 15 23 42 Data Ascii: JFIFCCQXN!1A"Qaq2#B
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: 1a 0b a3 9a eb d0 62 32 ee ac ed 97 16 a4 fe f7 a6 4e fd 3d 7d a9 39 26 25 17 cd a4 46 b9 5f 13 6f d0 d4 45 6a 4e c5 4d 21 79 c2 4f 5f a7 be 73 d2 95 5d 71 c9 4c f2 6d f4 c4 64 32 8e 43 d2 1a 76 53 51 48 0a 71 0c 0c 24 9e 99 c9 19 3f c7 b5 55 df b3 22 92 6b 77 34 48 8f 76 8d 0e de cc 96 14 1d 0d 28 36 4a 75 1f 9e 49 3d 7b ec 3a 8a b2 2a 52 74 8b b7 a8 c5 49 14 d7 de 25 6a 74 67 db 6d 62 41 4a 02 80 75 00 36 76 d8 92 73 d3 e9 9a d9 1c 6d f7 e1 a3 34 f2 dd f9 28 27 5c 22 43 44 45 3a f4 70 5d 4e 93 1f 04 a1 19 19 d4 40 3b 8d b3 83 eb da a6 b2 34 b6 c5 d9 9e 95 59 52 ab d5 8e cd 3d f9 85 81 25 b5 a5 21 b5 a9 09 4b 49 07 aa 92 93 f2 1d bb ef 53 49 e4 e3 d8 4a 51 8b 6d 23 2b 75 bf 41 75 ff 00 8b 86 b9 30 dd 90 f8 6d 0b d4 9d 29 2a 18 d5 8f 7e be be e2 ab db b3 Data Ascii: b2N=}9&%F_oEjNM!yO_s]qLmd2CvSQHq$?U"kw4Hv(6JuI={:RtI%jtgmbAJu6vsm4('\"CDE:p]N@;4YR=%!KISIJQm#+uAu0m)~
2024-05-15 22:37:38 UTC	2871	IN	Data Raw: 1d b6 94 03 7a 93 96 f6 d3 b7 c8 74 15 e7 f5 7a 65 89 ee 47 5b 4f 97 7a a3 42 ec 44 2d 85 a9 c7 d2 fa 14 30 46 8c 67 7e da 77 cd 60 8c da 74 95 1a dc 78 e4 a0 7b 84 60 cf 84 e8 6e d2 88 8f a8 e1 2b 52 f5 14 ef b1 3f 31 da b6 2d 56 48 4b d5 3b 46 5e 8c 65 1e 15 14 3c 5d 6d 8d 6f 7d 2c c3 80 cc 42 e3 61 2e ba cb 61 3a c6 73 8d 5e 9b 0d ab 5e 96 4e 6b 74 e5 7e c5 19 fd 2e a2 31 c2 1c 34 d4 d9 19 75 d7 70 da 82 82 51 be 4f 51 b9 e9 53 d4 e6 78 e3 51 5d c8 e1 c6 a4 ed b2 ce 07 86 16 a8 b7 37 52 dd ad 09 86 52 57 97 dc 53 84 b8 55 95 2b ae 72 7d 4e 6b 2b d6 cf 62 f5 72 5e b4 f1 dc f8 e0 97 fe 80 d8 43 8b 0f 41 cf 7d 6d 2d 60 0f 6c 66 a3 f6 cc f5 c4 bf a0 fa 18 ef 94 3f 13 84 78 67 87 27 35 31 11 c2 24 28 10 85 29 45 67 1e b8 f6 f5 3d 2a b9 6a 35 19 e2 e3 7c 13 Data Ascii: ztzeG[OzBD-0Fg~w`tx{`n+R?1-VHK;F^e<]mo},Ba.a:s^^Nkt~.14upQOQSxQ]7RRWSU+r}Nk+br^CA}m-`lf?xg'51$()Eg=*j5\|
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: c7 35 27 55 45 f0 71 3e b5 86 99 a0 30 ea 48 fc c2 8d ac 02 e6 a3 f7 87 de 8d ac 02 e7 b7 ff 00 c4 4f de 8d ac 56 84 97 da ff 00 e2 27 ef 46 d9 7b 05 a0 73 d1 fb e2 9e d9 05 a0 7c 53 43 aa c0 a3 64 bd 85 b9 01 b9 0d 24 10 16 15 9e ea de 9e c9 0e d0 48 7d b6 93 82 ee af 75 1a 1c 5b f0 2d c9 00 4b 69 5d 1c 4f de 96 c9 7b 06 e4 50 f1 15 ad 57 c2 96 bf 4b ae 24 42 30 eb 0c 90 0b 83 fb dd 45 6f d3 e5 58 13 7b 2d fb 99 b2 c5 64 e3 75 22 95 7e 1d 59 1c 41 65 01 a6 62 a1 3e 44 b6 32 b2 af de 52 fa 9f 95 6b 5a ec cb 96 ad 99 fe cd 8b f0 2b 5f f0 5f 87 65 43 71 a7 26 cb 5c 85 a7 06 41 78 93 ed b6 31 8f 6a 93 f8 8e 7b f9 55 11 fb 1e 26 aa d8 8e 1a f0 3a c3 60 ba 31 3b e2 e4 4a 71 95 05 a1 2a 01 20 28 12 77 c0 dc 7b 7b 55 19 35 99 27 1d a9 50 63 d1 63 84 b7 5d 9a 6e Data Ascii: 5'UEq>0HOV'F{s\|SCd$H}u[-Ki]O{PWK$B0EoX{-du"~YAeb>D2RkZ+__eCq&\Ax1j{U&:`1;Jq* (w{{U5'Pcc]n
2024-05-15 22:37:38 UTC	10072	IN	Data Raw: e2 9a 6c 85 0d 2a 32 77 c0 a9 ee 64 5c 53 23 ad 81 be c2 ac 52 2b da 88 cb 63 19 fe 95 62 95 94 b8 d0 c1 04 74 de ac 44 3b 08 e6 11 d8 9a 74 42 d8 a0 bd 43 d2 95 0e c3 0a 50 ce ff 00 7a 29 0a d8 9f 88 3d 0e 45 1b 50 5b 12 64 63 34 f6 91 dc c6 d7 20 ef 8a 92 8a 22 e4 c6 55 29 c4 e7 02 a6 a2 88 39 b1 85 cf 59 c8 c5 58 a0 8a 5e 47 d8 42 24 24 9d c5 3d a2 dc 3c 80 da c7 4f bd 47 94 49 24 c7 3f 47 c6 70 79 92 93 51 ea 49 79 25 d2 83 ee 34 6c 51 b2 48 48 1f 2a 9a cf 2f 24 1e 9e 1e 02 fd 0c d2 77 03 f8 51 d7 64 7e cf 10 c5 b9 28 ce d4 ba 8d 91 e8 a4 30 e4 06 c9 e9 52 59 19 5b c6 47 36 f1 9d 85 5a a7 c1 57 4d 01 31 08 a7 b8 8e ca 15 f0 bb 74 26 96 e1 ed 02 61 a5 5f 99 04 7b d1 bd 8d 42 c2 55 a9 0a 07 0a c7 d2 8e ab 1f 45 31 95 59 8f 65 66 a4 b3 2f 24 7a 01 7e 89 Data Ascii: l2wd\S#R+cbtD;tBCPz)=EP[dc4 "U)9YX^GB$$=<OGI$?GpyQIy%4lQHH/$wQd~(0RY[G6ZWM1t&a_{BUE1Yef/$z~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50337	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	424	OUT	GET /steam/apps/2215430/ss_a02b32b20c30550b5c7e872309872082a62bb01d.600x338.jpg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:38 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 102150 Last-Modified: Thu, 09 May 2024 19:00:51 GMT ETag: "663d1d63-18f06" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=78659 Expires: Thu, 16 May 2024 20:28:37 GMT Date: Wed, 15 May 2024 22:37:38 GMT Connection: close
2024-05-15 22:37:38 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 51 02 58 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 06 02 03 04 05 07 08 01 00 09 ff c4 00 57 10 00 02 01 03 03 02 05 01 05 05 02 0a 07 05 02 0f 01 02 03 04 05 11 00 12 21 06 31 07 13 22 41 51 61 08 14 32 71 81 15 42 91 a1 Data Ascii: JFIFCCQXW!1"AQa2qB
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: 4e 48 71 76 84 56 53 54 46 d7 ad 6b af 3e 6b 4b 0d 8c 93 11 24 2d 9f 72 ed 2b 40 6b 51 b5 eb 5e 4b 2f ba d2 c9 4a 27 61 48 b8 32 80 be ad c8 14 93 f8 47 b9 04 03 9c 71 df 5d 18 cc 5f 74 68 8f bf 7e 8b a6 7b 1e d7 13 97 7f 55 79 d3 a9 28 a9 69 64 84 f9 ac 80 aa 29 d8 4f 20 64 7e 47 db f8 ea f3 eb b2 a6 ae 8f 06 c2 06 cb 38 f1 4b c4 29 ab 27 9e c9 0c eb 25 25 2c cc 24 91 54 0f 3a 40 70 71 c7 0a 31 db dc 8c fc 6b c3 ff 00 13 71 d3 8b 95 d8 58 3b b1 b7 43 ff 00 91 1d 7c 01 d9 72 7c 5b 88 ba 67 3b 0e cd 1a 0f b9 1f a2 ca e7 99 e5 2e c0 f1 fd d6 d7 9c 17 5e ab 9a 3a ea ab dc 6e 7e da aa 53 27 69 d3 2d df df 8d 4d 9a 1b 49 74 4f d9 6e d7 49 1d 5d eb a8 6b 65 89 2e 14 b0 95 a3 96 68 4c 84 6c 4c b6 d3 fb a4 e5 46 e1 82 3d 8f cf a9 7e 1b c1 19 e2 76 32 46 e6 2e 70 Data Ascii: NHqvVSTFk>kK$-r+@kQ^K/J'aH2Gq]_th~{Uy(id)O d~G8K)'%%,$T:@pq1kqX;C\|r\|[g;.^:n~S'i-MItOnI]ke.hLlLF=~v2F.p
2024-05-15 22:37:38 UTC	2548	IN	Data Raw: 4f 09 06 2b 13 25 c6 d2 41 e7 c9 6f 60 78 7e 33 1a fa c3 b0 91 d7 97 ba 7b ac bc 32 b8 74 82 47 24 80 56 52 15 07 ef 94 d1 93 0a 92 71 b4 9f 63 9f 9c 7d 35 a8 70 b3 44 4b 66 14 ae e2 f8 66 2f 00 7f 8c dd 3a 8d be fc d0 6c 8e d1 e5 09 39 1f bc 74 02 dc ab 2d 40 9e 57 93 29 18 dc df 27 50 27 44 82 66 25 68 dc 87 1c 7b ec 23 42 d7 9a 92 79 00 67 c0 2d b4 73 ce 9d 35 27 32 aa 73 9c fc 8d 48 68 a2 bd 20 46 a5 81 e3 d8 69 d2 4d 89 cb 76 e0 7c 8d 24 c1 29 29 c5 43 60 33 29 c7 e7 a8 9a ab 2a 63 a2 9d d2 77 8e 99 82 e4 52 f2 b7 26 84 37 f8 fa 58 89 58 c8 c9 f5 2e dc b0 21 5b 20 10 70 32 3b 6b 98 77 18 0c 9a b2 66 60 3e ff 00 b2 de 83 87 34 80 e9 7d 96 c5 5f 5d 1b bb 8a 51 08 52 80 3c d4 f1 80 b2 63 20 1c fb 1e 31 83 ea 04 10 79 07 5e cd c1 71 18 6c 48 38 8c 01 68 Data Ascii: O+%Ao`x~3{2tG$VRqc}5pDKff/:l9t-@W)'P'Df%h{#Byg-s5'2sHh FiMv\|$))C`3)*cwR&7XX.![ p2;kwf`>4}_]QR<c 1y^qlH8h
2024-05-15 22:37:38 UTC	16384	IN	Data Raw: 49 03 38 6c 70 55 f9 0d c7 b1 c7 3d f5 e8 7c 23 8d ca d6 9c ac a7 0d 29 c6 ec 9e 9f 74 8d 86 e2 72 42 f2 d8 2a ea b5 37 64 9f af cb 9a 8d d4 55 15 57 88 2d f1 54 cf b5 11 5d 4a 07 0c 07 ab b8 c6 3b ea 32 c1 3e 3a 4c ae d0 75 b0 7f ca cb c7 3a 6c 6b 99 db 1d 35 e6 0e e7 92 1f ab 8e db 4b 14 d1 ee 69 67 c0 11 97 ce d3 f3 9c 6b 8a c6 42 f8 f1 26 36 3e da 39 8d 35 e6 b9 e9 62 ec dd 95 a6 c2 aa 48 c3 b7 0c a3 9e 15 41 1c 7e ba 2b 45 0a b4 13 e2 97 00 c4 e5 09 e0 8d 4c 0a 4c ab 5d be eb 75 32 9c 90 b2 07 c0 38 cf 23 55 e5 dd 5c 87 65 6c f1 88 8e 10 7a 0f 23 f2 d1 63 d9 55 70 01 c6 93 b0 c8 e8 be 92 54 fd 0e 8a 14 0a bb b0 ed 9a 50 26 39 3f 5d 49 47 c9 1b c4 aa f1 60 2e 70 30 a0 69 20 a8 f3 5b 24 56 0c c7 19 ec 0e 99 25 33 a6 ad 06 6a 9a d4 41 92 ae 33 9f c8 1f Data Ascii: I8lpU=\|#)trB*7dUW-T]J;2>:Lu:lk5KigkB&6>95bHA~+ELL]u28#U\elz#cUpTP&9?]IG`.p0i [$V%3jA3
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 96 db 07 03 53 49 25 01 39 f9 d4 08 e6 92 f6 3c fa bd d8 7b ea 4d 49 4b 4f 44 67 e7 e7 44 51 4d 2b 9e 76 b1 18 1f c7 50 26 c6 89 93 b5 8f e9 8c 33 71 b4 67 3a 62 74 4e 05 aa da 8a 9f 37 0a a3 0a 3b 0d 0c a9 81 49 b6 03 dc e3 51 4e ba e2 fb f6 c1 ea be a6 06 9e 1b 65 b2 9e 16 c2 88 88 67 64 1f 9e 40 3a 07 e5 5a 11 f5 40 37 18 a8 fa 86 a1 ab af 37 43 e7 11 bb ee f4 c9 fd 90 fd 3f e1 ab 4d 69 68 a4 d7 4a 25 fe 3a 1e a8 b8 d0 d1 5b a1 a7 a0 08 04 4b 2a 0d a1 8f cb 7f eb 8d 39 34 13 34 93 ba d4 7a 43 c3 3e 8e e9 ea 26 b8 5e 6f 72 d2 d7 c0 11 da 09 20 43 93 ee 63 7e 43 af d7 04 8f 8d 66 3c bd e2 91 17 42 f8 65 e2 ff 00 46 4d 67 a9 6b 37 50 35 39 a5 75 53 05 73 c7 14 45 c9 c7 ef 72 47 3d f1 db 54 b2 ba e8 a6 5b 2d 87 a8 2d bd 45 f7 77 a1 bc 5a de 72 0f 94 2d f5 Data Ascii: SI%9<{MIKODgDQM+vP&3qg:btN7;IQNegd@:Z@77C?MihJ%:[K*944zC>&^or Cc~Cf<BeFMgk7P59uSsErG=T[--EwZr-
2024-05-15 22:37:39 UTC	7952	IN	Data Raw: 8e 66 de 94 76 af 40 6e fc 6c 04 a3 8d cd d4 04 5d 4d 68 be 54 5a a5 ab ba 74 e3 25 c9 a2 f5 35 42 c7 6f 85 50 03 87 3e 66 dc 1c 13 9e 72 75 a7 07 0e 81 83 2b e4 cc 05 58 1b 0f af cd 69 88 80 61 cc 2c fb 52 a5 4b 2f 50 cd 69 8a a7 a7 fa 5a 56 9c 40 b1 6f 33 46 fb 41 24 17 8b 12 02 43 03 82 58 3f 3e f8 c0 d6 54 bf 87 e2 7b 5c 04 a0 b7 96 84 d7 ad 80 15 33 85 73 9a 48 6d 8f bd b5 55 7d 3b 4d d5 96 91 74 a5 4e 8e 88 ca 76 94 fd a6 40 31 63 f0 92 49 24 e0 71 df 1c 7d 34 d1 f0 0c 33 88 91 e2 dd e1 60 1f 1d 7e 6a 2c c3 38 ea 58 9c a6 b5 78 93 5d 78 a8 13 f4 da a1 90 6c 46 8e 7d 91 e0 e7 f0 80 09 7c 93 ac bc 5f e1 e6 62 64 2e ba 03 7d 2f ea 54 4e 0a 47 ba b2 a3 cb 07 84 dd 43 5b 4b 44 27 b4 45 65 ad da cb ca 09 e3 98 29 c1 12 06 c0 53 d8 fe 2c f6 d3 37 f0 f4 19 Data Ascii: fv@nl]MhTZt%5BoP>fru+Xia,RK/PiZV@o3FA$CX?>T{\3sHmU};MtNv@1cI$q}43`~j,8Xx]xlF}\|_bd.}/TNGC[KD'Ee)S,7
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 83 5b 2f d3 9f 07 e9 a4 ea 9e 8f b2 75 33 d2 bc 56 ba 9a 75 a9 92 ac 57 a1 95 ce 30 c1 21 19 c9 56 04 63 23 3e e3 1c 6b d2 9b 8b ce d0 1b ab 88 e9 a7 bf ea bb 08 5e 1e d6 96 8d 4f 34 51 43 e1 fd bd a9 9a e2 ea 2a 1f 73 3e c4 8b 32 32 96 c8 5d 81 02 82 78 24 64 81 f4 ef ab 0f 98 87 56 df 45 64 b1 b6 4f 34 48 dd 35 4d 41 46 f5 5e 5d 11 96 79 14 d3 0a b6 70 e1 bd d4 92 e4 0f 7e 00 19 d5 76 ca e7 3b 2e ba 6e 95 02 68 2b 5a 0e 9a b8 75 5d 1c fb e9 ed d6 c6 4c 26 e8 91 66 20 8f de 46 dc 76 b7 fa 38 18 1f 43 aa 8f c4 32 12 00 24 fd fa 28 17 50 ab 2a 86 ea 14 5c 9a 4b bd de 82 d9 1d 32 ec 06 a9 4c 11 95 1c 19 01 53 eb 6e 3e 31 9f 81 ab 4c 77 73 2c 6d 26 fa 51 3f d9 2e e8 a0 4a fa 9a 3b 0d 54 f5 71 c3 b6 e9 3d 46 dc 49 04 72 33 30 c0 fc 2c cb b4 64 63 d5 90 35 07 Data Ascii: [/u3VuW0!Vc#>k^O4QCs>22]x$dVEdO4H5MAF^]yp~v;.nh+Zu]L&f Fv8C2$(P\K2LSn>1Lws,m&Q?.J;Tq=FIr30,dc5
2024-05-15 22:37:39 UTC	10072	IN	Data Raw: 5d 5c 23 e9 e1 5c 0c d0 ad 8b c9 54 ad c5 af cb 4d 87 18 53 2a 90 e7 27 19 2c 38 cf 7d 36 14 19 5a 1d 33 6d d7 dd ef 5f cb 6f 64 ec d1 a5 d2 b5 0b fe d5 b4 f5 a3 45 41 6b b7 d1 50 59 12 02 b2 d4 d1 af de 14 29 3c bf a4 fa 76 fc b0 f7 d4 de c9 63 fe 21 79 06 fc bd 3c 90 43 8b bb d1 dd 26 29 68 ba 87 a1 2e b8 b3 57 4f 59 42 3d 2b ba 44 8d 9e 3f 62 d8 e7 f2 23 5a 70 c9 0e 2a 32 25 ab f7 fe ca e3 0d 8a bf d9 3f 4b d6 57 de a3 0d 6b a9 ea aa 71 73 93 07 cc 92 9a 31 54 36 1c 6c f3 58 1d c4 67 8d dc f3 f5 d0 7f 27 0c 1d e7 b6 87 fe 27 4d 7c 3f 64 cd 8d a3 47 1a f2 51 2e b5 77 c9 da 96 2a ba 7b b7 55 cd 12 b2 23 d4 52 43 0c b4 c9 f2 1b 3b 58 12 3b 60 7c 83 f3 1e cd 98 57 76 ad 70 ca 7d 54 5c 1b 85 76 70 49 f6 48 5e a9 7a 1b 50 9a 37 bb 41 51 16 13 ee 90 46 29 e3 Data Ascii: ]\#\TMS',8}6Z3m_odEAkPY)<vc!y<C&)h.WOYB=+D?b#Zp2%?KWkqs1T6lXg''M\|?dGQ.w*{U#RC;X;`\|Wvp}T\vpIH^zP7AQF)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50339	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	585	OUT	GET /public/css/v6/store.css?v=URSh4FQsa0r_&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:39 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "7b2ei1laGOqu" Last-Modified: Mon, 13 Apr 1970 23:10:43 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Wed, 15 May 2024 22:37:39 GMT Date: Wed, 15 May 2024 22:37:39 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:37:39 UTC	15992	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 2a 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 69 6d 67 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 61 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2e 61 3a 66 6f 63 75 73 20 7b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 70 78 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 61 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 63 30 66 34 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 6e 6f 68 6f 76 65 72 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 Data Ascii: 0000C000* {padding: 0;margin: 0;}img {border: none;}a {text-decoration: none;color: #ffffff;}.a:focus {outline: 0px none;}a:hover {text-decoration: none; color: #66c0f4;}a.nohover:hover {t
2024-05-15 22:37:39 UTC	15849	IN	Data Raw: 2d 72 6f 77 73 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 67 20 69 6d 67 20 6e 61 6d 65 20 6e 61 6d 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 67 20 69 6d 67 20 70 72 69 63 65 20 70 72 69 63 65 22 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 7d 0d 0a 2e 70 6f 70 75 70 5f 62 6f 64 79 2e 73 65 61 72 63 68 5f 76 32 20 2e 6d 61 74 63 68 2e 6d 61 74 63 68 5f 76 32 20 2e 6d 61 74 63 68 5f 6e 61 6d 65 20 7b 0d 0a 20 20 20 20 67 72 69 64 2d 61 72 65 61 3a 20 6e 61 6d 65 3b 0d 0a 20 20 Data Ascii: -rows: auto; grid-template-areas: "img img name name" "img img price price"; height: unset; transition: background 0.2s ease-in-out;}.popup_body.search_v2 .match.match_v2 .match_name { grid-area: name;
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 73 74 6f 72 65 5f 63 61 70 73 75 6c 65 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 68 6f 6d 65 5f 6d 61 72 6b 65 74 69 6e 67 5f 6d 65 73 73 61 67 65 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 73 74 6f 72 65 5f 63 61 70 73 75 6c 65 2e 62 72 6f 61 64 63 61 73 74 5f 63 61 70 73 75 6c 65 3a 68 6f 76 65 72 20 63 20 7b 0d 0a 09 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 61 6e 69 6d 61 74 65 50 72 69 63 65 31 31 64 65 67 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6d 61 6c 6c 5f 63 61 70 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f Data Ascii: over .additional_cart_discount,.store_capsule:hover .additional_cart_discount,.home_marketing_message:hover .additional_cart_discount,.store_capsule.broadcast_capsule:hover c {animation-name: animatePrice11deg;}.small_cap:hover .additional_
2024-05-15 22:37:39 UTC	939	IN	Data Raw: 0a 09 7b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 30 64 65 67 29 20 73 63 61 6c 65 28 2e 33 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 32 30 25 0d 0a 09 7b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 33 36 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 34 30 25 0d 0a 09 7b 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 30 64 65 67 29 20 73 63 61 6c 65 28 2e 33 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 31 30 30 25 0d 0a 09 7b 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 Data Ascii: {opacity: 0;transform: rotateZ(0deg) scale(.3);}20%{opacity: 1;transform: rotateZ(360deg) scale(1);}40%{ opacity: 0;transform: rotateZ(720deg) scale(.3);}100%{ opacity: 0;transform: rotateZ(72
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 59 65 6c 6c 6f 77 74 61 69 6c 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 38 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 46 42 46 36 46 30 3b 0d 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 32 70 78 20 33 70 78 20 30 70 78 20 23 44 33 35 31 31 30 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 75 6d 6d 65 72 73 61 6c 65 32 30 32 30 5f 73 75 70 65 72 73 61 76 69 6e 67 73 5f 6c 61 62 65 6c 0d 0a 7b 0d 0a 09 77 69 64 74 68 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 Data Ascii: 00004000font-family: "Yellowtail", sans-serif;font-style: normal;font-weight: normal;font-size: 38px;color: #FBF6F0;text-shadow: 2px 3px 0px #D35110;text-align: center;}.summersale2020_supersavings_label{width: fit-content
2024-05-15 22:37:39 UTC	12	IN	Data Raw: 64 28 31 29 20 7b 20 61 6e 69 0d 0a Data Ascii: d(1) { ani
2024-05-15 22:37:39 UTC	7553	IN	Data Raw: 30 30 30 30 31 44 37 35 0d 0a 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 73 20 7d 0d 0a 2e 68 6f 76 65 72 5f 73 63 72 65 65 6e 73 68 6f 74 73 20 2e 73 63 72 65 65 6e 73 68 6f 74 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 20 7b 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 31 73 20 7d 0d 0a 2e 68 6f 76 65 72 5f 73 63 72 65 65 6e 73 68 6f 74 73 20 2e 73 63 72 65 65 6e 73 68 6f 74 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 20 7b 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 32 73 20 7d 0d 0a 2e 68 6f 76 65 72 5f 73 63 72 65 65 6e 73 68 6f 74 73 20 2e 73 63 72 65 65 6e 73 68 6f 74 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 20 7b 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 33 73 20 7d 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 72 65 65 Data Ascii: 00001D75mation-delay: 0s }.hover_screenshots .screenshot:nth-child(2) { animation-delay: 1s }.hover_screenshots .screenshot:nth-child(3) { animation-delay: 2s }.hover_screenshots .screenshot:nth-child(4) { animation-delay: 3s }@keyframes scree
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 20 20 2f 2a 20 43 68 72 6f 6d 65 20 61 6c 6c 20 2f 20 53 61 66 61 72 69 20 61 6c 6c 20 2a 2f 0d 0a 09 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 20 20 20 20 20 2f 2a 20 46 69 72 65 66 6f 78 20 61 6c 6c 20 2a 2f 0d 0a 09 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 20 20 20 20 20 20 2f 2a 20 49 45 20 31 30 2b 20 2a 2f 0d 0a 09 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 71 5f 69 74 65 6d 20 2e 64 71 5f 69 74 65 6d 5f 63 61 70 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f Data Ascii: 00004000-webkit-user-select: none; /* Chrome all / Safari all /-moz-user-select: none; / Firefox all /-ms-user-select: none; / IE 10+ */user-select: none;}.dq_item .dq_item_cap {width: 100%;height: auto;display: blo
2024-05-15 22:37:39 UTC	12	IN	Data Raw: 6f 78 2d 73 68 61 64 6f 77 3a 0d 0a Data Ascii: ox-shadow:
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 30 20 30 20 36 70 78 20 30 20 23 30 30 30 30 30 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 69 6e 5f 63 6c 75 73 74 65 72 5f 63 6f 6e 74 65 6e 74 20 2e 63 6c 75 73 74 65 72 5f 6d 61 69 6e 63 61 70 5f 66 69 6c 6c 20 7b 0d 0a 09 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 69 6e 5f 63 6c 75 73 74 65 72 5f 63 6f 6e 74 65 6e 74 20 69 6d 67 2e 63 6c 75 73 74 65 72 5f 6d 61 69 6e 63 61 70 5f 66 69 6c 6c 5f 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f Data Ascii: 00004000 0 0 6px 0 #000000;}.main_cluster_content .cluster_maincap_fill {width: auto;display: block;position: relative;overflow: hidden;}.main_cluster_content img.cluster_maincap_fill_placeholder {width: 100%;height: auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50342	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	595	OUT	GET /public/css/promo/newstore2016.css?v=Lv_hriLyrQ5z&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:39 UTC	339	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "Lv_hriLyrQ5z" Server: nginx Content-Type: text/css;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14928493 Expires: Mon, 04 Nov 2024 17:25:52 GMT Date: Wed, 15 May 2024 22:37:39 GMT Content-Length: 4729 Connection: close
2024-05-15 22:37:39 UTC	4729	IN	Data Raw: 0d 0a 62 6f 64 79 2e 76 36 2e 70 72 6f 6d 6f 61 6e 6e 6f 75 6e 63 65 20 7b 0d 0a 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 76 36 2e 70 72 6f 6d 6f 61 6e 6e 6f 75 6e 63 65 20 2e 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 72 67 62 61 28 20 30 2c 20 30 2c 20 30 2c 20 31 20 29 20 35 35 35 70 78 2c 20 72 67 62 61 28 20 32 37 2c 20 34 30 2c 20 35 36 2c 20 31 20 29 20 31 33 31 37 70 78 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 Data Ascii: body.v6.promoannounce {}body.v6.promoannounce .page_content_container {background-image: none;background: -webkit-linear-gradient( top, rgba( 0, 0, 0, 1 ) 555px, rgba( 27, 40, 56, 1 ) 1317px);background: linear-gradient( to bottom, rgba(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50340	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	589	OUT	GET /public/css/styles_about.css?v=i6LprAjCXlha&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:39 UTC	345	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "i6LprAjCXlha" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=15541148 Expires: Mon, 11 Nov 2024 19:36:47 GMT Date: Wed, 15 May 2024 22:37:39 GMT Content-Length: 32206 Connection: close
2024-05-15 22:37:39 UTC	16039	IN	Data Raw: 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 2f 2a 66 69 78 20 67 6c 6f 62 61 6c 20 68 65 61 64 65 72 20 7a 2d 69 6e 64 65 78 20 77 69 74 68 20 76 69 64 65 6f 20 69 73 73 75 65 20 2a 2f 0d 0a 23 67 6c 6f 62 61 6c 5f 68 65 61 64 65 72 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 39 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 23 66 6f 6f 74 65 72 5f 73 70 61 63 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 32 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 76 36 2e 63 68 69 6e 61 61 62 6f 75 74 20 23 66 6f 6f 74 65 72 5f 73 70 61 63 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 32 36 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 2e 72 65 73 70 6f 6e 73 69 Data Ascii: /* CSS Document //fix global header z-index with video issue */#global_header {position: relative;z-index: 9;}body.v6 #footer_spacer {height: 210px;}body.v6.chinaabout #footer_spacer {height: 265px;}body .responsi
2024-05-15 22:37:39 UTC	16167	IN	Data Raw: 6f 6c 5f 6c 65 66 74 20 2e 67 61 6d 65 5f 69 6d 61 67 65 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 20 7b 0d 0a 09 62 6f 74 74 6f 6d 3a 20 35 76 77 3b 0d 0a 09 72 69 67 68 74 3a 20 2d 31 35 76 77 3b 0d 0a 7d 0d 0a 23 67 61 6d 65 73 5f 63 6f 6c 5f 6c 65 66 74 20 2e 67 61 6d 65 5f 69 6d 61 67 65 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 20 7b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 09 23 67 61 6d 65 73 5f 63 6f 6c 5f 72 69 67 68 74 20 2e 67 61 6d 65 5f 69 6d 61 67 65 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 7b 0d 0a 09 09 6c 65 66 74 3a 20 32 39 30 70 78 3b 0d 0a 09 09 74 6f 70 3a 20 35 Data Ascii: ol_left .game_image:nth-child(8) {bottom: 5vw;right: -15vw;}#games_col_left .game_image:nth-child(9) {top: 0;left: 0;}@media only screen and (min-width: 768px) {#games_col_right .game_image:nth-child(1) {left: 290px;top: 5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50341	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	573	OUT	GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:39 UTC	385	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".a38iP7Khdmyy" Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14192738 Expires: Sun, 27 Oct 2024 05:03:17 GMT Date: Wed, 15 May 2024 22:37:39 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:37:39 UTC	15999	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 2f 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 4a 61 76 61 53 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 2c 20 76 65 72 73 69 6f 6e 20 31 2e 37 0d 0a 20 2a 20 20 28 63 29 20 32 30 30 35 2d 32 30 31 30 20 53 61 6d 20 53 74 65 70 68 65 6e 73 6f 6e 0d 0a 20 2a 0d 0a 20 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 69 73 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 20 46 6f 72 20 64 65 74 61 69 6c 73 2c 20 73 65 65 20 74 68 65 20 50 72 6f 74 6f 74 79 70 65 20 77 65 62 20 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 6f 74 6f 74 79 70 65 6a 73 2e 6f 72 67 2f 0d 0a 20 2a Data Ascii: 0000C000/* Prototype JavaScript framework, version 1.7 * (c) 2005-2010 Sam Stephenson * * Prototype is freely distributable under the terms of an MIT-style license. * For details, see the Prototype web site: http://www.prototypejs.org/ *
2024-05-15 22:37:39 UTC	15835	IN	Data Raw: 2b 28 5c 73 2b 28 22 5b 5e 22 5d 2a 22 7c 27 5b 5e 27 5d 2a 27 7c 5b 5e 3e 5d 29 2b 29 3f 3e 7c 3c 5c 2f 5c 77 2b 3e 2f 67 69 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 74 72 69 70 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 67 27 29 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 72 61 63 74 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 61 74 63 68 41 6c 6c 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 Data Ascii: +(\s+("[^"]"\|'[^']'\|[^>])+)?>\|<\/\w+>/gi, ''); } function stripScripts() { return this.replace(new RegExp(Prototype.ScriptFragment, 'img'), ''); } function extractScripts() { var matchAll = new RegExp(Prototype.ScriptFragment,
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 72 6f 74 6f 2c 20 7b 0d 0a 20 20 20 20 5f 65 61 63 68 3a 20 20 20 20 20 5f 65 61 63 68 2c 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 20 20 20 20 63 6c 65 61 72 2c 0d 0a 20 20 20 20 66 69 72 73 74 3a 20 20 20 20 20 66 69 72 73 74 2c 0d 0a 20 20 20 20 6c 61 73 74 3a 20 20 20 20 20 20 6c 61 73 74 2c 0d 0a 20 20 20 20 63 6f 6d 70 61 63 74 3a 20 20 20 63 6f 6d 70 61 63 74 2c 0d 0a 20 20 20 20 66 6c 61 74 74 65 6e 3a 20 20 20 66 6c 61 74 74 65 6e 2c 0d 0a 20 20 20 20 77 69 74 68 6f 75 74 3a 20 20 20 77 69 74 68 6f 75 74 2c 0d 0a 20 20 20 20 72 65 76 65 72 73 65 3a 20 20 20 72 65 76 65 72 73 65 2c 0d 0a 20 20 20 20 75 6e 69 71 3a 20 20 20 20 20 20 75 6e 69 71 2c 0d 0a 20 20 20 20 69 6e 74 65 72 73 65 63 74 3a 20 69 6e 74 65 72 73 65 63 74 2c 0d 0a 20 20 20 20 63 6c Data Ascii: roto, { _each: _each, clear: clear, first: first, last: last, compact: compact, flatten: flatten, without: without, reverse: reverse, uniq: uniq, intersect: intersect, cl
2024-05-15 22:37:39 UTC	946	IN	Data Raw: 65 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 72 29 3b 0d 0a 20 20 20 20 28 74 68 69 73 2e 6f 6e 43 6f 6d 70 6c 65 74 65 20 7c 7c 20 50 72 6f 74 6f 74 79 70 65 2e 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 75 70 64 61 74 65 43 6f 6d 70 6c 65 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 65 63 61 79 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 64 65 63 61 79 20 3d 20 28 72 65 73 70 6f 6e 73 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 20 3d 3d 20 74 68 69 73 2e 6c 61 73 74 54 Data Ascii: e = undefined; clearTimeout(this.timer); (this.onComplete \|\| Prototype.emptyFunction).apply(this, arguments); }, updateComplete: function(response) { if (this.options.decay) { this.decay = (response.responseText == this.lastT
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 75 6d 65 6e 74 2e 5f 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 58 50 61 74 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 73 20 3d 20 5b 5d 3b 0d 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 65 76 61 6c 75 61 74 65 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 24 28 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2c 0d 0a 20 20 20 20 20 20 6e 75 6c 6c 2c 20 58 50 61 74 68 52 65 73 75 6c 74 2e 4f 52 44 45 52 45 44 5f 4e 4f 44 45 5f 53 4e 41 50 53 48 4f 54 5f 54 59 50 45 2c 20 6e 75 6c 6c 29 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 Data Ascii: 00004000ument._getElementsByXPath = function(expression, parentElement) { var results = []; var query = document.evaluate(expression, $(parentElement) \|\| document, null, XPathResult.ORDERED_NODE_SNAPSHOT_TYPE, null); for (var i = 0
2024-05-15 22:37:39 UTC	12	IN	Data Raw: 74 28 65 6c 65 6d 65 6e 74 29 0d 0a Data Ascii: t(element)
2024-05-15 22:37:39 UTC	3235	IN	Data Raw: 30 30 30 30 30 43 39 37 0d 0a 3b 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 70 6f 73 5b 30 5d 2c 20 70 6f 73 5b 31 5d 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 67 65 74 53 74 79 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 73 74 79 6c 65 29 20 7b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 73 74 79 6c 65 20 3d 20 73 74 79 6c 65 20 3d 3d 20 27 66 6c 6f 61 74 27 20 3f 20 27 63 73 73 46 6c 6f 61 74 27 20 3a 20 73 74 79 6c 65 2e 63 61 6d 65 6c 69 7a 65 28 29 3b 0d 0a 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 73 74 79 6c 65 5d 3b 0d 0a 20 20 20 20 69 66 Data Ascii: 00000C97; window.scrollTo(pos[0], pos[1]); return element; }, getStyle: function(element, style) { element = $(element); style = style == 'float' ? 'cssFloat' : style.camelize(); var value = element.style[style]; if
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 45 6c 65 6d 65 6e 74 2e 67 65 74 4f 66 66 73 65 74 50 61 72 65 6e 74 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 20 3d 20 45 6c 65 6d 65 6e 74 2e 76 69 65 77 70 6f 72 74 4f 66 66 73 65 74 28 70 61 72 65 6e 74 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 70 61 72 65 6e 74 20 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 7b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 5b 30 5d 20 2d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6f 66 66 73 65 74 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 5b 31 5d 20 2d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6f 66 66 73 65 74 54 6f 70 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 73 65 74 4c Data Ascii: 00004000Element.getOffsetParent(element); delta = Element.viewportOffset(parent); } if (parent == document.body) { delta[0] -= document.body.offsetLeft; delta[1] -= document.body.offsetTop; } if (options.setL
2024-05-15 22:37:39 UTC	12	IN	Data Raw: 20 63 6f 70 79 28 6d 65 74 68 0d 0a Data Ascii: copy(meth
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 64 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 29 20 7b 0d 0a 20 20 20 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 3d 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 7c 7c 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 72 6f 70 65 72 74 79 20 69 6e 20 6d 65 74 68 6f 64 73 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 6d 65 74 68 6f 64 73 5b 70 72 6f 70 65 72 74 79 5d 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 4f 62 6a 65 63 74 2e 69 73 46 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 29 20 63 6f 6e 74 69 6e 75 65 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 7c 7c 20 21 28 70 72 6f 70 65 72 74 79 20 69 6e 20 64 65 73 Data Ascii: 00004000ods, destination, onlyIfAbsent) { onlyIfAbsent = onlyIfAbsent \|\| false; for (var property in methods) { var value = methods[property]; if (!Object.isFunction(value)) continue; if (!onlyIfAbsent \|\| !(property in des

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50343	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	588	OUT	GET /public/css/slick/slick.css?v=ZSVHTEnT3WNW&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:39 UTC	339	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "ZSVHTEnT3WNW" Server: nginx Content-Type: text/css;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14069260 Expires: Fri, 25 Oct 2024 18:45:19 GMT Date: Wed, 15 May 2024 22:37:39 GMT Content-Length: 1840 Connection: close
2024-05-15 22:37:39 UTC	1840	IN	Data Raw: 0d 0a 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 0d 0a 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 Data Ascii: /* Slider */.slick-slider{ position: relative; display: block; -moz-box-sizing: border-box; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50338	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:38 UTC	621	OUT	GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:39 UTC	384	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "Me1IBxzktiwk" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14524032 Expires: Thu, 31 Oct 2024 01:04:51 GMT Date: Wed, 15 May 2024 22:37:39 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:37:39 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 2f 2f 20 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 20 73 63 72 69 70 74 61 63 75 6c 6f 75 73 2e 6a 73 20 76 31 2e 38 2e 31 2c 20 54 68 75 20 4a 61 6e 20 30 33 20 32 32 3a 30 37 3a 31 32 20 2d 30 35 30 30 20 32 30 30 38 0d 0a 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 2d 32 30 30 37 20 54 68 6f 6d 61 73 20 46 75 63 68 73 20 28 68 74 74 70 3a 2f 2f 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 2c 20 68 74 74 70 3a 2f 2f 6d 69 72 2e 61 63 75 6c 6f 2e 75 73 29 0d 0a 2f 2f 20 0d 0a 2f 2f 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 0d 0a 2f Data Ascii: 0000C000// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)// // Permission is hereby granted, free of charge, to any person obtaining/
2024-05-15 22:37:39 UTC	15802	IN	Data Raw: 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 0d 0a 45 66 66 65 63 74 2e 4d 6f 76 65 42 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 74 6f 54 6f 70 2c 20 74 6f 4c 65 66 74 29 20 7b 0d 0a 20 20 72 65 74 75 72 6e 20 6e 65 77 20 45 66 66 65 63 74 2e 4d 6f 76 65 28 65 6c 65 6d 65 6e 74 2c 20 0d 0a 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 78 3a 20 74 6f 4c 65 66 74 2c 20 79 3a 20 74 6f 54 6f 70 20 7d 2c 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 7c 7c 20 7b 20 7d 29 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 45 66 66 65 63 74 2e 53 63 61 6c 65 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 45 66 66 65 63 74 2e 42 61 73 65 2c 20 7b 0d 0a 20 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c Data Ascii: backwards compatibilityEffect.MoveBy = function(element, toTop, toLeft) { return new Effect.Move(element, Object.extend({ x: toLeft, y: toTop }, arguments[3] \|\| { }));};Effect.Scale = Class.create(Effect.Base, { initialize: function(el
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 6c 65 6d 65 6e 74 2e 73 65 74 53 74 79 6c 65 28 7b 68 65 69 67 68 74 3a 20 27 30 70 78 27 7d 29 2e 73 68 6f 77 28 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 61 66 74 65 72 46 69 6e 69 73 68 49 6e 74 65 72 6e 61 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 65 66 66 65 63 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 66 66 65 63 74 2e 65 66 66 65 63 74 73 5b 30 5d 2e 65 6c 65 6d 65 6e 74 2e 75 6e 64 6f 43 6c 69 70 70 69 6e 67 28 29 2e 75 6e 64 6f 50 6f 73 69 74 69 6f 6e 65 64 28 29 2e 73 65 74 53 74 79 6c 65 28 6f 6c 64 53 74 79 6c 65 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 6f 70 74 69 6f 6e 73 29 0d 0a 20 20 20 20 20 20 Data Ascii: lement.setStyle({height: '0px'}).show(); }, afterFinishInternal: function(effect) { effect.effects[0].element.undoClipping().undoPositioned().setStyle(oldStyle); } }, options)
2024-05-15 22:37:39 UTC	978	IN	Data Raw: 0d 0a 20 20 6f 6e 4b 65 79 50 72 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 28 74 68 69 73 2e 61 63 74 69 76 65 29 0d 0a 20 20 20 20 20 20 73 77 69 74 63 68 28 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 54 41 42 3a 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 52 45 54 55 52 4e 3a 0d 0a 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 65 6c 65 63 74 45 6e 74 72 79 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 45 76 65 6e 74 2e 73 74 6f 70 28 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 45 53 43 3a 0d 0a 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 68 69 64 65 28 29 3b 0d Data Ascii: onKeyPress: function(event) { if(this.active) switch(event.keyCode) { case Event.KEY_TAB: case Event.KEY_RETURN: this.selectEntry(); Event.stop(event); case Event.KEY_ESC: this.hide();
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 6f 6e 4f 62 73 65 72 76 65 72 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 72 65 71 75 65 6e 63 79 2a 31 30 30 30 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 61 63 74 69 76 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 63 68 61 6e 67 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 68 61 73 46 6f 63 75 73 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 67 65 74 55 70 64 61 74 65 64 43 68 6f 69 63 65 73 28 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 48 6f 76 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 Data Ascii: 00004000 setTimeout(this.onObserverEvent.bind(this), this.options.frequency*1000); }, activate: function() { this.changed = false; this.hasFocus = true; this.getUpdatedChoices(); }, onHover: function(event) { var
2024-05-15 22:37:39 UTC	12	IN	Data Raw: 63 74 69 6f 6e 28 29 20 7b 0d 0d 0a Data Ascii: ction() {
2024-05-15 22:37:39 UTC	919	IN	Data Raw: 30 30 30 30 30 33 38 42 0d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 7d 2c 0d 0a 20 20 68 61 6e 64 6c 65 41 4a 41 58 46 61 69 6c 75 72 65 3a 20 66 75 6e 63 74 69 6f 6e 28 74 72 61 6e 73 70 6f 72 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 74 72 69 67 67 65 72 43 61 6c 6c 62 61 63 6b 28 27 6f 6e 46 61 69 6c 75 72 65 27 2c 20 74 72 61 6e 73 70 6f 72 74 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c Data Ascii: 0000038B return this.element.innerHTML; }, handleAJAXFailure: function(transport) { this.triggerCallback('onFailure', transport); if (this._oldInnerHTML) { this.element.innerHTML = this._oldInnerHTML; this._oldInnerHTML
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 0d 0a 20 20 20 20 20 20 20 20 6f 6e 46 61 69 6c 75 72 65 3a 20 74 68 69 73 2e 5f 62 6f 75 6e 64 46 61 69 6c 75 72 65 48 61 6e 64 6c 65 72 0d 0a 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 6e 65 77 20 41 6a 61 78 2e 55 70 64 61 74 65 72 28 7b 20 73 75 63 63 65 73 73 3a 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 7d 2c 20 74 68 69 73 2e 75 72 6c 2c 20 6f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 6d 65 74 68 6f 64 3a 20 27 67 65 74 27 20 7d 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 6a 61 78 4f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 Data Ascii: 00004000, onFailure: this._boundFailureHandler }); new Ajax.Updater({ success: this.element }, this.url, options); } else { var options = Object.extend({ method: 'get' }, this.options.ajaxOptions); Object.extend
2024-05-15 22:37:39 UTC	12	IN	Data Raw: 65 64 56 61 6c 75 65 73 29 7b 0d 0a Data Ascii: edValues){
2024-05-15 22:37:39 UTC	6622	IN	Data Raw: 30 30 30 30 31 39 44 32 0d 0a 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3e 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3c 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 3b 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 66 66 73 65 74 20 3d 20 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 5b 30 5d 20 2d 20 76 61 6c 75 65 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 Data Ascii: 000019D2 if (value >= this.allowedValues.max()) return(this.allowedValues.max()); if (value <= this.allowedValues.min()) return(this.allowedValues.min()); var offset = Math.abs(this.allowedValues[0] - value); var newV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50344	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:39 UTC	574	OUT	GET /public/javascript/about.js?v=T9HhtJ81mJgN&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:39 UTC	351	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "T9HhtJ81mJgN" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14942987 Expires: Mon, 04 Nov 2024 21:27:26 GMT Date: Wed, 15 May 2024 22:37:39 GMT Content-Length: 2213 Connection: close
2024-05-15 22:37:39 UTC	2213	IN	Data Raw: 0d 0a 24 4a 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 72 65 61 64 79 28 0d 0a 09 66 75 6e 63 74 69 6f 6e 28 20 29 0d 0a 09 7b 0d 0a 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 72 65 61 64 79 27 29 3b 0d 0a 0d 0a 09 09 66 75 6e 63 74 69 6f 6e 20 65 6c 46 61 64 65 49 6e 28 73 65 6c 65 63 74 65 64 5f 65 6c 29 0d 0a 09 09 7b 0d 0a 09 09 09 76 61 72 20 77 69 6e 64 6f 77 48 65 69 67 68 74 20 3d 20 24 4a 28 20 77 69 6e 64 6f 77 20 29 2e 68 65 69 67 68 74 28 29 3b 0d 0a 09 09 09 24 4a 28 20 73 65 6c 65 63 74 65 64 5f 65 6c 20 29 2e 65 61 63 68 28 0d 0a 09 09 09 09 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 09 09 09 7b 0d 0a 09 09 09 09 09 76 61 72 20 74 68 69 73 50 6f 73 20 3d 20 24 4a 28 20 74 68 69 73 20 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0d 0a 09 09 09 09 Data Ascii: $J( document ).ready(function( ){console.log('ready');function elFadeIn(selected_el){var windowHeight = $J( window ).height();$J( selected_el ).each(function(){var thisPos = $J( this ).offset().top;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50345	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:39 UTC	571	OUT	GET /public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:39 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=10368000 Date: Wed, 15 May 2024 22:37:39 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-05-15 22:37:39 UTC	16149	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 2f 2a 0d 0a 20 20 20 20 20 5f 20 5f 20 20 20 20 20 20 5f 20 20 20 20 20 20 20 5f 0d 0a 20 5f 5f 5f 7c 20 28 5f 29 20 5f 5f 5f 7c 20 7c 20 5f 5f 20 20 28 5f 29 5f 5f 5f 0d 0a 2f 20 5f 5f 7c 20 7c 20 7c 2f 20 5f 5f 7c 20 7c 2f 20 2f 20 20 7c 20 2f 20 5f 5f 7c 0d 0a 5c 5f 5f 20 5c 20 7c 20 7c 20 28 5f 5f 7c 20 20 20 3c 20 5f 20 7c 20 5c 5f 5f 20 5c 0d 0a 7c 5f 5f 5f 2f 5f 7c 5f 7c 5c 5f 5f 5f 7c 5f 7c 5c 5f 28 5f 29 2f 20 7c 5f 5f 5f 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 5f 5f 2f 0d 0a 0d 0a 20 56 65 72 73 69 6f 6e 3a 20 31 2e 35 2e 30 0d 0a 20 20 41 75 74 68 6f 72 3a 20 4b 65 6e 20 57 68 65 65 6c 65 72 0d 0a 20 57 65 62 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 6b 65 6e 77 68 65 65 6c 65 72 2e 67 69 Data Ascii: 0000C000/* _ _ _ _ ___\| (_) ___\| \| __ (_)___/ __\| \| \|/ __\| \|/ / \| / __\|\__ \ \| \| (__\| < _ \| \__ \\|___/_\|_\|\___\|_\|\_(_)/ \|___/ \|__/ Version: 1.5.0 Author: Ken Wheeler Website: http://kenwheeler.gi
2024-05-15 22:37:39 UTC	15876	IN	Data Raw: 20 20 20 20 20 20 5f 2e 75 70 64 61 74 65 44 6f 74 73 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 5f 2e 6f 70 74 69 6f 6e 73 2e 61 63 63 65 73 73 69 62 69 6c 69 74 79 20 3d 3d 3d 20 74 72 75 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 24 6c 69 73 74 2e 70 72 6f 70 28 27 74 61 62 49 6e 64 65 78 27 2c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 5f 2e 73 65 74 53 6c 69 64 65 43 6c 61 73 73 65 73 28 74 79 70 65 6f 66 20 74 68 69 73 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 20 3d 3d 3d 20 27 6e 75 6d 62 65 72 27 20 3f 20 74 68 69 73 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 20 3a 20 30 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 5f 2e 6f 70 74 69 6f 6e 73 2e 64 72 61 67 67 61 62 6c 65 20 3d Data Ascii: _.updateDots(); if (_.options.accessibility === true) { _.$list.prop('tabIndex', 0); } _.setSlideClasses(typeof this.currentSlide === 'number' ? this.currentSlide : 0); if (_.options.draggable =
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 53 6c 69 64 65 20 3d 20 5f 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 63 68 69 6c 64 72 65 6e 28 27 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 27 29 2e 65 71 28 73 6c 69 64 65 49 6e 64 65 78 20 2b 20 5f 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 4c 65 66 74 20 3d 20 74 61 72 67 65 74 53 6c 69 64 65 5b 30 5d 20 3f 20 74 61 72 67 65 74 53 6c 69 64 65 5b 30 5d 2e 6f 66 66 73 65 74 4c 65 66 74 20 2a 20 2d 31 20 3a 20 30 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 5f 2e 6f 70 Data Ascii: ); } else { targetSlide = _.$slideTrack.children('.slick-slide').eq(slideIndex + _.options.slidesToShow); } targetLeft = targetSlide[0] ? targetSlide[0].offsetLeft * -1 : 0; if (_.op
2024-05-15 22:37:39 UTC	755	IN	Data Raw: 65 20 26 26 20 5f 2e 6f 70 74 69 6f 6e 73 2e 76 61 72 69 61 62 6c 65 57 69 64 74 68 20 3d 3d 3d 20 66 61 6c 73 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 73 6c 69 64 65 57 69 64 74 68 20 3d 20 4d 61 74 68 2e 63 65 69 6c 28 5f 2e 6c 69 73 74 57 69 64 74 68 20 2f 20 5f 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 77 69 64 74 68 28 4d 61 74 68 2e 63 65 69 6c 28 28 5f 2e 73 6c 69 64 65 57 69 64 74 68 20 2a 20 5f 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 63 68 69 6c 64 72 65 6e 28 27 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 27 29 2e 6c 65 6e 67 74 68 29 29 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 5f 2e 6f 70 74 Data Ascii: e && _.options.variableWidth === false) { _.slideWidth = Math.ceil(_.listWidth / _.options.slidesToShow); _.$slideTrack.width(Math.ceil((_.slideWidth * _.$slideTrack.children('.slick-slide').length))); } else if (_.opt
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 66 73 65 74 29 3b 0d 0a 0d 0a 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 53 6c 69 63 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 46 61 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 5f 20 3d 20 74 68 69 73 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 4c 65 66 74 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 5f 2e 24 73 6c 69 64 65 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 6e 64 65 78 2c 20 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 4c 65 66 74 20 3d 20 28 5f 2e 73 6c 69 64 65 57 69 64 74 68 20 2a 20 69 6e 64 65 78 29 20 2a 20 2d 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 5f 2e 6f 70 74 69 6f Data Ascii: 00004000fset); }; Slick.prototype.setFade = function() { var _ = this, targetLeft; _.$slides.each(function(index, element) { targetLeft = (_.slideWidth * index) * -1; if (_.optio
2024-05-15 22:37:39 UTC	12	IN	Data Raw: 69 6e 53 77 69 70 65 20 3d 20 0d 0a Data Ascii: inSwipe =
2024-05-15 22:37:39 UTC	7055	IN	Data Raw: 30 30 30 30 31 42 38 33 0d 0a 5f 2e 6c 69 73 74 57 69 64 74 68 20 2f 20 5f 2e 6f 70 74 69 6f 6e 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 6f 75 63 68 54 68 72 65 73 68 6f 6c 64 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 5f 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 53 77 69 70 69 6e 67 20 3d 3d 3d 20 74 72 75 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 74 6f 75 63 68 4f 62 6a 65 63 74 2e 6d 69 6e 53 77 69 70 65 20 3d 20 5f 2e 6c 69 73 74 48 65 69 67 68 74 20 2f 20 5f 2e 6f 70 74 69 6f 6e 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 6f 75 63 68 54 68 72 65 73 68 6f 6c 64 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 65 76 65 6e 74 2e 64 61 74 61 2e Data Ascii: 00001B83_.listWidth / _.options .touchThreshold; if (_.options.verticalSwiping === true) { _.touchObject.minSwipe = _.listHeight / _.options .touchThreshold; } switch (event.data.
2024-05-15 22:37:39 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50346	23.50.112.134	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:39 UTC	577	OUT	GET /public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:39 UTC	197	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=10368000 Date: Wed, 15 May 2024 22:37:39 GMT Content-Length: 3534 Connection: close
2024-05-15 22:37:39 UTC	3534	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 67 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 67 28 29 3a 68 2e 52 65 6c 6c 61 78 3d 67 28 29 7d 29 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 77 69 6e 64 6f 77 20 3a 20 67 6c 6f 62 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6e 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 68 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6b Data Ascii: (function(h,g){"function"===typeof define&&define.amd?define([],g):"object"===typeof module&&module.exports?module.exports=g():h.Rellax=g()})(typeof window !== "undefined" ? window : global,function(){var h=function(g,n){var a=Object.create(h.prototype),k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50347	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:39 UTC	623	OUT	GET /store/about/videos/about_hero_loop_web.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:39 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 35255 Last-Modified: Mon, 18 Feb 2019 20:21:57 GMT ETag: "5c6b13e5-89b7" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:39 GMT Connection: close
2024-05-15 22:37:39 UTC	16139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 78 00 00 03 1a 08 02 00 00 00 5b 30 73 48 00 00 00 09 70 48 59 73 00 00 00 01 00 00 00 01 00 4f 25 c4 d6 00 00 00 24 7a 54 58 74 43 72 65 61 74 6f 72 00 00 08 99 73 4c c9 4f 4a 55 70 4c 2b 49 2d 52 70 4d 4b 4b 4d 2e 29 06 00 41 7a 06 ce 6a 7a 15 c5 00 00 20 00 49 44 41 54 78 9c ec dd c9 92 24 59 be e7 f5 ff ff a8 da e0 53 8c 39 45 45 56 d7 9c d5 42 23 4d d3 34 0f 80 b0 80 2d c2 8a 0d 0f 00 22 48 f7 93 f4 33 20 0d 08 1b d8 b0 66 c7 02 56 88 c0 e5 4e 75 ab 6e 0d 39 47 66 cc 3e d8 a4 87 85 9e 59 d5 cc cd 3d 5c dd c2 3c be 1f c9 8c 30 53 3d aa a6 66 16 99 f1 f3 ff 19 54 7f fa f3 5f 0b 00 00 00 70 d3 cc ae 2f 00 00 00 00 77 13 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 Data Ascii: PNGIHDRx[0sHpHYsO%$zTXtCreatorsLOJUpL+I-RpMKKM.)Azjz IDATx$YS9EEVB#M4-"H3 fVNun9Gf>Y=\<0S=fT_p/wA h`MA
2024-05-15 22:37:39 UTC	16384	IN	Data Raw: b0 bc 52 08 9e ea 3a f4 dd da f3 69 c5 d6 4a 5c 35 b3 1d 42 11 ee 27 54 94 34 55 d6 57 c5 31 0c 82 26 00 60 30 6e da c9 a6 16 22 22 c5 1a 8a e9 be 2c 3d ba 27 c5 3a 47 59 9b 72 97 eb 4f dd b2 c6 b9 4d ab b4 8a e9 b6 f8 51 95 2e 7a 6a 1e fa e2 78 4a d7 5d 1e 02 62 91 32 55 54 8c 9f 0b d4 0d 9a 45 be 0c 8f c3 85 a8 96 57 9f 97 36 55 7c e7 b4 5b 9b 3d 2e 6f 24 a1 9c e9 33 9f a9 7c 61 32 1b 8b 29 62 45 2b 69 1a 3f e4 d2 ba 7b 54 36 d6 b6 25 4b 63 62 c4 94 b2 ea 68 45 d5 84 95 92 da 4b 0e 43 47 7d 8d 35 39 2e 66 ca ee 1f 84 24 86 86 b7 ba a6 c0 99 fe 68 a2 d7 98 d4 86 eb 23 68 02 c0 6e 98 aa 7a df 66 9d 37 cd 6a b9 b8 f2 1a 46 9b f5 fc ad 9e f5 63 a6 0f b5 78 de dd 69 b7 0c 8c 97 75 d9 6f 79 96 bc 59 52 a5 cc fa c8 fd c6 2c 7a fa 32 a6 fa df b3 63 62 fd 32 a6 Data Ascii: R:iJ\5B'T4UW1&`0n"",=':GYrOMQ.zjxJ]b2UTEW6U\|[=.o$3\|a2)bE+i?{T6%KcbhEKCG}59.f$h#hnzf7jFcxiuoyYR,z2cb2
2024-05-15 22:37:39 UTC	2732	IN	Data Raw: a5 94 d6 49 57 68 a7 cc f6 3b 24 0e 60 45 13 18 97 f3 40 3d 3e cd 17 5f 7c e9 13 9f fc 74 62 37 20 a5 d4 f5 eb 6f ad 3c 7e 9c da bc 00 00 23 8b 15 4d a0 af b3 d8 23 20 b1 ff e4 cc cc cc 6f fc c6 7f fc c9 4f 7d 66 bf 94 59 ad 6e fc f4 35 96 33 01 9c 1c 11 9b f8 78 fb c9 9d 3b dd 49 dd 26 f5 e6 47 89 88 4e ba 82 b2 f1 66 03 c8 e4 66 e2 ca c6 db 57 4e 3c 30 ba b9 47 2c 22 2a a9 97 e3 ce f6 8c 89 ad 1a 25 0a 3a 6f b1 4f 2f 47 09 fd ad 49 da 30 61 80 0d fd ad 2b d8 30 a1 26 b4 0d 5a db 03 82 84 6f 01 d6 6f 6e bf 85 9f b0 18 21 41 6b 6b 80 24 5d 41 82 56 fb cf a8 bd 75 de 3d 80 15 4d 60 5c da 9d ef 5c d1 d4 5a 9f 39 73 f6 f9 0f bf 70 f9 f2 95 fd 22 a6 52 2a 0c c3 ef 7e e7 8f c3 b0 67 3f 5c 00 38 5e 22 22 3d 9b 89 8b 74 df d1 b8 eb 75 6b 95 da cc 9a fb 0d e8 d9 Data Ascii: IWh;$`E@=>_\|tb7 o<~#M# oO}fYn53x;I&GNffWN<0G,"%:oO/GI0a+0&Zoon!Akk$]AVu=M`\\Z9sp"R~g?\8^""=tuk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50348	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:39 UTC	608	OUT	GET /store//about/logo_steam.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:39 UTC	225	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/svg+xml Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-9fd" Date: Wed, 15 May 2024 22:37:39 GMT Content-Length: 2557 Connection: close
2024-05-15 22:37:39 UTC	2557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50350	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	607	OUT	GET /store/about/icon-macos.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	225	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/svg+xml Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-4bc" Date: Wed, 15 May 2024 22:37:40 GMT Content-Length: 1212 Connection: close
2024-05-15 22:37:40 UTC	1212	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50349	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	609	OUT	GET /store/about/icon-steamos.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	225	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/svg+xml Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-4db" Date: Wed, 15 May 2024 22:37:40 GMT Content-Length: 1243 Connection: close
2024-05-15 22:37:40 UTC	1243	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50351	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	610	OUT	GET /store/about/icon-chromeos.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	208	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Tue, 07 Nov 2023 18:01:49 GMT ETag: "654a7b8d-3ac" Date: Wed, 15 May 2024 22:37:40 GMT Content-Length: 940 Connection: close
2024-05-15 22:37:40 UTC	940	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 69 64 3d 22 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 30 20 35 30 30 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 500 500"> <defs> <style> .cls-2 { stroke-width: 0px; fill: #fff; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50352	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	630	OUT	GET /steam/apps/578080/capsule_231x87.jpg?t=1713943796 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 11930 Last-Modified: Wed, 24 Apr 2024 07:06:23 GMT ETag: "6628af6f-2e9a" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=368859 Expires: Mon, 20 May 2024 05:05:19 GMT Date: Wed, 15 May 2024 22:37:40 GMT Connection: close
2024-05-15 22:37:40 UTC	11930	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 09 03 01 02 00 ff c4 00 3f 10 00 01 03 02 05 02 04 04 04 04 04 05 05 01 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 51 09 14 32 61 15 23 71 81 42 Data Ascii: JFIFCCW?!1"AQ2a#qB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50354	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	626	OUT	GET /store/about/icon-windows.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	208	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-2f9" Date: Wed, 15 May 2024 22:37:40 GMT Content-Length: 761 Connection: close
2024-05-15 22:37:40 UTC	761	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50353	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	631	OUT	GET /steam/apps/2215430/capsule_231x87.jpg?t=1715792238 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 9153 Last-Modified: Wed, 28 Feb 2024 16:31:50 GMT ETag: "65df5ff6-23c1" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=584354 Expires: Wed, 22 May 2024 16:56:54 GMT Date: Wed, 15 May 2024 22:37:40 GMT Connection: close
2024-05-15 22:37:40 UTC	9153	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 01 00 06 07 08 03 04 05 02 09 ff c4 00 43 10 00 01 03 02 05 03 02 04 03 05 05 06 06 03 00 00 01 02 03 11 04 05 00 06 12 21 31 07 08 41 13 51 09 14 22 61 32 71 81 16 23 a1 Data Ascii: JFIFCCWC!1AQ"a2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50355	96.17.60.195	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	570	OUT	GET /dynamicstore/saledata/?cc=HK HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://gtm.you1.cn Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/json; charset=utf-8 X-Frame-Options: DENY Cache-Control: public,max-age=300 Expires: Wed, 15 May 2024 22:42:40 GMT Last-Modified: Wed, 15 May 2024 22:35:00 GMT Strict-Transport-Security: max-age=10368000 Vary: origin Date: Wed, 15 May 2024 22:37:40 GMT Content-Length: 29 Connection: close
2024-05-15 22:37:40 UTC	29	IN	Data Raw: 7b 22 62 41 6c 6c 6f 77 41 70 70 49 6d 70 72 65 73 73 69 6f 6e 73 22 3a 74 72 75 65 7d Data Ascii: {"bAllowAppImpressions":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50356	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	631	OUT	GET /steam/apps/2668080/capsule_231x87.jpg?t=1714968679 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 10565 Last-Modified: Wed, 06 Dec 2023 03:39:52 GMT ETag: "656fed08-2945" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305194 Expires: Sun, 19 May 2024 11:24:14 GMT Date: Wed, 15 May 2024 22:37:40 GMT Connection: close
2024-05-15 22:37:40 UTC	10565	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 03 04 02 07 08 01 00 ff c4 00 41 10 00 01 03 02 04 04 04 04 03 05 07 02 07 00 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 14 22 51 61 08 32 71 81 42 91 a1 15 16 Data Ascii: JFIFCCWA!1A"Qa2qB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50357	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	631	OUT	GET /steam/apps/1203220/capsule_231x87.jpg?t=1715253758 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 12581 Last-Modified: Tue, 23 Apr 2024 11:04:58 GMT ETag: "662795da-3125" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=590203 Expires: Wed, 22 May 2024 18:34:23 GMT Date: Wed, 15 May 2024 22:37:40 GMT Connection: close
2024-05-15 22:37:40 UTC	12581	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 02 03 01 00 00 00 00 00 00 00 00 00 00 06 07 05 08 00 04 01 02 03 09 ff c4 00 3e 10 00 02 01 03 03 03 02 05 02 03 06 04 06 03 00 00 01 02 03 04 05 11 06 12 21 00 07 31 13 41 08 14 22 51 61 32 71 23 81 91 15 16 Data Ascii: JFIFCCW>!1A"Qa2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50358	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	631	OUT	GET /steam/apps/2344520/capsule_231x87.jpg?t=1715714373 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 5775 Last-Modified: Tue, 29 Aug 2023 14:03:07 GMT ETag: "64edfa9b-168f" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=506459 Expires: Tue, 21 May 2024 19:18:39 GMT Date: Wed, 15 May 2024 22:37:40 GMT Connection: close
2024-05-15 22:37:40 UTC	5775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 05 06 08 07 04 09 ff c4 00 37 10 00 01 02 04 04 05 02 04 05 03 05 01 00 00 00 00 01 02 03 00 04 05 11 06 12 21 31 07 13 41 51 61 22 71 08 23 32 91 14 15 42 81 Data Ascii: JFIFCCW7!1AQa"q#2B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50359	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	630	OUT	GET /steam/apps/553850/capsule_231x87.jpg?t=1709666906 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 14527 Last-Modified: Mon, 11 Sep 2023 20:20:34 GMT ETag: "64ff7692-38bf" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=154870 Expires: Fri, 17 May 2024 17:38:50 GMT Date: Wed, 15 May 2024 22:37:40 GMT Connection: close
2024-05-15 22:37:40 UTC	14527	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 00 03 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 03 00 02 09 01 ff c4 00 43 10 00 01 03 03 03 02 05 03 02 03 03 09 08 03 00 00 01 02 03 04 05 06 11 00 12 21 07 31 13 22 41 51 61 08 14 71 15 23 32 81 91 42 Data Ascii: JFIFCCWC!1"AQaq#2B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50360	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	377	OUT	GET /store//about/logo_steam.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	225	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/svg+xml Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-9fd" Date: Wed, 15 May 2024 22:37:40 GMT Content-Length: 2557 Connection: close
2024-05-15 22:37:40 UTC	2557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50361	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	392	OUT	GET /store/about/videos/about_hero_loop_web.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 35255 Last-Modified: Mon, 18 Feb 2019 20:21:57 GMT ETag: "5c6b13e5-89b7" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:40 GMT Connection: close
2024-05-15 22:37:40 UTC	16139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 78 00 00 03 1a 08 02 00 00 00 5b 30 73 48 00 00 00 09 70 48 59 73 00 00 00 01 00 00 00 01 00 4f 25 c4 d6 00 00 00 24 7a 54 58 74 43 72 65 61 74 6f 72 00 00 08 99 73 4c c9 4f 4a 55 70 4c 2b 49 2d 52 70 4d 4b 4b 4d 2e 29 06 00 41 7a 06 ce 6a 7a 15 c5 00 00 20 00 49 44 41 54 78 9c ec dd c9 92 24 59 be e7 f5 ff ff a8 da e0 53 8c 39 45 45 56 d7 9c d5 42 23 4d d3 34 0f 80 b0 80 2d c2 8a 0d 0f 00 22 48 f7 93 f4 33 20 0d 08 1b d8 b0 66 c7 02 56 88 c0 e5 4e 75 ab 6e 0d 39 47 66 cc 3e d8 a4 87 85 9e 59 d5 cc cd 3d 5c dd c2 3c be 1f c9 8c 30 53 3d aa a6 66 16 99 f1 f3 ff 19 54 7f fa f3 5f 0b 00 00 00 70 d3 cc ae 2f 00 00 00 00 77 13 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 Data Ascii: PNGIHDRx[0sHpHYsO%$zTXtCreatorsLOJUpL+I-RpMKKM.)Azjz IDATx$YS9EEVB#M4-"H3 fVNun9Gf>Y=\<0S=fT_p/wA h`MA
2024-05-15 22:37:40 UTC	16384	IN	Data Raw: b0 bc 52 08 9e ea 3a f4 dd da f3 69 c5 d6 4a 5c 35 b3 1d 42 11 ee 27 54 94 34 55 d6 57 c5 31 0c 82 26 00 60 30 6e da c9 a6 16 22 22 c5 1a 8a e9 be 2c 3d ba 27 c5 3a 47 59 9b 72 97 eb 4f dd b2 c6 b9 4d ab b4 8a e9 b6 f8 51 95 2e 7a 6a 1e fa e2 78 4a d7 5d 1e 02 62 91 32 55 54 8c 9f 0b d4 0d 9a 45 be 0c 8f c3 85 a8 96 57 9f 97 36 55 7c e7 b4 5b 9b 3d 2e 6f 24 a1 9c e9 33 9f a9 7c 61 32 1b 8b 29 62 45 2b 69 1a 3f e4 d2 ba 7b 54 36 d6 b6 25 4b 63 62 c4 94 b2 ea 68 45 d5 84 95 92 da 4b 0e 43 47 7d 8d 35 39 2e 66 ca ee 1f 84 24 86 86 b7 ba a6 c0 99 fe 68 a2 d7 98 d4 86 eb 23 68 02 c0 6e 98 aa 7a df 66 9d 37 cd 6a b9 b8 f2 1a 46 9b f5 fc ad 9e f5 63 a6 0f b5 78 de dd 69 b7 0c 8c 97 75 d9 6f 79 96 bc 59 52 a5 cc fa c8 fd c6 2c 7a fa 32 a6 fa df b3 63 62 fd 32 a6 Data Ascii: R:iJ\5B'T4UW1&`0n"",=':GYrOMQ.zjxJ]b2UTEW6U\|[=.o$3\|a2)bE+i?{T6%KcbhEKCG}59.f$h#hnzf7jFcxiuoyYR,z2cb2
2024-05-15 22:37:40 UTC	2732	IN	Data Raw: a5 94 d6 49 57 68 a7 cc f6 3b 24 0e 60 45 13 18 97 f3 40 3d 3e cd 17 5f 7c e9 13 9f fc 74 62 37 20 a5 d4 f5 eb 6f ad 3c 7e 9c da bc 00 00 23 8b 15 4d a0 af b3 d8 23 20 b1 ff e4 cc cc cc 6f fc c6 7f fc c9 4f 7d 66 bf 94 59 ad 6e fc f4 35 96 33 01 9c 1c 11 9b f8 78 fb c9 9d 3b dd 49 dd 26 f5 e6 47 89 88 4e ba 82 b2 f1 66 03 c8 e4 66 e2 ca c6 db 57 4e 3c 30 ba b9 47 2c 22 2a a9 97 e3 ce f6 8c 89 ad 1a 25 0a 3a 6f b1 4f 2f 47 09 fd ad 49 da 30 61 80 0d fd ad 2b d8 30 a1 26 b4 0d 5a db 03 82 84 6f 01 d6 6f 6e bf 85 9f b0 18 21 41 6b 6b 80 24 5d 41 82 56 fb cf a8 bd 75 de 3d 80 15 4d 60 5c da 9d ef 5c d1 d4 5a 9f 39 73 f6 f9 0f bf 70 f9 f2 95 fd 22 a6 52 2a 0c c3 ef 7e e7 8f c3 b0 67 3f 5c 00 38 5e 22 22 3d 9b 89 8b 74 df d1 b8 eb 75 6b 95 da cc 9a fb 0d e8 d9 Data Ascii: IWh;$`E@=>_\|tb7 o<~#M# oO}fYn53x;I&GNffWN<0G,"%:oO/GI0a+0&Zoon!Akk$]AVu=M`\\Z9sp"R~g?\8^""=tuk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50362	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	376	OUT	GET /store/about/icon-macos.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	225	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/svg+xml Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-4bc" Date: Wed, 15 May 2024 22:37:40 GMT Content-Length: 1212 Connection: close
2024-05-15 22:37:40 UTC	1212	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50364	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	379	OUT	GET /store/about/icon-chromeos.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	208	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Tue, 07 Nov 2023 18:01:49 GMT ETag: "654a7b8d-3ac" Date: Wed, 15 May 2024 22:37:40 GMT Content-Length: 940 Connection: close
2024-05-15 22:37:40 UTC	940	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 69 64 3d 22 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 30 20 35 30 30 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 500 500"> <defs> <style> .cls-2 { stroke-width: 0px; fill: #fff; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50365	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	378	OUT	GET /store/about/icon-steamos.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	225	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/svg+xml Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-4db" Date: Wed, 15 May 2024 22:37:40 GMT Content-Length: 1243 Connection: close
2024-05-15 22:37:40 UTC	1243	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50363	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	399	OUT	GET /steam/apps/578080/capsule_231x87.jpg?t=1713943796 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:40 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 11930 Last-Modified: Wed, 24 Apr 2024 07:06:23 GMT ETag: "6628af6f-2e9a" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=368876 Expires: Mon, 20 May 2024 05:05:36 GMT Date: Wed, 15 May 2024 22:37:40 GMT Connection: close
2024-05-15 22:37:40 UTC	11930	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 09 03 01 02 00 ff c4 00 3f 10 00 01 03 02 05 02 04 04 04 04 04 05 05 01 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 51 09 14 32 61 15 23 71 81 42 Data Ascii: JFIFCCW?!1"AQ2a#qB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50366	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	630	OUT	GET /steam/apps/281990/capsule_231x87.jpg?t=1715759591 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6778 Last-Modified: Thu, 01 Sep 2022 08:15:32 GMT ETag: "63106a24-1a7a" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=551720 Expires: Wed, 22 May 2024 07:53:01 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	6778	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 01 05 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 01 02 06 07 08 00 09 ff c4 00 42 10 00 01 03 02 05 02 05 02 03 06 03 04 0b 00 00 00 01 02 03 11 00 04 05 06 07 12 21 31 41 08 13 22 51 61 71 91 14 32 81 09 15 23 Data Ascii: JFIFCCWB!1A"Qaq2#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50367	23.222.77.65	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:40 UTC	631	OUT	GET /steam/apps/2357570/capsule_231x87.jpg?t=1715731747 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 11011 Last-Modified: Thu, 21 Dec 2023 16:49:36 GMT ETag: "65846ca0-2b03" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=523877 Expires: Wed, 22 May 2024 00:08:58 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	11011	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 01 02 03 00 08 ff c4 00 3f 10 00 02 01 03 03 02 04 03 05 06 04 04 07 00 00 00 01 02 03 04 05 11 00 06 12 21 31 07 13 22 41 14 51 61 08 32 52 91 a1 15 23 24 71 Data Ascii: JFIFCCW?!1"AQa2R#$q

Session ID	Source IP	Source Port	Destination IP	Destination Port
551	192.168.2.4	50368	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	627	OUT	GET /steam/apps/730/capsule_231x87.jpg?t=1698860631 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 9528 Last-Modified: Mon, 18 Sep 2023 22:33:56 GMT ETag: "6508d054-2538" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=156681 Expires: Fri, 17 May 2024 18:09:02 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	9528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 07 08 02 03 06 01 09 ff c4 00 45 10 00 01 03 03 03 02 04 03 03 07 0a 04 07 00 00 00 01 02 03 04 00 05 11 06 12 21 07 31 08 13 41 51 22 61 81 14 32 71 09 15 16 23 Data Ascii: JFIFCCWE!1AQ"a2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port
552	192.168.2.4	50371	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	631	OUT	GET /steam/apps/1172470/capsule_231x87.jpg?t=1715104113 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 10747 Last-Modified: Mon, 22 Apr 2024 20:23:12 GMT ETag: "6626c730-29fb" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=61409 Expires: Thu, 16 May 2024 15:41:10 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	10747	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 06 04 08 02 03 07 01 00 09 ff c4 00 48 10 00 01 02 04 04 03 06 03 04 06 07 06 07 00 00 00 01 02 03 00 04 05 11 06 12 21 31 07 13 41 14 22 51 61 71 81 08 23 32 15 42 91 Data Ascii: JFIFCCWH!1A"Qaq#2B

Session ID	Source IP	Source Port	Destination IP	Destination Port
553	192.168.2.4	50369	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	631	OUT	GET /steam/apps/1145350/capsule_231x87.jpg?t=1715727000 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 12772 Last-Modified: Wed, 01 May 2024 05:08:42 GMT ETag: "6631ce5a-31e4" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=519111 Expires: Tue, 21 May 2024 22:49:32 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	12772	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 04 06 07 08 02 03 09 01 00 ff c4 00 53 10 00 01 03 02 05 02 03 03 06 07 08 0f 09 00 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 14 51 61 15 32 71 81 91 d2 09 Data Ascii: JFIFCCWS!1"AQa2q

Session ID	Source IP	Source Port	Destination IP	Destination Port
554	192.168.2.4	50370	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	631	OUT	GET /steam/apps/1997480/capsule_231x87.jpg?t=1715759898 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 14134 Last-Modified: Wed, 26 Jul 2023 09:09:51 GMT ETag: "64c0e2df-3736" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=552123 Expires: Wed, 22 May 2024 07:59:44 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	14134	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 9d 00 9d 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 00 03 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 03 01 02 09 00 ff c4 00 45 10 00 01 03 03 03 02 03 05 04 05 0b 02 07 01 00 00 01 02 03 04 05 06 11 00 12 21 07 31 13 22 41 08 14 32 51 61 15 71 81 91 23 33 Data Ascii: JFIFCCWE!1"A2Qaq#3

Session ID	Source IP	Source Port	Destination IP	Destination Port
555	192.168.2.4	50372	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	378	OUT	GET /store/about/icon-windows.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	208	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-2f9" Date: Wed, 15 May 2024 22:37:41 GMT Content-Length: 761 Connection: close
2024-05-15 22:37:41 UTC	761	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port
556	192.168.2.4	50373	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	400	OUT	GET /steam/apps/2215430/capsule_231x87.jpg?t=1715792238 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 9153 Last-Modified: Wed, 28 Feb 2024 16:31:50 GMT ETag: "65df5ff6-23c1" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=584393 Expires: Wed, 22 May 2024 16:57:34 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	9153	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 01 00 06 07 08 03 04 05 02 09 ff c4 00 43 10 00 01 03 02 05 03 02 04 03 05 05 06 06 03 00 00 01 02 03 11 04 05 00 06 12 21 31 07 08 41 13 51 09 14 22 61 32 71 81 16 23 a1 Data Ascii: JFIFCCWC!1AQ"a2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port
557	192.168.2.4	50375	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	400	OUT	GET /steam/apps/2668080/capsule_231x87.jpg?t=1714968679 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 10565 Last-Modified: Wed, 06 Dec 2023 03:39:52 GMT ETag: "656fed08-2945" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=305220 Expires: Sun, 19 May 2024 11:24:41 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	10565	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 03 04 02 07 08 01 00 ff c4 00 41 10 00 01 03 02 04 04 04 04 03 05 07 02 07 00 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 41 14 22 51 61 08 32 71 81 42 91 a1 15 16 Data Ascii: JFIFCCWA!1A"Qa2qB

Session ID	Source IP	Source Port	Destination IP	Destination Port
558	192.168.2.4	50374	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	400	OUT	GET /steam/apps/1203220/capsule_231x87.jpg?t=1715253758 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 12581 Last-Modified: Tue, 23 Apr 2024 11:04:58 GMT ETag: "662795da-3125" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=590259 Expires: Wed, 22 May 2024 18:35:20 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	12581	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 02 03 01 00 00 00 00 00 00 00 00 00 00 06 07 05 08 00 04 01 02 03 09 ff c4 00 3e 10 00 02 01 03 03 03 02 05 02 03 06 04 06 03 00 00 01 02 03 04 05 11 06 12 21 00 07 31 13 41 08 14 22 51 61 32 71 23 81 91 15 16 Data Ascii: JFIFCCW>!1A"Qa2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port
559	192.168.2.4	50376	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	400	OUT	GET /steam/apps/2344520/capsule_231x87.jpg?t=1715714373 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 5775 Last-Modified: Tue, 29 Aug 2023 14:03:07 GMT ETag: "64edfa9b-168f" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=506418 Expires: Tue, 21 May 2024 19:17:59 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	5775	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 05 06 08 07 04 09 ff c4 00 37 10 00 01 02 04 04 05 02 04 05 03 05 01 00 00 00 00 01 02 03 00 04 05 11 06 12 21 31 07 13 41 51 61 22 71 08 23 32 91 14 15 42 81 Data Ascii: JFIFCCW7!1AQa"q#2B

Session ID	Source IP	Source Port	Destination IP	Destination Port
560	192.168.2.4	50377	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	399	OUT	GET /steam/apps/553850/capsule_231x87.jpg?t=1709666906 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 14527 Last-Modified: Mon, 11 Sep 2023 20:20:34 GMT ETag: "64ff7692-38bf" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=154793 Expires: Fri, 17 May 2024 17:37:34 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	14527	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 00 03 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 03 00 02 09 01 ff c4 00 43 10 00 01 03 03 03 02 05 03 02 03 03 09 08 03 00 00 01 02 03 04 05 06 11 00 12 21 07 31 13 22 41 51 61 08 14 71 15 23 32 81 91 42 Data Ascii: JFIFCCWC!1"AQaq#2B

Session ID	Source IP	Source Port	Destination IP	Destination Port
561	192.168.2.4	50378	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	631	OUT	GET /steam/apps/1604030/capsule_231x87.jpg?t=1715590903 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6173 Last-Modified: Thu, 09 May 2024 09:49:12 GMT ETag: "663c9c18-181d" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=382921 Expires: Mon, 20 May 2024 08:59:42 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	6173	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 00 09 ff c4 00 40 10 00 01 03 03 03 02 05 01 05 06 03 06 07 00 00 00 01 02 03 04 00 05 11 06 12 21 07 31 08 13 41 51 61 22 14 32 71 81 91 09 15 23 Data Ascii: JFIFvvCCW@!1AQa"2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port
562	192.168.2.4	50379	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	631	OUT	GET /steam/apps/2808930/capsule_231x87.jpg?t=1709221515 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Wed, 31 Jan 2024 11:16:42 GMT ETag: "65ba2c1a-2c5a" Server: nginx Content-Type: image/jpeg Content-Length: 11354 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=155021 Expires: Fri, 17 May 2024 17:41:22 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	1566	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 03 00 03 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 02 03 09 00 0a 01 ff c4 00 47 10 00 01 03 03 03 02 04 03 04 05 07 0b 05 01 00 00 01 02 03 04 05 06 11 00 07 12 21 31 08 13 41 51 22 61 81 14 23 32 71 15 42 Data Ascii: JFIFCCWG!1AQ"a#2qB
2024-05-15 22:37:41 UTC	9788	IN	Data Raw: 9a 1b 74 56 7e eb 41 44 f0 b6 f6 d7 d9 54 cb de cf bd 50 c5 5d 52 0b 15 28 6d 4c 4a da 7e 98 e3 81 3f 11 6b 2a 49 4f eb 14 8c 10 39 0e 24 68 66 56 cb 0d c8 dd 75 4c e0 70 d3 87 66 8c d7 3e 00 8e 5f e9 6a 98 ee 7f 27 9e a1 40 71 a6 e3 b9 e4 21 65 0c a8 a9 b1 d3 a7 12 7a 91 d3 a1 3d f5 8e 22 23 b4 b7 0c c1 d6 d5 3a e4 87 02 24 19 55 27 40 5c 89 8e 05 04 8e e7 8f 5f f9 77 f9 68 65 d9 68 14 e6 1d fa e5 e0 12 e3 ec d6 e5 e4 f4 e8 95 bb 81 b7 53 34 91 fa 3a 24 b4 25 4a 46 46 12 48 24 e0 71 1d 00 f4 eb ae 32 10 9c 92 53 28 ea da 3c 50 36 d3 52 a2 d8 57 4d e1 4d 8a f9 76 2b d5 51 06 0a 56 72 b5 21 b6 0b cf 93 8f 65 b8 84 e7 b1 23 df 4d c6 6d 8d 3f bd c8 d8 66 64 ce de 03 6f 53 ea b2 6d d9 20 55 6e 6a d5 41 24 94 bf 31 e7 02 b9 05 74 2b 27 af ef ef af 65 18 a6 80 Data Ascii: tV~ADTP]R(mLJ~?k*IO9$hfVuLpf>_j'@q!ez="#:$U'@\_whehS4:$%JFFH$q2S(<P6RWMMv+QVr!e#Mm?fdoSm UnjA$1t+'e

Session ID	Source IP	Source Port	Destination IP	Destination Port
563	192.168.2.4	50380	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	631	OUT	GET /steam/apps/2195250/capsule_231x87.jpg?t=1713799333 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 12635 Last-Modified: Tue, 12 Sep 2023 13:36:59 GMT ETag: "6500697b-315b" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=224371 Expires: Sat, 18 May 2024 12:57:12 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	12635	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 09 02 00 01 0a ff c4 00 45 10 00 01 03 02 05 02 05 02 03 04 06 08 06 03 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 09 13 22 41 51 14 61 15 32 71 23 42 Data Ascii: JFIFCCWE!1"AQa2q#B

Session ID	Source IP	Source Port	Destination IP	Destination Port
564	192.168.2.4	50381	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	631	OUT	GET /steam/apps/1449850/capsule_231x87.jpg?t=1715145592 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 9407 Last-Modified: Tue, 07 May 2024 06:37:40 GMT ETag: "6639cc34-24bf" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=482048 Expires: Tue, 21 May 2024 12:31:49 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	9407	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 ff c4 00 3d 10 00 01 03 03 03 03 02 04 04 05 02 03 09 00 00 00 01 02 03 04 05 06 11 00 12 21 07 13 31 08 41 14 22 51 61 15 23 32 71 09 42 81 Data Ascii: JFIFCCW=!1A"Qa#2qB

Session ID	Source IP	Source Port	Destination IP	Destination Port
565	192.168.2.4	50382	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	615	OUT	GET /store/about/cta_hero_community.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 31506 Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-7b12" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	16139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 7a b4 49 44 41 54 78 da ec dd 7b 90 5c f7 95 d8 f7 73 1f fd 98 9e 37 30 78 10 24 88 01 49 81 14 49 89 a0 44 93 e2 3e 24 10 f2 be 5c 54 89 54 16 72 2a 71 15 c1 94 cb f1 16 fe 90 b8 f9 2b ce 56 51 aa 4a e2 4a b9 b2 a4 52 85 6c ca d9 14 21 27 4e d9 cb b2 49 ad 64 a7 1c 8b 20 a4 dd 98 84 44 49 43 91 82 48 4a 14 06 04 88 e7 0c e6 3d fd be 37 bf 73 ef ed 41 a3 d1 3d cf 7e f7 f7 23 5d de 9e 9e ee fb f8 75 4f f7 fd 1d 9c df f9 89 00 00 00 00 00 00 00 00 00 00 00 00 74 3b 8b 26 00 00 00 80 3a 7c e4 d8 88 59 dd 61 96 b1 b2 bb 0b 66 99 32 cb e4 c9 97 8f Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<zIDATx{\s70x$IID>$\TTr*q+VQJJRl!'NId DICHJ=7sA=~#]uOt;&:\|Yaf2
2024-05-15 22:37:41 UTC	15367	IN	Data Raw: 64 78 a0 10 9c b3 e3 46 27 03 80 80 04 00 94 cc 4e 5d 96 be 81 21 73 b1 c5 bf 58 a0 37 cd 4d 5f 21 43 02 68 72 50 a2 d8 61 43 06 35 20 11 33 57 e2 85 85 d9 60 c8 46 50 80 72 85 1f 15 8b 8c 05 d3 71 96 32 17 b2 3a 3d a7 06 24 4e 2f c9 bb bf 5a 90 77 cc 92 2d 84 53 78 be f7 9b 8c ec dc ee ca ce 6d ae dc b5 77 48 62 31 5b 46 74 ba d0 61 b3 9f 98 25 63 41 90 c2 74 e2 35 10 e1 68 f9 06 d3 b9 4f d8 2b fb 2b 85 4b 34 8b c2 d5 61 18 e6 be f9 79 db ec 53 64 6a 46 e4 ca f5 82 64 cc fe af 5c f3 24 93 2d 06 53 7b ce 2f 17 24 6d ee d3 a9 4a 75 86 8d 5c de 97 c5 8c 17 04 4d 0a b9 bc 39 36 4b 74 84 4a 10 04 89 f6 b4 b8 ac 45 34 f3 72 ed 51 57 2c bf 28 a9 3e 47 9c 20 20 61 dd 08 2e f8 fe 4d 01 9a b0 ee 45 38 2c 23 19 f7 c3 80 44 10 68 11 f1 2c 21 28 01 10 90 00 80 9b 5d Data Ascii: dxF'N]!sX7M_!ChrPaC5 3W`FPrq2:=$N/Zw-SxmwHb1[Fta%cAt5hO++K4aySdjFd\$-S{/$mJu\M96KtJE4rQW,(>G a.ME8,#Dh,!(]

Session ID	Source IP	Source Port	Destination IP	Destination Port
566	192.168.2.4	50383	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	619	OUT	GET /store/about/cta_hero_community_pt1.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	244	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 9460 Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-24f4" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	9460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 24 96 49 44 41 54 78 da ec dd 4f 8b 1b 57 9b 28 f0 72 62 06 2f bc e8 17 cc e0 45 20 32 78 61 48 60 3a 10 42 16 17 22 6b 37 ab b4 17 82 7b 57 6e ef 2e 68 91 f8 13 38 fe 04 6d 2f 1a ee ce 9d e5 d0 0b 77 be 40 5b 81 bb 78 21 81 b7 03 21 84 4b c0 1a f0 c2 0b c3 db 17 cc 8b 19 cc cc 9c 63 1d c5 65 b9 4a ff ba a4 56 95 7e 3f 38 48 5d 52 95 aa 8e 84 54 f5 f4 79 9e 93 65 00 00 00 00 00 00 00 00 4d 77 41 17 00 00 10 75 ba bd ad 70 f3 51 68 57 72 8b 5f 87 f6 22 b4 c1 f1 e1 fe 2b bd 04 40 55 04 24 00 00 88 c1 88 56 b8 69 4d 78 4a 0c 4c fc 71 7c b8 ff 5c Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<$IDATxOW(rb/E 2xaH`:B"k7{Wn.h8m/w@[x!!KceJV~?8H]RTyeMwAupQhWr_"+@U$ViMxJLq\|\

Session ID	Source IP	Source Port	Destination IP	Destination Port
567	192.168.2.4	50384	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	399	OUT	GET /steam/apps/281990/capsule_231x87.jpg?t=1715759591 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6778 Last-Modified: Thu, 01 Sep 2022 08:15:32 GMT ETag: "63106a24-1a7a" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=551736 Expires: Wed, 22 May 2024 07:53:17 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	6778	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 01 05 01 01 00 00 00 00 00 00 00 00 00 00 03 04 05 01 02 06 07 08 00 09 ff c4 00 42 10 00 01 03 02 05 02 05 02 03 06 03 04 0b 00 00 00 01 02 03 11 00 04 05 06 07 12 21 31 41 08 13 22 51 61 71 91 14 32 81 09 15 23 Data Ascii: JFIFCCWB!1A"Qaq2#

Session ID	Source IP	Source Port	Destination IP	Destination Port
568	192.168.2.4	50385	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	400	OUT	GET /steam/apps/2357570/capsule_231x87.jpg?t=1715731747 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 11011 Last-Modified: Thu, 21 Dec 2023 16:49:36 GMT ETag: "65846ca0-2b03" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=523895 Expires: Wed, 22 May 2024 00:09:16 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	11011	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 01 02 03 00 08 ff c4 00 3f 10 00 02 01 03 03 02 04 03 05 06 04 04 07 00 00 00 01 02 03 04 05 11 00 06 12 21 31 07 13 22 41 14 51 61 08 32 52 91 a1 15 23 24 71 Data Ascii: JFIFCCW?!1"AQa2R#$q

Session ID	Source IP	Source Port	Destination IP	Destination Port
569	192.168.2.4	50387	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	396	OUT	GET /steam/apps/730/capsule_231x87.jpg?t=1698860631 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 9528 Last-Modified: Mon, 18 Sep 2023 22:33:56 GMT ETag: "6508d054-2538" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=156742 Expires: Fri, 17 May 2024 18:10:03 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	9528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 07 08 02 03 06 01 09 ff c4 00 45 10 00 01 03 03 03 02 04 03 03 07 0a 04 07 00 00 00 01 02 03 04 00 05 11 06 12 21 07 31 08 13 41 51 22 61 81 14 32 71 09 15 16 23 Data Ascii: JFIFCCWE!1AQ"a2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port
570	192.168.2.4	50386	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	400	OUT	GET /steam/apps/1172470/capsule_231x87.jpg?t=1715104113 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 10747 Last-Modified: Mon, 22 Apr 2024 20:23:12 GMT ETag: "6626c730-29fb" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=61389 Expires: Thu, 16 May 2024 15:40:50 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	10747	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 06 04 08 02 03 07 01 00 09 ff c4 00 48 10 00 01 02 04 04 03 06 03 04 06 07 06 07 00 00 00 01 02 03 00 04 05 11 06 12 21 31 07 13 41 14 22 51 61 71 81 08 23 32 15 42 91 Data Ascii: JFIFCCWH!1A"Qaq#2B

Session ID	Source IP	Source Port	Destination IP	Destination Port
571	192.168.2.4	50389	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	400	OUT	GET /steam/apps/1145350/capsule_231x87.jpg?t=1715727000 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 12772 Last-Modified: Wed, 01 May 2024 05:08:42 GMT ETag: "6631ce5a-31e4" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=519078 Expires: Tue, 21 May 2024 22:48:59 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	12772	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 04 06 07 08 02 03 09 01 00 ff c4 00 53 10 00 01 03 02 05 02 03 03 06 07 08 0f 09 00 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 14 51 61 15 32 71 81 91 d2 09 Data Ascii: JFIFCCWS!1"AQa2q

Session ID	Source IP	Source Port	Destination IP	Destination Port
572	192.168.2.4	50388	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	400	OUT	GET /steam/apps/1997480/capsule_231x87.jpg?t=1715759898 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:41 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 14134 Last-Modified: Wed, 26 Jul 2023 09:09:51 GMT ETag: "64c0e2df-3736" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=552075 Expires: Wed, 22 May 2024 07:58:56 GMT Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:41 UTC	1552	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 9d 00 9d 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 00 03 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 03 01 02 09 00 ff c4 00 45 10 00 01 03 03 03 02 03 05 04 05 0b 02 07 01 00 00 01 02 03 04 05 06 11 00 12 21 07 31 13 22 41 08 14 32 51 61 15 71 81 91 23 33 Data Ascii: JFIFCCWE!1"A2Qaq#3
2024-05-15 22:37:41 UTC	12582	IN	Data Raw: 4a ea cd 41 e6 c2 77 ad 22 1a 55 ce 57 19 08 75 44 01 9f de 03 8f ae 84 90 7f 10 49 ca de ba f9 22 a3 90 80 20 1f aa f7 f0 d3 cf d1 17 da be cd 14 9b d7 a5 b4 6a 24 87 1b 62 ac ed ac fb d2 d4 d2 41 75 87 0c d0 f4 37 08 c6 73 e1 b8 b3 83 f1 24 91 eb 9d 51 23 cb 5d 9d 9b ef f4 f4 45 44 03 83 a3 93 f2 dc 34 1e 47 53 e4 6e b1 83 14 ea 95 a5 59 9f 41 aa b4 63 4e a6 3e e3 4e b4 4f 09 25 3d c1 f5 49 c6 41 f5 04 1f 5d 31 63 da f6 87 34 e8 52 59 a1 74 4f 2c 78 b1 08 6e a2 e1 8a eb 72 41 c1 6d d0 a0 47 e2 3f cf 56 ef a2 a8 84 4f 2a 6f 8b 15 12 90 92 b4 2d 21 4a 40 19 24 7a e3 5c 08 6b 58 a1 4a 95 39 c6 24 35 51 a7 01 26 3a 42 82 9a 6f e2 03 71 3c 0f 5e 4a b8 ef ae 1d 45 91 f4 b3 f4 2e eb 26 25 a5 72 a6 7c 28 a9 6c 34 b0 d8 29 0e 21 38 51 e7 b2 8f ae 0f cf 9d 2f 7b Data Ascii: JAw"UWuDI" j$bAu7s$Q#]ED4GSnYAcN>NO%=IA]1c4RYtO,xnrAmG?VO*o-!J@$z\kXJ9$5Q&:Boq<^JE.&%r\|(l4)!8Q/{

Session ID	Source IP	Source Port	Destination IP	Destination Port
573	192.168.2.4	50390	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	619	OUT	GET /store/about/cta_hero_community_pt2.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	244	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 6427 Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-191b" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:42 UTC	6427	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 18 bd 49 44 41 54 78 da ec dd 4f 8c 55 d7 79 00 f0 7b df 7b 03 66 f8 6b 8f 8d 1d 30 66 9c 36 43 8a 13 81 ba 08 a2 9b 5a 66 d3 05 56 52 a9 f5 ae 32 6d ba b1 ba a9 dd 5d 1b a9 cd a2 cb 7a 87 a2 56 5d 38 bb ca 2c 1a 15 da ba 0b 48 ba 29 b2 ac b6 58 6a 90 8c 22 61 4c ec 10 db d8 fc 1d 18 60 e6 f6 9c 99 4b 32 e0 61 3c c0 fd 7f 7f 3f e9 ea be 81 99 f7 de 7c f3 de 99 73 be f9 ce 77 93 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<IDATxOUy{{fk0f6CZfVR2m]zV]8,H)Xj"aL`K2a<?\|sw

Session ID	Source IP	Source Port	Destination IP	Destination Port
574	192.168.2.4	50391	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:41 UTC	619	OUT	GET /store/about/cta_hero_community_pt3.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 20936 Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-51c8" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:41 GMT Connection: close
2024-05-15 22:37:42 UTC	16139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 51 6a 49 44 41 54 78 da ec dd 69 8c 65 e9 79 1f f6 e7 9c 73 97 da ab ab bb ba 7b a6 87 3d c3 99 21 87 c3 e1 36 22 29 71 11 45 89 92 2c 59 36 19 cb b2 2d 03 8e 01 c9 40 e2 24 08 82 04 fe 94 20 06 ec 4f 09 02 23 70 1c 20 31 90 04 30 ed d8 81 61 20 de e4 38 71 2c 7a 91 1d 93 23 89 8b b8 89 8b c8 e1 2c 9c e9 9e de 6a af bb 9d 73 72 de 73 6f 55 77 cf f4 ac ec a5 66 fa f7 93 ce dc 5a ee bd 67 a9 2a de fb fe fb 79 9f 37 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<QjIDATxieys{=!6")qE,Y6-@$ O#p 10a 8q,z#,jsrsoUwfZg*y7
2024-05-15 22:37:42 UTC	4797	IN	Data Raw: f2 c9 c8 a7 22 e6 f6 1f 89 6b cb 2b 71 fd e6 46 fc fc 57 d7 e3 89 47 a6 aa e3 d0 fe bc 6a 32 99 b6 ee dc 1e 4a 64 db 43 89 db c2 8a 76 91 d5 3b 6e dc f9 9c 55 48 50 7e ef e5 2b ed b8 b1 da 8e b3 ef ad c5 d2 8d 76 55 25 b1 b2 da a9 1e fb b1 c3 d3 f1 a5 c7 a7 63 7e 36 ef 36 db 9c 2c aa a0 a1 93 2a 1e 52 9c d2 ee 56 3d e4 e9 6b 45 56 f7 86 c8 aa a5 19 45 71 eb 88 d8 59 a1 b1 d6 ec 1e bf f8 cd f5 b8 b2 b4 11 37 d7 da 31 59 9e 23 55 47 14 82 08 86 e3 aa 21 10 48 00 00 c0 48 86 12 ed 76 ff b6 01 ad 02 89 46 1e 73 fb 0f c7 d5 6b ab d1 6a 6e 94 93 fa e5 b8 be 32 5f 4d f0 d3 ae 19 f3 b3 8d 98 99 dc 51 62 b0 23 88 88 db 42 89 4e fd b5 46 e3 ee 81 44 ba a5 cb 1f b6 62 e9 c6 46 9c f9 ed 8d 58 59 eb 54 3b 6e a4 f0 63 7e 26 8f c7 1e 9e 8a 2f 7d 6e 2e 0e cc e7 b1 30 1f Data Ascii: "k+qFWGj2JdCv;nUHP~+vU%c~66,*RV=kEVEqY71Y#UG!HHvFskjn2_MQb#BNFDbFXYT;nc~&/}n.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
575	192.168.2.4	50392	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	614	OUT	GET /store/about/cta_hero_hardware.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 54376 Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-d468" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	16139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ab 00 00 03 1a 08 06 00 00 00 60 74 d0 55 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec dd 69 b4 24 e7 7d df f7 df f3 54 55 6f 77 5f 66 01 66 30 18 00 03 80 04 b8 62 28 52 10 09 12 24 48 ca a2 25 25 11 03 5b 56 e4 c8 c7 3a a6 a2 a3 17 51 22 47 8e 65 27 51 f2 2a 91 2d cb 3e 89 e5 13 25 39 92 ce 51 e4 e4 40 b2 7d 94 48 54 68 51 02 69 91 a2 2c 2e 12 41 90 04 05 62 1f cc 7e 67 ee 7e bb ab ea 79 f2 a2 67 86 00 66 ee 4c 77 75 75 d7 d2 df cf d1 50 c0 ed ae aa 3f a6 fb 56 d5 af 9e cd 08 00 00 00 37 75 f7 db 1f 7d 9f 0d f4 98 a4 7b e5 cd 5d c6 f8 bb 24 73 5b d1 75 d5 9e d7 29 2f ff fb 32 fa 9a f7 fe 99 6f 7f e5 33 9f 2c ba 24 00 93 63 8a 2e 00 00 00 a0 8c 4e bc e3 03 8f cb Data Ascii: PNGIHDR`tUsBIT\|d IDATxi$}TUow_ff0b(R$H%%[V:Q"Ge'Q*->%9Q@}HThQi,.Ab~g~ygfLwuuP?V7u}{]$s[u)/2o3,$c.N
2024-05-15 22:37:42 UTC	16384	IN	Data Raw: a8 d9 9a 19 ea f7 d5 a5 a9 d6 ce 9f 1a 63 45 c5 d8 bc 74 5e 0b cb 07 d5 6c 75 06 7a ff 48 61 b5 26 2d ab de 3b 25 71 57 49 12 6b bf be 2d c9 95 eb 56 12 4b c6 06 0a c3 a6 82 b0 82 11 ab a4 b7 14 e5 bc ff 02 00 dc 52 95 5a 56 5d 9a 68 6f 77 53 49 bc 37 f8 58 5b ef 95 c6 dd fe 76 43 74 5f 9b 94 20 73 58 1d ee 73 8b 9a ad a1 6e b4 eb d4 aa 7a d5 f6 c6 25 f5 86 6c e5 ba da 32 04 b4 67 87 eb 99 70 f1 dc 2b 15 9f 54 69 7f 17 cf 0c 3e 69 59 6b c8 de 0c 6f 94 e5 1a d5 1f ee 50 8e 19 81 93 5e 57 7b bb 5b 4a 6f 12 54 df c8 bb 54 71 6f 47 dd bd ed ca 3d 28 2b 6b 37 60 c2 2a 00 54 56 39 2f 2c 6f 94 c4 3d f5 ba 3b d9 27 84 f2 5e 49 6f 57 71 dc cd b7 b0 51 65 9c 08 64 d8 1b 98 76 67 f0 89 95 bc 73 da da 58 1b b6 a4 4a d8 bc 74 7e e8 6d 86 ed 3e 8d 7a 6a 77 86 fb 1e 64 Data Ascii: cEt^luzHa&-;%qWIk-VKRZV]howSI7X[vCt_ sXsnz%l2gp+Ti>iYkoP^W{[JoTTqoG=(+k7`*TV9/,o=;'^IoWqQedvgsXJt~m>zjwd
2024-05-15 22:37:42 UTC	3541	IN	Data Raw: 9e 78 00 47 8f 1c c2 2b af 9e c5 eb 6f bc 85 db 73 73 08 c3 78 81 db 81 fd 7b b1 7f ef 1e 48 29 71 e4 d0 81 9e 3b 11 b7 da f1 ce 57 8d b1 49 cc cc 1e 48 f1 77 1c 35 a1 0a c3 10 0b b7 ae e1 f6 bb 97 7b 7e 25 cf 65 1f 5e 79 97 7f 47 4b d8 70 76 95 31 c6 d2 a6 55 08 df 6f 03 c6 c4 2a 1f d5 2a 40 a7 1d c0 b2 5d d8 76 71 8d b7 4a 3f 57 d5 18 04 5e 1b 30 e8 40 e3 e3 97 cf 3d 7b 36 eb 5d 96 ed 4a 29 0f de ff e4 6d 10 c6 b2 da 01 91 80 53 6f 6c fa 7d ce a8 56 13 09 d9 53 86 d5 6b 2d f5 b4 3d a7 56 c7 9e 43 f7 a7 9a 4d dd 4c 1a 01 eb 66 a6 26 27 70 f4 c8 21 f8 be 8f ab d7 de c5 bb 37 6e 6e f9 7c 22 c2 07 df ff 5e bc f7 3d 8f 6c 3a 2f 75 2b e7 7e f0 26 fe e0 4f 7a 5b 5e 6b 66 f7 01 4c ee 98 8d bd 8f 38 3a ed 26 ae bc 7d b6 a7 2c ab 90 16 6c b7 da 0d a2 58 42 c6 c0 Data Ascii: xG+ossx{H)q;WIHw5{~%e^yGKpv1Uo**@]vqJ?W^0@={6]J)mSol}VSk-=VCMLf&'p!7nn\|"^=l:/u+~&Oz[^kfL8:&},lXB
2024-05-15 22:37:42 UTC	16384	IN	Data Raw: 55 e7 9e 73 cf a5 d8 74 36 97 73 2f 22 6d 0e 13 84 e2 48 ef 1e 65 d5 59 30 f1 da b6 03 21 22 ca 14 c7 75 e1 b8 03 f0 db 2d 78 7e 6b d3 9b 7a b4 53 82 eb 56 7a 3e 4f 15 88 bf fd 57 44 e0 7b ed ab b9 8c c8 17 94 c6 4f 8e 3f 73 e4 78 ac 37 b6 24 f1 64 75 c7 81 7b c6 94 d6 07 d2 90 3c 70 df 6a 31 30 f9 a0 30 3a 8b 1b 3c ef b2 08 82 94 7e 36 28 a5 3b 7f ff 94 e2 60 38 22 a2 2e b8 e5 4e 85 34 f0 7d 98 c0 83 59 c9 3b 3a d3 df 3b 9f b1 4a 69 68 ed c0 71 dd 9e 26 fe 5e 73 5f b7 1c 6b 6e e1 7b 6d 04 7e e7 e4 19 11 f9 9a 02 7e 69 fc e4 91 4f c6 76 c3 14 48 3c 59 2d 57 6a df ab 94 02 c4 fe 8b 60 10 f8 70 75 f2 53 ba 28 59 4c 56 29 2c 13 f8 3c 6f b5 00 d2 da 61 d3 79 46 02 8e 76 10 a4 34 46 22 a2 2c e8 54 5a 93 49 77 94 d2 70 4a f1 bc 3b f8 9e 87 c0 ef 74 db 88 c8 a4 Data Ascii: Ust6s/"mHeY0!"u-x~kzSVz>OWD{O?sx7$du{<pj100:<~6(;`8".N4}Y;:;Jihq&^s_kn{m~~iOvH<Y-Wj`puS(YLV),<oayFv4F",TZIwpJ;t
2024-05-15 22:37:42 UTC	1928	IN	Data Raw: d8 c9 c0 0b be 8b 03 97 42 52 5d 9e 2d 68 d4 f7 cd 9e f9 ca 6c f4 01 11 11 6d ce f8 f8 d3 33 30 ea fb 20 08 fd b9 cf a1 4a e1 28 60 66 60 64 c7 ff a9 d0 7f f4 d8 27 df cb 19 05 44 44 94 6b b1 4c b3 78 f1 e9 47 1e 09 7c f9 01 00 bd 6d c4 2c 98 30 03 46 44 c4 18 23 6f 5b 39 42 82 88 c8 aa 89 53 4f 1c 35 ca fc 33 11 d9 74 a5 cf 71 5d 0e 55 0a 41 41 2d 0d 0e 8f fd d4 60 ff b6 cf f2 3c 55 22 22 2a 82 c8 06 2c 5d 6f f6 c2 4b cf 0e 6f db 7b 49 6b fd 9d 71 dd 23 8f b4 e3 22 f0 bd 9b 7f a1 c2 bf 3d 7b f2 c8 5f c4 1f 11 11 d1 e6 cc 4f 4d 3e 37 b8 75 d7 65 a5 36 33 70 49 71 a8 52 08 0a aa 55 eb 1b fa bf 6a a3 63 7f f3 e8 c7 7e 7f da 76 3c 44 44 44 49 88 2d 59 05 80 99 0b e3 47 47 b6 df d2 50 4a 7d 6b 9c f7 c9 13 a5 14 94 52 30 26 d8 f0 6b 44 e4 77 26 4e 1e f9 f5 04 Data Ascii: BR]-hlm30 J(`f`d'DDkLxG\|m,0FD#o[9BSO53tq]UAA-`<U""*,]oKo{Ikq#"={_OM>7ue63pIqRUjc~v<DDDI-YGGPJ}kR0&kDw&N

Session ID	Source IP	Source Port	Destination IP	Destination Port
576	192.168.2.4	50393	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	622	OUT	GET /store/about/cta_hero_hardware_pt1.png?v=2 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 66811 Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-104fb" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	16154	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ab 00 00 03 1a 08 06 00 00 00 60 74 d0 55 00 00 0f 41 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ed 99 59 72 e4 b8 11 86 df 71 0a 1f 01 fb 72 1c 24 32 11 e1 1b f8 f8 fe 92 55 d2 a8 d5 d3 9e 68 cf 93 23 ac 0a 15 4b 2c 12 4b 2e ff 42 05 fb d7 3f 6f f8 07 3f 35 c5 18 6a 1b b3 af de 23 3f 75 d5 95 37 1f 66 7c fd ec e7 3d c5 fa bc bf 4e 49 2c ef b3 3f 9c 0f 69 bf bf c8 9c f2 4f af bf e2 ec af 63 fa 38 ff be e1 e3 c8 7d 29 b6 2f 03 cd f3 fe 42 7e fc 62 d5 d7 31 cf 6f 03 e5 d7 a1 f8 8a fc b3 be 07 5a ef 81 4a 7e 7d 91 de 03 ec d7 b6 62 5f 73 7c dd 82 d8 eb f8 be ff 15 06 7e 83 bf d5 f9 e3 b2 7f fa 7b 10 3d 6d cc 53 72 b6 92 4a e4 bd 94 fc 5a 40 f1 df 12 ca 7e 3e Data Ascii: PNGIHDR`tUAzTXtRaw profile type exifxYrqr$2Uh#K,K.B?o?5j#?u7f\|=NI,?iOc8})/B~b1oZJ~}b_s\|~{=mSrJZ@~>
2024-05-15 22:37:42 UTC	16384	IN	Data Raw: 51 36 67 27 b0 a7 c5 77 35 09 9c cc dd 87 cf 7c 7a e4 81 e6 1a bd fd 03 86 fb 7a e0 bb 18 9b 1f 1f 52 9d 2c 4b 49 eb b5 78 cb d2 99 aa e9 3c 4e e2 1e f5 bb e2 f7 f2 c6 74 93 99 f9 66 11 62 43 20 34 ff 39 49 48 92 12 49 48 a6 97 18 c7 fa ad 42 ac 88 3c 2a c0 1a 96 4c bf e1 4c 6f 5d 98 be cd ba 18 b7 d8 82 6b 08 61 6d a9 5c 7e d7 12 1b ee dd 57 b9 3c 74 a6 a4 ea 5a 00 00 20 00 49 44 41 54 f4 88 3a 02 8b 88 c2 aa 88 3c 5e df be 8a 01 2b dc bc 07 b7 2d 2d be bb eb 0e 47 cf 7c 7a e4 a1 2e c0 6e 9e 18 b6 9b b8 5f b5 f3 51 41 31 cf 33 6a d5 2a f5 7a 8d 2c ad 4f 4f da 9e 8f c6 3e b3 a6 10 9b 3d 38 e9 6c ec 8b 35 33 92 a4 14 c3 6b a9 34 53 8d 9d fe 77 5a 4a 2c 22 0f a5 57 8c 07 57 79 4c 07 d4 6f e8 3c dc b6 61 35 49 7a 82 85 3f c7 f9 d0 e1 9f f7 f4 57 fe 3f 08 63 Data Ascii: Q6g'w5\|zzR,KIx<NtfbC 49IHIHB<LLo]kam\~W<tZ IDAT:<^+--G\|z.n_QA13jz,OO>=8l53k4SwZJ,"WWyLo<a5Iz?W?c
2024-05-15 22:37:42 UTC	1697	IN	Data Raw: 4d 95 03 8b 88 88 88 8c 6c 66 ed ad e3 e6 0c f7 47 9f 9a bc 21 c3 45 a3 09 dc 5f e3 23 c8 81 8b 85 73 5d 61 55 46 35 b0 ed 02 8e 00 77 6f cb 9f 7e bd 61 35 46 f0 08 d4 13 58 83 05 9a 63 63 a4 69 a6 97 a8 88 88 88 c8 e8 6a 3b 38 86 87 b0 bc 70 9c 38 7a c2 70 f6 e0 dc 01 c4 9a be 77 0b 78 a7 70 5b 50 58 95 91 73 f0 8b 4f 07 f0 db 30 1e a2 de 2e 64 43 1b 54 d7 1b 56 23 50 ac 63 ec cd aa 99 91 a4 29 8d c6 98 ca 81 45 44 44 44 b0 18 85 94 00 00 20 00 49 44 41 54 46 cc 8a ea b8 1c c8 dd e9 ce 9c 9a ea ad 1c dd 48 dc 6c 9f 97 1f 57 57 29 dd 22 f0 41 c0 07 5e aa a7 b0 2a fd 48 6b 29 ee f7 e3 3c cc 36 ea 02 bc 32 ac 6e e0 93 89 31 d6 fa f8 cc 02 69 a3 41 d6 50 77 60 11 11 11 91 11 4b ab 4b 7f 95 1a 2c 98 d1 f9 c4 62 32 81 78 87 e1 cd ba c3 6a 9a 78 ae b0 2a 23 98 Data Ascii: MlfG!E_#s]aUF5wo~a5FXccij;8p8zpwxp[PXsO0.dCTV#Pc)EDDD IDATFHlWW)"A^Hk)<62n1iAPw`KK,b2xjx#
2024-05-15 22:37:42 UTC	16384	IN	Data Raw: 34 9a 63 65 77 60 1d 5f 15 11 11 11 19 64 52 25 84 5e 54 9b 03 da 21 59 b1 f6 36 32 ca 19 ab f5 94 c1 19 6d e0 b5 da 16 bc 0a ab 52 53 5a 0d 38 4f 02 07 d8 c6 11 c6 63 ac 75 e7 b3 c8 0b 62 11 37 fd e7 4c 92 94 46 b3 49 08 ea 0e 2c 22 22 22 32 b0 90 66 c6 8a 5e 97 8b e0 b3 01 f2 15 6b f2 08 dc 5b e3 7a 7c 1e e3 7d df e4 d5 be c2 aa ac d5 0e e0 30 db 79 64 4d d5 58 a9 ce 2a dd b2 2b f0 e6 96 02 43 59 0e 9c a6 0d 75 07 16 11 11 11 19 dc 0a ac ec 04 5c 2d 0b cb d5 27 5d a7 1c 5d f3 e5 a7 26 2d 60 0d ca c9 1c 75 e4 39 07 de 2c 9c c5 99 53 cf 6b 67 55 46 ca 3d d5 85 91 6d db ac 8a d7 1e 22 dd 23 45 91 b7 3c c6 2e 9b 5c 7e 91 24 29 8d 46 93 24 c9 50 3d b0 88 88 88 48 cd 51 d5 6e 38 af 6a 80 9b 5b 6b e6 f4 94 03 74 82 51 18 b7 01 7b 6b 5a 9c 45 87 e9 1b e6 ba 2a Data Ascii: 4cew`_dR%^T!Y62mRSZ8Ocub7LFI,"""2f^k[z\|}0ydMX+CYu\-']]&-`u9,SkgUF=m"#E<.\~$)F$P=HQn8j[ktQ{kZE
2024-05-15 22:37:42 UTC	16192	IN	Data Raw: 88 d5 c7 82 16 6c b2 72 c3 c4 aa 61 18 7b ca d5 77 2f 79 60 1e b8 01 dc 38 f7 da 85 37 14 0e a1 9c 01 be 20 70 0e 38 8b 70 06 38 02 0c 12 6a 5d bb 50 b4 0a 5a a6 07 6b b9 40 2e 47 88 56 9b ca 98 9b b0 61 ac 3b a8 90 15 ad 70 9a d1 57 55 85 15 11 57 ef 0b bc fa 20 6e 6d 5c 19 c6 f6 86 9d 8b 48 92 84 34 ab 74 4d 2d 66 9e 37 4a a1 da d8 d1 9f 1b da f4 f4 54 73 84 c7 8a 44 9b ed 07 61 62 d5 30 8c ce 12 af 6f 5d cc 81 fb 63 5f fc b9 e9 38 96 1f 3b 61 50 e0 14 c8 59 84 33 aa 7a 1a e1 45 41 8e 97 c2 75 80 60 d2 d4 15 33 be 3c 61 18 a3 aa 10 45 ab 5d 50 cb 94 c6 f0 77 00 b5 d4 61 c3 d8 e0 f8 0a 51 0c 87 6b a6 0e b7 22 b0 7e 55 3a 7e 88 bc da 98 32 8c 8d 8e ad 28 4e 48 d3 0a 49 9a 76 4d c4 30 cf 1b d4 97 16 68 34 ea 3b 7a 98 b5 b2 0c a8 87 68 00 b5 cd d6 64 98 58 Data Ascii: lra{w/y`87 p8p8j]PZk@.GVa;pWUW nm\H4tM-f7JTsDab0o]c_8;aPY3zEAu`3<aE]PwaQk"~U:~2(NHIvM0h4;zhdX

Session ID	Source IP	Source Port	Destination IP	Destination Port
577	192.168.2.4	50394	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	622	OUT	GET /store/about/cta_hero_hardware_pt2.png?v=2 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	229	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 18662 Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-48e6" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	16155	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ab 00 00 03 1a 08 06 00 00 00 60 74 d0 55 00 00 08 7e 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ed 98 59 72 23 3b 0e 45 ff b9 8a 5e 02 49 70 c2 72 38 46 f4 0e 7a f9 7d 90 1a 6c d9 aa 17 e5 7a bf 25 85 94 29 92 09 82 b8 18 2e e4 f6 ff fe 7b dc 7f 78 89 2f c5 a5 5c 5b d1 52 3c af a4 49 63 e7 a6 f9 db ab 5f df c1 a7 eb fb 36 34 bc dc 47 5f c6 5d e8 f7 89 c8 90 dd dd 7e f9 56 6e d7 f0 18 bf 3f f0 b8 f2 5c f0 f9 93 a0 36 ef 13 e3 75 42 d3 ed 1a db 17 41 f1 76 11 d3 c8 ee d7 5d 90 de 05 49 bc 4d 84 bb 80 7e 3b 96 2f da ea e7 23 8c 7d bb de 9f bf 99 81 8f b3 af d4 5e d5 fe f6 bb 62 bd 95 d9 47 62 dc 12 c4 f3 2d 12 6f 0a 88 7d c4 49 bf 6e 3a d3 85 85 e1 7e 7f fb Data Ascii: PNGIHDR`tU~zTXtRaw profile type exifxYr#;E^Ipr8Fz}lz%).{x/\[R<Ic_64G_]~Vn?\6uBAv]IM~;/#}^bGb-o}In:~
2024-05-15 22:37:42 UTC	2507	IN	Data Raw: a5 a7 00 00 60 4d 34 75 1d 4d d3 68 08 ae 76 58 8d 78 52 0e dc ea 2d 00 00 b8 64 8f 5e 53 63 31 09 61 f5 29 c7 61 03 00 c0 e5 ab 2b e7 ca 20 ac 7e 41 4a 29 6a 1b b8 01 00 e0 d2 28 ff 45 58 7d 8e ba ae a3 6d fd 71 00 00 c0 45 db a8 f2 df 3c d7 61 9d 0a ab 59 ba bf 09 17 5c cd 9c 3a 06 00 00 17 6d 93 ca 7f b3 68 ef eb b1 2e 85 d5 94 6d 44 87 a6 94 a2 b1 a1 1b 00 00 2e cc a6 95 ff b6 91 84 d5 4e 85 d5 0d a2 1c 18 00 00 2e c6 26 9e fe db eb 95 c2 6a 97 c2 6a 96 c5 d1 26 5d b8 72 60 00 00 58 bd 4d 3b fd 37 cb b2 68 9a 4c 58 ed 52 58 8d 94 36 2a ac 2a 07 06 00 80 d5 6a ea 6a e3 4e ff cd b2 2c 9a c8 8e f4 5e 97 c2 6a b6 79 4f 1f 94 03 03 00 c0 6a 3c 2a ff ad 37 f0 ca b3 f8 e8 ef ff d3 3f e9 c1 2e 85 d5 d4 fe c3 26 7e 01 e5 c0 00 00 60 9e fd 34 aa 66 a1 04 b8 73 Data Ascii: `M4uMhvXxR-d^Sc1a)a+ ~AJ)j(EX}mqE<aY\:mh.mD.N.&jj&]r`XM;7hLXRX6*jjN,^jyOj<7?.&~`4fs

Session ID	Source IP	Source Port	Destination IP	Destination Port
578	192.168.2.4	50395	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	616	OUT	GET /store/about/cta_hero_steamworks.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	229	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 43398 Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-a986" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	16155	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 88 00 00 02 dc 08 06 00 00 00 8c e3 8b 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 a9 28 49 44 41 54 78 da ec dd 6f 6c 1c f9 99 27 f6 22 d9 64 8b a4 c8 91 34 9a 91 3d f2 0d e5 f3 dc ed 40 f6 e1 c6 40 76 05 2c 02 ac 1c 60 1d ec 2b 4f 12 04 01 92 c0 3b 41 f2 e2 92 7b b1 be 03 72 6f ed 7d 77 b8 37 de 7b 11 04 01 12 78 6d dc 9b 24 2f d6 17 e0 5e ec 1a 88 67 0f 8b c1 d9 3e c4 f6 9e c7 90 73 e3 8c a4 1d 8d 47 33 12 a5 21 29 52 cd bf e9 a7 d8 45 15 5b cd ee ea 66 93 ac ee fa 7c 80 36 67 46 d5 dd 55 bf ae 6a b9 be 7c 7e cf 2f 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2a 9a 30 04 c0 b8 5b ba 7e e3 42 f3 c7 1b ad c7 05 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<(IDATxol'"d4=@@v,`+O;A{ro}w7{xm$/^g>sG3!)RE[f\|6gFUj\|~/I*0[~B
2024-05-15 22:37:42 UTC	16384	IN	Data Raw: b7 1b 00 00 d0 97 91 09 88 72 7d 87 7a 4a 1b bb 4e 75 6e 32 1a 37 61 f1 1b fd 4c 54 19 b5 07 49 65 0f 8a aa 1a 0e 05 fd 87 da 43 83 b9 67 c1 40 a3 51 ca 4a 9a 93 39 ee c3 21 51 fb 35 71 26 e7 e6 d6 66 73 1f 1e 3e f7 dd 10 e7 68 f4 42 9b 6b ab 18 4a cf e1 e6 f7 54 ac 70 96 89 3e 45 dd 8e 21 6d 72 5d e0 3a 7f d2 dc 87 e8 49 04 00 00 50 d4 28 dd 5d 17 6b 4a 7d 7e b1 eb b4 a3 cd f5 d5 43 37 67 dd 7e 23 5f c6 a0 a8 d3 8d 70 d1 95 8e c6 81 fe 43 cf 9f a3 59 18 ba 3f cd ac 51 99 63 2f 4b 48 b4 ff be 0f d3 47 fb 92 f4 11 0c cd bf f8 52 da 0b ed a8 30 73 66 fe fc a1 a9 82 51 e1 d8 4d 84 c1 45 82 d1 58 d5 4c 3f 22 00 00 a0 a8 91 08 88 5a 7d 87 6e 16 b9 61 cc ff 36 be d3 8d 5c 7e 0a 47 7e 7a 47 af 9b f0 32 04 45 9d 6e 80 e3 06 b9 4a 7d 78 f4 1f 7a de a1 66 d5 15 99 Data Ascii: r}zJNun27aLTIeCg@QJ9!Q5q&fs>hBkJTp>E!mr]:IP(]kJ}~C7g~#_pCY?Qc/KHGR0sfQMEXL?"Z}na6\~G~zG2EnJ}xzf
2024-05-15 22:37:42 UTC	2715	IN	Data Raw: fd d6 1d 93 2f 96 38 ca 00 30 42 ad 63 9a 55 a4 9b 7c e9 d9 df 9b 5f ce b5 9c 5b db 6c 4d 08 8b d4 a2 e6 b6 a9 5d 3d 35 1f 97 d6 fb bb a1 a9 a5 6d 1e 9a b5 5a d0 5d 68 2f 03 00 00 00 32 6a aa d2 8e 5e 9b d9 db ce bb 3f 35 e9 3e 9d 4e c7 6d 35 ca e5 f3 a9 a9 40 a0 82 68 3e b2 b2 1b 13 c6 a3 82 68 31 fe fa ea ca fc 71 a7 60 fe 4d a7 68 fe fe d6 ab a6 91 cb 9b d7 db cd 89 95 45 fa d8 2f 36 ae dd 01 d7 0a 8d 74 bf 17 f9 a2 3b 2c 3b a9 e7 b5 76 b8 0b f0 be f3 ef c3 31 8f 26 00 00 00 90 3d 53 af dc 77 ee de d3 90 a1 7f 12 b8 d8 ac d7 dc c5 a6 66 d1 2c ba e5 8c 80 68 3e 08 88 b2 8d 80 68 31 ea d5 cb fe fb 9f dc 7a c5 ad 0c fa 83 f5 1d f3 c3 42 d9 0d 8b 34 c8 5a b7 71 5e e9 b4 12 0f 8b 6a 97 e7 fd e7 f5 04 c7 27 47 87 ef f3 48 02 00 00 00 d9 34 4b 5f 82 5a 09 be Data Ascii: /80BcU\|_[lM]=5mZ]h/2j^?5>Nm5@h>h1q`MhE/6t;,;v1&=Swf,h>h1zB4Zq^j'GH4K_Z
2024-05-15 22:37:42 UTC	8144	IN	Data Raw: cb d9 d7 38 4b 01 00 00 b0 2a 8a f3 fa 46 ce 42 e3 d1 ee de fe 81 df ff fc 6b c1 a2 85 8b 5a c4 e2 a4 05 56 a1 58 34 d7 17 67 43 bb 9a 79 f3 3d 44 15 47 c5 52 d9 6d d9 28 94 cb 63 03 25 00 98 85 ae 71 dd 99 6b 35 d3 6a 36 7d 77 59 d4 75 ab bc b1 1d 5b 28 64 ff 0c f5 6a a8 c1 fd ef 2f e8 30 fd 7a 8a 1e b2 6f 3c f9 e2 9b bf e2 bc 7d ef 8d ef 7f 7c ca 19 0c 00 00 80 65 56 9c f3 f7 53 bb c2 03 bf 3b 68 e1 52 ac ac c7 be 28 52 00 a4 b9 44 1a ca 3a ae 95 4d 0b b5 ba 16 6b bd 1d cf bc c0 48 6f 15 1a c5 fd f3 00 58 7e ba ae 34 1b 75 f7 ad 82 a1 30 6d ad 49 05 43 9e da d5 79 98 4a cd 87 27 47 87 8f 17 74 d8 92 d8 de 5e e1 4e 98 df 47 f7 39 9b f0 33 3d e4 8c 06 00 00 c0 32 9b 6b 40 a4 76 85 dd bd 7d fd 4f f6 bb 93 ee a3 85 8b 16 30 6a 0d 4b 82 da 34 bc 57 f1 83 16 Data Ascii: 8K*FBkZVX4gCy=DGRm(c%qk5j6}wYu[(dj/0zo<}\|eVS;hR(RD:MkHoX~4u0mICyJ'Gt^NG93=2k@v}O0jK4W

Session ID	Source IP	Source Port	Destination IP	Destination Port
579	192.168.2.4	50396	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	400	OUT	GET /steam/apps/1604030/capsule_231x87.jpg?t=1715590903 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 6173 Last-Modified: Thu, 09 May 2024 09:49:12 GMT ETag: "663c9c18-181d" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=382974 Expires: Mon, 20 May 2024 09:00:36 GMT Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	6173	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 76 00 76 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 01 00 09 ff c4 00 40 10 00 01 03 03 03 02 05 01 05 06 03 06 07 00 00 00 01 02 03 04 00 05 11 06 12 21 07 31 08 13 41 51 61 22 14 32 71 81 91 09 15 23 Data Ascii: JFIFvvCCW@!1AQa"2q#

Session ID	Source IP	Source Port	Destination IP	Destination Port
580	192.168.2.4	50397	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	400	OUT	GET /steam/apps/2808930/capsule_231x87.jpg?t=1709221515 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	341	IN	HTTP/1.1 200 OK Last-Modified: Wed, 31 Jan 2024 11:16:42 GMT ETag: "65ba2c1a-2c5a" Server: nginx Content-Type: image/jpeg Content-Length: 11354 Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=155024 Expires: Fri, 17 May 2024 17:41:26 GMT Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	11354	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 03 00 03 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 02 03 09 00 0a 01 ff c4 00 47 10 00 01 03 03 03 02 04 03 04 05 07 0b 05 01 00 00 01 02 03 04 05 06 11 00 07 12 21 31 08 13 41 51 22 61 81 14 23 32 71 15 42 Data Ascii: JFIFCCWG!1AQ"a#2qB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50398	23.222.77.58	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	400	OUT	GET /steam/apps/2195250/capsule_231x87.jpg?t=1713799333 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 12635 Last-Modified: Tue, 12 Sep 2023 13:36:59 GMT ETag: "6500697b-315b" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=224430 Expires: Sat, 18 May 2024 12:58:12 GMT Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	12635	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 07 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 09 02 00 01 0a ff c4 00 45 10 00 01 03 02 05 02 05 02 03 04 06 08 06 03 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 09 13 22 41 51 14 61 15 32 71 23 42 Data Ascii: JFIFCCWE!1"AQa2q#B

Session ID	Source IP	Source Port	Destination IP	Destination Port
582	192.168.2.4	50399	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	400	OUT	GET /steam/apps/1449850/capsule_231x87.jpg?t=1715145592 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 9407 Last-Modified: Tue, 07 May 2024 06:37:40 GMT ETag: "6639cc34-24bf" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=482063 Expires: Tue, 21 May 2024 12:32:05 GMT Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	9407	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 ff c4 00 3d 10 00 01 03 03 03 03 02 04 04 05 02 03 09 00 00 00 01 02 03 04 05 06 11 00 12 21 07 13 31 08 41 14 22 51 61 15 23 32 71 09 42 81 Data Ascii: JFIFCCW=!1A"Qa#2qB

Session ID	Source IP	Source Port	Destination IP	Destination Port
583	192.168.2.4	50400	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	388	OUT	GET /store/about/cta_hero_community_pt1.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	244	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 9460 Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-24f4" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	9460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 24 96 49 44 41 54 78 da ec dd 4f 8b 1b 57 9b 28 f0 72 62 06 2f bc e8 17 cc e0 45 20 32 78 61 48 60 3a 10 42 16 17 22 6b 37 ab b4 17 82 7b 57 6e ef 2e 68 91 f8 13 38 fe 04 6d 2f 1a ee ce 9d e5 d0 0b 77 be 40 5b 81 bb 78 21 81 b7 03 21 84 4b c0 1a f0 c2 0b c3 db 17 cc 8b 19 cc cc 9c 63 1d c5 65 b9 4a ff ba a4 56 95 7e 3f 38 48 5d 52 95 aa 8e 84 54 f5 f4 79 9e 93 65 00 00 00 00 00 00 00 00 4d 77 41 17 00 00 10 75 ba bd ad 70 f3 51 68 57 72 8b 5f 87 f6 22 b4 c1 f1 e1 fe 2b bd 04 40 55 04 24 00 00 88 c1 88 56 b8 69 4d 78 4a 0c 4c fc 71 7c b8 ff 5c Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<$IDATxOW(rb/E 2xaH`:B"k7{Wn.h8m/w@[x!!KceJV~?8H]RTyeMwAupQhWr_"+@U$ViMxJLq\|\

Session ID	Source IP	Source Port	Destination IP	Destination Port
584	192.168.2.4	50401	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	384	OUT	GET /store/about/cta_hero_community.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 31506 Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-7b12" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	16139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 7a b4 49 44 41 54 78 da ec dd 7b 90 5c f7 95 d8 f7 73 1f fd 98 9e 37 30 78 10 24 88 01 49 81 14 49 89 a0 44 93 e2 3e 24 10 f2 be 5c 54 89 54 16 72 2a 71 15 c1 94 cb f1 16 fe 90 b8 f9 2b ce 56 51 aa 4a e2 4a b9 b2 a4 52 85 6c ca d9 14 21 27 4e d9 cb b2 49 ad 64 a7 1c 8b 20 a4 dd 98 84 44 49 43 91 82 48 4a 14 06 04 88 e7 0c e6 3d fd be 37 bf 73 ef ed 41 a3 d1 3d cf 7e f7 f7 23 5d de 9e 9e ee fb f8 75 4f f7 fd 1d 9c df f9 89 00 00 00 00 00 00 00 00 00 00 00 00 74 3b 8b 26 00 00 00 80 3a 7c e4 d8 88 59 dd 61 96 b1 b2 bb 0b 66 99 32 cb e4 c9 97 8f Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<zIDATx{\s70x$IID>$\TTr*q+VQJJRl!'NId DICHJ=7sA=~#]uOt;&:\|Yaf2
2024-05-15 22:37:42 UTC	15367	IN	Data Raw: 64 78 a0 10 9c b3 e3 46 27 03 80 80 04 00 94 cc 4e 5d 96 be 81 21 73 b1 c5 bf 58 a0 37 cd 4d 5f 21 43 02 68 72 50 a2 d8 61 43 06 35 20 11 33 57 e2 85 85 d9 60 c8 46 50 80 72 85 1f 15 8b 8c 05 d3 71 96 32 17 b2 3a 3d a7 06 24 4e 2f c9 bb bf 5a 90 77 cc 92 2d 84 53 78 be f7 9b 8c ec dc ee ca ce 6d ae dc b5 77 48 62 31 5b 46 74 ba d0 61 b3 9f 98 25 63 41 90 c2 74 e2 35 10 e1 68 f9 06 d3 b9 4f d8 2b fb 2b 85 4b 34 8b c2 d5 61 18 e6 be f9 79 db ec 53 64 6a 46 e4 ca f5 82 64 cc fe af 5c f3 24 93 2d 06 53 7b ce 2f 17 24 6d ee d3 a9 4a 75 86 8d 5c de 97 c5 8c 17 04 4d 0a b9 bc 39 36 4b 74 84 4a 10 04 89 f6 b4 b8 ac 45 34 f3 72 ed 51 57 2c bf 28 a9 3e 47 9c 20 20 61 dd 08 2e f8 fe 4d 01 9a b0 ee 45 38 2c 23 19 f7 c3 80 44 10 68 11 f1 2c 21 28 01 10 90 00 80 9b 5d Data Ascii: dxF'N]!sX7M_!ChrPaC5 3W`FPrq2:=$N/Zw-SxmwHb1[Fta%cAt5hO++K4aySdjFd\$-S{/$mJu\M96KtJE4rQW,(>G a.ME8,#Dh,!(]

Session ID	Source IP	Source Port	Destination IP	Destination Port
585	192.168.2.4	50402	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	620	OUT	GET /store/about/cta_hero_steamworks_pt1.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 12815 Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-320f" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	12815	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 88 00 00 02 dc 08 06 00 00 00 8c e3 8b 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22

Session ID	Source IP	Source Port	Destination IP	Destination Port
586	192.168.2.4	50403	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	620	OUT	GET /store/about/cta_hero_steamworks_pt2.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	245	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 36605 Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-8efd" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	16139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 88 00 00 02 dc 08 06 00 00 00 8c e3 8b 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-05-15 22:37:42 UTC	16384	IN	Data Raw: 06 00 00 f5 5d f3 4c f9 75 13 17 01 93 e6 ef c4 a2 24 9d 7f b1 7b f4 a0 b6 d5 43 21 5d 60 ed a8 1e 2a a5 7f 40 f5 66 ad cf 83 aa eb df c9 4c 40 54 56 7a 5f bb 3a 3f ad ef 8d 7f 6b ab af ca 31 e6 c0 4d 9a 4b 15 5f 53 60 77 49 6d 66 00 00 50 d7 75 c2 94 5f 37 be bd 6c e0 9d f6 61 d2 c1 d4 83 8b 95 ba 89 ea 97 b4 02 c6 ee 65 e5 a4 41 85 ea a1 25 9e b7 37 76 32 2b 2b 0d 88 22 d8 2c b2 0b 58 55 a5 a1 7c 56 45 74 7e 56 e0 f9 4f ac f2 7c fe e4 d9 8b e7 ce 14 00 00 a8 9f d2 01 51 77 c6 c4 71 d1 45 d4 d0 85 e9 f5 55 5f c5 4d da ee 50 47 97 49 25 41 d1 9d db b8 97 2e b2 1d bb c5 4a 2b 40 b4 98 95 37 b8 3b e1 d5 bb b3 5a 3f 97 98 fb d6 bb 8f 9d 9d 4e ac 22 2a 38 7c 5f 15 11 00 00 d4 d0 34 15 44 13 db cb 26 55 d0 bc 3b 79 d3 b7 60 ad fb 76 f0 d7 17 f7 3b 70 ed ec d9 Data Ascii: ]Lu${C!]`@fL@TVz_:?k1MK_S`wImfPu_7laeA%7v2++",XU\|VEt~VO\|QwqEU_MPGI%A.J+@7;Z?N"8\|_4D&U;y`v;p
2024-05-15 22:37:42 UTC	2058	IN	Data Raw: 6a cf 60 6a bb 85 34 aa 88 e1 90 2a 1f 6f f3 08 00 00 00 00 98 da 9a 7d 9e ee ec 34 43 22 7b 88 ad bf 3d 76 e5 c5 dc 9f 6c ec 64 96 1e cd fa e5 f1 d7 fc a1 38 b6 6b cf dd 31 6a 34 7a 66 0f 2d ae ae 8d 3d a7 69 8c 70 e8 9d ce a0 7d 00 00 00 00 98 8a b9 9b 4a 3b ad 90 48 0b 49 ed 6a 16 a8 9d 56 e6 be ad 8a 9d cc d2 83 f9 43 e1 14 ea 74 5f 28 bd 73 77 71 75 3d f2 6d b4 5f 43 9e 10 0e 01 00 00 00 48 bd b9 dc b6 68 9c 90 68 9c 39 42 8b 2b 6b a6 68 55 cd cc fb c0 ea 9e 0a 22 02 a2 99 aa d7 ce 2f 1f 17 e6 0f bd 44 01 9a 1d a2 2d 6f 6c 46 be 8d e0 b5 23 c2 4e 86 84 43 00 00 00 00 66 66 6e f7 b5 8e 1a 12 45 6c 11 b9 5c 58 5a 33 4b b4 50 9c e7 81 d5 76 a5 0a 33 88 66 8b 0a a2 d1 ec ea 21 1d 9f a8 c7 68 8c ea 43 c2 21 00 00 00 00 33 55 9c e7 3b 1f 25 24 0a 16 8d 6a Data Ascii: j`j4*o}4C"{=vld8k1j4zf-=ip}J;HIjVCt_(swqu=m_CHhh9B+khU"/D-olF#NCffnEl\XZ3KPv3f!hC!3U;%$j
2024-05-15 22:37:42 UTC	2024	IN	Data Raw: ed 3c 89 ea a0 61 ee 7a 97 7b 54 0d c1 ed 3c 25 20 02 00 00 40 be 11 10 a5 cc d6 f6 ce 87 de 87 1f 4f 72 1b 0a 7d 5c 2b 2e 82 b6 b4 20 38 9a 75 5b 9a dd 16 a5 0a a8 f5 1b af 71 52 8c a1 7f a6 53 9a e6 0f e9 77 6b cf 0f 8a 36 4c 3a 38 47 83 ca a2 09 ec 79 97 0f 8e 0e f6 1f 72 a6 c0 15 01 11 00 00 00 f2 8e 80 28 85 b6 b6 77 6e 9a 76 35 d1 ee b8 b7 a1 19 3e e5 c5 65 d3 6c 36 22 b7 e9 f8 bb a5 2d 2e 75 82 a3 f2 54 87 5f ab 9a a4 f2 e4 71 77 e0 b0 e6 10 e9 be 20 9a 34 cd 1f b2 e7 06 b9 0e 93 1e d4 1e a9 fb 54 ab 9e 4c d2 6e a6 03 a2 60 e8 3e 67 08 a2 bf 36 11 10 01 00 00 20 df 08 88 52 ac 33 c4 5a f3 89 6e 8e 7b 1b 0a 57 16 57 37 ba 55 45 41 58 14 a5 0a c3 ae 2e f2 43 a3 84 db d2 d8 f2 7e 72 b3 9a 3f a4 f0 47 21 50 d4 61 d2 a3 06 ac c7 10 0c 09 43 a8 31 e1 b9 Data Ascii: <az{T<% @Or}\+. 8u[qRSwk6L:8Gyr(wnv5>el6"-.uT_qw 4TLn`>g6 R3Zn{WW7UEAX.C~r?G!PaC1

Session ID	Source IP	Source Port	Destination IP	Destination Port
587	192.168.2.4	50404	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	612	OUT	GET /store/about/logo-steamworks.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	226	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/svg+xml Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-10ca" Date: Wed, 15 May 2024 22:37:42 GMT Content-Length: 4298 Connection: close
2024-05-15 22:37:42 UTC	4298	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port
588	192.168.2.4	50405	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	611	OUT	GET /store/about/icon-steamchat.svg HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	224	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/svg+xml Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-307" Date: Wed, 15 May 2024 22:37:42 GMT Content-Length: 775 Connection: close
2024-05-15 22:37:42 UTC	775	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port
589	192.168.2.4	50406	23.222.77.58	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	388	OUT	GET /store/about/cta_hero_community_pt2.png HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	244	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 6427 Last-Modified: Mon, 18 Feb 2019 19:03:40 GMT ETag: "5c6b018c-191b" Accept-Ranges: bytes Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	6427	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 18 bd 49 44 41 54 78 da ec dd 4f 8c 55 d7 79 00 f0 7b df 7b 03 66 f8 6b 8f 8d 1d 30 66 9c 36 43 8a 13 81 ba 08 a2 9b 5a 66 d3 05 56 52 a9 f5 ae 32 6d ba b1 ba a9 dd 5d 1b a9 cd a2 cb 7a 87 a2 56 5d 38 bb ca 2c 1a 15 da ba 0b 48 ba 29 b2 ac b6 58 6a 90 8c 22 61 4c ec 10 db d8 fc 1d 18 60 e6 f6 9c 99 4b 32 e0 61 3c c0 fd 7f 7f 3f e9 ea be 81 99 f7 de 7c f3 de 99 73 be f9 ce 77 93 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<IDATxOUy{{fk0f6CZfVR2m]zV]8,H)Xj"aL`K2a<?\|sw

Session ID	Source IP	Source Port	Destination IP	Destination Port
590	192.168.2.4	50407	23.222.77.65	443

Timestamp	Bytes transferred	Direction	Data
2024-05-15 22:37:42 UTC	632	OUT	GET /steam/apps/1203220/capsule_616x353.jpg?t=1715253758 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtm.you1.cn/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-15 22:37:42 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/jpeg Content-Length: 86896 Last-Modified: Tue, 23 Apr 2024 11:04:58 GMT ETag: "662795da-15370" Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=590115 Expires: Wed, 22 May 2024 18:32:57 GMT Date: Wed, 15 May 2024 22:37:42 GMT Connection: close
2024-05-15 22:37:42 UTC	16042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 61 02 68 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 00 01 08 09 ff c4 00 4f 10 00 02 01 03 03 02 04 03 05 05 04 06 07 06 06 03 01 02 03 04 05 11 00 06 21 12 31 07 13 41 51 08 22 61 14 32 71 81 91 15 23 42 Data Ascii: JFIFCCahO!1AQ"a2q#B
2024-05-15 22:37:42 UTC	16384	IN	Data Raw: 8b c3 fa 40 b2 8e a3 0a b0 1e a5 bf 8b f4 39 d6 cc 4d 79 66 2c cb fb 83 86 64 79 9f a5 83 47 9c 07 53 90 75 10 0f 4a 33 31 19 1f 36 7b ea c8 ab 2b 94 a8 e3 7f 8f fd db 40 94 12 6c c8 c3 1a f4 a5 8e eb 21 53 f2 a8 67 30 a2 1f 73 d1 e6 39 07 8c 32 7b 9d 6e c4 92 47 33 2c 9b 67 1f d5 24 34 9b 7e a0 2d 39 7a 99 a9 d7 33 16 c0 8d 15 d4 30 23 b9 27 ad 48 d1 37 b5 14 24 44 6a a1 05 e4 63 ea d9 ff 00 1d 60 bd cb 52 11 3c 00 9f 4c fd 35 12 49 0e 56 8a 56 aa a8 8a 3e e3 a8 60 6b 3e 4f 65 3a 2c 86 ec 96 d7 6c fb 95 2f d9 a4 a8 a3 92 9e 19 47 99 13 48 85 7a d7 91 d4 32 39 1c 1e 47 b6 b1 2c 91 a7 be e6 9e 96 38 58 ed 26 0b 84 13 7d 9a 1a b1 1b 86 30 54 27 54 6f 83 f7 58 7a 83 ea 35 9e 52 b4 cb e3 12 cb db 5e 04 6e 0b e5 3b d6 d3 59 e7 7a 7e 9f 37 f7 69 9f 93 be 40 ee Data Ascii: @9Myf,dyGSuJ316{+@l!Sg0s92{nG3,g$4~-9z30#'H7$Djc`R<L5IVV>`k>Oe:,l/GHz29G,8X&}0T'ToXz5R^n;Yz~7i@
2024-05-15 22:37:42 UTC	1534	IN	Data Raw: 80 7e 87 4e 18 68 52 c9 63 85 8e eb 55 5f 2c 14 d1 ba 89 e6 6e 9e a2 70 17 3f e4 3f cb 57 63 d3 a9 4e 8a e7 99 c6 36 1f 78 a7 5a da 37 86 49 61 af fd ab 56 c2 43 93 d0 23 8c 04 50 b8 e1 90 a9 84 e7 b7 52 b0 ee 0e bd 24 23 d2 a8 f3 f2 97 53 b3 a0 bc 20 f0 0b c4 7b 7f 87 c9 1e cd 7b 6e ea b1 33 19 0e dc bd 3b 53 b4 0c 41 63 f6 4a c1 9c 67 23 2a c3 19 23 1e a4 5a ad 10 2a af 11 fc 45 9b c3 ab d2 52 78 81 b5 f7 3e d7 ae 88 32 c5 4f 55 4e 93 46 d9 c8 cc 52 82 15 97 be 0e 4e 74 96 fb 0e ca 8a e5 e2 5d be ed 23 49 65 a3 af a8 69 9f ef 56 b2 c2 a7 3d 8e 14 92 7f 5f 5d 6a c7 a4 9e 42 0f 2a 8d 8c 33 6e ed c7 53 98 ff 00 68 c7 41 01 ca 95 a0 a6 40 ec 39 c0 2c c0 92 49 18 fc b3 ad 71 d0 c5 7d a6 57 e6 37 c0 4d 32 2d 4c 41 eb 1e a1 e6 7c b2 a9 72 ce dd 27 9c 81 c6 09 Data Ascii: ~NhRcU_,np??WcN6xZ7IaVC#PR$#S {{n3;SAcJg##ZERx>2OUNFRNt]#IeiV=_]jB*3nShA@9,Iq}W7M2-LA\|r'
2024-05-15 22:37:42 UTC	16384	IN	Data Raw: 86 6e b7 2b 7a 69 a4 ca 46 f7 b0 2e 36 29 31 5f 41 35 2f cc 53 f7 88 40 ea 07 91 f8 eb a1 1c d1 9f d9 66 77 06 b9 2c 4f 87 7f 02 e3 f1 8b 7b 25 85 eb 22 a1 5f 2c ca f2 49 dc c6 08 ea e8 f7 70 0e 40 3c 1c 73 ae 57 88 eb 5e 8f 17 98 95 9a f4 d8 56 69 74 b2 dd f1 5b e0 0e f1 b2 ad 4f 72 b6 5e 69 6e 74 11 43 24 92 99 63 68 dd 4a 86 6c 01 83 92 40 e0 67 39 07 e9 9e 6e 93 c6 96 77 d3 38 d3 34 e6 d1 38 2b 4c e4 2b d5 85 e9 2a 24 89 d0 a4 88 c5 59 48 ec 41 c1 1a f5 70 9d ab 47 26 51 a6 2f db 1b 79 eb 2a a1 86 28 9a 59 65 70 88 8a 32 59 89 c0 03 55 e4 c8 a2 9b 64 a1 1b 3d 20 f0 ef fd 1e db 46 83 62 d3 1d e1 59 24 fb 9e aa 30 f2 ac 32 62 2a 62 46 7c a0 07 de 23 b1 6f c7 1a f1 59 3c 66 72 cb fd b7 51 3b 10 d2 2e 9f 6d 6e 71 bf c4 7f 83 76 9f 0a f7 bd 46 df b7 5d 52 Data Ascii: n+ziF.6)1_A5/S@fw,O{%"_,Ip@<sW^Vit[Or^intC$chJl@g9nw848+L+$YHApG&Q/y(Yep2YUd= FbY$02b*bF\|#oY<frQ;.mnqvF]R
2024-05-15 22:37:42 UTC	16384	IN	Data Raw: ed c9 0c 71 55 ad 15 43 53 56 51 34 79 15 54 d3 b4 b0 cb 48 fd c6 26 49 3a ba 8f 0b f6 7c 90 7d 35 c6 71 8c 37 31 c9 37 22 de a0 f0 02 e5 b7 37 bd 7c 46 9a a6 e1 e1 85 e2 33 41 f6 f4 51 33 ad 04 dd 32 52 d4 04 39 38 80 98 25 2a c0 96 11 c9 11 24 72 79 d3 f1 5d 36 39 f9 53 92 52 f7 fe fc 13 58 24 e3 d4 b8 08 db 5e 0b d7 59 e1 dc 7b 57 73 ee 2b 4e df 88 d6 a9 6a 6a da e1 24 8b 5c 83 a2 39 93 bb ba 3c 6e 50 bb 72 e8 54 e4 f4 a9 19 35 be 26 f0 34 f1 e2 94 fe 0b 6a f8 dd 16 e0 c2 a6 dc 5c 92 f8 8a 3c bd a7 b4 6a 85 1c 57 47 b9 d6 43 27 4c f5 b2 41 d3 4e ac bd c0 8f 97 73 91 8c 12 39 07 46 9b 3e b3 53 17 3c 98 fa 53 e1 5d cb ef e1 7e 25 99 61 8b 1e d0 95 bf c3 f7 1a 3c 41 f1 b2 5b dc 33 d3 54 c5 1d 7f 50 e9 86 79 57 a4 46 a3 81 d3 18 3d 23 f1 e7 be af d3 f8 76 Data Ascii: qUCSVQ4yTH&I:\|}5q717"7\|F3AQ32R98%*$ry]69SRX$^Y{Ws+Njj$\9<nPrT5&4j\<jWGC'LANs9F>S<S]~%a<A[3TPyWF=#v
2024-05-15 22:37:43 UTC	7952	IN	Data Raw: 44 6c df 82 37 b6 bd 06 57 51 46 08 2b 95 15 46 d0 a7 92 5b db 48 b2 34 65 51 d9 9d 5b a7 8c 10 79 fa e7 1f 9e ad d1 41 4e 5b f6 2a d4 c9 c5 17 f5 da 94 db 6d 30 59 44 11 c7 57 05 15 3d 34 d4 ec a4 48 9e 71 79 65 56 f9 b0 59 25 59 a2 28 47 cb d7 d5 dd 54 eb bb 18 29 cd 2f 9f d7 e0 73 7a 9c 60 df cb eb f1 2b bd fd 23 4d b8 da 22 dd 7e 54 10 c4 9d 58 e1 42 02 07 1f 8f 3f 52 75 b7 2c 57 99 48 a3 07 d8 b1 aa 92 9d 8d 5a 2b 23 10 ad 8c 0d 6a c7 8d 39 20 94 ea 2c 74 b8 d0 1f b2 49 21 88 98 fe 50 58 f1 92 41 e4 7e 5a d7 97 17 b0 db 45 78 b2 6f 56 57 85 8d 2c ee 50 0c 8e 73 eb af 28 db 84 9d 1d 5e 51 63 d3 d5 25 d2 db 47 59 1c 8a 59 89 8c 84 cf 52 91 c6 0f d7 d7 f0 c7 d7 5e ca 12 8e 6c 30 cb 1f 81 c7 69 c2 6e 0c 2a a2 a6 a9 63 71 34 ac f1 f4 70 19 81 07 2a 48 c1 Data Ascii: Dl7WQF+F[H4eQ[yAN[m0YDW=4HqyeVY%Y(GT)/sz`+#M"~TXB?Ru,WHZ+#j9 ,tI!PXA~ZExoVW,Ps(^Qc%GYYR^l0incq4p*H
2024-05-15 22:37:43 UTC	12216	IN	Data Raw: 95 c8 cf 0c 07 63 ed a9 d1 51 09 33 67 b1 c8 3a 06 00 c8 74 80 c0 fa 00 12 3e 81 33 60 e4 e8 12 02 46 34 0d 00 6f 5d 03 02 1b 93 a0 43 8d 2d ca 08 6d 95 34 af 47 14 b2 ca ca cb 52 d9 eb 8f 19 c8 5e 71 83 91 9e 3d 07 d7 30 a7 77 64 93 d8 41 a6 23 6b eb a0 01 03 8d 00 6d 4e 74 00 2c e8 03 3a b4 00 7c 71 85 1d 4e 32 7d 06 80 0c eb 24 e4 9d 20 30 37 d3 45 00 20 dc 6a 24 8d 8d 01 c8 6c 4a 83 e6 93 24 7f 28 e0 b7 e7 e8 34 be 01 f1 07 24 cf 39 1d 58 55 1c 2a 28 c2 a8 fa 68 4a 87 66 93 40 83 17 e9 a6 00 87 6d 00 2f a4 b4 c9 2a ac 92 b2 d3 c4 7b 34 9d cf e0 35 54 a6 96 cb 76 49 44 55 59 5d 04 14 a2 8a 85 70 9f f5 b3 1f bd 29 ff 00 87 d3 51 8c 64 df 54 89 36 aa 90 dc a3 be ac 2b 0c 5c 0d 48 01 ab 74 9c 86 d3 18 38 a5 08 d9 c0 6f c7 4a 82 c5 22 a9 40 ec 41 fa e9 50 Data Ascii: cQ3g:t>3`F4o]C-m4GR^q=0wdA#kmNt,:\|qN2}$ 07E j$lJ$(4$9XU(hJf@m/{45TvIDUY]p)QdT6+\Ht8oJ"@AP

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2076, Parent PID: 3632

General

Target ID:	0
Start time:	00:35:59
Start date:	16/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5016, Parent PID: 2076

General

Target ID:	2
Start time:	00:36:02
Start date:	16/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2028,i,3547210394099925823,8850844179470166958,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6420, Parent PID: 3632

General

Target ID:	3
Start time:	00:36:04
Start date:	16/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://gtm.you1.cn/app/2143540"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://gtm.you1.cn/app/2143540

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Chrome Cache Entry: 325

Chrome Cache Entry: 326

Chrome Cache Entry: 327

Chrome Cache Entry: 328

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Chrome Cache Entry: 332

Chrome Cache Entry: 333

Chrome Cache Entry: 334

Chrome Cache Entry: 335

Chrome Cache Entry: 336

Chrome Cache Entry: 337

Chrome Cache Entry: 338

Chrome Cache Entry: 339

Chrome Cache Entry: 340

Chrome Cache Entry: 341

Chrome Cache Entry: 342

Chrome Cache Entry: 343

Chrome Cache Entry: 344

Chrome Cache Entry: 345

Chrome Cache Entry: 346

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Windows Analysis Report
https://gtm.you1.cn/app/2143540